HTTP/1.1 200 OK
Date: Wed, 15 May 2019 11:03:47 GMT
Server: Apache/2.4.39 (Unix)
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Accept,Accept-Encoding
Upgrade: h2
Connection: Upgrade
Last-Modified: Wed, 15 May 2019 09:21:49 GMT
ETag: "15b69-588e9ade34228"
Accept-Ranges: bytes
Content-Length: 88937
Content-Security-Policy: default-src 'self'     https://d2bzfgi7sjutmd.cloudfront.net     https://checkout.paypal.com     https://www.paypalobjects.com     https://js.braintreegateway.com     https://ajax.googleapis.com;   img-src https: data:;   script-src 'self' 'unsafe-inline' 'unsafe-eval'     https://d2bzfgi7sjutmd.cloudfront.net     https://ajax.googleapis.com     https://www.googletagmanager.com     https://www.google-analytics.com     https://widget.reviews.co.uk     https://www.dwin1.com     https://bat.bing.com     https://connect.facebook.net     https://js.intercomcdn.com     https://bam.nr-data.net     https://js-agent.newrelic.com     https://services.postcodeanywhere.co.uk     https://js.braintreegateway.com     https://assets.braintreegateway.com     https://www.paypalobjects.com     https://api.braintreegateway.com     https://client-analytics.braintreegateway.com     https://www.googleadservices.com     https://cdn.satalytics.com     https://code.highcharts.com     https://platform.linkedin.com     https://apis.google.com     https://cdn.syndication.twimg.com     https://www.linkedin.com     https://platform.twitter.com     https://www.awin1.com     https://flex.msn.com     https://cdn.embedly.com     https://googleads.g.doubleclick.net     https://checkout.paypal.com     https://maxcdn.bootstrapcdn.com     https://stats.g.doubleclick.net     https://code.angularjs.org     https://cdnjs.cloudflare.com     https://stats.g.doubleclick.net     https://*.intercom.io     https://*.algolianet.com     https://optimize.google.com     https://lightwidget.com     https://cdn.lightwidget.com     https://widget.trustpilot.com     https://tagmanager.google.com     https://c.paypal.com;   font-src 'self' data:     https://d2bzfgi7sjutmd.cloudfront.net     https://fonts.gstatic.com     https://js.intercomcdn.com     https://maxcdn.bootstrapcdn.com;   style-src 'self' 'unsafe-inline'     https://d2bzfgi7sjutmd.cloudfront.net     https://fonts.googleapis.com     https://cdn.satalytics.com     https://platform.twitter.com     https://cdn-images.mailchimp.com     https://cdn.embedly.com     https://maxcdn.bootstrapcdn.com     https://optimize.google.com     https://tagmanager.google.com;   connect-src 'self'     https://api.intercom.io     https://api-iam.intercom.io     https://api-ping.intercom.io     https://nexus-websocket-a.intercom.io     https://nexus-websocket-b.intercom.io     https://nexus-long-poller-a.intercom.io     https://nexus-long-poller-b.intercom.io     wss://nexus-websocket-a.intercom.io     wss://nexus-websocket-b.intercom.io     https://uploads.intercomcdn.com     https://uploads.intercomusercontent.com     https://app.getsentry.com     https://api.braintreegateway.com     https://client-analytics.braintreegateway.com     https://modal.satalytics.com     https://www.google-analytics.com     https://stats.g.doubleclick.net     https://*.algolia.net     https://*.algolianet.com     https://api.rollbar.com     https://api-cdn.embed.ly     https://fp.zenaps.com     https://widget.trustpilot.com     https://api.braintreegateway.com     https://*.braintree-api.com     https://connect.facebook.net     https://www.facebook.com;   child-src 'self'     https://widget.reviews.co.uk     https://share.intercom.io     https://www.youtube.com     https://player.vimeo.com     https://fast.wistia.net     https://assets.braintreegateway.com     https://c.paypal.com     https://*.cardinalcommerce.com     https://ssl.kaptcha.com     https://checkout.paypal.com     https://accounts.google.com     https://favstar.fm     https://platform.twitter.com     https://staticxx.facebook.com     https://live.tourdash.com     https://apis.google.com     https://syndication.twitter.com     https://www.facebook.com     https://connect.facebook.net     https://cdn.embedly.com     https://tpc.googlesyndication.com     https://view.vzaar.com     https://www.google.com     https://www.googletagmanager.com     https://optimize.google.com     https://lightwidget.com     https://widget.trustpilot.com     https://api.braintreegateway.com;   frame-src 'self'     https://widget.reviews.co.uk     https://share.intercom.io     https://www.youtube.com     https://player.vimeo.com     https://fast.wistia.net     https://assets.braintreegateway.com     https://c.paypal.com     https://*.cardinalcommerce.com     https://ssl.kaptcha.com     https://checkout.paypal.com     https://accounts.google.com     https://favstar.fm     https://platform.twitter.com     https://staticxx.facebook.com     https://live.tourdash.com     https://apis.google.com     https://syndication.twitter.com     https://www.facebook.com     https://connect.facebook.net     https://cdn.embedly.com     https://tpc.googlesyndication.com     https://view.vzaar.com     https://www.google.com     https://www.googletagmanager.com     https://optimize.google.com     https://lightwidget.com     https://widget.trustpilot.com     https://api.braintreegateway.com;   frame-ancestors 'self'     https://widget.reviews.co.uk     *.reviews.co.uk     *.reviews.io     pingdom.com     http://*.pingdom.com;   media-src 'self'     https://d2bzfgi7sjutmd.cloudfront.net     https://js.intercomcdn.com;   object-src 'none';   report-uri /csp_reports
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Content-Type: text/html; charset=UTF-8