HTTP/1.1 200 OK
Server: nginx
Date: Sat, 11 May 2019 19:14:29 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Origin: https://accounting.71lbs.com
Access-Control-Allow-Origin: https://ecommerce.71lbs.com
Access-Control-Allow-Origin: https://stg-iframe.71lbs.com
Access-Control-Allow-Origin: https://iframe.71lbs.com
Access-Control-Allow-Origin: https://stg.yourshippingadvocate.com
Access-Control-Allow-Origin: https://yourshippingadvocate.com
Access-Control-Allow-Origin: https://youtube.com
Access-Control-Allow-Origin: https://www.youtube.com
ETag: W/"f19231ad36122a717d1922b224746d1f"
Last-Modified: Tue, 07 May 2019 16:45:26 GMT
Cache-Control: max-age=0, private, must-revalidate
X-Rack-Cache: miss
Vary: Accept-Encoding
P3P: CP="ALL DSP COR CURa ADMa DEVa OUR IND COM NAV"
Set-Cookie: _libras_session=WnlKRVViVjYvVDRTZGRQSkh5dXU2WGx4eEUwMzZaaTBWeWVtaFlEZkFQOFROZGZKdW04SEtqU3YyM0NoK0oyRkxaeTJ4cDdpU2dtcGFSOWxHbVhMVzdlQXdDLzkwdjQrTTY2WmJVZTQ1TmpNWklIdDVQMGxqYncyY1FJUVhlUEFXU2Z2YmtHSlNmYzFHQTdRd0hmNytDS0Rwbit5bllVdGU5Q1Y2MCs1WWdsVWNqSVF2cE5HNENwUzZoeHV4emxjYzZaVS9kbE9Wd1hOM1RVemFpYkhZYm9sanhjYlVxZjBpaU5iQW1BRVlKdz0tLVNQKyt2ekVjaTFlUE9tZHYvR1RnT0E9PQ%3D%3D--8286428f367b86cfd8ab4568e738d3470f03679e; domain=.71lbs.com; path=/; secure; HttpOnly; SameSite=Strict
X-Request-Id: f793c3ce-d355-41be-a773-7aac4dc0952b
X-Runtime: 0.038702
Strict-Transport-Security: max-age=15778476; includeSubDomains; preload
Content-Security-Policy: default-src https: 'self' *.71lbs.com 71lbs.com; base-uri 'self' *.71lbs.com 71lbs.com; block-all-mixed-content; child-src *; connect-src 'self' ws: wss: *.tawk.to *.google.com *.mouseflow.com *.71lbs.com 71lbs.com *.zoho.com *.zohopublic.com *.calendly.com; font-src 'self' data: *.gstatic.com *.zohostatic.com *.cloudfront.net *.71lbs.com 71lbs.com *.rackcdn.com; img-src 'self' data: *.dropbox.com *.dropboxusercontent.com *.rackcdn.com *.facebook.com *.google-analytics.com *.doubleclick.net *.google.com *.googletagmanager.com *.sitelock.com *.intuit.com *.tawk.to tawk.link *.jsdelivr.net *.kxcdn.com *.googleapis.com *.gstatic.com *.bufferapp.com *.reddit.com *.pinterest.com *.linkedin.com *.dropboxstatic.com *.mouseflow.com *.facebook.net *.71lbs.com 71lbs.com *.zohopublic.com *.calendly.com; media-src 'self' *.71lbs.com 71lbs.com; object-src 'self' *.71lbs.com 71lbs.com; plugin-types application/x-shockwave-flash; script-src 'self' 'unsafe-inline' *.google-analytics.com *.googleadservices.com *.googletagmanager.com *.tawk.to *.intuit.com *.google.com *.sumome.com *.facebook.net *.doubleclick.net *.jsdelivr.net *.kxcdn.com *.googleapis.com *.gstatic.com *.bufferapp.com *.reddit.com *.pinterest.com *.facebook.com *.linkedin.com *.mouseflow.com *.71lbs.com 71lbs.com *.zoho.com *.cloudfront.net *.zohostatic.com *.zohopublic.com *.calendly.com; style-src 'self' 'unsafe-inline' *.intuit.com *.jsdelivr.net *.kxcdn.com *.googleapis.com *.gstatic.com *.reddit.com *.pinterest.com *.facebook.com *.linkedin.com *.mouseflow.com *.facebook.net *.google.com *.71lbs.com 71lbs.com *.cloudfront.net *.zoho.com *.zohostatic.com *.zohopublic.com *.calendly.com; upgrade-insecure-requests
Referrer-Policy: origin-when-cross-origin
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: DENY
X-Permitted-Cross-Domain-Policies: none
X-XSS-Protection: 1; mode=block
Front-End-Https: on
Pragma: no-cache
Cache-Control: private, max-age=0, no-cache, no-store