HTTP/1.1 200 OK
Date: Wed, 03 Feb 2021 12:32:34 GMT
Content-Type: text/html; charset=utf-8
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Pragma: cache
Cache-Control: max-age=86400, s-maxage=86400, public
Expires: Thu, 04 Feb 2021 12:32:34 GMT
Last-Modified: Tue, 02 Feb 2021 14:43:42 GMT
Access-Control-Allow-Origin: https://www.aqa.org.uk
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=31536000; includeSubDomains
Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.aqa.org.uk www.brighttalk.com webservices.data-8.co.uk www.googleadservices.com *.google-analytics.com www.googletagmanager.com tagmanager.google.com static.hotjar.com script.hotjar.com in.hotjar.com *.clickdimensions.com platform.twitter.com analytics.twitter.com static.ads-twitter.com cdn.syndication.twimg.com ssl.p.jwpcdn.com s.ytimg.com static.doubleclick.net s7.addthis.com www.youtube.com www.google.com syndication.twitter.com *.linkedin.com *.licdn.com; style-src 'self' 'unsafe-inline' *.aqa.org.uk platform.twitter.com ton.twimg.com www.youtube.com tagmanager.google.com fonts.googleapis.com; img-src 'self' data: *.aqa.org.uk platform.twitter.com syndication.twitter.com *.twimg.com t.co www.google.com www.google.co.uk *.google-analytics.com www.googletagmanager.com tagmanager.google.com www.gstatic.com ssl.gstatic.com jwpltx.com *.doubleclick.net i.ytimg.com www.youtube.com yt3.ggpht.com static.hotjar.com script.hotjar.com *.linkedin.com *.licdn.com; font-src 'self' data: *.aqa.org.uk ssl.p.jwpcdn.com fonts.gstatic.com fonts.googleapis.com script.hotjar.com; form-action 'self' syndication.twitter.com platform.twitter.com *.clickdimensions.com; connect-src 'self' *.aqa.org.uk *.googlevideo.com *.hotjar.com vc.hotjar.io wss://*.hotjar.com www.youtube.com www.google-analytics.com api.pdflayer.com; object-src 'none'; child-src omny.fm syndication.twitter.com platform.twitter.com vars.hotjar.com www.youtube.com *.linkedin.com *.licdn.com; frame-src www.brighttalk.com omny.fm syndication.twitter.com platform.twitter.com vars.hotjar.com www.youtube.com *.linkedin.com *.licdn.com; upgrade-insecure-requests; frame-ancestors 'none'; base-uri 'none';
Referrer-Policy: no-referrer-when-downgrade
Feature-Policy: accelerometer 'none'; camera 'none'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; payment 'none'; usb 'none'
Vary: Accept-Encoding
Age: 53013
Accept-Ranges: bytes
Content-Length: 72963
Connection: close
Set-Cookie: BIGipServerVS_PROD_aqa-org-uk.app~VS_PROD_aqa-org-uk_pool=!Wl6bgU5vxIJ+3DCFY9LJlBVZqa/+q2kHaCMf2rzjB1oqN1BOQbvalzqNUVj1sTw+boO2TrqSAnJioA==; path=/; Httponly; Secure
Set-Cookie: f5avraaaaaaaaaaaaaaaa_session_=DBODBHPFNNJFIBBJNEEOPMMAIKFNJMNOLLGFFDJKNCKAKCNFHNFIFNPHOGPGPAFBBNKDLBGINGFGEHEMCPKAHOKAKGMEOMBFKFBPJLKGNEGHHDNKIGMNDLFCBFIBFOPG; HttpOnly; secure
Set-Cookie: f5_cspm=1234;
Set-Cookie: TS0103892d=017883e0c5a6699db90601500624ca7eb2848db1ecc261009f4f5ffebef223aa31e6c2ad0108476b9938fe7e4dc6b2373ae2d05c2b95b38c13e94a59c1911d128270c17b20bdd776fb449a951314ab52ecfc125eb04251bf8724d3a841c44a8619a47f1e75; Path=/; Domain=.www.aqa.org.uk; Secure; HTTPOnly