Towerswatson.com - Epa.towerswatson.com

date: Sat, 06 Sep 2025 23:11:22 GMT
content-type: text/html
content-length: 162
location: https://epa.towerswatson.com/accounts/login/
server: nginx
strict-transport-security: max-age=31536000; includeSubdomains;
x-content-type-options: nosniff
referrer-policy: no-referrer
x-frame-options: SAMEORIGIN

HTTP/2 200 
date: Sat, 06 Sep 2025 23:11:22 GMT
content-type: text/html; charset=utf-8
server: nginx
x-frame-options: DENY
vary: Accept-Language,Cookie,Accept-Encoding
content-language: en
referrer-policy: same-origin
cross-origin-opener-policy: same-origin
content-security-policy: img-src 'self' https://epa-towerswatson.innocraft.cloud data: https://cdn.qumucloud.com; style-src 'self' 'unsafe-inline' http://fast.fonts.net https://cobrowse-v2.euw2.pure.cloud https://cdn.qumucloud.com https://rbs.qumucloud.com; connect-src 'self' https://epa-towerswatson.innocraft.cloud https://api-cdn.euw2.pure.cloud https://api.euw2.pure.cloud https://apps.euw2.pure.cloud wss://cobrowse-v2.euw2.pure.cloud wss://webmessaging.euw2.pure.cloud https://cdn.qumucloud.com https://rbs.qumucloud.com; script-src 'strict-dynamic' 'unsafe-inline' http: https: 'nonce-gEEkkd8cRlrvTHYp92IB3A=='; script-src-attr 'self' 'unsafe-inline'; frame-src 'self' https://player.vimeo.com https://apps.euw2.pure.cloud https://www.google.com https://content-texttospeech.googleapis.com https://rbs.qumucloud.com https://www.ons.gov.uk https://www.youtube.com 'nonce-gEEkkd8cRlrvTHYp92IB3A=='; base-uri 'self'; default-src 'self' https://cobrowse-v2.euw2.pure.cloud https://cdn.qumucloud.com; frame-ancestors 'none'; report-uri /accounts/report/
set-cookie: captcha_required=False; HttpOnly; Path=/; Secure
set-cookie: nonce=a0439bdacad64e67a475805757d000d9cdb5674e8b7611f08cd8f22fce4a2753; HttpOnly; Path=/; Secure
set-cookie: bgroup=epabase; HttpOnly; Path=/; Secure
set-cookie: anoncsrf=r98sjQHCz5T53G64CD7IwPaOk34IcY6O; expires=Sun, 07 Sep 2025 00:11:22 GMT; HttpOnly; Max-Age=3600; Path=/; Secure
set-cookie: sessionid=xjwu0l20001ihaoe8ab3lspike050nmf; HttpOnly; Path=/; SameSite=Lax; Secure
content-encoding: gzip
cache-control: max-age=0, no-cache, no-store, must-revalidate
pragma: no-cache
expires: -1
content-security-policy: upgrade-insecure-requests
strict-transport-security: max-age=31536000; includeSubdomains;
x-content-type-options: nosniff
referrer-policy: no-referrer
access-control-allow-origin: https://apps.euw2.pure.cloud