Xact.com

date: Fri, 15 Sep 2023 22:08:02 GMT
content-length: 0
location: https://www.xact.com/
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
set-cookie: __cfruid=8843868df1f7edd0f58ad7655ce468b55905f6fb-1694815682; path=/; domain=.xact.com; HttpOnly; Secure; SameSite=None
set-cookie: _cfuvid=4dsjFv5Pa.DVaaJKnekdh6C_AheYvFFs2tpMhVOZa3Q-1694815682248-0-604800000; path=/; domain=.xact.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 80742f9d3a2c2a6c-ORD
alt-svc: h3=":443"; ma=86400

HTTP/2 200 
date: Fri, 15 Sep 2023 22:08:02 GMT
content-type: text/html; charset=utf-8
cf-ray: 80742f9e5e902d88-ORD
cf-cache-status: DYNAMIC
cache-control: no-cache
expires: -1
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-expose-headers: Request-Context
content-security-policy: default-src 'self' *.checkngo.com *.xact.com *.alliedcash.com *.pocket360.com; script-src 'self' *.googleapis.com *.gstatic.com www.google.com apis.google.com connect.facebook.net ajax.aspnetcdn.com https://www.youtube.com platform.twitter.com https://syndication.twitter.com/ https://s.ytimg.com https://publish.twitter.com *.twimg.com platform.linkedin.com http://platform.stumbleupon.com/1/widgets.js https://*.googletagmanager.com *.tfaforms.net *.krxd.net *.quantcount.com *.googletagmanager.com *.quantserve.com *.fontawesome.com *.bootstrapcdn.com *.googleanalytics.com maps.google.com optimize.google.com tagmanager.google.com *.googleadservices.com *.googleoptimize.com *.doubleclick.net https://www.youtube.com/iframe_api https://cdn.insight.sitefinity.com https://dec.azureedge.net/ munchkin.marketo.net *.msecnd.net *.hotjar.com tag.brandcdn.com adservices.brandcdn.com widget.trustpilot.com *.siteimproveanalytics.com *.eloqua.com *.en25.com cdn.ampproject.org js.hs-scripts.com js.hs-analytics.net js.hs-banner.com js.hsleadflows.net forms.hubspot.com js.hscollectedforms.net 'unsafe-inline' 'unsafe-eval'; style-src 'self' *.googleapis.com *.gstatic.com netdna.bootstrapcdn.com kendo.cdn.telerik.com www.google.com platform.twitter.com/css/ *.twimg.com *.tfaforms.net *.fontawesome.com *.bootstrapcdn.com optimize.google.com tagmanager.google.com https://cdn.insight.sitefinity.com https://dec.azureedge.net *.myfonts.net 'unsafe-inline'; img-src 'self' *.gstatic.com *.googleapis.com platform.tumblr.com web.facebook.com www.facebook.com www.redditstatic.com www.linkedin.com i.ytimg.com https://syndication.twitter.com https://static.licdn.com/scds/common/u/images/apps/connect/sprites/sprite_connect_v14.png pbs.twimg.com platform.twitter.com/css/ *.twimg.com data: blob: https://*.googletagmanager.com *.tfaforms.net pre-usermatch.targeting.unrulymedia.com e1.emxdgt.com beacon.krxd.net x.bidswitch.net pixel.advertising.com *.quantserve.com www.google.com dynl.mktgcdn.com maps.google.com optimize.google.com *.azureedge.net *.googletagmanager.com https://dec.azureedge.net https://*.insight.sitefinity.com https://*.dec.sitefinity.com adservices.brandcdn.com insight.adsrvr.org match.adsrvr.org *.doubleclick.net sync.search.spotxchange.com https://*.ggpht.com *.eloqua.com track.hubspot.com js.hsleadflows.net forms.hsforms.com; font-src 'self' fonts.gstatic.com kendo.cdn.telerik.com netdna.bootstrapcdn.com data: *.fontawesome.com *.bootstrapcdn.com; frame-src 'self' *.youtube.com *.trustpilot.com *.google.com forms.hsforms.com; connect-src 'self' data: accounts.google.com *.gstatic.com https://*.googletagmanager.com *.googletagmanager.com *.doubleclick.net *.google.com https://maps.googleapis.com https://*.insight.sitefinity.com https://*.dec.sitefinity.com *.mktoresp.com *.visualstudio.com https://ipinfo.io/ip https://icanhazip.com https://api.ipify.org https://*.contextine.com forms.hubspot.com *.hsforms.com; media-src 'self' data: blob: *.azureedge.net; child-src 'self' https://platform.twitter.com/ https://syndication.twitter.com/ https://www.youtube.com/ https://www.youtube-nocookie.com https://player.vimeo.com/ https://w.soundcloud.com/ apis.google.com accounts.google.com staticxx.facebook.com www.facebook.com web.facebook.com badge.stumbleupon.com *.checkngo.com *.alliedcash.com cdn.krxd.net *.hotjar.com www.google.com www.googletagmanager.com *.doubleclick.net adservices.brandcdn.com insight.adsrvr.org widget.trustpilot.com; object-src 'self'
permissions-policy: 
pragma: no-cache
referrer-policy: no-referrer-when-downgrade
request-context: appId=cid-v1:cae8b861-aa29-4f45-8d7f-a69a4dc29b42
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
vary: Accept-Encoding
set-cookie: __cfruid=8843868df1f7edd0f58ad7655ce468b55905f6fb-1694815682; path=/; domain=.www.xact.com; HttpOnly; Secure; SameSite=None
set-cookie: _cfuvid=9tSjAin0PDSpJ0tPL7zMT37Y.x9FgA0hTjduBsFyVOQ-1694815682614-0-604800000; path=/; domain=.www.xact.com; HttpOnly; Secure; SameSite=None
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400