HTTP/1.1 200 OK
content-type: text/html; charset=UTF-8
cache-control: max-age=60, no-transform, public, s-maxage=3600
date: Mon, 18 Apr 2022 18:50:13 GMT
x-content-type-options: nosniff
referrer-policy: origin, strict-origin-when-cross-origin
x-frame-options: DENY
content-security-policy: default-src 'self'; connect-src 'self' www.google-analytics.com https://www.google-analytics.com *.g.doubleclick.net http://*.hotjar.com:* https://*.hotjar.com:* http://*.hotjar.io https://*.hotjar.io wss://*.hotjar.com; font-src 'self' https://fonts.gstatic.com http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io; frame-src 'unsafe-inline' https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io https://optimize.google.com; img-src 'self' *.ttcache.com https://*.ttcache.com www.google-analytics.com https://www.google-analytics.com https://optimize.google.com optimize.google.com data: http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io; media-src 'none'; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' www.google-analytics.com https://www.google-analytics.com www.googletagmanager.com https://www.googletagmanager.com www.googleoptimize.com https://www.googleoptimize.com https://optimize.google.com optimize.google.com http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io; style-src 'self' 'unsafe-inline' https://optimize.google.com https://fonts.googleapis.com
x-content-security-policy: default-src 'self'; connect-src 'self' www.google-analytics.com https://www.google-analytics.com *.g.doubleclick.net http://*.hotjar.com:* https://*.hotjar.com:* http://*.hotjar.io https://*.hotjar.io wss://*.hotjar.com; font-src 'self' https://fonts.gstatic.com http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io; frame-src 'unsafe-inline' https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io https://optimize.google.com; img-src 'self' *.ttcache.com https://*.ttcache.com www.google-analytics.com https://www.google-analytics.com https://optimize.google.com optimize.google.com data: http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io; media-src 'none'; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' www.google-analytics.com https://www.google-analytics.com www.googletagmanager.com https://www.googletagmanager.com www.googleoptimize.com https://www.googleoptimize.com https://optimize.google.com optimize.google.com http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io; style-src 'self' 'unsafe-inline' https://optimize.google.com https://fonts.googleapis.com
x-xss-protection: 1; mode=block
set-cookie: session=XLDSOKHjHPSpMbKYEoCQouEcjKltIOVz; path=/; secure; httponly; samesite=lax
set-cookie: ta=6%3BWyJodHRwOlwvXC93d3cuZ29vZ2xlLmNvbVwvIiwwLDAsMCwiMjAyMi0wNC0xOCIsbnVsbCxmYWxzZSxmYWxzZV0%3D%7C9f88e088; expires=Tue, 18-Apr-2023 18:50:13 GMT; Max-Age=31536000; path=/; secure; httponly; samesite=lax
vary: Accept-Encoding
age: 0
accept-ranges: bytes
transfer-encoding: chunked
strict-transport-security: max-age=15768000