HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Set-Cookie: portal_session=iuscpsa9qpsu6u276kp9uso5b4; path=/; secure; HttpOnly
Cache-Control: must-revalidate, no-cache, no-store, private
X-Content-Security-Policy: frame-ancestors 'self' *.force.com *.salesforce.com;
Vary: Accept-Language
Set-Cookie: device_view=full; expires=Mon, 15-Jun-2020 00:00:00 GMT; Max-Age=2611715; path=/; HttpOnly
Pragma: no-cache
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: default-src 'self' 'unsafe-eval' blob: *.googleapis.com *.google.com *.mapbox.com *.cloudfront.net http://*.cloudfront.net *.google-analytics.com *.doubleclick.net *.google.co.uk *.intercomassets.com *.gstatic.com *.intercom.io *.intercomcdn.com *.cloudflare.com wss://*.intercom.io *.receptive.io receptive.io *.facebook.com *.fbsbx.com unpkg.com *.twimg.com https://feedback.eu.pendo.io *.purpleportal.net *.fbcdn.net https://*.amazonaws.com *.youtube.com *.pendo.io *.a3cloud.net https://*.purple.ai *.ggpht.com https://*.delighted.com *.googletagmanager.com https://*.blackfire.io https://*.venuewifi.net https://*.venuewifi.com data: 'unsafe-inline';
Strict-Transport-Security: maxage=31536000
Content-Length: 115869
Accept-Ranges: bytes
Date: Fri, 15 May 2020 18:31:25 GMT