HTTP/1.1 200 OK
Date: Tue, 19 Jan 2021 16:52:37 GMT
Cache-Control: max-age=0, must-revalidate, private
X-Content-Type-Options: nosniff
Referrer-Policy: no-referrer, no-referrer-when-downgrade
X-Frame-Options: DENY
Content-Security-Policy: default-src 'self';block-all-mixed-content ;font-src 'self' data: fonts.googleapis.com fonts.gstatic.com use.typekit.net *.hotjar.com *.google.com 'self';img-src 'self' data: *.gstatic.com maps.googleapis.com mts.googleapis.com *.googletagmanager.com *.google.com *.google-analytics.com *.facebook.com *.albacross.com *.doubleclick.net *.google.be t.co *.hotjar.com *.hsforms.com *.hubspot.com *.hubspot.net wijs.be www.wijs.be 'self' *.linkedin.com 'self' blob: linkedin.com lh3.googleusercontent.com;script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleapis.com *.googletagmanager.com cdnjs.cloudflare.com www.google.com www.gstatic.com *.jquery.com *.hsforms.net *.hsforms.com *.hotjar.com *.google-analytics.com tagmanager.google.com connect.facebook.net *.licdn.com *.ads-twitter.com *.linkedin.com *.albacross.com *.twitter.com js.hs-scripts.com js.hs-analytics.net *.google.com 'self' *.vimeo.com https://unpkg.com/@google/model-viewer/dist/model-viewer-legacy.js https://unpkg.com/@google/model-viewer/dist/model-viewer.js js.usemessages.com https://pc4.dukeandgrace.com/hix.js http://s3-us-west-2.amazonaws.com/s.cdpn.io/16327/gsap-latest-beta.min.js http://s3-us-west-2.amazonaws.com/s.cdpn.io/16327/ScrollTrigger.min.js;style-src 'self' 'unsafe-inline' fonts.googleapis.com *.typekit.net tagmanager.google.com *.google.com 'self';report-uri /csp/violation/report;connect-src *.hotjar.com wss://ws2.hotjar.com/api/v1/client/ws *.hotjar.io *.wijsproject.be *.localhost *.albacross.com *.google-analytics.com *.wijs.be 'self' wss://ws3.hotjar.com/api/v1/client/ws *.doubleclick.net wss://ws6.hotjar.com/api/v1/client/ws api.hubspot.com pc4.dukeandgrace.com forms.hsforms.com ws3.hotjar.com/api/v2/client/ws blob:;frame-src www.youtube.com *.vimeo.com www.google.com *.hsforms.com *.hotjar.com *.facebook.com *.linkedin.com *.google.com 'self' *.figma.com app.hubspot.com;media-src dukeandgrace.localhost 'self' *.wijsproject.be wijs.be duke-and-grace.localhost *.wijs.be wijs-website.localhost;script-src-elem *.googleapis.com *.hsforms.net *.wijs.be *.googletagmanager.com *.google.com www.google-analytics.com js.hs-scripts.com static.hotjar.com snap.licdn.com *.linkedin.com connect.facebook.net server.albacross.com static.ads-twitter.com *.ads-twitter.com serve.albacross.com *.albacross.com *.hotjar.com *.hs-analytics.net *.hs-analytics.net/* analytics.twitter.com *.hsforms.com 'self' *.vimeo.com *.bizographics.com https://unpkg.com/@google/model-viewer/dist/model-viewer-legacy.js https://unpkg.com/@google/model-viewer/dist/model-viewer.js js.usemessages.com https://pc4.dukeandgrace.com/hix.js http://s3-us-west-2.amazonaws.com/s.cdpn.io/16327/gsap-latest-beta.min.js http://s3-us-west-2.amazonaws.com/s.cdpn.io/16327/ScrollTrigger.min.js cdnjs.cloudflare.com unpkg.com 'self' 'unsafe-inline';style-src-elem fonts.googleapis.com *.typekit.net use.typekit.net *.wijs.be 'unsafe-inline' *.google.com 'self' 'self'
