HTTP/1.1 200 OK
Cache-Control: max-age=0, private, must-revalidate
Content-Length: 31387
Content-Security-Policy: default-src 'self'; font-src 'self' fonts.gstatic.com fonts.googleapis.com js.intercomcdn.com production-cdn.bonus.ly staging-cdn.bonus.ly *.bootstrapcdn.com; img-src *; object-src 'self' production-cdn.bonus.ly staging-cdn.bonus.ly; script-src 'self' 'unsafe-inline' api.usemessages.com connect.facebook.net graph.facebook.com googleads.g.doubleclick.net js.hs-analytics.net js.hs-scripts.com js.hsforms.net forms.hsforms.com js.hsleadflows.net js.leadin.com js.usemessages.com production-cdn.bonus.ly staging-cdn.bonus.ly unpkg.com *.addthis.com *.addthisedge.com *.adroll.com *.bnsly.co *.google.com *.googleadservices.com *.googleapis.com *.googletagmanager.com *.google-analytics.com *.gstatic.com *.hscta.net *.hubspot.com *.intercom.io *.intercomcdn.com *.linkedin.com *.newrelic.com *.nr-data.net *.perfectaudience.com *.stripe.com *.twimg.com *.twitter.com zapier.com *.natero.com sjs.bizographics.com static.ads-twitter.com pixel.cdnwidget.com reddit.com redditstatic.com quora.com hotjar.com; style-src 'self' 'unsafe-inline' *.googleapis.com *.bonus.ly; connect-src 'self' https://*.intercom.io wss://*.intercom.io api.hubspot.com app.getsentry.com forms.hubspot.com syndication.twitter.com uploads.intercomcdn.com uploads.intercomusercontent.com *.algolianet.com *.algolia.net *.natero.com www.google-analytics.com www.facebook.com; frame-src 'self' fast.wistia.net js.stripe.com share.intercom.io bonus.ly *.bonus.ly *.hubspot.com *.addthis.com *.doubleclick.net *.google.com *.twitter.com *.vimeo.com *.hsforms.com *.youtube.com; media-src js.intercomcdn.com
Content-Type: text/html; charset=utf-8
Etag: W/"357638e77d846a78a426c3a9901bf60b"
Referrer-Policy: strict-origin-when-cross-origin
Set-Cookie: _special_sauce_session=N01KdmNFZXpNTVhQMWF1TW55amNnV2F0a2tuKzQ1eFNSVjRwbXAvMGxGSUJxSFQ2L0p5NFh5SU4zdzR5MEF6cDBML092WkdOTEx4azhHbjIrR2czdVpkR2F2VUZaMkJNMytERG0xa1VqdXgwT3Y1VWI0QjBxME8xaHJwSUFEWFYzam9uS3I0RTZWL2xHNnA3WHMyL29RM09oZC9lNGwzcXNiMjY1Q09ZMzA3aUtnT0ZGSW94d2JOME8vcFI4bEkyRkVmTlZBTWFiNFNadUhGYTRqM2NqUT09LS1vY1d1UHY4U2hTclNIY1RUTDkrcTBBPT0%3D--5b490e7c1e40490f2820ea76f9b53faaed2e31ec; path=/; expires=Mon, 17 May 2049 18:11:07 -0000; secure; HttpOnly
Strict-Transport-Security: max-age=315569520; includeSubDomains; preload
Via: 1.1 spaces-router (07e15a07cd6c)
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Request-Id: da0637cd-9ac5-f189-b345-b5680ec98491
X-Runtime: 0.136176
X-Xss-Protection: 1; mode=block
Date: Fri, 17 May 2019 18:11:07 GMT