HTTP/1.1 200 OK
server: envoy
date: Mon, 22 Jul 2019 07:59:52 GMT
content-type: text/html; charset=utf-8
etag: W/"3203532feff889e97be420e9d6732cdb"
cache-control: max-age=0, private, must-revalidate
set-cookie: first_visit=false; path=/; secure; HttpOnly; SameSite=Lax
set-cookie: acquisition_attributes=IntcImFjcV9tZWRpdW1cIjpcIm9yZ2FuaWNcIixcImFjcV9zb3VyY2VcIjpcIkdvb2dsZVwiLFwiYWNxX2NoYW5uZWxcIjpcIk9yZ2FuaWMgU2VhcmNoXCIsXCJhY3FfY29udGVudFwiOlwiXCIsXCJhY3FfY2FtcGFpZ25cIjpcIlwiLFwiYWNxX2tleXdvcmRzXCI6bnVsbCxcImFjcV9tYXRjaF90eXBlXCI6bnVsbH0i--f7133568315c0e40404c28259a084c889f6364c2; path=/; expires=Fri, 22 Jul 2039 07:59:52 -0000; HttpOnly; secure; SameSite=Lax
set-cookie: hat=djJPbnBXemVWRFdTOXkwekw5OU9wUT09LS1kVUg4Z2tDZStRSDFvMlNENkw0VnNnPT0%3D--b0e7ccbb652e50a681dc1ec01cced3cf359a9dea; path=/; secure; HttpOnly; SameSite=Lax
set-cookie: _session_id=781352a9964c424180c871df82b8531d; path=/; expires=Mon, 05 Aug 2019 07:59:53 -0000; HttpOnly; secure
x-request-id: fb8a9e38-a5f1-43e6-ac25-8d9b0f23391e
x-runtime: 0.930013
strict-transport-security: max-age=2592000; includeSubdomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-download-options: noopen
x-permitted-cross-domain-policies: none
content-security-policy: default-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; frame-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; report-uri https://extendi.report-uri.com/r/d/csp/enforce
content-security-policy-report-only: default-src 'self'; base-uri 'self'; block-all-mixed-content; child-src 'self' allow-scripts; connect-src 'self' wss: www.facebook.com *.intercom.io; font-src 'self' data: maxcdn.bootstrapcdn.com fonts.gstatic.com js.intercomcdn.com; form-action 'self' www.facebook.com https://*.headbox.com; frame-ancestors *; frame-src allow-scripts assets.braintreegateway.com platform.twitter.com www.facebook.com bid.g.doubleclick.net; img-src 'self' https: data:; manifest-src 'self'; media-src 'self'; object-src 'self' allow-scripts; plugin-types application/x-shockwave-flash; script-src 'unsafe-inline' 'self' 'unsafe-eval' allow-scripts addthisevent.com track.addevent.com www.addevent.com origin-analytics-sand.sandbox.braintree-api.com api.sandbox.braintreegateway.com api.braintreegateway.com js.braintreegateway.com js.hs-scripts.com forms.hsforms.com js.hs-analytics.net maps.gstatic.com js.hsforms.net maps.googleapis.com m.addthisedge.com cdn.ravenjs.com platform.twitter.com static.ads-twitter.com analytics.twitter.com bam.eu01.nr-data.net widget.intercom.io js.intercomcdn.com www.googletagmanager.com www.google-analytics.com www.googleadservices.com connect.facebook.net googleads.g.doubleclick.net bat.bing.com; style-src 'unsafe-inline' 'self' maxcdn.bootstrapcdn.com fonts.googleapis.com; report-uri https://extendi.report-uri.com/r/d/csp/reportOnly
x-envoy-upstream-service-time: 932
transfer-encoding: chunked