HTTP/1.1 200 OK
Cache-Control: no-cache, no-store
Pragma: no-cache
Content-Type: text/html; charset=utf-8
Expires: -1
Set-Cookie: ASP.NET_SessionId=fbfczcmvdegbtg525iig0jry; path=/; secure; HttpOnly; SameSite=Lax
Content-Security-Policy: default-src 'none'; script-src 'self' https://*.googleadservices.com https://*.dynatrace.com https://*.doubleclick.net https://*.googleapis.com https://*.gstatic.com https://www.google-analytics.com https://*.cxtrvl.com https://*.tstllc.net *.sas.com  *.aimatch.com *.gigya.com 'unsafe-inline' 'unsafe-eval'; style-src 'self' https://cloud.webtype.com https://hello.myfonts.net https://*.googleapis.com https://*.cxtrvl.com *.gigya.com 'unsafe-inline'; connect-src 'self' *.sas.com *.aimatch.com *.dynatrace.com  https://*.cxtrvl.com *.foresee.com https://*.tstllc.net *.cnxloyalty.com *.gigya.com *.cnxloyalty.com; font-src 'self' https://cloud.webtype.com https://*.gstatic.com https://*.googleapis.com https://*.cxtrvl.com; img-src 'self' data: https://*.vacationsdirect.com https://*.cloudfront.net https://*.viator.com *.budget.com *.avis.com *.thrifty.com *.dollar.com *.rcstatic.com *.gigya.com *.cartrawler.com *.enterprise.fr *.nationalcar.com *.alamo.com *.enterprise.com *.carhire-solutions.com https://*.cxtrvl.com *.cxloyalty.com https://*.tripadvisor.com https://pls.webtype.com *.orxenterprise.com https://www.google-analytics.com https://*.tripadvisor.com https://*.gstatic.com https://*.googleapis.com https://placehold.it https://placeholdit.imgix.net https://*.tacdn.com https://*.ehi.com reflected-xss block; form-action 'self' *.cxtrvl.com *.gigya.com https://cxlvacations.cdev.infra.tstllc.net/cruise/cruises/rewards; frame-ancestors *.sas.com *.aimatch.com *.cnxloyalty.com *.gigya.com; plugin-types application/pdf; frame-src ;object-src 'self';
X-Content-Security-Policy: default-src 'none'; script-src 'self' https://*.googleadservices.com https://*.dynatrace.com https://*.doubleclick.net https://*.googleapis.com https://*.gstatic.com https://www.google-analytics.com https://*.cxtrvl.com https://*.tstllc.net *.sas.com  *.aimatch.com *.gigya.com 'unsafe-inline' 'unsafe-eval'; style-src 'self' https://cloud.webtype.com https://hello.myfonts.net https://*.googleapis.com https://*.cxtrvl.com *.gigya.com 'unsafe-inline'; connect-src 'self' *.sas.com *.aimatch.com *.dynatrace.com  https://*.cxtrvl.com *.foresee.com https://*.tstllc.net *.cnxloyalty.com *.gigya.com *.cnxloyalty.com; font-src 'self' https://cloud.webtype.com https://*.gstatic.com https://*.googleapis.com https://*.cxtrvl.com; img-src 'self' data: https://*.vacationsdirect.com https://*.cloudfront.net https://*.viator.com *.budget.com *.avis.com *.thrifty.com *.dollar.com *.rcstatic.com *.gigya.com *.cartrawler.com *.enterprise.fr *.nationalcar.com *.alamo.com *.enterprise.com *.carhire-solutions.com https://*.cxtrvl.com *.cxloyalty.com https://*.tripadvisor.com https://pls.webtype.com *.orxenterprise.com https://www.google-analytics.com https://*.tripadvisor.com https://*.gstatic.com https://*.googleapis.com https://placehold.it https://placeholdit.imgix.net https://*.tacdn.com https://*.ehi.com reflected-xss block; form-action 'self' *.cxtrvl.com *.gigya.com https://cxlvacations.cdev.infra.tstllc.net/cruise/cruises/rewards; frame-ancestors *.sas.com *.aimatch.com *.cnxloyalty.com *.gigya.com; plugin-types application/pdf; frame-src ;object-src 'self';
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
X-UA-Compatible: IE=Edge
Date: Tue, 09 Feb 2021 03:54:22 GMT
Content-Length: 6196
Strict-Transport-Security: max-age=15552001
X-XSS-Protection: 1; mode=block