HTTP/2 200 accept-ranges: bytes access-control-allow-origin: https://www.bmigroup.com age: 2 cache-control: public,max-age=0,must-revalidate cache-status: "Netlify Edge"; fwd=stale content-encoding: gzip content-security-policy: default-src 'self' https: https://bmidxbgroupcprod.netlify.app https://bmidxbgroupplprod.netlify.app https://*.cookielaw.org; script-src 'self' https://bmidxbgroupcprod.netlify.app https://bmidxbgroupplprod.netlify.app https://cdnjs.cloudflare.com https://www.facebook.com https://connect.facebook.net https://www.googleadservices.com https://www.google.com https://*.googletagmanager.com https://googleads.g.doubleclick.net 'unsafe-inline' 'unsafe-eval' https://*.googleapis.com https://*.gstatic.com *.google.com https://*.ggpht.com *.googleusercontent.com https://www.google-analytics.com https://www.recaptcha.net/recaptcha/ https://www.gstatic.com/recaptcha/ https://*.hotjar.com https://*.hsforms.com https://*.hsforms.net https://*.hubspot.com https://*.hsleadflows.net https://js.hscta.net https://js-eu1.hscta.net https://js.hs-scripts.com https://js-eu1.hs-scripts.com https://*.hs-banner.com https://js-eu1.hs-banner.com https://*.hscollectedforms.net https://js-eu1.hscollectedforms.net https://js.hs-analytics.net https://js-eu1.hs-analytics.net https://*.hsadspixel.net https://vc.hotjar.io https://*.usemessages.com https://static.hsappstatic.net https://*.hubspotfeedback.com https://feedback.hubapi.com https://feedback-eu1.hubapi.com https://*.leadoo.com https://snap.licdn.com https://px.ads.linkedin.com https://*.mopinion.com https://*.mouseflow.com https://*.cookielaw.org https://*.outbrain.com https://cdn.speedcurve.com https://js.adsrvr.org https://*.ads-twitter.com https://www.youtube.com https://*.visualwebsiteoptimizer.com https://app.vwo.com; style-src 'self' https://bmidxbgroupcprod.netlify.app https://bmidxbgroupplprod.netlify.app 'unsafe-inline' https://fonts.googleapis.com https://*.hotjar.com https://*.leadoo.com https://*.mopinion.com https://*.cookielaw.org; img-src 'self' https://bmidxbgroupcprod.netlify.app https://bmidxbgroupplprod.netlify.app https://pim-cdn.bmigroup.com https://bmipimngprodtfe.azureedge.net https://store.bmigroup.com https://images.ctfassets.net https://dxb-group.payloadcms.app https://*.dcbstatic.com/ https://*.facebook.com https://servedby.flashtalking.com/ https://*.g.doubleclick.net https://*.google.com https://google.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.google.ae https://*.google.al https://*.google.at https://*.google.ba https://*.google.be https://*.google.bg https://*.google.ch https://*.google.cn https://*.google.cz https://*.google.de https://*.google.dk https://*.google.ee https://*.google.es https://*.google.fi https://*.google.fr https://*.google.hr https://*.google.hu https://*.google.co.id https://*.google.ie https://*.google.co.in https://*.google.it https://*.google.lt https://*.google.lv https://*.google.com.my https://*.google.nl https://*.google.no https://*.google.pl https://*.google.pt https://*.google.ro https://*.google.se https://*.google.si https://*.google.sk https://*.google.com.tr https://*.google.co.uk https://*.google.rs https://*.google.co.za https://*.fls.doubleclick.net https://ad.doubleclick.net https://ade.googlesyndication.com blob: data: https://*.googleapis.com https://*.gstatic.com *.google.com *.googleusercontent.com https://*.hotjar.com https://f.hubspotusercontent00.net https://*.fs1.hubspotusercontent-na1.net https://*.hubspot.com https://*.hsforms.com https://js.hscta.net https://js-eu1.hscta.net https://*.hsforms.net https://static.hsappstatic.net https://*.leadoo.com https://*.linkedin.com https://p.adsymptotic.com https://*.mopinion.com https://*.mouseflow.com https://*.cookielaw.org https://*.outbrain.com https://lux.speedcurve.com https://analytics.twitter.com https://t.co/i/adsct https://i.ytimg.com https://*.visualwebsiteoptimizer.com https://app.vwo.com https://useruploads.vwo.io; media-src 'self' https://bmidxbgroupcprod.netlify.app https://bmidxbgroupplprod.netlify.app https://pim-cdn.bmigroup.com https://bmipimngprodtfe.azureedge.net https://store.bmigroup.com https://assets.ctfassets.net https://downloads.ctfassets.net https://videos.assets.ctfassets.net https://*.leadoo.com https://*.cookielaw.org; connect-src 'self' https://bmidxbgroupcprod.netlify.app https://bmidxbgroupplprod.netlify.app https://bmi-dxb-search-prod.es.europe-west3.gcp.cloud.es.io:* https://europe-west3-bmi-p-dxb-compute-eu-west.cloudfunctions.net https://pim-cdn.bmigroup.com https://bmipimngprodtfe.azureedge.net https://store.bmigroup.com https://assets.ctfassets.net https://*.googleapis.com https://dxb-group.payloadcms.app https://*.intouch.bmigroup.com https://cdnjs.cloudflare.com https://www.facebook.com/tr/ https://www.googleadservices.com https://pagead2.googlesyndication.com https://*.google-analytics.com https://*.google.