HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Date: Thu, 18 Jul 2019 00:21:05 GMT
Server: OpenCRM
Set-Cookie: PHPSESSID=j3p7j5s8ksa93d6k7kigtdnsn4; path=/; secure; HttpOnly
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Link: <https://opencrm.co.uk/wp-json/>; rel="https://api.w.org/"
Link: <https://opencrm.co.uk/>; rel=shortlink
Content-Security-Policy: default-src https: 'unsafe-inline' 'unsafe-eval' wss://*.dashly.app; img-src * data:; script-src 'self' *.dashly.app djtflbt20bdde.cloudfront.net *.heatmap.it *.bing.com *.googletagmanager.com *.facebook.net *.twitter.com apis.google.com *.cloudflare.com *.jotformpro.com *.jotform.com *.jotfor.ms cdn.jsdelivr.net *.jotformeu.com *.tawk.to *.hotjar.com *.google-analytics.com customerportal.opencrm.co.uk *.google.com *.gstatic.com bat.bing.com *.googletagmanager.com 'unsafe-inline' 'unsafe-eval'; child-src 'self' *.facebook.net *.twitter.com apis.google.com *.cloudflare.com *.jotformpro.com *.jotform.com *.jotfor.ms cdn.jsdelivr.net *.jotformeu.com *.tawk.to bat.bing.com *.googletagmanager.com *.youtube.com *.google.com *.gstatic.com https:; frame-ancestors 'self' *; connect-src wss: 'self' *.dashly.app *.yoast.com *.tawk.to *.twitter.com *.hotjar.com *.google.com *.gstatic.com bat.bing.com *.googletagmanager.com; font-src https: data: *.opencrm.co.uk *.gstatic.com *.tawk.to *.google.com *.gstatic.com bat.bing.com *.googletagmanager.com;
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Referrer-Policy: no-referrer-when-downgrade
Expect-CT: enforce, max-age=30
X-Content-Security-Policy: default-src https: 'unsafe-inline' 'unsafe-eval' wss://*.dashly.app; img-src * data:; script-src 'self' *.dashly.app djtflbt20bdde.cloudfront.net *.heatmap.it *.bing.com *.googletagmanager.com *.facebook.net *.twitter.com apis.google.com *.cloudflare.com *.jotformpro.com *.jotform.com *.jotfor.ms cdn.jsdelivr.net *.jotformeu.com *.tawk.to *.hotjar.com *.google-analytics.com customerportal.opencrm.co.uk *.google.com *.gstatic.com bat.bing.com *.googletagmanager.com 'unsafe-inline' 'unsafe-eval'; child-src 'self' *.facebook.net *.twitter.com apis.google.com *.cloudflare.com *.jotformpro.com *.jotform.com *.jotfor.ms cdn.jsdelivr.net *.jotformeu.com *.tawk.to bat.bing.com *.googletagmanager.com *.youtube.com *.google.com *.gstatic.com https:; frame-ancestors 'self' *; connect-src wss: 'self' *.dashly.app *.yoast.com *.tawk.to *.twitter.com *.hotjar.com *.google.com *.gstatic.com bat.bing.com *.googletagmanager.com; font-src https: data: *.opencrm.co.uk *.gstatic.com *.tawk.to *.google.com *.gstatic.com bat.bing.com *.googletagmanager.com;
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: OpenCRM
X-Cache: Miss from cloudfront
Via: 1.1 260251f69062a79f1fbe5486d2639aff.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: DFW3-C1
X-Amz-Cf-Id: WqBKhcWkww_umqXxKwhVVzsS8HcFvhXb7okERQDvlGzcEZ3Xu2pZUg==