HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Content-Length: 5812
Connection: keep-alive
Date: Sat, 22 May 2021 14:37:19 GMT
Server: Apache/2.4.46 () OpenSSL/1.0.2k-fips
Last-Modified: Wed, 19 May 2021 11:14:22 GMT
ETag: "16b4-5c2acedb85f80"
Accept-Ranges: bytes
Strict-Transport-Security: max-age=63072000; includeSubdomains; preload
Content-Security-Policy: default-src 'none';     connect-src 'self' *.peoplesenergy.co.uk peoplesenergy.co.uk  *.google-analytics.com *.m-t.io *.g.doubleclick.net *.facebook.com *.facebook.net *.gstatic.com *.pvnsolutions.com *.getsitecontrol.com *.hotjar.com *.hotjar.co *.hotjar.io;                                                       style-src   'self' *.peoplesenergy.co.uk peoplesenergy.co.uk  fonts.googleapis.com  *.google.com  'unsafe-inline' *.freshchat.com *.eu.freshchat.com *.gstatic.com *.googletagmanager.com;              script-src  'self' 'unsafe-inline' 'unsafe-eval' *.peoplesenergy.co.uk peoplesenergy.co.uk *.adnxs.com *.google-analytics.com *.googletagmanager.com *.google.com *.gstatic.com *.m-t.io widget.trustpilot.com *.m-t.io *.facebook.com *.facebook.net *.freshchat.com *.eu.freshchat.com *.adalyser.com *.tradedoubler.com *.getsitecontrol.com *.bing.com *.hotjar.com *.hotjar.co *.hotjar.io;     img-src     'self' *.peoplesenergy.co.uk peoplesenergy.co.uk  *.adnxs.com *.google-analytics.com *.googletagmanager.com *.google.com *.google.co.uk *.googleusercontent.com *.gstatic.com stats.g.doubleclick.net *.freshchat.com *.eu.freshchat.com *.facebook.com *.facebook.net *.adalyser.com *.getsitecontrol.com *.hotjar.com *.hotjar.co *.hotjar.io data:;                        media-src   'self' *.peoplesenergy.co.uk peoplesenergy.co.uk;                                                       font-src    'self' *.peoplesenergy.co.uk peoplesenergy.co.uk  fonts.gstatic.com *.hotjar.com *.hotjar.co *.hotjar.io;                                    form-action 'self' *.peoplesenergy.co.uk peoplesenergy.co.uk  forms.zohopublic.eu *.facebook.com *.facebook.net;                                  frame-src   'self' *.peoplesenergy.co.uk peoplesenergy.co.uk  *.google.com *.facebook.com *.facebook.net forms.zohopublic.eu widget.trustpilot.com *.freshchat.com *.eu.freshchat.com *.freshdesk.com *.youtube.com *.youtube-nocookie.com *.bamboohr.com *.fls.doubleclick.net *.tradedoubler.com tradedoubler.com *.hotjar.com *.hotjar.co *.hotjar.io;     object-src 'none'
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-XSS-Protection: 1; mode=block
Referrer-Policy: same-origin
Vary: Accept-Encoding
X-Cache: Miss from cloudfront
Via: 1.1 871abd31ed2f2a8508f2e7a8d31ba421.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: DFW3-C1
X-Amz-Cf-Id: ScVtuAU85wAz5fqGZ8tOtnpduk5lZpXbaA1HDrKu6K7HqrFmN3CY1A==