Bbc.com - Account.bbc.com

Date: Tue, 16 Aug 2022 23:42:12 GMT
Content-Type: text/plain; charset=utf-8
Content-Length: 29
Connection: keep-alive
Server: Apache
Report-To: {"group":"default","max_age":3600,"endpoints":[{"url":"https://europe-west1-bbc-otg-traf-mgr-bq-prod-4591.cloudfunctions.net/report-endpoint"}],"include_subdomains":true}
NEL: {"report_to":"default","max_age":604800,"include_subdomains":true,"failure_fraction":0.01}
Cache-Control: no-cache,private,no-store
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
X-Permitted-Cross-Domain-Policies: none
Content-Security-Policy: base-uri 'self';frame-src https://www.bbc.com;child-src edigitalsurvey.com https://www.bbc.com;connect-src 'self' *.api.bbci.co.uk *.bbc.co.uk www.bbc.com logx.optimizely.com api.pwnedpasswords.com;default-src 'none';font-src 'self' *.files.bbci.co.uk;form-action 'self' http://bbc.co.uk https://bbc.co.uk http://*.bbc.co.uk https://*.bbc.co.uk http://bbc.com https://bbc.com http://*.bbc.com https://*.bbc.com;img-src 'self' data: *.files.bbci.co.uk ichef.bbci.co.uk *.bbci.co.uk *.ati-host.net *.bbc.co.uk;report-to default;script-src 'self' 'unsafe-eval' 'unsafe-inline' *.files.bbci.co.uk *.bbci.co.uk *.bbc.co.uk cdn.optimizely.com optimizely.s3.amazonaws.com;style-src 'self' 'unsafe-inline' *.files.bbci.co.uk *.bbci.co.uk *.bbc.co.uk
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Location: /signin
Vary: Accept
Set-Cookie: ckns_mvt=196179c1-7f4e-4d10-904d-c49a25f05181; Max-Age=31536000; Domain=.account.bbc.com; Path=/; Expires=Wed, 16 Aug 2023 23:42:12 GMT; Secure; SameSite=None
Link: <https://session.bbc.com/session>; rel=preconnect; crossorigin
Link: <https://session.bbc.co.uk/session>; rel=preconnect; crossorigin

HTTP/1.1 302 Found
Date: Tue, 16 Aug 2022 23:42:12 GMT
Content-Type: text/plain; charset=utf-8
Content-Length: 66
Connection: keep-alive
Server: Apache
Report-To: {"group":"default","max_age":3600,"endpoints":[{"url":"https://europe-west1-bbc-otg-traf-mgr-bq-prod-4591.cloudfunctions.net/report-endpoint"}],"include_subdomains":true}
NEL: {"report_to":"default","max_age":604800,"include_subdomains":true,"failure_fraction":0.01}
Cache-Control: no-cache,private,no-store
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
X-Permitted-Cross-Domain-Policies: none
Content-Security-Policy: base-uri 'self';frame-src https://www.bbc.com;child-src edigitalsurvey.com https://www.bbc.com;connect-src 'self' *.api.bbci.co.uk *.bbc.co.uk www.bbc.com logx.optimizely.com api.pwnedpasswords.com;default-src 'none';font-src 'self' *.files.bbci.co.uk;form-action 'self' http://bbc.co.uk https://bbc.co.uk http://*.bbc.co.uk https://*.bbc.co.uk http://bbc.com https://bbc.com http://*.bbc.com https://*.bbc.com;img-src 'self' data: *.files.bbci.co.uk ichef.bbci.co.uk *.bbci.co.uk *.ati-host.net *.bbc.co.uk;report-to default;script-src 'self' 'unsafe-eval' 'unsafe-inline' *.files.bbci.co.uk *.bbci.co.uk *.bbc.co.uk cdn.optimizely.com optimizely.s3.amazonaws.com;style-src 'self' 'unsafe-inline' *.files.bbci.co.uk *.bbci.co.uk *.bbc.co.uk
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Location: https://session.bbc.co.uk/session?lang=ar-SA
Vary: Accept
Set-Cookie: ckns_mvt=aa45410a-405c-4b62-96a8-49b515594d4b; Max-Age=31536000; Domain=.account.bbc.com; Path=/; Expires=Wed, 16 Aug 2023 23:42:12 GMT; Secure; SameSite=None
Link: <https://session.bbc.com/session>; rel=preconnect; crossorigin
Link: <https://session.bbc.co.uk/session>; rel=preconnect; crossorigin

