ck-apartments.com

Http-Version: 1.1
Status-Code: 200
Status: 200 OK
Server: nginx
Content-Type: text/html; charset=utf-8
Vary: Accept-Encoding
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-ua-compatible: IE=Edge,chrome=1
Cache-Control: no-store, max-age=0, private, must-revalidate
Link: <https://a0.muscache.com/airbnb/static/packages/common-0899817928108a7ad87c18bbdef856d8.css>;rel=preload;as=style,<https://a0.muscache.com/airbnb/static/packages/dls/dls-lite_cereal-e64d8c7801ed36a9c7ae891d555a7620.css>;rel=preload;as=style,<https://a0.muscache.com/airbnb/static/airbnb-dls-web/build/fonts/Airbnb_Cereal-Book-9a1c9cca9bb3d65fefa2aa487617805e.woff2>;rel=preload;as=font;type=font/woff2;crossorigin=crossorigin,<https://a0.muscache.com/airbnb/static/airbnb-dls-web/build/fonts/Airbnb_Cereal-Medium-50fc004b3082375f12ff0cfb67bf8e56.woff2>;rel=preload;as=font;type=font/woff2;crossorigin=crossorigin,<https://a0.muscache.com/airbnb/static/airbnb-dls-web/build/fonts/Airbnb_Cereal-Bold-bdfb98485e7836ba31b456f65cded088.woff2>;rel=preload;as=font;type=font/woff2;crossorigin=crossorigin
ETag: W/"66f8f-ET6Roc8hPJuDPn3FspDssziRzAQ"
Content-Encoding: gzip
x-envoy-upstream-service-time: 441
Strict-Transport-Security: max-age=10886400; includeSubdomains
X-Server-Name: www.airbnb.com
X-Akamai-Transformed: 9 - 0 pmb=mTOE,1
Date: Mon, 09 Sep 2019 12:27:20 GMT
Transfer-Encoding: chunked
Connection: Transfer-Encoding
Content-Security-Policy: child-src blob:; connect-src 'self' https: wss://ws.airbnb.com https://netverify.com https://*.netverify.com *.inspectlet.com wss: *.amap.com https://*.mapbox.com; default-src 'self' https: blob:; font-src 'self' data: https://*.muscache.com fonts.gstatic.com https://use.typekit.net; frame-ancestors *; frame-src *; img-src 'self' https: data: *.inspectlet.com https://*.mapbox.com; media-src 'self' https: blob:; script-src 'nonce-5f06aea57457234545a07df22ce06716' 'self' 'unsafe-eval' https://a0.muscache.com https://cdn.siftscience.com https://ss.musthird.com https://t1.musthird.com https://bat.bing.com https://connect.facebook.net https://www.google-analytics.com https://www.googleadservices.com https://tpc.googlesyndication.com https://www.googletagmanager.com https://a.cdn.intentmedia.net https://maps.googleapis.com https://ajax.googleapis.com https://*.g.doubleclick.net https://www.google.com https://www.gstatic.com https://smartlock.google.com https://accounts.google.com https://app.link https://cdn.branch.io https://api.branch.io https://bam.nr-data.net https://js-agent.newrelic.com https://sslwidget.criteo.com https://static.criteo.net https://dis.criteo.com https://widget.us.criteo.com https://*.gbc.criteo.net https://ethn.io https://s.yimg.jp https://api.geetest.com https://cdn.ampproject.org https://storage.googleapis.com/workbox-cdn/ https://tagmanager.google.com https://pay.google.com 'sha256-rAm9O8JPZLtQmd84zMDzhsG5q35JscESxxcaFL7 DDc=' 'sha256-ck0NYnSq6evDrSU3QAgDAso6GSMHXE8SDlqTKWnxpKI=' 'sha256-9ZdLPFhnEQLHZCKEYdkKXUj5at zztFTTILAt3y65 0=' 'sha256-anj/wlPABxVCuYmPnySD3CBbxtX3l2p5OQbQvHP9FsA=' 'sha256-MnioL5BuRJUruaRXOEDN6ssuUoUDtjvvCVp2PicfIIM=' https://netverify.com https://*.netverify.com https://icm.aexp-static.com https://qicm.americanexpress.com https://qwww435.americanexpress.com https://checkout.americanexpress.com https://www.paypalobjects.com https://c.paypal.com https://www.paypal.com *.inspectlet.com blob: https://webapi.amap.com https://restapi.amap.com https://*.mapbox.com https://songbird.cardinalcommerce.com https://includes.ccdc02.com https://js.stripe.com; style-src 'self' https: 'unsafe-inline' https://*.mapbox.com; worker-src 'self'; report-uri /tracking/csp?controller=core-guest-loop&action=/rooms/15409437&req_uuid=b959bc85-c3f0-4552-bed7-e698d55817a1&version=sha=658b5c059038&report_only=false; report-to /tracking/csp?controller=core-guest-loop&action=/rooms/15409437&req_uuid=b959bc85-c3f0-4552-bed7-e698d55817a1&version=sha=658b5c059038&report_only=false