HTTP/2 200 
referrer-policy: strict-origin-when-cross-origin
permissions-policy: accelerometer=(),camera=(),geolocation=(),gyroscope=(),magnetometer=(),midi=(),usb=()
content-type: text/html; charset=utf-8
vary: Accept-Encoding
content-encoding: gzip
date: Thu, 20 Mar 2025 07:33:32 GMT
cache-control: max-age=0, no-cache, no-store, must-revalidate
pragma: no-cache
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-security-policy: default-src 'self' *.sysnet.ie *.sysnetgs.com player.vimeo.com data:; frame-ancestors 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.zdassets.com https://ekr.zdassets.com https://ekr.zendesk.com https://*.zendesk.com https://api.smooch.io https://media.smooch.io https://zendesk-eu.my.sentry.io https://*.twilio.com wss://*.zendesk.com wss://api.smooch.io wss://voice-js.roaming.twilio.com ; connect-src 'self' ws: data: https://static.zdassets.com https://ekr.zdassets.com https://ekr.zendesk.com https://*.zendesk.com https://api.smooch.io https://media.smooch.io https://zendesk-eu.my.sentry.io https://*.twilio.com wss://*.zendesk.com wss://api.smooch.io wss://voice-js.roaming.twilio.com assurance.sysnetgs.com *.demdex.net; img-src 'self' data: us01-prod-sair-static-assets.s3.amazonaws.com eu01-prod-sair-static-assets.s3-eu-west-1.amazonaws.com adservice.google.com *.sysnet.ie *.demdex.net ad.doubleclick.net stats.g.doubleclick.net https://*.gravatar.com https://static.zdassets.com https://ekr.zdassets.com https://ekr.zendesk.com https://*.zendesk.com https://api.smooch.io https://media.smooch.io https://zendesk-eu.my.sentry.io https://*.twilio.com wss://*.zendesk.com wss://api.smooch.io wss://voice-js.roaming.twilio.com; media-src 'self' data: https://static.zdassets.com; style-src 'self' 'unsafe-inline' https://static.zdassets.com https://ekr.zdassets.com https://ekr.zendesk.com https://*.zendesk.com https://api.smooch.io https://media.smooch.io https://zendesk-eu.my.sentry.io https://*.twilio.com wss://*.zendesk.com wss://api.smooch.io wss://voice-js.roaming.twilio.com fonts.googleapis.com *.fonts.net; font-src 'self' data: https://static.zdassets.com https://ekr.zdassets.com https://ekr.zendesk.com https://*.zendesk.com https://api.smooch.io https://media.smooch.io https://zendesk-eu.my.sentry.io https://*.twilio.com wss://*.zendesk.com wss://api.smooch.io wss://voice-js.roaming.twilio.com fonts.gstatic.com; frame-src 'self' 'unsafe-inline' https://static.zdassets.com https://ekr.zdassets.com https://ekr.zendesk.com https://*.zendesk.com https://api.smooch.io https://media.smooch.io https://zendesk-eu.my.sentry.io https://*.twilio.com wss://*.zendesk.com wss://api.smooch.io wss://voice-js.roaming.twilio.com  data: blob: *.sysnetgs.com *.vimeo.com;
access-control-allow-origin: https://www.barclaycarddatasecuritymanager.co.uk
x-permitted-cross-domain-policies: none
etag: W/"a839-RYXMrT2JV8IsmcAWy0qc9UN4wg4"
x-frame-options: SAMEORIGIN
server: Apache