HTTP/1.1 301 Moved Permanently Server: nginx/1.7.12 Date: Mon, 04 Jul 2016 05:28:22 GMT Content-Type: text/html Content-Length: 185 Connection: keep-alive Location: https://www.airbnb.com/ X-Server-Name: airbnb.tld HTTP/1.1 200 OK Server: nginx/1.7.12 Content-Type: text/html; charset=utf-8 Status: 200 OK Content-Security-Policy: default-src 'self' https:; connect-src 'self' https: ws://localhost.airbnb.com:8888 *.inspectlet.com wss://ws.inspectlet.com http:; font-src 'self' https:; frame-src *; img-src 'self' https: *.inspectlet.com http: data:; media-src 'self' https:; object-src 'self' https:; script-src 'sha256-rTeHUgwQvgsAdqdPK+Taafu8+3sRpjF17wvDjdFy5/o=' 'sha256-8Kp4YIWqA8yhCJaTWnmB7Wv7OjnXnX661ygwccVuDRw=' 'self' https: 'unsafe-eval' 'unsafe-inline' *.inspectlet.com http:; style-src 'self' https: 'unsafe-inline' http:; report-uri /tracking/csp?action=show&controller=homepages&req_uuid=b3e4e389-9181-4370-8c1e-52277c797d38&version=5d846aecc27575ee1b4512d8a3211d784e1bb8eb; X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN ETag: W/"7a14ff6a6531dc10b952044f588796d9" Cache-Control: max-age=0, private, must-revalidate X-UA-Compatible: IE=Edge,chrome=1 Strict-Transport-Security: max-age=10886400; includeSubdomains X-Server-Name: www.airbnb.com Date: Mon, 04 Jul 2016 05:28:23 GMT Connection: keep-alive Set-Cookie: bev=1467610103_%2BHfp5yx%2Bv17r7o%2Ba; domain=.airbnb.com; path=/; expires=Wed, 04-Jul-2018 05:28:23 GMT; secure Set-Cookie: _csrf_token=V4%24.airbnb.com%24YBdffrnOstQ%24Zs4mFcBs90iuLjiWdpBWD1FRUgVDSoKps4tyutydKzc%3D; domain=.airbnb.com; path=/; secure Set-Cookie: _user_attributes=%7B%22curr%22%3A%22USD%22%2C%22guest_exchange%22%3A1.0%2C%22device_profiling_session_id%22%3A%221467610103--4cab0577c07c3082748b4c41%22%7D; domain=.airbnb.com; path=/; secure Set-Cookie: flags=268435456; domain=.airbnb.com; path=/; secure Akamai-Country: US