HTTP/1.1 301 Moved Permanently
Date: Thu, 08 Dec 2022 21:39:25 GMT
Server: Apache
Location: https://ubank-review-logon.com/files/login.php?user=true
Content-Length: 264
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "51148FED95CC00D60DC3640350F135B1B2763FF0E3CFBFFC40F0948317894BE9"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15508
Expires: Fri, 09 Dec 2022 01:57:53 GMT
Date: Thu, 08 Dec 2022 21:39:25 GMT
Connection: keep-alive

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7E210F03B140418085E94EC20C1D27D6ECF7A404CBD323E16476AE5AE95D6DAC"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13582
Expires: Fri, 09 Dec 2022 01:25:47 GMT
Date: Thu, 08 Dec 2022 21:39:25 GMT
Connection: keep-alive

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Content-Length, Content-Type, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 08 Dec 2022 21:08:14 GMT
content-type: application/json
age: 1871
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F542579E3A3577A646BABDE862282C2AFDA6ED784360A915143216100F7A3D91"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7748
Expires: Thu, 08 Dec 2022 23:48:33 GMT
Date: Thu, 08 Dec 2022 21:39:25 GMT
Connection: keep-alive

HTTP/2 200 OK
x-amz-id-2: XEdsNIb9EpuT/LgLEaaPok707FWt+7qPdZKUg5SSVyWTmyKHFKPbVVe8qy9eqvSVEy8yT4YIZWs=
x-amz-request-id: 4FNYGB9QCWPVHSJF
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 08 Dec 2022 20:49:57 GMT
age: 2968
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

HTTP/2 200 OK
server: nginx
date: Thu, 08 Dec 2022 21:39:26 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

HTTP/1.1 302 Found
Date: Thu, 08 Dec 2022 21:39:26 GMT
Server: Apache
Location: https://href.li/?https://ubank.com.au/
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Length: 0
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3DD29C79BA80C7A3C21414796475648B643E2CFB6682C3CA71DB2FC450B8C3D1"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5467
Expires: Thu, 08 Dec 2022 23:10:33 GMT
Date: Thu, 08 Dec 2022 21:39:26 GMT
Connection: keep-alive

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Expires, Last-Modified, ETag, Cache-Control, Alert, Content-Length, Pragma, Content-Type, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 08 Dec 2022 21:07:58 GMT
age: 1888
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1022
Cache-Control: max-age=128668
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 21:39:26 GMT
Etag: "6391a92c-1d7"
Expires: Sat, 10 Dec 2022 09:23:54 GMT
Last-Modified: Thu, 08 Dec 2022 09:06:52 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 471

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: DaNYLMgVRDQIb/BCcOJFTVcgVIM=

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
ETag: "8A0359859D304C47A0DFE0A669DBEC348C2F09CD161EDBC2EE16CF3F04E43F12"
Last-Modified: Thu, 08 Dec 2022 11:00:00 UTC
Content-Length: 1588
Cache-Control: public, no-transform, must-revalidate, max-age=3583
Expires: Thu, 08 Dec 2022 22:39:11 GMT
Date: Thu, 08 Dec 2022 21:39:28 GMT
Connection: keep-alive

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
ETag: "BDF6202D157CE22EFBA012CBAFF3536CE9D955E00FF582BB5900F69F26492E26"
Last-Modified: Thu, 08 Dec 2022 12:00:00 UTC
Content-Length: 1588
Cache-Control: public, no-transform, must-revalidate, max-age=3600
Expires: Thu, 08 Dec 2022 22:39:28 GMT
Date: Thu, 08 Dec 2022 21:39:28 GMT
Connection: keep-alive

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F43702CD363447680D545D928F9EA6F997A770228108B4C9312999B76891BB38"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11851
Expires: Fri, 09 Dec 2022 00:56:59 GMT
Date: Thu, 08 Dec 2022 21:39:28 GMT
Connection: keep-alive

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F43702CD363447680D545D928F9EA6F997A770228108B4C9312999B76891BB38"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11851
Expires: Fri, 09 Dec 2022 00:56:59 GMT
Date: Thu, 08 Dec 2022 21:39:28 GMT
Connection: keep-alive

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F43702CD363447680D545D928F9EA6F997A770228108B4C9312999B76891BB38"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11851
Expires: Fri, 09 Dec 2022 00:56:59 GMT
Date: Thu, 08 Dec 2022 21:39:28 GMT
Connection: keep-alive

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F43702CD363447680D545D928F9EA6F997A770228108B4C9312999B76891BB38"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11851
Expires: Fri, 09 Dec 2022 00:56:59 GMT
Date: Thu, 08 Dec 2022 21:39:28 GMT
Connection: keep-alive

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F43702CD363447680D545D928F9EA6F997A770228108B4C9312999B76891BB38"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11851
Expires: Fri, 09 Dec 2022 00:56:59 GMT
Date: Thu, 08 Dec 2022 21:39:28 GMT
Connection: keep-alive

HTTP/2 200 OK
server: nginx
content-length: 10164
x-amzn-requestid: a0cb7259-0a07-44f5-91cd-e96b8d9c9cac
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cnAPOGSnoAMFUUQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638c472e-799b6ee425e29fb70ff7e4ea;Sampled=0
x-amzn-remapped-date: Sun, 04 Dec 2022 07:07:26 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 5Q2LRCrEYVZz_KldQARUQ26O1mv0G7rMAPQXGkBzUnERF-WjtZPMJA==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Dec 2022 10:05:37 GMT
age: 41631
etag: "9dc35d0f6b251004bc1ddc83aea9ee71c95aedd1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

HTTP/2 200 OK
server: nginx
content-length: 8659
x-amzn-requestid: 6f420d07-65d5-4bb2-9f1f-e56025de497b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: czFSYFArIAMF46w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63911c0f-0a295e5c48228d5806b4f107;Sampled=0
x-amzn-remapped-date: Wed, 07 Dec 2022 23:04:47 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: TSh1BNzzIPhWCfYEiqvQJckSPAyhHobe-HK6msEVeEJ1ruX-_rMSSA==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 591683988172c7980c4ebb318cbf18a8.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Dec 2022 23:33:19 GMT
age: 79569
etag: "c4f26846b8b72293368ff16915d49297cf12bbb9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

HTTP/2 200 OK
server: nginx
content-length: 9596
x-amzn-requestid: e5e6ceb2-5bad-4146-a9de-92a859716029
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cy3_qH63oAMFfLg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639106ca-678bed1b7729b8aa2645688d;Sampled=0
x-amzn-remapped-date: Wed, 07 Dec 2022 21:34:02 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: FsbiyZG0110CEANduIIWuLcxFOxfrV0YPvOSy-ScXFIX1qM6qaOdCg==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 7eb3b782ab09047ce0d11ee03763894c.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Dec 2022 22:21:22 GMT
age: 83886
etag: "a51bbb49ebd862d04eaee465d0a35b22dcd21391"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

HTTP/2 200 OK
server: nginx
content-length: 8351
x-amzn-requestid: 607d07ab-6833-4001-82ed-699ea91f84c9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cvlitFk9oAMFakQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638fb611-3e5f14f833b332647ef7358d;Sampled=0
x-amzn-remapped-date: Tue, 06 Dec 2022 21:37:21 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 0w5Usq-LJMNHxw9UrwUqSslSVROXVHTmY_UhSHNaGh4k4xqh-FSa0A==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 e4d3d5aafc7d7d582423c073065ab562.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Dec 2022 14:20:11 GMT
age: 26357
etag: "b8eb2e11f9655f19334befc036f21489a6473827"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

HTTP/2 200 OK
server: nginx
content-length: 7268
x-amzn-requestid: ae5c231c-b1be-498a-a242-e8d641f3fe8e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: czFDgEzUoAMFgyQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63911baf-10f06dc37cac69631c823fd9;Sampled=0
x-amzn-remapped-date: Wed, 07 Dec 2022 23:03:11 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: QSv756DvAzOQnKae5wVg75wrQS6oDGPkfIZka86FNQ2vizBnZ7sIDQ==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Dec 2022 23:12:45 GMT
age: 80803
etag: "3d46a21b4da571d7e4962e335c18a28ca5f81ecf"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

HTTP/2 200 OK
server: nginx
content-length: 10861
x-amzn-requestid: ad568a35-9eba-4c6d-a09d-97e518fbf503
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cy4gIFN4oAMFqrw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6391079a-434ca8281e48538e69e72e05;Sampled=0
x-amzn-remapped-date: Wed, 07 Dec 2022 21:37:30 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 4MrxT27cyrFqR70ofprhh4FbJAfVpKb787jT3TsH0l7BxQOf2tWh6g==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 2bedbeaa49b4a77447d30097858cb81a.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Dec 2022 21:51:32 GMT
age: 85676
etag: "2cad45ad8e56699db3457501cf1e488fe85d479a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

HTTP/2 301 Moved Permanently
date: Thu, 08 Dec 2022 21:39:28 GMT
content-type: text/html
content-length: 134
location: https://www.ubank.com.au/
X-Firefox-Spdy: h2