X-Content-Security-Policy: default-src 'self';block-all-mixed-content ;font-src 'self' data: fonts.googleapis.com fonts.gstatic.com use.typekit.net *.hotjar.com *.google.com 'self';img-src 'self' data: *.gstatic.com maps.googleapis.com mts.googleapis.com *.googletagmanager.com *.google.com *.google-analytics.com *.facebook.com *.albacross.com *.doubleclick.net *.google.be t.co *.hotjar.com *.hsforms.com *.hubspot.com *.hubspot.net wijs.be www.wijs.be 'self' *.linkedin.com 'self' blob: linkedin.com lh3.googleusercontent.com;script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleapis.com *.googletagmanager.com cdnjs.cloudflare.com www.google.com www.gstatic.com *.jquery.com *.hsforms.net *.hsforms.com *.hotjar.com *.google-analytics.com tagmanager.google.com connect.facebook.net *.licdn.com *.ads-twitter.com *.linkedin.com *.albacross.com *.twitter.com js.hs-scripts.com js.hs-analytics.net *.google.com 'self' *.vimeo.com https://unpkg.com/@google/model-viewer/dist/model-viewer-legacy.js https://unpkg.com/@google/model-viewer/dist/model-viewer.js js.usemessages.com https://pc4.dukeandgrace.com/hix.js http://s3-us-west-2.amazonaws.com/s.cdpn.io/16327/gsap-latest-beta.min.js http://s3-us-west-2.amazonaws.com/s.cdpn.io/16327/ScrollTrigger.min.js;style-src 'self' 'unsafe-inline' fonts.googleapis.com *.typekit.net tagmanager.google.com *.google.com 'self';report-uri /csp/violation/report;connect-src *.hotjar.com wss://ws2.hotjar.com/api/v1/client/ws *.hotjar.io *.wijsproject.be *.localhost *.albacross.com *.google-analytics.com *.wijs.be 'self' wss://ws3.hotjar.com/api/v1/client/ws *.doubleclick.net wss://ws6.hotjar.com/api/v1/client/ws api.hubspot.com pc4.dukeandgrace.com forms.hsforms.com ws3.hotjar.com/api/v2/client/ws blob:;frame-src www.youtube.com *.vimeo.com www.google.com *.hsforms.com *.hotjar.com *.facebook.com *.linkedin.com *.google.com 'self' *.figma.com app.hubspot.com;media-src dukeandgrace.localhost 'self' *.wijsproject.be wijs.be duke-and-grace.localhost *.wijs.be wijs-website.localhost;script-src-elem *.googleapis.com *.hsforms.net *.wijs.be *.googletagmanager.com *.google.com www.google-analytics.com js.hs-scripts.com static.hotjar.com snap.licdn.com *.linkedin.com connect.facebook.net server.albacross.com static.ads-twitter.com *.ads-twitter.com serve.albacross.com *.albacross.com *.hotjar.com *.hs-analytics.net *.hs-analytics.net/* analytics.twitter.com *.hsforms.com 'self' *.vimeo.com *.bizographics.com https://unpkg.com/@google/model-viewer/dist/model-viewer-legacy.js https://unpkg.com/@google/model-viewer/dist/model-viewer.js js.usemessages.com https://pc4.dukeandgrace.com/hix.js http://s3-us-west-2.amazonaws.com/s.cdpn.io/16327/gsap-latest-beta.min.js http://s3-us-west-2.amazonaws.com/s.cdpn.io/16327/ScrollTrigger.min.js cdnjs.cloudflare.com unpkg.com 'self' 'unsafe-inline';style-src-elem fonts.googleapis.com *.typekit.net use.typekit.net *.wijs.be 'unsafe-inline' *.google.com 'self' 'self'
X-XSS-Protection: 1; mode=block
Expires: Tue, 19 Jan 2021 16:52:37 GMT
Set-Cookie: harmony_session=60b49a5a4f3bb7aceec7fe3a6047e3dd; path=/; secure; HttpOnly
Set-Cookie: harmony_identifier=927b943418bf5fb9cb96e289e5752a486a8e55ca; expires=Tue, 26-Jan-2021 16:52:37 GMT; Max-Age=604800; path=/; httponly
Set-Cookie: cookies_first_visit=1; expires=Tue, 26-Jan-2021 16:52:37 GMT; Max-Age=604800; path=/; httponly
Set-Cookie: hl=en.43c6e6414198d7c23a5a2f6c9a8c936aaf97f9077dfda88a1833a817b288eb79; expires=Wed, 19-Jan-2022 16:52:37 GMT; Max-Age=31536000; path=/
Strict-Transport-Security: max-age=31536000; preload
Feature-Policy: microphone 'none'; payment 'none'; sync-xhr 'self' https://dukeandgrace.com
Vary: Host,Accept-Encoding
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8