HTTP/2 200 
via: 1.1 varnish, 1.1 varnish
content-encoding: gzip
x-frame-options: SAMEORIGIN
content-type: text/html; charset=utf-8
content-security-policy: script-src 'self' * https://heapanalytics.com 'unsafe-inline' 'unsafe-eval'; script-src-elem 'self' * https://cdn.us.heap-api.com https://heapanalytics.com 'unsafe-inline' 'unsafe-eval'; img-src * blob: data:; style-src 'self' * https://heapanalytics.com 'unsafe-inline' 'unsafe-eval' blob:; connect-src 'self' * https://heapanalytics.com; font-src 'self' * https://c.us.heap-api.com https://heapanalytics.com data:;
cross-origin-opener-policy: same-origin
strict-transport-security: max-age=2592000; includeSubDomains
rdwr_response: allowed
accept-ranges: bytes
age: 0
date: Tue, 04 Feb 2025 15:46:37 GMT
x-served-by: cache-mci680046-MCI, cache-mci680056-MCI
x-cache: MISS, MISS
x-cache-hits: 0, 0
x-timer: S1738683998.664338,VS0,VE115
vary: Accept-Encoding, X-Requested-With, origin
content-length: 10935