villamyna.com

Http-Version: 1.1
Status-Code: 200
Status: 200 OK
Connection: keep-alive
Server: nginx
Content-Type: text/html; charset=utf-8
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-ua-compatible: IE=Edge,chrome=1
content-security-policy: child-src blob:; connect-src 'self' https: wss://ws.airbnb.com https://netverify.com https://*.netverify.com *.inspectlet.com wss: *.amap.com https://*.mapbox.com; default-src 'self' https: blob:; font-src 'self' data: https://*.muscache.com fonts.gstatic.com https://use.typekit.net; frame-ancestors *; frame-src * https://*.cardinalcommerce.com; img-src 'self' https: data: *.inspectlet.com https://*.mapbox.com blob:; media-src 'self' https: blob:; script-src 'self' 'unsafe-eval' https://a0.muscache.com https://cdn.siftscience.com https://ss.musthird.com https://t1.musthird.com https://bat.bing.com https://connect.facebook.net https://www.google-analytics.com https://www.googleadservices.com https://tpc.googlesyndication.com https://www.googletagmanager.com https://a.cdn.intentmedia.net https://maps.googleapis.com https://ajax.googleapis.com https://*.g.doubleclick.net https://www.google.com https://www.gstatic.com https://smartlock.google.com https://accounts.google.com https://app.link https://cdn.branch.io https://api.branch.io https://bam.nr-data.net https://js-agent.newrelic.com https://sslwidget.criteo.com https://static.criteo.net https://dis.criteo.com https://widget.us.criteo.com https://*.gbc.criteo.net https://ethn.io https://s.yimg.jp https://api.geetest.com https://cdn.ampproject.org https://storage.googleapis.com/workbox-cdn/ https://tagmanager.google.com https://pay.google.com https://songbird.cardinalcommerce.com/ https://www.recaptcha.net https://www.gstatic.cn 'sha256-rAm9O8JPZLtQmd84zMDzhsG5q35JscESxxcaFL7 DDc=' 'sha256-ck0NYnSq6evDrSU3QAgDAso6GSMHXE8SDlqTKWnxpKI=' 'sha256-9ZdLPFhnEQLHZCKEYdkKXUj5at zztFTTILAt3y65 0=' 'sha256- DMqUACVS8B0N29g0M3MeqqvH2pF88VHSCl59PH Z0Q=' 'sha256-rFTugrnZUmQDoMWK Yria1oVvefKBuHehdCTw1HzzxE=' https://netverify.com https://*.netverify.com https://icm.aexp-static.com https://qicm.americanexpress.com https://qwww435.americanexpress.com https://checkout.americanexpress.com https://www.paypalobjects.com https://c.paypal.com https://www.paypal.com *.inspectlet.com blob: https://vdata.amap.com https://webapi.amap.com https://restapi.amap.com https://*.mapbox.com https://songbird.cardinalcommerce.com https://songbirdstag.cardinalcommerce.com https://includes.ccdc02.com https://includestest.ccdc02.com https://js.stripe.com 'sha256-5MJknxxsceyJ8mqNLfZJ1Mhk0i1oT/oNCH4sZAK/0vU='; style-src 'self' https: 'unsafe-inline' https://*.mapbox.com; worker-src 'self'; report-uri /tracking/csp?controller=core-guest-loop&action=/rooms/24189021&req_uuid=5131f9c4-a7d3-4e9b-b056-3cf34943ba4a&version=sha=c9a8659941f3&report_only=false; report-to /tracking/csp?controller=core-guest-loop&action=/rooms/24189021&req_uuid=5131f9c4-a7d3-4e9b-b056-3cf34943ba4a&version=sha=c9a8659941f3&report_only=false
edge-control: no-store
cache-control: no-store, max-age=0, private, must-revalidate
link: ;rel=preload;as=style,;rel=preload;as=font;type=font/woff2;crossorigin=crossorigin,;rel=preload;as=font;type=font/woff2;crossorigin=crossorigin,;rel=preload;as=font;type=font/woff2;crossorigin=crossorigin
etag: W/"7ad0a-g6HK7Swel6t8ubvulIdHPdrgTWY"
content-encoding: gzip
x-envoy-upstream-service-time: 508
Strict-Transport-Security: max-age=10886400; includeSubdomains
X-Server-Name: www.airbnb.com
Accept-Ranges: bytes
Age: 0
Via: 1.1 varnish
Date: Tue, 14 Apr 2020 21:17:45 GMT
X-Served-By: cache-bwi5136-BWI, cache-fra19153-FRA
X-Cache: MISS, MISS
X-Cache-Hits: 0, 0
X-Timer: S1586899065.048696,VS0,VE601
Vary: Accept-Encoding
transfer-encoding: chunked