stillwaterscottage.com

Http-Version: 1.1
Status-Code: 200
Status: 200 OK
Server: nginx
Content-Type: text/html; charset=utf-8
Vary: Accept-Encoding
status: 200 OK
Link: ;rel=preload;as=style,;rel=preload;as=style,;rel=preload;as=style,;rel=preload;as=style,;rel=preload;as=font;type=font/woff2;crossorigin=crossorigin,;rel=preload;as=font;type=font/woff2;crossorigin=crossorigin,;rel=preload;as=font;type=font/woff2;crossorigin=crossorigin,;rel=preload;as=script
x-frame-options: SAMEORIGIN
Cache-Control: no-store, max-age=0, private, must-revalidate
ETag: W/"e311ec690a3c4406abca5cab01315ce1"
referrer-policy: same-origin
x-ua-compatible: IE=Edge,chrome=1
server-timing: total;dur=1428
content-security-policy: default-src 'self' https: blob:; child-src *; connect-src 'self' https: wss: *.amap.com *.inspectlet.com *.mapbox.com netverify.com *.netverify.com; font-src 'self' data: *.muscache.com fonts.gstatic.com use.typekit.net; img-src 'self' https: data: *.inspectlet.com *.mapbox.com *.gstatic.com; media-src 'self' https: blob:; script-src 'self' 'unsafe-eval' a0.muscache.com cdn.siftscience.com ss.musthird.com t1.musthird.com bat.bing.com connect.facebook.net www.google-analytics.com www.googleadservices.com tpc.googlesyndication.com www.googletagmanager.com a.cdn.intentmedia.net maps.googleapis.com ajax.googleapis.com *.g.doubleclick.net app.link cdn.branch.io bam.nr-data.net js-agent.newrelic.com sslwidget.criteo.com static.criteo.net dis.criteo.com widget.us.criteo.com *.gbc.criteo.net ethn.io s.yimg.jp api.geetest.com blob: webapi.amap.com restapi.amap.com *.inspectlet.com 'nonce-f9d68cbdbaca33d93df479fcea18f7' *.mapbox.com *.google.com *.gstatic.com netverify.com *.netverify.com icm.aexp-static.com qicm.americanexpress.com qwww435.americanexpress.com checkout.americanexpress.com www.paypalobjects.com 'sha256-Gn3R3CfqodkNUs C4gXoCllPFSnBVuhJSWkVuIlhYzc=' 'unsafe-inline' 'sha256-rfTud2kTm0UjtJ6PqxcrkglfrUD4H8WCcS9mCs6PJ5s=' 'sha256-D9Mz5Ys1Opv52C2fjJU4eS9qDZpG9 Ywz5rQPUyxngQ='; style-src 'self' https: 'unsafe-inline' *.mapbox.com; report-uri /tracking/csp?action=show&controller=rooms&report_only=false&req_uuid=f08068e0-e4a4-418f-8234-5ad79f8c1950&version=a35e1ff71e5a583af3c7120372cfbd3390627dc8
content-security-policy-report-only: default-src blob: *; connect-src blob: *; font-src 'self' data: *.muscache.com fonts.gstatic.com use.typekit.net; img-src 'self' https: data: *.inspectlet.com; script-src 'self' 'unsafe-eval' webpack.localhost.airbnb.com jira.airbnb.biz *.g.doubleclick.net cdn.siftscience.com ss.musthird.com t1.musthird.com bat.bing.com connect.facebook.net www.google-analytics.com www.googleadservices.com tpc.googlesyndication.com www.googletagmanager.com maps.googleapis.com ajax.googleapis.com app.link cdn.branch.io bam.nr-data.net js-agent.newrelic.com sslwidget.criteo.com static.criteo.net dis.criteo.com widget.us.criteo.com ethn.io blob: webapi.amap.com restapi.amap.com *.inspectlet.com cdn.ampproject.org/v0.js cdn.ampproject.org/v0/ a.alipayobjects.com gw.alipayobjects.com static.t.agrant.cn t.agrantsem.com ditu.google.com *.muscache.cn *.muscache.com ss.musthird.cn www.google.com www.gstatic.com b92.yahoo.co.jp mc.yandex.ru wcs.naver.net static.matterport.com a.cdn.intentmedia.net s.yimg.jp icm.aexp-static.com checkout.americanexpress.com www.paypalobjects.com 'sha256-Gn3R3CfqodkNUs C4gXoCllPFSnBVuhJSWkVuIlhYzc=' 'unsafe-inline' 'sha256-rfTud2kTm0UjtJ6PqxcrkglfrUD4H8WCcS9mCs6PJ5s=' 'sha256-D9Mz5Ys1Opv52C2fjJU4eS9qDZpG9 Ywz5rQPUyxngQ='; style-src * blob: 'unsafe-inline'; report-uri /tracking/csp?action=show&controller=rooms&report_only=true&req_uuid=f08068e0-e4a4-418f-8234-5ad79f8c1950&version=a35e1ff71e5a583af3c7120372cfbd3390627dc8
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
Content-Encoding: gzip
x-envoy-upstream-service-time: 1433
Strict-Transport-Security: max-age=10886400; includeSubdomains
X-Server-Name: www.airbnb.com
Date: Sun, 10 Jun 2018 21:27:48 GMT
Transfer-Encoding: chunked
Connection: Transfer-Encoding