HTTP/1.1 200 OK
Date: Fri, 01 May 2020 17:55:50 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=864000
Expires: Mon, 11 May 2020 17:55:50 GMT
Vary: Accept-Encoding
x-xss-protection: 1; mode=block
X-Content-Security-Policy: base-uri 'self'; connect-src 'self'; default-src 'self'; font-src 'self'; frame-ancestors 'self'; frame-src 'self'; img-src 'self'; manifest-src 'self'; media-src 'self'; object-src 'self'; script-src 'self'; style-src 'self';
Strict-Transport-Security: max-age=63072000; includeSubdomains; preload;
Referrer-Policy: strict-origin
X-Frame-Options: nosniff
Feature-Policy: microphone 'none'; payment 'none'; sync-xhr 'none'; geolocation 'none' ; midi 'none' ; camera 'none' ; magnetometer 'none' ; gyroscope 'none'; speaker 'self';  fullscreen 'self'
Content-Security-Policy: default-src 'self' 'unsafe-inline'; script-src 'self' https://static.hotjar.com https://script.hotjar.com https://use.fontawesome.com/releases/v5.0.8/js/all.js https://code.jquery.com/jquery-2.1.1.min.js  https://ajax.googleapis.com/ajax/libs/jqueryui/1.12.1/jquery-ui.min.js https://www.google-analytics.com/ https://ajax.googleapis.com/ajax/libs/jquery/1.12.4/jquery.min.js https://www.googletagmanager.com   ; style-src 'self' 'unsafe-inline' https://hello.myfonts.net/count/36c8c0 https://fonts.googleapis.com https://fonts.gstatic.com ; img-src 'self' https://stats.g.doubleclick.net/ https://www.google-analytics.com ; connect-src 'self'; font-src 'self' https://fonts.googleapis.com https://fonts.gstatic.com ; object-src 'none'; base-uri 'none'; media-src 'self'; form-action 'self'; frame-ancestors 'self'; frame-src 'self' https://vars.hotjar.com/ ;
X-Content-Type-Options: nosniff