HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
Date: Wed, 31 Aug 2022 21:41:16 GMT
Server: Kestrel
Cache-Control: no-cache, no-store
Pragma: no-cache
Set-Cookie: f=CfDJ8K7FHCM5BzVCiTWQrzE4aXXWwdNg6fVFnWzTXaUpNMTjTlVGKrnnnyGkrmOoGz6FK7A0Niizpwb39-pGcOVMs3Eo8OBaqeHjl9qTwbw5uWIPs7nIeKn4zxc1V2oqarHYg-2hJBcA3o_FzHkQgecZD8g; domain=.bstoked.net; path=/; secure; samesite=strict; httponly
Set-Cookie: .AspNetCore.Mvc.CookieTempDataProvider=; expires=Thu, 01 Jan 1970 00:00:00 GMT; path=/; secure; samesite=lax; httponly
Set-Cookie: ARRAffinity=8a821d83a1f497694793d7cb7c8d5dd0635f7ce57eb7a17ee73837d7a4ea7c07;Path=/;HttpOnly;Secure;Domain=bstoked.net
Set-Cookie: ARRAffinitySameSite=8a821d83a1f497694793d7cb7c8d5dd0635f7ce57eb7a17ee73837d7a4ea7c07;Path=/;HttpOnly;SameSite=None;Secure;Domain=bstoked.net
Transfer-Encoding: chunked
Request-Context: appId=cid-v1:27561bf8-6ce8-4fa2-ad94-af7907591d27
Content-Security-Policy: default-src 'none';script-src 'self' 'unsafe-inline' 'unsafe-eval' https: *.bstoked.net az416426.vo.msecnd.net bstoked.azureedge.net *.facebook.net connect.facebook.net *.googleapis.com *.google.com *.googleadservices.com *.googleads.g.doubleclick.net *.doubleclick.net static.doubleclick.net bid.g.doubleclick.net *.gstatic.com *.google-analytics.com *.googletagmanager.com *.cloudfront.net trackcmp.net *.hotjar.com *.postaffiliatepro.com *.pinterest.com cdn.jsdelivr.net vimeo.com *.vimeo.com *.driftt.com *.rome2rio.com *.skyscanner.net static.mailerlite.com windyapp.co windy.app;style-src 'self' 'unsafe-inline' fonts.googleapis.com tagmanager.google.com cdn.jsdelivr.net cdn.rawgit.com static.mailerlite.com windyapp.co windy.app;img-src 'self' https: data: *.bstoked.net bstoked.net bstokedcdn.blob.core.windows.net bstoked.azureedge.net bstoked.img-us3.com *.amazonaws.com ac-image.s3.amazonaws.com/* developer-tripadvisor.s3.amazonaws.com *.tripadvisor.com *.tacdn.com *.youtube.com *.google.com *.google-analytics.com *.gstatic.com *.googleusercontent.com *.googleapis.com *.doubleclick.net secure.gravatar.com *.hotjar.com *.postaffiliatepro.com *.vimeo.com *.vimeocdn.com *.fbcdn.net *.facebook.com *.pinterest.com s-media-cache-ak0.pinimg.com windyapp.co windy.app *.mangopay.com;media-src 'self' bstoked.azureedge.net;frame-src 'self' *.bstoked.net bstoked.net *.google.com bid.g.doubleclick.net *.windy.com *.windytv.com windy.app *.rome2rio.com *.skyscanner.net *.youtube.com *.vimeo.com *.hotjar.com *.driftt.com *.facebook.com *.clickmagick.com static.mailerlite.com;font-src 'self' data: fonts.gstatic.com fonts.googleapis.com js.intercomcdn.com;connect-src 'self' dc.services.visualstudio.com *.tripadvisor.com *.google-analytics.com *.hotjar.com api-iam.intercom.io wss://nexus-websocket-a.intercom.io wss://nexus-websocket-b.intercom.io nexus-websocket-a.intercom.io nexus-websocket-b.intercom.io wss://*.hotjar.com https://*.hotjar.com:* vimeo.com *.postaffiliatepro.com *.payline.com *.mangopay.com *.drift.com cdn.jsdelivr.net *.skyscanner.net bstoked.azureedge.net;form-action 'self' connect.facebook.net bstoked.activehosted.com *.facebook.com *.google.com *.mangopay.com;manifest-src 'self' bstoked.azureedge.net;upgrade-insecure-requests;report-uri /cspReport
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-UA-Compatible: IE=edge,chrome=1