Content-Type: text/html; charset=utf-8
Cache-Control: no-cache,no-store
Date: Sat, 29 Apr 2017 19:50:41 GMT
X-Content-Type-Options: nosniff
Content-Length: 20844
Access-Control-Allow-Origin: *
Server: Microsoft-IIS/7.5
X-UA-Compatible: IE=edge,chrome=1
Expires: -1
Pragma: no-cache,no-cache
Content-Security-Policy: default-src 'self' http://507630180.log.optimizely.com http://insights.hotjar.com wss://ins7.hotjar.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.medirectbank.be www.google-analytics.com ajax.googleapis.com http://stats.g.doubleclick.net https://*.googleapis.com https://maps.gstatic.com https://www.google.com/maps http://cdn.optimizely.com http://www.googletagmanager.com https://ads-pebblemedia.adhese.com http://dnn506yrbagrg.cloudfront.net https://track.adform.net http://track.adform.net http://static.hotjar.com https://static.hotjar.com http://script.hotjar.com https://script.hotjar.com https://www.google.com/jsapi https://www.google.com https://connect.facebook.net https://cdn.jsdelivr.net https://pixel.predicubemedia.com https://c.pebblemedia.be http://cdn.cxense.com https://api.cxense.com https://comcluster.cxense.com https://comcluster.cxense.com; font-src 'self' data: https://fonts.gstatic.com http://fonts.gstatic.com http://netdna.bootstrapcdn.com; style-src 'self' 'unsafe-inline' https://*.googleapis.com http://*.googleapis.com http://netdna.bootstrapcdn.com https://www.google.com; img-src 'self' data: https://www.medirectbank.be http://stats.g.doubleclick.net https://www.google-analytics.com https://www.google.com https://www.google.com.mt https://gtrk.s3.amazonaws.com https://www.facebook.com https://pixel.predicubemedia.com http://comcluster.cxense.com; child-src 'self' ebanking.medbank.com.mt https://ewealth.medirectbank.be https://www.google.com https://player.vimeo.com https://lt.morningstar.com https://www.flexmail.eu https://quotespeed.morningstar.com http://track.adform.net https://www.youtube.com https://vars.hotjar.com https://clientstorage.cxense.com http://cdn.cxense.com;
X-Frame-Options: SAMEORIGIN
HTTP/1.1 200 OK
Set-Cookie: ASP.NET_SessionId=aacuzqp0o0rle0yuklgugpeg; path=/; HttpOnly
X-XSS-Protection: 1; mode=block