HTTP/1.1 200 OK
Cache-Control: no-cache, no-store
Pragma: no-cache
Content-Type: text/html; charset=utf-8
Expires: -1
X-Frame-Options: SameOrigin
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-XSS-Protection: 1; mode=block
Content-Security-Policy: default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.google.com https://*.gstatic.com https://js-agent.newrelic.com https://bam.nr-data.net *.googleapis.com https://a3daf390cd6e4003a5aad5e85de383be.svc.dynamics.com/t/w https://cdn.spinnaker-js.com/rc/ siteimproveanalytics.com https://in.taskanalytics.com *.google-analytics.com https://*.mookie1.com http://ib.adnxs.com https://secure.adnxs.com www.googleadservices.com https://googleads.g.doubleclick.net https://mktdplp102cdn.azureedge.net/public/latest/js/form-loader.js https://connect.facebook.net https://www.googletagmanager.com;style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://tagmanager.google.com;img-src 'self' * data:;frame-src 'self' *.youtube.com *.vimeo.com *.morningstar.com *.portalbank.no https://id.eika.no https://www.googletagmanager.com https://ir.asp.manamind.com https://ext.mnm.as *.doubleclick.net https://*.google.se https://*.google.no https://*.google.com https://connect.facebook.net;font-src 'self' https://fonts.gstatic.com;connect-src 'self' https://www.facebook.com/tr/ https://stats.g.doubleclick.net https://www.google-analytics.com https://ssl.google-analytics.com;report-uri /WebResource.axd?cspReport=true
X-BigIP-Bypass-Errorhandling: true
Date: Sat, 23 Nov 2019 22:30:55 GMT
Connection: close
Content-Length: 40311
Set-Cookie: ASP.NET_SessionId=jtkrhyyrzdycku0dp4epergp; path=/; secure; HttpOnly
Set-Cookie: SC_ANALYTICS_GLOBAL_COOKIE=174990674e064b91b6821ad0869f59b1|False; expires=Tue, 20-Nov-2029 22:30:55 GMT; path=/; secure; HttpOnly
Strict-Transport-Security: max-age=31536000; includeSubDomains