Counter.app - Workspace.counter.app

date: Tue, 22 Apr 2025 16:14:00 GMT
content-type: text/html; charset=UTF-8
location: https://www.hostelworld.com:443/
cache-control: private
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=OtBCb4JK0acXIF0k3mptkmT4e5JZ9SuQZimOvG4Rfr8%2Fnvnq5EGfpbzbSxOwmG%2BE%2B7NYX5lSgD4lyyRAWKb4UeSiAHvZgbZE9wBEJKmo%2FEKtaggLzYM7hmV1KannANaKcNlOt9THkA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
expect-ct: max-age=86400, enforce
referrer-policy: same-origin
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
server: cloudflare
cf-ray: 934669633c8460b5-LHR
server-timing: cfL4;desc="?proto=TCP&rtt=91003&min_rtt=85498&rtt_var=29028&sent=8&recv=10&lost=0&retrans=0&sent_bytes=3409&recv_bytes=898&delivery_rate=33867&cwnd=34&unsent_bytes=0&cid=e196cd3a21864193&ts=252&x=0"

HTTP/2 200 
strict-transport-security: max-age=15552000; includeSubDomains;
x-content-type-options: nosniff
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-xss-protection: 0
vary: Accept-Encoding
vary: Accept-Encoding
access-control-allow-origin: *
set-cookie: i18n_redirected=en; Path=/; Expires=Wed, 22 Apr 2026 16:14:00 GMT; SameSite=Lax
set-cookie: currency=EUR; Domain=.hostelworld.com; Path=/; Secure; SameSite=Strict
set-cookie: optimizely-aid=5021a38a-8909-48e4-95f9-5f194b798e0a; Max-Age=63072000; Domain=.hostelworld.com; Path=/; Secure
set-cookie: recentSearches=%5B%5D; Domain=.hostelworld.com; Path=/; Secure; SameSite=Strict
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin
content-security-policy: base-uri none; font-src self https: data:; form-action self; frame-ancestors self; object-src none; upgrade-insecure-requests; frame-src self https://www.googletagmanager.com/ https://gum.criteo.com/ https://dynamic.criteo.com/ https://fledge.criteo.com/ https://fledge.us.criteo.com/ https://api.mapbox.com/ https://www.youtube.com/ https://consent.trustarc.com https://consent-pref.trustarc.com https://cdn.segment.com/ https://web.btncdn.com/;
origin-agent-cluster: ?1
x-dns-prefetch-control: off
content-type: text/html;charset=utf-8
x-cloud-trace-context: 223e5db71d9597b1ca5b814f16fb68ef
date: Tue, 22 Apr 2025 16:14:00 GMT
server: Google Frontend
via: 1.1 google
content-encoding: br
accept-ranges: none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000