HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
Content-Length: 32711
Connection: keep-alive
Vary: Accept-Encoding
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: -1
X-Frame-Options: SAMEORIGIN
Set-Cookie: CMSPreferredCulture=en-GB; expires=Sun, 28-Jun-2020 21:37:26 GMT; path=/; secure; HttpOnly
Set-Cookie: CMSCsrfCookie=xlIbk52KWeVDegG7AQE8Isq+HHITmm5E9mQADrxN; path=/; secure; HttpOnly
Set-Cookie: ASP.NET_SessionId=vwsfv2gvwxkcnjgxi4vljgsv; path=/; secure; HttpOnly
X-UA-Compatible: IE=Edge
Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' 'self' rum-static.pingdom.net gb-api-widgets.nvplay.com api-widgets.nvplay.com ajax.googleapis.com widgets.nvplay.com connect.facebook.net *.pinterest.com pinterest.com static.hotjar.com maps.google.com www.gstatic.com www.google.com fast.fonts.net m.addthisedge.com m.addthis.com s7.addthis.com googleads.g.doubleclick.net www.googleadservices.com www.googletagmanager.com www.google-analytics.com tagmanager.google.com maps.googleapis.com *.webspellchecker.net www.linkedin.com www.gstatic.com graph.facebook.com js.hsforms.net forms.hsforms.com; frame-src 'self' *.doubleclick.net www.facebook.com *.pinterest.com pinterest.com player.vimeo.com www.google.com maps.google.com s7.addthis.com www.youtube.com *.webspellchecker.net forms.hsforms.com
Strict-Transport-Security: max-age=15552001; includeSubDomains; preload
X-Xss-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Referrer-Policy: strict-origin-when-cross-origin
Date: Fri, 28 Jun 2019 21:37:26 GMT
Server: PAC 2.0.00
Host: pac1-cor.hybridcloudspan.com
X-Upstream: https://vm26-https