HTTP/1.1 200 OK
Date: Mon, 01 Jun 2020 16:41:03 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __cfduid=d47cdfaa802e1bf21e1260ef7ff83d48c1591029662; expires=Wed, 01-Jul-20 16:41:02 GMT; path=/; domain=.thinkmoney.co.uk; HttpOnly; SameSite=Lax
Last-Modified: Mon, 01 Jun 2020 16:18:15 GMT
x-amz-server-side-encryption: AES256
Cache-Control: public, must-revalidate, max-age=0
Via: 1.1 ab2f63669c9809614cbcf54bfba8ee06.cloudfront.net (CloudFront), 1.1 13a23f310e3fbe72fa9a84a5fd5d4b89.cloudfront.net (CloudFront)
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Access-Control-Allow-Origin: *
Content-Security-Policy: default-src 'self' ; worker-src 'self' blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.twitter.com *.visualwebsiteoptimizer.com *.googletagmanager.com *.thinkmoney.co.uk *.google-analytics.com *.bing.com *.hotjar.com *.googleadservices.com *.facebook.net *.ads-twitter.com *.yimg.com *.tag4arm.com *.msecnd.net *.taboola.com *.doubleclick.net *.yahoo.com *.google.com; prefetch-src *.amplifyapp.com *.thinkmoney.co.uk; style-src 'self' 'unsafe-inline' *.google.com *.googleapis.com; img-src 'self' https://www.datocms-assets.com/ *.gstatic.com t.co *.google.com *.google.co.uk *.facebook.com *.visualwebsiteoptimizer.com *.googletagmanager.com *.thinkmoney.co.uk *.google-analytics.com *.bing.com *.hotjar.com *.googleadservices.com *.facebook.net *.ads-twitter.com *.yimg.com *.tag4arm.com *.msecnd.net *.taboola.com *.doubleclick.net *.yahoo.com data:; font-src 'self' *.gstatic.com data:; manifest-src 'self'; connect-src 'self' *.hotjar.io *.visualstudio.com *.execute-api.eu-west-1.amazonaws.com *.visualwebsiteoptimizer.com *.googletagmanager.com *.thinkmoney.co.uk *.google-analytics.com *.bing.com *.hotjar.com *.googleadservices.com *.facebook.net *.ads-twitter.com *.yimg.com *.tag4arm.com *.msecnd.net *.taboola.com *.doubleclick.net *.yahoo.com; upgrade-insecure-requests; block-all-mixed-content; frame-src https://www.youtube.com/ *.visualwebsiteoptimizer.com *.googletagmanager.com *.thinkmoney.co.uk *.google-analytics.com *.bing.com *.hotjar.com *.googleadservices.com *.facebook.net *.ads-twitter.com *.yimg.com *.tag4arm.com *.msecnd.net *.taboola.com *.doubleclick.net *.yahoo.com
Feature-Policy: geolocation none;midi none;notifications none;push none;sync-xhr none;microphone none;camera none;
Referrer-Policy: no-referrer-when-downgrade
X-Amz-Cf-Pop: IAD89-C2
Vary: Accept-Encoding
X-Cache: Miss from cloudfront
X-Amz-Cf-Pop: YUL62-C1
X-Amz-Cf-Id: EhUMx9yqnBJCH2HP8p1QYUKeJgIaet5fxfzRE89Qnn44ufVSTqHVsQ==
Age: 1248
CF-Cache-Status: DYNAMIC
cf-request-id: 03125b1cac0000efe4f81e0200000001
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 59ca61411aa8efe4-EWR
Content-Encoding: gzip