Cache-Control: no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=utf-8
Expires: -1
Server: 
X-Frame-Options: SAMEORIGIN
Set-Cookie: VisitorStatus=11062376956; expires=Mon, 03-Dec-2040 07:36:22 GMT; path=/; secure; HttpOnly
X-AspNet-Version: 4.0.30319
Content-Security-Policy: default-src 'self' *.scann3d.com.au *.raxcdn.com metricon.azureedge.net captur3d.io data:; script-src 'self' data: 'unsafe-inline' 'unsafe-eval' metricon.azureedge.net www.google.com.au www.googleadservices.com www.google-analytics.com www.googletagmanager.com maps.gstatic.com *.googleapis.com *.visualwebsiteoptimizer.com fast.fonts.net connect.facebook.net *.addthis.com *.addthisedge.com *.youtube.com *.ytimg.com embed.klipfolio.com *.google.com *.raxcdn.com *.productreview.com.au *.pingdom.net bat.bing.com js.adsrvr.org www.gstatic.com js-agent.newrelic.com *.adroll.com bam.nr-data.net *.doubleclick.net *.optmnstr.com *.optnmstr.com *.opmnstr.com *.mapbox.com *.surveygizmo.eu *.moatads.com *.consensu.org *.getsitecontrol.com *.googleadservices.com *.pinimg.com *.surveygizmo.eu; style-src 'self' 'unsafe-inline' metricon.azureedge.net fast.fonts.net *.googleapis.com *.raxcdn.com *.mapbox.com *.google.com; img-src * data: blob: *.facebook.com *.metricon.com.au metricon.com.au.dev *.visualwebsiteoptimizer.com *.raxcdn.com www.google-analytics.com stats.g.doubleclick.net maps.gstatic.com *.googleapis.com; font-src 'self' data: metricon.azureedge.net fast.fonts.net fonts.gstatic.com *.raxcdn.com *.productreview.com.au; connect-src 'self' metricon.azureedge.net *.metricon.com.au *.visualwebsiteoptimizer.com *.addthis.com *.mapbox.com www.google-analytics.com *.pingdom.net api.opmnstr.com *.doubleclick.net *.raxcdn.com *.amazonaws.com bam.nr-data.net *.productreview.com.au *.getsitecontrol.com *.facebook.com *.pinterest.com; object-src 'self' *.raxcdn.com metricon.azureedge.net *.metricon.com.au; frame-src 'self' captur3d.io *.raxcdn.com *.addthis.com *.facebook.com *.metricon.com.au *.youtube.com www.scann3d.com.au *.google.com *.fls.doubleclick.net *.productreview.com.au insight.adsrvr.org *.doubleclick.net www.visionabacus.net api.scann3d.com.au match.adsrvr.org *.surveygizmo.eu *.3dinsights.com.au *.matterport.com; worker-src blob: *.metricon.com.au; frame-ancestors 'self' metricon.com.au *.metricon.com.au
Referrer-Policy: no-referrer-when-downgrade
X-XSS-Protection: 1;mode=block
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Date: Thu, 03 Dec 2020 07:36:22 GMT