HTTP/1.1 200 OK
Cache-Control: no-cache, no-store
Pragma: no-cache
Content-Type: text/html; charset=utf-8
Expires: -1
Server: 
Set-Cookie: ASP.NET_SessionId=v2miips4wmxjrcm1ojow2id3; path=/; secure; HttpOnly; SameSite=None
Set-Cookie: SC_ANALYTICS_GLOBAL_COOKIE=de8bf124405640088b14edb4aa38e171|False; expires=Thu, 19-Feb-2032 19:13:42 GMT; path=/; secure; HttpOnly; SameSite=None
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy-Report-Only: child-src w.soundcloud.com www.youtube.com; connect-src 'self' pi-test.sagepay.com services.postcodeanywhere.co.uk stats.g.doubleclick.net translate.googleapis.com www.google-analytics.com; default-src 'self' 'unsafe-eval' 'unsafe-inline' blob: cdnjs.cloudflare.com cfauk11111.pcapredict.com clients1.google.com cse.google.com data: fonts.googleapis.com fonts.gstatic.com maps.googleapis.com maps.gstatic.com self stats.g.doubleclick.net w.soundcloud.com widget.surveymonkey.com www.google-analytics.com www.google.ch www.google.co.uk www.google.com www.googleapis.com www.gstatic.com; font-src 'self' data: fonts.gstatic.com; form-action 'self' test.sagepay.com; frame-ancestors 'self'; frame-src 'self' cse.google.com test.sagepay.com w.soundcloud.com www.google.com www.youtube.com; img-src 'self' blob: clients1.google.com cse.google.com data: encrypted-tbn0.gstatic.com encrypted-tbn1.gstatic.com encrypted-tbn2.gstatic.com encrypted-tbn3.gstatic.com gateway.zscloud.net i.ytimg.com maps.googleapis.com maps.gstatic.com services.postcodeanywhere.co.uk ssl.gstatic.com stats.g.doubleclick.net translate.google.com translate.googleapis.com www.google-analytics.com www.google.ad www.google.ae www.google.at www.google.ca www.google.ch www.google.cl www.google.co.id www.google.co.in www.google.co.jp www.google.co.nz www.google.co.th www.google.co.uk www.google.co.za www.google.com www.google.com.ar www.google.com.au www.google.com.bh www.google.com.bn www.google.com.br www.google.com.gh www.google.com.hk www.google.com.mt www.google.com.mx www.google.com.my www.google.com.ng www.google.com.np www.google.com.pe www.google.com.sa www.google.com.sg www.google.com.tr www.google.com.ua www.google.de www.google.dk www.google.es www.google.fi www.google.fr www.google.ge www.google.gg www.google.gr www.google.ie www.google.it www.google.je www.google.li www.google.lk www.google.lu www.google.mg www.google.mv www.google.nl www.google.no www.google.pl www.google.pt www.googleapis.com www.gstatic.com zswpmanager.wip.mmc.com; manifest-src 'self' gateway.zscloud.net; object-src 'self'; script-src-elem 'self' 'unsafe-inline' cdnjs.cloudflare.com cfauk11111.pcapredict.com cse.google.com data: gateway.zscalertwo.net gateway.zscloud.net maps.googleapis.com pi-test.sagepay.com saml.threatpulse.net:8443 services.postcodeanywhere.co.uk translate.google.com translate.googleapis.com widget.surveymonkey.com www.google-analytics.com www.google.com www.gstatic.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' cdnjs.cloudflare.com cfauk11111.pcapredict.com cse.google.com maps.googleapis.com pi-test.sagepay.com services.postcodeanywhere.co.uk visualsponline.azurewebsites.net widget.surveymonkey.com www.google-analytics.com www.google.com www.gstatic.com; style-src-attr 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline' cdnjs.cloudflare.com fonts.googleapis.com services.postcodeanywhere.co.uk translate.googleapis.com www.google.com; style-src 'self' 'unsafe-eval' 'unsafe-inline' cdnjs.cloudflare.com fonts.googleapis.com services.postcodeanywhere.co.uk www.google.com; report-uri https://cfauk.report-uri.com/r/d/csp/wizard
Strict-Transport-Security: max-age=31536000
Date: Mon, 21 Feb 2022 19:13:42 GMT
Content-Length: 98254