HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Sun, 26 May 2019 07:13:03 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-Permitted-Cross-Domain-Policies: master-only
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: -1
Cache-Control: max-age=864000
Expires: Wed, 05 Jun 2019 07:13:02 GMT
Vary: User-Agent,Accept-Encoding
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
Access-Control-Allow-Origin: https://www.mahaeseva.com/
Access-Control-Allow-Headers: X-accept-charset, X-accept, X-test-header, Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: OPTIONS, GET, POST, PUT, DELETE
Access-Control-Allow-Credentials: true
Access-Control-Expose-Headers: Content-Type
x-xhr-request: true
Referrer-Policy: strict-origin-when-cross-origin
Content-Security-Policy: default-src 'self' https://static-v.tawk.to/ ; frame-ancestors 'none'; connect-src 'self' https://va.tawk.to/ https://*.tawk.to/ wss://*.tawk.to/ ; script-src 'self' data: 'unsafe-inline' 'unsafe-eval' www.google-analytics.com https://maps.googleapis.com https://maps.gstatic.com https://embed.tawk.to/ https://cdn.jsdelivr.net/; object-src 'none' https://static-v.tawk.to/; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com  https://cdn.jsdelivr.net; img-src 'self' 'unsafe-inline' 'unsafe-eval' blob: data: www.google-analytics.com https://cartonrent.com https://static-v.tawk.to/ https://cdn.jsdelivr.net/ https://stats.g.doubleclick.net/; font-src 'self' https://fonts.gstatic.com https://static-v.tawk.to; frame-src 'self' https://www.youtube.com/embed/ www.google.com https://maps.google.com  https://static-v.tawk.to/ https://va.tawk.to/
X-Content-Security-Policy: default-src 'self' https://static-v.tawk.to/ ; frame-ancestors 'none'; connect-src 'self' https://va.tawk.to/ https://*.tawk.to/ wss://*.tawk.to/ ; script-src 'self' data: 'unsafe-inline' 'unsafe-eval' www.google-analytics.com https://maps.googleapis.com https://maps.gstatic.com https://embed.tawk.to/ https://cdn.jsdelivr.net/; object-src 'none' https://static-v.tawk.to/; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com  https://cdn.jsdelivr.net; img-src 'self' 'unsafe-inline' 'unsafe-eval' blob: data: www.google-analytics.com https://cartonrent.com https://static-v.tawk.to/ https://cdn.jsdelivr.net/ https://stats.g.doubleclick.net/; font-src 'self' https://fonts.gstatic.com https://static-v.tawk.to; frame-src 'self' https://www.youtube.com/embed/ www.google.com https://maps.google.com  https://static-v.tawk.to/ https://va.tawk.to/
X-WebKit-CSP: default-src 'self' https://static-v.tawk.to/ ; frame-ancestors 'none'; connect-src 'self' https://va.tawk.to/ https://*.tawk.to/ wss://*.tawk.to/ ; script-src 'self' data: 'unsafe-inline' 'unsafe-eval' www.google-analytics.com https://maps.googleapis.com https://maps.gstatic.com https://embed.tawk.to/ https://cdn.jsdelivr.net/; object-src 'none' https://static-v.tawk.to/; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com  https://cdn.jsdelivr.net; img-src 'self' 'unsafe-inline' 'unsafe-eval' blob: data: www.google-analytics.com https://cartonrent.com https://static-v.tawk.to/ https://cdn.jsdelivr.net/ https://stats.g.doubleclick.net/; font-src 'self' https://fonts.gstatic.com https://static-v.tawk.to; frame-src 'self' https://www.youtube.com/embed/ www.google.com https://maps.google.com  https://static-v.tawk.to/ https://va.tawk.to/
Content-Language: en-US