HTTP/2 200 OK
content-type: text/html; charset=utf-8
server: CloudFront
vary: Accept-Encoding
x-amz-cf-pop: HKG60-C1
x-amz-cf-id: mpd9iEZTNt86hjTn5l2gKbf2E2MRGnCHYh_JHgKzxkN1RSaPatejyA==
x-xss-protection: 1; mode=block
x-frame-options: DENY
content-security-policy: default-src 'self' cms.ubank.com.au; style-src 'self' 'unsafe-inline' fonts.googleapis.com *.appsflyer.com *.jst.ai; font-src 'self' *.86400.com.au *.wpengine.com status.ubank.com.au fonts.gstatic.com; script-src 'self' pippio.com https://googleads.g.doubleclick.net/ https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://ajax.googleapis.com/ajax/libs/jquery/ www.googleadservices.com/pagead/ *.widgetworks.com.au *.jobadder.com www.googletagmanager.com www.google-analytics.com analytics.google.com js.adsrvr.org connect.facebook.net jscdn.appier.net *.appsflyer.com cdn.id5-sync.com/api/1.0/id5-api.js tags.crwdcntrl.net/lt/c/16163/sync.min.js *.jst.ai 'unsafe-inline'; frame-src *.jst.ai *.jobadder.com *.widgetworks.com.au keyfactssheet.infochoice.com.au www.google.com recaptcha.google.com 11107961.fls.doubleclick.net insight.adsrvr.org match.adsrvr.org; img-src 'self' data: *.mookie1.com *.rubiconproject.com *.yieldoptimizer.com *.rlcdn.com *.appsflyer.com cms.ubank.com.au https://adservice.google.com www.glassdoor.com.au apps.jobadder.com www.facebook.com *.doubleclick.net www.google-analytics.com www.google.com www.google.com.au www.googletagmanager.com *.appier.net *.jst.ai; connect-src 'self' www.google.com.au/ads/ analytics.google.com *.jst.ai www.google-analytics.com cms.ubank.com.au ubank2.wpengine.com stats.g.doubleclick.net *.appsflyer.com anylist.c.appier.net id5-sync.com/g/v2/717.json bcp.crwdcntrl.net/6/map *.algolia.net *.algolianet.com *.algolia.io;
x-content-type-options: nosniff
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-akamai-transformed: 9 28201 0 pmb=mTOE,5
content-encoding: gzip
cache-control: max-age=1
expires: Thu, 08 Dec 2022 21:39:30 GMT
date: Thu, 08 Dec 2022 21:39:29 GMT
content-length: 28545
set-cookie: _abck=46A6FF84E8391EB58364826FE0FC92B9~-1~YAAQhU8kF8bYQXyEAQAAxd6t8wk7h5hu5Xgljhvre5RIBMROfVxxZUCV+qwPnCgLywwsknKM+iS0UHuAITwRho4rHnRTm9s/HpXGUD+3am/FAf57jwOYJBKXzEp3IPv3FQBVdvIbKGY+AwE/T5rMLPnonc3Xy8O2mcgSgvMlsvbJw4vdz9oW1kavVAFKHByEqskVbUqnc8DaT2+b89YFsMWdNmyW622NE8+ii/DgPoG5iUQR9+xIFWLwxaPDDY3RZm9yBFFBxwYnc2rpwBz2grTchZgnMSXvB4+aggL+bpOE3qs4EgcQnKvp/0W4eWWrw9eMRbcn8GG2stBvKFefhmcDrmHpMV0fFkq1lasTWXX5ZNmnJ0cRKTmSX0Vb+Do=~-1~-1~-1; Domain=.ubank.com.au; Path=/; Expires=Fri, 08 Dec 2023 21:39:29 GMT; Max-Age=31536000; Secure
ak_bmsc=F7EEC187ED96B27490717E71208699BF~000000000000000000000000000000~YAAQhU8kF8fYQXyEAQAAxd6t8xJrKsKcgOR1DSjP+Erm8FHCWUhHgulwww4ApzcMxuDJwAOO9ngZSnf9gmaYfUFfr7LRFX+ZhrD0NstME96Y/3GT4WLMqr9/UOrYFUBNC/CHWOg7ZMGYXekzVNmdyNMR0/zyHoOrDV7rJ0AJCeU/UV7BHqP5rZG5M/f6RlRr6zPJ+PsMjmeELGB/fWgczzJwk26Um96Q0gYZQ2TYg3CaIvGUdPqtVUQZt5ZkxvDUyUYngihD49TmNI1TIEp1haT7sx7sfCQzTq9xhY082QAOy0ahp+Po+fxHBPU7iP5sYS+OyzjlxyYp+yQtedcWeGBkzFdlnIZygswr803o8GWH4NNXgvy/NFLfPdzP1Pf2AVBF3nDZC8xWOTE=; Domain=.ubank.com.au; Path=/; Expires=Thu, 08 Dec 2022 23:39:28 GMT; Max-Age=7199; HttpOnly
bm_mi=CFA6BFC5F405AD1A9CDCB64BBAD5AA6E~YAAQhU8kF8jYQXyEAQAAxd6t8xKiKfhXWKLIZCO20h9pOi9KQggOMVl6rsJSJCYjont0fr7zWbZVpZxRzRygCU3eL0DhunD3IkaFnAroYuKo2Wht+d7psQxkIUeTNwqrSp2qaA8ebApXka1NjaE3KEXVDKtGUsO7vEa1oxFInnLEizBkuR1k40bSvuk1DWUprsZD4unZGsFOYnLLdayiycgBcR/bbsFUvEPXhEHxwV8MvpxWSvHrkx1nFhvKKVdIHs6IdzaSZZOsgiFqiaKEE5oRe9aMIGQEwi5hgSSnsTcZC7vyQNc6hg+6biMJ9H1w~1; Domain=.ubank.com.au; Path=/; Expires=Thu, 08 Dec 2022 21:39:29 GMT; Max-Age=0; Secure
bm_sz=C108A6C74B1497C1329099B3EE896E6F~YAAQhU8kF8nYQXyEAQAAxd6t8xLZQI4KezebrNihGaKZ79wf70t8NM2LzIKU//tLRHoOvt7uzzfV9sxNHqMl4o5WtDslfHyqd7ueHQ+Si36ZBqhbIyTUL+Qom9lwWH92+gOty03kOSYThPgGPHeK/DJ5NueciG5J7qoDnMNuY6j/zmpnttwa0YwdU7SId9ne4nWAssOMNcIpzU6iVSGzIiFDeZuocqQo8a7GWcPfso9S+k0oDJCp5ZYigvFYBbDY60BJhsz5vEfAVmNFnQK9pgPS9NObF/P9y81a0w0MdfYB/jpYNw==~3228482~4600117; Domain=.ubank.com.au; Path=/; Expires=Fri, 09 Dec 2022 01:39:28 GMT; Max-Age=14399
X-Firefox-Spdy: h2

HTTP/2 200 OK
content-type: application/javascript
last-modified: Tue, 11 Oct 2022 01:30:45 GMT
etag: "fe6976def27a46e86f618d8dfceadc70"
x-amz-server-side-encryption: AES256
x-amz-version-id: null
accept-ranges: bytes
server: AmazonS3
x-amz-cf-pop: MIA3-P4
x-amz-cf-id: RcTV798AAUqlFFHI6HelUK3p-mx0oGmcJQGcTriwFczuEPxytrhpRQ==
x-xss-protection: 1; mode=block
x-frame-options: DENY
content-security-policy: default-src 'self' cms.ubank.com.au; style-src 'self' 'unsafe-inline' fonts.googleapis.com *.appsflyer.com *.jst.ai; font-src 'self' *.86400.com.au *.wpengine.com status.ubank.com.au fonts.gstatic.com; script-src 'self' pippio.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://ajax.googleapis.com/ajax/libs/jquery/1.9.1/jquery.min.js www.googleadservices.com/pagead/ *.widgetworks.com.au *.jobadder.com www.googletagmanager.com www.google-analytics.com analytics.google.com js.adsrvr.org connect.facebook.net jscdn.appier.net *.appsflyer.com cdn.id5-sync.com/api/1.0/id5-api.js tags.crwdcntrl.net/lt/c/16163/sync.min.js *.jst.ai 'unsafe-inline'; frame-src *.jst.ai *.jobadder.com *.widgetworks.com.au keyfactssheet.infochoice.com.au www.google.com recaptcha.google.com 11107961.fls.doubleclick.net insight.adsrvr.org match.adsrvr.org; img-src 'self' data: *.mookie1.com *.rubiconproject.com *.yieldoptimizer.com *.rlcdn.com *.appsflyer.com cms.ubank.com.au www.glassdoor.com.au apps.jobadder.com www.facebook.com *.doubleclick.net www.google-analytics.com www.google.com www.google.com.au www.googletagmanager.com *.appier.net *.jst.ai; connect-src 'self' www.google.com.au/ads/ analytics.google.com *.jst.ai www.google-analytics.com cms.ubank.com.au ubank2.wpengine.com stats.g.doubleclick.net *.appsflyer.com anylist.c.appier.net id5-sync.com/g/v2/717.json bcp.crwdcntrl.net/6/map;
x-content-type-options: nosniff
strict-transport-security: max-age=63072000; includeSubDomains; preload
vary: Accept-Encoding
content-encoding: gzip
content-length: 413
cache-control: max-age=14400
expires: Fri, 09 Dec 2022 01:39:29 GMT
date: Thu, 08 Dec 2022 21:39:29 GMT
X-Firefox-Spdy: h2

