HTTP/1.1 200 OK
Cache-Control: private, no-store, must-revalidate
Transfer-Encoding: chunked
Content-Type: text/html; charset=utf-8
Vary: Accept-Encoding
Set-Cookie: CMSPreferredCulture=en-GB; expires=Sat, 12-Sep-2020 19:15:53 GMT; path=/; secure; HttpOnly
Set-Cookie: CMSCsrfCookie=rvCzRDOfRjTrYZR9KhbLFKvZQlFt46ZtGD5BPf2E; path=/; secure; HttpOnly
Set-Cookie: ASP.NET_SessionId=abndxxv0frfwuicf0pedtw5k; path=/; secure; HttpOnly
X-Frame-Options: SAMEORIGIN
X-UA-Compatible: IE=Edge
Request-Context: appId=cid-v1:ccbfbcf7-2c5c-4605-98cb-d01277c7a712
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block; report=https://mills.report-uri.com/r/d/xss/enforce
Strict-Transport-Security: max-age=31536000
Referrer-Policy: no-referrer-when-downgrade
Feature-Policy: accelerometer 'none'; camera 'none'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; payment 'none'; usb 'none'
Content-Security-Policy-Report-Only: default-src 'none'; connect-src 'self' translate.googleapis.com syndication.twitter.com www.google.com id.siteimprove.com app.trackduck.com my2.siteimprove.com cdnjs.cloudflare.com ajax.googleapis.com www.google-analytics.com stats.g.doubleclick.net svc.webspellchecker.net login.microsoftonline.com login.windows.net dc.services.visualstudio.com; font-src data fonts.gstatic.com svc.webspellchecker.net 'self'; manifest-src 'self'; object-src 'self'; frame-src 'self' update.mills-reeve.com twitter.com e.issuu.com cdn.yoshki.com login.windows.net player.vimeo.com static.addtoany.com platform.twitter.com syndication.twitter.com tpc.googlesyndication.com analytics-google.net www.googletagmanager.com mozbar.moz.com www.facebook.com acs.airplus.com connect.facebook.net bid.g.doubleclick.net staticxx.facebook.com vars.hotjar.com www.google.com www.instagram.com www.youtube.com w.soundcloud.com; img-src dev-mr.mills-reeve.com qa-mr.mills-reeve.com uat-mr.mills-reeve.com staging-mr.mills-reeve.com www.mills-reeve.com abs.twimg.com platform.twitter.com syndication.twitter.com lowffdompro.com ton.twimg.com login.microsoftonline.com pbs.twimg.com googleads.g.doubleclick.net www.gstatic.com www.google.ge www.google.pl www.google.ru www.google.cm www.google.com.eg www.google.co.kr www.google.com.np www.google.co.th www.google.dz www.google.no www.google.com.hk www.google.com.mm www.google.co.il www.google.az www.google.sk www.google.ie www.google.com.pe lh3.ggpht.com www.google.de www.google.cz www.google.co.za www.google.se www.google.dk www.google.gr www.google.lv www.google.com.tw www.google.com.ph www.google.com.uy www.google.fi www.google.com.ua www.google.com.cy www.google.com.jm www.google.im www.google.co.ve www.google.com.sg www.google.ca www.google.es www.google.kg www.google.be www.google.at www.google.pt www.google.fr www.google.it www.google.com.br www.google.com.ar www.google.ch www.google.me www.google.com.ec www.google.ro www.google.kg www.google.nl www.google.com.mx www.google.com.lb www.google.com.co www.google.com.tr www.google.cl www.google.dk www.google.co.in www.google.hr www.gstatic.com csi.gstatic.com data: geo0.ggpht.com geo1.ggpht.com geo2.ggpht.com geo3.ggpht.com img.youtube.com khms0.googleapis.com khms1.googleapis.com maps.googleapis.com maps.gstatic.com 'self' ssl.google-analytics.com stats.g.doubleclick.net web.facebook.com www.facebook.com www.google.co.uk www.google.com www.google-analytics.com ajax.googleapis.com; media-src 'self' ssl.gstatic.com data:; script-src 'self' data platform.twitter.com az416426.vo.msecnd.net cdn.syndication.twimg.com svc.webspellchecker.net www.gstatic.com www.google.com tpc.googlesyndication.com maxcdn.bootstrapcdn.com ajax.googleapis.com api.instagram.com connect.facebook.net eval: googleads.g.doubleclick.net inline: maps.googleapis.com platform.instagram.com s.ytimg.com script.hotjar.com 'self' ssl.google-analytics.com static.hotjar.com 'unsafe-eval' 'unsafe-inline' www.googleadservices.com www.google-analytics.com www.googletagmanager.com www.instagram.com www.youtube.com; style-src svc.webspellchecker.net ton.twimg.com platform.twitter.com ajax.googleapis.com fonts.googleapis.com inline: 'self' 'unsafe-inline'; report-uri https://mills.report-uri.com/r/d/csp/wizard
