HTTP/2 200 content-type: text/html; charset=utf-8 content-security-policy-report-only: base-uri 'self';connect-src https://*.go-mpulse.net https://*.akstat.io 'self' https: *.sentry.io *.amplitude.com *.care.com *.carezen.net *.signalfx.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com *.g.doubleclick.net font.google.com analytics.google.com tagmanager.google.com www.google.com https://*.hotjar.com https://vc.hotjar.io https://content.hotjar.io https://events.hotjar.io https://surveystats.hotjar.io wss://*.hotjar.com https://geolocation.onetrust.com jsv3.recruitics.com;default-src 'self' wss://*.care.com *.care.com *.careapis.com *.carezen.net *.cdn-care.com care.com cdn-care.com www.gstatic.com www.google.com *.googlesyndication.com tags.tiqcdn.com tags-eu.tiqcdn.com tk.getwork.com tr.snapchat.com shareasale.com *.doubleclick.net apps.rokt.com bid.g.doubleclick.net tags.w55c.net *.linkedin.com www.pinterest.com carecom.sjv.io staging-pt.ispot.tv ct.pinterest.com;font-src 'self' data: https://www.care.com https://www.dev.carezen.net https://www.stg.carezen.net fonts.gstatic.com https://script.hotjar.com;frame-ancestors 'self';img-src data: blob: *;object-src 'none';script-src https://*.go-mpulse.net 'nonce-f4f32858e9c4817efd2d13eeff3a43ea' 'self' *.akamaihd.net *.care.com *.careapis.com *.carezen.net *.cdn-care.com *.cloudfront.net *.googlesyndication.com *.sift.com *.monetate.net acsbapp.com analytics.tiktok.com apps.rokt.com bat.bing.com care.com cdn-care.com cdn.pdst.fm connect.facebook.net d.impactradius-event.com googleads.g.doubleclick.net securepubads.g.doubleclick.net maps.googleapis.com s.pinimg.com ssl.google-analytics.com tags-eu.tiqcdn.com tags.tiqcdn.com wss://*.care.com www.emjcd.com www.google-analytics.com www.google.com www.googleadservices.com *.googletagmanager.com www.gstatic.com tr.outbrain.com tags.w55c.net clarity.ms staging-pt.ispot.tv tracker.mnixdata.com *.mountain.com tagmanager.google.com s.go-mpulse.net collector-12308.tvsquared.com js.adsrvr.org https://static.hotjar.com https://script.hotjar.com https://cdn.cookielaw.org assets.calendly.com jsv3.recruitics.com 'nonce-dc2d48eb691895ab89996f873bf0a372' 'strict-dynamic';frame-src 'self' alchemy.veriff.com www.google.com recaptcha.google.com bid.g.doubleclick.net 12355078.fls.doubleclick.net s.go-mpulse.net carecom.sjv.io apps.rokt.com tr.snapchat.com 3239339.fls.doubleclick.net https://vars.hotjar.com insight.adsrvr.org https://www.youtube.com/ https://ots2-qa.learningcaregroup.com/ScheduleATour/ https://ots2.learningcaregroup.com/ScheduleATour/ td.doubleclick.net https://calendly.com securepubads.g.doubleclick.net *.googlesyndication.com ep2.adtrafficquality.google;style-src 'self' 'unsafe-inline' tagmanager.google.com fonts.google.com https://static.hotjar.com https://script.hotjar.com https://cdn.cookielaw.org 'nonce-dc2d48eb691895ab89996f873bf0a372';style-src-attr 'self' 'unsafe-inline' tags.tiqcdn.com tags-eu.tiqcdn.com bat.bing.com;upgrade-insecure-requests;report-uri https://o466311.ingest.sentry.io/api/6004104/security/?sentry_key=2c284ff228ac4d0e8b8ad9ea17497eee&sentry_release=vhp-mfe%402.201.0&sentry_environment=prod referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff x-dns-prefetch-control: off x-download-options: noopen x-frame-options: DENY x-permitted-cross-domain-policies: none x-xss-protection: 0 access-control-expose-headers: Server-Timing vary: Accept-Encoding x-crcm-request-id: 0.94d70b17.1769674180.94c30f57 x-akamai-transformed: 9 146914 0 pmb=mRUM,2 content-encoding: gzip expires: Thu, 29 Jan 2026 08:09:41 GMT cache-control: max-age=0, no-cache, no-store pragma: no-cache date: Thu, 29 Jan 2026 08:09:41 GMT set-cookie: care_did=bc6ddc89-c363-4b01-8e0a-858964623ac1; expires=Mon, 31-Dec-2038 23:59:59 GMT; path=/; domain=.care.com; secure; SameSite=None server-timing: cdn-cache; desc=MISS server-timing: edge; dur=359 server-timing: origin; dur=123 server-timing: traceparent;desc="00-697b15c4c8848cc716b9777fae54eee0-cac94a3e61a8a549-01" strict-transport-security: max-age=31536000 ; includeSubDomains ; preload x-crcm-request-id: 0.94d70b17.1769674180.94c30f57 server-timing: ak_p; desc="1769674180624_386652052_2495811415_48117_16000_0_7_15";dur=1