HTTP/1.1 200 OK
Date: Tue, 23 Apr 2019 08:31:56 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 14252
Connection: keep-alive
Server: nginx
Vary: Accept-Encoding
Accept-Ranges: bytes
Cache-Control: max-age=3600
Last-Modified: Mon, 22 Apr 2019 21:44:42 GMT
ETag: W/"37ac-16a47021d10"
Vary: Accept-Encoding
Expires: Tue, 23 Apr 2019 09:31:56 GMT
Cache-Control: must-revalidate
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=31536000; includeSubdomains; preload
Referrer-Policy: same-origin
Allow: GET, PUT, POST, PATCH, DELETE
Content-Security-Policy: default-src 'self' www.xceltrip.com/ xceltrip.com/;script-src 'self' 'unsafe-inline' www.google-analytics.com/ www.xceltrip.com/ xceltrip.com/ cdn.subscribers.com/ www.gstatic.com/ salesiq.zoho.com salesiq.zoho.com/support.xceltripllc salesiq.zoho.com/ js.zohostatic.com js.zohostatic.com/salesiq support.xceltripllc/ cloud.tinymce.com/ s3-us-west-2.amazonaws.com/mfesecure-public/host/ www.mcafeesecure.com/rpc/ajax www.gstatic.com/recaptcha/  apis.google.com/ www.google-analytics.com ajax.googleapis.com maps.googleapis.com/ www.paypal.com www.paypalobjects.com googletagmanager.com connect.facebook.net/ cdn.ywxi.net/js/1.js cdn.segment.com/analytics.js/ embed.tawk.to/ tawk.to/ *.tawk.to/ cdn.ywxi.net/static/jquery/ cdn.jsdelivr.net/ www.google.com/ www.googletagmanager.com/;img-src 'self' data: blob: stats.g.doubleclick.net/ hi.subscribers.com/ cdn.ywxi.net/ assets.xceltrip.com/ salesiq.zohopublic.com/ img.zohostatic.com img.zohostatic.com/salesiq  www.xceltrip.com/ xceltrip.com/ sp.tinymce.com/ ui.cltpstatic.com/ maps.google.com/ s3-us-west-2.amazonaws.com/stage-xceltrip-d940e-appserver/ lipis.github.io/ www.google-analytics.com/ www.googletagmanager.com/ google.com/ *.google.com/vt/ http://*.google.com/vt/ maps.gstatic.com/ maps.googleapis.com/ http://maps.google.com/ www.paypal.com www.paypalobjects.com www.facebook.com/ static-v.tawk.to/;style-src 'self' 'unsafe-inline' fonts.googleapis.com/ css.zohostatic.com/ css.zohostatic.com css.zohostatic.com/salesiq www.paypal.com www.paypalobjects.com www.xceltrip.com/ xceltrip.com/ cloud.tinymce.com/ cdn.jsdelivr.net/;font-src 'self' data: fonts.gstatic.com/ fonts.zohostatic.com/ css.zohostatic.com/ fonts.googleapis.com/ www.paypal.com www.paypalobjects.com www.xceltrip.com/ xceltrip.com/ cloud.tinymce.com/ static-v.tawk.to/; frame-src 'self' accounts.google.com/ www.google.com/ www.facebook.com/ salesiq.zohopublic.com/  web.facebook.com/ www.xceltrip.com/ xceltrip.com/ www.youtube.com/ s-static.ak.facebook.com content.googleapis.com/ www.paypal.com www.paypalobjects.com staticxx.facebook.com/ va.tawk.to/;connect-src 'self' content.googleapis.com/ salesiq.zoho.com/ salesiq.zohopublic.com/ wss://vts.zohopublic.com/ vts.zohopublic.com/ www.xchangewallet.io/ xchangewallet.io/ api.coinmarketcap.com/ cdn.subscribers.com/ www.paypal.com www.paypalobjects.com rainmaker.tinymce.com/ static-v.tawk.to/ va.tawk.to *.tawk.to/ api.segment.io/ www.xceltrip.com/ xceltrip.com/ stage-app1.xceltrip.com/ s3-us-west-2.amazonaws.com/mfesecure-public/host/xceltrip.com/client.json tawk.to/ wss://*.tawk.to/s/;frame-ancestors 'none';object-src 'none';media-src 'self'