X-Content-Security-Policy-Report-Only: default-src 'none'; connect-src 'self' translate.googleapis.com syndication.twitter.com www.google.com id.siteimprove.com app.trackduck.com my2.siteimprove.com cdnjs.cloudflare.com ajax.googleapis.com www.google-analytics.com stats.g.doubleclick.net svc.webspellchecker.net login.microsoftonline.com login.windows.net dc.services.visualstudio.com; font-src data fonts.gstatic.com svc.webspellchecker.net 'self'; manifest-src 'self'; object-src 'self'; frame-src 'self' update.mills-reeve.com twitter.com e.issuu.com cdn.yoshki.com login.windows.net player.vimeo.com static.addtoany.com platform.twitter.com syndication.twitter.com tpc.googlesyndication.com analytics-google.net www.googletagmanager.com mozbar.moz.com www.facebook.com acs.airplus.com connect.facebook.net bid.g.doubleclick.net staticxx.facebook.com vars.hotjar.com www.google.com www.instagram.com www.youtube.com w.soundcloud.com; img-src dev-mr.mills-reeve.com qa-mr.mills-reeve.com uat-mr.mills-reeve.com staging-mr.mills-reeve.com www.mills-reeve.com abs.twimg.com platform.twitter.com syndication.twitter.com lowffdompro.com ton.twimg.com login.microsoftonline.com pbs.twimg.com googleads.g.doubleclick.net www.gstatic.com www.google.ge www.google.pl www.google.ru www.google.cm www.google.com.eg www.google.co.kr www.google.com.np www.google.co.th www.google.dz www.google.no www.google.com.hk www.google.com.mm www.google.co.il www.google.az www.google.sk www.google.ie www.google.com.pe lh3.ggpht.com www.google.de www.google.cz www.google.co.za www.google.se www.google.dk www.google.gr www.google.lv www.google.com.tw www.google.com.ph www.google.com.uy www.google.fi www.google.com.ua www.google.com.cy www.google.com.jm www.google.im www.google.co.ve www.google.com.sg www.google.ca www.google.es www.google.kg www.google.be www.google.at www.google.pt www.google.fr www.google.it www.google.com.br www.google.com.ar www.google.ch www.google.me www.google.com.ec www.google.ro www.google.kg www.google.nl www.google.com.mx www.google.com.lb www.google.com.co www.google.com.tr www.google.cl www.google.dk www.google.co.in www.google.hr www.gstatic.com csi.gstatic.com data: geo0.ggpht.com geo1.ggpht.com geo2.ggpht.com geo3.ggpht.com img.youtube.com khms0.googleapis.com khms1.googleapis.com maps.googleapis.com maps.gstatic.com 'self' ssl.google-analytics.com stats.g.doubleclick.net web.facebook.com www.facebook.com www.google.co.uk www.google.com www.google-analytics.com ajax.googleapis.com; media-src 'self' ssl.gstatic.com data:; script-src 'self' data platform.twitter.com az416426.vo.msecnd.net cdn.syndication.twimg.com svc.webspellchecker.net www.gstatic.com www.google.com tpc.googlesyndication.com maxcdn.bootstrapcdn.com ajax.googleapis.com api.instagram.com connect.facebook.net eval: googleads.g.doubleclick.net inline: maps.googleapis.com platform.instagram.com s.ytimg.com script.hotjar.com 'self' ssl.google-analytics.com static.hotjar.com 'unsafe-eval' 'unsafe-inline' www.googleadservices.com www.google-analytics.com www.googletagmanager.com www.instagram.com www.youtube.com; style-src svc.webspellchecker.net ton.twimg.com platform.twitter.com ajax.googleapis.com fonts.googleapis.com inline: 'self' 'unsafe-inline'; report-uri https://mills.report-uri.com/r/d/csp/wizard
Set-Cookie: ARRAffinity=622409e3d6a6e54cace781a8d35ff4326cb4a49584a7244661d27fa0d03111dc;Path=/;HttpOnly;Domain=www.procurementportal.com
Date: Thu, 12 Sep 2019 19:15:53 GMT