Fca-org-uk.org

cache-control: private
content-type: text/html; charset=utf-8
location: /sitemenu.aspx?ID=851&
server: Microsoft-IIS/10.0
set-cookie: ASP.NET_SessionId=oboyq2kvspnt31dk3qaf5ebt; path=/; HttpOnly; SameSite=Lax
content-security-policy: object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval'              https://secure.qgiv.com/              https://*.pendo.io/              http://www.crimestoppersweb.com/               https://www.paypal.com/               https://*.jotform.com/              https://*.jotfor.ms/              https://*.cloudflare.com/              https://*.jotform.com/              https://*.facebook.net/ http://*.facebook.net/               https://*.p3tips.com/ http://*.p3tips.com/               https://*.googleapis.com/ http://*.googleapis.com/               https://*.amazon.com/ http://*.amazon.com/               https://www.sonars.co/
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
permissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()
set-cookie: Secure
date: Sat, 15 Oct 2022 06:22:02 GMT
content-length: 143

HTTP/2 200 
cache-control: private
content-type: text/html; charset=utf-8
server: Microsoft-IIS/10.0
set-cookie: ASP.NET_SessionId=lqeoitqzejbseodvwl5nyc4s; path=/; HttpOnly; SameSite=Lax
content-security-policy: object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval'              https://secure.qgiv.com/              https://*.pendo.io/              http://www.crimestoppersweb.com/               https://www.paypal.com/               https://*.jotform.com/              https://*.jotfor.ms/              https://*.cloudflare.com/              https://*.jotform.com/              https://*.facebook.net/ http://*.facebook.net/               https://*.p3tips.com/ http://*.p3tips.com/               https://*.googleapis.com/ http://*.googleapis.com/               https://*.amazon.com/ http://*.amazon.com/               https://www.sonars.co/
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
permissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()
set-cookie: Secure
date: Sat, 15 Oct 2022 06:22:02 GMT
content-length: 25991
location: https://www.fca.org.uk/
content-length: 231
content-type: text/html; charset=iso-8859-1
date: Sat, 15 Oct 2022 06:22:04 GMT
server: Apache

