HTTP/1.1 301 Moved Permanently Server: AkamaiGHost Content-Length: 0 Location: https://www.cocosa.co.uk/ Date: Thu, 21 Dec 2017 23:04:49 GMT Connection: keep-alive HTTP/1.1 302 Moved Temporarily Server: AkamaiGHost Content-Length: 0 Location: https://m.cocosa.co.uk/ Date: Thu, 21 Dec 2017 23:04:49 GMT Connection: keep-alive Strict-Transport-Security: max-age=31536000 Vary: User-Agent HTTP/1.1 200 OK Cache-Control: private Content-Type: text/html; charset=utf-8 Server: Microsoft-IIS/8.5 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Strict-Transport-Security: max-age=31536000 X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1 X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'self'; frame-src 'self' data: fbrpc://call https://tpc.googlesyndication.com https://roktcdn1.akamaized.net https://www.youtube.com https://*.masterpass.com https://masterpass.com https://*.rokt.com https://*.doubleclick.net https://*.kaptcha.com https://*.addthis.com https://*.facebook.com https://*.braintreegateway.com https://*.paypal.com https://*.visa.com https://*.cardinalcommerce.com https://*.paypalobjects.com; script-src 'self' data: https://roktcdn1.akamaized.net https://cdn.optimizely.com/js/ https://ds-aksb-a.akamaihd.net/aksb.min.js https://tpc.googlesyndication.com https://uua1puwkv5-dsn.algolia.net https://*.algolianet.com https://*.masterpass.com https://masterpass.com https://*.rokt.com https://*.nr-data.net https://cdn.jsdelivr.net/algoliasearch/ https://*.facebook.net https://*.facebook.com https://*.newrelic.com https://*.marinsm.com https://*.google-analytics.com https://*.googleadservices.com https://*.googleapis.com https://*.postcodeanywhere.co.uk https://*.paypal.com https://*.paypalobjects.com https://*.braintreegateway.com https://*.visa.com https://*.kaptcha.com https://*.addthis.com https://*.nanigans.com 'unsafe-inline' 'unsafe-eval'; img-src 'self' data: blob: https:; style-src 'self' https://roktcdn1.akamaized.net https://*.masterpass.com https://masterpass.com https://*.googleapis.com https://*.postcodeanywhere.co.uk 'unsafe-inline'; font-src 'self' data: https://*.googleapis.com https://*.gstatic.com https://roktcdn1.akamaized.net ; connect-src 'self' https://*.postcodeanywhere.co.uk https://*.addthis.com https://www.google-analytics.com https://*.nr-data.net https://*.rokt.com https://*.algolia.net https://*.algolianet.com https://*.braintreegateway.com https://*.paypal.com https://*.kaptcha.com https://*.facebook.com https://ds-aksb-a.akamaihd.net/RRT; object-src 'self' https://c2.mysalec.com https://www.paypalobjects.com; report-uri https://headersreporting.mysaleapi.com/Report Date: Thu, 21 Dec 2017 23:04:49 GMT Connection: keep-alive