HTTP/1.1 200 OK
Date: Wed, 16 Feb 2022 20:21:47 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: kitsound-ingress-001CORS=339a486f7e38b5dd236094692b4d34bd; Path=/; SameSite=None; Secure
Set-Cookie: kitsound-ingress-001=339a486f7e38b5dd236094692b4d34bd; Path=/
Server: nginx
Vary: Accept-Encoding
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: PHPSESSID=379502a2999b850ad93ae17b57aeb707; expires=Wed, 16-Feb-2022 21:21:47 GMT; Max-Age=3600; path=/; secure; HttpOnly; SameSite=None
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Security-Policy: default-src 'self' *.google.com www.youtube.com *.lwcdn.com *.securesuite.co.uk *.monzo.com *.lloydstsb.com *.cardinalcommerce.com *.touchtechpayments.com *.verifiedbyvisa.com *.securecode.com *.sagepay.com *.arcot.com; script-src 'self' 'sha256-FkS56WxJp7Z76gogeRUYea4t+JvPRVaUA5nfWDhAhWQ=' 'nonce-7a28rnjkcgm7h5jt6fyra3hbm0upfpw1n8jg5cr2' 'unsafe-eval' *.list-manage.com *.amazonaws.com *.fontawesome.com *.mailchimp.com *.google.com *.google-analytics.com cdnjs.cloudflare.com *.gstatic.com *.fancybox.net *.kondor.co.uk *.paypalobjects.com *.paypal.com *.sagepay.com *.typekit.net *.doubleclick.net chimpstatic.com *.facebook.net *.rmtag.com *.lwcdn.com; connect-src 'self' *.fontawesome.com *.doubleclick.net *.paypal.com *.kondor.co.uk *.google-analytics.com; img-src 'self' data: *.cloudinary.com *.metafloor.com *.pimber.ly *.mailchimp.com *.google-analytics.com *.dc-storm.com *.starfieldtech.com *.exertis.co.uk *.kondor.co.uk *.paypal.com *.linksynergy.com *.facebook.com www.google.com www.google.co.uk; style-src 'self' 'unsafe-inline' *.mailchimp.com *.typekit.net netdna.bootstrapcdn.com fonts.googleapis.com *.kondor.co.uk *.fontawesome.com; font-src 'self' netdna.bootstrapcdn.com *.fontawesome.com fonts.googleapis.com fonts.gstatic.com *.arcot.com *.kondor.co.uk *.typekit.net; frame-src 'self' https://ljsp.lwcdn.com www.youtube.com *.facebook.com *.snapchat.com lpcdn.lpsnmedia.net *.digital-cloud-uk.medallia.eu eecouk.demdex.net *.doubleclick.net *.securesuite.co.uk *.monzo.com *.lloydstsb.com *.cardinalcommerce.com *.touchtechpayments.com *.verifiedbyvisa.com *.kondor.co.uk *.boku.com *.securecode.com *.google.com *.sagepay.com *.arcot.com; child-src *.securesuite.co.uk *.monzo.com *.lloydstsb.com *.cardinalcommerce.com *.touchtechpayments.com *.verifiedbyvisa.com *.securecode.com *.sagepay.com *.arcot.com; report-uri /cspreport/
Referrer-Policy: no-referrer-when-downgrade
Feature-Policy: geolocation 'none';midi 'none';sync-xhr 'none';microphone 'none';camera 'none';magnetometer 'none';gyroscope 'none';fullscreen 'self';payment 'none';
expect-ct: max-age=604800, enforce, report-uri='https://kondor.co.uk/report';
Strict-Transport-Security: max-age=31536000; includeSubDomains