HTTP/1.1 200 OK
Cache-Control: no-cache, no-store
Pragma: no-cache
Content-Type: text/html; charset=utf-8
Expires: -1
Server: 
Content-Security-Policy-Report-Only: default-src 'self' d1h3z56lhcmivt.cloudfront.net; script-src 'self' data: 'unsafe-eval' 'unsafe-inline' d1h3z56lhcmivt.cloudfront.net d2i2wahzwrm1n5.cloudfront.net ajax ajax.aspnetcdn.com code.jquery.com *.uservoice.com *.honeycomb.nbspayments.com *.pendo.io; style-src 'self' 'unsafe-inline' d1h3z56lhcmivt.cloudfront.net ajax.aspnetcdn.com maxcdn.bootstrapcdn.com *.pendo.io; img-src 'self' data: d1ap1qjj9o2qr0.cloudfront.net ajax.aspnetcdn.com d1h3z56lhcmivt.cloudfront.net *.honeycomb.nbspayments.com *.pendo.io; connect-src 'self' *.honeycomb.nbspayments.com; font-src 'self' data: d1h3z56lhcmivt.cloudfront.net maxcdn.bootstrapcdn.com; frame-ancestors 'self'; frame-src 'self' *.pendo.io; child-src 'self' *.pendo.io; 
X-Content-Security-Policy-Report-Only: default-src 'self' d1h3z56lhcmivt.cloudfront.net; script-src 'self' data: 'unsafe-eval' 'unsafe-inline' d1h3z56lhcmivt.cloudfront.net d2i2wahzwrm1n5.cloudfront.net ajax ajax.aspnetcdn.com code.jquery.com *.uservoice.com *.honeycomb.nbspayments.com *.pendo.io; style-src 'self' 'unsafe-inline' d1h3z56lhcmivt.cloudfront.net ajax.aspnetcdn.com maxcdn.bootstrapcdn.com *.pendo.io; img-src 'self' data: d1ap1qjj9o2qr0.cloudfront.net ajax.aspnetcdn.com d1h3z56lhcmivt.cloudfront.net *.honeycomb.nbspayments.com *.pendo.io; connect-src 'self' *.honeycomb.nbspayments.com; font-src 'self' data: d1h3z56lhcmivt.cloudfront.net maxcdn.bootstrapcdn.com; frame-ancestors 'self'; frame-src 'self' *.pendo.io; child-src 'self' *.pendo.io; 
Referrer-Policy: strict-origin-when-cross-origin
Permissions-Policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(), cross-origin-isolated=(), display-capture=(), document-domain=(), encrypted-media=(), execution-while-not-rendered=(), execution-while-out-of-viewport=(), fullscreen=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), navigation-override=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(), usb=(), web-share=(), xr-spatial-tracking=()
Set-Cookie: ASP.NET_SessionId=ak1n52w0ktg3b4k4lj5fb0ax; domain=.www.nbspayments.com; path=/; secure; HttpOnly; SameSite=None
Set-Cookie: EntSessionGuid=dde07823-06e2-465e-8c31-258f0abdde08; domain=.www.nbspayments.com; path=/; secure; HttpOnly; SameSite=None
Set-Cookie: InstKey=; domain=.www.nbspayments.com; expires=Sat, 01-Jan-2000 06:00:00 GMT; path=/; secure; HttpOnly; SameSite=None
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000; includeSubDomains
Date: Tue, 08 Dec 2020 01:52:57 GMT
Connection: close
Content-Length: 19684