HTTP/1.1 200 OK
Date: Mon, 22 Apr 2019 10:05:37 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 261067
Connection: keep-alive
Set-Cookie: AWSALB=pbfs3/330hGd985NtNmBwgWvy0e3Cy+psuDGKE9g7NIWgGfrKSL/RE25vMAYLZ4h6KzQV9wQbcWm8vHjmMcsGk0DoH9+hN2zXlv29F9CU+FP+ehw15VEAEHb5nfa; Expires=Mon, 29 Apr 2019 10:05:37 GMT; Path=/
Cache-Control: private
Server: Microsoft-IIS/8.5
Set-Cookie: s=gh3h2rnalpnbtziubecdgpqj; path=/; HttpOnly
Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleapis.com *.google.co.il *.doubleclick.net *.googleadservices.com *.gstatic.com *.google.com *.google-analytics.com *.googlesyndication.com *.googletagmanager.com *.googletagservices.com cdnjs.cloudflare.com *.cloudfront.net *.googlecode.com ajax.aspnetcdn.com 123fly.travel alp.co.il *.amazonaws.com getglimpse.com *.hiclient.com *.hotjar.com:* ws://*.hotjar.com cdn.jsdelivr.net *.facebook.net *.facebook.com *.youtube.com *.ytimg.com *.virtualspirits.com;style-src 'self' 'unsafe-inline' *.bootstrapcdn.com *.googleapis.com *.google.co.il *.doubleclick.net *.googleadservices.com *.gstatic.com *.google.com *.google-analytics.com *.googlesyndication.com *.googletagmanager.com *.googletagservices.com 123fly.travel alp.co.il *.amazonaws.com *.virtualspirits.com;frame-src 'self' *.googleapis.com *.google.co.il *.doubleclick.net *.googleadservices.com *.gstatic.com *.google.com *.google-analytics.com *.googlesyndication.com *.googletagmanager.com *.googletagservices.com *.credit2000.co.il *.youtube.com *.ytimg.com *.viplus.com ssl-vp.com *.facebook.net *.facebook.com *.hotjar.com:* ws://*.hotjar.com cdn.jsdelivr.net *.virtualspirits.com;font-src 'self' *.bootstrapcdn.com *.googleapis.com *.google.co.il *.doubleclick.net *.googleadservices.com *.gstatic.com *.google.com *.google-analytics.com *.googlesyndication.com *.googletagmanager.com *.googletagservices.com;connect-src 'self' *.googleapis.com *.google.co.il *.doubleclick.net *.googleadservices.com *.gstatic.com *.google.com *.google-analytics.com *.googlesyndication.com *.googletagmanager.com *.googletagservices.com *.hotjar.com:* ws://*.hotjar.com cdn.jsdelivr.net *.mymarketing.co.il *.openweathermap.org localhost:* ws://localhost:*;child-src *.googleapis.com *.google.co.il *.doubleclick.net *.googleadservices.com *.gstatic.com *.google.com *.google-analytics.com *.googlesyndication.com *.googletagmanager.com *.googletagservices.com *.youtubeinmp4.com *.youtube.com youtu.be alp.co.il *.hotjar.com:* ws://*.hotjar.com cdn.jsdelivr.net *.hiclient.com *.transtour.ru *.credit2000.co.il *.paypal.com *.facebook.net *.facebook.com *.tctm.co *.artipbox.net *.outbrain.com *.popt.in freegeoip.net *.cloudfront.net;form-action 'self' *.googleapis.com *.google.co.il *.doubleclick.net *.googleadservices.com *.gstatic.com *.google.com *.google-analytics.com *.googlesyndication.com *.googletagmanager.com *.googletagservices.com *.credit2000.co.il *.facebook.net *.facebook.com *.viplus.com ssl-vp.com *.i-fly.co.il;report-uri /WebResource.axd?cspReport=true
X-Content-Type-Options: nosniff
X-Download-Options: noopen
Set-Cookie: _culture=HE; expires=Wed, 22-Apr-2020 10:05:33 GMT; path=/; HttpOnly