aatkings.com website report

HTTP/2 200
content-type: text/html; charset=utf-8
date: Mon, 26 Oct 2026 05:47:58 GMT
content-encoding: br
cache-control: private, s-maxage=0
content-security-policy-report-only: default-src 'self';script-src 'self' 'unsafe-inline' 'nonce-QhNJBGP1hiWkkh76vmzUd2Tv' 'unsafe-eval' https://pixel.byspotify.com *.travcorpservices.com https://www.google.com https://www.google-analytics.com https://www.googleoptimize.com https://www.googletagmanager.com https://ajax.googleapis.com https://www.gstatic.com https://googleads.g.doubleclick.net https://api.feefo.com https://register.feefo.com https://bat.bing.com https://cdn.evgnet.com https://connect.facebook.net https://i.clarity.ms https://static-ssl.responsetap.com *.hotjar.com https://tag.simpli.fi https://unpkg.com https://www.bugherd.com https://decagon.ai https://www.datadoghq-browser-agent.com https://assetscdn.stackla.com/media/js https://vjs.zencdn.net https://cdn.amplitude.com/libs https://sdk.joinsherpa.io https://apps.mypurecloud.com https://consentcdn.cookiebot.com https://cdnjs.cloudflare.com https://ttc-contiki.entry.promo https://cdn.optimizely.com https://www.riddle.com;style-src 'self' 'unsafe-inline' https://assetscdn.stackla.com/media/components/stackla-uikit/dist https://fonts.googleapis.com https://p.typekit.net https://use.typekit.net https://vjs.zencdn.net https://apps.mypurecloud.com;img-src 'self' https://bat.bing.com https://c.clarity.ms https://i.ytimg.com https://www.facebook.com https://www.google-analytics.com https://www.google.com https://www.uplift-platform.com data:;frame-src 'self' https://10006172.fls.doubleclick.net https://uplift-cdn-stg.uplift.com https://vars.hotjar.com https://widget.stackla.com https://www.google.com https://apps.joinsherpa.io https://www.googletagmanager.com https://a25408250069.cdn.optimizely.com;font-src 'self' https://assetscdn.stackla.com https://fonts.gstatic.com https://use.typekit.net https://vjs.zencdn.net https://apps.mypurecloud.com;connect-src 'self' *.travcorpservices.com *.travcorp.com *.corp.ttc:7443 https://api.feefo.com https://bat.bing.com https://in.hotjar.com https://ws11.hotjar.com/api https://l.clarity.ms https://metrics.responsetap.com/infinity https://noembed.com https://pm-mrkt.prodgw.uplift-platform.com https://rum.browser-intake-datadoghq.com https://session-replay.browser-intake-datadoghq.com https://ttctravel.germany-2.evergage.com https://www.facebook.com https://www.google-analytics.com https://logx.optimizely.com https://region1.analytics.google.com https://ttc.contiki.com
set-cookie: Region_Pref=en-eu; expires=Thu, 26-Oct-2028 05:47:58 GMT; path=/; secure; HttpOnly; SameSite=lax, Region_Cur=en-eu; path=/; secure; HttpOnly; SameSite=lax, SiteVisitor=true; expires=Thu, 26-Oct-2028 05:47:58 GMT; path=/; secure; HttpOnly; SameSite=lax
request-context: appId=cid-v1:1f99c4fb-372b-4077-8e1b-cc810dc39afd
access-control-expose-headers: Request-Context
x-frame-options: sameorigin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-permitted-cross-domain-policies: none
referrer-policy: strict-origin-when-cross-origin
permissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 f44a750f1ab6eb0f24a3374b498e11d0.cloudfront.net (CloudFront)
x-amz-cf-pop: CDG54-P2
x-amz-cf-id: 1eDyULbw39EPU0CHgW2y0uSqynfRLsjqzBJBaDwn3h8oN7m7kQfBHA==