VIVAAEROBUS.COM Website Review

HTTP/1.1 301 Moved Permanently
Date: Sun, 21 Jun 2020 07:03:27 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Sun, 21 Jun 2020 08:03:27 GMT
Location: https://www.vivaaerobus.com/
cf-request-id: 0377497e4000000ce9a6a83200000001
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 5a6bdeaa08bf0ce9-EWR

HTTP/1.1 302 Moved Temporarily
Content-Type: text/html; charset=utf-8
Content-Length: 542
Server: nginx
x-test: 2
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: -1
Location: /mx
x-frame-options: SAMEORIGIN
X-AspNetMvc-Version: 4.0
X-AspNet-Version: 4.0.30319
Content-Security-Policy: default-src 'self' 'unsafe-eval' 'unsafe-inline' *.accenture.com *.vivaaerobus.com *.ezyflight.se data: *.cdn-net.com *.bidflyer.com; frame-ancestors 'self' https://viajala.com.mx; img-src 'self' 'unsafe-eval' 'unsafe-inline' *.accenture.com *.vivaaerobus.com *.ezyflight.se data: *.cdn-net.com *.bidflyer.com *.google-analytics.com *.googleapis.com *.fusion.com *.google.com *.google.se *.google.com.mx *.vivaaerobus.com *.ezyflight.se *.facebook.com *.cloudflare.com *.ckeditor.com *.doubleclick.net *.placeholder.com *.googletraveladservices.com *.kayak.com *.criteo.com *.criteo.net *.yldr.io *.cartrawler.com services.paynet.com.mx api.openpay.mx ota-cars.imgix.net *.bing.com platform-api.sharethis.com cdn.apixu.com ts.tradetracker.net ad.soicos.com *.intentmedia.net data: *.cdn-net.com *.paypalobjects.com *.paypal.com *.cdn.viajala.com *.viajala.com viajala.com *.playbuzz.com *.office.com *.uplift-platform.com *.openpay.mx ct-supplierimage.imgix.net ct-microsites-core.imgix.net cdn.smooch.io media.smooch.io www.gravatar.com; style-src 'self' 'unsafe-eval' 'unsafe-inline' *.accenture.com *.vivaaerobus.com *.ezyflight.se data: *.cdn-net.com *.bidflyer.com *.fusion.com *.google.com *.google.com.mx maxcdn.bootstrapcdn.com *.vivaaerobus.com *.ezyflight.se *.cloudflare.com *.hotjar.com *.googleapis.com *.ckeditor.com *.cartrawler.com platform-api.sharethis.com cdn.apixu.com *.paypal.com *.playbuzz.com *.office.com cdn.uplift-platform.com *.uplift.com cdn.smooch.io; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.accenture.com *.vivaaerobus.com *.ezyflight.se data: *.cdn-net.com *.bidflyer.com *.googletagservices.com cdnjs.cloudflare.com code.jquery.com maxcdn.bootstrapcdn.com *.google.com cdn.jsdelivr.net *.fusion.com *.google-analytics.com *.google.se *.googletagmanager.com *.g.doubleclick.net *.facebook.net *.hotjar.com *.googleadservices.com *.ckeditor.com *.cloudfront.net *.boxever.com *.cdn.intentmedia.net *.google-analytics.com *.yldr.io *.gstatic.com *.criteo.com *.criteo.net a.intentmedia.net *.google.com.mx *.cartrawler.com bat.bing.com platform-api.sharethis.com cdn.apixu.com tm.tradetracker.net *.intentmedia.net *.viajamas.com 201.131.2.241 *.tradetracker.net *.crazyegg.com *.skyscanner.net *.cdn-net.com *.paypal.com *.paypalobjects.com *.cdn.viajala.com *.viajala.com *.bidflyer.com *.kueskipay.com *.kueskipay.io *.playbuzz.com *.office.com *.ipify.org cdn.uplift-platform.com *.uplift.com