HTTP/1.1 200 OK
Content-Security-Policy: default-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' forms-eu1.hsforms.com js-eu1.hsforms.net js-eu1.hsleadflows.net api-eu1.hubspot.com js-eu1.usemessages.com www.google.com js-eu1.hscollectedforms.net js-eu1.hs-analytics.net js-eu1.hsadspixel.net js-eu1.hs-scripts.com googleads.g.doubleclick.net www.googleadservices.com js.hs-analytics.net js-eu1.hs-banner.com  js.hs-scripts.com px.ads.linkedin.com vc.hotjar.io c.clarity.ms www.clarity.ms static.hotjar.com snap.licdn.com www.google-analytics.com ajax.googleapis.com a.omappapi.com www.googletagmanager.com fonts.googleapis.com cdnjs.cloudflare.com cdn.jsdelivr.net api.omappapi.com script.hotjar.com; connect-src 'self' ws: hubspot-forms-static-embed-eu1.s3.amazonaws.com forms-eu1.hsforms.com b.clarity.ms g.clarity.ms d.clarity.ms ws4.hotjar.com ws16.hotjar.com forms-eu1.hubspot.com api-eu1.hubapi.com ws24.hotjar.com js-eu1.hs-banner.com js-eu1.hs-banner.com www.clarity.ms vc.hotjar.io z.omappapi.com a.omappapi.com px.ads.linkedin.com www.google.co.in stats.g.doubleclick.net in.hotjar.com www.google-analytics.com api.omappapi.com; img-src 'self' data: f.hubspotusercontent-eu1.net forms-eu1.hsforms.com track-eu1.hubspot.com www.google.ie www.linkedin.com www.w3.org c.bing.com www.google.co.in px.ads.linkedin.com a.omappapi.com secure.gravatar.com ps.w.org c.clarity.ms www.google.com google.com www.google-analytics.com; style-src 'self' 'unsafe-inline' a.omappapi.com use.fontawesome.com unpkg.com cdnjs.cloudflare.com cdn.jsdelivr.net fonts.googleapis.com; base-uri 'self'; font-src 'self' data: a.omappapi.com fonts.googleapis.com fonts.gstatic.com static.appetitecreative.com cdnjs.cloudflare.com; frame-src player.vimeo.com www.youtube.com www.googletagmanager.com forms-eu1.hubspot.com bid.g.doubleclick.net eu.hubspot.com googleadservices.com google.co.uk app-eu1.hubspot.com fast.wistia.com js.hs-scripts.comi static.hsappstatic.net app.hubspot.com vars.hotjar.com; form-action 'self' forms-eu1.hubspot.com www.googletagmanager.com;
Content-Type: text/html; charset=UTF-8
Date: Sun, 20 Feb 2022 06:37:19 GMT
Link: <https://www.blueoptima.com/wp-json/>; rel="https://api.w.org/"
Link: <https://www.blueoptima.com/wp-json/wp/v2/pages/17>; rel="alternate"; type="application/json"
Link: <https://www.blueoptima.com/>; rel=shortlink
Permissions-Policy: geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()
Referrer-Policy: strict-origin
Server: nginx
Set-Cookie: Path=/; HttpOnly; Secure
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Powered-By: PHP/7.4.20
X-XSS-Protection: 1; mode=block
transfer-encoding: chunked
Connection: keep-alive