slh.com Review

 N/A

HTTP/1.1 307 Temporary Redirect
Date: Fri, 22 Aug 2025 04:01:18 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
Location: https://slh.com/
x-azure-ref: 20250822T040118Z-177cbd8cb84hd5qshC1OSA242c0000000x5g000000008y49
X-Cache: CONFIG_NOCACHE

HTTP/1.1 200 OK
Date: Fri, 22 Aug 2025 04:01:19 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 18461
Connection: keep-alive
Cache-Control: private
Content-Encoding: gzip
Set-Cookie: shell#lang=en; path=/; secure;
Set-Cookie: ASP.NET_SessionId=mwgaa3qr2aeblxvllzdtfnph; path=/; secure; HttpOnly;
Set-Cookie: shell#lang=en; path=/; secure;
Set-Cookie: ASP.NET_SessionId=mwgaa3qr2aeblxvllzdtfnph; path=/; secure; HttpOnly;
Set-Cookie: currencycode=GBP; domain=.slh.com; path=/; secure; HttpOnly;
Set-Cookie: __RequestVerificationToken=FYb0iJC5LrSByOpfQKEPT-l-oLGQM665_QVZSUToxoDBkX4ocqvDz0RRGlmiih1cDX-p1DAQE1Jx2VKLp77hyNf-X94LspW9qhYIbJmECMs1; path=/; secure; HttpOnly;
Vary: Accept-Encoding
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-Frame-Options: SAMEORIGIN
Request-Context: appId=cid-v1:0ae343ca-623c-4499-b925-d423e52cbb79
Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Bitness
X-Content-Type-Options: nosniff
Referrer-Policy: strict-origin-when-cross-origin
Content-Security-Policy-Report-Only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.bing.com *.cookiebot.com *.google-analytics.com *.googleapis.com *.googletagmanager.com *.google.com *.gstatic.com *.doubleclick.net *.curator.io *.elfsight.com *.hotjar.com *.facebook.net *.cloudfront.net *.micpn.com *.searchstax.com *.wisepops.com wisepops.com *.wisepops.net wisepops.net *.sentry-cdn.com *.thehotelsnetwork.com; style-src 'self' 'unsafe-inline' *.googleapis.com *.gstatic.com *.fonts.net *.myfonts.net *.doubleclick.net *.curator.io; img-src 'self' data: blob: *.google.co.uk *.facebook.com *.doubleclick.net *.google-analytics.com *.micpn.com *.googleapis.com *.gstatic.com *.cloudfront.net *.curator.io *.tripadvisor.com; connect-src 'self' *.bing.com *.cookiebot.com *.google-analytics.com *.googleapis.com *.googletagmanager.com *.google.com *.gstatic.com *.doubleclick.net *.micpn.com *.facebook.com *.mapbox.com *.curator.io *.wisepops.net *.wisepops.com wisepops.net wisepops.com *.thehotelsnetwork.com; font-src 'self' data: *.fonts.net *.myfonts.net *.gstatic.com; worker-src 'self' blob:; child-src 'self' blob: *.google.com *.googleapis.com *.googletagmanager.com *.doubleclick.net; frame-src 'self' *.google.com *.doubleclick.net *.facebook.com; media-src 'self'; object-src 'none'; base-uri 'self'; report-uri https://3chillies.report-uri.com/r/d/csp/reportOnly;
x-azure-ref: 20250822T040118Z-r16849b4f48mw7h4hC1TYOss8s00000002n00000000002cv
X-Cache: CONFIG_NOCACHE
Accept-Ranges: bytes