HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Date: Fri, 29 May 2020 02:34:16 GMT
Set-Cookie: AWSALB=ocP75X0voSMtYVm+Pw4rPYjSQfJgS6WHPVM3/rB4lk0sQmrFx6K6aG2EnjtSs/D4+vH/f/3AmsWedcDdF5qONVgoM8yg0VdjrZa2s4VkH+Go00pOy7f64t5UspzB; Expires=Fri, 05 Jun 2020 02:34:16 GMT; Path=/
Set-Cookie: AWSALBCORS=ocP75X0voSMtYVm+Pw4rPYjSQfJgS6WHPVM3/rB4lk0sQmrFx6K6aG2EnjtSs/D4+vH/f/3AmsWedcDdF5qONVgoM8yg0VdjrZa2s4VkH+Go00pOy7f64t5UspzB; Expires=Fri, 05 Jun 2020 02:34:16 GMT; Path=/; SameSite=None; Secure
Vary: Origin
Feature-policy: geolocation 'none'; microphone 'none';
Set-Cookie: _sp_id.8a05=f3512c82-f7b9-4f2b-91c8-e4e3bc63f164.1590719656.0.1590719656..d3205b8e-d226-4505-afa8-33925f6fe5db; Max-Age=31536; Domain=.headspace.com; Path=/; Expires=Fri, 29 May 2020 11:19:52 GMT; Secure
Set-Cookie: countryCode=US; Max-Age=31536; Domain=.headspace.com; Path=/; Expires=Fri, 29 May 2020 11:19:52 GMT; Secure
Set-Cookie: cookiePolicyMarketing=accept; Max-Age=7776; Domain=.headspace.com; Path=/; Expires=Fri, 29 May 2020 04:43:52 GMT; Secure
Set-Cookie: cookiePolicyAnalytics=accept; Max-Age=7776; Domain=.headspace.com; Path=/; Expires=Fri, 29 May 2020 04:43:52 GMT; Secure
Set-Cookie: lang=en; Max-Age=31536; Domain=.headspace.com; Path=/; Expires=Fri, 29 May 2020 11:19:52 GMT; Secure
X-DNS-Prefetch-Control: off
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=15552000; includeSubDomains
X-Download-Options: noopen
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Referrer-Policy: same-origin
Content-Security-Policy: connect-src *.cloudfront.net *.headspace.com api.amplitude.com api.branch.io api.chilipiper.com api-js.mixpanel.com api2.branch.io app.getsentry.com assets.ctfassets.net cdn.contentful.com cdn.optimizely.com ct.pinterest.com errors.client.optimizely.com gum.criteo.com identity.mparticle.com jssdks.mparticle.com logx.optimizely.com preview.contentful.com rum.optimizely.com rum.optimizely.com sdk.iad-01.braze.com sentry.io static.zuora.com stats.g.doubleclick.net www.facebook.com www.google-analytics.com 'self'; default-src *.headspace.com data:; font-src *.headspace.com data: fonts.gstatic.com use.fontawesome.com use.typekit.net 'self'; frame-src *.headspace.com a11673470095.cdn.optimizely.com accounts.google.com apisandbox.zuora.com bid.g.doubleclick.net forms.hsforms.com gum.criteo.com static.criteo.net tags.tiqcdn.com widget.us.criteo.com www.facebook.com www.gstatic.com www.youtube.com www.zuora.com 'self'; img-src data: 'self' *; media-src *.headspace.com assets.ctfassets.net blob: downloads.ctfassets.net 'self'; script-src *.cloudfront.net *.headspace.com a.quora.com analytics.twitter.com api.branch.io apis.google.com apisandboxstatic.zuora.com app.link blob: cdn-akamai.mookie1.com cdn.amplitude.com cdn.branch.io cdn.lr-ingest.io cdn.optimizely.com cdn.polyfill.io cdn.ravenjs.com cdnjs.cloudflare.com connect.facebook.net forms.hsforms.com googleads.g.doubleclick.net https://static.zuora.com js.appboycdn.com js.chilipiper.com js.hs-analytics.net js.hs-scripts.com js.hsforms.net jssdkcdn.mparticle.com jssdkcdns.mparticle.com platform.twitter.com s.pinimg.com sjs.bizographics.com snap.licdn.com sslwidget.criteo.com static.ads-twitter.com static.criteo.net static.zuora.com tags.tiqcdn.com widget.us.criteo.com www.google-analytics.com www.google.com www.googleadservices.com www.googletagmanager.com www.redditstatic.com 'self' 'unsafe-eval' 'unsafe-inline'; style-src *.headspace.com cdn.polyfill.io cdnjs.cloudflare.com cloudfront.net https://fonts.googleapis.com platform.twitter.com static.zuora.com translate.googleapis.com use.fontawesome.com www.google.com 'self' 'unsafe-inline'; report-uri https://sentry.io/api/1532173/security/?sentry_key=ac60cf3a3f0240d487fa18d834ea627b&sentry_environment=production
X-Powered-By: Next.js 7.0.3
ETag: "28ba2-Ca3UNwHkDA6AlvKMu+zO7z8j2Us"
Content-Encoding: gzip
Access-Control-Allow-Headers: authorization,content-type,x-requested-with
Access-Control-Allow-Methods: GET,POST,PUT,DELETE,OPTIONS
Access-Control-Allow-Credentials: true
X-Cache: Miss from cloudfront
Via: 1.1 1c4cb605a68bbe1d1bbce1a363445388.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: BOS50-C2
X-Amz-Cf-Id: flXtTWdk877sBzLuaXOc3hjOIKvOU6i70B9wY92hGSzZbXbJHvspLA==