vax.co.uk Review

 N/A

HTTP/1.1 301 Moved Permanently
Date: Mon, 25 Aug 2025 02:11:32 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Mon, 25 Aug 2025 03:11:32 GMT
Location: https://vax.co.uk/
Set-Cookie: __cf_bm=RVSshuGBIEPNEu5mJ09bvpO26F.6kpLRDaKfcFMaG1c-1756087892-1.0.1.1-5_kqHb3XHuNQzI66jZvpzvd4qKw5JWnNdQq2BiB7QoDDGqL_SYVVtfYCUHdTSugDS2lml_efLl6rmlguZwf510byZlIfICRBkXY_CnJWCEQ; path=/; expires=Mon, 25-Aug-25 02:41:32 GMT; domain=.vax.co.uk; HttpOnly
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Server: cloudflare
CF-RAY: 97478f2ef823e019-NRT
alt-svc: h3=":443"; ma=86400

HTTP/1.1 302 Moved Temporarily
Date: Mon, 25 Aug 2025 02:11:32 GMT
Content-Type: text/html
Content-Length: 143
Connection: keep-alive
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Location: https://www.vax.co.uk/
Set-Cookie: __cf_bm=tUr8M.2r1YpPp82Kka6Od6YAbm9EuhCm6bfQduXL1mQ-1756087892-1.0.1.1-NyQrbcCVKsaJsnb3w6z136buCcawoVg4yuJrMMBMfPd2jfOWTjIgCDddEJyIrHgvCENfKPD_zrA.5kY4Fpgp32Kh97Dz4mYLu.xaGqpNrhs; path=/; expires=Mon, 25-Aug-25 02:41:32 GMT; domain=.vax.co.uk; HttpOnly; Secure
Vary: Accept-Encoding
Strict-Transport-Security: max-age=2592000; includeSubDomains; preload
X-Content-Type-Options: nosniff
Server: cloudflare
CF-RAY: 97478f303cebd770-NRT
alt-svc: h3=":443"; ma=86400

