HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Link: <https://www.brewin.co.uk/>; rel="canonical", <https://www.brewin.co.uk/>; rel="shortlink", <https://www.brewin.co.uk/>; rel="alternate"; hreflang="en"
Content-Security-Policy: default-src 'self' *.brightcove.com stats.g.doubleclick.net viz.tools.investis.com *.google-analytics.com *.google.com *.google.co.uk *.jsdelivr.net *.brewin.co.uk *.marketo.com *.googleapis.com *.hotjar.io *.facebook.com *.onetrust.com *.googleadservices.com *.googletagmanager.com s.yimg.com sp.analytics.yahoo.com *.google.co.in *.bing.com wss: *.hotjar.com *.responsetap.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' sp.analytics.yahoo.com cdnjs.cloudflare.com ict.infinity-tracking.net www.gstatic.com viz.tools.investis.com *.google.com *.google.co.uk maps.googleapis.com maps.google.com www.linkedin.com ajax.googleapis.com pi.pardot.com bam.nr-data.net *.googletagmanager.com *.google-analytics.com *.facebook.net *.jquery.com irs.tools.investis.com *.hotjar.com px.ads.linkedin.com d2wy8f7a9ursnm.cloudfront.net ssl.p.jwpcdn.com js-agent.newrelic.com *.jsdelivr.net edge.api.brightcove.com *.googleapis.com www.youtube.com s.yimg.com s.ytimg.com unpkg.com *.brewin.co.uk *.marketo.com *.googleadservices.com *.licdn.com *.doubleclick.net player.vimeo.com https://www.google.co.in  optimize.google.com acdn.adnxs.com secure.adnxs.com *.onetrust.com *.bing.com *.responsetap.com otp.tools.investis.com; style-src 'self' 'unsafe-inline' 'unsafe-eval' tagmanager.google.com p.typekit.net developers.google.com viz.tools.investis.com fonts.googleapis.com fonts.gstatic.com maxcdn.bootstrapcdn.com cdnjs.cloudflare.com cdn.jsdelivr.net *.brewin.co.uk *.marketo.com optimize.google.com; img-src  'self' 'unsafe-inline' * data: https://googleads.g.doubleclick.net https://www.google.com; media-src 'self' *.brightcove.com viz.tools.investis.com career5.successfactors.eu; frame-src 'self' staticcontents.investis.com www.google.com irs.tools.investis.com otp.tools.investis.com ir.tools.investis.com staticxx.facebook.com www.youtube.com maps.google.com *.vimeo.com vimeo.com *.brewin.co.uk *.marketo.com career5.successfactors.eu *.doubleclick.net *.hotjar.com *.facebook.com optimize.google.com *.googletagmanager.com; frame-ancestors 'self' *.career5.successfactors.eu; child-src 'self' *.career5.successfactors.eu; font-src 'self' 'unsafe-inline' https://adservice.google.com use.typekit.net data: fonts.googleapis.com fonts.gstatic.com viz.tools.investis.com themes.googleusercontent.com maxcdn.bootstrapcdn.com *.hotjar.com; connect-src 'self' *.responsetap.com maps.googleapis.com *.onetrust.com s.yimg.com https://www.googleadservices.com www.google-analytics.com wss://*.hotjar.com stats.g.doubleclick.net www.google.com.ua www.google.co.in *.hotjar.com www.google-analytics.com www.facebook.com bat.bing.com; report-uri /report-csp-violation
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Frame-Options: SAMEORIGIN
X-Drupal-Cache: HIT
X-Content-Type-Options: nosniff
X-Varnish: 6979692
X-VC-Cache: MISS
Accept-Ranges: bytes
Expires: Thu, 21 Apr 2022 08:43:43 GMT
Cache-Control: max-age=0, no-cache
Pragma: no-cache
Date: Thu, 21 Apr 2022 08:43:43 GMT
Content-Length: 85448
Connection: keep-alive
Set-Cookie: AWSALB=aXx+ZKCSZfaDDeMPrDLIiw+B4kJ+ZLc8QRSmcJDKxEC7IlUjsztn+ktg2frU+26rlcQ7KvlGpm8MdFGSw8dWfAY9KEUARsCSAGL6rmlAIICWRQiVJJ6bHKRSKQLV; Expires=Thu, 28 Apr 2022 08:43:43 GMT; Path=/
Set-Cookie: AWSALBCORS=aXx+ZKCSZfaDDeMPrDLIiw+B4kJ+ZLc8QRSmcJDKxEC7IlUjsztn+ktg2frU+26rlcQ7KvlGpm8MdFGSw8dWfAY9KEUARsCSAGL6rmlAIICWRQiVJJ6bHKRSKQLV; Expires=Thu, 28 Apr 2022 08:43:43 GMT; Path=/; SameSite=None; Secure
Set-Cookie: AWSALB=3B+Ujtxv+w6vqjgoGgMzSXRPYQXG8hEPz/LEob2xFu5CxJPj+WfcKiSgv7eBEyoUIKEtWO8ImvO6tlPrfIxgkX7uq9COsCeTVnRv7P58jT9cVLWQdAzR+8gS4NRO; Expires=Thu, 28 Apr 2022 08:43:43 GMT; Path=/
Set-Cookie: AWSALBCORS=3B+Ujtxv+w6vqjgoGgMzSXRPYQXG8hEPz/LEob2xFu5CxJPj+WfcKiSgv7eBEyoUIKEtWO8ImvO6tlPrfIxgkX7uq9COsCeTVnRv7P58jT9cVLWQdAzR+8gS4NRO; Expires=Thu, 28 Apr 2022 08:43:43 GMT; Path=/; SameSite=None