HTTP/1.1 200 OK
Content-Length: 120634
Content-Type: text/html; charset=utf-8
Date: Tue, 30 Aug 2022 19:55:47 GMT
Access-Control-Expose-Headers: Request-Context
Cache-Control: private
Content-Security-Policy: default-src 'self' https://fonts.gstatic.com/ https://bmtmarketing.azureedge.net https://bmtmarketingdevelopment.azureedge.net https://bmtblobdevelopment.blob.core.windows.net https://bmtblobstaging.blob.core.windows.net https://bmtblobproduction.blob.core.windows.net https://bmtblobdraft.blob.core.windows.net https://script.hotjar.com https://cdn.videvo.net/videvo_files/video/premium/getty_138/large_watermarked/istock-913511504_preview.mp4; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://*.sharethis.com https://www.google.com https://az416426.vo.msecnd.net https://maps.googleapis.com https://www.googletagmanager.com http://tagmanager.google.com https://www.google-analytics.com https://code.jquery.com https://use.fontawesome.com https://via.bmt.org http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io https://www.gstatic.com https://snap.licdn.com http://js.hs-scripts.com https://js.hs-scripts.com https://js.hsadspixel.net http://js.hsforms.net https://js.hsforms.net https://forms.hsforms.com https://js.hs-banner.com https://js.hs-analytics.net https://js.hscollectedforms.net https://js.hscta.net/cta/current.js https://www.googleadservices.com https://googleads.g.doubleclick.net https://unpkg.com/@popperjs/core@2 https://unpkg.com/tippy.js@6 http://cta-service-cms2.hubspot.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://code.jquery.com https://tagmanager.google.com https://cdn.jsdelivr.net/npm/slick-carousel@1.6.0/slick/slick.css; img-src https://www.google.com https://www.google.co.uk https://img.youtube.com https://bmtmarketing.azureedge.net https://bmtmarketingdevelopment.azureedge.net https://bmtblobdevelopment.blob.core.windows.net https://bmtblobstaging.blob.core.windows.net https://bmtblobproduction.blob.core.windows.net https://bmtblobdraft.blob.core.windows.net 'self' data: https://stats.g.doubleclick.net https://mt.google.com/ https://dashboard.umbraco.org https://*.sharethis.com https://maps.googleapis.com https://maps.gstatic.com https://projects.bmtcontent.com https://www.google-analytics.com https://www.googletagmanager.com https://www.google.com/ads https://www.google.co.uk/ads https://ssl.gstatic.com https://www.gstatic.com http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io https://px.ads.linkedin.com https://p.adsymptotic.com https://forms.hsforms.com https://track.hubspot.com https://www.bmt.org https://demo-au.arlo.co https://picsum.photos https://i.picsum.photos https://i.ibb.co https://wc1.prod3.arlocdn.net https://px4.ads.linkedin.com https://bmteventsproduction.blob.core.windows.net https://no-cache.hubspot.com https://perf.hsforms.com; frame-src 'self' https://www.youtube.com https://youtu.be https://*.sharethis.com https://c.sharethis.mgr.consensu.org https://www.google.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io https://bmtblobdevelopment.blob.core.windows.net https://bmtblobproduction.blob.core.windows.net https://bmtblobdraft.blob.core.windows.net https://bmtmarketingcorporatesitedevelopment.azurewebsites.net https://cdn.knightlab.com https://forms.hsforms.com https://www.bmtcontent.com https://duncankitts.github.io/Docs/; frame-ancestors 'self' my.sharpcloud.com; connect-src 'self' https://stats.g.doubleclick.net https://dc.services.visualstudio.com https://*.sharethis.com https://www.bmtintra.net https://link.socxo.com http://*.hotjar.com:* https://*.hotjar.com:* http://*.hotjar.io https://*.hotjar.io wss://*.hotjar.com https://dmtrk.net/signup.ashx https://www.google-analytics.com https://api.hubapi.com https://js.hs-banner.com https://forms.hsforms.com https://www.bmt.org https://forms.hubspot.com https://hubspot-forms-static-embed.s3.amazonaws.com https://www.google.com/pagead/ https://cta-service-cms2.hubspot.com https://googleads.g.doubleclick.net/pagead/; child-src https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io; 
Request-Context: appId=cid-v1:ad9ce67d-64b6-4d5d-ad13-0b216fabb7fc
Arr-Disable-Session-Affinity: True
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload