HTTP/1.1 200 OK
Date: Wed, 31 Jul 2019 04:02:14 GMT
Server: Apache
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: default-src 'self' https://onesignal.com/ https://cdn.onesignal.com/ https://va.tawk.to/ https://www.facebook.com/ https://vars.hotjar.com/ https://www.newbuildinspections.com/ https://www.unbiased.co.uk/ https://hoa.org.uk https://ea4me.hoa.org.uk; script-src 'self' 'unsafe-inline' 'unsafe-eval' https http https://code.jquery.com/  https://onesignal.com/ https://cdn.onesignal.com/ https://optimize.google.com https://www.googletagservices.com https://adservice.google.com https://adservice.google.co.uk *.googlesyndication.com https://tagmanager.google.com/ https://cdnjs.cloudflare.com/ https://www.awin1.com/ https://s.cpx.to/ https://hoateam.atlassian.net https://widget.reviews.co.uk https://cdn.sitesearch360.com/ https://consent.cookiebot.com https://hoa.us5.list-manage.com/ platform.twitter.com www.googleapis.com www.google.com cse.google.com www.unbiased.co.uk www.googletagmanager.com sitesearch360.com *.hotjar.com https://www.googletagmanager.com cdnjs.cloudflare.com d2l7e0y6ygya2s.cloudfront.net cdn.jsdelivr.net *.tawk.to www.reallymoving.com ajax.googleapis.com www.google-analytics.com prf.audiencemanager.de p.cpx.to connect.facebook.net; style-src 'self' 'unsafe-inline' https://onesignal.com/ https://cdn.onesignal.com/ https://ajax.googleapis.com/ https://optimize.google.com https://tagmanager.google.com/ www.google.com fonts.googleapis.com *.jsdelivr.net *.mailchimp.com maxcdn.bootstrapcdn.com cdnjs.cloudflare.com; img-src 'self' https://pool.grid-data.bidswitch.net/ https://secure.gravatar.com/ https://onesignal.com/ https://cdn.onesignal.com/ https://optimize.google.com https://image2.pubmatic.com/ https://www.googletagmanager.com/ https://cdn.jsdelivr.net/emojione/ https://s.w.org/images/ https://s3.amazonaws.com/gravityforms/ https://insights.sitesearch360.com/ https://images.sitesearch360.com/ https://ps.w.org https://s3-eu-west-1.amazonaws.com data: bat.bing.com sitesearch360.com ads.avocet.io www.google.com.sa awsmedia.s3.amazonaws.com syndication.twitter.com https http su.addthis.com www.audiencemanager.de prf.audiencemanager.de www.google.com.hk www.google.com.sg www.google.ca www.google.ie www.google.co.in www.google.com.au www.google.se www.googleapis.com *.gstatic.com *.google.com https://hoa.org.uk https://unloq-asset.s3.eu-central-1.amazonaws.com abs.twimg.com/emoji/ s.w.org/images/core/emoji/ *.tawk.to www.google.com www.google.co.uk *.adnxs.com *.doubleclick.net *.cpx.to *.google-analytics.com *.facebook.com; font-src 'self' https://cdnjs.cloudflare.com/ data: sxt.cdn.skype.com fonts.gstatic.com *.tawk.to *.hotjar.com maxcdn.bootstrapcdn.com; connect-src 'self'  https://vc.hotjar.io/ https://hoa.org.uk/ https://onesignal.com/ https://cdn.onesignal.com/ https://api.reviews.co.uk/ https://global.sitesearch360.com/ https://insights.sitesearch360.com/ https://sentry.hotjar.com/ https://in.hotjar.com/ https://stats.g.doubleclick.net https://www.google-analytics.com https://api-cache.reviews.co.uk syndication.twitter.com api.wpfastestcache.net api.sitesearch360.com wss://*.hotjar.com https yoast.com wss://*.tawk.to *.tawk.to insights.hotjar.com graylog.hotjar.com:12080 graylog.hotjar.com:12443 graylog.hotjar.com; child-src 'self' https://onesignal.com/ https://cdn.onesignal.com/ https://optimize.google.com https://googleads.g.doubleclick.net/ https://maps.googleapis.com/ https://www.google.com/ https://api.localsurveyorsdirect.co.uk/ https://connect.facebook.net/ https://hoateam.atlassian.net/ https://widget.reviews.co.uk https://legacy.keyretirement.co.uk/ *.trustpilot.com *.audioboom.com track.omguk.com www.unbiased.co.uk localsurveyorsdirect.co.uk https://www.localsurveyorsdirect.co.uk clients.lease-advice.org platform.twitter.com https://www.lease-advice.org.uk ecab.planningportal.co.uk www.smartval.co.uk https://www.newbuildinspections.com cse.google.com www.landc.co.uk www.youtube.com https://www.unbiased.co.uk *.tawk.to *.hotjar.com www.newbuildinspections.com www.localsurveyorsdirect.co.uk www.facebook.com white.reallymoving.com *.moonclerk.com; frame-ancestors 'self' https://staging.hoa.org.uk ; report-uri https://hoa.report-uri.io/r/default/csp/enforce;
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Link: <https://hoa.org.uk/wp-json/>; rel="https://api.w.org/"
Link: <https://hoa.org.uk/>; rel=shortlink
Vary: Accept-Encoding,User-Agent
Set-Cookie: PHPSESSID=dlqacnlo4l9katmmnms7gk3831; path=/; secure; HttpOnly
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Expect-CT: max-age=30; report-uri="https://hoa.report-uri.io/r/default/ct/enforce"
Referrer-Policy: no-referrer-when-downgrade
Strict-Transport-Security: max-age=15638400;
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8