HTTP/1.1 200 OK
Server: nginx
Content-Type: text/html; charset=utf-8
status: 200 OK
link: <https://a0.muscache.com/airbnb/static/packages/common-23c2cea3c151c74f6713a36b145e9d40.css>;rel=preload;as=style,<https://a0.muscache.com/airbnb/static/packages/common_o2.1-05cfd5031934cf9382575696e84becac.css>;rel=preload;as=style,<https://a0.muscache.com/airbnb/static/packages/p3-2aae2820760743b2f1ab4780021bc46f.css>;rel=preload;as=style,<https://a0.muscache.com/airbnb/static/packages/map_search-d55494d5d67cad471188f7e1ce5a67d8.css>;rel=preload;as=style,<https://a0.muscache.com/airbnb/static/airbnb-o2/fonts/Circular_Air-Book-e94c982d7dee01d7e4424157ac9ed819.woff2>;rel=preload;as=font;type=font/woff2;crossorigin=crossorigin,<https://a0.muscache.com/airbnb/static/airbnb-o2/fonts/Circular_Air-Bold-367d5e0d3e7021de6510f7824d33188f.woff2>;rel=preload;as=font;type=font/woff2;crossorigin=crossorigin,<https://a0.muscache.com/airbnb/static/airbnb-o2/fonts/Circular_Air-Light-fa2e694fc4a7eb77a6aecccef03a757d.woff2>;rel=preload;as=font;type=font/woff2;crossorigin=crossorigin,<https://a0.muscache.com/airbnb/static/packages/header_cookie.bundle-e916b13a1432bd6c65a7.js>;rel=preload;as=script
x-frame-options: SAMEORIGIN
cache-control: max-age=1200, public
referrer-policy: same-origin
x-ua-compatible: IE=Edge,chrome=1
etag: "35348fc8a05c315dc6aeafcee650d13d"
server-timing: total;dur=325
content-security-policy: default-src 'self' https: blob:; child-src *; connect-src 'self' https: wss: *.amap.com *.inspectlet.com; font-src 'self' data: *.muscache.com fonts.gstatic.com use.typekit.net; img-src 'self' https: data: *.inspectlet.com; media-src 'self' https:; script-src 'self' 'unsafe-eval' a0.muscache.com cdn.siftscience.com ss.musthird.com t1.musthird.com bat.bing.com connect.facebook.net www.google-analytics.com www.googleadservices.com tpc.googlesyndication.com www.googletagmanager.com a.cdn.intentmedia.net maps.googleapis.com ajax.googleapis.com *.g.doubleclick.net www.google.com www.gstatic.com app.link cdn.branch.io bam.nr-data.net js-agent.newrelic.com sslwidget.criteo.com static.criteo.net dis.criteo.com widget.us.criteo.com *.gbc.criteo.net ethn.io s.yimg.jp api.geetest.com blob: webapi.amap.com restapi.amap.com *.inspectlet.com 'sha256-Gn3R3CfqodkNUs+C4gXoCllPFSnBVuhJSWkVuIlhYzc=' 'unsafe-inline' 'sha256-D9Mz5Ys1Opv52C2fjJU4eS9qDZpG9+Ywz5rQPUyxngQ=' 'sha256-11bVsHJNXc3GrgcH8r4ZM9NwAw3ZwUVDm7MIdtgtPOs='; style-src 'self' https: 'unsafe-inline'; report-uri /tracking/csp?action=show&controller=homepages&report_only=false&req_uuid=a20bb7d9-2212-41e1-85b6-e49028557a84&version=cab012bc7f05e25191538ea802d63cccc52d15dc
content-security-policy-report-only: default-src blob: *; connect-src blob: *; font-src 'self' data: *.muscache.com fonts.gstatic.com use.typekit.net; img-src 'self' https: data: *.inspectlet.com; script-src 'self' 'unsafe-eval' webpack.localhost.airbnb.com jira.airbnb.biz *.g.doubleclick.net cdn.siftscience.com ss.musthird.com t1.musthird.com bat.bing.com connect.facebook.net www.google-analytics.com www.googleadservices.com tpc.googlesyndication.com www.googletagmanager.com maps.googleapis.com ajax.googleapis.com app.link cdn.branch.io bam.nr-data.net js-agent.newrelic.com sslwidget.criteo.com static.criteo.net dis.criteo.com widget.us.criteo.com ethn.io blob: webapi.amap.com restapi.amap.com *.inspectlet.com cdn.ampproject.org/v0.js cdn.ampproject.org/v0/ a.alipayobjects.com gw.alipayobjects.com static.t.agrant.cn t.agrantsem.com ditu.google.com *.muscache.cn *.muscache.com ss.musthird.cn www.google.com www.gstatic.com b92.yahoo.co.jp mc.yandex.ru wcs.naver.net static.matterport.com a.cdn.intentmedia.net s.yimg.jp icm.aexp-static.com checkout.americanexpress.com 'sha256-Gn3R3CfqodkNUs+C4gXoCllPFSnBVuhJSWkVuIlhYzc=' 'unsafe-inline' 'sha256-D9Mz5Ys1Opv52C2fjJU4eS9qDZpG9+Ywz5rQPUyxngQ=' 'sha256-11bVsHJNXc3GrgcH8r4ZM9NwAw3ZwUVDm7MIdtgtPOs='; style-src * blob: 'unsafe-inline'; report-uri /tracking/csp?action=show&controller=homepages&report_only=true&req_uuid=a20bb7d9-2212-41e1-85b6-e49028557a84&version=cab012bc7f05e25191538ea802d63cccc52d15dc
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-envoy-upstream-service-time: 330
Strict-Transport-Security: max-age=10886400; includeSubdomains
X-Server-Name: www.airbnb.com
Via: 1.1 varnish
Content-Length: 672121
Accept-Ranges: bytes
Date: Fri, 04 May 2018 14:41:49 GMT
Via: 1.1 varnish
Age: 997
Connection: keep-alive
Set-Cookie: 07689523f=control; expires=Tue, 03 Jul 2018 14:41:49 GMT; domain=.airbnb.com; path=/
Set-Cookie: a405338e3=treatment; expires=Tue, 03 Jul 2018 14:41:49 GMT; domain=.airbnb.com; path=/
Set-Cookie: 3b689aa21=treatment; expires=Tue, 03 Jul 2018 14:41:49 GMT; domain=.airbnb.com; path=/
Set-Cookie: b3b78300e=treatment; expires=Tue, 03 Jul 2018 14:41:49 GMT; domain=.airbnb.com; path=/
X-Served-By: cache-iad2137-IAD, cache-msp9222-MSP
X-Cache: HIT, MISS
X-Cache-Hits: 1, 0
X-Timer: S1525444910.528722,VS0,VE137
Vary: Accept-Encoding