Hbf.com.au Summary

Cache-Control: no-cache, no-store
Pragma: no-cache
Content-Type: text/html; charset=utf-8
Expires: -1
Server: Microsoft-IIS/8.5
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=63072000
Content-Security-Policy-Report-Only: connect-src 'self' data s.yimg.com hbf.sitecore localhost:* *.doubleclick.net pubsub.googleapis.com wss://*.visitors.live wss://visitors.live *.visitors.live *.liveperson.net *.akamaihd.net *.lkqd.net ads.adaptv.advertising.com public-auth-dot-lucky-orange.appspot-preview.com *.google-analytics.com settings.luckyorange.net *.pingdom.net *.hbf.com.au *.google.com createsend.com everydayhero.com trc.taboola.com www.googletagmanager.com api.luckyorange.com distillery.wistia.com pipedream.wistia.com *.litix.io bat.bimg.com trc-events.taboola.com;default-src 'self' blob data *.hbf.com.au sik1i8c69.cloudfront.net d10lpsik1i8c69.cloudfront.net *.pingdom.net settings.luckyorange.net fast.wistia.net lpcdn.lpsnmedia.net;frame-src 'self' www.youtube.com www.facebook.com connect.facebook.net *.flashtalking.com fast.wistia.net *.doubleclick.net *.lpsnmedia.net *.google.com *.yahoo.com *.liveperson.net gateway.zscloud.net  pwm-image.trendmicro.com tpc.googlesyndication.com *.googletagmanager.com fast.wistia.com platform.twitter.com syndication.twitter.com platform.twitter.com;object-src 'self' *.hbf.com.au *.hbfrun.com.au;style-src 'self' 'unsafe-inline' *.google.com maxcdn.bootstrapcdn.com fonts.googleapis.com d10lpsik1i8c69.cloudfront.net *.liveperson.net cdn.loop11.com pwm-image.trendmicro.com s.cmptch.com s.pmqzads.com platform.twitter.com;script-src 'self' blob 'unsafe-eval' 'unsafe-inline' data: www.youtube.com *.google.com maps.googleapis.com tracker.departapp.com api.microsofttranslator.com s.ytimg.com sbx-media.com z.moatads.com ad.lkqd.net ds-aksb-a.akamaihd.net *.outbrain.com d10lpsik1i8c69.cloudfront.net fls.doubleclick.net img.en25.com analytics.twitter.com static.ads-twitter.com ajax.googleapis.com *.cloudfront.net  *.demdex.net bat.bing.com accdn.lpsnmedia.net assets.adobedtm.com connect.facebook.net googleads.g.doubleclick.net lpcdn.lpsnmedia.net lptag.liveperson.net rum-collector-2.pingdom.net rum-static.pingdom.net s.yimg.com smetrics.hbf.com.au sp.analytics.yahoo.com stats.g.doubleclick.net sy.v.liveperson.net www.facebook.com www.google-analytics.com www.google.com www.google.com.au www.googleadservices.com www.googletagmanager.com www.sbx-media.com *.liveperson.net *.trendmicro.com cdn-javascript.net cdn-js.net cdnjs.cloudflare.com colextidapp.com snap.licdn.com fast.wistia.com fast.wistia.net fp166.digitaloptout.com gateway.zscalerone.net intext.nav-links.com majuwe.com mobiclean.xyz *.cmptch.com tpc.googlesyndication.com cdn.taboola.com ssl.bing.com platform.twitter.com cdn.syndication.twimg.com trc.taboola.com p.teads.tv;img-src 'self' *.hbf.com.au *.gstatic.com maps.gstatic.com *.adsymptotic.com *.outbrain.com bat.bing.com cx.atdmt.com maps.googleapis.com www.google.co.nz lpcdn.lpsnmedia.net secure.adnxs.com d10lpsik1i8c69.cloudfront.net ds-aksb-a.akamaihd.net *.eloqua.com data: t.co *.cloudfront.net *.facebook.com *.google.com.au *.google.com *.googletagmanager.com *.bing.com *.google-analytics.com *.doubleclick.net *.hbffitness.com.au *.google.com.sg syndication.twitter.com *.twimg.com platform.twitter.com i.imgur.com fast.wistia.com px.ads.linkedin.com gateway.zscaler.net *.akamaihd.net *.goole.co.in *.google.co.uk *.google.be blank t.teads.tv cds.taboola.com;font-src data: 'self' maxcdn.bootstrapcdn.com fonts.gstatic.com *.googleusercontent.com s3.amazonaws.com;child-src blob; report-uri https://hbfweb.report-uri.com/r/d/csp/reportOnly
X-Content-Type-Options: nosniff
X-OneAgent-JS-Injection: true
X-ruxit-JS-Agent: true
Vary: Accept-Encoding
Date: Sun, 22 Nov 2020 20:01:18 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Connection: Transfer-Encoding
Set-Cookie: sc_device=Desktop; path=/
Set-Cookie: sc_loc=OS; path=/
Set-Cookie: sc_locp=OS; path=/
Set-Cookie: sc_locx=1; path=/
Set-Cookie: ASP.NET_SessionId=mk3e4njofmazeiq1r254hrmh; path=/; HttpOnly; SameSite=Lax
Set-Cookie: sc_device=Desktop; path=/
Set-Cookie: sc_loc=OS; path=/
Set-Cookie: sc_locp=OS; path=/
Set-Cookie: sc_locx=1; path=/
Set-Cookie: ASP.NET_SessionId=mk3e4njofmazeiq1r254hrmh; path=/; HttpOnly; SameSite=Lax
Set-Cookie: quote=quoteid=bjAD7N8jyEKC/kTvgjHcMg=="e=lxbINwMPwndH88S7BynRDrXzSqrYGq3G+uGaOHdjmJuTjwIc+kJEX6fNrXfvn09P59lTHUXsKuBJzrJHhOr2FG812u7dQlnw4jZqZLPcgB6De2nQNXHW6awYkCd2OTAqUvgydkxuRkiNDsNjfJz+/IMRzYRiLz9m4OYErdJFqp8JfpJ1S4FuPQBxevC+2GYA; expires=Thu, 21-Jan-2021 20:01:17 GMT; path=/
Set-Cookie: SC_ANALYTICS_GLOBAL_COOKIE=a9af816390324fbdacdb3f865b979be4|False; expires=Wed, 20-Nov-2030 20:01:17 GMT; path=/; HttpOnly
Set-Cookie: quote=quoteid=bjAD7N8jyEKC/kTvgjHcMg=="e=lxbINwMPwndH88S7BynRDrXzSqrYGq3G+uGaOHdjmJuXsxj8b8/cOC1GxhnVv++QnqILZ7enfMGfbJUmQXdzv+y9k/hFV6PB97Nnrv4i0wbAEtd7A/fNG8B4sFzbUOC8PhPHY9DQ6S28jhMb7qosmU0DhdBCpFUuFP0rz5ADXK8MftL7G+U7qKCyQ+S4LPrD; expires=Thu, 21-Jan-2021 20:01:17 GMT; path=/
Set-Cookie: quote=quoteid=bjAD7N8jyEKC/kTvgjHcMg=="e=lxbINwMPwndH88S7BynRDrXzSqrYGq3G+uGaOHdjmJuXsxj8b8/cOC1GxhnVv++QnqILZ7enfMGfbJUmQXdzv+y9k/hFV6PB97Nnrv4i0wbAEtd7A/fNG8B4sFzbUOC8PhPHY9DQ6S28jhMb7qosmU0DhdBCpFUuFP0rz5ADXK8MftL7G+U7qKCyQ+S4LPrD; expires=Thu, 21-Jan-2021 20:01:17 GMT; path=/
Set-Cookie: Bootstrap=1; path=/
Set-Cookie: __RequestVerificationToken=EvSdhysg3s8JC1oIxGE5X5PP8Ymmz0_E0XmDAR1lBD9-qhjMY2akTP4OnTCHGBY0aN76X5C7WyIsmJ72_WSY4zY4stmA1iVUfN5SVgxX_GE1; path=/; HttpOnly
Set-Cookie: dtCookie=v_4_srv_1_sn_2F9E157768077BD309404150AB2E7EF5_perc_100000_ol_0_mul_1; Path=/; Domain=.hbf.com.au
Set-Cookie: HBFCOMAU=1493834156.20480.0000; expires=Sun, 22-Nov-2020 20:06:18 GMT; path=/; Httponly; Secure
x-encoded-content-encoding: gzip