cdn.smooch.io api.smooch.io *.appboycdn.com; frame-src 'self' 'unsafe-eval' 'unsafe-inline' *.accenture.com *.vivaaerobus.com *.ezyflight.se data: *.cdn-net.com *.bidflyer.com *.booking.com *.rentalcars.com *.hotjar.com *.google.com *.youtube.com *.criteo.com *.facebook.com *.facebook.net *.doubleclick.net *.safetypay.com *.e-tsw.com *.cartrawler.com platform-api.sharethis.com cdn.apixu.com *.intentmedia.net *.cdn-net.com *.sandbox.paypal.com *.paypal.com us.creativecdn.com *.playbuzz.com *.office.com *.uplift.com; font-src 'self' 'unsafe-eval' 'unsafe-inline' *.accenture.com *.vivaaerobus.com *.ezyflight.se data: *.cdn-net.com *.bidflyer.com *.bootstrapcdn.com *.gstatic.com *.cartrawler.com *.playbuzz.com *.office.com cdn.smooch.io; connect-src 'self' 'unsafe-eval' 'unsafe-inline' *.accenture.com *.vivaaerobus.com *.ezyflight.se data: *.cdn-net.com *.bidflyer.com wss://*.bidflyer.com *.fusion.com *.facebook.com *.google-analytics.com *.viajamas.com *.intentmedia.net *.skyscanner.net *.cdn-net.com *.paypal.com *.bidflyer.com 3kxrt0l29e.execute-api.us-east-1.amazonaws.com vmvpz7tc32.execute-api.us-east-1.amazonaws.com enc1wnyb87.execute-api.us-east-1.amazonaws.com 6ytvy2ekla.execute-api.us-east-1.amazonaws.com pu8ewcfeqc.execute-api.us-east-1.amazonaws.com bywvti3o0d.execute-api.us-east-1.amazonaws.com benwyu65h1.execute-api.us-east-1.amazonaws.com 2gvsqxuo5c.execute-api.us-east-1.amazonaws.com 9nwmwnkc3i.execute-api.us-east-1.amazonaws.com 3yd2nmljr8.execute-api.us-east-1.amazonaws.com kbgz8o28m3.execute-api.us-east-1.amazonaws.com rpa944kq0e.execute-api.us-east-1.amazonaws.com fqr97a9mdg.execute-api.us-east-1.amazonaws.com api.kueskipay.io/v1/validate-keys api.kueskipay.com/v1/validate-keys api.kueskipay.io/v1/payments api.kueskipay.com/v1/payments api.kueskipay.com/v1/tracking *.playbuzz.com *.office.com *.uplift-platform.com *.cartrawler.com api.smooch.io 5e46bc82c3d8d5000fb5c147.webloader.smooch.io 5e46bc82c3d8d5000fb5c147.config.smooch.io sdk.iad-03.braze.com wss://api.smooch.io api.ipify.org api.boxever.com; form-action 'self' 'unsafe-eval' 'unsafe-inline' *.accenture.com *.vivaaerobus.com *.ezyflight.se data: *.cdn-net.com *.bidflyer.com *.vivaaerobus.com *.ezyflight.se *.facebook.net *.facebook.com *.e-tsw.com *.cdn-net.com *.playbuzz.com *.office.com; media-src 'self' 'unsafe-eval' 'unsafe-inline' *.accenture.com *.vivaaerobus.com *.ezyflight.se data: *.cdn-net.com *.bidflyer.com cdn.smooch.io;
X-Xss-Protection: 1;mode=block
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=604800
X-Powered-By: ASP.NET
X-Frame-Options: DENY
X-OneAgent-JS-Injection: true
X-ruxit-JS-Agent: true
Date: Sun, 21 Jun 2020 07:03:27 GMT
Connection: keep-alive
Set-Cookie: ASP.NET_SessionId=zsvldf21x4wr3m45h5h1pdlx; path=/; secure; HttpOnly; SameSite=Lax
Set-Cookie: dtCookie=3$F6FEF375425A8EC6059CE4C9D63BBEB1; Path=/; Domain=.vivaaerobus.com
Set-Cookie: dotrez=437312522.20480.0000; path=/; Httponly; Secure

HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
Server: nginx
x-test: 2
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: -1
