Report for airbnb.com Generated 2017-10-05T10:33:35Z

transparency.airbnb.com

https://transparency.airbnb.com/ source code | headers | screenshot

200 OK  
Cache-Control max-age=600, must-revalidate
Cf-Ray 3a8fb89afba614a3-AMS
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 10:33:10 GMT
Link <https://www.airbnbcitizen.com/wp-json/>; rel="https://api.w.org/" <https://www.airbnbcitizen.com/?p=1955>; rel=shortlink
Server cloudflare-nginx
Set-Cookie __cfduid=d62c5aa47d2986902360665deb09818911507199589; expires=Fri, 05-Oct-18 10:33:09 GMT; path=/; domain=.airbnbcitizen.com; HttpOnly
Status 200
Strict-Transport-Security max-age=31536000; includeSubDomains
Vary Accept-Encoding,Cookie
X-Cache HIT: 2
X-Cache-Group normal
X-Cacheable SHORT
X-Content-Type-Options nosniff
X-Pass-Why
X-Type default
workday.airbnb.com

http://workday.airbnb.com/ source code | headers | screenshot

200 OK  
Content-Length 544
Content-Type text/html
Date Thu, 05 Oct 2017 10:32:35 GMT
Etag "49235699f97128eb051caed65deacd5e"
Last-Modified Thu, 25 Sep 2014 16:28:00 GMT
Server AmazonS3
X-Amz-Id-2 NMobRMx9YFBYRHmHZEQYSsv1JJzwGdS3YudQrUBXz+CSfLQBxezYYz1+BT1d8zoiKg1mKKNHcgI=
X-Amz-Request-Id AED9FEFC0FA1B51C
www.airbnb.com

http://www.airbnb.com/ source code | headers | screenshot

200 OK  
Accept-Ranges bytes
Age 1082
Cache-Control max-age=1200, public
Content-Length 646769
Content-Security-Policy default-src 'self' https: blob:; child-src *; connect-src 'self' https: wss: *.amap.com *.inspectlet.com; font-src 'self' data: *.muscache.com fonts.gstatic.com use.typekit.net; img-src 'self' https: data: *.inspectlet.com; media-src 'self' https:; script-src 'self' 'unsafe-eval' 'unsafe-inline' a0.muscache.com cdn.siftscience.com bat.bing.com connect.facebook.net www.google-analytics.com www.googleadservices.com tpc.googlesyndication.com www.googletagmanager.com maps.googleapis.com ajax.googleapis.com app.link cdn.branch.io bam.nr-data.net js-agent.newrelic.com sslwidget.criteo.com static.criteo.net dis.criteo.com widget.us.criteo.com ethn.io blob: webapi.amap.com restapi.amap.com *.inspectlet.com https: 'sha256-Q5XE16X5zAhH/wvkJBoUIyRz1majl7a7U0JAZuQDRMc=' 'sha256-11bVsHJNXc3GrgcH8r4ZM9NwAw3ZwUVDm7MIdtgtPOs='; style-src 'self' https: 'unsafe-inline'; report-uri /tracking/csp?action=show&controller=homepages&report_only=false&req_uuid=4b82a5fb-d675-46ea-8150-275d00576e6e&version=cd31aa1ec53508bbc924787c2c2917c494c3f589
Content-Type text/html; charset=utf-8
Date Thu, 05 Oct 2017 10:33:13 GMT
Etag "77a081dcdfd4a83bb24f0028a2169ebd"
Fastly-Debug-Digest fe63c32e4ba236607a1c2b08b05d103d63d683dc97864fcfe0b2c9c100c1e4ee
Link <https://a0.muscache.com/airbnb/static/packages/common-2819e1a761841c940762b61c81934adc.css>;rel=preload;as=style,<https://a0.muscache.com/airbnb/static/packages/common_o2.1-3642e3083c323edc15904078d1315474.css>;rel=preload;as=style,<https://a0.muscache.com/airbnb/static/packages/map_search-e300aa9e81cfa7f857ccb15b62924532.css>;rel=preload;as=style,<https://a0.muscache.com/airbnb/static/packages/spa_react_dates_overrides-362ec28977f18aa6a83bd1ba3254397d.css>;rel=preload;as=style,<https://a0.muscache.com/airbnb/static/airbnb-o2/fonts/Circular_Air-Book-e94c982d7dee01d7e4424157ac9ed819.woff2>;rel=preload;as=font;type=font/woff2;crossorigin=crossorigin,<https://a0.muscache.com/airbnb/static/airbnb-o2/fonts/Circular_Air-Bold-367d5e0d3e7021de6510f7824d33188f.woff2>;rel=preload;as=font;type=font/woff2;crossorigin=crossorigin,<https://a0.muscache.com/airbnb/static/airbnb-o2/fonts/Circular_Air-Light-199f6f9d92c4f5f0cabe9ce7765467a9.woff2>;rel=preload;as=font;type=font/woff2;crossorigin=crossorigin,<https://a0.muscache.com/airbnb/static/packages/header_cookie.bundle-aa3d876ed11671f31a4e.js>;rel=preload;as=script
Server nginx/1.7.12
Set-Cookie xplwp2=control; expires=Mon, 04 Dec 2017 10:33:13 GMT; domain=.airbnb.com; path=/
Status 200 200 OK
Strict-Transport-Security max-age=10886400; includeSubdomains
Vary Accept-Encoding
Via 1.1 varnish 1.1 varnish
X-Cache HIT, HIT
X-Cache-Hits 1, 1
X-Content-Type-Options nosniff
X-Frame-Options SAMEORIGIN
X-Served-By cache-iad2131-IAD, cache-cdg8730-CDG
X-Server-Name www.airbnb.com
X-Timer S1507199593.231530,VS0,VE4
X-Ua-Compatible IE=Edge,chrome=1
X-Xss-Protection 1; mode=block
www.airbnb.com

https://www.airbnb.com/ source code | headers | screenshot

200 OK  
Cache-Control public, max-age=90
Content-Security-Policy default-src 'self' https: blob:; child-src *; connect-src 'self' https: wss: *.amap.com *.inspectlet.com; font-src 'self' data: *.muscache.com fonts.gstatic.com use.typekit.net; img-src 'self' https: data: *.inspectlet.com; media-src 'self' https:; script-src 'self' 'unsafe-eval' 'unsafe-inline' a0.muscache.com cdn.siftscience.com bat.bing.com connect.facebook.net www.google-analytics.com www.googleadservices.com tpc.googlesyndication.com www.googletagmanager.com maps.googleapis.com ajax.googleapis.com app.link cdn.branch.io bam.nr-data.net js-agent.newrelic.com sslwidget.criteo.com static.criteo.net dis.criteo.com widget.us.criteo.com ethn.io blob: webapi.amap.com restapi.amap.com *.inspectlet.com https: 'sha256-Q5XE16X5zAhH/wvkJBoUIyRz1majl7a7U0JAZuQDRMc=' 'sha256-rfTud2kTm0UjtJ6PqxcrkglfrUD4H8WCcS9mCs6PJ5s='; style-src 'self' https: 'unsafe-inline'; report-uri /tracking/csp?action=show&controller=homepages&report_only=false&req_uuid=c8916f3b-4e41-4799-b1a2-e091e0cb1ece&version=cd31aa1ec53508bbc924787c2c2917c494c3f589
Content-Type text/html; charset=utf-8
Date Thu, 05 Oct 2017 10:33:12 GMT
Etag W/"c5c1555ff418dd288b8d32cfb0b89a82"
Link <https://a0.muscache.com/airbnb/static/packages/common-2819e1a761841c940762b61c81934adc.css>;rel=preload;as=style,<https://a0.muscache.com/airbnb/static/packages/common_o2.1-3642e3083c323edc15904078d1315474.css>;rel=preload;as=style,<https://a0.muscache.com/airbnb/static/packages/map_search-e300aa9e81cfa7f857ccb15b62924532.css>;rel=preload;as=style,<https://a0.muscache.com/airbnb/static/packages/spa_react_dates_overrides-362ec28977f18aa6a83bd1ba3254397d.css>;rel=preload;as=style,<https://a0.muscache.com/airbnb/static/airbnb-o2/fonts/Circular_Air-Book-e94c982d7dee01d7e4424157ac9ed819.woff2>;rel=preload;as=font;type=font/woff2;crossorigin=crossorigin,<https://a0.muscache.com/airbnb/static/airbnb-o2/fonts/Circular_Air-Bold-367d5e0d3e7021de6510f7824d33188f.woff2>;rel=preload;as=font;type=font/woff2;crossorigin=crossorigin,<https://a0.muscache.com/airbnb/static/airbnb-o2/fonts/Circular_Air-Light-199f6f9d92c4f5f0cabe9ce7765467a9.woff2>;rel=preload;as=font;type=font/woff2;crossorigin=crossorigin,<https://a0.muscache.com/airbnb/static/packages/header_cookie.bundle-aa3d876ed11671f31a4e.js>;rel=preload;as=script
Server nginx/1.7.12
Set-Cookie xplwp2=control; expires=Mon, 04-Dec-2017 10:33:12 GMT; path=/; domain=.airbnb.com.au
Status 200 200 OK
Strict-Transport-Security max-age=10886400; includeSubdomains
Vary Accept-Encoding
X-Content-Type-Options nosniff
X-Frame-Options SAMEORIGIN
X-Ua-Compatible IE=Edge,chrome=1
X-Xss-Protection 1; mode=block
www.samara.airbnb.com

