HTTP/1.1 200 OK
Date: Fri, 13 Dec 2019 10:04:58 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __cfduid=d02fa3d648abf3fed1bbc461572d44e831576231498; expires=Sun, 12-Jan-20 10:04:58 GMT; path=/; domain=.marathonleisure.co.uk; HttpOnly
Set-Cookie: PHPSESSID=vp2h2k2243dj191rsp6dl1iars; expires=Fri, 13-Dec-2019 13:04:58 GMT; Max-Age=10800; path=/; domain=www.marathonleisure.co.uk; secure; HttpOnly
Set-Cookie: X-Magento-Vary=e3cb9ab3566a693edff3edf82caa39b1ed79e8ba; expires=Fri, 13-Dec-2019 13:04:58 GMT; Max-Age=10800; path=/; secure; HttpOnly
Pragma: no-cache
Cache-Control: max-age=0, must-revalidate, no-cache, no-store
Expires: Thu, 13 Dec 2018 01:01:41 GMT
Strict-Transport-Security: max-age=31536000
Content-Security-Policy: upgrade-insecure-requests;
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Vary: Accept-Encoding
Content-Security-Policy: base-uri 'self'; default-src 'none'; child-src 'self' https://* *; connect-src 'self' https://m.addthis.com https://s7.addthis.com; font-src 'self' https://fonts.gstatic.com data:; form-action 'self' https://syndication.twitter.com https://platform.twitter.com; frame-ancestors 'self'; img-src 'self' https://www.facebook.com https://fbcdn.net fbcdn.net https://maps.gstatic.com https://maps.googleapis.com https://csi.gstatic.com https://www.addthis.com https://m.addthis.com https://www.google-analytics.com https://*.doubleclick.net https://ssl.gstatic.com https://www.gstatic.com blob: data:; media-src 'none'; object-src 'none'; script-src 'self' https://www.googletagmanager.com https://www.google-analytics.com https://maps.googleapis.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://tagmanager.google.com https://fonts.googleapis.com https://googleads.g.doubleclick.net https://stats.g.doubleclick.net https://www.google.com https://www.google.co.uk https://maps.gstatic.com https://*.ggpht.com https://*.googleapis.com https://www.gstatic.com https://www.google.com https://platform.twitter.com https://connect.facebook.net https://s7.addthis.com https://m.addthisedge.com https://m.addthis.com https://graph.facebook.com https://api-public.addthis.com https://www.linkedin.com https://widgets.pinterest.com https://assets.pinterest.com https://apis.google.com https://www.instagram.com https://www.youtube.com https://s.ytimg.com/ https://vimeo.com https://www.vimeo.com 'unsafe-inline' 'unsafe-eval'; style-src 'self' https://fonts.googleapis.com https://tagmanager.google.com 'unsafe-inline'; upgrade-insecure-requests
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000; includeSubDomains
CF-Cache-Status: DYNAMIC
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 54471deedfe5d27a-DFW