HTTP/1.1 200 OK
Cache-Control: max-age=604800
Content-Type: text/html
Last-Modified: Tue, 20 Aug 2019 08:41:01 GMT
Accept-Ranges: bytes
ETag: "8976bff3257d51:0"
Server: Microsoft-IIS/8.5
Content-Security-Policy: default-src https: 'self' 'unsafe-inline' 'unsafe-eval' *.jquery.com *.youtube.com *.google-analytics.com *.google.com maps.google.com *.googleapis.com *.webtraxs.com *.twitter.com *.facebook.com *.facebook.net *.linkedin.com *.jquery.com *.visualwebsiteoptimizer.com *.googleapis.com *.gstatic.com *.triadmagnetics.com *.hs-analytics.net *.hs-scripts.com *.hotjar.com *.g.doubleclick.net *.hubspot.com *.google-analytics.com *.google.com *.googletagmanager.com *.optimizely.com; img-src 'self' data: *.triadmagnetics.com *.googleapis.com *.gstatic.com *.google.com *.doubleclick.net *.hubspot.com *.google-analytics.com *.googletagmanager.com *.webtraxs.com *.twitter.com; frame-src 'self' *.brightcove.net *.youtube.com *.netcomponents.com *.facebook.com *.hotjar.com *.twitter.com;  font-src https: 'self' data: *.gstatic.com; object-src 'self' *.netcomponents.com *.facebook.com *.hotjar.com *.twitter.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.jquery.com  *.google-analytics.com *.google.com *.googleapis.com *.webtraxs.com *.twitter.com *.facebook.com *.facebook.net *.linkedin.com *.jquery.com *.visualwebsiteoptimizer.com *.googleapis.com .gstatic.com *.gstatic.com *.triadmagnetics.com *.hs-analytics.net *.hs-scripts.com *.hotjar.com *.g.doubleclick.net *.hubspot.com *.google-analytics.com *.google.com *.googletagmanager.com *.optimizely.com; 
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-XSS-Protection: 1; mode=block
Date: Tue, 15 Oct 2019 17:45:37 GMT
Content-Length: 34609