HTTP/2 200 
server: nginx
content-type: text/html; charset=utf-8
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-ua-compatible: IE=Edge,chrome=1
cache-control: max-age=1200, public, private
content-security-policy: child-src blob:; connect-src 'self' https: wss://ws.airbnb.com https://netverify.com https://*.netverify.com *.inspectlet.com wss: *.amap.com https://*.mapbox.com; default-src 'self' https: blob:; font-src 'self' data: https://*.muscache.com fonts.gstatic.com https://use.typekit.net; frame-ancestors *; frame-src *; img-src 'self' https: data: *.inspectlet.com https://*.mapbox.com; media-src 'self' https: blob:; script-src 'self' 'unsafe-eval' https://a0.muscache.com https://cdn.siftscience.com https://ss.musthird.com https://t1.musthird.com https://bat.bing.com https://connect.facebook.net https://www.google-analytics.com https://www.googleadservices.com https://tpc.googlesyndication.com https://www.googletagmanager.com https://a.cdn.intentmedia.net https://maps.googleapis.com https://ajax.googleapis.com https://*.g.doubleclick.net https://www.google.com https://www.gstatic.com https://smartlock.google.com https://accounts.google.com https://app.link https://cdn.branch.io https://api.branch.io https://bam.nr-data.net https://js-agent.newrelic.com https://sslwidget.criteo.com https://static.criteo.net https://dis.criteo.com https://widget.us.criteo.com https://*.gbc.criteo.net https://ethn.io https://s.yimg.jp https://api.geetest.com https://cdn.ampproject.org https://storage.googleapis.com/workbox-cdn/ https://tagmanager.google.com https://pay.google.com 'sha256-rAm9O8JPZLtQmd84zMDzhsG5q35JscESxxcaFL7+DDc=' 'sha256-ck0NYnSq6evDrSU3QAgDAso6GSMHXE8SDlqTKWnxpKI=' 'sha256-9ZdLPFhnEQLHZCKEYdkKXUj5at+zztFTTILAt3y65+0=' 'sha256-anj/wlPABxVCuYmPnySD3CBbxtX3l2p5OQbQvHP9FsA=' 'sha256-z/PgjUJGRJZStGpss10ysadEOKr7j9asc3ShwIGPVHU=' https://netverify.com https://*.netverify.com https://icm.aexp-static.com https://qicm.americanexpress.com https://qwww435.americanexpress.com https://checkout.americanexpress.com https://www.paypalobjects.com https://c.paypal.com https://www.paypal.com *.inspectlet.com blob: https://webapi.amap.com https://restapi.amap.com https://*.mapbox.com; style-src 'self' https: 'unsafe-inline' https://*.mapbox.com; worker-src 'self'; report-uri /tracking/csp?controller=core-guest-loop&action=%2F&req_uuid=f2be0740-7f96-473b-a2db-f01b60610d6b&version=sha%3D555582cdd4bb&report_only=false; report-to /tracking/csp?controller=core-guest-loop&action=%2F&req_uuid=f2be0740-7f96-473b-a2db-f01b60610d6b&version=sha%3D555582cdd4bb&report_only=false
link: ;rel=preload;as=style,;rel=preload;as=style,;rel=preload;as=font;type=font/woff2;crossorigin=crossorigin,;rel=preload;as=font;type=font/woff2;crossorigin=crossorigin,;rel=preload;as=font;type=font/woff2;crossorigin=crossorigin
etag: W/"3e75a-Htc4cTBwTPYFgdcfsra0G8OoTLM"
content-encoding: gzip
x-envoy-upstream-service-time: 272
strict-transport-security: max-age=10886400; includeSubdomains
x-server-name: www.airbnb.com
accept-ranges: bytes
accept-ranges: bytes
via: 1.1 varnish
age: 0
accept-ranges: bytes
accept-ranges: bytes
date: Fri, 26 Jul 2019 19:55:49 GMT
via: 1.1 varnish
age: 0
set-cookie: cdn_exp_07b8c49650a9597d4=treatment; expires=Tue, 24 Sep 2019 19:55:49 GMT; domain=.airbnb.com; path=/
set-cookie: cdn_exp_386c0b4d37dbea98e=control; expires=Tue, 24 Sep 2019 19:55:49 GMT; domain=.airbnb.com; path=/
set-cookie: cdn_exp_6006dbfd9073e1a4a=treatment; expires=Tue, 24 Sep 2019 19:55:49 GMT; domain=.airbnb.com; path=/
set-cookie: 016951b48=treatment; expires=Tue, 24 Sep 2019 19:55:49 GMT; domain=.airbnb.com; path=/
x-served-by: cache-bwi5120-BWI, cache-dca17753-DCA
x-cache: MISS, MISS
x-cache-hits: 0, 0
x-timer: S1564170950.561608,VS0,VE287
vary: Accept-Encoding
set-cookie: cache_state=0; domain=.airbnb.com; path=/;  Secure