HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 65647
Cache-Control: public, max-age=900
Content-Language: en
Content-Security-Policy-Report-Only: default-src 'self'; script-src 'self' 'unsafe-inline' *.googleadservices.com *.bing.com *.googleapis.com *.google-analytics.com *.gstatic.com *.marketo.net *.googletagmanager.com *.zopim.com *.mktoresp.com *.bizographics.com *.toutapp.com *.newrelic.com *.linkedin.com *.nr-data.net *.hubspot.com 'unsafe-eval' unpkg.com/feather-icons *.hs-scripts.com *.visualwebsiteoptimizer.com *.hs-analytics.net *.hscollectedforms.net *.hsadspixel.net *.js.usemessages.com *.bootstrapcdn.com *.doubleclick.net *.albacross.com js.usemessages.com/conversations-embed.js js.hsforms.net/forms/v2.js; object-src *; style-src 'self' 'unsafe-inline' *.googleapis.com ; img-src *; media-src *; frame-src 'self' *.hubspot.com *.doubleclick.net; child-src 'self'; font-src 'self' 'unsafe-inline' *.gstatic.com data: wss:; connect-src 'self' *.hubspot.com *.hubapi.com; report-uri /report-csp-violation
Content-Type: text/html; charset=utf-8
Etag: W/"1560160912-0"
Expires: Sun, 19 Nov 1978 05:00:00 GMT
Last-Modified: Mon, 10 Jun 2019 10:01:52 GMT
Link: <https://www.huddle.com/>; rel="canonical",<https://www.huddle.com/>; rel="shortlink"
Server: nginx
Strict-Transport-Security: max-age=1000; includeSubDomains
X-Content-Security-Policy-Report-Only: default-src 'self'; script-src 'self' 'unsafe-inline' *.googleadservices.com *.bing.com *.googleapis.com *.google-analytics.com *.gstatic.com *.marketo.net *.googletagmanager.com *.zopim.com *.mktoresp.com *.bizographics.com *.toutapp.com *.newrelic.com *.linkedin.com *.nr-data.net *.hubspot.com 'unsafe-eval' unpkg.com/feather-icons *.hs-scripts.com *.visualwebsiteoptimizer.com *.hs-analytics.net *.hscollectedforms.net *.hsadspixel.net *.js.usemessages.com *.bootstrapcdn.com *.doubleclick.net *.albacross.com js.usemessages.com/conversations-embed.js js.hsforms.net/forms/v2.js; object-src *; style-src 'self' 'unsafe-inline' *.googleapis.com ; img-src *; media-src *; frame-src 'self' *.hubspot.com *.doubleclick.net; child-src 'self'; font-src 'self' 'unsafe-inline' *.gstatic.com data: wss:; connect-src 'self' *.hubspot.com *.hubapi.com; report-uri /report-csp-violation
X-Content-Type-Options: nosniff
X-Drupal-Cache: HIT
X-Frame-Options: Allow-From http://www.huddle.com
X-Generator: Drupal 7 (https://www.drupal.org)
X-Pantheon-Styx-Hostname: styx-fe4-69bdfbfcdb-mcj74
X-Styx-Req-Id: styx-3e0d21f4db9dc16401675b526c864cd9
X-Webkit-Csp-Report-Only: default-src 'self'; script-src 'self' 'unsafe-inline' *.googleadservices.com *.bing.com *.googleapis.com *.google-analytics.com *.gstatic.com *.marketo.net *.googletagmanager.com *.zopim.com *.mktoresp.com *.bizographics.com *.toutapp.com *.newrelic.com *.linkedin.com *.nr-data.net *.hubspot.com 'unsafe-eval' unpkg.com/feather-icons *.hs-scripts.com *.visualwebsiteoptimizer.com *.hs-analytics.net *.hscollectedforms.net *.hsadspixel.net *.js.usemessages.com *.bootstrapcdn.com *.doubleclick.net *.albacross.com js.usemessages.com/conversations-embed.js js.hsforms.net/forms/v2.js; object-src *; style-src 'self' 'unsafe-inline' *.googleapis.com ; img-src *; media-src *; frame-src 'self' *.hubspot.com *.doubleclick.net; child-src 'self'; font-src 'self' 'unsafe-inline' *.gstatic.com data: wss:; connect-src 'self' *.hubspot.com *.hubapi.com; report-uri /report-csp-violation
X-Xss-Protection: 1; mode=block
Via: 1.1 varnish
Accept-Ranges: bytes
Date: Mon, 10 Jun 2019 10:38:21 GMT
Via: 1.1 varnish
Age: 275
X-Served-By: cache-mdw17337-MDW, cache-dal21232-DAL
X-Cache: HIT, MISS
X-Cache-Hits: 1, 0
X-Timer: S1560163101.464673,VS0,VE22
Vary: Accept-Encoding, Cookie, Cookie, Cookie