HTTP/1.1 200 
Date: Tue, 16 Jul 2019 13:25:41 GMT
Content-Type: text/html;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __cfduid=dbb2d364117023cdd1b5a612391beacda1563283540; expires=Wed, 15-Jul-20 13:25:40 GMT; path=/; domain=.nakedwines.com; HttpOnly
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Content-Language: en-GB-x-lvariant-UK
Content-Security-Policy: style-src 'self' *.cloudfront.net 'unsafe-inline' *.amazonaws.com *.googleapis.com *.postcodeanywhere.co.uk *.ckeditor.com https://fullstory.com https://tagmanager.google.com/ *.va.cobrowse.liveperson.net roktcdn1.akamaized.net https://heapanalytics.com/css/ved.css; script-src 'self' *.cloudfront.net *.googletagmanager.com *.fullstory.com fullstory.com *.facebook.net *.facebook.com *.liveperson.net *.lpsnmedia.net https://www.gstatic.com *.gstatic.com https://www.google.com *.google.com *.googleapis.com *.postcodeanywhere.co.uk *.google-analytics.com *.googleadservices.com *.rokt.com roktcdn1.akamaized.net *.cloudfront.net *.twitter.com *.pandastream.com *.filepicker.io *.ckeditor.com *.dwin1.com *.awin1.com https://fullstory.com https://tagmanager.google.com/ *.ads-twitter.com https://cdn.heapanalytics.com/js/heap-1756821796.js https://heapanalytics.com/js/ved.js 'unsafe-inline' 'unsafe-eval' amplify.outbrain.com; frame-src 'self' *.googleapis.com https://www.facebook.com https://staticxx.facebook.com *.facebook.com *.liveperson.net *.lpsnmedia.net *.youtube.com https://pal-live.adyen.com https://*.nakedwines.com https://dialog.filepicker.io *.filepicker.io *.rokt.com https://www.google.com *.google.com *.google.co.uk *.nakedwines.com *.fullstory.com fullstory.com *.googletagmanager.com *.va.cobrowse.liveperson.net *.livestream.com *.fast-thinking.co.uk *.realexpayments.com https://*.realexpayments.com; img-src 'self' *.cloudfront.net data: https://www.facebook.com *.facebook.com *.google.com *.lpsnmedia.net *.google.co.uk *.gstatic.com *.google-analytics.com *.postcodeanywhere.co.uk *.googleapis.com *.cloudfront.net t.co *.amazonaws.com *.ckeditor.com *.nakedwines.co.uk *.dwin1.com *.awin1.com apps.rokt.com roktcdn1.akamaized.net https://heapanalytics.com/h https://heapanalytics.com/api/add_user_properties_v3 https://heapanalytics.com/api/add_user_properties https://heapanalytics.com/api/identify_v4 https://heapanalytics.com/api/identify_v3 https://heapanalytics.com/api/identify https://heapanalytics.com/img/loading_circles_ved.gif https://heapanalytics.com/img/logoSmallSprite.png amplifypixel.outbrain.com tr.outbrain.com; connect-src 'self' *.fullstory.com fullstory.com *.cloudfront.net *.postcodeanywhere.co.uk *.pandastream.com *.filepicker.io *.rokt.com *.va.cobrowse.liveperson.net *.facebook.com https://heapanalytics.com/ved/symbol https://heapanalytics.com/ved/category https://heapanalytics.com/ved/stats https://heapanalytics.com/h https://heapanalytics.com/api/add_user_properties_v3; object-src 'self' *.google-analytics.com; media-src 'self' *.amazonaws.com *.lpsnmedia.net; default-src 'self' *.cloudfront.net roktcdn1.akamaized.net; font-src 'self' *.cloudfront.net data: *.amazonaws.com *.gstatic.com https://heapanalytics.com/font/*; report-uri https://nakedwinesuk.report-uri.com/r/t/csp/enforce
Expires: 0
Pragma: no-cache
Set-Cookie: cid=UK; Max-Age=86400; Expires=Wed, 17-Jul-2019 13:25:41 GMT; Path=/; Secure; HttpOnly
Set-Cookie: rememberme=eyJhbGciOiJSUzUxMiJ9.eyJpYXQiOjE1NjMyODM1NDEsImV4cCI6MTU5NDgxOTU0MSwic3ViIjoiNDEwODU3MTc3Iiwicm5kIjoiMjk3NmIzZGEtNTE3My00Y2I0LWEwN2UtYmY2ODBkMjAzYmM0IiwidHRwIjoicmVtZW1iZXItbWUifQ.n7BWmcC_EKPPvVaZNfHbYUMohno6rj5aHPagXfKiohuetBZJyzHpGd8CbPHL-EhO9eT8kNbNNnP1RB1-KbzNe17CVa7s26bWCET7BKrOkP3a6cdh8vqJKeXbaGHEcHiiQvxvC3vjZOkcl2NbUvtZGNp-p1JOJ-oHwC3De_pBAjQpPoC1eESmeDFAxfHUuUrIhm3-u45PHa65m0vxznJEvLWef9cNjDLDHF7M3U9UeQBF5polimAG-jAyEFRYuSA53czduGSSneXgj1mfsoizKY32SiSlBqB39if5eZNoW2H7DnYX5EylTNswlem_JWdlKF5N4j0_t43gbUnreyWs3w; Max-Age=31535999; Expires=Wed, 15-Jul-2020 13:25:40 GMT; Path=/; Secure; HttpOnly
Set-Cookie: SESSION=9327ee5f-e6e1-4479-84d5-ac4989d2bff3; Path=/; Secure; HttpOnly
Strict-Transport-Security: max-age=31536000
X-Application-Context: website:prod
X-Content-Type-Options: nosniff
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 4f744db319fa810a-MCI