Book.ms

date: Mon, 10 Nov 2025 17:57:21 GMT
server: Kestrel
location: https://bookingsfd-g6bpghh7b3adh2ew.b01.azurefd.net/
content-length: 0
strict-transport-security: max-age=31536000

HTTP/2 302 
date: Mon, 10 Nov 2025 17:57:22 GMT
content-type: text/html
content-length: 0
location: https://outlook.office.com/bookings/
x-azure-ref: 20251110T175722Z-16f77b7fcffxh8hghC1FRAuuus0000000b8g000000004rrw
x-cache: CONFIG_NOCACHE

HTTP/2 200 
cache-control: no-cache
pragma: no-cache
content-type: text/html
content-encoding: gzip
expires: -1
vary: Accept-Encoding
server: Microsoft-HTTPAPI/2.0
x-nanoproxy: 1,1
request-id: 85e20bc7-f98d-7a68-8545-714989b219df
content-security-policy-report-only: default-src *.res.office.com *.res.office365.com *.cdn.office.net *.df.onecdn.static.microsoft *.public.onecdn.static.microsoft 'self'; script-src 'nonce-f9oPMdeVpeXf9bwH9FCGDg==' *.res.office.com *.res.office365.com *.cdn.office.net *.df.onecdn.static.microsoft *.public.onecdn.static.microsoft amcdn.msftauth.net *.skype.com *.delve.office.com teams.microsoft.com blob: 'report-sample' 'self' js.monitor.azure.com *.public.onecdn.static.microsoft; style-src *.res.office.com *.res.office365.com *.cdn.office.net *.df.onecdn.static.microsoft *.public.onecdn.static.microsoft *.skype.com fonts.googleapis.com 'self' 'unsafe-inline' 'report-sample' *.engage.cloud.microsoft 'unsafe-inline'; img-src data: blob: cid: *.office.com *.office.net *.office365.com *.public.onecdn.static.microsoft * filesystem: *.public.onecdn.static.microsoft; connect-src blob: data: *.res.office.com *.res.office365.com *.cdn.office.net *.df.onecdn.static.microsoft *.public.onecdn.static.microsoft *.services.web.outlook.com spoprod-a.akamaihd.net *.bing.com login.live.com *.office.net *.office.com *.office365.com *.officeapps.live.com *.skype.com *.office.de browser.pipe.aria.microsoft.com media.licdn.com *.facebook.com outlook.live.com graph.microsoft.com *.graph.microsoft.com *.users.storage.live.com *.sharepoint.com *.sharepoint.de *.delve.office.com *.loki.delve.office.com web.vortex.data.microsoft.com *.events.data.microsoft.com *.msedge.net teams.microsoft.com *.teams.microsoft.com 'self' *.engage.cloud.microsoft wss://augloop-dogfood.officeppe.com wss://*.augloop-dogfood.officeppe.com wss://augloop-gcc.office.com wss://*.augloop-gcc.office.com wss://augloop.office.com wss://*.augloop.office.com wss://augloop.svc.cloud.microsoft wss://*.augloop.svc.cloud.microsoft aesir.office.com *.oscs.protection.outlook.com *.safelinks.protection.outlook.com arc.msn.com *.dynamics.com *.mos.microsoft.com ris.api.iris.microsoft.com services.bingapis.com prod-autodetect.outlookmobile.com *.googleapis.com admin.microsoft.com *.bpa.microsoft.com teams.cloud.microsoft api.tenor.com attachment.outlook.live.net *.msedge.net app.whiteboard.microsoft.com whiteboard.office.com whiteboard.cloud.microsoft outlook.cloud.microsoft identity.osi.office.net wss://substrate.office.com *.adnxs.com wss://*.trouter.teams.microsoft.com *.cloud.microsoft *.events.data.microsoft.com login.microsoftonline.com eu-office.events.data.microsoft.com; base-uri browser.pipe.aria.microsoft.com 'self'; form-action *.officeapps.live.com *.sharepoint.com login.microsoftonline.com; object-src *.office.net 'self' attachments.office.net attachment.outlook.live.net; frame-ancestors 'self' teams.cloud.microsoft outlook.cloud.microsoft m365.cloud.microsoft 'self' teams.microsoft.com outlook.office.com *.live.com; font-src data: *.res.office.com *.res.office365.com *.cdn.office.net *.df.onecdn.static.microsoft *.public.onecdn.static.microsoft spoprod-a.akamaihd.net *.skype.com sharepointonline.com *.sharepointonline.com *.delve.office.com fonts.gstatic.com static2.sharepointonline.com 'self' *.engage.cloud.microsoft; media-src blob: *.res.office.com *.res.office365.com *.cdn.office.net *.df.onecdn.static.microsoft *.public.onecdn.static.microsoft *.skype.com *.office.net *.office365.net *.office.com ssl.gstatic.com 'self' *.engage.cloud.microsoft attachments.office.net attachment.outlook.live.net *.sharepoint.com; frame-src *.sharepoint-df.com *.sharepoint.com *.sharepoint.de *.yammer.com login.microsoftonline.com outlook.office365.com webshell.suite.office.com www.youtube.com ms-appx-web: 'self' *.office.com *.cdn.office.net *.access.mcas.ms; manifest-src outlook.office.com 'self'; worker-src 'self' blob: *.res.office.com *.office.com; child-src 'self' blob: *.office.com; report-uri https://csp.microsoft.com/report/Office365-BookingsWeb-PROD; upgrade-insecure-requests;
x-calculatedfetarget: FR3P281CU008.internal.outlook.com
cross-origin-opener-policy: same-origin-allow-popups
ms-cv: xwvihY35aHqFRXFJibIZ3w.1.1
x-app-name: Bookings
referrer-policy: no-referrer
x-backendhttpstatus: 200,200
report-to: {"group":"NelOfficeUpload1","max_age":7200,"endpoints":[{"url":"https://exo.nel.measure.office.net/api/report?TenantId=&FrontEnd=Cafe&DestinationEndpoint=FRA&RemoteIP=2a01:4f8:2220::&Environment=MT&HttpStatusFrom=BE&ServiceName=Default.bookings&MiraPartnerName="}],"include_subdomains":true}
x-bepartition: CLDEUP281HHN01
x-besku: UNKNOWN
x-calculatedbetarget: FR3P281MB1488.DEUP281.PROD.OUTLOOK.COM
x-client-version: 20251031008.17
x-clique: CLDEUP281HHN01
x-feefzinfo: HHN
x-feserver: FR4P281CA0416
x-proxy-backendserverstatus: 200
x-proxy-routingcorrectness: 1
x-web-server-version: 25.10.27.5
x-firsthopcafeefz: FRA
alt-svc: h3=":443";ma=2592000,h3-29=":443";ma=2592000
strict-transport-security: max-age=31536000; includeSubDomains
nel: {"report_to":"NelOfficeUpload1","max_age":7200,"include_subdomains":true,"failure_fraction":0.1,"success_fraction":0.001}
set-cookie: ClientId=; expires=Thu, 01 Jan 1970 00:00:00 GMT; path=/
set-cookie: ClientId=6717FAE83FA1455181570D7C9CCBA42B; expires=Tue, 10 Nov 2026 17:57:22 GMT; path=/; secure; samesite=none
date: Mon, 10 Nov 2025 17:57:21 GMT