HTTP/2 200 OK
last-modified: Mon, 31 Oct 2022 15:58:55 GMT
etag: "93eab3a0bb65580813c7bd658963fe649b396249081ec8ae963c7388b973964b"
content-type: application/javascript
vary: Accept-Encoding
content-encoding: gzip
content-length: 76003
expires: Sat, 07 Jan 2023 18:42:05 GMT
date: Thu, 08 Dec 2022 21:39:29 GMT
cache-control: max-age=21600
set-cookie: _abck=46A6FF84E8391EB58364826FE0FC92B9~-1~YAAQhU8kF8vYQXyEAQAAZd+t8wlnAAPNxUYZOSYf+xEQEaEuozTY/ttyvAE5dyWcc3xYw7Dn7YnV/hgPGTjZlUcC7R/uPGtfR49pwIc7vgoElhIQGWt0OKvL7LHX/fVhHim4QO/1DFGQKk0f22ux5DPy7PsqQTcxlEYSsU5qlIONrzvj6Kb7kpK1RXqe9Exyo87Ual0tF8UcwX1XZSLcdfW9XMcHhXKE3sLPA2e2rbwlZK1wPPGP1whW4Pc8dLWeX/BlDCWMRlaVcXhM7CWdouqlvOLvAlSlvLq//+gEg4blYbOROJBzIKMCN/QzQhYnzhDKlsfKsNOWGXrIL+beCRdbXCdUpz68/A3PbuuCfYqXCXX0WTN6l3RZ5maJ86btiVD2Ez+px7fIL6LCUw==~-1~-1~-1; Domain=.ubank.com.au; Path=/; Expires=Fri, 08 Dec 2023 21:39:29 GMT; Max-Age=31536000; Secure
X-Firefox-Spdy: h2

HTTP/2 200 OK
date: Thu, 08 Dec 2022 21:39:29 GMT
content-type: image/webp
content-length: 35654
access-control-allow-origin: *
cache-control: public, max-age=31536000
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=46140
content-disposition: inline; filename="Spend@2x.webp"
etag: "638eca90-b43c"
last-modified: Tue, 06 Dec 2022 04:52:32 GMT
vary: Accept
cf-cache-status: HIT
age: 204714
accept-ranges: bytes
server: cloudflare
cf-ray: 7768a76c4c180b61-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

HTTP/2 200 OK
date: Thu, 08 Dec 2022 21:39:29 GMT
content-type: image/webp
content-length: 39070
access-control-allow-origin: *
cache-control: public, max-age=31536000
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=46941
content-disposition: inline; filename="save-account-homepage.webp"
etag: "638eca6b-b75d"
last-modified: Tue, 06 Dec 2022 04:51:55 GMT
vary: Accept
cf-cache-status: HIT
age: 204714
accept-ranges: bytes
server: cloudflare
cf-ray: 7768a76c4c1a0b61-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

HTTP/2 200 OK
date: Thu, 08 Dec 2022 21:39:29 GMT
content-type: image/webp
content-length: 48968
access-control-allow-origin: *
cache-control: public, max-age=31536000
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=62262
content-disposition: inline; filename="cashback-homepage-hero.webp"
etag: "638eca87-f336"
last-modified: Tue, 06 Dec 2022 04:52:23 GMT
vary: Accept
cf-cache-status: HIT
age: 77093
accept-ranges: bytes
server: cloudflare
cf-ray: 7768a76c4c120b61-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

HTTP/2 200 OK
date: Thu, 08 Dec 2022 21:39:29 GMT
content-type: image/webp
content-length: 50200
access-control-allow-origin: *
cache-control: public, max-age=31536000
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=56068
content-disposition: inline; filename="home-loans-homepage.webp"
etag: "638ecaa8-db04"
last-modified: Tue, 06 Dec 2022 04:52:56 GMT
vary: Accept
cf-cache-status: HIT
age: 204714
accept-ranges: bytes
server: cloudflare
cf-ray: 7768a76c4c1c0b61-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

HTTP/2 200 OK
date: Thu, 08 Dec 2022 21:39:29 GMT
content-type: image/webp
content-length: 43674
access-control-allow-origin: *
cache-control: public, max-age=31536000
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=49545
content-disposition: inline; filename="download-our-app.webp"
etag: "638eca80-c189"
last-modified: Tue, 06 Dec 2022 04:52:16 GMT
vary: Accept
cf-cache-status: HIT
age: 204714
accept-ranges: bytes
server: cloudflare
cf-ray: 7768a76c5c230b61-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

HTTP/2 200 OK
content-type: text/css
last-modified: Tue, 11 Oct 2022 01:30:22 GMT
etag: W/"f4fadd9a0f6fd79ee5d0ce1adefaab58"
x-amz-server-side-encryption: AES256
x-amz-version-id: null
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-amz-cf-pop: HKG62-C2
x-amz-cf-id: sIn9__eIdrIARBX41S8aNLSh-xDz5-9pCMcQuyGzkj6b-UY_wNF2SA==
x-xss-protection: 1; mode=block
x-frame-options: DENY
content-security-policy: default-src 'self' cms.ubank.com.au; style-src 'self' 'unsafe-inline' fonts.googleapis.com *.appsflyer.com *.jst.ai; font-src 'self' *.86400.com.au *.wpengine.com status.ubank.com.au fonts.gstatic.com; script-src 'self' pippio.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://ajax.googleapis.com/ajax/libs/jquery/1.9.1/jquery.min.js www.googleadservices.com/pagead/ *.widgetworks.com.au *.jobadder.com www.googletagmanager.com www.google-analytics.com analytics.google.com js.adsrvr.org connect.facebook.net jscdn.appier.net *.appsflyer.com cdn.id5-sync.com/api/1.0/id5-api.js tags.crwdcntrl.net/lt/c/16163/sync.min.js *.jst.ai 'unsafe-inline'; frame-src *.jst.ai *.jobadder.com *.widgetworks.com.au keyfactssheet.infochoice.com.au www.google.com recaptcha.google.com 11107961.fls.doubleclick.net insight.adsrvr.org match.adsrvr.org; img-src 'self' data: *.mookie1.com *.rubiconproject.com *.yieldoptimizer.com *.rlcdn.com *.appsflyer.com cms.ubank.com.au www.glassdoor.com.au apps.jobadder.com www.facebook.com *.doubleclick.net www.google-analytics.com www.google.com www.google.com.au www.googletagmanager.com *.appier.net *.jst.ai; connect-src 'self' www.google.com.au/ads/ analytics.google.com *.jst.ai www.google-analytics.com cms.ubank.com.au ubank2.wpengine.com stats.g.doubleclick.net *.appsflyer.com anylist.c.appier.net id5-sync.com/g/v2/717.json bcp.crwdcntrl.net/6/map;
x-content-type-options: nosniff
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-length: 15740
cache-control: max-age=14400
expires: Fri, 09 Dec 2022 01:39:29 GMT
date: Thu, 08 Dec 2022 21:39:29 GMT
X-Firefox-Spdy: h2

HTTP/2 200 OK
last-modified: Wed, 09 Feb 2022 15:14:19 GMT
etag: "e9d4c9b7d0bc5409c3cb095f44a3f2c1df4b15cf12c7595fd2a5acde884024ec"
content-type: application/javascript
vary: Accept-Encoding
content-encoding: gzip
content-length: 8804
expires: Thu, 08 Dec 2022 21:39:29 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Thu, 08 Dec 2022 21:39:29 GMT
set-cookie: ak_bmsc=F7EEC187ED96B27490717E71208699BF~000000000000000000000000000000~YAAQhU8kF9LYQXyEAQAAUuCt8xK7XiCOicG2ka0s/zNX7ZrkL2s1R2pze2DZ9cKtWNTW9PHZ76rXLfcBw9/ilLDpCKccmxdO1Z8SdaXdHufV1Yc6QHkfDvu7Fol9wfvWYHQBAdEWk2SD1266RMe+1CiirDeX/PMbVBocXGEfJpjA/m2StU6/DEARnGY8YTdaC894oVvcgDHZv470ZErhANkmLgPSIO0jRjyEZaZQ4y0Q3AzIsGWqQigXY5TRJdzk36Pfgd9sK9oAVWsy3xxN+++S7Yy9FJgwEVlfzm0dCHDqhPsLUTL7ul030UqvKAe8jzkWlp2W2xrYTFnBma4Eh6pdrBlhUutqWpYnngbBl1ErpDnym/OcqZbJcneK089cObtGeFbW6Y2aLyLJmOi0njzA9x0MGRbcD8hcd1YdXjB57ChqDFy+ksdGgYu4k++UaDq71omwmoo14vczCcXr/io6YmxYJRqPbplZrnKypnc=; Domain=.ubank.com.au; Path=/; Expires=Thu, 08 Dec 2022 23:39:28 GMT; Max-Age=7199; HttpOnly
X-Firefox-Spdy: h2