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.google.ae https://*.google.al https://*.google.at https://*.google.ba https://*.google.be https://*.google.bg https://*.google.ch https://*.google.cn https://*.google.cz https://*.google.de https://*.google.dk https://*.google.ee https://*.google.es https://*.google.fi https://*.google.fr https://*.google.hr https://*.google.hu https://*.google.co.id https://*.google.ie https://*.google.co.in https://*.google.it https://*.google.lt https://*.google.lv https://*.google.com.my https://*.google.nl https://*.google.no https://*.google.pl https://*.google.pt https://*.google.ro https://*.google.se https://*.google.si https://*.google.sk https://*.google.com.tr https://*.google.co.uk https://*.google.rs https://*.google.co.za data: blob: *.google.com https://*.gstatic.com https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com https://*.hubapi.com https://*.hs-banner.com https://hubspot-forms-static-embed.s3.amazonaws.com https://*.hsforms.com https://*.hubspot.com https://*.hscollectedforms.net https://js.hscta.net https://js-eu1.hscta.net https://*.leadoo.com https://px.ads.linkedin.com https://*.mopinion.com https://*.mouseflow.com https://noembed.com https://*.cookielaw.org https://*.onetrust.com https://tr.outbrain.com https://amplify.outbrain.com https://lux.speedcurve.com https://*.visualwebsiteoptimizer.com https://app.vwo.com; frame-src 'self' https://bmidxbgroupcprod.netlify.app https://bmidxbgroupplprod.netlify.app https://images.ctfassets.net https://dxb-group.payloadcms.app https://access.intouch.bmigroup.com https://*.bimobject.com https://*.facebook.com https://*.facebook.net https://www.googletagmanager.com https://bid.g.doubleclick.net https://td.doubleclick.net https://*.fls.doubleclick.net *.google.com https://www.google.com/recaptcha/ https://www.recaptcha.net/recaptcha/ https://recaptcha.google.com/recaptcha/ https://heyzine.com/flip-book/ https://*.hotjar.com https://*.hsforms.com https://*.hsforms.net https://app.hubspot.com *.hubspot.com *.hs-sites.com *.hs-sites-eu1.com https://*.leadoo.com https://*.linkedin.com https://*.mopinion.com https://*.mouseflow.com https://*.cookielaw.org https://s.pointerpro.com https://*.surveyanyplace.com https://sketchfab.com/models/ https://my.walls.io https://www.youtube.com https://*.visualwebsiteoptimizer.com https://app.vwo.com; font-src 'self' https://bmidxbgroupcprod.netlify.app https://bmidxbgroupplprod.netlify.app https: data: https://fonts.gstatic.com https://*.hotjar.com https://res.leadoo.com https://*.mopinion.com https://*.mouseflow.com; child-src 'self' https://bmidxbgroupcprod.netlify.app https://bmidxbgroupplprod.netlify.app https://*.hsforms.com https://*.mouseflow.com; worker-src 'self' https://bmidxbgroupcprod.netlify.app https://bmidxbgroupplprod.netlify.app blob:; frame-ancestors 'none'; object-src 'self' https://bmidxbgroupcprod.netlify.app https://bmidxbgroupplprod.netlify.app; manifest-src 'self' https://bmidxbgroupcprod.netlify.app https://bmidxbgroupplprod.netlify.app; form-action 'self' https://bmidxbgroupcprod.netlify.app https://bmidxbgroupplprod.netlify.app https://europe-west3-bmi-p-dxb-compute-eu-west.cloudfunctions.net https://*.hsforms.com https://forms-eu1.hubspot.com https://forms.hubspot.com content-type: text/html; charset=UTF-8 date: Sat, 31 Jan 2026 13:34:14 GMT etag: "322048b69fcc47a4a49af68aca8eb8eb-ssl-df" referrer-policy: strict-origin-when-cross-origin server: Netlify strict-transport-security: max-age=31536000 vary: Accept-Encoding x-content-type-options: nosniff x-frame-options: DENY x-nf-request-id: 01KGA45RT422B3YV9MG5HKW7KP x-robots-tag: all x-xss-protection: 1; mode=block