HTTP/2 200 server: istio-envoy date: Sun, 25 Jan 2026 16:01:46 GMT content-type: text/html content-length: 2996 last-modified: Fri, 16 Jan 2026 23:30:01 GMT etag: "696ac9f9-bb4" expires: Thu, 01 Jan 1970 00:00:01 GMT cache-control: no-cache x-frame-options: SAMEORIGIN referrer-policy: origin-when-cross-origin x-xss-protection: 1 x-content-type-options: nosniff accept-ranges: bytes x-envoy-upstream-service-time: 3 content-security-policy: default-src 'self'; font-src 'self' fonts.gstatic.com https://*.lucidworks.com data:; style-src 'self' 'unsafe-inline' fonts.googleapis.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://js.userpilot.io https://static.zdassets.com https://www.googletagmanager.com https://storage.googleapis.com; worker-src 'self' blob:; img-src 'self' data: *; connect-src 'self' https://*.lucidworks.com https://*.google-analytics.com https://*.launchdarkly.com https://*.zendesk.com https://ekr.zdassets.com https://*.userpilot.io wss://*.userpilot.io; object-src 'none'; frame-src 'self' https://*.lucidworks.com https://app.supademo.com https://play.vidyard.com; frame-ancestors 'none'; base-uri 'self'; permissions-policy: camera=(), geolocation=(), microphone=(), payment=(), usb=(), interest-cohort=() strict-transport-security: max-age=31536000; includeSubDomains via: 1.1 google alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000