Resy.com - Widgets.resy.com

date: Tue, 10 Feb 2026 18:00:52 GMT
content-type: text/html
server: nginx/1.25.1
last-modified: Tue, 10 Feb 2026 16:14:34 GMT
etag: W/"698b596a-5c0"
expires: Tue, 10 Feb 2026 18:00:51 GMT
cache-control: no-cache
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: max-age=0, no-cache, no-store, must-revalidate
pragma: no-cache
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' widgets.demo.resy.com widgets.dev.resy.com widgets.sandbox.resy.com widgets.staging.resy.com widgets.resy.com cdaas-dev.americanexpress.com cdaas-dev.aexp.com qwww.aexp-static.com www.aexp-static.com assets.adobedtm.com cdn.amplitude.com d2zah9y47r7bi2.cloudfront.net www.datadoghq-browser-agent.com connect.facebook.net www.google.com maps.googleapis.com www.googletagmanager.com maps.gstatic.com www.gstatic.com cdn4.mxpnl.com static.simonsignal.com tr.snapchat.com tr6.snapchat.com *.js.stripe.com js.stripe.com js.adsrvr.org sc-static.net cdn.trackjs.com api.chilipiper.com apps.chilipiper.com fire.chilipiper.com js.chilipiper.com; connect-src 'self' annotation.demo.resy.com annotation.dev.resy.com annotation.staging.resy.com annotation.sandbox.resy.com annotation.resy.com api.demo.resy.com api.dev.resy.com api.staging.resy.com api.sandbox.resy.com api.resy.com image.demo.resy.com image.dev.resy.com image.staging.resy.com image.sandbox.resy.com image.resy.com item.demo.resy.com item.dev.resy.com item.staging.resy.com item.sandbox.resy.com item.resy.com blog.resy.com api.demo.resyos.com api.dev.resyos.com api.staging.resyos.com api.sandbox.resyos.com api.resyos.com functions.americanexpress.com datapoint-deveusw1.americanexpress.com datapoint-qaeusw1.americanexpress.com datapoint.americanexpress.com omns.americanexpress.com ucmapi-dev.americanexpress.com ucmapi-qa.americanexpress.com ucmapi.americanexpress.com cdaas-dev.americanexpress.com qwww.aexp-static.com s3.amazonaws.com rum.browser-intake-datadoghq.com session-replay.browser-intake-datadoghq.com www.googleadservices.com ad.doubleclick.net www.google.com adservice.google.com maps.googleapis.com api-js.mixpanel.com api2.amplitude.com cdn.amplitude.com blog-live.offload-resy.com staging.simonsignal.com simonsignal.com tr.snapchat.com tr6.snapchat.com api.stripe.com capture.trackjs.com www.facebook.com insight.adsrvr.org d14rvb61uksiqz.cloudfront.net dw5imgvvi8wn1.cloudfront.net api.chilipiper.com apps.chilipiper.com fire.chilipiper.com js.chilipiper.com resy.chilipiper.com tracking.chilipiper.com; worker-src 'self' blob:; style-src 'self' 'unsafe-inline' fonts.googleapis.com www.gstatic.com; frame-src widgets.demo.resy.com widgets.dev.resy.com widgets.sandbox.resy.com widgets.staging.resy.com widgets.resy.com insight.adsrvr.org match.adsrvr.org 189445.fls.doubleclick.net td.doubleclick.net www.google.com *.js.stripe.com js.stripe.com tr.snapchat.com tr6.snapchat.com www.facebook.com api.chilipiper.com apps.chilipiper.com fire.chilipiper.com js.chilipiper.com resy.chilipiper.com tracking.chilipiper.com resy.us.getbridge.video; font-src 'self' data: fonts.gstatic.com; img-src 'self' blob: data: 'unsafe-inline' image.demo.resy.com image.dev.resy.com image.staging.resy.com image.sandbox.resy.com image.resy.com blog.resy.com omns.americanexpress.com icm.aexp-static.com origin-pqgemapp.americanexpress.com *.googleusercontent.com ib.adnxs.com insight.adsrvr.org s3.amazonaws.com dsum-sec.casalemedia.com ad.doubleclick.net cm.g.doubleclick.net www.facebook.com maps.googleapis.com mapsresources-pa.googleapis.com www.googletagmanager.com www.googleadservices.com www.googleads.g.doubleclick.net maps.gstatic.com www.gstatic.com pixel.rubiconproject.com usage.trackjs.com d14rvb61uksiqz.cloudfront.net dw5imgvvi8wn1.cloudfront.net adservice.google.com api.chilipiper.com apps.chilipiper.com fire.chilipiper.com js.chilipiper.com resy.chilipiper.com tracking.chilipiper.com storage.googleapis.com; media-src 'self' d14rvb61uksiqz.cloudfront.net dw5imgvvi8wn1.cloudfront.net; report-uri https://browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub6398a4c636ff6803345df9156eedeefa&dd-evp-origin=content-security-policy&ddsource=csp-report; report-to browser-intake-datadoghq;
report-to: {u'max_age': 10886400, u'endpoints': [{u'url': u'https://browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub6398a4c636ff6803345df9156eedeefa&dd-evp-origin=content-security-policy&ddsource=csp-report'}], u'group': u'browser-intake-datadoghq'}
reporting-endpoints: browser-intake-datadoghq='https://browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub6398a4c636ff6803345df9156eedeefa&dd-evp-origin=content-security-policy&ddsource=csp-report'
content-encoding: gzip
set-cookie: visid_incap_3242686=LAZHNPYqSUOEXmKowZsQ3VRyi2kAAAAAQUIPAAAAAAA1oBMhXQvjImpXWgD+CnZe; expires=Tue, 09 Feb 2027 22:38:44 GMT; HttpOnly; path=/; Domain=.resy.com; Secure; SameSite=None
set-cookie: nlbi_3242686=ase7VONyC39BFvUXSosilAAAAAC6g3ALWi8eLhyWcRDNXRZr; HttpOnly; path=/; Domain=.resy.com; Secure; SameSite=None
set-cookie: incap_ses_706_3242686=FlmRO18frjV/LScQXDfMCVRyi2kAAAAA/VRtWvbQdp9MQhR5/y7SZA==; path=/; Domain=.resy.com; Secure; SameSite=None
x-cdn: Imperva
x-iinfo: 46-8326391-8326399 NNNN CT(98 97 0) RT(1770746452347 32) q(0 0 2 -1) r(3 3) U24