Leshuttle.com

server: Microsoft-Azure-Application-Gateway/v2
date: Wed, 19 Feb 2025 11:10:02 GMT
content-type: text/html
content-length: 195
location: https://www.leshuttle.com/

HTTP/2 301 
date: Wed, 19 Feb 2025 11:10:02 GMT
content-length: 0
location: https://www.leshuttle.com/uk-en
vary: Accept-Encoding

HTTP/2 200 
date: Wed, 19 Feb 2025 11:10:02 GMT
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store
content-encoding: br
content-language: en-GB
pragma: no-cache
set-cookie: CMSABHome_en-GB_5=%7B%22VariantIdentifier%22%3A%22e638fab9-e5b4-403f-bc87-c86734661bf7%22%2C%22Conversions%22%3A%5B%5D%7D; expires=Sat, 19 Apr 2025 11:10:02 GMT; path=/; secure; samesite=lax; httponly
set-cookie: CMSVarABHome_en-GB_5=e638fab9-e5b4-403f-bc87-c86734661bf7; expires=Sat, 19 Apr 2025 11:10:02 GMT; path=/; secure; samesite=lax; httponly
set-cookie: .AspNetCore.Antiforgery.bnrzaK2e_oY=CfDJ8OQwbPob7dJOgCPxBlTJIQYojPkrNtm3FoHv4MlL3-XV9erztnkY6BjUh2D_hsjI5Dl7VUblrWpCoEq4KMObeSAwC7RhYOozV8xdNnMMA-_6d5mDhJMSRLyFdZm8Xf2oE-DHI-h7OnzmK-vhenZozK4; path=/; secure; samesite=strict; httponly
vary: Accept-Encoding
permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), camera=(), fullscreen=*, geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), speaker=(), sync-xhr=(), usb=(), vr=(), interest-cohort=()
feature-policy: accelerometer 'none'; camera 'none'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; payment 'none'; usb 'none'
x-content-type-options: nosniff
x-xss-protection: 0
referrer-policy: strict-origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubDomains
x-permitted-cross-domain-policies: none
report-to: {"group":"default","max_age":31536000,"endpoints":[{"url":"https://leshuttle.report-uri.com/a/d/g"}],"include_subdomains":true}
cross-origin-opener-policy: same-origin; report-to="default"
cross-origin-resource-policy-report-only: same-site; report-to="default"
cross-origin-embedder-policy-report-only: require-corp; report-to="default"
nel: {"report_to":"default","max_age":31536000,"include_subdomains":true}
content-security-policy: default-src 'self' test.example.com; script-src 'self' 'strict-dynamic' 'nonce-j4CwxhwwNF79tVVPh/0Jb0ag' 'sha256-AXE6bjbZT+qFeOJfX5jR5EOg2Z32t1DwowoorjskEbM=' *.cookiebot.com *.vimeo.com *.googleapis.com *.googleoptimize.com *.bing.com *.googletagmanager.com *.zdassets.com *.google-analytics.com *.facebook.net *.hotjar.com *.doubleclick.net *.zendesk.com *.yimg.com *.evgnet.com *.msecnd.net *.googlesyndication.com *.google.com *.gstatic.com embed.radio.co https://tagmanager.google.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://cdn-ukwest.onetrust.com; connect-src 'self' *.hotjar.com *.hotjar.io *.linkedin.com *.evergage.com *.googleapis.com *.google.com *.google.co.uk *.google-analytics.com *.doubleclick.net *.facebook.com *.onetrust.com *.zdassets.com *.zendesk.com *.zopim.com wss://widget-mediator.zopim.com bat.bing.com https://*.analytics.google.com https://*.googletagmanager.com wss://ws.hotjar.com https://pagead2.googlesyndication.com https://aax-eu.amazon-adsystem.com https://s.yimg.com https://ara.paa-reporting-advertising.amazon *.smooch.io wss://api.smooch.io wss://api.eu-1.smooch.io; font-src 'self' data: *.typekit.net https://fonts.gstatic.com; frame-ancestors 'self' https://*.leshuttle.com; img-src 'self' data: *.google.co.uk *.google.com *.google.is *.google-analytics.com *.gstatic.com *.youtube.com *.vimeocdn.com *.googleapis.com *.ggpht.com *.facebook.com *.gravatar.com *.linkedin.com *.doubleclick.net *.bing.com *.eurotunnel.com placehold.co *.onetrust.com https://*.googletagmanager.com https://ssl.gstatic.com https://www.gstatic.com https://www.google.fr https://sp.analytics.yahoo.com *.leshuttle.com *.zendesk.com; report-to default; report-uri https://leshuttle.report-uri.com/r/d/csp/enforce; style-src 'self' data: 'unsafe-inline' *.fonts.net *.googleapis.com *.gstatic.com https://googletagmanager.com https://tagmanager.google.com; upgrade-insecure-requests; frame-src 'self' *.doubleclick.net *.trustpilot.com *.google.com *.vimeo.com *.youtube.com *.facebook.com embed.radio.co *.googletagmanager.com https://bid.g.doubleclick.net https://td.doubleclick.net https://aax-eu.amazon-adsystem.com https://insight.adsrvr.org *.googletagmanager.com; media-src 'self' *.zdassets.com;
x-frame-options: SAMEORIGIN