https://www.samara.airbnb.com/ source code | headers | screenshot

200 OK  
Accept-Ranges bytes
Age 0
Cache-Control no-store, max-age=0, private, must-revalidate
Content-Security-Policy default-src 'self' https: blob:; child-src *; connect-src 'self' https: wss: *.amap.com *.inspectlet.com; font-src 'self' data: *.muscache.com fonts.gstatic.com use.typekit.net; img-src 'self' https: data: *.inspectlet.com; media-src 'self' https:; script-src 'self' 'unsafe-eval' 'unsafe-inline' a0.muscache.com cdn.siftscience.com bat.bing.com connect.facebook.net www.google-analytics.com www.googleadservices.com tpc.googlesyndication.com www.googletagmanager.com maps.googleapis.com ajax.googleapis.com app.link cdn.branch.io bam.nr-data.net js-agent.newrelic.com sslwidget.criteo.com static.criteo.net dis.criteo.com widget.us.criteo.com ethn.io blob: webapi.amap.com restapi.amap.com *.inspectlet.com https: 'sha256-Q5XE16X5zAhH/wvkJBoUIyRz1majl7a7U0JAZuQDRMc=' 'sha256-11bVsHJNXc3GrgcH8r4ZM9NwAw3ZwUVDm7MIdtgtPOs='; style-src 'self' https: 'unsafe-inline'; report-uri /tracking/csp?action=belong_anywhere&controller=info&report_only=false&req_uuid=70415648-ef01-46b2-9868-e26242a6ff5f&version=cd31aa1ec53508bbc924787c2c2917c494c3f589
Content-Type text/html; charset=utf-8
Date Thu, 05 Oct 2017 10:32:27 GMT
Edge-Control no-store
Etag "de8cd108266101079881e1587976b59c"
Fastly-Debug-Digest 8a8a1ada793e2733768f3f569da43b671057f547c583c3a73aaf99d5300d1c11
Link <https://a0.muscache.com/airbnb/static/packages/common-2819e1a761841c940762b61c81934adc.css>;rel=preload;as=style,<https://a0.muscache.com/airbnb/static/packages/common_o2.1-3642e3083c323edc15904078d1315474.css>;rel=preload;as=style,<https://a0.muscache.com/airbnb/static/landing_pages/vr_index-ea5a49831db25ae3c12c89034f9b6329.css>;rel=preload;as=style,<https://a0.muscache.com/airbnb/static/airbnb-o2/fonts/Circular_Air-Book-e94c982d7dee01d7e4424157ac9ed819.woff2>;rel=preload;as=font;type=font/woff2;crossorigin=crossorigin,<https://a0.muscache.com/airbnb/static/airbnb-o2/fonts/Circular_Air-Bold-367d5e0d3e7021de6510f7824d33188f.woff2>;rel=preload;as=font;type=font/woff2;crossorigin=crossorigin,<https://a0.muscache.com/airbnb/static/airbnb-o2/fonts/Circular_Air-Light-199f6f9d92c4f5f0cabe9ce7765467a9.woff2>;rel=preload;as=font;type=font/woff2;crossorigin=crossorigin,<https://a0.muscache.com/airbnb/static/packages/header_cookie.bundle-aa3d876ed11671f31a4e.js>;rel=preload;as=script
Server nginx/1.7.12
Set-Cookie bev=1507199546_FHVad3pN7JHRvnt4; domain=.airbnb.com; path=/; expires=Sat, 05-Oct-2019 10:32:26 GMT; secure _csrf_token=V4%24.airbnb.com%241FAMgpiuRLQ%24pqQR6DSBaDX5AKctb40ySiBItVdUSPKwfMVFqtuUXoU%3D; domain=.airbnb.com; path=/; secure _user_attributes=%7B%22curr%22%3A%22EUR%22%2C%22guest_exchange%22%3A0.85004%2C%22device_profiling_session_id%22%3A%221507199547--e75be237c335e785a4da381c%22%2C%22giftcard_profiling_session_id%22%3A%221507199547--66aedb0ddc58a5bf6983cafc%22%2C%22reservation_profiling_session_id%22%3A%221507199547--e94e318d00c76a05e96e837d%22%7D; domain=.airbnb.com; path=/; expires=Sat, 05-Oct-2019 10:32:27 GMT; secure flags=268435456; domain=.airbnb.com; path=/; secure
Status 200 200 OK
Strict-Transport-Security max-age=10886400; includeSubdomains
Vary Accept-Encoding
Via 1.1 varnish 1.1 varnish
X-Cache MISS, MISS
X-Cache-Hits 0, 0
X-Content-Type-Options nosniff
X-Frame-Options SAMEORIGIN
X-Served-By cache-iad2131-IAD, cache-cdg8734-CDG
X-Server-Name www.airbnb.com
X-Timer S1507199547.851073,VS0,VE456
X-Ua-Compatible IE=Edge,chrome=1
X-Xss-Protection 1; mode=block
www.samara.airbnb.com

http://www.samara.airbnb.com/ source code | headers | screenshot

200 OK  
Age 44
Content-Length 5192
Content-Type text/html
Date Tue, 15 Aug 2017 23:24:49 GMT
Etag "bbb923fb7e46c5dafb8024596c588f13"
Last-Modified Tue, 01 Aug 2017 22:30:31 GMT
Server AmazonS3
Status 200
Via 1.1 dbbbaf3fb6c33bdccb180e35849e473d.cloudfront.net (CloudFront)
X-Amz-Cf-Id VhnEhZIthMUcB3Yes41GoEWGBhW4bbj6oqfraJ8w-C8sWsZZN8QzeA==
X-Cache Hit from cloudfront
xx.airbnb.com

