Cloud.microsoft - Bookings.cloud.microsoft

cache-control: no-cache
pragma: no-cache
content-length: 0
content-type: text/plain
location: https://bookings.cloud.microsoft/bookings/
server: Microsoft-HTTPAPI/2.0
x-nanoproxy: 1
request-id: 6333e062-90b7-4349-3912-239963fa9608
x-feserver: FR3P281CA0148
date: Wed, 22 Apr 2026 06:34:28 GMT

HTTP/2 200 
cache-control: no-cache
pragma: no-cache
content-type: text/html
content-encoding: gzip
expires: -1
vary: Accept-Encoding
server: Microsoft-HTTPAPI/2.0
x-nanoproxy: 1,1
request-id: 4ac86ade-785e-e004-83b8-db71bd57059a
content-security-policy-report-only: default-src *.res.office.com *.res.office365.com *.cdn.office.net *.df.onecdn.static.microsoft *.public.onecdn.static.microsoft 'self'; script-src 'nonce-CVS6KJ+ezEW3dqVHY9DqKw==' *.res.office.com *.res.office365.com *.cdn.office.net *.df.onecdn.static.microsoft *.public.onecdn.static.microsoft amcdn.msftauth.net *.skype.com *.delve.office.com teams.microsoft.com blob: 'report-sample' 'self' js.monitor.azure.com *.public.onecdn.static.microsoft; style-src *.res.office.com *.res.office365.com *.cdn.office.net *.df.onecdn.static.microsoft *.public.onecdn.static.microsoft *.skype.com fonts.googleapis.com 'self' 'unsafe-inline' 'report-sample' *.engage.cloud.microsoft 'unsafe-inline'; img-src data: blob: cid: *.office.com *.office.net *.office365.com *.public.onecdn.static.microsoft * filesystem: *.public.onecdn.static.microsoft; connect-src blob: data: *.res.office.com *.res.office365.com *.cdn.office.net *.df.onecdn.static.microsoft *.public.onecdn.static.microsoft *.services.web.outlook.com spoprod-a.akamaihd.net *.bing.com login.live.com *.office.net *.office.com *.office365.com *.officeapps.live.com *.skype.com *.office.de browser.pipe.aria.microsoft.com media.licdn.com *.facebook.com outlook.live.com graph.microsoft.com *.graph.microsoft.com *.users.storage.live.com *.sharepoint.com *.sharepoint.de *.delve.office.com *.loki.delve.office.com web.vortex.data.microsoft.com *.events.data.microsoft.com *.msedge.net teams.microsoft.com *.teams.microsoft.com 'self' *.engage.cloud.microsoft wss://augloop-dogfood.officeppe.com wss://*.augloop-dogfood.officeppe.com wss://augloop-gcc.office.com wss://*.augloop-gcc.office.com wss://augloop.office.com wss://*.augloop.office.com wss://augloop.svc.cloud.microsoft wss://*.augloop.svc.cloud.microsoft aesir.office.com *.oscs.protection.outlook.com *.safelinks.protection.outlook.com arc.msn.com *.dynamics.com *.mos.microsoft.com ris.api.iris.microsoft.com services.bingapis.com prod-autodetect.outlookmobile.com *.googleapis.com admin.microsoft.com *.bpa.microsoft.com teams.cloud.microsoft api.tenor.com attachment.outlook.live.net *.msedge.net app.whiteboard.microsoft.com whiteboard.office.com whiteboard.cloud.microsoft outlook.cloud.microsoft identity.osi.office.net wss://substrate.office.com *.adnxs.com wss://*.trouter.teams.microsoft.com *.cloud.microsoft *.events.data.microsoft.com login.microsoftonline.com eu-office.events.data.microsoft.com; base-uri browser.pipe.aria.microsoft.com 'self'; form-action *.officeapps.live.com *.sharepoint.com login.microsoftonline.com; object-src *.office.net 'self' attachments.office.net attachment.outlook.live.net; frame-ancestors 'self' teams.cloud.microsoft outlook.cloud.microsoft m365.cloud.microsoft 'self' teams.microsoft.com outlook.office.com *.live.com; font-src data: *.res.office.com *.res.office365.com *.cdn.office.net *.df.onecdn.static.microsoft *.public.onecdn.static.microsoft spoprod-a.akamaihd.net *.skype.com sharepointonline.com *.sharepointonline.com *.delve.office.com fonts.gstatic.com static2.sharepointonline.com 'self' *.engage.cloud.microsoft; media-src blob: *.res.office.com *.res.office365.com *.cdn.office.net *.df.onecdn.static.microsoft *.public.onecdn.static.microsoft *.skype.com *.office.net *.office365.net *.office.com ssl.gstatic.com 'self' *.engage.cloud.microsoft attachments.office.net attachment.outlook.live.net *.sharepoint.com; frame-src *.sharepoint-df.com *.sharepoint.com *.sharepoint.de *.yammer.com login.microsoftonline.com outlook.office365.com webshell.suite.office.com www.youtube.com ms-appx-web: 'self' *.office.com *.cdn.office.net; manifest-src outlook.office.com 'self'; worker-src 'self' blob: *.res.office.com *.office.com; child-src 'self' blob: *.office.com; report-uri https://csp.microsoft.com/report/Office365-BookingsWeb-PROD; upgrade-insecure-requests;
x-calculatedfetarget: BE1P281CU029.internal.outlook.com
x-clique: CLDEUP281SXF03
document-policy: include-js-call-stacks-in-crash-reports
cross-origin-opener-policy: same-origin-allow-popups
ms-cv: 3mrISl54BOCDuNtxvVcFmg.1.1
referrer-policy: no-referrer
x-app-name: Bookings
x-backendhttpstatus: 200,200
report-to: {"group":"NelOfficeUpload1","max_age":7200,"endpoints":[{"url":"https://exo.nel.measure.office.net/api/report?TenantId=&FrontEnd=Cafe&DestinationEndpoint=HHN&RemoteIP=2a01:4f8:2220::&Environment=MT&HttpStatusFrom=BE&ServiceName=Default.bookings&MiraPartnerName="}],"include_subdomains":true}
x-bepartition: CLDEUP281SXF03
x-besku: UNKNOWN
x-calculatedbetarget: BEVP281MB3548.DEUP281.PROD.OUTLOOK.COM
x-client-version: 20260410002.41
x-content-type-options: nosniff
x-feefzinfo: SXF
x-feserver: FR3P281CA0148
x-proxy-backendserverstatus: 200
x-proxy-routingcorrectness: 1
x-web-server-version: 26.4.10.2
x-firsthopcafeefz: HHN
alt-svc: h3=":443";ma=2592000,h3-29=":443";ma=2592000
strict-transport-security: max-age=31536000; includeSubDomains
nel: {"report_to":"NelOfficeUpload1","max_age":7200,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
set-cookie: ClientId=; expires=Thu, 01 Jan 1970 00:00:00 GMT; path=/
set-cookie: ClientId=1F6D98085118482DA4E33C635D062545; expires=Thu, 22 Apr 2027 06:34:28 GMT; path=/; secure; samesite=none
date: Wed, 22 Apr 2026 06:34:28 GMT