Castlecarpetsandinteriors.com

content-security-policy-report-only: default-src 'self' 'unsafe-inline' 'unsafe-eval' data: session.mm-api.agency mmllc-images.s3.amazonaws.com www.roomvo.com mm-media-res.cloudinary.com https://session.mm-api.agency/init facebook.com connect.facebook.net https://www.gstatic.com/wcm/loader.js googleadservices.com https://i.vimeocdn.com/video/ https://player.vimeo.com https://vimeo.com/api/oembed.json http://www.googletagservices.com https://cdnjs.cloudflare.com https://i.simpli.fi/ https://*.audioeye.com/ *.vimeo.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' session.mm-api.agency www.roomvo.com https://session.mm-api.agency/js/mmsession.js https://www.gstatic.com/wcm/loader.js https://www.gstatic.com/call-tracking/ https://www.gstatic.com/call-tracking/call-tracking_7.js https://www.googleadservices.com/pagead/conversion/ googleadservices.com https://player.vimeo.com https://vimeo.com/api/oembed.json https://tag.simpli.fi/sifitag/6e88f1d0-4c17-0138-7010-067f653fa718 https://connect.facebook.net/en_US/fbevents.js https://connect.facebook.net/signals/config/ https://session.mm-api.agency:* https://live.chatmeter.com/ https://*.audioeye.com/ cdnjs.cloudflare.com platform.instagram.com www.instagram.com *.vimeo.com *.vimeocdn.com *.newrelic.com *.nr-data.net www.googletagservices.com *.googlesyndication.com *.googleadservices.com googleads.g.doubleclick.net adservice.google.com adservice.google.ae adservice.google.al adservice.google.at adservice.google.be adservice.google.bg adservice.google.bs adservice.google.ca adservice.google.ch adservice.google.ci adservice.google.cl adservice.google.co.bw adservice.google.co.cr adservice.google.co.id adservice.google.co.il adservice.google.co.in adservice.google.co.jp adservice.google.co.ke adservice.google.co.kr adservice.google.co.mz adservice.google.co.nz adservice.google.co.th adservice.google.co.tz adservice.google.co.uk adservice.google.co.uz adservice.google.co.ve adservice.google.co.za adservice.google.co.zm adservice.google.co.zw adservice.google.com.ai adservice.google.com.ar adservice.google.com.au adservice.google.com.bd adservice.google.com.bh adservice.google.com.bn adservice.google.com.bo adservice.google.com.br adservice.google.com.co adservice.google.com.cy adservice.google.com.ec adservice.google.com.eg adservice.google.com.et adservice.google.com.fj adservice.google.com.gh adservice.google.com.gi adservice.google.com.gt adservice.google.com.hk adservice.google.com.jm adservice.google.com.kh adservice.google.com.kw adservice.google.com.lb adservice.google.com.mm adservice.google.com.mt adservice.google.com.mx adservice.google.com.my adservice.google.com.ng adservice.google.com.ni adservice.google.com.np adservice.google.com.om adservice.google.com.pa adservice.google.com.pe adservice.google.com.ph adservice.google.com.pk adservice.google.com.pr adservice.google.com.py adservice.google.com.qa adservice.google.com.sa adservice.google.com.sg adservice.google.com.sv adservice.google.com.tr adservice.google.com.tw adservice.google.com.ua adservice.google.com.uy adservice.google.com.vn adservice.google.cz adservice.google.de adservice.google.dk adservice.google.dz adservice.google.ee adservice.google.es adservice.google.fi adservice.google.fr adservice.google.ge adservice.google.gr adservice.google.gy adservice.google.hn adservice.google.hr adservice.google.hu adservice.google.ie adservice.google.im adservice.google.iq adservice.google.is adservice.google.it adservice.google.jo adservice.google.kz adservice.google.li adservice.google.lk adservice.google.lt adservice.google.lu adservice.google.lv adservice.google.md adservice.google.mk