http://xx.airbnb.com/ source code | headers | screenshot

200 OK  
Cache-Control public, max-age=1179
Content-Security-Policy default-src 'self' https: blob:; child-src *; connect-src 'self' https: wss: *.amap.com *.inspectlet.com; font-src 'self' data: *.muscache.com fonts.gstatic.com use.typekit.net; img-src 'self' https: data: *.inspectlet.com; media-src 'self' https:; script-src 'self' 'unsafe-eval' 'unsafe-inline' a0.muscache.com cdn.siftscience.com bat.bing.com connect.facebook.net www.google-analytics.com www.googleadservices.com tpc.googlesyndication.com www.googletagmanager.com maps.googleapis.com ajax.googleapis.com app.link cdn.branch.io bam.nr-data.net js-agent.newrelic.com sslwidget.criteo.com static.criteo.net dis.criteo.com widget.us.criteo.com ethn.io blob: webapi.amap.com restapi.amap.com *.inspectlet.com https: 'sha256-Q5XE16X5zAhH/wvkJBoUIyRz1majl7a7U0JAZuQDRMc=' 'sha256-rfTud2kTm0UjtJ6PqxcrkglfrUD4H8WCcS9mCs6PJ5s='; style-src 'self' https: 'unsafe-inline'; report-uri /tracking/csp?action=show&controller=homepages&report_only=false&req_uuid=473c23c0-1f91-44de-8b70-de49b16e114f&version=cd31aa1ec53508bbc924787c2c2917c494c3f589
Content-Type text/html; charset=utf-8
Date Thu, 05 Oct 2017 10:32:43 GMT
Etag W/"530d46caa0eb705ee95e91fd9ffc9fff"
Link <https://a0.muscache.com/airbnb/static/packages/common-2819e1a761841c940762b61c81934adc.css>;rel=preload;as=style,<https://a0.muscache.com/airbnb/static/packages/common_o2.1-3642e3083c323edc15904078d1315474.css>;rel=preload;as=style,<https://a0.muscache.com/airbnb/static/packages/map_search-e300aa9e81cfa7f857ccb15b62924532.css>;rel=preload;as=style,<https://a0.muscache.com/airbnb/static/packages/spa_react_dates_overrides-362ec28977f18aa6a83bd1ba3254397d.css>;rel=preload;as=style,<https://a0.muscache.com/airbnb/static/airbnb-o2/fonts/Circular_Air-Book-e94c982d7dee01d7e4424157ac9ed819.woff2>;rel=preload;as=font;type=font/woff2;crossorigin=crossorigin,<https://a0.muscache.com/airbnb/static/airbnb-o2/fonts/Circular_Air-Bold-367d5e0d3e7021de6510f7824d33188f.woff2>;rel=preload;as=font;type=font/woff2;crossorigin=crossorigin,<https://a0.muscache.com/airbnb/static/airbnb-o2/fonts/Circular_Air-Light-199f6f9d92c4f5f0cabe9ce7765467a9.woff2>;rel=preload;as=font;type=font/woff2;crossorigin=crossorigin,<https://a0.muscache.com/airbnb/static/packages/header_cookie.bundle-aa3d876ed11671f31a4e.js>;rel=preload;as=script
Server nginx/1.7.12
Set-Cookie bev=1507199561_BmBgwIunG34S0YzZ; domain=.airbnb.com; path=/; expires=Sat, 05-Oct-2019 10:32:41 GMT; secure _csrf_token=V4%24.airbnb.com%24YScL2Xx-zRs%24VVA0Jl1IqEP8NScfTS2XFE49kaHHIe2N49i31vY0Vf0%3D; domain=.airbnb.com; path=/; secure _user_attributes=%7B%22curr%22%3A%22UYU%22%2C%22guest_exchange%22%3A29.09446%2C%22device_profiling_session_id%22%3A%221507199563--4eca0d46289271422a304c31%22%2C%22giftcard_profiling_session_id%22%3A%221507199563--4a2c4a3594f67f45a5567306%22%2C%22reservation_profiling_session_id%22%3A%221507199563--5e26a1b12b36731013102d1e%22%7D; domain=.airbnb.com; path=/; expires=Sat, 05-Oct-2019 10:32:43 GMT; secure flags=268435456; domain=.airbnb.com; path=/; secure xplwp2=control; expires=Mon, 04-Dec-2017 10:32:43 GMT; path=/; domain=.airbnb.com
Status 200 200 OK
Strict-Transport-Security max-age=10886400; includeSubdomains
Vary Accept-Encoding
X-Content-Type-Options nosniff
X-Frame-Options SAMEORIGIN
X-Ua-Compatible IE=Edge,chrome=1
X-Xss-Protection 1; mode=block
xx.airbnb.com

https://xx.airbnb.com/ source code | headers | screenshot

200 OK  
Cache-Control public, max-age=1174
Connection keep-alive Transfer-Encoding
Content-Security-Policy default-src 'self' https: blob:; child-src *; connect-src 'self' https: wss: *.amap.com *.inspectlet.com; font-src 'self' data: *.muscache.com fonts.gstatic.com use.typekit.net; img-src 'self' https: data: *.inspectlet.com; media-src 'self' https:; script-src 'self' 'unsafe-eval' 'unsafe-inline' a0.muscache.com cdn.siftscience.com bat.bing.com connect.facebook.net www.google-analytics.com www.googleadservices.com tpc.googlesyndication.com www.googletagmanager.com maps.googleapis.com ajax.googleapis.com app.link cdn.branch.io bam.nr-data.net js-agent.newrelic.com sslwidget.criteo.com static.criteo.net dis.criteo.com widget.us.criteo.com ethn.io blob: webapi.amap.com restapi.amap.com *.inspectlet.com https: 'sha256-Q5XE16X5zAhH/wvkJBoUIyRz1majl7a7U0JAZuQDRMc=' 'sha256-rfTud2kTm0UjtJ6PqxcrkglfrUD4H8WCcS9mCs6PJ5s='; style-src 'self' https: 'unsafe-inline'; report-uri /tracking/csp?action=show&controller=homepages&report_only=false&req_uuid=473c23c0-1f91-44de-8b70-de49b16e114f&version=cd31aa1ec53508bbc924787c2c2917c494c3f589
Content-Type text/html; charset=utf-8
Date Thu, 05 Oct 2017 10:32:48 GMT
Etag W/"530d46caa0eb705ee95e91fd9ffc9fff"
Link <https://a0.muscache.com/airbnb/static/packages/common-2819e1a761841c940762b61c81934adc.css>;rel=preload;as=style,<https://a0.muscache.com/airbnb/static/packages/common_o2.1-3642e3083c323edc15904078d1315474.css>;rel=preload;as=style,<https://a0.muscache.com/airbnb/static/packages/map_search-e300aa9e81cfa7f857ccb15b62924532.css>;rel=preload;as=style,<https://a0.muscache.com/airbnb/static/packages/spa_react_dates_overrides-362ec28977f18aa6a83bd1ba3254397d.css>;rel=preload;as=style,<https://a0.muscache.com/airbnb/static/airbnb-o2/fonts/Circular_Air-Book-e94c982d7dee01d7e4424157ac9ed819.woff2>;rel=preload;as=font;type=font/woff2;crossorigin=crossorigin,<https://a0.muscache.com/airbnb/static/airbnb-o2/fonts/Circular_Air-Bold-367d5e0d3e7021de6510f7824d33188f.woff2>;rel=preload;as=font;type=font/woff2;crossorigin=crossorigin,<https://a0.muscache.com/airbnb/static/airbnb-o2/fonts/Circular_Air-Light-199f6f9d92c4f5f0cabe9ce7765467a9.woff2>;rel=preload;as=font;type=font/woff2;crossorigin=crossorigin,<https://a0.muscache.com/airbnb/static/packages/header_cookie.bundle-aa3d876ed11671f31a4e.js>;rel=preload;as=script
Server nginx/1.7.12
Set-Cookie xplwp2=control; expires=Mon, 04-Dec-2017 10:32:48 GMT; path=/; domain=.airbnb.com
Status 200 OK
Strict-Transport-Security max-age=10886400; includeSubdomains
Transfer-Encoding chunked
Vary Accept-Encoding
X-Content-Type-Options nosniff
X-Frame-Options SAMEORIGIN
X-Ua-Compatible IE=Edge,chrome=1
X-Xss-Protection 1; mode=block
zh-t.airbnb.com

