X-XSS-Protection: 1; mode=block Connection: keep-alive Strict-Transport-Security: max-age=10368000; includeSubDomains Vary: Accept-Encoding Cache-Control: max-age=0, must-revalidate, no-cache, no-store X-Content-Type-Options: nosniff HTTP/1.1 200 OK X-ServerName: (null) Public-Key-Pins: pin-sha256="FucYs01mew4CJCi+sXVixIIll53mGeIKxKVPrbTvH3E="; pin-sha256="47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU="; max-age=5184000; includeSubDomains Date: Wed, 07 Mar 2018 14:44:13 GMT Content-Security-Policy: default-src 'self' data: 'unsafe-inline' 'unsafe-eval' *.google.com *.google.com.vn *.google.com.au *.googleapis.com *.googletagmanager.com *.google-analytics.com *.doubleclick.net *.gstatic.com *.eway.com.au *.comodo.com *.ewaypayments.com *.magecomp.com *.newrelic.com *.nr-data.net *.datatoolscloud.net.au *.paypal.com http://*.magecomp.com; X-UA-Compatible: IE=edge X-Frame-Options: SAMEORIGIN Transfer-Encoding: chunked Accept-Ranges: bytes Content-Type: text/html; charset=UTF-8 Pragma: no-cache Expires: Tue, 07 Mar 2017 14:44:13 GMT Set-Cookie: PHPSESSID=l8j5pcjiignm7stt0n3gqngbh0; expires=Wed, 07-Mar-2018 15:44:13 GMT; Max-Age=3600; path=/melbourne; domain=holden.click2drive.com.au; HttpOnly; secure