HTTP/1.1 200 OK
Date: Mon, 13 May 2019 18:09:36 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __cfduid=d6ace2249e96c7930e098eaea581e00851557770975; expires=Tue, 12-May-20 18:09:35 GMT; path=/; domain=.alfatravel.co.uk; HttpOnly; Secure
Last-Modified: Mon, 13 May 2019 18:09:36 GMT
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: default-src 'self' 'unsafe-inline' 'unsafe-eval' ajax.cloudflare.com in.hotjar.com script.hotjar.com static.hotjar.com vars.hotjar.com www.google-analytics.com www.googletagmanager.com cdnjs.cloudflare.com maxcdn.bootstrapcdn.com bat.bing.com code.jquery.com app.responseiq.com maps.googleapis.com wstatic.responseiq.com www.gstatic.com www.google.co.uk www.googleadservices.com googleads.g.doubleclick.net www.google.com a19.responseiq.com fonts.googleapis.com fonts.gstatic.com jqueryjs.googlecode.com maps.gstatic.com ssl.google-analytics.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' bat.bing.com cdn.inspectlet.com connect.facebook.net www.google-analytics.com www.googletagmanager.com www.gstatic.com ajax.googleapis.com googleads.g.doubleclick.net script.hotjar.com static.hotjar.com t.trackedlink.net www.google.co.uk www.googleadservices.com jqueryjs.googlecode.com ssl.google-analytics.com www.google.com www.google.es www.google.co.in seal.verisign.com www.google.co.ma www.google.ro www.google.it www.google.be www.google.ie www.awin1.com maps.googleapis.com cdnjs.cloudflare.com ajax.cloudflare.com app.responseiq.com code.jquery.com maxcdn.bootstrapcdn.com wstatic.responseiq.com cdn.rlets.com www.dwin1.com maps.google.com cdn.oribi.io; style-src 'self' 'unsafe-inline' fonts.googleapis.com wstatic.responseiq.com maxcdn.bootstrapcdn.com cdnjs.cloudflare.com 'unsafe-eval'; img-src 'self' data: bat.bing.com r1-t.trackedlink.net stats.g.doubleclick.net www.google-analytics.com www.google.co.uk www.google.com ssl.google-analytics.com www.google.com.np googleads.g.doubleclick.net www.google.it www.googletagmanager.com www.google.es www.google.co.in www.google.co.ma www.google.ro www.gstatic.com www.google.im www.google.be www.google.ie www.awin1.com www.topcashback.co.uk tile.openstreetmap.org a19.responseiq.com app.responseiq.com maps.googleapis.com maps.gstatic.com wstatic.responseiq.com fault.rlets.com cbks0.googleapis.com khms0.googleapis.com khms1.googleapis.com smartslider3.com www.alfatravel.co.uk www.googleadservices.com; font-src 'self' app.responseiq.com cdnjs.cloudflare.com maxcdn.bootstrapcdn.com fonts.gstatic.com www.alfatravel.co.uk; connect-src 'self' in.hotjar.com app.responseiq.com www.google-analytics.com stats.g.doubleclick.net 49817b22-010e-431a-a361-fe015e221575.rlets.com apgb2b-reachcodeandproxy.gannettdigital.com capture-api.reachlocalservices.com sentry.hotjar.com ws1.hotjar.com localhost ws10.hotjar.com ws2.hotjar.com ws3.hotjar.com ws4.hotjar.com ws5.hotjar.com ws6.hotjar.com ws7.hotjar.com ws8.hotjar.com ws9.hotjar.com gw.oribi.io ssl.google-analytics.com; media-src ssl.gstatic.com; child-src 'self' vars.hotjar.com www.google.com; frame-src 'self' vars.hotjar.com staticxx.facebook.com www.googletagmanager.com www.facebook.com web.facebook.com bid.g.doubleclick.net mozbar.moz.com www.google.com 49817b22-010e-431a-a361-fe015e221575.rlets.com onpageload 'unsafe-eval' div.show; worker-src 'self'; frame-ancestors 'self' 'unsafe-eval'; form-action 'self' news-alfatravel.co.uk www.coachholidays.com; report-uri https://alfatravel.report-uri.com/r/d/csp/wizard
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 4d66959589088116-MCI