HTTP/2 301 date: Fri, 26 Dec 2025 12:36:45 GMT content-type: text/html content-length: 169 location: https://resy.com server: nginx/1.24.0 strict-transport-security: max-age=31536000; includeSubDomains HTTP/2 200 date: Fri, 26 Dec 2025 12:36:47 GMT content-type: text/html server: nginx/1.24.0 last-modified: Mon, 24 Nov 2025 21:30:30 GMT etag: W/"6924ce76-12de" strict-transport-security: max-age=31536000; includeSubDomains x-frame-options: DENY cache-control: max-age=0, no-cache, no-store, must-revalidate pragma: no-cache content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' widgets.demo.resy.com widgets.dev.resy.com widgets.sandbox.resy.com widgets.staging.resy.com widgets.resy.com cdaas-dev.americanexpress.com cdaas-dev.aexp.com qwww.aexp-static.com www.aexp-static.com assets.adobedtm.com cdn.amplitude.com d2zah9y47r7bi2.cloudfront.net www.datadoghq-browser-agent.com connect.facebook.net www.google.com maps.googleapis.com www.googletagmanager.com maps.gstatic.com www.gstatic.com cdn4.mxpnl.com static.simonsignal.com tr.snapchat.com tr6.snapchat.com *.js.stripe.com js.stripe.com js.adsrvr.org sc-static.net cdn.trackjs.com api.chilipiper.com apps.chilipiper.com fire.chilipiper.com js.chilipiper.com; connect-src 'self' annotation.demo.resy.com annotation.dev.resy.com annotation.staging.resy.com annotation.sandbox.resy.com annotation.resy.com api.demo.resy.com api.dev.resy.com api.staging.resy.com api.sandbox.resy.com api.resy.com image.demo.resy.com image.dev.resy.com image.staging.resy.com image.sandbox.resy.com image.resy.com item.demo.resy.com item.dev.resy.com item.staging.resy.com item.sandbox.resy.com item.resy.com blog.resy.com api.demo.resyos.com api.dev.resyos.com api.staging.resyos.com api.sandbox.resyos.com api.resyos.com functions.americanexpress.com datapoint-deveusw1.americanexpress.com datapoint-qaeusw1.americanexpress.com datapoint.americanexpress.com omns.americanexpress.com ucmapi-dev.americanexpress.com ucmapi-qa.americanexpress.com ucmapi.americanexpress.com cdaas-dev.americanexpress.com qwww.aexp-static.com s3.amazonaws.com rum.browser-intake-datadoghq.com www.googleadservices.com ad.doubleclick.net www.google.com adservice.google.com maps.googleapis.com api-js.mixpanel.com api2.amplitude.com cdn.amplitude.com blog-live.offload-resy.com staging.simonsignal.com simonsignal.com tr.snapchat.com tr6.snapchat.com api.stripe.com capture.trackjs.com www.facebook.com insight.adsrvr.org d14rvb61uksiqz.cloudfront.net dw5imgvvi8wn1.cloudfront.net api.chilipiper.com apps.chilipiper.com fire.chilipiper.com js.chilipiper.com resy.chilipiper.com tracking.chilipiper.com bff-web-staging.exploretock.com bff-web.dev.resy.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com www.gstatic.com; frame-src 'self' widgets.demo.resy.com widgets.dev.resy.com widgets.sandbox.resy.com widgets.staging.resy.com widgets.resy.com insight.adsrvr.org match.adsrvr.org 189445.fls.doubleclick.net td.doubleclick.net www.google.com *.js.stripe.com js.stripe.com tr.snapchat.com tr6.snapchat.com www.facebook.com api.chilipiper.com apps.chilipiper.com fire.chilipiper.com js.chilipiper.com resy.chilipiper.com tracking.chilipiper.com resy.us.getbridge.video; font-src 'self' data: fonts.gstatic.com; img-src 'self' blob: data: 'unsafe-inline' image.demo.resy.com image.dev.resy.com image.staging.resy.com image.sandbox.resy.com image.resy.com blog.resy.com omns.americanexpress.com icm.aexp-static.com origin-pqgemapp.americanexpress.com *.googleusercontent.com ib.adnxs.com insight.adsrvr.org s3.amazonaws.com dsum-sec.casalemedia.com ad.doubleclick.net cm.g.doubleclick.net www.facebook.com maps.googleapis.com www.googletagmanager.com www.googleadservices.com www.googleads.g.doubleclick.net maps.gstatic.com www.gstatic.com pixel.rubiconproject.com usage.trackjs.com d14rvb61uksiqz.cloudfront.net dw5imgvvi8wn1.cloudfront.net adservice.google.com api.chilipiper.com apps.chilipiper.com fire.chilipiper.com js.chilipiper.com resy.chilipiper.com tracking.chilipiper.com; media-src 'self' d14rvb61uksiqz.cloudfront.net dw5imgvvi8wn1.cloudfront.net; frame-ancestors 'self' resy.com; report-uri https://browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub6398a4c636ff6803345df9156eedeefa&dd-evp-origin=content-security-policy&ddsource=csp-report; report-to browser-intake-datadoghq; report-to: {u'max_age': 10886400, u'endpoints': [{u'url': u'https://browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub6398a4c636ff6803345df9156eedeefa&dd-evp-origin=content-security-policy&ddsource=csp-report'}], u'group': u'browser-intake-datadoghq'} reporting-endpoints: browser-intake-datadoghq='https://browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub6398a4c636ff6803345df9156eedeefa&dd-evp-origin=content-security-policy&ddsource=csp-report' content-encoding: gzip set-cookie: visid_incap_3089194=JNrd6HeXQ5Cnrjj6gimGdV6BTmkAAAAAQUIPAAAAAACZcACgqeZuHbif/Wh8gRc+; expires=Sat, 26 Dec 2026 06:45:58 GMT; HttpOnly; path=/; Domain=.resy.com set-cookie: nlbi_3089194=0flBKuIlMULgwIn9g+rAzAAAAACwD5k5dpLm+LrqrzIDPIno; HttpOnly; path=/; Domain=.resy.com set-cookie: incap_ses_1840_3089194=qo8bJ2KffFJsvhtDzP6IGV6BTmkAAAAAkI3OsNJLpd4AvIfgLkw0tw==; path=/; Domain=.resy.com x-cdn: Imperva x-iinfo: 60-206434772-206434898 NNNY CT(2 7 0) RT(1766752606678 483) q(0 0 0 0) r(0 0) U24