HTTP/1.1 200 OK
Server: nginx/1.17.8
Date: Fri, 07 Aug 2020 09:10:22 GMT
Content-Type: text/html
Content-Length: 1724
Last-Modified: Tue, 26 May 2020 17:36:03 GMT
Connection: keep-alive
Vary: Accept-Encoding
ETag: "5ecd5383-6bc"
Content-Security-Policy: base-uri 'none'; default-src 'none'; style-src *.joinboulevard.com  *.joinboulevard.io  *.boulevard.com  *.boulevard.io *.optimand.com cdn.jsdelivr.net *.cloudflare.com fonts.googleapis.com 'unsafe-inline' 'self' blob: https://netdna.bootstrapcdn.com *.bootstrapcdn.com https://use.fontawesome.com cc-cdn.com ; frame-src 'self' *.joinboulevard.com  *.joinboulevard.io  *.boulevard.com  *.boulevard.io *.optimand.com player.vimeo.com *.youtube.com youtube.com *.firebaseio.com; manifest-src  'self'; script-src *.jquery.com connect.facebook.net d2ztzch1on49qv.cloudfront.net *.joinboulevard.com  *.joinboulevard.io  *.boulevard.com  *.boulevard.io *.optimand.com *.cloudflare.com *.bootstrapcdn.com https://www.gstatic.com cdn.jsdelivr.net 'unsafe-inline' 'self' *.firebaseio.com https://www.google-analytics.com cc-cdn.com 'unsafe-eval'   ; img-src *.joinboulevard.com  *.joinboulevard.io  *.boulevard.com  *.boulevard.io *.optimand.com 'self' https: data: blob: cc-cdn.com  ;font-src 'self' data: https:; connect-src 'self' blob: wss: googleapis.com *.googleapis.com https://hclub.com:8080 http://hclub.com:8080 https://api.craftyclicks.co.uk *.amazonaws.com ; frame-ancestors 'self' youtube.com *.youtube.com; media-src *.joinboulevard.com  *.joinboulevard.io  *.boulevard.com  *.boulevard.io *.optimand.com 'self'; object-src 'self';
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Accept-Ranges: bytes