Date: Fri, 20 Nov 2020 22:44:56 GMT
Content-Type: text/html;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Content-Language: en-AU-x-lvariant-AU
Content-Security-Policy: connect-src apps.rokt.com https://rs.fullstory.com s.pinimg.com ct.pinterest.com pinterest.adsymptotic.com *.taboola.com wsdk.rokt.com https://s.yimg.com https://sp.analytics.yahoo.com 'self' *.cloudfront.net *.postcodeanywhere.co.uk *.pandastream.com *.filepicker.io *.va.cobrowse.liveperson.net *.facebook.com https://widget.trustpilot.com https://heapanalytics.com/ved/symbol https://heapanalytics.com/ved/category https://heapanalytics.com/ved/stats https://heapanalytics.com/h https://heapanalytics.com/api/add_user_properties_v3 bat.bing.com; child-src https://*.adyen.com apps.rokt.com wsdk.rokt.com 'self' https://www.facebook.com https://staticxx.facebook.com *.facebook.com *.liveperson.net *.lpsnmedia.net *.youtube.com https://*.nakedwines.com.au https://dialog.filepicker.io *.filepicker.io *.google.com *.google.co.uk *.nakedwines.com *.nakedwines.com.au; style-src roktcdn1.akamaized.net 'self' 'unsafe-inline' *.cloudfront.net *.amazonaws.com *.googleapis.com *.postcodeanywhere.co.uk *.ckeditor.com https://tagmanager.google.com/ *.va.cobrowse.liveperson.net https://heapanalytics.com/css/ved.css; script-src apps.rokt.com roktcdn1.akamaized.net amplify.outbrain.com https://www.dwin1.com *.awin1.com *.zenaps.com https://fullstory.com https://edge.fullstory.com https://cdn.taboola.com/libtrc/unip/1132154/tfa.js s.pinimg.com ct.pinterest.com pinterest.adsymptotic.com *.taboola.com wsdk.rokt.com https://s.yimg.com https://sp.analytics.yahoo.com 'self' *.ads-twitter.com *.googletagmanager.com *.googleadservices.com *.facebook.net *.facebook.com *.liveperson.net *.lpsnmedia.net https://www.gstatic.com *.gstatic.com https://www.google.com *.google.com *.googleapis.com *.postcodeanywhere.co.uk *.google-analytics.com *.cloudfront.net *.twitter.com *.pandastream.com *.filepicker.io *.ckeditor.com https://tagmanager.google.com/ https://widget.trustpilot.com/bootstrap/v5/tp.widget.bootstrap.min.js https://cdn.heapanalytics.com/js/heap-2545534322.js https://heapanalytics.com/js/ved.js 'unsafe-inline' 'unsafe-eval' *.realexpayments.com https://*.realexpayments.com bat.bing.com; object-src 'self'; frame-src *.livestream.com apps.rokt.com *.awin1.com *.zenaps.com wsdk.rokt.com 'self' *.googleapis.com https://www.facebook.com https://staticxx.facebook.com *.facebook.com *.liveperson.net *.lpsnmedia.net *.youtube.com https://*.nakedwines.com.au https://dialog.filepicker.io *.filepicker.io https://www.google.com *.google.com *.google.co.uk *.nakedwines.com *.nakedwines.com.au *.googletagmanager.com *.va.cobrowse.liveperson.net https://widget.trustpilot.com *.realexpayments.com https://*.realexpayments.com; media-src 'self' *.amazonaws.com *.lpsnmedia.net; img-src apps.rokt.com roktcdn1.akamaized.net amplifypixel.outbrain.com tr.outbrain.com *.awin1.com *.zenaps.com https://trc.taboola.com/1132154/log/3/unip prf.hn s.pinimg.com ct.pinterest.com pinterest.adsymptotic.com *.taboola.com wsdk.rokt.com 'self' *.cloudfront.net data: https://www.facebook.com *.facebook.com *.google.com *.lpsnmedia.net *.google.co.uk *.gstatic.com *.google-analytics.com *.postcodeanywhere.co.uk *.googleapis.com t.co *.amazonaws.com *.ckeditor.com *.nakedwines.co.uk https://heapanalytics.com/h https://heapanalytics.com/api/add_user_properties_v3 https://heapanalytics.com/api/add_user_properties https://heapanalytics.com/api/identify_v4 https://heapanalytics.com/api/identify_v3 https://heapanalytics.com/api/identify https://heapanalytics.com/img/loading_circles_ved.gif https://heapanalytics.com/img/logoSmallSprite.png https://googleads.g.doubleclick.net https://googleads.g.doubleclick.net/pagead/viewthroughconversion/810512216/ bat.bing.com; default-src roktcdn1.akamaized.net 'self' *.cloudfront.net; report-uri https://nakedwinesau.report-uri.com/r/t/csp/enforce; font-src 'self' *.cloudfront.net data: *.amazonaws.com *.gstatic.com https://heapanalytics.com/font/*
Expires: 0
Pragma: no-cache
Set-Cookie: cid=UK; Max-Age=86400; Expires=Sat, 21-Nov-2020 22:44:55 GMT; Path=/; Secure; HttpOnly
Set-Cookie: rememberme=eyJhbGciOiJSUzUxMiJ9.eyJpYXQiOjE2MDU5MTIyOTUsImV4cCI6MTYzNzQ0ODI5NSwic3ViIjoiMjI2NzE4NjcwIiwicm5kIjoiZTliMjg3NTYtYTFhZC00ZjNjLThlM2ItMGZhZGNjMTBiNjRmIiwidHRwIjoicmVtZW1iZXItbWUifQ.PeiOyTlvwT9YDvNgiYGGPJIB3mSU2FZXdEytN9A3ZUv8H-au3tauDMUyswQGnjjf5T2FtfjVX2-mKivbiqFXSF3wlPN55jA-Spbsg0yMZQ1NjjA4d1s55dnPlw2raHxMngN9CgAVny_ThOVE51pxX20kUoSU9UIMgSgG9ZPBGZH8MqSksV-6AqFMan4cLoeqyYHltZx6oW3aXsUsVF11PPIGGlW6vGeQZgMkv_oHAN3sgVSe8QGU8GXQDXFZ9RoSxO0vaqHxQzIQpUsik8v4TH_nmsscYgHxDZXUzEYVvIJInCmGWLCZ4HByx0x78BbDVfDDuSSaEddvIS8jdHOpcA; Max-Age=31535999; Expires=Sat, 20-Nov-2021 22:44:54 GMT; Path=/; Secure; HttpOnly
Set-Cookie: SESSION=ZjRiNjIyODgtOTNjYS00OTBlLTgwZjQtNmU1M2NkNDQ3N2Q5; Path=/; Secure; HttpOnly
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
CF-Cache-Status: DYNAMIC
cf-request-id: 06896e0e8b0000f0158e3d9000000001
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 5f55b2c4185cf015-EWR
x-encoded-content-encoding: gzip