HTTP/1.1 200 OK
Date: Mon, 25 Aug 2025 02:11:32 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: br
vary: Accept-Encoding
x-built-with: Hyva Themes
report-to: {"group":"report-endpoint","max_age":10886400,"endpoints":[{"url":"https:\/\/csp.vax.co.uk\/csp-report"}]}
content-security-policy-report-only: font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com https://*.gstatic.com *.cloudinary.com *.klarnacdn.net *.stackla.com *.googleapis.com cdn.honey.io account.affilitizer.com at.alicdn.com https://vax.co.uk/ data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.adyen.com pay.google.com payments-eu.amazon.com *.amazon.de api.bazaarvoice.com stg.api.bazaarvoice.com cloudinary.com *.cloudinary.com *.securesuite.co.uk *.facebook.com *.arcot.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com *.monzo.com *.wlp-acs.com *.rsa3dsauth.co.uk *.rsa3dsauth.com *.lloydsbankinggroup.com *.salesforce.com 3dsecure.starlingbank.com 'self' 'unsafe-inline'; frame-ancestors *.google.com *.facebook.net *.vax.co.uk 'self'; frame-src bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.adyen.com pay.google.com display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com cloudinary.com *.cloudinary.com cdnjs.cloudflare.com *.klarna.com *.stackla.com *.authorize.net *.pinterest.com *.doubleclick.net *.snapchat.com *.trustpilot.com *.securesuite.co.uk *.arcot.com *.salesforceliveagent.com tti-fc.my.salesforce-sites.com *.vax.co.uk *.googletagmanager.com *.awin1.com/ *.awinblackfriday.com/ spay.samsung.com *.google.it *.rsa3dsauth.co.uk *.rsa3dsauth.com *.klarnaservices.com *.lloydsbankinggroup.com *.googleusercontent.com *.salesforce.com *.wepowerconnections.com *.monzo.com 3dsecure.starlingbank.com *.cardinalcommerce.com *.site.com *.techsee.me www.facebook.com https://service.force.com https://tti-fc-emea.force.com https://d.la1-c1cs-cdg.salesforceliveagent.com https://cdn.cookielaw.org 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.adyen.com pay.google.com *.payments-amazon.com *.media-amazon.com *.paypalobjects.com https://*.gstatic.com https://images.unsplash.com display.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com network-a.bazaarvoice.com network-stg-a.bazaarvoice.com photos-uat-us.bazaarvoice.com img.youtube.com cloudinary.com *.cloudinary.com blob: *.klarna.com *.klarnaevt.com *.klarnacdn.net *.simpli.fi *.google.com *.google.co.uk *.bazaarvoice.com *.adscience.com *.rackcdn.com *.magentocommerce.com *.pinimg.com *.snapchat.com *.bing.com *.trustpilot.com *.vaxstaffsale.co.uk *.roeye.com www.awin1.com *.awinblackfriday.com/ *.clarity.ms *.doubleclick.net *.googlesyndication.com *.vax.co.uk https://vax.co.uk/ https://vax.co.uk:443/ *.wepowerconnections.com spay.samsung.com *.googleapis.com *.tiktok.com *.google.ie *.google.je *.google.gg *.zenaps.com *.googleusercontent.com *.facebook.com *.facebook.net *.cloudflareinsights.com *.force.com *.techsee.me edge.curalate.com bat.bing.net res.cloudinary.com www.facebook.com vax.co.uk *.abtasty.com *.googleadservices.com *.google-analytics.com *.postcodeanywhere.co.uk https://service.force.com https://tti-fc-emea.force.com https://d.la1-c1cs-cdg.salesforceliveagent.com https://cdn.cookielaw.org data: 'self' 'unsafe-inline'; script-src www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com https://maps.googleapis.com apps.bazaarvoice.com apps.nexus.bazaarvoice.com apps-stg.nexus.bazaarvoice.com analytics-static.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com mpsnare.iesnare.com cloudinary.com *.cloudinary.com cdnjs.cloudflare.com *.vimeo.com unpkg.com *.klarna.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.stackla.com *.authorize.net *.zencdn.net *.googleoptimize.com *.postcodeanywhere.co.uk *.force.com d.la1-c1cs-cdg.salesforceliveagent.com cdn.cookielaw.org *.googletagmanager.com *.google.it *.google.ie *.google.je sc-static.net *.bing.com *.pinterest.com *.pinimg.com *.snapchat.com *.tiktok.com *.abtasty.com *.trustpilot.com *.dwin1.com *.salesforceliveagent.com *.clarity.ms *.roeyecdn.com *.securesuite.co.uk *.vaxstaffsale.co.uk tti-fc--dtn.sandbox.my.site.com *.site.com *.vax.co.uk *.stapecdn.com stapecdn.com *.awin1.com *.awinblackfriday.com/ *.sciencebehindecommerce.com *.cloudflareinsights.com spay.samsung.com *.googleapis.com *.zenaps.com cdn.honey.io *.googleusercontent.com *.doubleclick.net *.salesforce.com *.facebook.net *.cookielaw.org cdn.evgnet.com edge.curalate.com connect.facebook.net *.bazaarvoice.com *.gstatic.com https://service.force.com https://tti-fc-emea.force.com https://d.la1-c1cs-cdg.salesforceliveagent.com https://cdn.cookielaw.org 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com https://fonts.googleapis.com/ display.ugc.bazaarvoice.com cloudinary.com *.cloudinary.com *.googleapis.com unpkg.com *.klarnacdn.net *.stackla.com *.zencdn.net *.force.com *.postcodeanywhere.co.uk crm.vax.co.uk cdn.honey.io *.doubleclick.net *.site.com https://service.force.com https://tti-fc-emea.force.com https://d.la1-c1cs-cdg.salesforceliveagent.com https://cdn.cookielaw.org 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src cloudinary.com *.cloudinary.com *.techsee.me 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.adyen.com payments-eu.amazon.com https://maps.googleapis.com https://player.vimeo.com api.bazaarvoice.com stg.api.bazaarvoice.com apps.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com cloudinary.com *.cloudinary.com *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com *.onetrust.com *.google-analytics.com *.cardinalcommerce.com *.pinterest.com *.snapchat.com *.tiktok.com *.doubleclick.net *.postcodeanywhere.co.uk *.abtasty.com *.googlesyndication.com *.vaxstaffsale.co.uk *.securesuite.co.uk *.clarity.ms *.dynatrace.com *.vax.co.uk https://google.com/pay unpkg.com *.sciencebehindecommerce.com spay.samsung.com *.googleapis.com *.google.ie *.google.je *.google.gg cdn.honey.io account.affilitizer.com *.googleusercontent.com *.bing.com https://www.wepowerconnections.com:443 *.facebook.com edge.curalate.com bat.bing.net tti-fc.my.salesforce-scrt.com tti-fc--devdigital.sandbox.my.salesforce-scrt.com n55685555553z63h3bc3n3n3a2759464.germany-2.evergage.com www.gstatic.com https://service.force.com https://tti-fc-emea.force.com https://d.la1-c1cs-cdg.salesforceliveagent.com https://cdn.cookielaw.org 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://csp.vax.co.uk/csp-report; report-to report-endpoint;
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-oneagent-js-injection: true
x-ruxit-js-agent: true
strict-transport-security: max-age=2592000; includeSubDomains; preload
x-magento-cache-debug: HIT
grace: none
pragma: no-cache
expires: -1
Cache-Control: no-store, no-cache, must-revalidate, max-age=0
server-timing: dtSInfo;desc="0", dtRpid;desc="-1547200613"
Set-Cookie: dtCookie=v_4_srv_18_sn_423A8B2551BCA460B5680A273F543140_perc_100000_ol_0_mul_1_app-3Aa0625ee45af0065f_1_rcs-3Acss_0; Path=/; Domain=.vax.co.uk; SameSite=Lax; secure
Set-Cookie: __cf_bm=sA5.HqlFmZanYHSlcNnFHzA0zkQfk38Y494lr0B757A-1756087892-1.0.1.1-._j2UbEvRJm2x8NxZq36q9ZLhGvqK.mYQrFJpX5FDnIG4u9zvCMj41LEXRVNK8r4DBhkfNTU62cfBKkyYxMD4djoJTfFW51klLGmVq8iww8; path=/; expires=Mon, 25-Aug-25 02:41:32 GMT; domain=.vax.co.uk; HttpOnly; Secure
Set-Cookie: __cflb=02DiuJU2M14EKdCwUSxLngZq63jZsH1xUW58jZbuVUiZA; SameSite=None; Secure; path=/; expires=Tue, 26-Aug-25 02:11:32 GMT; HttpOnly
cf-cache-status: DYNAMIC
Server: cloudflare
CF-RAY: 97478f30ef81e35e-NRT
alt-svc: h3=":443"; ma=86400