HTTP/2 200 content-type: text/html date: Mon, 29 Dec 2025 18:59:17 GMT last-modified: Thu, 18 Dec 2025 10:57:12 GMT content-encoding: gzip x-amz-server-side-encryption: AES256 server: AmazonS3 etag: W/"9b1b221dd9174262ffeb9f0d4f7f64a4" vary: accept-encoding x-cache: Miss from cloudfront via: 1.1 a0dfc1e576cc19daa2f4d5ec699792f4.cloudfront.net (CloudFront) x-amz-cf-pop: TLV50-C1 x-amz-cf-id: BF1xVCxUhwsx9ox2XgayK22K_C8ilVcdSexn9B5zE377xc5yKZKaQg== x-xss-protection: 1; mode=block x-frame-options: DENY referrer-policy: strict-origin-when-cross-origin content-security-policy: default-src 'none'; block-all-mixed-content; child-src 'self' www.youtube.com www.youtube-nocookie.com api.recurly.com js.stripe.com *.google.com goo.gl *.intercom.io intercom-sheets.io blob:; connect-src 'self' app.getsentry.com *.ingest.sentry.io *.intercom.io wss://*.intercom.io *.intercomcdn.com *.intercomusercontent.com *.google-analytics.com *.google.com *.doubleclick.net *.recurly.com heapanalytics.com *.auryc.com *.trustarc.com blackfire.io *.blackfire.io *.contentsquare.net *.google.ie google.com *.googlesyndication.com; font-src 'self' fonts.gstatic.com js.intercomcdn.com fonts.intercomcdn.com data: heapanalytics.com *.auryc.com *.trustarc.com; form-action 'self' intercom.help api-iam.intercom.io platformsh.okta.com; frame-ancestors 'none'; frame-src www.youtube-nocookie.com www.youtube.com api.recurly.com js.stripe.com *.google.com goo.gl *.doubleclick.net googletagmanager.com *.googletagmanager.com *.trustarc.com; img-src 'self' * data: blob: heapanalytics.com *.googletagmanager.com *.trustarc.com *.truste.com; manifest-src 'self'; media-src js.intercomcdn.com; object-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.googletagmanager.com *.google.com www.gstatic.com ajax.googleapis.com www.google-analytics.com js.recurly.com api.recurly.com js.stripe.com *.intercom.io js.intercomcdn.com static.ads-twitter.com analytics.twitter.com blackfire.io *.blackfire.io cdn.heapanalytics.com heapanalytics.com *.trustarc.com *.contentsquare.net doubleclick.net *.doubleclick.net *.googleadservices.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com js.recurly.com heapanalytics.com js.stripe.com *.googletagmanager.com x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains; preload