HTTP/1.1 200 OK
Cache-Control: private
Content-Length: 10842
Content-Type: text/html; charset=utf-8
Request-Context: appId=cid-v1:58408f54-3b48-4e47-8360-eee117809846
Access-Control-Expose-Headers: Request-Context
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
Strict-Transport-Security: max-age=31536000
Referrer-Policy: no-referrer-when-downgrade
Content-Security-Policy-Report-Only: default-src 'self'; media-src 'self' blob videos.ctfassets.net; connect-src 'self' gw.oribi.io api.addressy.com stats.g.doubleclick.net www.google-analytics.com performance.typekit.net dc.services.visualstudio.com in.hotjar.com pmvideo.streaming.mediaservices.windows.net widget.trustpilot.com *.contentful.com *.neverbounce.com; font-src 'self' *.neverbounce.com amp.azure.net fonts.gstatic.com use.typekit.net static.hotjar.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com ajax.googleapis.com www.google.com amp.azure.net; script-src 'self' 'unsafe-eval' 'unsafe-inline' cdn.oribi.io az416426.vo.msecnd.net use.typekit.net connect.facebook.net *.neverbounce.com script.hotjar.com www.googletagmanager.com www.google-analytics.com www.google.com widget.trustpilot.com amp.azure.net static.hotjar.com; img-src 'self' data: images.ctfassets.net gravatar.com 8223477.fls.doubleclick.net d15k2d11r6t6rl.cloudfront.net pmstorelive.blob.core.windows.net pmstoreuat.blob.core.windows.net p.typekit.net www.google.com www.googletagmanager.com stats.g.doubleclick.net www.google-analytics.com www.google.co.uk amp.azure.net www.facebook.com http://127.0.0.1:10000 static.hotjar.com; frame-src widget.trustpilot.com vars.hotjar.com www.facebook.com; worker-src 'self' blob: amp.azure.net; report-uri https://propertymaster.report-uri.com/r/d/csp/reportOnly;
Date: Tue, 03 Sep 2019 10:15:22 GMT