HTTP/2 200 
date: Sat, 15 Oct 2022 06:22:04 GMT
content-type: text/html; charset=UTF-8
expires: Sun, 19 Nov 1978 05:00:00 GMT
cache-control: max-age=900, public
vary: Cookie, Accept-Encoding
x-drupal-dynamic-cache: UNCACHEABLE
x-ua-compatible: IE=edge
content-language: en
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
permissions-policy: interest-cohort=()
x-drupal-cache-tags: block_content:1 block_content_view block_view config:block.block.campaignnavigation config:block.block.careers config:block.block.category config:block.block.fca_account_menu config:block.block.fca_branding config:block.block.fca_breadcrumbs config:block.block.fca_content config:block.block.fca_footer config:block.block.fca_help config:block.block.fca_local_actions config:block.block.fca_local_tasks config:block.block.fca_main_menu config:block.block.fca_messages config:block.block.fca_page_title config:block.block.fca_powered config:block.block.fca_search config:block.block.fca_tools config:block.block.footercontactinfo config:block.block.funnelbacksearchblock config:block.block.investmentharmfooter config:block.block.multimediatype config:block.block.none config:block.block.registersandsystems config:block.block.social config:block_list config:cookie_category_list config:eu_cookie_compliance.settings config:extlink.settings config:fca_config.miscellaneous_settings config:field.storage.node.field_news_category config:field.storage.node.field_published_date config:field.storage.node.field_read_more config:filter.format.full_html config:honeypot.settings config:printable.settings config:system.menu.main config:system.menu.menu-careers config:system.menu.menu-onsite-links config:system.menu.menu-social config:system.menu.menu-systems config:system.site config:user.role.anonymous config:views.view.component_latest_news_pubs_data_hub_cards config:workflows.workflow.fca_workflow http_response local_task megamenu node:102766 node:102851 node:102861 node:11876 node:12991 node:13026 node:13081 node:13106 node:2886 node:2891 node:2901 node:3151 node:3176 node:3186 node:3266 node:3301 node:3646 node:43466 node:6011 node:6016 node:66556 node:68476 node:7359 node:7511 node:7525 node:8816 node:97766 node:98011 node_list node_view paragraph:1033446 paragraph:1033451 paragraph:1033456 paragraph:1033461 paragraph:1033466 paragraph:1033471 paragraph:1033476 paragraph:1033481 paragraph:1033486 paragraph:1033746 paragraph:1033766 paragraph:1033776 paragraph:1050006 paragraph_view rendered taxonomy_term:106 taxonomy_term:110 taxonomy_term:111 user:2966
x-drupal-cache-contexts: cookies:big_pipe_nojs languages route session.exists theme timezone url user.node_grants:view user.permissions user.roles:authenticated workspace
x-drupal-cache-max-age: 0 (Uncacheable)
last-modified: Sat, 15 Oct 2022 05:19:53 GMT
content-security-policy-report-only: default-src 'self' 'unsafe-inline' data: *.fca.org.uk; script-src 'self' 'unsafe-inline' 'unsafe-eval' www.google-analytics.com *.googletagmanager.com *.google.com *.gstatic.com *.facebook.net www.googleadservices.com siteimproveanalytics.com *.siteimproveanalytics.io *.twitter.com *.jquery.com *.nr-data.net *.newrelic.com static.ads-twitter.com js.adsrvr.org *.doubleclick.net *.fca.org.uk fca.funnelback.co.uk *.salesforceliveagent.com *.twentythree.net snap.licdn.com analytics.tiktok.com sc-static.net; img-src 'self' 'unsafe-inline' data: *.facebook.com *.google-analytics.com *.siteimproveanalytics.io *.google.com t.co *.doubleclick.net *.fca.org.uk *.google.ie *.videomarketingplatform.co www.google.co.uk *.nr-data.net *.googletagmanager.com *.fca.org.uk *.gstatic.com www.glassdoor.co.uk *.fca.org.uk linkedin.com www.facebook.com t.co *.linkedin.com *.google.ch *.google.de *.google.nl *.google.com.eg *.google.es *.google.ee *.google.co.in *.google.co.uz *.adsymptotic.com *.tableau.com *.google.ge *.google.se *.google.com.bh *.google.sk; frame-src 'self' 'unsafe-inline' *.buto.tv *.videomarketingplatform.co *.view-it.co.uk *.fcaconnect.force.com prezi.com wearebigrock.com *.fca.org.uk player.vimeo.com www.thinglink.com *.google.com *.doubleclick.net insight.adsrvr.org *.fca.org.uk *.googletagmanager.com *.youtube.com match.adsrvr.org *.twentythree.net gateway.zscaler.net *.tableau.com *.snapchat.com; frame-ancestors 'self' *.fca.org.uk; child-src 'self' 'unsafe-inline' *.buto.tv *.videomarketingplatform.co *.view-it.co.uk *.fcaconnect.force.com prezi.com wearebigrock.com *.fca.org.uk player.vimeo.com www.thinglink.com *.google.com *.fca.org.uk; font-src 'self' data: fonts.gstatic.com *.fca.org.uk at.alicdn.com; connect-src 'self' www.google-analytics.com *.googletagmanager.com *.google.com *.gstatic.com *.facebook.net www.googleadservices.com siteimproveanalytics.com *.siteimproveanalytics.io *.twitter.com *.jquery.com *.nr-data.net *.newrelic.com static.ads-twitter.com js.adsrvr.org *.doubleclick.net *.fca.org.uk fca.funnelback.co.uk *.googleapis.com analytics.tiktok.com *.snapchat.com; report-uri https://o105440.ingest.sentry.io/api/234655/security/?sentry_key=78e86bb79e1f44d0b24b22ab1e9dc5d0; upgrade-insecure-requests
strict-transport-security: max-age=15768000; preload
referrer-policy: no-referrer-when-downgrade
x-drupal-cache: MISS
x-request-id: v-0044ad2a-4c49-11ed-a728-7b9b62f3985d
x-ah-environment: prod
via: varnish
x-cache: HIT
x-cache-hits: 22
cf-cache-status: MISS
server: cloudflare
cf-ray: 75a6754daa4e812d-ORD
content-encoding: br