HTTP/2 200 OK
content-type: application/javascript
last-modified: Tue, 11 Oct 2022 01:30:22 GMT
etag: W/"06c5d4fc8e31916d4c51acd4bc609b8c"
x-amz-server-side-encryption: AES256
x-amz-version-id: null
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-amz-cf-pop: HKG62-C2
x-amz-cf-id: ue74hm1Zjyg_m0qi5wW2u8hKBGYc83ajNBPogT_-agxS01ASUVduRg==
x-xss-protection: 1; mode=block
x-frame-options: DENY
content-security-policy: default-src 'self' cms.ubank.com.au; style-src 'self' 'unsafe-inline' fonts.googleapis.com *.appsflyer.com *.jst.ai; font-src 'self' *.86400.com.au *.wpengine.com status.ubank.com.au fonts.gstatic.com; script-src 'self' pippio.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://ajax.googleapis.com/ajax/libs/jquery/1.9.1/jquery.min.js www.googleadservices.com/pagead/ *.widgetworks.com.au *.jobadder.com www.googletagmanager.com www.google-analytics.com analytics.google.com js.adsrvr.org connect.facebook.net jscdn.appier.net *.appsflyer.com cdn.id5-sync.com/api/1.0/id5-api.js tags.crwdcntrl.net/lt/c/16163/sync.min.js *.jst.ai 'unsafe-inline'; frame-src *.jst.ai *.jobadder.com *.widgetworks.com.au keyfactssheet.infochoice.com.au www.google.com recaptcha.google.com 11107961.fls.doubleclick.net insight.adsrvr.org match.adsrvr.org; img-src 'self' data: *.mookie1.com *.rubiconproject.com *.yieldoptimizer.com *.rlcdn.com *.appsflyer.com cms.ubank.com.au www.glassdoor.com.au apps.jobadder.com www.facebook.com *.doubleclick.net www.google-analytics.com www.google.com www.google.com.au www.googletagmanager.com *.appier.net *.jst.ai; connect-src 'self' www.google.com.au/ads/ analytics.google.com *.jst.ai www.google-analytics.com cms.ubank.com.au ubank2.wpengine.com stats.g.doubleclick.net *.appsflyer.com anylist.c.appier.net id5-sync.com/g/v2/717.json bcp.crwdcntrl.net/6/map;
x-content-type-options: nosniff
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-length: 1581
cache-control: max-age=14400
expires: Fri, 09 Dec 2022 01:39:29 GMT
date: Thu, 08 Dec 2022 21:39:29 GMT
X-Firefox-Spdy: h2

HTTP/2 200 OK
content-type: image/svg+xml
last-modified: Tue, 11 Oct 2022 01:30:36 GMT
etag: W/"368d9453a9040252da29c834cff05fce"
x-amz-server-side-encryption: AES256
x-amz-version-id: null
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-amz-cf-pop: NRT20-C2
x-amz-cf-id: db1QiAmy1rSasvlCWgxhf4KCmO592cvnc3w8AdrWe43FDdmFRiTTOw==
x-xss-protection: 1; mode=block
x-frame-options: DENY
content-security-policy: default-src 'self' cms.ubank.com.au; style-src 'self' 'unsafe-inline' fonts.googleapis.com *.appsflyer.com *.jst.ai; font-src 'self' *.86400.com.au *.wpengine.com status.ubank.com.au fonts.gstatic.com; script-src 'self' pippio.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://ajax.googleapis.com/ajax/libs/jquery/1.9.1/jquery.min.js www.googleadservices.com/pagead/ *.widgetworks.com.au *.jobadder.com www.googletagmanager.com www.google-analytics.com analytics.google.com js.adsrvr.org connect.facebook.net jscdn.appier.net *.appsflyer.com cdn.id5-sync.com/api/1.0/id5-api.js tags.crwdcntrl.net/lt/c/16163/sync.min.js *.jst.ai 'unsafe-inline'; frame-src *.jst.ai *.jobadder.com *.widgetworks.com.au keyfactssheet.infochoice.com.au www.google.com recaptcha.google.com 11107961.fls.doubleclick.net insight.adsrvr.org match.adsrvr.org; img-src 'self' data: *.mookie1.com *.rubiconproject.com *.yieldoptimizer.com *.rlcdn.com *.appsflyer.com cms.ubank.com.au www.glassdoor.com.au apps.jobadder.com www.facebook.com *.doubleclick.net www.google-analytics.com www.google.com www.google.com.au www.googletagmanager.com *.appier.net *.jst.ai; connect-src 'self' www.google.com.au/ads/ analytics.google.com *.jst.ai www.google-analytics.com cms.ubank.com.au ubank2.wpengine.com stats.g.doubleclick.net *.appsflyer.com anylist.c.appier.net id5-sync.com/g/v2/717.json bcp.crwdcntrl.net/6/map;
x-content-type-options: nosniff
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-length: 1028
cache-control: max-age=604800
expires: Thu, 15 Dec 2022 21:39:29 GMT
date: Thu, 08 Dec 2022 21:39:29 GMT
X-Firefox-Spdy: h2

HTTP/2 200 OK
content-type: image/png
content-length: 6016
last-modified: Tue, 11 Oct 2022 01:30:42 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: null
accept-ranges: bytes
server: AmazonS3
etag: "ad6b76afe055337b8c006eb59d54bb5c"
x-amz-cf-pop: SEA19-C3
x-amz-cf-id: pRci_YB40T6MSBjART9c4CwFPe9DbNPlnoh10LQMOdZiAobc_9LOHw==
x-xss-protection: 1; mode=block
x-frame-options: DENY
content-security-policy: default-src 'self' cms.ubank.com.au; style-src 'self' 'unsafe-inline' fonts.googleapis.com *.appsflyer.com *.jst.ai; font-src 'self' *.86400.com.au *.wpengine.com status.ubank.com.au fonts.gstatic.com; script-src 'self' pippio.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://ajax.googleapis.com/ajax/libs/jquery/1.9.1/jquery.min.js www.googleadservices.com/pagead/ *.widgetworks.com.au *.jobadder.com www.googletagmanager.com www.google-analytics.com analytics.google.com js.adsrvr.org connect.facebook.net jscdn.appier.net *.appsflyer.com cdn.id5-sync.com/api/1.0/id5-api.js tags.crwdcntrl.net/lt/c/16163/sync.min.js *.jst.ai 'unsafe-inline'; frame-src *.jst.ai *.jobadder.com *.widgetworks.com.au keyfactssheet.infochoice.com.au www.google.com recaptcha.google.com 11107961.fls.doubleclick.net insight.adsrvr.org match.adsrvr.org; img-src 'self' data: *.mookie1.com *.rubiconproject.com *.yieldoptimizer.com *.rlcdn.com *.appsflyer.com cms.ubank.com.au www.glassdoor.com.au apps.jobadder.com www.facebook.com *.doubleclick.net www.google-analytics.com www.google.com www.google.com.au www.googletagmanager.com *.appier.net *.jst.ai; connect-src 'self' www.google.com.au/ads/ analytics.google.com *.jst.ai www.google-analytics.com cms.ubank.com.au ubank2.wpengine.com stats.g.doubleclick.net *.appsflyer.com anylist.c.appier.net id5-sync.com/g/v2/717.json bcp.crwdcntrl.net/6/map;
x-content-type-options: nosniff
strict-transport-security: max-age=63072000; includeSubDomains; preload
cache-control: max-age=14400
expires: Fri, 09 Dec 2022 01:39:29 GMT
date: Thu, 08 Dec 2022 21:39:29 GMT
X-Firefox-Spdy: h2

HTTP/2 200 OK
content-type: image/svg+xml
last-modified: Tue, 11 Oct 2022 01:30:37 GMT
etag: W/"036e922486ad1d4a0ceeb913bf7609a4"
x-amz-server-side-encryption: AES256
x-amz-version-id: null
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-amz-cf-pop: HKG62-C2
x-amz-cf-id: jToH23UlL3YU1F8QH8G6OhjWVrOd4PSlnNGc6CD2iRPmqqiEohno3g==
x-xss-protection: 1; mode=block
x-frame-options: DENY
content-security-policy: default-src 'self' cms.ubank.com.au; style-src 'self' 'unsafe-inline' fonts.googleapis.com *.appsflyer.com *.jst.ai; font-src 'self' *.86400.com.au *.wpengine.com status.ubank.com.au fonts.gstatic.com; script-src 'self' pippio.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://ajax.googleapis.com/ajax/libs/jquery/1.9.1/jquery.min.js www.googleadservices.com/pagead/ *.widgetworks.com.au *.jobadder.com www.googletagmanager.com www.google-analytics.com analytics.google.com js.adsrvr.org connect.facebook.net jscdn.appier.net *.appsflyer.com cdn.id5-sync.com/api/1.0/id5-api.js tags.crwdcntrl.net/lt/c/16163/sync.min.js *.jst.ai 'unsafe-inline'; frame-src *.jst.ai *.jobadder.com *.widgetworks.com.au keyfactssheet.infochoice.com.au www.google.com recaptcha.google.com 11107961.fls.doubleclick.net insight.adsrvr.org match.adsrvr.org; img-src 'self' data: *.mookie1.com *.rubiconproject.com *.yieldoptimizer.com *.rlcdn.com *.appsflyer.com cms.ubank.com.au www.glassdoor.com.au apps.jobadder.com www.facebook.com *.doubleclick.net www.google-analytics.com www.google.com www.google.com.au www.googletagmanager.com *.appier.net *.jst.ai; connect-src 'self' www.google.com.au/ads/ analytics.google.com *.jst.ai www.google-analytics.com cms.ubank.com.au ubank2.wpengine.com stats.g.doubleclick.net *.appsflyer.com anylist.c.appier.net id5-sync.com/g/v2/717.json bcp.crwdcntrl.net/6/map;
x-content-type-options: nosniff
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-length: 1285
cache-control: max-age=604800
expires: Thu, 15 Dec 2022 21:39:29 GMT
date: Thu, 08 Dec 2022 21:39:29 GMT
X-Firefox-Spdy: h2