adservice.google.mu adservice.google.nl adservice.google.no adservice.google.pl adservice.google.pt adservice.google.ro adservice.google.rs adservice.google.ru adservice.google.se adservice.google.si adservice.google.sk adservice.google.so adservice.google.sr adservice.google.tl adservice.google.tn adservice.google.tt google-analytics.com www.google-analytics.com ssl.google-analytics.com stats.g.doubleclick.net ajax.googleapis.com maps.googleapis.com maps.google.com translate.googleapis.com translate.google.com www.googletagmanager.com googletagmanager.com tagmanager.google.com; style-src 'self' 'unsafe-inline' data: https://*.audioeye.com/ cdnjs.cloudflare.com *.vimeocdn.com fonts.googleapis.com 'unsafe-inline' maps.googleapis.com maps.google.com translate.googleapis.com www.googletagmanager.com tagmanager.google.com; img-src 'self' data: mmllc-images.s3.amazonaws.com mm-media-res.cloudinary.com facebook.com https://connect.facebook.net connect.facebook.net https://www.facebook.com/tr/ https://www.google.co.in/ads/ https://i.vimeocdn.com/video/ https://st.hzcdn.com/static/ https://mmllc-images.s3.us-east-2.amazonaws.com/ https://*.audioeye.com/ cdnjs.cloudflare.com s.w.org ps.w.org ts.w.org secure.gravatar.com www.gravatar.com *.googlesyndication.com stats.g.doubleclick.net data: blob: google-analytics.com www.google-analytics.com ssl.google-analytics.com www.google.com *.googleapis.com maps.google.com maps.gstatic.com www.gstatic.com *.ggpht.com translate.googleapis.com translate.google.com i.ytimg.com www.googletagmanager.com; connect-src 'self' https://www.googleadservices.com/pagead/conversion/ https://www.google.co.in/pagead/attribution/ https://session.mm-api.agency/ https://www.roomvo.com/ https://*.audioeye.com/ *.vimeo.com *.googlesyndication.com googleads.g.doubleclick.net stats.g.doubleclick.net www.google-analytics.com ampcid.google.com analytics.google.com about: maps.googleapis.com maps.google.com translate.googleapis.com www.googletagmanager.com; font-src 'self' data: https://cdnjs.cloudflare.com/ajax/libs/foundicons/3.0.0/ https://*.audioeye.com/ cdnjs.cloudflare.com data: fonts.gstatic.com fonts.googleapis.com; object-src * https://*.audioeye.com/; media-src 'self' https://*.audioeye.com/ cdnjs.cloudflare.com; frame-src 'self' https://www.facebook.com/ https://player.vimeo.com/video/ https://www.google.com/ https://live.chatmeter.com/ https://*.audioeye.com/ www.instagram.com *.vimeo.com *.vimeocdn.com *.googlesyndication.com googleads.g.doubleclick.net maps.googleapis.com maps.google.com www.youtube.com www.googletagmanager.com; child-src 'self' *.vimeo.com *.vimeocdn.com www.youtube.com www.googletagmanager.com;
x-xss-protection: 1; mode=block; report=https://castlecarpetsandinteriors.com?gdsih-xxp-report;
feature-policy: geolocation *;
permissions-policy: geolocation=(*)
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
x-dns-prefetch-control: on
content-type: text/html; charset=UTF-8
link: <https://castlecarpetsandinteriors.com/wp-json/>; rel="https://api.w.org/"
link: <https://castlecarpetsandinteriors.com/wp-json/wp/v2/pages/885544>; rel="alternate"; title="JSON"; type="application/json"
link: <https://castlecarpetsandinteriors.com/>; rel=shortlink
vary: Accept-Encoding
server: LiteSpeed
content-security-policy: upgrade-insecure-requests;connect-src *
referrer-policy: strict-origin-when-cross-origin
x-xss-protection: 1;mode=block
permissions-policy: geolocation=(self "")
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-litespeed-cache: hit
content-encoding: gzip
content-length: 24252
date: Tue, 16 Sep 2025 08:41:42 GMT
x-xss-protection: 1;mode=block
permissions-policy: geolocation=(self "")