HTTP/1.1 200 OK
Cache-Control: private
Content-Type: text/html; charset=utf-8
ETag: ""
Server: Canford
Set-Cookie: CanfordAnon=JfIvOWJL1wEkAAAAYWEwMWNmNDUtNmZmYy00OTlhLThlYTgtMzc0NjQwNTdjYzAyX7C8N3wzaA_4yEF7j2gXO3BYL_wcxmMnNTqrLwhoCKU1; expires=Mon, 17-May-2021 21:18:46 GMT; path=/; HttpOnly
Set-Cookie: ASP.NET_SessionId=3fy551utm1xi33cxivx5m3jg; path=/; HttpOnly
Set-Cookie: CANFORD_Curncyid=GBP; expires=Mon, 18-May-2020 21:18:46 GMT; path=/; HttpOnly
X-Frame-Options: SAMEORIGIN
Set-Cookie: cPref=cDE=18/05/2019 22:18:46; expires=Tue, 18-May-2021 21:18:46 GMT; path=/; secure; HttpOnly
Set-Cookie: CANFORD_GB_CartID=1ae7166b-7f81-419b-b60e-725d412066b5; expires=Sun, 18-May-2025 21:18:46 GMT; path=/; HttpOnly
p3p: CP="NOI ADM DEV COM NAV OUR STP"
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
Referrer-Policy: strict-origin-when-cross-origin
Content-Security-Policy-Report-Only:     default-src 'self';    form-action 'self';    frame-src 'self' https://live.sagepay.com https://test.sagepay.com https://cse.google.com gsa://onpageload https://www.google.com https://www.google.com/recaptcha/ https://s7.addthis.com https://edge.addthis.com https://www.youtube.com https://player.vimeo.com;    script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.canford.co.uk https://www.canford.fr https://www.canford.de https://ajax.aspnetcdn.com https://www.google.com https://www.googleapis.com https://cse.google.com https://ajax.googleapis.com https://www.google-analytics.com https://ssl.google-analytics.com https://translate.google.com https://translate.googleapis.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://*.addthis.com https://*.addthisedge.com https://*.facebook.com https://www.linkedin.com https://services.postcodeanywhere.co.uk https://canfo11114.pcapredict.com https://www.auctionnudge.com https://assets-auctionnudge.s3.amazonaws.com https://cdn.rawgit.com/google/ safari-extension:;    style-src 'self' 'unsafe-inline' https://www.canford.co.uk https://www.canford.fr https://www.canford.de https://www.google.com https://fonts.googleapis.com https://translate.googleapis.com https://services.postcodeanywhere.co.uk https://assets-auctionnudge.s3.amazonaws.com https://cdn.rawgit.com/google/;    font-src 'self' data: https://fonts.gstatic.com https://fonts.googleapis.com;    img-src 'self' https: data:;    media-src 'self' https://ssl.gstatic.com;    connect-src 'self' wss://www.canford.co.uk wss://www.canford.fr wss://www.canford.de https://ajax.aspnetcdn.com https://google-analytics.com https://www.google-analytics.com https://ajax.googleapis.com https://stats.g.doubleclick.net https://fonts.googleapis.com https://fonts.gstatic.com https://*.addthis.com https://services.postcodeanywhere.co.uk https://translate.googleapis.com https://www.bing.com https://www.howsmyssl.com;    report-uri /Utils/CSPNotification?CspType=Notification https://canford.report-uri.com/r/d/csp/reportOnly https://canford.report-uri.com/r/d/csp/wizard    
Strict-Transport-Security: max-age=31536000
Date: Sat, 18 May 2019 21:18:46 GMT
Content-Length: 46419