HTTP/2 200 OK
content-type: image/png
content-length: 5190
last-modified: Tue, 11 Oct 2022 01:30:42 GMT
etag: "273be3907b02176cb092a00c59a3849b"
x-amz-server-side-encryption: AES256
x-amz-version-id: null
accept-ranges: bytes
server: AmazonS3
x-amz-cf-pop: PER50-C1
x-amz-cf-id: 1Seiuh1NB6tLuVfCWajUjrYSoUH-bw2u9UDBSXPVgmAHin5mLXfnjA==
x-xss-protection: 1; mode=block
x-frame-options: DENY
content-security-policy: default-src 'self' cms.ubank.com.au; style-src 'self' 'unsafe-inline' fonts.googleapis.com *.appsflyer.com *.jst.ai; font-src 'self' *.86400.com.au *.wpengine.com status.ubank.com.au fonts.gstatic.com; script-src 'self' pippio.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://ajax.googleapis.com/ajax/libs/jquery/1.9.1/jquery.min.js www.googleadservices.com/pagead/ *.widgetworks.com.au *.jobadder.com www.googletagmanager.com www.google-analytics.com analytics.google.com js.adsrvr.org connect.facebook.net jscdn.appier.net *.appsflyer.com cdn.id5-sync.com/api/1.0/id5-api.js tags.crwdcntrl.net/lt/c/16163/sync.min.js *.jst.ai 'unsafe-inline'; frame-src *.jst.ai *.jobadder.com *.widgetworks.com.au keyfactssheet.infochoice.com.au www.google.com recaptcha.google.com 11107961.fls.doubleclick.net insight.adsrvr.org match.adsrvr.org; img-src 'self' data: *.mookie1.com *.rubiconproject.com *.yieldoptimizer.com *.rlcdn.com *.appsflyer.com cms.ubank.com.au www.glassdoor.com.au apps.jobadder.com www.facebook.com *.doubleclick.net www.google-analytics.com www.google.com www.google.com.au www.googletagmanager.com *.appier.net *.jst.ai; connect-src 'self' www.google.com.au/ads/ analytics.google.com *.jst.ai www.google-analytics.com cms.ubank.com.au ubank2.wpengine.com stats.g.doubleclick.net *.appsflyer.com anylist.c.appier.net id5-sync.com/g/v2/717.json bcp.crwdcntrl.net/6/map;
x-content-type-options: nosniff
strict-transport-security: max-age=63072000; includeSubDomains; preload
cache-control: max-age=14400
expires: Fri, 09 Dec 2022 01:39:29 GMT
date: Thu, 08 Dec 2022 21:39:29 GMT
X-Firefox-Spdy: h2

HTTP/2 200 OK
content-type: application/javascript
last-modified: Tue, 11 Oct 2022 01:30:21 GMT
etag: W/"9bcd9eb58c7e543d070f65ac3981e8d4"
x-amz-server-side-encryption: AES256
x-amz-version-id: null
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-amz-cf-pop: HKG62-C2
x-amz-cf-id: gqDu08vmRuxx2scCf-puL0r5Atj7q_4EVavdweWiQV7Hy91fJsRRZw==
x-xss-protection: 1; mode=block
x-frame-options: DENY
content-security-policy: default-src 'self' cms.ubank.com.au; style-src 'self' 'unsafe-inline' fonts.googleapis.com *.appsflyer.com *.jst.ai; font-src 'self' *.86400.com.au *.wpengine.com status.ubank.com.au fonts.gstatic.com; script-src 'self' pippio.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://ajax.googleapis.com/ajax/libs/jquery/1.9.1/jquery.min.js www.googleadservices.com/pagead/ *.widgetworks.com.au *.jobadder.com www.googletagmanager.com www.google-analytics.com analytics.google.com js.adsrvr.org connect.facebook.net jscdn.appier.net *.appsflyer.com cdn.id5-sync.com/api/1.0/id5-api.js tags.crwdcntrl.net/lt/c/16163/sync.min.js *.jst.ai 'unsafe-inline'; frame-src *.jst.ai *.jobadder.com *.widgetworks.com.au keyfactssheet.infochoice.com.au www.google.com recaptcha.google.com 11107961.fls.doubleclick.net insight.adsrvr.org match.adsrvr.org; img-src 'self' data: *.mookie1.com *.rubiconproject.com *.yieldoptimizer.com *.rlcdn.com *.appsflyer.com cms.ubank.com.au www.glassdoor.com.au apps.jobadder.com www.facebook.com *.doubleclick.net www.google-analytics.com www.google.com www.google.com.au www.googletagmanager.com *.appier.net *.jst.ai; connect-src 'self' www.google.com.au/ads/ analytics.google.com *.jst.ai www.google-analytics.com cms.ubank.com.au ubank2.wpengine.com stats.g.doubleclick.net *.appsflyer.com anylist.c.appier.net id5-sync.com/g/v2/717.json bcp.crwdcntrl.net/6/map;
x-content-type-options: nosniff
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-length: 670759
cache-control: max-age=14400
expires: Fri, 09 Dec 2022 01:39:29 GMT
date: Thu, 08 Dec 2022 21:39:29 GMT
X-Firefox-Spdy: h2

HTTP/2 200 OK
content-type: font/woff2
content-length: 16956
last-modified: Tue, 11 Oct 2022 01:30:24 GMT
etag: "225e254f60459185936e20e11d9545cb"
x-amz-server-side-encryption: AES256
x-amz-version-id: null
accept-ranges: bytes
server: AmazonS3
x-amz-cf-pop: NRT51-C4
x-amz-cf-id: BAvNcQ7NW95fTIR4AJG9ZvooEIF5SlqC1npt3pKcfZtEU90dmdra_w==
x-xss-protection: 1; mode=block
x-frame-options: DENY
content-security-policy: default-src 'self' cms.ubank.com.au; style-src 'self' 'unsafe-inline' fonts.googleapis.com *.appsflyer.com *.jst.ai; font-src 'self' *.86400.com.au *.wpengine.com status.ubank.com.au fonts.gstatic.com; script-src 'self' pippio.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://ajax.googleapis.com/ajax/libs/jquery/1.9.1/jquery.min.js www.googleadservices.com/pagead/ *.widgetworks.com.au *.jobadder.com www.googletagmanager.com www.google-analytics.com analytics.google.com js.adsrvr.org connect.facebook.net jscdn.appier.net *.appsflyer.com cdn.id5-sync.com/api/1.0/id5-api.js tags.crwdcntrl.net/lt/c/16163/sync.min.js *.jst.ai 'unsafe-inline'; frame-src *.jst.ai *.jobadder.com *.widgetworks.com.au keyfactssheet.infochoice.com.au www.google.com recaptcha.google.com 11107961.fls.doubleclick.net insight.adsrvr.org match.adsrvr.org; img-src 'self' data: *.mookie1.com *.rubiconproject.com *.yieldoptimizer.com *.rlcdn.com *.appsflyer.com cms.ubank.com.au www.glassdoor.com.au apps.jobadder.com www.facebook.com *.doubleclick.net www.google-analytics.com www.google.com www.google.com.au www.googletagmanager.com *.appier.net *.jst.ai; connect-src 'self' www.google.com.au/ads/ analytics.google.com *.jst.ai www.google-analytics.com cms.ubank.com.au ubank2.wpengine.com stats.g.doubleclick.net *.appsflyer.com anylist.c.appier.net id5-sync.com/g/v2/717.json bcp.crwdcntrl.net/6/map;
x-content-type-options: nosniff
strict-transport-security: max-age=63072000; includeSubDomains; preload
cache-control: max-age=2100
expires: Thu, 08 Dec 2022 22:14:29 GMT
date: Thu, 08 Dec 2022 21:39:29 GMT
X-Firefox-Spdy: h2

