HTTP/1.1 200 OK
Cache-Control: private
Content-Type: text/html; charset=utf-8
Set-Cookie: ASP.NET_SessionId=uc5rvipqw0dmnlipk4koknrv; path=/; secure; HttpOnly; SameSite=Lax
Strict-Transport-Security: max-age=31536000; includeSubDomains
Content-Security-Policy: font-src 'self' fonts.gstatic.com code.ionicframework.com mirvac-cdn-auth.azureedge.net mirvac-cdn-prd.azureedge.net netdna.bootstrapcdn.com data: *.salesforceliveagent.com www.mymirvac.com salesforce.com force.com  mymirvac.com *.mymirvac.com;img-src 'self' platform.venues.here.com www.google.com www.facebook.com www.google.com.au www.google-analytics.com maps.gstatic.com maps.googleapis.com scontent.cdninstagram.com www.pages03.net djqh0pophbxqy.cloudfront.net maps.micello.com stats.g.doubleclick.net mirvac-cdn-auth.azureedge.net mirvac-cdn-prd.azureedge.net data: www.tripadvisor.com.au static.tacdn.com d1emxpt2ul0h01.cloudfront.net *.cloudfront.net *.content.force.com *.force.com mirvac--c.ap17.content.force.com;script-src 'self' 'unsafe-inline' 'unsafe-eval' platform.venues.here.com cdn.polyfill.io maps.googleapis.com www.googletagmanager.com www.google-analytics.com contentz.mkt932.com ssl.google-analytics.com ajax.googleapis.com maxcdn.bootstrapcdn.com www.jscache.com www.tripadvisor.com www.tripadvisor.com.au api.instagram.com maps.micello.com www.google.com www.gstatic.com mirvac-rhodeswaterside.rezdy.com cdnjs.cloudflare.com www.eventbrite.com.au static.tacdn.com www.webscanningservice.com mirvac-cdn-auth.azureedge.net mirvac-cdn-prd.azureedge.net mirvac.my.salesforce.com service.force.com connect.facebook.net d.la2-c2-hnd.salesforceliveagent.com *.la2-c2-hnd.salesforceliveagent.com *.salesforceliveagent.com www.mymirvac.com salesforce.com force.com *.mymirvac.com mymirvac.com *.cloudfront.net;style-src 'self' 'unsafe-inline' fonts.googleapis.com platform.venues.here.com code.ionicframework.com code.jquery.com maps.micello.com static.tacdn.com www.webscanningservice.com mirvac-cdn-auth.azureedge.net mirvac-cdn-prd.azureedge.net data: netdna.bootstrapcdn.com service.force.com www.mymirvac.com mymirvac.com;
X-Frame-Options: SAMEORIGIN servedby.flashtalking.com mirvac-rhodeswaterside.rezdy.com service.force.com
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Referrer-Policy: no-referrer-when-downgrade
Set-Cookie: SC_ANALYTICS_GLOBAL_COOKIE=2a0df91eb8e342f982f244a5ff77472e|False; domain=mirvac.local|residential.sc.mirvac.com|residential.mirvac.com; expires=Fri, 19-Apr-2030 17:57:37 GMT; path=/; secure; HttpOnly
Set-Cookie: sxa_site=Rhodes; path=/; secure; HttpOnly
Date: Tue, 21 Apr 2020 17:57:39 GMT
Content-Length: 107695