HTTP/1.1 200 OK
Cache-Control: private
Content-Type: text/html; charset=utf-8
Server: Microsoft-IIS/10.0
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Content-Security-Policy: default-src 'none';script-src 'self' 'unsafe-inline' 'unsafe-eval' ajax.googleapis.com ajax.aspnetcdn.com https://use.typekit.net https://maps.googleapis.com https://www.google.com/recaptcha/ http://www.google.com/recaptcha/ https://www.google-analytics.com https://cdnjs.cloudflare.com/ajax/libs/gsap/ https://www.gstatic.com/recaptcha/ https://www.googletagmanager.com/gtag/ https://platform.twitter.com https://cdn.syndication.twimg.com https://use.fontawesome.com/releases/v5.3.1/js/all.js http://maps.googleapis.com https://connect.facebook.net http://static.ads-twitter.com/uwt.js https://snap.licdn.com/li.lms-analytics/insight.min.js https://analytics.twitter.com https://px.ads.linkedin.com https://api2.heartlandportico.com https://www.google-analytics.com/analytics.js http://www.google-analytics.com/analytics.js http://js.hs-scripts.com https://js.hs-scripts.com http://js.hs-analytics.net https://js.hs-analytics.net https://js.hsadspixel.net https://js.hscollectedforms.net https://www.googleadservices.com https://googleads.g.doubleclick.net https://js.usemessages.com https://snap.licdn.com http://titan11127.pcapredict.com/js/sensor.js https://titan11127.pcapredict.com/js/sensor.js https://js.hscta.net/cta/current.js http://cta-service-cms2.hubspot.com http://*.inspectlet.com https://*.globaliris.com http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io https://*.purechat.com/;style-src 'self' 'unsafe-inline' maxcdn.bootstrapcdn.com https://fonts.googleapis.com http://fonts.googleapis.com https://use.typekit.net/oku2cnm.css https://p.typekit.net/p.css https://platform.twitter.com https://ton.twimg.com/tfw/css/ https://use.typekit.net https://use.fontawesome.com;img-src 'self' data: *;frame-src https://www.google.com/recaptcha/ https://www.google.com/maps/ https://platform.twitter.com https://syndication.twitter.com https://www.b2bquote.co.uk https://www.facebook.com https://*.hotjar.com https://*.hotjar.io https://*.hubspot.com http://www.youtube.com https://www.youtube.com;font-src 'self' https://use.typekit.net https://fonts.gstatic.com http://fonts.gstatic.com https://use.fontawesome.com http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io data: maxcdn.bootstrapcdn.com;connect-src 'self' localhost:* ws://localhost:* https://performance.typekit.net https://checkin.purechat.com/api/checkin https://www.facebook.com/tr/ https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.io wss://*.hotjar.com http://*.inspectlet.com wss://ws.inspectlet.com https://*.hubspot.com https://api.hubapi.com https://www.google-analytics.com/j/collect;form-action 'self' https://syndication.twitter.com/i/jot https://www.facebook.com https://test.sagepay.com https://live.sagepay.com https://*.globaliris.com;manifest-src 'self';upgrade-insecure-requests;report-uri /WebResource.axd?cspReport=true
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: Deny
Set-Cookie: f=XhZVZZ3mOIp0uCqM1rokn6NdIcU-aZGOFW1LrCFWun1p6v0tH52Vxsz9diEoQ5_rqvxpnbIjfBLqHvq6a96SQ-x2-bOL9oQfOBYPAiWhjZc1; path=/; secure; HttpOnly
Date: Fri, 20 Dec 2019 03:11:59 GMT
Content-Length: 34966