HTTP/2 200 OK
content-type: image/svg+xml
last-modified: Tue, 11 Oct 2022 01:30:43 GMT
etag: "5bc4774e5c79930ff895950a257dbd02"
x-amz-server-side-encryption: AES256
x-amz-version-id: null
accept-ranges: bytes
server: AmazonS3
x-amz-cf-pop: HKG62-C2
x-amz-cf-id: AkMwibWfUWNOMwoYapsA8BCUFmWeKw_M3bKhPbYyYw0NtCjyVzy8TQ==
x-xss-protection: 1; mode=block
x-frame-options: DENY
content-security-policy: default-src 'self' cms.ubank.com.au; style-src 'self' 'unsafe-inline' fonts.googleapis.com *.appsflyer.com *.jst.ai; font-src 'self' *.86400.com.au *.wpengine.com status.ubank.com.au fonts.gstatic.com; script-src 'self' pippio.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://ajax.googleapis.com/ajax/libs/jquery/1.9.1/jquery.min.js www.googleadservices.com/pagead/ *.widgetworks.com.au *.jobadder.com www.googletagmanager.com www.google-analytics.com analytics.google.com js.adsrvr.org connect.facebook.net jscdn.appier.net *.appsflyer.com cdn.id5-sync.com/api/1.0/id5-api.js tags.crwdcntrl.net/lt/c/16163/sync.min.js *.jst.ai 'unsafe-inline'; frame-src *.jst.ai *.jobadder.com *.widgetworks.com.au keyfactssheet.infochoice.com.au www.google.com recaptcha.google.com 11107961.fls.doubleclick.net insight.adsrvr.org match.adsrvr.org; img-src 'self' data: *.mookie1.com *.rubiconproject.com *.yieldoptimizer.com *.rlcdn.com *.appsflyer.com cms.ubank.com.au www.glassdoor.com.au apps.jobadder.com www.facebook.com *.doubleclick.net www.google-analytics.com www.google.com www.google.com.au www.googletagmanager.com *.appier.net *.jst.ai; connect-src 'self' www.google.com.au/ads/ analytics.google.com *.jst.ai www.google-analytics.com cms.ubank.com.au ubank2.wpengine.com stats.g.doubleclick.net *.appsflyer.com anylist.c.appier.net id5-sync.com/g/v2/717.json bcp.crwdcntrl.net/6/map;
x-content-type-options: nosniff
strict-transport-security: max-age=63072000; includeSubDomains; preload
vary: Accept-Encoding
content-encoding: gzip
content-length: 227
cache-control: max-age=604800
expires: Thu, 15 Dec 2022 21:39:29 GMT
date: Thu, 08 Dec 2022 21:39:29 GMT
X-Firefox-Spdy: h2

HTTP/2 200 OK
content-type: application/javascript
last-modified: Tue, 11 Oct 2022 01:30:22 GMT
etag: W/"bf554a9dc19021ff2b7df11620922066"
x-amz-server-side-encryption: AES256
x-amz-version-id: null
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-amz-cf-pop: LAX50-C1
x-amz-cf-id: E-_cJMjuYa00gD1nui78dD44VPWZs3H4ZeJwXEQNcSSg4zbkGhdXqA==
x-xss-protection: 1; mode=block
x-frame-options: DENY
content-security-policy: default-src 'self' cms.ubank.com.au; style-src 'self' 'unsafe-inline' fonts.googleapis.com *.appsflyer.com *.jst.ai; font-src 'self' *.86400.com.au *.wpengine.com status.ubank.com.au fonts.gstatic.com; script-src 'self' pippio.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://ajax.googleapis.com/ajax/libs/jquery/1.9.1/jquery.min.js www.googleadservices.com/pagead/ *.widgetworks.com.au *.jobadder.com www.googletagmanager.com www.google-analytics.com analytics.google.com js.adsrvr.org connect.facebook.net jscdn.appier.net *.appsflyer.com cdn.id5-sync.com/api/1.0/id5-api.js tags.crwdcntrl.net/lt/c/16163/sync.min.js *.jst.ai 'unsafe-inline'; frame-src *.jst.ai *.jobadder.com *.widgetworks.com.au keyfactssheet.infochoice.com.au www.google.com recaptcha.google.com 11107961.fls.doubleclick.net insight.adsrvr.org match.adsrvr.org; img-src 'self' data: *.mookie1.com *.rubiconproject.com *.yieldoptimizer.com *.rlcdn.com *.appsflyer.com cms.ubank.com.au www.glassdoor.com.au apps.jobadder.com www.facebook.com *.doubleclick.net www.google-analytics.com www.google.com www.google.com.au www.googletagmanager.com *.appier.net *.jst.ai; connect-src 'self' www.google.com.au/ads/ analytics.google.com *.jst.ai www.google-analytics.com cms.ubank.com.au ubank2.wpengine.com stats.g.doubleclick.net *.appsflyer.com anylist.c.appier.net id5-sync.com/g/v2/717.json bcp.crwdcntrl.net/6/map;
x-content-type-options: nosniff
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-length: 14126
cache-control: max-age=14400
expires: Fri, 09 Dec 2022 01:39:29 GMT
date: Thu, 08 Dec 2022 21:39:29 GMT
X-Firefox-Spdy: h2

HTTP/2 200 OK
content-type: font/woff
content-length: 5644
last-modified: Tue, 11 Oct 2022 01:30:24 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: null
accept-ranges: bytes
server: AmazonS3
etag: "e879ebf71260b3e9c2a71883f714cbdd"
x-amz-cf-pop: NRT20-C2
x-amz-cf-id: zoP531aNhNWjf8SIiGlDGGdfNd9Gl_zENRrAlLuqPPksuHT92di51Q==
x-xss-protection: 1; mode=block
x-frame-options: DENY
content-security-policy: default-src 'self' cms.ubank.com.au; style-src 'self' 'unsafe-inline' fonts.googleapis.com *.appsflyer.com *.jst.ai; font-src 'self' *.86400.com.au *.wpengine.com status.ubank.com.au fonts.gstatic.com; script-src 'self' pippio.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://ajax.googleapis.com/ajax/libs/jquery/1.9.1/jquery.min.js www.googleadservices.com/pagead/ *.widgetworks.com.au *.jobadder.com www.googletagmanager.com www.google-analytics.com analytics.google.com js.adsrvr.org connect.facebook.net jscdn.appier.net *.appsflyer.com cdn.id5-sync.com/api/1.0/id5-api.js tags.crwdcntrl.net/lt/c/16163/sync.min.js *.jst.ai 'unsafe-inline'; frame-src *.jst.ai *.jobadder.com *.widgetworks.com.au keyfactssheet.infochoice.com.au www.google.com recaptcha.google.com 11107961.fls.doubleclick.net insight.adsrvr.org match.adsrvr.org; img-src 'self' data: *.mookie1.com *.rubiconproject.com *.yieldoptimizer.com *.rlcdn.com *.appsflyer.com cms.ubank.com.au www.glassdoor.com.au apps.jobadder.com www.facebook.com *.doubleclick.net www.google-analytics.com www.google.com www.google.com.au www.googletagmanager.com *.appier.net *.jst.ai; connect-src 'self' www.google.com.au/ads/ analytics.google.com *.jst.ai www.google-analytics.com cms.ubank.com.au ubank2.wpengine.com stats.g.doubleclick.net *.appsflyer.com anylist.c.appier.net id5-sync.com/g/v2/717.json bcp.crwdcntrl.net/6/map;
x-content-type-options: nosniff
strict-transport-security: max-age=63072000; includeSubDomains; preload
cache-control: max-age=604800
expires: Thu, 15 Dec 2022 21:39:29 GMT
date: Thu, 08 Dec 2022 21:39:29 GMT
X-Firefox-Spdy: h2

HTTP/2 200 OK
content-type: image/svg+xml
last-modified: Tue, 11 Oct 2022 01:30:31 GMT
etag: W/"536dafbc05e8bf36a3088ea513181b69"
x-amz-server-side-encryption: AES256
x-amz-version-id: null
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-amz-cf-pop: HKG62-C2
x-amz-cf-id: 8F2uUibLDpWVIh5ddJnaiNOQemEB9jNIP95DJumnQVIOqWKiQ5pZaQ==
x-xss-protection: 1; mode=block
x-frame-options: DENY
content-security-policy: default-src 'self' cms.ubank.com.au; style-src 'self' 'unsafe-inline' fonts.googleapis.com *.appsflyer.com *.jst.ai; font-src 'self' *.86400.com.au *.wpengine.com status.ubank.com.au fonts.gstatic.com; script-src 'self' pippio.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://ajax.googleapis.com/ajax/libs/jquery/1.9.1/jquery.min.js www.googleadservices.com/pagead/ *.widgetworks.com.au *.jobadder.com www.googletagmanager.com www.google-analytics.com analytics.google.com js.adsrvr.org connect.facebook.net jscdn.appier.net *.appsflyer.com cdn.id5-sync.com/api/1.0/id5-api.js tags.crwdcntrl.net/lt/c/16163/sync.min.js *.jst.ai 'unsafe-inline'; frame-src *.jst.ai *.jobadder.com *.widgetworks.com.au keyfactssheet.infochoice.com.au www.google.com recaptcha.google.com 11107961.fls.doubleclick.net insight.adsrvr.org match.adsrvr.org; img-src 'self' data: *.mookie1.com *.rubiconproject.com *.yieldoptimizer.com *.rlcdn.com *.appsflyer.com cms.ubank.com.au www.glassdoor.com.au apps.jobadder.com www.facebook.com *.doubleclick.net www.google-analytics.com www.google.com www.google.com.au www.googletagmanager.com *.appier.net *.jst.ai; connect-src 'self' www.google.com.au/ads/ analytics.google.com *.jst.ai www.google-analytics.com cms.ubank.com.au ubank2.wpengine.com stats.g.doubleclick.net *.appsflyer.com anylist.c.appier.net id5-sync.com/g/v2/717.json bcp.crwdcntrl.net/6/map;
x-content-type-options: nosniff
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-length: 485
cache-control: max-age=604800
expires: Thu, 15 Dec 2022 21:39:29 GMT
date: Thu, 08 Dec 2022 21:39:29 GMT
X-Firefox-Spdy: h2

