HTTP/1.1 200 OK
Date: Sun, 17 May 2020 03:32:18 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 123450
Connection: keep-alive
Cache-Control: private, must-revalidate, max-age=600
Vary: origin
Server: Microsoft-IIS/10.0
X-UA-Compatible: IE=edge,chrome=1
Strict-Transport-Security: max-age=31536000; includeSubDomains
Content-Security-Policy: base-uri 'self' *.google.com; child-src 'self' gap: *.google.com *.googletagmanager.com *.hotjar.com *.investis.com *.surveymonkey.com *.twitter.com *.youtube.com; frame-src 'self' gap: *.google.com *.googletagmanager.com *.hotjar.com *.investis.com *.surveymonkey.com *.twitter.com *.youtube.com; connect-src script.google.com 'self' sitesearch360.com wss://*.hotjar.com *.doubleclick.net *.feefo.com *.google-analytics.com *.hotjar.com *.hotjar.io *.investis.com *.sitesearch360.com *.twimg.com *.twitter.com; default-src 'self' gap: 'unsafe-inline' 'unsafe-eval'; font-src 'self' data: *.googleapis.com *.gstatic.com *.hotjar.com; img-src 'self' data: * blob:; script-src gap: 'self' sitesearch360.com unpkg.com *.doubleclick.net *.feefo.com *.google.com *.googleadservices.com *.google-analytics.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.hotjar.com *.hotjar.io *.investis.com *.paragonbankinggroup.co.uk *.sitesearch360.com *.surveymonkey.com *.twimg.com *.twitter.com *.youtube.com *.visualwebsiteoptimizer.com 'unsafe-inline' 'unsafe-eval'; style-src 'self' *.googleapis.com *.google.com *.gstatic.com *.twitter.com *.twimg.com 'unsafe-inline'; frame-ancestors 'self' *.doubleclick.net *.googletagmanager.com *.hotjar.com *.surveymonkey.com https://vars.hotjar.com *.noblehosted.com theparagongroup.sharepoint.com gap:; report-uri /SecurityUtils/rest/Report/ReportViolations?Params=JfvkCNYXZztJrcbpr8SGpc0CCBIWwNM%2bBoOrO4hQ67hZFWzy9UY76kmzr6lkkpoOzBxaH3Fpbo%2b%2fF18YYQeuMVqtoPJai4cYpLZ3e9e5TaC1ocVU0DaBzyZzsVjsGHG06vFZvFFuhQKq1A9llhhgM90kToYixaFILbcFkhy%2bFSFitjJqS8s34mvhJ4gTKj32pHuegZn3x2DpnJAqOeB7eQ%3d%3d;
X-Content-Security-Policy: base-uri 'self' *.google.com; child-src 'self' gap: *.google.com *.googletagmanager.com *.hotjar.com *.investis.com *.surveymonkey.com *.twitter.com *.youtube.com; frame-src 'self' gap: *.google.com *.googletagmanager.com *.hotjar.com *.investis.com *.surveymonkey.com *.twitter.com *.youtube.com; connect-src script.google.com 'self' sitesearch360.com wss://*.hotjar.com *.doubleclick.net *.feefo.com *.google-analytics.com *.hotjar.com *.hotjar.io *.investis.com *.sitesearch360.com *.twimg.com *.twitter.com; default-src 'self' gap: 'unsafe-inline' 'unsafe-eval'; font-src 'self' data: *.googleapis.com *.gstatic.com *.hotjar.com; img-src 'self' data: * blob:; script-src gap: 'self' sitesearch360.com unpkg.com *.doubleclick.net *.feefo.com *.google.com *.googleadservices.com *.google-analytics.