https://zh-t.airbnb.com/ source code | headers | screenshot

200 OK  
Cache-Control public, max-age=285
Connection keep-alive Transfer-Encoding
Content-Security-Policy default-src 'self' https: blob:; child-src *; connect-src 'self' https: wss: *.amap.com *.inspectlet.com; font-src 'self' data: *.muscache.com fonts.gstatic.com use.typekit.net; img-src 'self' https: data: *.inspectlet.com; media-src 'self' https:; script-src 'self' 'unsafe-eval' 'unsafe-inline' a0.muscache.com cdn.siftscience.com bat.bing.com connect.facebook.net www.google-analytics.com www.googleadservices.com tpc.googlesyndication.com www.googletagmanager.com maps.googleapis.com ajax.googleapis.com app.link cdn.branch.io bam.nr-data.net js-agent.newrelic.com sslwidget.criteo.com static.criteo.net dis.criteo.com widget.us.criteo.com ethn.io blob: webapi.amap.com restapi.amap.com *.inspectlet.com https: 'sha256-Q5XE16X5zAhH/wvkJBoUIyRz1majl7a7U0JAZuQDRMc=' 'sha256-rfTud2kTm0UjtJ6PqxcrkglfrUD4H8WCcS9mCs6PJ5s='; style-src 'self' https: 'unsafe-inline'; report-uri /tracking/csp?action=show&controller=homepages&report_only=false&req_uuid=df07524c-ff49-4870-8201-e521652ca83f&version=cd31aa1ec53508bbc924787c2c2917c494c3f589
Content-Type text/html; charset=utf-8
Date Thu, 05 Oct 2017 10:32:04 GMT
Etag W/"72fd97708a2b3d0231c1563677b47e22"
Link <https://a0.muscache.com/airbnb/static/packages/common-2819e1a761841c940762b61c81934adc.css>;rel=preload;as=style,<https://a0.muscache.com/airbnb/static/packages/common_o2.1-3642e3083c323edc15904078d1315474.css>;rel=preload;as=style,<https://a0.muscache.com/airbnb/static/packages/map_search-e300aa9e81cfa7f857ccb15b62924532.css>;rel=preload;as=style,<https://a0.muscache.com/airbnb/static/packages/spa_react_dates_overrides-362ec28977f18aa6a83bd1ba3254397d.css>;rel=preload;as=style,<https://a0.muscache.com/airbnb/static/airbnb-o2/fonts/Circular_Air-Book-e94c982d7dee01d7e4424157ac9ed819.woff2>;rel=preload;as=font;type=font/woff2;crossorigin=crossorigin,<https://a0.muscache.com/airbnb/static/airbnb-o2/fonts/Circular_Air-Bold-367d5e0d3e7021de6510f7824d33188f.woff2>;rel=preload;as=font;type=font/woff2;crossorigin=crossorigin,<https://a0.muscache.com/airbnb/static/airbnb-o2/fonts/Circular_Air-Light-199f6f9d92c4f5f0cabe9ce7765467a9.woff2>;rel=preload;as=font;type=font/woff2;crossorigin=crossorigin,<https://a0.muscache.com/airbnb/static/packages/header_cookie.bundle-aa3d876ed11671f31a4e.js>;rel=preload;as=script
Server nginx/1.7.12
Set-Cookie xplwp2=new_marquee; expires=Mon, 04-Dec-2017 10:32:04 GMT; path=/; domain=.airbnb.com
Status 200 OK
Strict-Transport-Security max-age=10886400; includeSubdomains
Transfer-Encoding chunked
Vary Accept-Encoding
X-Content-Type-Options nosniff
X-Frame-Options SAMEORIGIN
X-Ua-Compatible IE=Edge,chrome=1
X-Xss-Protection 1; mode=block
zh-t.airbnb.com

http://zh-t.airbnb.com/ source code | headers | screenshot

200 OK  
Cache-Control public, max-age=1200
Content-Security-Policy default-src 'self' https: blob:; child-src *; connect-src 'self' https: wss: *.amap.com *.inspectlet.com; font-src 'self' data: *.muscache.com fonts.gstatic.com use.typekit.net; img-src 'self' https: data: *.inspectlet.com; media-src 'self' https:; script-src 'self' 'unsafe-eval' 'unsafe-inline' a0.muscache.com cdn.siftscience.com bat.bing.com connect.facebook.net www.google-analytics.com www.googleadservices.com tpc.googlesyndication.com www.googletagmanager.com maps.googleapis.com ajax.googleapis.com app.link cdn.branch.io bam.nr-data.net js-agent.newrelic.com sslwidget.criteo.com static.criteo.net dis.criteo.com widget.us.criteo.com ethn.io a.alipayobjects.com gw.alipayobjects.com cn-ali.muscache.com static.agrant.com.cn t.agrantsem.com z0.muscache.com ditu.google.com blob: webapi.amap.com restapi.amap.com *.inspectlet.com https: 'sha256-/bgBcErzbHm6cxZ0qHzeEA1aDn4GxgLJcfTJtfKMrIo=' 'sha256-rfTud2kTm0UjtJ6PqxcrkglfrUD4H8WCcS9mCs6PJ5s='; style-src 'self' https: 'unsafe-inline'; report-uri /tracking/csp?action=show&controller=homepages&report_only=false&req_uuid=86d2f959-57e1-4fc4-b94c-ed1f36d646d7&version=cd31aa1ec53508bbc924787c2c2917c494c3f589
Content-Type text/html; charset=utf-8
Date Thu, 05 Oct 2017 10:32:24 GMT
Etag W/"7ccf03fffdacfb62f65630db9e0a9fe8"
Link <https://z0.muscache.com/airbnb/static/packages/common-2819e1a761841c940762b61c81934adc.css>;rel=preload;as=style,<https://z0.muscache.com/airbnb/static/packages/common_o2.1-3642e3083c323edc15904078d1315474.css>;rel=preload;as=style,<https://z0.muscache.com/airbnb/static/packages/map_search-e300aa9e81cfa7f857ccb15b62924532.css>;rel=preload;as=style,<https://z0.muscache.com/airbnb/static/packages/spa_react_dates_overrides-362ec28977f18aa6a83bd1ba3254397d.css>;rel=preload;as=style,<https://z0.muscache.com/airbnb/static/airbnb-o2/fonts/Circular_Air-Book-e94c982d7dee01d7e4424157ac9ed819.woff2>;rel=preload;as=font;type=font/woff2;crossorigin=crossorigin,<https://z0.muscache.com/airbnb/static/airbnb-o2/fonts/Circular_Air-Bold-367d5e0d3e7021de6510f7824d33188f.woff2>;rel=preload;as=font;type=font/woff2;crossorigin=crossorigin,<https://z0.muscache.com/airbnb/static/airbnb-o2/fonts/Circular_Air-Light-199f6f9d92c4f5f0cabe9ce7765467a9.woff2>;rel=preload;as=font;type=font/woff2;crossorigin=crossorigin,<https://z0.muscache.com/airbnb/static/packages/header_cookie.bundle-aa3d876ed11671f31a4e.js>;rel=preload;as=script
Server nginx/1.7.12
Set-Cookie bev=1507199543_LEQCf9jzUiWTwJ0S; domain=.airbnb.com; path=/; expires=Sat, 05-Oct-2019 10:32:23 GMT; secure _csrf_token=V4%24.airbnb.com%242qth8EWuZrw%24cCtEXapQO7VBRXp1vlZ3gdBjRVou4SfxUwV8WVn7nLc%3D; domain=.airbnb.com; path=/; secure _user_attributes=%7B%22curr%22%3A%22CNY%22%2C%22guest_exchange%22%3A6.65269%2C%22device_profiling_session_id%22%3A%221507199544--7219ca211d53ad90514b54e3%22%2C%22giftcard_profiling_session_id%22%3A%221507199544--c434849c965a5331fb04d88f%22%2C%22reservation_profiling_session_id%22%3A%221507199544--543bfcbe2173c3af4882ec43%22%7D; domain=.airbnb.com; path=/; expires=Sat, 05-Oct-2019 10:32:24 GMT; secure flags=268435456; domain=.airbnb.com; path=/; secure xplwp2=control; expires=Mon, 04-Dec-2017 10:32:24 GMT; path=/; domain=.airbnb.com
Status 200 200 OK
Strict-Transport-Security max-age=10886400; includeSubdomains
Vary Accept-Encoding
X-Content-Type-Options nosniff
X-Frame-Options SAMEORIGIN
X-Ua-Compatible IE=Edge,chrome=1
X-Xss-Protection 1; mode=block
zh-t.m.airbnb.com