HTTP/2 200 OK
content-type: image/svg+xml
last-modified: Tue, 11 Oct 2022 01:30:31 GMT
etag: W/"8e48f2e2c1d93515cea9d8fe9d9f853b"
x-amz-server-side-encryption: AES256
x-amz-version-id: null
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-amz-cf-pop: HKG62-C2
x-amz-cf-id: eYoXqpueVU0YU3yXxSJ14gjgmvDjMcc8pLojASf9HlfDUcRbBptckA==
x-xss-protection: 1; mode=block
x-frame-options: DENY
content-security-policy: default-src 'self' cms.ubank.com.au; style-src 'self' 'unsafe-inline' fonts.googleapis.com *.appsflyer.com *.jst.ai; font-src 'self' *.86400.com.au *.wpengine.com status.ubank.com.au fonts.gstatic.com; script-src 'self' pippio.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://ajax.googleapis.com/ajax/libs/jquery/1.9.1/jquery.min.js www.googleadservices.com/pagead/ *.widgetworks.com.au *.jobadder.com www.googletagmanager.com www.google-analytics.com analytics.google.com js.adsrvr.org connect.facebook.net jscdn.appier.net *.appsflyer.com cdn.id5-sync.com/api/1.0/id5-api.js tags.crwdcntrl.net/lt/c/16163/sync.min.js *.jst.ai 'unsafe-inline'; frame-src *.jst.ai *.jobadder.com *.widgetworks.com.au keyfactssheet.infochoice.com.au www.google.com recaptcha.google.com 11107961.fls.doubleclick.net insight.adsrvr.org match.adsrvr.org; img-src 'self' data: *.mookie1.com *.rubiconproject.com *.yieldoptimizer.com *.rlcdn.com *.appsflyer.com cms.ubank.com.au www.glassdoor.com.au apps.jobadder.com www.facebook.com *.doubleclick.net www.google-analytics.com www.google.com www.google.com.au www.googletagmanager.com *.appier.net *.jst.ai; connect-src 'self' www.google.com.au/ads/ analytics.google.com *.jst.ai www.google-analytics.com cms.ubank.com.au ubank2.wpengine.com stats.g.doubleclick.net *.appsflyer.com anylist.c.appier.net id5-sync.com/g/v2/717.json bcp.crwdcntrl.net/6/map;
x-content-type-options: nosniff
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-length: 485
cache-control: max-age=604800
expires: Thu, 15 Dec 2022 21:39:29 GMT
date: Thu, 08 Dec 2022 21:39:29 GMT
X-Firefox-Spdy: h2

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 21:39:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

HTTP/2 200 OK
content-type: font/woff2
content-length: 17112
last-modified: Tue, 11 Oct 2022 01:30:23 GMT
etag: "b81cf4ac7e1c0f4f52f5a79c19897967"
x-amz-server-side-encryption: AES256
x-amz-version-id: null
accept-ranges: bytes
server: AmazonS3
x-amz-cf-pop: NBO50-C1
x-amz-cf-id: zacBdQONxo09mpJEyF4mYJJDajXRauj2YH7thgKN7DU4u1OH-_uRyA==
x-xss-protection: 1; mode=block
x-frame-options: DENY
content-security-policy: default-src 'self' cms.ubank.com.au; style-src 'self' 'unsafe-inline' fonts.googleapis.com *.appsflyer.com *.jst.ai; font-src 'self' *.86400.com.au *.wpengine.com status.ubank.com.au fonts.gstatic.com; script-src 'self' pippio.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://ajax.googleapis.com/ajax/libs/jquery/1.9.1/jquery.min.js www.googleadservices.com/pagead/ *.widgetworks.com.au *.jobadder.com www.googletagmanager.com www.google-analytics.com analytics.google.com js.adsrvr.org connect.facebook.net jscdn.appier.net *.appsflyer.com cdn.id5-sync.com/api/1.0/id5-api.js tags.crwdcntrl.net/lt/c/16163/sync.min.js *.jst.ai 'unsafe-inline'; frame-src *.jst.ai *.jobadder.com *.widgetworks.com.au keyfactssheet.infochoice.com.au www.google.com recaptcha.google.com 11107961.fls.doubleclick.net insight.adsrvr.org match.adsrvr.org; img-src 'self' data: *.mookie1.com *.rubiconproject.com *.yieldoptimizer.com *.rlcdn.com *.appsflyer.com cms.ubank.com.au www.glassdoor.com.au apps.jobadder.com www.facebook.com *.doubleclick.net www.google-analytics.com www.google.com www.google.com.au www.googletagmanager.com *.appier.net *.jst.ai; connect-src 'self' www.google.com.au/ads/ analytics.google.com *.jst.ai www.google-analytics.com cms.ubank.com.au ubank2.wpengine.com stats.g.doubleclick.net *.appsflyer.com anylist.c.appier.net id5-sync.com/g/v2/717.json bcp.crwdcntrl.net/6/map;
x-content-type-options: nosniff
strict-transport-security: max-age=63072000; includeSubDomains; preload
cache-control: max-age=1
expires: Thu, 08 Dec 2022 21:39:31 GMT
date: Thu, 08 Dec 2022 21:39:30 GMT
X-Firefox-Spdy: h2

HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 08 Dec 2022 21:39:30 GMT
expires: Thu, 08 Dec 2022 21:39:30 GMT
cache-control: private, max-age=900
last-modified: Thu, 08 Dec 2022 21:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 100994
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 21:39:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

HTTP/2 200 OK
content-type: font/woff2
content-length: 19976
last-modified: Tue, 11 Oct 2022 01:30:24 GMT
etag: "3ee65e26e0c7a122180782a862ec7b31"
x-amz-server-side-encryption: AES256
x-amz-version-id: null
accept-ranges: bytes
server: AmazonS3
x-amz-cf-pop: TPE52-C1
x-amz-cf-id: Q1kpVAAZf-EttqF366YHxWNFtGLmtS3ZEIlmOmJB4AtkALH576BHlg==
x-xss-protection: 1; mode=block
x-frame-options: DENY
content-security-policy: default-src 'self' cms.ubank.com.au; style-src 'self' 'unsafe-inline' fonts.googleapis.com *.appsflyer.com *.jst.ai; font-src 'self' *.86400.com.au *.wpengine.com status.ubank.com.au fonts.gstatic.com; script-src 'self' pippio.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://ajax.googleapis.com/ajax/libs/jquery/1.9.1/jquery.min.js www.googleadservices.com/pagead/ *.widgetworks.com.au *.jobadder.com www.googletagmanager.com www.google-analytics.com analytics.google.com js.adsrvr.org connect.facebook.net jscdn.appier.net *.appsflyer.com cdn.id5-sync.com/api/1.0/id5-api.js tags.crwdcntrl.net/lt/c/16163/sync.min.js *.jst.ai 'unsafe-inline'; frame-src *.jst.ai *.jobadder.com *.widgetworks.com.au keyfactssheet.infochoice.com.au www.google.com recaptcha.google.com 11107961.fls.doubleclick.net insight.adsrvr.org match.adsrvr.org; img-src 'self' data: *.mookie1.com *.rubiconproject.com *.yieldoptimizer.com *.rlcdn.com *.appsflyer.com cms.ubank.com.au www.glassdoor.com.au apps.jobadder.com www.facebook.com *.doubleclick.net www.google-analytics.com www.google.com www.google.com.au www.googletagmanager.com *.appier.net *.jst.ai; connect-src 'self' www.google.com.au/ads/ analytics.google.com *.jst.ai www.google-analytics.com cms.ubank.com.au ubank2.wpengine.com stats.g.doubleclick.net *.appsflyer.com anylist.c.appier.net id5-sync.com/g/v2/717.json bcp.crwdcntrl.net/6/map;
x-content-type-options: nosniff
strict-transport-security: max-age=63072000; includeSubDomains; preload
cache-control: max-age=31
expires: Thu, 08 Dec 2022 21:40:01 GMT
date: Thu, 08 Dec 2022 21:39:30 GMT
X-Firefox-Spdy: h2