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.hotjar.com *.hotjar.io *.investis.com *.paragonbankinggroup.co.uk *.sitesearch360.com *.surveymonkey.com *.twimg.com *.twitter.com *.youtube.com *.visualwebsiteoptimizer.com 'unsafe-inline' 'unsafe-eval'; style-src 'self' *.googleapis.com *.google.com *.gstatic.com *.twitter.com *.twimg.com 'unsafe-inline'; frame-ancestors 'self' *.doubleclick.net *.googletagmanager.com *.hotjar.com *.surveymonkey.com https://vars.hotjar.com *.noblehosted.com theparagongroup.sharepoint.com gap:; report-uri /SecurityUtils/rest/Report/ReportViolations?Params=JfvkCNYXZztJrcbpr8SGpc0CCBIWwNM%2bBoOrO4hQ67hZFWzy9UY76kmzr6lkkpoOzBxaH3Fpbo%2b%2fF18YYQeuMVqtoPJai4cYpLZ3e9e5TaC1ocVU0DaBzyZzsVjsGHG06vFZvFFuhQKq1A9llhhgM90kToYixaFILbcFkhy%2bFSFitjJqS8s34mvhJ4gTKj32pHuegZn3x2DpnJAqOeB7eQ%3d%3d;
X-WebKit-CSP: base-uri 'self' *.google.com; child-src 'self' gap: *.google.com *.googletagmanager.com *.hotjar.com *.investis.com *.surveymonkey.com *.twitter.com *.youtube.com; frame-src 'self' gap: *.google.com *.googletagmanager.com *.hotjar.com *.investis.com *.surveymonkey.com *.twitter.com *.youtube.com; connect-src script.google.com 'self' sitesearch360.com wss://*.hotjar.com *.doubleclick.net *.feefo.com *.google-analytics.com *.hotjar.com *.hotjar.io *.investis.com *.sitesearch360.com *.twimg.com *.twitter.com; default-src 'self' gap: 'unsafe-inline' 'unsafe-eval'; font-src 'self' data: *.googleapis.com *.gstatic.com *.hotjar.com; img-src 'self' data: * blob:; script-src gap: 'self' sitesearch360.com unpkg.com *.doubleclick.net *.feefo.com *.google.com *.googleadservices.com *.google-analytics.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.hotjar.com *.hotjar.io *.investis.com *.paragonbankinggroup.co.uk *.sitesearch360.com *.surveymonkey.com *.twimg.com *.twitter.com *.youtube.com *.visualwebsiteoptimizer.com 'unsafe-inline' 'unsafe-eval'; style-src 'self' *.googleapis.com *.google.com *.gstatic.com *.twitter.com *.twimg.com 'unsafe-inline'; frame-ancestors 'self' *.doubleclick.net *.googletagmanager.com *.hotjar.com *.surveymonkey.com https://vars.hotjar.com *.noblehosted.com theparagongroup.sharepoint.com gap:; report-uri /SecurityUtils/rest/Report/ReportViolations?Params=JfvkCNYXZztJrcbpr8SGpc0CCBIWwNM%2bBoOrO4hQ67hZFWzy9UY76kmzr6lkkpoOzBxaH3Fpbo%2b%2fF18YYQeuMVqtoPJai4cYpLZ3e9e5TaC1ocVU0DaBzyZzsVjsGHG06vFZvFFuhQKq1A9llhhgM90kToYixaFILbcFkhy%2bFSFitjJqS8s34mvhJ4gTKj32pHuegZn3x2DpnJAqOeB7eQ%3d%3d;
X-Frame-Options: sameorigin
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: 
Referrer-Policy: no-referrer
Feature-Policy: geolocation 'self'; midi 'none'; sync-xhr 'none'; microphone 'none'; camera 'none'; magnetometer 'none'; gyroscope 'none'; speaker 'none'; fullscreen 'self'; payment 'none';
Access-Control-Allow-Origin: https://www.paragonbank.co.uk
Set-Cookie: ASP.NET_SessionId=wa0x3pm0wqhauhxiqdtsapoz; path=/; secure; HttpOnly
Set-Cookie: osVisitor=850afa72-5f84-4b85-a973-560326e731d6; expires=Fri, 17-May-2120 03:32:17 GMT; path=/; secure; HttpOnly
Set-Cookie: osVisit=8c149927-abba-4c5a-8d5a-8c5bc9408e77; expires=Sun, 17-May-2020 04:02:17 GMT; path=/; secure; HttpOnly
Set-Cookie: pageLoadedFromBrowserCache=false; path=/
X-Content-Type-Options: nosniff