HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
Vary: Accept-Encoding
x-conversationid: cc8f6935-257a-4ce0-9d3d-b372d47020d0
X-DNS-Prefetch-Control: off
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=31536000
X-Download-Options: noopen
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: no-cache, max-age=0, must-revalidate, no-store
Content-Security-Policy-Report-Only: connect-src 'report-sample' 'self' https://static.trainlinecontent.com http://*.thetrainline.com/ https://*.thetrainline.com/ https://*.braintreegateway.com http://dpm.demdex.net https://www.facebook.com https://*.usabilla.com https://bam.nr-data.net https://*.trainline.eu/; font-src 'report-sample' 'self' https://static.trainlinecontent.com http://*.thetrainline.com/ https://*.thetrainline.com/ data: https://fonts.gstatic.com; img-src 'report-sample' 'self' https://static.trainlinecontent.com http://*.thetrainline.com/ https://*.thetrainline.com/ data: https://*.online-metrix.net http://dpm.demdex.net https://www.facebook.com https://*.paypal.com https://*.doubleclick.net https://*.googlesyndication.com http://www.google-analytics.com https://www.google-analytics.com http://cm.everesttech.net; style-src 'report-sample' 'self' https://static.trainlinecontent.com http://*.thetrainline.com/ https://*.thetrainline.com/ 'unsafe-inline'; media-src 'report-sample' 'self' https://static.trainlinecontent.com http://*.thetrainline.com/ https://*.thetrainline.com/; script-src 'report-sample' 'self' https://static.trainlinecontent.com http://*.thetrainline.com/ https://*.thetrainline.com/ 'unsafe-inline' 'unsafe-eval' https://*.online-metrix.net https://assets.adobedtm.com http://assets.adobedtm.com https://www.google-analytics.com https://ssl.google-analytics.com http://www.google-analytics.com https://*.googlesyndication.com https://connect.facebook.net https://*.paypal.com https://www.paypalobjects.com https://aff.bstatic.com https://js-agent.newrelic.com https://ad.doubleclick.net https://bam.nr-data.net https://static.ads-twitter.com https://analytics.twitter.com https://*.usabilla.com https://d2c7xlmseob604.cloudfront.net; object-src 'report-sample' 'self' https://static.trainlinecontent.com http://*.thetrainline.com/ https://*.thetrainline.com/ https://www.paypalobjects.com; report-uri https://csp.trainline.com?clientId=DesktopWeb;
x-cache-hit: true
p3p: CP='This is not a P3P policy. See http://www.thetrainline.com/buytickets/terms.aspx for more info'
Content-Encoding: gzip
Content-Length: 46785
Date: Wed, 27 Mar 2019 18:43:55 GMT
Connection: keep-alive
Set-Cookie: context_id=972ecd58-8722-40d2-9120-fea396279b35; Path=/; HttpOnly; Secure; SameSite=Strict
Set-Cookie: context_alias_id=3b9bdf3b-2cc3-4784-bf95-20f4f666b95a; Path=/; Secure; SameSite=Strict
Set-Cookie: currency_code=USD; Path=/; Expires=Sat, 27 Apr 2019 17:43:55 GMT; Secure
Set-Cookie: reset_currency=1; Path=/; Expires=Sat, 27 Apr 2019 17:43:55 GMT; HttpOnly; Secure
Set-Cookie: TANGO-EDGE=0; expires=Tue, 25-Jun-2019 18:43:55 GMT
X-TestResult: excluded from test