x-frame-options: SAMEORIGIN
X-AspNetMvc-Version: 4.0
X-AspNet-Version: 4.0.30319
Content-Security-Policy: default-src 'self' 'unsafe-eval' 'unsafe-inline' *.accenture.com *.vivaaerobus.com *.ezyflight.se data: *.cdn-net.com *.bidflyer.com; frame-ancestors 'self' https://viajala.com.mx; img-src 'self' 'unsafe-eval' 'unsafe-inline' *.accenture.com *.vivaaerobus.com *.ezyflight.se data: *.cdn-net.com *.bidflyer.com *.google-analytics.com *.googleapis.com *.fusion.com *.google.com *.google.se *.google.com.mx *.vivaaerobus.com *.ezyflight.se *.facebook.com *.cloudflare.com *.ckeditor.com *.doubleclick.net *.placeholder.com *.googletraveladservices.com *.kayak.com *.criteo.com *.criteo.net *.yldr.io *.cartrawler.com services.paynet.com.mx api.openpay.mx ota-cars.imgix.net *.bing.com platform-api.sharethis.com cdn.apixu.com ts.tradetracker.net ad.soicos.com *.intentmedia.net data: *.cdn-net.com *.paypalobjects.com *.paypal.com *.cdn.viajala.com *.viajala.com viajala.com *.playbuzz.com *.office.com *.uplift-platform.com *.openpay.mx ct-supplierimage.imgix.net ct-microsites-core.imgix.net cdn.smooch.io media.smooch.io www.gravatar.com; style-src 'self' 'unsafe-eval' 'unsafe-inline' *.accenture.com *.vivaaerobus.com *.ezyflight.se data: *.cdn-net.com *.bidflyer.com *.fusion.com *.google.com *.google.com.mx maxcdn.bootstrapcdn.com *.vivaaerobus.com *.ezyflight.se *.cloudflare.com *.hotjar.com *.googleapis.com *.ckeditor.com *.cartrawler.com platform-api.sharethis.com cdn.apixu.com *.paypal.com *.playbuzz.com *.office.com cdn.uplift-platform.com *.uplift.com cdn.smooch.io; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.accenture.com *.vivaaerobus.com *.ezyflight.se data: *.cdn-net.com *.bidflyer.com *.googletagservices.com cdnjs.cloudflare.com code.jquery.com maxcdn.bootstrapcdn.com *.google.com cdn.jsdelivr.net *.fusion.com *.google-analytics.com *.google.se *.googletagmanager.com *.g.doubleclick.net *.facebook.net *.hotjar.com *.googleadservices.com *.ckeditor.com *.cloudfront.net *.boxever.com *.cdn.intentmedia.net *.google-analytics.com *.yldr.io *.gstatic.com *.criteo.com *.criteo.net a.intentmedia.net *.google.com.mx *.cartrawler.com bat.bing.com platform-api.sharethis.com cdn.apixu.com tm.tradetracker.net *.intentmedia.net *.viajamas.com 201.131.2.241 *.tradetracker.net *.crazyegg.com *.skyscanner.net *.cdn-net.com *.paypal.com *.paypalobjects.com *.cdn.viajala.com *.viajala.com *.bidflyer.com *.kueskipay.com *.kueskipay.io *.playbuzz.com *.office.com *.ipify.org cdn.uplift-platform.com *.uplift.com cdn.smooch.io api.smooch.io *.appboycdn.com; frame-src 'self' 'unsafe-eval' 'unsafe-inline' *.accenture.com *.vivaaerobus.com *.ezyflight.se data: *.cdn-net.com *.bidflyer.com *.booking.com *.rentalcars.com *.hotjar.com *.google.com *.youtube.com *.criteo.com *.facebook.com *.facebook.net *.doubleclick.net *.safetypay.com *.e-tsw.com *.cartrawler.com platform-api.sharethis.com cdn.apixu.com *.intentmedia.net *.cdn-net.com *.sandbox.paypal.com *.paypal.com us.creativecdn.com *.playbuzz.com *.office.com *.uplift.com; font-src 'self' 'unsafe-eval' 'unsafe-inline' *.accenture.com *.vivaaerobus.com *.ezyflight.se data: *.cdn-net.com *.bidflyer.com *.bootstrapcdn.com *.gstatic.com *.cartrawler.com *.playbuzz.com *.office.com cdn.smooch.io; connect-src 'self' 'unsafe-eval' 'unsafe-inline' *.accenture.com *.vivaaerobus.com *.ezyflight.se data: *.cdn-net.com *.bidflyer.com wss://*.bidflyer.com *.fusion.com *.facebook.com *.google-analytics.com *.viajamas.com *.intentmedia.net *.skyscanner.net *.cdn-net.com *.paypal.com *.bidflyer.com 3kxrt0l29e.execute-api.us-east-1.amazonaws.com vmvpz7tc32.execute-api.us-east-1.amazonaws.com enc1wnyb87.execute-api.us-east-1.amazonaws.com 6ytvy2ekla.execute-api.us-east-1.amazonaws.com pu8ewcfeqc.execute-api.us-east-1.amazonaws.com bywvti3o0d.execute-api.us-east-1.amazonaws.com benwyu65h1.execute-api.us-east-1.amazonaws.com 2gvsqxuo5c.execute-api.us-east-1.amazonaws.com 9nwmwnkc3i.execute-api.us-east-1.amazonaws.com 3yd2nmljr8.execute-api.us-east-1.amazonaws.com kbgz8o28m3.execute-api.us-east-1.amazonaws.com rpa944kq0e.execute-api.us-east-1.amazonaws.com fqr97a9mdg.execute-api.us-east-1.amazonaws.com api.kueskipay.io/v1/validate-keys api.kueskipay.com/v1/validate-keys api.kueskipay.io/v1/payments api.kueskipay.com/v1/payments api.kueskipay.com/v1/tracking *.playbuzz.com *.office.com *.uplift-platform.com *.cartrawler.com api.smooch.io 5e46bc82c3d8d5000fb5c147.webloader.smooch.io 5e46bc82c3d8d5000fb5c147.config.smooch.io sdk.iad-03.braze.com wss://api.smooch.io api.ipify.org api.boxever.com; form-action 'self' 'unsafe-eval' 'unsafe-inline' *.accenture.com *.vivaaerobus.com *.ezyflight.se data: *.cdn-net.com *.bidflyer.com *.vivaaerobus.com *.ezyflight.se *.facebook.net *.facebook.com *.e-tsw.com *.cdn-net.com *.playbuzz.com *.office.com; media-src 'self' 'unsafe-eval' 'unsafe-inline' *.accenture.com *.vivaaerobus.com *.ezyflight.se data: *.cdn-net.com *.bidflyer.com cdn.smooch.io;
X-Xss-Protection: 1;mode=block
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=604800
X-Powered-By: ASP.NET
X-Frame-Options: DENY
X-OneAgent-JS-Injection: true
X-ruxit-JS-Agent: true
Content-Encoding: gzip
Date: Sun, 21 Jun 2020 07:03:27 GMT
Content-Length: 56502
Connection: keep-alive
Vary: Accept-Encoding
Set-Cookie: ASP.NET_SessionId=ofhnn2iofg2yf5ipiorrhcpo; path=/; secure; HttpOnly; SameSite=Lax
Set-Cookie: ASP.NET_SessionId=ofhnn2iofg2yf5ipiorrhcpo; path=/; secure; HttpOnly; SameSite=Lax
Set-Cookie: LanguageCookie=mx; expires=Tue, 21-Jul-2020 07:03:26 GMT; path=/; secure
Set-Cookie: LanguageCookie=mx; expires=Tue, 21-Jul-2020 07:03:26 GMT; path=/; secure
Set-Cookie: ClosestStation=EWR; expires=Mon, 22-Jun-2020 07:03:27 GMT; path=/; secure
Set-Cookie: __RequestVerificationToken=1quXxbrmr4yjq_vlSHgM2NNlKHot6nSVdQQgxiW3tKfqAFOaFcHoLxevZanhL-z3B3HCdD1BOEorsa-lTCW4Dr-gKAFtudIFhlYksIGtR7DUrrSVVn5CPZR80K-bLforIZoulg2; path=/; secure; HttpOnly
Set-Cookie: dtCookie=11$C294F92D59B23850767F09602FD40C13; Path=/; Domain=.vivaaerobus.com
Set-Cookie: dotrez=1376836618.20480.0000; path=/; Httponly; Secure