HTTP/1.1 200 OK
Cache-Control: private
Content-Type: text/html; charset=utf-8
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: default-src 'self' www.google.com m.addthis.com m.addthisedge.com;script-src 'self' 'unsafe-inline' 'unsafe-eval' *.google.com *.gstatic.com *.google-analytics.com cdnjs.cloudflare.com maxcdn.bootstrapcdn.com code.jquery.com ajax.aspnetcdn.com s7.addthis.com m.addthis.com m.addthisedge.com;object-src 'self';style-src 'self' 'unsafe-inline' cdnjs.cloudflare.com maxcdn.bootstrapcdn.com fonts.googleapis.com;img-src 'self' data: *.google.com *.google-analytics.com *.gstatic.com *.doubleclick.net;media-src 'none';font-src 'self' cdnjs.cloudflare.com *.gstatic.com;frame-src 'self' www.google.com www.youtube.com s7.addthis.com;form-action 'self' accounts.google.com;block-all-mixed-content
Referrer-Policy: strict-origin-when-cross-origin
SERVER: The London P&I Club
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Date: Tue, 08 May 2018 18:55:15 GMT
Content-Length: 38960