HTTP/2 200 OK
content-type: image/vnd.microsoft.icon
content-length: 15406
last-modified: Tue, 11 Oct 2022 01:30:22 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: null
accept-ranges: bytes
server: AmazonS3
etag: "b7ddf08d359925bd4d7ff2b33fb99495"
x-amz-cf-pop: NRT51-C4
x-amz-cf-id: cqJPtCGuEPhfyiEeipUZRjYUVacScPX_KKuCkj0l2jzzKykCG-MCmw==
x-xss-protection: 1; mode=block
x-frame-options: DENY
content-security-policy: default-src 'self' cms.ubank.com.au; style-src 'self' 'unsafe-inline' fonts.googleapis.com *.appsflyer.com *.jst.ai; font-src 'self' *.86400.com.au *.wpengine.com status.ubank.com.au fonts.gstatic.com; script-src 'self' pippio.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://ajax.googleapis.com/ajax/libs/jquery/1.9.1/jquery.min.js www.googleadservices.com/pagead/ *.widgetworks.com.au *.jobadder.com www.googletagmanager.com www.google-analytics.com analytics.google.com js.adsrvr.org connect.facebook.net jscdn.appier.net *.appsflyer.com cdn.id5-sync.com/api/1.0/id5-api.js tags.crwdcntrl.net/lt/c/16163/sync.min.js *.jst.ai 'unsafe-inline'; frame-src *.jst.ai *.jobadder.com *.widgetworks.com.au keyfactssheet.infochoice.com.au www.google.com recaptcha.google.com 11107961.fls.doubleclick.net insight.adsrvr.org match.adsrvr.org; img-src 'self' data: *.mookie1.com *.rubiconproject.com *.yieldoptimizer.com *.rlcdn.com *.appsflyer.com cms.ubank.com.au www.glassdoor.com.au apps.jobadder.com www.facebook.com *.doubleclick.net www.google-analytics.com www.google.com www.google.com.au www.googletagmanager.com *.appier.net *.jst.ai; connect-src 'self' www.google.com.au/ads/ analytics.google.com *.jst.ai www.google-analytics.com cms.ubank.com.au ubank2.wpengine.com stats.g.doubleclick.net *.appsflyer.com anylist.c.appier.net id5-sync.com/g/v2/717.json bcp.crwdcntrl.net/6/map;
x-content-type-options: nosniff
strict-transport-security: max-age=63072000; includeSubDomains; preload
cache-control: max-age=14400
expires: Fri, 09 Dec 2022 01:39:30 GMT
date: Thu, 08 Dec 2022 21:39:30 GMT
X-Firefox-Spdy: h2

HTTP/2 201 Created
content-length: 18
x_req_id: d56a9334-455f-4ce8-89f5-1b92732613a7
date: Thu, 08 Dec 2022 21:39:30 GMT
content-type: application/json
vary: Origin
access-control-allow-credentials: true
access-control-allow-origin: https://www.ubank.com.au
access-control-allow-headers: Content-Type
set-cookie: _abck=46A6FF84E8391EB58364826FE0FC92B9~0~YAAQhU8kFwnZQXyEAQAA6OSt8wnJxkSffyqhvEv1jG/4DbEIkp49WSFllfUhQ6/+L29fqQnPFk9KcvW9/PLJHQDritEdJVBlhFmMffNLgXVaBkmsW/DMc55KYwJ+dPuHJ4jToSUpBM+exeZOPiZ7Ohcr2tNT5Mdj+l9zIDLxzpXtqtSRT/iB57c1US0FxoMHJuAgLC/SoyOlWyAO2APBO/H1uxRVPFrqMrP/OhK2SiM4eR8+K89KABfB0BIIaFlN31Qq9kTU27u0FWqQWxCkdAMSGUsl1XRAEsEEHDaUPjuJbuvsKV6Cxqdkyr0YwR8gm7+ljqiM70C6Vd8025pUDPyln88lSUuf8v2yHVt9AENHf/zX5/2Itnd+ITV51VfHlHnpykPBk614FFylByQqHhMjfPRA91LG1BNj~-1~||1-AwEqFubjzm-1-10-1000-2||~-1; Domain=.ubank.com.au; Path=/; Expires=Fri, 08 Dec 2023 21:39:30 GMT; Max-Age=31536000; Secure
X-Firefox-Spdy: h2

HTTP/2 200 OK
date: Thu, 08 Dec 2022 21:39:29 GMT
content-type: image/svg+xml
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding
last-modified: Tue, 06 Dec 2022 04:53:20 GMT
etag: W/"638ecac0-3b0"
cache-control: public, max-age=31536000
access-control-allow-origin: *
cf-cache-status: HIT
age: 204714
server: cloudflare
cf-ray: 7768a76c4c100b61-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

HTTP/2 200 OK
date: Thu, 08 Dec 2022 21:39:29 GMT
content-type: image/svg+xml
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding
last-modified: Tue, 06 Dec 2022 04:52:51 GMT
etag: W/"638ecaa3-59f"
cache-control: public, max-age=31536000
access-control-allow-origin: *
cf-cache-status: HIT
age: 204714
server: cloudflare
cf-ray: 7768a76c5c2c0b61-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

HTTP/2 200 OK
date: Thu, 08 Dec 2022 21:39:29 GMT
content-type: image/svg+xml
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding
last-modified: Tue, 06 Dec 2022 04:53:20 GMT
etag: W/"638ecac0-223"
cache-control: public, max-age=31536000
access-control-allow-origin: *
cf-cache-status: HIT
age: 204714
server: cloudflare
cf-ray: 7768a76c4c080b61-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4834
Cache-Control: max-age=100053
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 21:39:31 GMT
Etag: "63912a87-118"
Expires: Sat, 10 Dec 2022 01:27:04 GMT
Last-Modified: Thu, 08 Dec 2022 00:06:31 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 280

HTTP/2 200 OK
date: Thu, 08 Dec 2022 21:39:31 GMT
content-type: application/json
cache-control: public, max-age=30
last-modified: Thu, 08 Dec 2022 13:35:53 PST
vary: Accept-Encoding
access-control-allow-origin: *
p3p: CP="CURa ADMa DEVa TAIa CONa OUR BUS DSP NON COR"
referrer-policy: no-referrer-when-downgrade
access-control-allow-methods: GET, PUT, POST, DELETE, HEAD, OPTIONS
access-control-allow-headers: X-CSRFToken, x-csrf-token, x-rover-source, X-Requested-With, origin, content-type, accept
cf-cache-status: HIT
age: 218
expires: Thu, 08 Dec 2022 21:40:01 GMT
server: cloudflare
cf-ray: 7768a77809610b06-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

HTTP/2 201 Created
content-length: 18
x_req_id: efc5355c-ba24-4c7b-a224-8941832b5a48
date: Thu, 08 Dec 2022 21:39:31 GMT
content-type: application/json
vary: Origin
access-control-allow-credentials: true
access-control-allow-origin: https://www.ubank.com.au
access-control-allow-headers: Content-Type
set-cookie: _abck=46A6FF84E8391EB58364826FE0FC92B9~0~YAAQhU8kFxXZQXyEAQAA6uet8wk5y4+JJn9EXcCTjArG8e1KGwZ+k04vh8EpaJZgcsl0JFCvMoxsmPx+jzTsnXgeOwiq7FY27VSLjxxjTlSoEJkMA2gb0hZzar73FflRML9pGse5g+E8IV8ulSe/towEfamxqJceiIQDi9QG8/6/iWtwVTmVd7j82KEMzS3pYVJCvDGVCvNeJGm854a1EIwJvyz9CrCCwFAQdmmwYzY8w82xIcPhYYBd9BauXNMxpQ8yE5z1ukimJfH9OsnzEk7rurNkqZrYFjpDBXTZAXlp1RN+3G6Iykzv8EcJnYxDUDrKZj27OcndGcSZI9Hrs6N8qz40qujt6FtEPJjmL1ZTSo2Wogploeg6dZ5+kWYa4LeklL1TSwLyfEIsqJTE7E1+6JcCFhEgXTzl~-1~||-1||~-1; Domain=.ubank.com.au; Path=/; Expires=Fri, 08 Dec 2023 21:39:31 GMT; Max-Age=31536000; Secure
X-Firefox-Spdy: h2

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 21:39:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6061
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 21:39:31 GMT
Last-Modified: Thu, 08 Dec 2022 19:58:30 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 471

HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Thu, 08 Dec 2022 20:41:08 GMT
expires: Thu, 08 Dec 2022 22:41:08 GMT
cache-control: public, max-age=7200
age: 3503
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 21:39:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 08 Dec 2022 21:39:31 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
location: https://adservice.google.com/ddm/fls/p/src=11107961;type=pagev0;cat=864000;ord=9995791915074;gtm=2wgbu0;auiddc=1549072447.1670535570;u1=https%3A%2F%2Fwww.ubank.com.au%2F;~oref=https://www.ubank.com.au/
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
server: cafe
content-length: 0
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Thu, 08-Dec-2022 21:54:31 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: AXe+ab26Fdx5cmFhFQ71Sci+hHgT9RgrJhRxOTjz6zUjDNZovSsCKvFNYrw9iDU9FKMot2m1GXMkp+JUN4JWSg==
priority: u=3,i
content-length: 27340
x-fb-trip-id: 1904183273
date: Thu, 08 Dec 2022 21:39:31 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 08 Dec 2022 21:39:31 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 883
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Thu, 08-Dec-2022 21:54:31 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

HTTP/2 200 OK
access-control-allow-origin: https://www.ubank.com.au
date: Thu, 08 Dec 2022 21:39:31 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6061
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 21:39:31 GMT
Last-Modified: Thu, 08 Dec 2022 19:58:30 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 471

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 21:39:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 21:39:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 21:39:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 21:39:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

HTTP/2 200 OK
access-control-allow-origin: https://www.ubank.com.au
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Thu, 08 Dec 2022 21:39:31 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 08 Dec 2022 21:39:31 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2