https://zh-t.m.airbnb.com/ source code | headers | screenshot

200 OK  
Accept-Ranges bytes
Age 375
Cache-Control max-age=1200, public
Content-Length 646769
Content-Security-Policy default-src 'self' https: blob:; child-src *; connect-src 'self' https: wss: *.amap.com *.inspectlet.com; font-src 'self' data: *.muscache.com fonts.gstatic.com use.typekit.net; img-src 'self' https: data: *.inspectlet.com; media-src 'self' https:; script-src 'self' 'unsafe-eval' 'unsafe-inline' a0.muscache.com cdn.siftscience.com bat.bing.com connect.facebook.net www.google-analytics.com www.googleadservices.com tpc.googlesyndication.com www.googletagmanager.com maps.googleapis.com ajax.googleapis.com app.link cdn.branch.io bam.nr-data.net js-agent.newrelic.com sslwidget.criteo.com static.criteo.net dis.criteo.com widget.us.criteo.com ethn.io blob: webapi.amap.com restapi.amap.com *.inspectlet.com https: 'sha256-Q5XE16X5zAhH/wvkJBoUIyRz1majl7a7U0JAZuQDRMc=' 'sha256-11bVsHJNXc3GrgcH8r4ZM9NwAw3ZwUVDm7MIdtgtPOs='; style-src 'self' https: 'unsafe-inline'; report-uri /tracking/csp?action=show&controller=homepages&report_only=false&req_uuid=759425e2-75e4-4d35-8ceb-6ba5c1ca0f19&version=cd31aa1ec53508bbc924787c2c2917c494c3f589
Content-Type text/html; charset=utf-8
Date Thu, 05 Oct 2017 10:32:06 GMT
Etag "5840af5b68bc99f098609846ffb542d2"
Fastly-Debug-Digest b9a1ba07d34f2dc41db4942b975339b7615bbdea24f237e6fc8886c7fd0c6fb8
Link <https://a0.muscache.com/airbnb/static/packages/common-2819e1a761841c940762b61c81934adc.css>;rel=preload;as=style,<https://a0.muscache.com/airbnb/static/packages/common_o2.1-3642e3083c323edc15904078d1315474.css>;rel=preload;as=style,<https://a0.muscache.com/airbnb/static/packages/map_search-e300aa9e81cfa7f857ccb15b62924532.css>;rel=preload;as=style,<https://a0.muscache.com/airbnb/static/packages/spa_react_dates_overrides-362ec28977f18aa6a83bd1ba3254397d.css>;rel=preload;as=style,<https://a0.muscache.com/airbnb/static/airbnb-o2/fonts/Circular_Air-Book-e94c982d7dee01d7e4424157ac9ed819.woff2>;rel=preload;as=font;type=font/woff2;crossorigin=crossorigin,<https://a0.muscache.com/airbnb/static/airbnb-o2/fonts/Circular_Air-Bold-367d5e0d3e7021de6510f7824d33188f.woff2>;rel=preload;as=font;type=font/woff2;crossorigin=crossorigin,<https://a0.muscache.com/airbnb/static/airbnb-o2/fonts/Circular_Air-Light-199f6f9d92c4f5f0cabe9ce7765467a9.woff2>;rel=preload;as=font;type=font/woff2;crossorigin=crossorigin,<https://a0.muscache.com/airbnb/static/packages/header_cookie.bundle-aa3d876ed11671f31a4e.js>;rel=preload;as=script
Server nginx/1.7.12
Set-Cookie xplwp2=new_marquee; expires=Mon, 04 Dec 2017 10:32:06 GMT; domain=.airbnb.com; path=/
Status 200 200 OK
Strict-Transport-Security max-age=10886400; includeSubdomains
Vary Accept-Encoding
Via 1.1 varnish 1.1 varnish
X-Cache HIT, HIT
X-Cache-Hits 1, 1
X-Content-Type-Options nosniff
X-Frame-Options SAMEORIGIN
X-Served-By cache-iad2143-IAD, cache-ams4451-AMS
X-Server-Name www.airbnb.com
X-Timer S1507199527.678690,VS0,VE2
X-Ua-Compatible IE=Edge,chrome=1
X-Xss-Protection 1; mode=block
zh-t.m.airbnb.com

http://zh-t.m.airbnb.com/ source code | headers | screenshot

200 OK  
Accept-Ranges bytes
Age 395
Cache-Control max-age=1200, public
Content-Length 646769
Content-Security-Policy default-src 'self' https: blob:; child-src *; connect-src 'self' https: wss: *.amap.com *.inspectlet.com; font-src 'self' data: *.muscache.com fonts.gstatic.com use.typekit.net; img-src 'self' https: data: *.inspectlet.com; media-src 'self' https:; script-src 'self' 'unsafe-eval' 'unsafe-inline' a0.muscache.com cdn.siftscience.com bat.bing.com connect.facebook.net www.google-analytics.com www.googleadservices.com tpc.googlesyndication.com www.googletagmanager.com maps.googleapis.com ajax.googleapis.com app.link cdn.branch.io bam.nr-data.net js-agent.newrelic.com sslwidget.criteo.com static.criteo.net dis.criteo.com widget.us.criteo.com ethn.io blob: webapi.amap.com restapi.amap.com *.inspectlet.com https: 'sha256-Q5XE16X5zAhH/wvkJBoUIyRz1majl7a7U0JAZuQDRMc=' 'sha256-11bVsHJNXc3GrgcH8r4ZM9NwAw3ZwUVDm7MIdtgtPOs='; style-src 'self' https: 'unsafe-inline'; report-uri /tracking/csp?action=show&controller=homepages&report_only=false&req_uuid=759425e2-75e4-4d35-8ceb-6ba5c1ca0f19&version=cd31aa1ec53508bbc924787c2c2917c494c3f589
Content-Type text/html; charset=utf-8
Date Thu, 05 Oct 2017 10:32:26 GMT
Etag "5840af5b68bc99f098609846ffb542d2"
Fastly-Debug-Digest b9a1ba07d34f2dc41db4942b975339b7615bbdea24f237e6fc8886c7fd0c6fb8
Link <https://a0.muscache.com/airbnb/static/packages/common-2819e1a761841c940762b61c81934adc.css>;rel=preload;as=style,<https://a0.muscache.com/airbnb/static/packages/common_o2.1-3642e3083c323edc15904078d1315474.css>;rel=preload;as=style,<https://a0.muscache.com/airbnb/static/packages/map_search-e300aa9e81cfa7f857ccb15b62924532.css>;rel=preload;as=style,<https://a0.muscache.com/airbnb/static/packages/spa_react_dates_overrides-362ec28977f18aa6a83bd1ba3254397d.css>;rel=preload;as=style,<https://a0.muscache.com/airbnb/static/airbnb-o2/fonts/Circular_Air-Book-e94c982d7dee01d7e4424157ac9ed819.woff2>;rel=preload;as=font;type=font/woff2;crossorigin=crossorigin,<https://a0.muscache.com/airbnb/static/airbnb-o2/fonts/Circular_Air-Bold-367d5e0d3e7021de6510f7824d33188f.woff2>;rel=preload;as=font;type=font/woff2;crossorigin=crossorigin,<https://a0.muscache.com/airbnb/static/airbnb-o2/fonts/Circular_Air-Light-199f6f9d92c4f5f0cabe9ce7765467a9.woff2>;rel=preload;as=font;type=font/woff2;crossorigin=crossorigin,<https://a0.muscache.com/airbnb/static/packages/header_cookie.bundle-aa3d876ed11671f31a4e.js>;rel=preload;as=script
Server nginx/1.7.12
Set-Cookie xplwp2=new_marquee; expires=Mon, 04 Dec 2017 10:32:26 GMT; domain=.airbnb.com; path=/
Status 200 200 OK
Strict-Transport-Security max-age=10886400; includeSubdomains
Vary Accept-Encoding
Via 1.1 varnish 1.1 varnish
X-Cache HIT, MISS
X-Cache-Hits 1, 0
X-Content-Type-Options nosniff
X-Frame-Options SAMEORIGIN
X-Served-By cache-iad2123-IAD, cache-cdg8721-CDG
X-Server-Name www.airbnb.com
X-Timer S1507199546.423593,VS0,VE127
X-Ua-Compatible IE=Edge,chrome=1
X-Xss-Protection 1; mode=block
zh.airbnb.com

