HTTP/1.1 200 OK
Server: nginx
Date: Sun, 26 Jun 2022 17:50:34 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 140292
Connection: keep-alive
Vary: Accept-Encoding
x-nextjs-cache: HIT
X-Powered-By: Next.js
ETag: "22404-pOX75Zwz3b8BmcJg6RL/Gmz5uqU"
Cache-Control: s-maxage=31536000, stale-while-revalidate
Vary: Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Public-Key-Pins: pin-sha256="uGS6BryHyqwUpmtO9athvdOwh1ZdySZSe8Oy34kyG4g="; pin-sha256="JRWVeBVjpju4yD/EXkJEWHsnvbMQyGXB6pxtso/cxFc="; pin-sha256="lSqtN6dwHBqe1uOqlikc88l8EYCVFKT6B6Fn/R10XaE="; pin-sha256="k1VdmcuPhxuKBBlU+7lRo8R7ElgwWLVcdF/lu309/VI="; pin-sha256="EskfQgb+D292n2yh0A286/CkG5omOaRB+R4GiMRMzb8="; pin-sha256="B5PQ6z60woVtbvhTda4HV2V2lZuWO/Fs9nPbZh58zNI="; max-age=5184000;
Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval' *.midphase.com *.uk2group.com request.eprotect.vantivprelive.com request.eprotect.vantivcnp.com http://static.hotjar.com https://static.hotjar.com https://script.hotjar.com *.dwin1.com *.hsforms.com *.hsforms.net *.puzzel.com *.google.com *.google.co.uk *.googleapis.com *.gdmdigital.com *.bing.com *.jquery.com platform.linkedin.com www.linkedin.com platform.twitter.com *.pingdom.net *.websitealive.com m.addthisedge.com ssl.google-analytics.com *.addthis.com *.trustpilot.com *.cloudfront.net *.visualwebsiteoptimizer.com *.adroll.com *.facebook.net www.googleadservices.com *.qualtrics.com www.google.com apis.google.com www.googletagmanager.com www.google-analytics.com cdn.syndication.twimg.com syndication.twitter.com platform.twitter.com fp.gdmdigital.com connect.facebook.net app.yieldify.com yieldify.com www.gstatic.com *.cloudfront.net tracking.websitealive.com secure.adnxs.com  www.youtube.com s.ytimg.com; img-src 'self' *.midphase.com *.uk2group.com *.puzzel.com *.bing.com www.linkedin.com *.gravatar.com ssl.google-analytics.com *.pingdom.net *.websitealive.com *.adroll.com *.licdn.com *.twimg.com *.bidswitch.net *.rlcdn.com *.licdn.com www.privacytrust.com *.twitter.com *.openx.net *.doubleclick.net *.cloudfront.net *.adnxs.com go.flx1.com pbs.twimg.com platform.twitter.com *.facebook.com csi.gstatic.com syndication.twitter.com s.c.lnkd.licdn.com *.etrust.org *.gstatic.com 55b558c7-resources.bk-partnersasia.com *.visualwebsiteoptimizer.com www.google-analytics.com www.facebook.com www.google.com www.google.co.uk stats.g.doubleclick.net data: https://script.hotjar.com http://script.hotjar.com; style-src 'self' 'unsafe-inline' *.midphase.com *.twitter.com *.puzzel.com *.google.com *.pingdom.net *.websitealive.com fonts.googleapis.com maxcdn.bootstrapcdn.com *.cloudfront.net; frame-src 'self' *.midphase.com cdn.forms-content.sg-form.com *.uk2group.com *.puzzel.com *.hsforms.com *.hsforms.net *.facebook.net *.facebook.com https://vars.hotjar.com *.twitter.com *.websitealive.com staticxx.facebook.com *.addthis.com *.trustpilot.com *.google.com www.youtube.com app.yieldify.com accounts.google.com apis.google.com www.facebook.com; connect-src 'self' *.sentry.io mw-uk2-uat.thehut.net mw.thghosting.com *.midphase.com m.addthis.com *.puzzel.com *.trustpilot.com *.pingdom.net *.twitter.com ws://127.0.0.1:35729 http://*.hotjar.com:* https://*.hotjar.com:* https://vc.hotjar.io:* https://surveystats.hotjar.io wss://*.hotjar.com *.visualwebsiteoptimizer.com geo.yieldify.com mw.thghosting.com bat.bing.com; font-src 'self' data: *.midphase.com http://script.hotjar.com https://script.hotjar.com *.puzzel.com fonts.gstatic.com maxcdn.bootstrapcdn.com stats.g.doubleclick.net; default-src 'self' 'unsafe-inline' 'unsafe-eval' *.midphase.com *.puzzel.com; frame-ancestors 'self';
Strict-Transport-Security: max-age=63072000; includeSubDomains