Elliman.com

date: Fri, 08 Dec 2023 17:28:36 GMT
content-length: 0
location: https://www.elliman.com/
cache-control: private, max-age=0
server: Microsoft-IIS/10.0
content-security-policy: default-src 'unsafe-inline' 'unsafe-eval' https: blob: data:; object-src 'none'; base-uri 'self'; form-action 'self' https://www.facebook.com https://syndication.twitter.com https://platform.twitter.com; report-uri https://60bfaa9a846bec9e32cc07e1.endpoint.csper.io;
content-security-policy-report-only: default-src 'unsafe-inline' 'unsafe-eval' https: blob: data:; object-src 'self'; base-uri 'self'; form-action 'self' https://www.facebook.com https://syndication.twitter.com https://platform.twitter.com;
permissions-policy: fullscreen=(), geolocation=*, autoplay=(), picture-in-picture=()
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
x-frame-options: DENY
access-control-allow-origin: *
x-powered-by: ASP.NET
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Host
access-control-allow-method: POST,GET,OPTIONS
referrer-policy: no-referrer-when-downgrade

HTTP/2 200 
date: Fri, 08 Dec 2023 17:28:36 GMT
content-type: text/html; charset=utf-8
content-length: 29591
cache-control: private, max-age=0, max-age=0
content-encoding: gzip
server: Microsoft-IIS/10.0
x-pagetype: homepage
content-security-policy: default-src 'unsafe-inline' 'unsafe-eval' https: blob: data:; object-src 'none'; base-uri 'self'; form-action 'self' https://www.facebook.com https://syndication.twitter.com https://platform.twitter.com; report-uri https://60bfaa9a846bec9e32cc07e1.endpoint.csper.io;
content-security-policy-report-only: default-src 'unsafe-inline' 'unsafe-eval' https: blob: data:; object-src 'self'; base-uri 'self'; form-action 'self' https://www.facebook.com https://syndication.twitter.com https://platform.twitter.com;
permissions-policy: fullscreen=(), geolocation=*, autoplay=(), picture-in-picture=()
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
x-frame-options: DENY
x-aspnet-version: 4.0.30319
set-cookie: ASP.NET_SessionId=g2x5g1u2ol3wgou0rnwbkvks; domain=.elliman.com; path=/; secure; HttpOnly; SameSite=Lax
set-cookie: LanguagePreference=eng; expires=Sat, 07-Dec-2024 17:28:36 GMT; path=/; secure
access-control-allow-origin: *
x-powered-by: ASP.NET
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Host
access-control-allow-method: POST,GET,OPTIONS
referrer-policy: no-referrer-when-downgrade