Vary: Accept-Encoding, Origin
X-Content-Type-Options: nosniff
Content-Security-Policy: default-src 'self'; connect-src 'self' api.mixpanel.com bam.nr-data.net a.tiles.mapbox.com plus.browsealoud.com insights.hotjar.com s3.amazonaws.com/ehq-production-australia/ s3.amazonaws.com/ehq-production-europe/ s3.amazonaws.com/ehq-production-canada/ s3.amazonaws.com/ehq-production-us-california/; font-src * data:; frame-src www.youtube.com player.vimeo.com staticxx.facebook.com www.facebook.com vars.hotjar.com www.google.com www.google.com.au; img-src * data:; media-src 'self' vimeo.com s3.amazonaws.com/btt_videos/; script-src 'self' 'unsafe-eval' cdnjs.cloudflare.com ajax.googleapis.com www.browsealoud.com plus.browsealoud.com maxcdn.bootstrapcdn.com cdn.heapanalytics.com www.google-analytics.com ssl.google-analytics.com api.mapbox.com assets.zendesk.com cdn.mxpnl.com cdn.ravenjs.com f1-oc.readspeaker.com epsg.io platform.twitter.com cdn.syndication.twimg.com log.pinterest.com assets.pinterest.com connect.facebook.net www.googletagmanager.com translate.google.com s.ytimg.com www.youtube.com/iframe_api s3-ap-southeast-2.amazonaws.com/ehq-bonfire-production/ d569gmo85shlr.cloudfront.net d2i63gac8idpto.cloudfront.net dksxg5o1pn16c.cloudfront.net d2gu4vothxmtom.cloudfront.net d3b3ehuo35wzeh.cloudfront.net d3sbxpiag177w8.cloudfront.net js-agent.newrelic.com bam.nr-data.net script.hotjar.com static.hotjar.com; style-src * 'unsafe-inline'; report-uri /platform/csp_reports
X-Frame-Options: SAMEORIGIN
Date: Sun, 12 Nov 2017 10:09:13 GMT
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
X-XSS-Protection: 1; mode=block
HTTP/1.1 200 OK
Server: nginx
X-Runtime: 0.223763
Strict-Transport-Security: max-age=7776000
Set-Cookie: _engagementhq_v2=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--d23b2a9b254170482d31fe2424004bd2020e9d6a; path=/; expires=Tue, 14 Nov 2017 10:09:13 -0000; HttpOnly; secure
Connection: keep-alive
Content-Type: text/html; charset=utf-8
Pragma: no-cache
Status: 200 OK
X-Request-Id: 2380482b-dbf7-4216-9346-5038bac4d3b7
Transfer-Encoding: chunked
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Set-Cookie: _ehq_uid=BAhpA0IvOQ%3D%3D--6f5ad3d9a2cd6c7e69e8e8fb6aabe2ddf600cdb2; path=/; expires=Tue, 12 Nov 2019 10:09:13 -0000; HttpOnly; secure