https://zh.airbnb.com/ source code | headers | screenshot

200 OK  
Cache-Control public, max-age=1153
Connection keep-alive Transfer-Encoding
Content-Language zh-Hans
Content-Security-Policy default-src 'self' https: blob:; child-src *; connect-src 'self' https: wss: *.amap.com *.inspectlet.com; font-src 'self' data: *.muscache.com fonts.gstatic.com use.typekit.net; img-src 'self' https: data: *.inspectlet.com; media-src 'self' https:; script-src 'self' 'unsafe-eval' 'unsafe-inline' a0.muscache.com cdn.siftscience.com bat.bing.com connect.facebook.net www.google-analytics.com www.googleadservices.com tpc.googlesyndication.com www.googletagmanager.com maps.googleapis.com ajax.googleapis.com app.link cdn.branch.io bam.nr-data.net js-agent.newrelic.com sslwidget.criteo.com static.criteo.net dis.criteo.com widget.us.criteo.com ethn.io mc.yandex.ru blob: webapi.amap.com restapi.amap.com *.inspectlet.com https: 'sha256-Q5XE16X5zAhH/wvkJBoUIyRz1majl7a7U0JAZuQDRMc=' 'sha256-rfTud2kTm0UjtJ6PqxcrkglfrUD4H8WCcS9mCs6PJ5s='; style-src 'self' https: 'unsafe-inline'; report-uri /tracking/csp?action=show&controller=homepages&report_only=false&req_uuid=906b5dc8-21a6-48f1-a700-db7a22af5a3c&version=cd31aa1ec53508bbc924787c2c2917c494c3f589
Content-Type text/html; charset=utf-8
Date Thu, 05 Oct 2017 10:33:10 GMT
Etag W/"1fee615a719a04c10b22477563c50fec"
Link <https://a0.muscache.com/airbnb/static/packages/circular_zh_override-b865144ca1d1a93efdc9b35d13be28c2.css>;rel=preload;as=style,<https://a0.muscache.com/airbnb/static/packages/common-2819e1a761841c940762b61c81934adc.css>;rel=preload;as=style,<https://a0.muscache.com/airbnb/static/packages/common_o2.1-3642e3083c323edc15904078d1315474.css>;rel=preload;as=style,<https://a0.muscache.com/airbnb/static/packages/map_search-e300aa9e81cfa7f857ccb15b62924532.css>;rel=preload;as=style,<https://a0.muscache.com/airbnb/static/packages/spa_react_dates_overrides-362ec28977f18aa6a83bd1ba3254397d.css>;rel=preload;as=style,<https://a0.muscache.com/airbnb/static/packages/header_cookie.bundle-aa3d876ed11671f31a4e.js>;rel=preload;as=script
Server nginx/1.7.12
Set-Cookie bev=1507199588_5iCL7%2F52syH5TFA%2F; domain=.airbnb.com; path=/; expires=Sat, 05-Oct-2019 10:33:08 GMT; secure _csrf_token=V4%24.airbnb.com%24hcfNbDzJA80%24vBsQlHwrU-7P_yIoFnA6mT83pEZJVdc2OMhDVSwAEAM%3D; domain=.airbnb.com; path=/; secure _user_attributes=%7B%22curr%22%3A%22RUB%22%2C%22guest_exchange%22%3A57.733545%2C%22device_profiling_session_id%22%3A%221507199589--a06a5275282e1caa447db400%22%2C%22giftcard_profiling_session_id%22%3A%221507199589--b32e80dfd61977d84be316fe%22%2C%22reservation_profiling_session_id%22%3A%221507199589--0b40bec65032baa70509a518%22%7D; domain=.airbnb.com; path=/; expires=Sat, 05-Oct-2019 10:33:09 GMT; secure flags=268435456; domain=.airbnb.com; path=/; secure chddl=control; expires=Mon, 04-Dec-2017 10:33:10 GMT; path=/; domain=.airbnb.com chpxpl=control; expires=Mon, 04-Dec-2017 10:33:10 GMT; path=/; domain=.airbnb.com ccdsynsst=treatment; expires=Mon, 04-Dec-2017 10:33:10 GMT; path=/; domain=.airbnb.com xplwp2=new_marquee; expires=Mon, 04-Dec-2017 10:33:10 GMT; path=/; domain=.airbnb.com ccdsynsstv=treatment; expires=Mon, 04-Dec-2017 10:33:10 GMT; path=/; domain=.airbnb.com chpmrhd=control; expires=Mon, 04-Dec-2017 10:33:10 GMT; path=/; domain=.airbnb.com ccdw=control; expires=Mon, 04-Dec-2017 10:33:10 GMT; path=/; domain=.airbnb.com chphdstntn=control; expires=Mon, 04-Dec-2017 10:33:10 GMT; path=/; domain=.airbnb.com
Status 200 OK
Strict-Transport-Security max-age=10886400; includeSubdomains
Transfer-Encoding chunked
Vary Accept-Encoding
X-Content-Type-Options nosniff
X-Frame-Options SAMEORIGIN
X-Ua-Compatible IE=Edge,chrome=1
X-Xss-Protection 1; mode=block
zh.m.airbnb.com

