HTTP/1.1 200 OK
Cache-Control: no-cache, max-age=0, must-revalidate, no-store
Content-Encoding: gzip
Content-Security-Policy-Report-Only: connect-src 'report-sample' 'self' https://static.trainlinecontent.com http://*.thetrainline.com/ https://*.thetrainline.com/ https://*.braintreegateway.com http://dpm.demdex.net https://www.facebook.com https://*.usabilla.com https://bam.nr-data.net; font-src 'report-sample' 'self' https://static.trainlinecontent.com http://*.thetrainline.com/ https://*.thetrainline.com/ data: https://fonts.gstatic.com; img-src 'report-sample' 'self' https://static.trainlinecontent.com http://*.thetrainline.com/ https://*.thetrainline.com/ data: https://*.online-metrix.net http://dpm.demdex.net https://www.facebook.com https://*.paypal.com https://*.doubleclick.net https://*.googlesyndication.com http://www.google-analytics.com https://www.google-analytics.com http://cm.everesttech.net; style-src 'report-sample' 'self' https://static.trainlinecontent.com http://*.thetrainline.com/ https://*.thetrainline.com/ 'unsafe-inline'; media-src 'report-sample' 'self' https://static.trainlinecontent.com http://*.thetrainline.com/ https://*.thetrainline.com/; script-src 'report-sample' 'self' https://static.trainlinecontent.com http://*.thetrainline.com/ https://*.thetrainline.com/ 'unsafe-inline' 'unsafe-eval' https://*.online-metrix.net https://assets.adobedtm.com http://assets.adobedtm.com https://www.google-analytics.com https://ssl.google-analytics.com http://www.google-analytics.com https://*.googlesyndication.com https://connect.facebook.net https://*.paypal.com https://www.paypalobjects.com https://aff.bstatic.com https://js-agent.newrelic.com https://ad.doubleclick.net https://bam.nr-data.net https://static.ads-twitter.com https://analytics.twitter.com https://*.usabilla.com; object-src https://www.paypalobjects.com; report-uri https://www.thetrainline.com/reporting/CSP?clientId=DesktopWeb;
Content-Type: text/html; charset=utf-8
p3p: CP='This is not a P3P policy. See http://www.thetrainline.com/buytickets/terms.aspx for more info'
Strict-Transport-Security: max-age=31536000
Vary: Accept-Encoding
x-cache-hit: true
X-Content-Type-Options: nosniff
x-conversationid: 52a24cb1-a4df-4d48-b530-103cc45910ed
X-DNS-Prefetch-Control: off
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 58631
Date: Fri, 23 Feb 2018 22:17:04 GMT
Connection: keep-alive
Set-Cookie: context_id=c40e82ac-9b37-49d7-a765-6b06a680f7be; Path=/; HttpOnly; Secure; SameSite=Strict
Set-Cookie: currency_code=EUR; Path=/; Expires=Sat, 23 Feb 2019 22:17:04 GMT; Secure