Usertesting.com - Peek.usertesting.com

server: Varnish
retry-after: 0
location: https://www.usertesting.com/peek
accept-ranges: bytes
date: Mon, 03 Nov 2025 00:35:42 GMT
via: 1.1 varnish
x-served-by: cache-fra-etou8220154-FRA
x-cache: HIT
x-cache-hits: 0
x-timer: S1762130142.416232,VS0,VE0
content-length: 0

HTTP/2 301 
x-ah-environment: prod
last-modified: Tue, 07 Oct 2025 11:46:27 GMT
permissions-policy: browsing-topics=()
content-language: en
etag: "1759837587"
location: https://app.usertesting.com/free_test
x-redirect-id: 10856
x-content-type-options: nosniff
x-request-id: v-421b9cac-a373-11f0-a308-fb7a135b92e6
content-type: text/html; charset=utf-8
expires: Sun, 19 Nov 1978 05:00:00 GMT
accept-ranges: bytes
date: Mon, 03 Nov 2025 00:35:42 GMT
age: 2292555
x-served-by: cache-bfi-krnt7300073-BFI, cache-bfi-krnt7300073-BFI, cache-fra-etou8220110-FRA
x-cache: MISS, MISS, HIT, HIT
x-cache-hits: 0, 801, 1
x-timer: S1762130142.462843,VS0,VE1
vary: X-Geo-Country
cache-control: no-store, no-cache, must-revalidate, max-age=0
strict-transport-security: max-age=31536000; includeSubDomains;
content-length: 394

HTTP/2 301 
set-cookie: _session_id=d69057018d8321ceef64f4c5dfa94670; path=/; expires=Wed, 03 Dec 2025 00:35:42 GMT; secure; HttpOnly; SameSite=None
location: https://www.usertesting.com/free-test?
content-type: text/html; charset=utf-8
x-xss-protection: 0
accept-ranges: bytes
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
cache-control: no-store
via: 1.1 varnish, 1.1 varnish
referrer-policy: strict-origin-when-cross-origin
x-request-id: 8c91174f-5566-95b9-8916-af24de4f57cd
strict-transport-security: max-age=31536000; includeSubDomains
com.usertesting.cdnhipaaenabled: true
content-security-policy: frame-ancestors 'self' localhost *.usertesting.com *.slack.com iframely.com *.iframely.com iframe.ly *.iframe.ly *.handrailux.com coda.io *.coda.io *.jira-dev.com *.atlassian.net *.atlassian.com *.jira.com *.ngrok.io *.enjoyhq.com *.enjoystaging.com *.microsoft.com trello.com *.trello.com *.figma.com miro.com *.miro.com invisionapp.com *.invisionapp.com *.invisionapp-cdn.com *.canva.com canva.com monday.com *.monday.com embedder.app *.embedder.app productboard.com *.productboard.com google.com *.google.com googleusercontent.com *.googleusercontent.com https://test-usertesting.skilljar.com https://usertesting.skilljar.com https://university.usertesting.com; script-src 'self' blob: data: https://*.usertesting.com https://*.ada.support https://*.amazonaws.com *.bootstrapcdn.com https://*.calendly.com https://cdn-cookieyes.com https://*.ckeditor.com https://*.cloudflare.com https://*.cloudfront.net https://*.datadoghq.com https://*.datadoghq-browser-agent.com https://*.doubleclick.net https://connect.facebook.net https://*.fastly.net https://*.g2crowd.com https://*.global.ssl.fastly.net https://*.google.com https://*.googleadservices.com https://cdn.jsdelivr.net *.google-analytics.com *.googleapis.com *.googletagmanager.com https://www.googletagmanager.com https://*.gstatic.com https://*.honeybadger.io https://*.imperium.com https://snap.licdn.com https://*.litix.io https://*.marketo.net https://*.maxmind.com https://*.myfonts.net https://okt.to https://*.okt.to https://*.oktopost.com https://*.outbrain.com https://*.pendo.io *.pndsn.com https://*.pubnub.com https://cdn.rudderlabs.com https://*.trellocdn.com https://*.typekit.net https://*.wistia.com https://*.wistia.net https://*.zdassets.com https://*.zendesk.com https://zoom.us https://*.zoom.us cdn.sourcing.userzoom.com run-an-static-assets-public-pro-use2.s3.us-east-2.amazonaws.com 'nonce-UoWE8FHrpoecywJq1P8/jA=='; object-src 'self'; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=puba926aa09c39be6207208f0f5a97e5664&dd-evp-origin=content-security-policy&ddsource=csp-report&service=core-api-csp-errors&ddtags=env%3Aproduction
server: nothing
x-permitted-cross-domain-policies: none
date: Mon, 03 Nov 2025 00:35:42 GMT
x-served-by: cache-fra-etou8220107-FRA, cache-fra-etou8220107-FRA
x-cache: MISS, MISS
x-cache-hits: 0, 0
x-timer: S1762130142.488681,VS0,VE167
vary: Origin

HTTP/2 200 
x-ah-environment: prod
x-request-id: v-4ae3a888-b6a2-11f0-bace-5f2b47df03a3
last-modified: Fri, 31 Oct 2025 21:41:00 GMT
content-language: en
expires: Sun, 19 Nov 1978 05:00:00 GMT
etag: W/"1761946860-gzip"
x-drupal-dynamic-cache: MISS
permissions-policy: browsing-topics=()
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
content-encoding: br
accept-ranges: bytes
age: 183281
date: Mon, 03 Nov 2025 00:35:42 GMT
x-served-by: cache-bfi-kbfi7400105-BFI, cache-bfi-kbfi7400105-BFI, cache-fra-etou8220110-FRA
x-cache: MISS, MISS, HIT, HIT
x-cache-hits: 0, 12, 0
x-timer: S1762130143.661585,VS0,VE1
vary: X-Geo-Country,Accept-Encoding
cache-control: no-store, no-cache, must-revalidate, max-age=0
strict-transport-security: max-age=31536000; includeSubDomains;
content-length: 9410