Server: nginx
Content-Type: text/html;charset=utf-8
x-instrumentation: airbnb
x-server-lifecycle-phase: running
status: 200 OK
x-kraken-loop-name: core-guest-loop
accept-ch-lifetime: 31536000
Content-Security-Policy: child-src blob:; connect-src 'self' https: wss://ws.airbnb.com https://netverify.com https://*.netverify.com wss: *.amap.com https://*.mapbox.com; default-src 'self' https: blob:; font-src 'self' data: https://*.muscache.com fonts.gstatic.com https://use.typekit.net; frame-src * https://*.cardinalcommerce.com; img-src 'self' https: data: https://*.mapbox.com blob:; media-src 'self' https: blob:; script-src 'self' 'unsafe-eval' https://a0.muscache.com https://cdn.siftscience.com https://ss.musthird.com https://t1.musthird.com https://bat.bing.com https://connect.facebook.net https://www.google-analytics.com https://www.googleadservices.com https://tpc.googlesyndication.com https://www.googletagmanager.com https://a.cdn.intentmedia.net https://maps.googleapis.com https://ajax.googleapis.com https://*.g.doubleclick.net https://www.google.com https://www.gstatic.com https://smartlock.google.com https://accounts.google.com https://app.link https://cdn.branch.io https://api.branch.io https://bam.nr-data.net https://js-agent.newrelic.com https://sslwidget.criteo.com https://static.criteo.net https://dis.criteo.com https://widget.us.criteo.com https://*.gbc.criteo.net https://ethn.io https://s.yimg.jp https://api.geetest.com https://cdn.ampproject.org https://storage.googleapis.com/workbox-cdn/ https://tagmanager.google.com https://pay.google.com https://songbird.cardinalcommerce.com/ https://www.recaptcha.net https://www.gstatic.cn 'sha256-rAm9O8JPZLtQmd84zMDzhsG5q35JscESxxcaFL7+DDc=' 'sha256-ck0NYnSq6evDrSU3QAgDAso6GSMHXE8SDlqTKWnxpKI=' 'sha256-sO4dzj4GCPy/fjcfZxvf9FaqfYdAw3bHeAjnjqMO0Us=' 'sha256-+DMqUACVS8B0N29g0M3MeqqvH2pF88VHSCl59PH+Z0Q=' 'sha256-2/yXkkTVHnugYrntfDcr3lt7RqMS4ygfw4RRB1zP0VM=' 'sha256-IHl3vH+GqA+cA317zSZ1UMqVGO7oeUm5eQmDuO1DSF0=' https://netverify.com https://*.netverify.com https://icm.aexp-static.com https://qicm.americanexpress.com https://qwww435.americanexpress.com https://checkout.americanexpress.com https://www.paypalobjects.com https://c.paypal.com https://www.paypal.com blob: https://vdata.amap.com https://webapi.amap.com https://restapi.amap.com https://*.mapbox.com https://songbird.cardinalcommerce.com https://songbirdstag.cardinalcommerce.com https://includes.ccdc02.com https://includestest.ccdc02.com https://js.stripe.com; style-src 'self' https: 'unsafe-inline' https://*.mapbox.com; worker-src 'self'; report-uri /tracking/csp?controller=core-guest-loop&action=%2F&req_uuid=d0dee6f5-094d-4199-ab2c-82b09fee8eca&version=sha%3Def7ce33d31a&report_only=false; report-to /tracking/csp?controller=core-guest-loop&action=%2F&req_uuid=d0dee6f5-094d-4199-ab2c-82b09fee8eca&version=sha%3Def7ce33d31a&report_only=false
x-ua-compatible: IE=Edge,chrome=1
x-frame-options: SAMEORIGIN
x-envoy-upstream-service-time: 244
x-xss-protection: 1; mode=block
Accept-CH: Device-Memory, DPR, ECT, Viewport-Width
x-content-type-options: nosniff
Link: ;rel=preload;as=style,;rel=preload;as=font;type=font/woff2;crossorigin=crossorigin,;rel=preload;as=font;type=font/woff2;crossorigin=crossorigin,;rel=preload;as=font;type=font/woff2;crossorigin=crossorigin
Strict-Transport-Security: max-age=10886400; includeSubdomains
Cache-Control: public, max-age=10158
Date: Wed, 02 Dec 2020 06:07:28 GMT
Connection: keep-alive
Vary: Accept-Encoding
Set-Cookie: cache_state=1; path=/; Domain=.airbnb.com.ee; Secure;
Set-Cookie: bev=1606889248_Yjk1YTE4YTRkMTY3; expires=Fri, 02-Dec-2022 06:07:28 GMT; path=/; domain=.airbnb.com.ee; secure
x-browser-type: modern
x-erf-bev-bev-is-generated: 1
x-erf-bev-bev: 1606889248_Yjk1YTE4YTRkMTY3
x-encoded-content-encoding: gzip
x-encoded-content-length: 76048