HTTP/1.1 200 OK
Date: Thu, 17 Sep 2020 18:22:13 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Vary: Accept-Encoding
Content-Security-Policy: default-src 'self' https://img.zumpercdn.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' www.googleadservices.com *.doubleclick.net www.google-analytics.com www.googletagmanager.com tagmanager.google.com *.googleapis.com cdn.getblueshift.com *.scorecardresearch.com connect.facebook.net tracking.listhub.net cdnjs.cloudflare.com cdn.jsdelivr.net https://img.zumpercdn.com https://d214hhm15p4t1d.cloudfront.net 'nonce-0caa5816-646e-4c05-a33f-d26acfa99fa5' *.trovit.com *.stripe.com *.mixpanel.com *.mxpnl.com *.heapanalytics.com heapanalytics.com bat.bing.com *.locallogic.co browser.sentry-cdn.com code.jquery.com unpkg.com; connect-src 'self' *.zumper.com api.getblueshift.com www.google-analytics.com www.facebook.com ssl.geoplugin.net *.doubleclick.net api.rollbar.com logx.optimizely.com cdn.optimizely.com https://*.tiles.mapbox.com https://api.mapbox.com https://events.mapbox.com *.recombee.us *.stripe.com *.mixpanel.com heapanalytics.com *.locallogic.co; font-src 'self' data: fonts.googleapis.com fonts.gstatic.com https://img.zumpercdn.com https://d214hhm15p4t1d.cloudfront.net heapanalytics.com; frame-src 'self' *.facebook.com *.doubleclick.net *.googletagmanager.com www.youtube-nocookie.com my.matterport.com geocv.com viewer.panoskin.com helixmedia360.com *.vimeo.com https://d214hhm15p4t1d.cloudfront.net *.stripe.com www.zumper.com *.locallogic.co; img-src 'self' data: blob: *.googleapis.com *.gstatic.com www.google-analytics.com www.googletagmanager.com www.facebook.com *.ggpht.com *.scorecardresearch.com *.doubleclick.net d2t1047w253zzm.cloudfront.net img.youtube.com *.matterport.com https://static.zumpercdn.com https://img.zumpercdn.com https://d214hhm15p4t1d.cloudfront.net img.zumpercdn.com static.zumpercdn.com www.google.com www.google.ca rd.trovit.com tracking.listhub.com tracking.listhub.net tracking.listhub.biz heapanalytics.com techcrunch.com img.buzzfeed.com housemethod.com i.amz.mshcdn.com *.stripe.com bat.bing.com *.arcgisonline.com; style-src 'self' 'unsafe-inline' tagmanager.google.com fonts.googleapis.com https://api.tiles.mapbox.com https://img.zumpercdn.com https://d214hhm15p4t1d.cloudfront.net heapanalytics.com *.locallogic.co unpkg.com cdnjs.cloudflare.com; form-action 'self' www.facebook.com; worker-src blob:; child-src blob:; report-uri https://1bf96f85da4d4d6fd196bd9500cbb0b6.report-uri.com/r/t/csp/enforce; frame-ancestors *.relocation-portal.com
X-Request-Id: b7384b62-b8fa-4342-9884-df202caafce2
Vary: User-Agent, Cookie
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=300, no-transform
Set-Cookie: zumper.sid=s%3Abp_Wj-o6D-EqzF-EWxzLQiPPcwFiPfdh.6ivzf74UioLYQdW6EmbMgTQR2XNkYpz%2FVVdYSH%2FID6A; Path=/; Expires=Fri, 18 Dec 2020 00:22:13 GMT; HttpOnly; Secure; SameSite=Strict
Allow: GET