HTTP/1.1 200 OK
Server: nginx
Date: Sun, 26 Jun 2022 17:53:04 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 147818
Connection: keep-alive
Vary: Accept-Encoding
x-nextjs-cache: HIT
X-Powered-By: Next.js
ETag: "2416a-OFrZBcZ4LJ9RILnjx1RM2YHlSMg"
Cache-Control: s-maxage=31536000, stale-while-revalidate
Vary: Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval' request.eprotect.vantivprelive.com request.eprotect.vantivcnp.com fonts.gstatic.com use.fontawesome.com www.google.co.uk *.dwin1.com www.google.com *.puzzel.com *.bing.com static.addtoany.com m.addthisedge.com *.addthis.com http://static.hotjar.com https://static.hotjar.com https://script.hotjar.com *.pingdom.net *.qualtrics.com *.cloudfront.net widget.trustpilot.com fp.gdmdigital.com *.linkedin.com *.facebook.com *.typekit.net ajax.googleapis.com analytics.google.com v2.visualwebsiteoptimizer.com useruploads.visualwebsiteoptimizer.com dev.visualwebsiteoptimizer.com livechat.uk2group.com www.googleadservices.com tagmanager.google.com www.googletagmanager.com d2wy8f7a9ursnm.cloudfront.net *.uk2.net code.jquery.com *.steelhousemedia.com *.adroll.com connect.facebook.net platform.twitter.com apis.google.com tracking.websitealive.com www.gstatic.com https://www.google-analytics.com secure.leadforensics.com *.adnxs.com https://optimize.google.com; default-src 'self' data: *.puzzel.com *.uk2.net; img-src 'self' 'unsafe-inline' googletagmanager.com canarytokens.com *.uk2.net data: *.typekit.net *.gstatic.com *.bing.com secure.gravatar.com *.pingdom.net v2.visualwebsiteoptimizer.com placehold.it useruploads.visualwebsiteoptimizer.com syndication.twitter.com https://script.hotjar.com http://script.hotjar.com dev.visualwebsiteoptimizer.com livechat.uk2group.com googleads.g.doubleclick.net www.googleadservices.com *.steelhousemedia.com chart.googleapis.com widget.trustpilot.com notify.bugsnag.com stats.g.doubleclick.net www.google.com www.google.co.uk https://www.google-analytics.com 55b558c7-resources.bk-partnersasia.com csi.gstatic.com www.facebook.com images.websitealive.com tracking.websitealive.com https://optimize.google.com; style-src 'self' 'unsafe-inline' *.uk2.net www.google.co.uk *.puzzel.com *.pingdom.net https://use.fontawesome.com maxcdn.bootstrapcdn.com *.steelhousemedia.com fonts.gstatic.com www.google.com tagmanager.google.com dev.visualwebsiteoptimizer.com livechat.uk2group.com  tracking.websitealive.com widget.trustpilot.com fonts.googleapis.com https://optimize.google.com https://fonts.googleapis.com; frame-src 'self' *.uk2.net cdn.forms-content.sg-form.com static.addtoany.com https://vars.hotjar.com *.twitter.com *.addthis.com www.google.co.uk www.google.com *.steelhousemedia.com player.vimeo.com a5.websitealive.com www.youtube.com widget.trustpilot.com tracking.websitealive.com apis.google.com accounts.google.com platform.twitter.com staticxx.facebook.com www.facebook.com dev.visualwebsiteoptimizer.com livechat.uk2group.com https://optimize.google.com; object-src 'none'; font-src 'self' *.uk2.net data: http://script.hotjar.com https://script.hotjar.com fonts.gstatic.com use.typekit.net *.puzzel.com https://use.fontawesome.com maxcdn.bootstrapcdn.com fonts.googleapis.com; connect-src 'self' *.paypal.com *.io.thehut.local mw-uk2-uat.thehut.net mw.thghosting.com static.addtoany.com googleadservices.com stats.g.doubleclick.net *.puzzel.com *.pingdom.net widget.trustpilot.com http://*.hotjar.com:* https://*.hotjar.com:* https://vc.hotjar.io:* https://surveystats.hotjar.io wss://*.hotjar.com *.twitter.com *.uk2.net *.addthis.com dev.visualwebsiteoptimizer.com livechat.uk2group.com mw-uk2-uat.thehut.net mw.thghosting.com fonts.googleapis.com https://www.google-analytics.com www.gstatic.com connect.facebook.net bat.bing.com *.sentry.io;
Strict-Transport-Security: max-age=63072000; includeSubDomains