| Content-Type | text/html; charset=UTF-8 |
| Transfer-Encoding | chunked |
| Connection | keep-alive |
| Expires | Sun, 19 Nov 1978 05:00:00 GMT |
| Cache-Control | max-age=1800, public |
| Vary | Cookie |
| X-UA-Compatible | IE=edge |
| Content-language | en |
| X-Content-Type-Options | nosniff |
| X-Frame-Options | SameOrigin |
| Last-Modified | Tue, 01 Aug 2017 10:09:38 GMT |
| Content-Security-Policy | default-src self; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googletagmanager.com *.google-analytics.com *.google.com *.google.co.uk ajax.googleapis.com apps.nestle.com apps.nestle.co.uk https://js-agent.newrelic.com *.betrad.com bam.nr-data.net https://static.addtoany.com https://cdnjs.cloudflare.com brand-ecommerce-assets.fusepump.com *.youtube.com s.ytimg.com *.evidon.com code.jquery.com d22xmn10vbouk4.cloudfront.net https://lb.nestle-watersna.com https://secure-ds.serving-sys.com http://7225833.collect.igodigital.com https://bs.serving-sys.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com fonts.gstatic.com https://cdnjs.cloudflare.com brand-ecommerce-assets.fusepump.com *.youtube.com cloud.typography.com https://lb.nestle-watersna.com http://nplus.nestlewaters.acsitefactory.com; img-src 'self' data: *.cloudflare.com *.google-analytics.com https://stats.g.doubleclick.net www.google.com www.google.co.uk *.doubleclick.net *.betrad.com *.amazonaws.com px.pump.to brand-ecommerce-assets.fusepump.com *.evidon.com https://lb.nestle-watersna.com https://nova.collect.igodigital.com; media-src 'self'; frame-src 'self' static.addtoany.com *.youtube.com *.youtu.be youtu.be info.evidon.com https://www.nestle-purelife.us https://nestle-purelife.us https://lb.nestle-watersna.com https://2275258.fls.doubleclick.net http://2275258.fls.doubleclick.net; child-src 'self' static.addtoany.com *.youtube.com *.youtu.be youtu.be info.evidon.com https://lb.nestle-watersna.com; font-src 'self' data: fonts.gstatic.com fonts.googleapis.com https://cdnjs.cloudflare.com; connect-src 'self' brand-ecommerce-api.fusepump.com *.google-analytics.com https://lb.nestle-watersna.com https://collect.analyze.ly; report-uri /us/report-csp-violation |
| X-Content-Security-Policy | default-src self; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googletagmanager.com *.google-analytics.com *.google.com *.google.co.uk ajax.googleapis.com apps.nestle.com apps.nestle.co.uk https://js-agent.newrelic.com *.betrad.com bam.nr-data.net https://static.addtoany.com https://cdnjs.cloudflare.com brand-ecommerce-assets.fusepump.com *.youtube.com s.ytimg.com *.evidon.com code.jquery.com d22xmn10vbouk4.cloudfront.net https://lb.nestle-watersna.com https://secure-ds.serving-sys.com http://7225833.collect.igodigital.com https://bs.serving-sys.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com fonts.gstatic.com https://cdnjs.cloudflare.com brand-ecommerce-assets.fusepump.com *.youtube.com cloud.typography.com https://lb.nestle-watersna.com http://nplus.nestlewaters.acsitefactory.com; img-src 'self' data: *.cloudflare.com *.google-analytics.com https://stats.g.doubleclick.net www.google.com www.google.co.uk *.doubleclick.net *.betrad.com *.amazonaws.com px.pump.to brand-ecommerce-assets.fusepump.com *.evidon.com https://lb.nestle-watersna.com https://nova.collect.igodigital.com; media-src 'self'; frame-src 'self' static.addtoany.com *.youtube.com *.youtu.be youtu.be info.evidon.com https://www.nestle-purelife.us https://nestle-purelife.us https://lb.nestle-watersna.com https://2275258.fls.doubleclick.net http://2275258.fls.doubleclick.net; child-src 'self' static.addtoany.com *.youtube.com *.youtu.be youtu.be info.evidon.com https://lb.nestle-watersna.com; font-src 'self' data: fonts.gstatic.com fonts.googleapis.com https://cdnjs.cloudflare.com; connect-src 'self' brand-ecommerce-api.fusepump.com *.google-analytics.com https://lb.nestle-watersna.com https://collect.analyze.ly; report-uri /us/report-csp-violation |
| X-WebKit-CSP | default-src self; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googletagmanager.com *.google-analytics.com *.google.com *.google.co.uk ajax.googleapis.com apps.nestle.com apps.nestle.co.uk https://js-agent.newrelic.com *.betrad.com bam.nr-data.net https://static.addtoany.com https://cdnjs.cloudflare.com brand-ecommerce-assets.fusepump.com *.youtube.com s.ytimg.com *.evidon.com code.jquery.com d22xmn10vbouk4.cloudfront.net https://lb.nestle-watersna.com https://secure-ds.serving-sys.com http://7225833.collect.igodigital.com https://bs.serving-sys.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com fonts.gstatic.com https://cdnjs.cloudflare.com brand-ecommerce-assets.fusepump.com *.youtube.com cloud.typography.com https://lb.nestle-watersna.com http://nplus.nestlewaters.acsitefactory.com; img-src 'self' data: *.cloudflare.com *.google-analytics.com https://stats.g.doubleclick.net www.google.com www.google.co.uk *.doubleclick.net *.betrad.com *.amazonaws.com px.pump.to brand-ecommerce-assets.fusepump.com *.evidon.com https://lb.nestle-watersna.com https://nova.collect.igodigital.com; media-src 'self'; frame-src 'self' static.addtoany.com *.youtube.com *.youtu.be youtu.be info.evidon.com https://www.nestle-purelife.us https://nestle-purelife.us https://lb.nestle-watersna.com https://2275258.fls.doubleclick.net http://2275258.fls.doubleclick.net; child-src 'self' static.addtoany.com *.youtube.com *.youtu.be youtu.be info.evidon.com https://lb.nestle-watersna.com; font-src 'self' data: fonts.gstatic.com fonts.googleapis.com https://cdnjs.cloudflare.com; connect-src 'self' brand-ecommerce-api.fusepump.com *.google-analytics.com https://lb.nestle-watersna.com https://collect.analyze.ly; report-uri /us/report-csp-violation |
| X-XSS-Protection | 1; mode=block |
| Strict-Transport-Security | max-age=1000 |
| X-Drupal-Cache | HIT |
| X-Request-ID | v-b7b31c5a-7d53-11e7-90a1-022cc2627ead |
| X-AH-Environment | 01live |
| X-Varnish | 10290587 9078083 |
| Age | 1619 |
| Via | 1.1 varnish-v4 |
| X-Cache | HIT |
| X-Cache-Hits | 628 |
| Server | cloudflare-nginx |
| CF-RAY | 3904a5d31f883fc5-YUL |
| Content-Encoding | gzip |