https://zh.m.airbnb.com/ source code | headers | screenshot

200 OK  
Accept-Ranges bytes
Age 405
Cache-Control max-age=1200, public
Content-Length 646769
Content-Security-Policy default-src 'self' https: blob:; child-src *; connect-src 'self' https: wss: *.amap.com *.inspectlet.com; font-src 'self' data: *.muscache.com fonts.gstatic.com use.typekit.net; img-src 'self' https: data: *.inspectlet.com; media-src 'self' https:; script-src 'self' 'unsafe-eval' 'unsafe-inline' a0.muscache.com cdn.siftscience.com bat.bing.com connect.facebook.net www.google-analytics.com www.googleadservices.com tpc.googlesyndication.com www.googletagmanager.com maps.googleapis.com ajax.googleapis.com app.link cdn.branch.io bam.nr-data.net js-agent.newrelic.com sslwidget.criteo.com static.criteo.net dis.criteo.com widget.us.criteo.com ethn.io blob: webapi.amap.com restapi.amap.com *.inspectlet.com https: 'sha256-Q5XE16X5zAhH/wvkJBoUIyRz1majl7a7U0JAZuQDRMc=' 'sha256-11bVsHJNXc3GrgcH8r4ZM9NwAw3ZwUVDm7MIdtgtPOs='; style-src 'self' https: 'unsafe-inline'; report-uri /tracking/csp?action=show&controller=homepages&report_only=false&req_uuid=759425e2-75e4-4d35-8ceb-6ba5c1ca0f19&version=cd31aa1ec53508bbc924787c2c2917c494c3f589
Content-Type text/html; charset=utf-8
Date Thu, 05 Oct 2017 10:32:36 GMT
Etag "5840af5b68bc99f098609846ffb542d2"
Fastly-Debug-Digest b9a1ba07d34f2dc41db4942b975339b7615bbdea24f237e6fc8886c7fd0c6fb8
Link <https://a0.muscache.com/airbnb/static/packages/common-2819e1a761841c940762b61c81934adc.css>;rel=preload;as=style,<https://a0.muscache.com/airbnb/static/packages/common_o2.1-3642e3083c323edc15904078d1315474.css>;rel=preload;as=style,<https://a0.muscache.com/airbnb/static/packages/map_search-e300aa9e81cfa7f857ccb15b62924532.css>;rel=preload;as=style,<https://a0.muscache.com/airbnb/static/packages/spa_react_dates_overrides-362ec28977f18aa6a83bd1ba3254397d.css>;rel=preload;as=style,<https://a0.muscache.com/airbnb/static/airbnb-o2/fonts/Circular_Air-Book-e94c982d7dee01d7e4424157ac9ed819.woff2>;rel=preload;as=font;type=font/woff2;crossorigin=crossorigin,<https://a0.muscache.com/airbnb/static/airbnb-o2/fonts/Circular_Air-Bold-367d5e0d3e7021de6510f7824d33188f.woff2>;rel=preload;as=font;type=font/woff2;crossorigin=crossorigin,<https://a0.muscache.com/airbnb/static/airbnb-o2/fonts/Circular_Air-Light-199f6f9d92c4f5f0cabe9ce7765467a9.woff2>;rel=preload;as=font;type=font/woff2;crossorigin=crossorigin,<https://a0.muscache.com/airbnb/static/packages/header_cookie.bundle-aa3d876ed11671f31a4e.js>;rel=preload;as=script
Server nginx/1.7.12
Set-Cookie xplwp2=new_marquee; expires=Mon, 04 Dec 2017 10:32:36 GMT; domain=.airbnb.com; path=/
Status 200 200 OK
Strict-Transport-Security max-age=10886400; includeSubdomains
Vary Accept-Encoding
Via 1.1 varnish 1.1 varnish
X-Cache HIT, HIT
X-Cache-Hits 1, 1
X-Content-Type-Options nosniff
X-Frame-Options SAMEORIGIN
X-Served-By cache-iad2123-IAD, cache-cdg8734-CDG
X-Server-Name www.airbnb.com
X-Timer S1507199556.209074,VS0,VE1
X-Ua-Compatible IE=Edge,chrome=1
X-Xss-Protection 1; mode=block
zh.m.airbnb.com

http://zh.m.airbnb.com/ source code | headers | screenshot

200 OK  
Accept-Ranges bytes
Age 1066
Cache-Control max-age=1200, public
Content-Length 646769
Content-Security-Policy default-src 'self' https: blob:; child-src *; connect-src 'self' https: wss: *.amap.com *.inspectlet.com; font-src 'self' data: *.muscache.com fonts.gstatic.com use.typekit.net; img-src 'self' https: data: *.inspectlet.com; media-src 'self' https:; script-src 'self' 'unsafe-eval' 'unsafe-inline' a0.muscache.com cdn.siftscience.com bat.bing.com connect.facebook.net www.google-analytics.com www.googleadservices.com tpc.googlesyndication.com www.googletagmanager.com maps.googleapis.com ajax.googleapis.com app.link cdn.branch.io bam.nr-data.net js-agent.newrelic.com sslwidget.criteo.com static.criteo.net dis.criteo.com widget.us.criteo.com ethn.io blob: webapi.amap.com restapi.amap.com *.inspectlet.com https: 'sha256-Q5XE16X5zAhH/wvkJBoUIyRz1majl7a7U0JAZuQDRMc=' 'sha256-11bVsHJNXc3GrgcH8r4ZM9NwAw3ZwUVDm7MIdtgtPOs='; style-src 'self' https: 'unsafe-inline'; report-uri /tracking/csp?action=show&controller=homepages&report_only=false&req_uuid=4b82a5fb-d675-46ea-8150-275d00576e6e&version=cd31aa1ec53508bbc924787c2c2917c494c3f589
Content-Type text/html; charset=utf-8
Date Thu, 05 Oct 2017 10:32:57 GMT
Etag "77a081dcdfd4a83bb24f0028a2169ebd"
Fastly-Debug-Digest fe63c32e4ba236607a1c2b08b05d103d63d683dc97864fcfe0b2c9c100c1e4ee
Link <https://a0.muscache.com/airbnb/static/packages/common-2819e1a761841c940762b61c81934adc.css>;rel=preload;as=style,<https://a0.muscache.com/airbnb/static/packages/common_o2.1-3642e3083c323edc15904078d1315474.css>;rel=preload;as=style,<https://a0.muscache.com/airbnb/static/packages/map_search-e300aa9e81cfa7f857ccb15b62924532.css>;rel=preload;as=style,<https://a0.muscache.com/airbnb/static/packages/spa_react_dates_overrides-362ec28977f18aa6a83bd1ba3254397d.css>;rel=preload;as=style,<https://a0.muscache.com/airbnb/static/airbnb-o2/fonts/Circular_Air-Book-e94c982d7dee01d7e4424157ac9ed819.woff2>;rel=preload;as=font;type=font/woff2;crossorigin=crossorigin,<https://a0.muscache.com/airbnb/static/airbnb-o2/fonts/Circular_Air-Bold-367d5e0d3e7021de6510f7824d33188f.woff2>;rel=preload;as=font;type=font/woff2;crossorigin=crossorigin,<https://a0.muscache.com/airbnb/static/airbnb-o2/fonts/Circular_Air-Light-199f6f9d92c4f5f0cabe9ce7765467a9.woff2>;rel=preload;as=font;type=font/woff2;crossorigin=crossorigin,<https://a0.muscache.com/airbnb/static/packages/header_cookie.bundle-aa3d876ed11671f31a4e.js>;rel=preload;as=script
Server nginx/1.7.12
Set-Cookie xplwp2=control; expires=Mon, 04 Dec 2017 10:32:57 GMT; domain=.airbnb.com; path=/
Status 200 200 OK
Strict-Transport-Security max-age=10886400; includeSubdomains
Vary Accept-Encoding
Via 1.1 varnish 1.1 varnish
X-Cache HIT, HIT
X-Cache-Hits 1, 1
X-Content-Type-Options nosniff
X-Frame-Options SAMEORIGIN
X-Served-By cache-iad2131-IAD, cache-cdg8729-CDG
X-Server-Name www.airbnb.com
X-Timer S1507199577.100984,VS0,VE2
X-Ua-Compatible IE=Edge,chrome=1
X-Xss-Protection 1; mode=block
zh.next.airbnb.com