HTTP/1.1 302 Found
Date: Tue, 16 Aug 2022 23:42:13 GMT
Content-Type: text/plain; charset=utf-8
Content-Length: 265
Connection: keep-alive
Server: Apache
Report-To: {"group":"default","max_age":3600,"endpoints":[{"url":"https://europe-west1-bbc-otg-traf-mgr-bq-prod-4591.cloudfunctions.net/report-endpoint"}],"include_subdomains":true}
NEL: {"report_to":"default","max_age":604800,"include_subdomains":true,"failure_fraction":0.01}
Cache-Control: no-cache,private,no-store
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
X-Permitted-Cross-Domain-Policies: none
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Location: https://account.bbc.com/signin?realm=%2F&clientId=Account&lang=ar-SA&isCasso=false&action=sign-in&redirectUri=https%3A%2F%2Fsession.bbc.co.uk%2Fsession%2Fcallback%3Frealm%3D%2F&service=IdSignInService&nonce=ihc4nqbx-sFs0RBxo0CzfQLaTtSmDsJEZVck
Vary: Accept
Set-Cookie: ckns_nonce=sdKd3Nmsux1TU7twTFSjG7rD; Domain=.bbc.co.uk; Path=/; HttpOnly; Secure; SameSite=None
P3P: CP="The BBC does not have a P3P policy. Please read our Privacy Policy instead: https://www.bbc.co.uk/privacy"
Link: <https://account.bbc.com>; rel=preconnect; crossorigin

HTTP/1.1 200 OK
Date: Tue, 16 Aug 2022 23:42:13 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 35656
Connection: keep-alive
Server: Apache
Report-To: {"group":"default","max_age":3600,"endpoints":[{"url":"https://europe-west1-bbc-otg-traf-mgr-bq-prod-4591.cloudfunctions.net/report-endpoint"}],"include_subdomains":true}
NEL: {"report_to":"default","max_age":604800,"include_subdomains":true,"failure_fraction":0.01}
Cache-Control: no-cache,private,no-store
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
X-Permitted-Cross-Domain-Policies: none
Content-Security-Policy: base-uri 'self';frame-src https://www.bbc.com;child-src edigitalsurvey.com https://www.bbc.com;connect-src 'self' *.api.bbci.co.uk *.bbc.co.uk www.bbc.com logx.optimizely.com api.pwnedpasswords.com;default-src 'none';font-src 'self' *.files.bbci.co.uk;form-action 'self' http://bbc.co.uk https://bbc.co.uk http://*.bbc.co.uk https://*.bbc.co.uk http://bbc.com https://bbc.com http://*.bbc.com https://*.bbc.com;img-src 'self' data: *.files.bbci.co.uk ichef.bbci.co.uk *.bbci.co.uk *.ati-host.net *.bbc.co.uk;report-to default;script-src 'self' 'unsafe-eval' 'unsafe-inline' *.files.bbci.co.uk *.bbci.co.uk *.bbc.co.uk cdn.optimizely.com optimizely.s3.amazonaws.com;style-src 'self' 'unsafe-inline' *.files.bbci.co.uk *.bbci.co.uk *.bbc.co.uk
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
ETag: W/"1e284-CD14IDlLEN6bmxKN4T0r/us1YNY-gzip"
Set-Cookie: ckns_mvt=b7f0e992-e3df-4bda-a7b2-d3e2715d76f0; Max-Age=31536000; Domain=.account.bbc.com; Path=/; Expires=Wed, 16 Aug 2023 23:42:13 GMT; Secure; SameSite=None
Vary: Accept-Encoding
Content-Encoding: gzip
Link: <https://session.bbc.com/session>; rel=preconnect; crossorigin
Link: <https://session.bbc.co.uk/session>; rel=preconnect; crossorigin