HTTP/1.1 200 OK
Date: Fri, 17 May 2019 13:41:48 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __cfduid=d59a6aae87c78bff49088c9fac6d948091558100507; expires=Sat, 16-May-20 13:41:47 GMT; path=/; domain=.bluecross.org.uk; HttpOnly; Secure
Cache-Control: public, max-age=86400
Link: <https://www.bluecross.org.uk/home?amp> rel="amphtml"
X-UA-Compatible: IE=edge
Content-language: en
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Expires: Sat, 18 May 2019 13:41:48 GMT
Last-Modified: Fri, 17 May 2019 11:46:55 GMT
Vary: Cookie,Accept-Encoding
X-Generator: Drupal 8 (https://www.drupal.org)
Content-Security-Policy: default-src 'self' 'unsafe-inline' data:; https://tagmanager.google.com https://fonts.googleapis.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://tagmanager.google.com https://www.googletagmanager.com https://cdn.syndication.twimg.com https://pbs.twimg.com https://www.google-analytics.com https://www.googleadservices.com https://static.hotjar.com https://sjs.bizographics.com https://collector-518.tvsquared.com https://rum-static.pingdom.net https://connect.facebook.net https://bat.bing.com https://static.ads-twitter.com https://cookie-script.com https://sleeknotecustomerscripts.sleeknote.com https://googleads.g.doubleclick.net https://px.ads.linkedin.com https://analytics.twitter.com https://script.hotjar.com https://ajax.googleapis.com https://dev.visualwebsiteoptimizer.com https://www.linkedin.com https://cdn.ampproject.org https://www.riddle.com; img-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.gstatic.com https://ssl.gstatic.com https://useruploads.visualwebsiteoptimizer.com https://pbs.twimg.com https://picsum.photos https://www.google-analytics.com https://stats.g.doubleclick.net https://bat.bing.com/ https://t.co https://collector-518.tvsquared.com https://www.facebook.com https://www.google.com https://www.google.co.uk https://dev.visualwebsiteoptimizer.com https://www.google.com.ua https://cookie-script.com data:;; media-src 'self' https://vimeo.com; frame-src 'self' http://player.vimeo.com https://player.vimeo.com https://vimeo.com https://vars.hotjar.com https://4497843.fls.doubleclick.net/ https://www.google.com https://www.youtube.com https://www.riddle.com; connect-src 'self' 'unsafe-inline' https://vimeo.com https://rum-collector-2.pingdom.net https://dev.visualwebsiteoptimizer.com https://www.google-analytics.com; report-uri /report-csp-violation
X-Content-Security-Policy: default-src 'self' 'unsafe-inline' data:; https://tagmanager.google.com https://fonts.googleapis.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://tagmanager.google.com https://www.googletagmanager.com https://cdn.syndication.twimg.com https://pbs.twimg.com https://www.google-analytics.com https://www.googleadservices.com https://static.hotjar.com https://sjs.bizographics.com https://collector-518.tvsquared.com https://rum-static.pingdom.net https://connect.facebook.net https://bat.bing.com https://static.ads-twitter.com https://cookie-script.com https://sleeknotecustomerscripts.sleeknote.com https://googleads.g.doubleclick.net https://px.ads.linkedin.com https://analytics.twitter.com https://script.hotjar.com https://ajax.googleapis.com https://dev.visualwebsiteoptimizer.com https://www.linkedin.com https://cdn.ampproject.org https://www.riddle.com; img-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.gstatic.com https://ssl.gstatic.com https://useruploads.visualwebsiteoptimizer.com https://pbs.twimg.com https://picsum.photos https://www.google-analytics.com https://stats.g.doubleclick.net https://bat.bing.com/ https://t.co https://collector-518.tvsquared.com https://www.facebook.com https://www.google.com https://www.google.co.uk https://dev.visualwebsiteoptimizer.com https://www.google.com.ua https://cookie-script.com data:;; media-src 'self' https://vimeo.com; frame-src 'self' http://player.vimeo.com https://player.vimeo.com https://vimeo.com https://vars.hotjar.com https://4497843.fls.doubleclick.net/ https://www.google.com https://www.youtube.com https://www.riddle.com; connect-src 'self' 'unsafe-inline' https://vimeo.com https://rum-collector-2.pingdom.net https://dev.visualwebsiteoptimizer.com https://www.google-analytics.com; report-uri /report-csp-violation
X-WebKit-CSP: default-src 'self' 'unsafe-inline' data:; https://tagmanager.google.com https://fonts.googleapis.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://tagmanager.google.com https://www.googletagmanager.com https://cdn.syndication.twimg.com https://pbs.twimg.com https://www.google-analytics.com https://www.googleadservices.com https://static.hotjar.com https://sjs.bizographics.com https://collector-518.tvsquared.com https://rum-static.pingdom.net https://connect.facebook.net https://bat.bing.com https://static.ads-twitter.com https://cookie-script.com https://sleeknotecustomerscripts.sleeknote.com https://googleads.g.doubleclick.net https://px.ads.linkedin.com https://analytics.twitter.com https://script.hotjar.com https://ajax.googleapis.com https://dev.visualwebsiteoptimizer.com https://www.linkedin.com https://cdn.ampproject.org https://www.riddle.com; img-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.gstatic.com https://ssl.gstatic.com https://useruploads.visualwebsiteoptimizer.com https://pbs.twimg.com https://picsum.photos https://www.google-analytics.com https://stats.g.doubleclick.net https://bat.bing.com/ https://t.co https://collector-518.tvsquared.com https://www.facebook.com https://www.google.com https://www.google.co.uk https://dev.visualwebsiteoptimizer.com https://www.google.com.ua https://cookie-script.com data:;; media-src 'self' https://vimeo.com; frame-src 'self' http://player.vimeo.com https://player.vimeo.com https://vimeo.com https://vars.hotjar.com https://4497843.fls.doubleclick.net/ https://www.google.com https://www.youtube.com https://www.riddle.com; connect-src 'self' 'unsafe-inline' https://vimeo.com https://rum-collector-2.pingdom.net https://dev.visualwebsiteoptimizer.com https://www.google-analytics.com; report-uri /report-csp-violation
From-Origin: same
X-Drupal-Cache: MISS
X-Request-ID: v-781a474c-7899-11e9-a6df-22000a09bea5
X-AH-Environment: prod
Via: varnish
X-Cache: HIT
X-Cache-Hits: 3
CF-Cache-Status: MISS
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 4d8602cc79d27af2-MCI