http://zh.next.airbnb.com/ source code | headers | screenshot

200 OK  
Cache-Control no-store, max-age=0, private, must-revalidate
Content-Language zh-Hans
Content-Security-Policy default-src 'self' https: blob:; child-src *; connect-src 'self' https: wss: *.amap.com *.inspectlet.com; font-src 'self' data: *.muscache.com fonts.gstatic.com use.typekit.net; img-src 'self' https: data: *.inspectlet.com; media-src 'self' https:; script-src 'self' 'unsafe-eval' 'unsafe-inline' a0.muscache.com cdn.siftscience.com bat.bing.com connect.facebook.net www.google-analytics.com www.googleadservices.com tpc.googlesyndication.com www.googletagmanager.com maps.googleapis.com ajax.googleapis.com app.link cdn.branch.io bam.nr-data.net js-agent.newrelic.com sslwidget.criteo.com static.criteo.net dis.criteo.com widget.us.criteo.com ethn.io blob: webapi.amap.com restapi.amap.com *.inspectlet.com https: 'sha256-Q5XE16X5zAhH/wvkJBoUIyRz1majl7a7U0JAZuQDRMc=' 'sha256-rfTud2kTm0UjtJ6PqxcrkglfrUD4H8WCcS9mCs6PJ5s='; style-src 'self' https: 'unsafe-inline'; report-uri /tracking/csp?action=show&controller=homepages&report_only=false&req_uuid=ab7d7218-1a24-4ffd-9019-fc4d7da53d48&version=cd31aa1ec53508bbc924787c2c2917c494c3f589
Content-Type text/html; charset=utf-8
Date Thu, 05 Oct 2017 10:32:14 GMT
Etag W/"2e9991cf77a3cd89a82b9556329b464e"
Link <https://a0.muscache.com/airbnb/static/packages/circular_zh_override-b865144ca1d1a93efdc9b35d13be28c2.css>;rel=preload;as=style,<https://a0.muscache.com/airbnb/static/packages/common-2819e1a761841c940762b61c81934adc.css>;rel=preload;as=style,<https://a0.muscache.com/airbnb/static/packages/common_o2.1-3642e3083c323edc15904078d1315474.css>;rel=preload;as=style,<https://a0.muscache.com/airbnb/static/packages/map_search-e300aa9e81cfa7f857ccb15b62924532.css>;rel=preload;as=style,<https://a0.muscache.com/airbnb/static/packages/spa_react_dates_overrides-362ec28977f18aa6a83bd1ba3254397d.css>;rel=preload;as=style,<https://a0.muscache.com/airbnb/static/packages/header_cookie.bundle-aa3d876ed11671f31a4e.js>;rel=preload;as=script
Server nginx/1.7.12
Set-Cookie bev=1507199533_lPrY3NPrCfHuetHm; domain=.airbnb.com; path=/; expires=Sat, 05-Oct-2019 10:32:13 GMT; secure _csrf_token=V4%24.airbnb.com%24vy_GWCJsWi4%24MffeaA1yqS0X9S_RLDZqu4A0h1kngW-_YXu_r6hYCFY%3D; domain=.airbnb.com; path=/; secure _user_attributes=%7B%22curr%22%3A%22USD%22%2C%22guest_exchange%22%3A1.0%2C%22device_profiling_session_id%22%3A%221507199534--942566b226081f8e894c1617%22%2C%22giftcard_profiling_session_id%22%3A%221507199534--9e779debee23da88f9bc50e3%22%2C%22reservation_profiling_session_id%22%3A%221507199534--25d437c6434cdefc31737ea4%22%7D; domain=.airbnb.com; path=/; expires=Sat, 05-Oct-2019 10:32:14 GMT; secure flags=268435456; domain=.airbnb.com; path=/; secure xplwp2=new_marquee_2; expires=Mon, 04-Dec-2017 10:32:14 GMT; path=/; domain=.next.airbnb.com
Status 200 200 OK
Strict-Transport-Security max-age=10886400; includeSubdomains
Vary Accept-Encoding
X-Content-Type-Options nosniff
X-Frame-Options SAMEORIGIN
X-Served-By monorail-next
X-Ua-Compatible IE=Edge,chrome=1
X-Xss-Protection 1; mode=block
zh.next.airbnb.com

https://zh.next.airbnb.com/ source code | headers | screenshot

200 OK  
Cache-Control no-store, max-age=0, private, must-revalidate
Connection keep-alive Transfer-Encoding
Content-Language zh-Hans
Content-Security-Policy default-src 'self' https: blob:; child-src *; connect-src 'self' https: wss: *.amap.com *.inspectlet.com; font-src 'self' data: *.muscache.com fonts.gstatic.com use.typekit.net; img-src 'self' https: data: *.inspectlet.com; media-src 'self' https:; script-src 'self' 'unsafe-eval' 'unsafe-inline' a0.muscache.com cdn.siftscience.com bat.bing.com connect.facebook.net www.google-analytics.com www.googleadservices.com tpc.googlesyndication.com www.googletagmanager.com maps.googleapis.com ajax.googleapis.com app.link cdn.branch.io bam.nr-data.net js-agent.newrelic.com sslwidget.criteo.com static.criteo.net dis.criteo.com widget.us.criteo.com ethn.io blob: webapi.amap.com restapi.amap.com *.inspectlet.com https: 'sha256-Q5XE16X5zAhH/wvkJBoUIyRz1majl7a7U0JAZuQDRMc=' 'sha256-rfTud2kTm0UjtJ6PqxcrkglfrUD4H8WCcS9mCs6PJ5s='; style-src 'self' https: 'unsafe-inline'; report-uri /tracking/csp?action=show&controller=homepages&report_only=false&req_uuid=6cdb3a4d-8bf8-4cea-8a27-e4eb1ac7c2a1&version=cd31aa1ec53508bbc924787c2c2917c494c3f589
Content-Type text/html; charset=utf-8
Date Thu, 05 Oct 2017 10:32:52 GMT
Etag W/"82aa05212f35b861bb0ea3a6287ca899"
Link <https://a0.muscache.com/airbnb/static/packages/circular_zh_override-b865144ca1d1a93efdc9b35d13be28c2.css>;rel=preload;as=style,<https://a0.muscache.com/airbnb/static/packages/common-2819e1a761841c940762b61c81934adc.css>;rel=preload;as=style,<https://a0.muscache.com/airbnb/static/packages/common_o2.1-3642e3083c323edc15904078d1315474.css>;rel=preload;as=style,<https://a0.muscache.com/airbnb/static/packages/map_search-e300aa9e81cfa7f857ccb15b62924532.css>;rel=preload;as=style,<https://a0.muscache.com/airbnb/static/packages/spa_react_dates_overrides-362ec28977f18aa6a83bd1ba3254397d.css>;rel=preload;as=style,<https://a0.muscache.com/airbnb/static/packages/header_cookie.bundle-aa3d876ed11671f31a4e.js>;rel=preload;as=script
Server nginx/1.7.12
Set-Cookie bev=1507199571_nQrCu%2B9dsxKMUFg5; domain=.airbnb.com; path=/; expires=Sat, 05-Oct-2019 10:32:51 GMT; secure _csrf_token=V4%24.airbnb.com%246C4PNZDMnMY%24bNshWsPb30GcZInfyl1TiBr3Is-0ElstK8Y9On5Yesc%3D; domain=.airbnb.com; path=/; secure _user_attributes=%7B%22curr%22%3A%22EUR%22%2C%22guest_exchange%22%3A0.85004%2C%22device_profiling_session_id%22%3A%221507199572--bca6a0370aadbe0050dfd30f%22%2C%22giftcard_profiling_session_id%22%3A%221507199572--700be4bede2f71df9b42076e%22%2C%22reservation_profiling_session_id%22%3A%221507199572--fc94aa26cdf7a3331d05c399%22%7D; domain=.airbnb.com; path=/; expires=Sat, 05-Oct-2019 10:32:52 GMT; secure flags=268435456; domain=.airbnb.com; path=/; secure xplwp2=new_marquee_2; expires=Mon, 04-Dec-2017 10:32:52 GMT; path=/; domain=.next.airbnb.com
Status 200 OK
Strict-Transport-Security max-age=10886400; includeSubdomains
Transfer-Encoding chunked
Vary Accept-Encoding
X-Content-Type-Options nosniff
X-Frame-Options SAMEORIGIN
X-Served-By monorail-next
X-Ua-Compatible IE=Edge,chrome=1
X-Xss-Protection 1; mode=block