HTTP/1.1 200 OK
Date: Sat, 10 Apr 2021 05:47:54 GMT
Server: Apache
X-Powered-By: PHP/7.2.34
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: PHPSESSID=t1ofq81suu8qh5l5mdp8l9is97; path=/; Secure
Set-Cookie: language=en; expires=Mon, 10-May-2021 05:47:54 GMT; Max-Age=2592000; path=/; domain=www.joyoaudio.co.uk; Secure
Set-Cookie: currency=GBP; expires=Mon, 10-May-2021 05:47:54 GMT; Max-Age=2592000; path=/; domain=www.joyoaudio.co.uk; Secure
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000; includeSubDomains
Referrer-Policy: strict-origin
X-Mod-Pagespeed: 1.13.35.2-0
X-Powered-By: PleskLin
X-XSS-Protection: 1; mode=block
X-Permitted-Cross-Domain-Policies: self
Content-Security-Policy: default-src 'self' *.spotify.com *.doubleclick.net *.addthis.com *.google-analytics.com *.instagram.com *.googleapis.com *.trustpilot.com *.facebook.com *.facebook.net *.googleapis.com www.securesuite.co.uk *.paypal.com *.cardinalcommerce.com *.googleapis.com; img-src * data:; child-src 'self' *.w.org https://ir-uk.amazon-adsystem.com ws-eu *.amazon-adsystem.com https://www.amazon.co.uk *.amazon-adsystem.com *.amazon.com *.amazon.co.uk *.gstatic.com *.googleapis.com *.gstatic.com *.googleapis.com *.google.com *.addthis.com *.addthisedge.com *.spotify.com *.facebook.com *.cardinalcommerce.com *.youtube.com *.paypal.com *.trustpilot.com *.vimeo.com *.google.com *.amazon-adsystem.co *.amazon-adsystem.com *.twitter.com *.linkedin.com; script-src * 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline' *.spotify.com cdn.jsdelivr.net fonts.googleapis.com; font-src 'self' data: cdn.jsdelivr.net fonts.googleapis.com fonts.gstatic.com;
Cache-Control: max-age=0, no-cache, no-store, proxy-revalidate, no-transform
Pragma: no-cache
Vary: Accept-Encoding
Transfer-Encoding: chunked
Content-Type: text/html; charset=utf-8