HTTP Headers Analysis for https://bg.airbnb.com

Open Cached · just now

33 Headers

Detected Technologies from Headers

See all in URL Inspect 32

Apple ID

PayPal

Adobe Fonts (Typekit)

Akamai

AMP

Arkose Labs

Microsoft Advertising

Branch

Envoy

Facebook

GeeTest

Google AdSense

Google Analytics

Google Cloud Storage

Google Conversion Tracking

Google DoubleClick

Google Fonts

Google Hosted Libraries

Google Maps

Google Pay

Google reCAPTCHA

Google Search

Google Static File Front End

Google Sign-In

Google Tag Manager

Mapbox

New Relic

Nginx

Plaid

Stripe

Yahoo

Google Cloud

HTTP Security Headers

Status

Strict-Transport-Security

Present

max-age=10886400; includeSubdomains

Content-Security-Policy

Basic

child-src; connect-src; default-src; +9 more Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Good

SAMEORIGIN

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Increase HSTS max-age to at least 1 year and add includeSubDomains
• Improve CSP by adding more specific directives and removing 'unsafe-inline'
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

close, Transfer-Encoding

Transfer-Encoding

Performance

chunked

connection: close, Transfer-Encoding
transfer-encoding: chunked

Caching Headers

Cache-Control

Caching

no-store, max-age=0, private, must-revalidate

Expires

Caching

Thu, 01 Jan 1970 00:00:00 GMT

cache-control: no-store, max-age=0, private, must-revalidate
expires: Thu, 01 Jan 1970 00:00:00 GMT

Content Headers

Content-Type

Content

text/html;charset=utf-8

content-type: text/html;charset=utf-8

Server Headers

Server

nginx

server: nginx

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

set-cookie: _user_attributes=%7B%22curr%22%3A%22USD%22%7D; Path=/; Domain=.airbnb.com; Expires=Tue, 27-Oct-2026 04:20:17 GMT; Max-Age=15811199; Secure
bev=1777263618_EANDVlMmRhY2YzMW; Path=/; Domain=.airbnb.com; Expires=Wed, 26-Apr-2028 04:20:17 GMT; Max-Age=63071999; Secure
everest_cookie=1777263618.EAMzI0ZDY3YjljMWNmMD.ednZDh4oUX7cIHvmSi637iZs97mU2-W1onA_zn5st4g; expires=Thu, 26-Apr-2029 04:20:18 GMT; path=/; domain=.airbnb.com; secure
bev=1777263618_EANDVlMmRhY2YzMW; expires=Wed, 26-Apr-2028 04:20:18 GMT; path=/; domain=.airbnb.com; secure
country=US; path=/; domain=.airbnb.com; secure
ak_bmsc=897E3B752131586467AE1E11FFAD99CD~000000000000000000000000000000~YAAQDqTAF4sjxbudAQAARKsqzR/T8RvquNRiPGxOGfX5cdKfqCfr6Tiaipy6d2xRlFwvrzwTNy/jIvViooFGm3cGEtzbR2G6FAMfyHPGVnN9moxLov8VLV84Ktr2TJ4fYKc81FFVn+zQ4CcL9YGpuos7NwMFGxHajdObl/nNO31qaLDorT9zB8OM/FVEYCsfSeDc1qMd+dEJzm+LI8e1wSLXj/X4PE71om1wKCOKF7p5d0NiSDNCsjH7L0LWuZkQI0rX/y00c/y1DDHtTnOwwNzqSFnj77SawxAFKh7cvGGb07coM7QfYFygxL3YDjmxrzPtWq+/a+COxd0qOta1grWHysIWe5AzG+7V7oA=; Domain=.airbnb.com; Path=/; Expires=Mon, 27 Apr 2026 06:20:18 GMT; Max-Age=7200; HttpOnly

Other Headers

Accept-Ch

Other

Sec-CH-Device-Memory, Sec-CH-DPR, ECT, Sec-CH-UA-Platform-Version, Sec-CH-Viewport-Width, Sec-CH-Device-Memory, Sec-CH-DPR, ECT, Sec-CH-UA-Platform-Version, Sec-CH-Viewport-Width

Accept-Ch-Lifetime

Other

31536000

Akamai-Request-Bc

Other

[a=23.192.164.14,b=971628716,c=g,n=US_IL_CHICAGO,o=20940],[c=c,n=US_IL_ELKGROVEVILLAGE,o=20940],[a=237,c=o]

Alt-Svc

Other

h3=":443"; ma=93600

Cachestatus

Other

Date

Other

Mon, 27 Apr 2026 04:20:18 GMT

Link

Other

URL https://a0.muscache.com/airbnb/static/packages/web/common/frontend/core-guest-loop/apps/core-guest-spa/client.c88ac7dde3.css

rel=preload as=style crossorigin=anonymous media=print

URL https://a0.muscache.com/airbnb/static/airbnb-dls-web/build/fonts/cereal-variable/AirbnbCerealVF_W_Wght.8816d9e5c3b6a860636193e36b6ac4e4.woff2

rel=preload as=font type=font/woff2 crossorigin=anonymous

URL https://a0.muscache.com/airbnb

rel=preconnect crossorigin=anonymous

Origin-Trial

Other

AkOekvxwprBLSP7I2nhyRn5yZGt9lTJN6UIYziFKVYg5OhlzmlNDciWbBWkEQ5TYPz+aqsuIUT2pPEjPUD5dFAsAAABneyJvcmlnaW4iOiJodHRwczovL2FpcmJuYi5jb206NDQzIiwiZmVhdHVyZSI6IlByaW9yaXR5SGludHNBUEkiLCJleHBpcnkiOjE2NDc5OTM1OTksImlzU3ViZG9tYWluIjp0cnVlfQ==

Server-Timing

Other

ingress;dur=53, upstream;dur=53, cdn-cache; desc=MISS, edge; dur=36, origin; dur=136

Status

Other

200 OK

X-Airbnb-Everest-Device-Id

Other

1777263618.EAMzI0ZDY3YjljMWNmMD.ednZDh4oUX7cIHvmSi637iZs97mU2-W1onA_zn5st4g

X-Airbnb-Internal-Trace-Id

Other

DFNKFX2vVmG89P5qQ79wCA==

X-Airbnb-Kraken-Flush-Body

Other

X-Airbnb-Sureride

Other

c1a1o.0.0ea4c017.1777263618.39e9e0ac%%i1c1o%%t1d1o.DFNKFX2vVmG89P5qQ79wCA==%%e1f1o.E2IHEUl1EAUJMgtdDy4GAxRiGQ%%t1d1o.DFNKFX2vVmG89P5qQ79wCA==%%h1

X-Browser-Type

Other

unknown

X-Envoy-Upstream-Service-Time

Other

X-Erf-Bev-Bev

Other

1777263618_EANDVlMmRhY2YzMW

X-Erf-Bev-Bev-Is-Generated

Other

X-Instrumentation

Other

airbnb

X-Kraken-Loop-Name

Other

core-guest-loop

X-Server-Lifecycle-Phase

Other

running

accept-ch: Sec-CH-Device-Memory, Sec-CH-DPR, ECT, Sec-CH-UA-Platform-Version, Sec-CH-Viewport-Width, Sec-CH-Device-Memory, Sec-CH-DPR, ECT, Sec-CH-UA-Platform-Version, Sec-CH-Viewport-Width
accept-ch-lifetime: 31536000
akamai-request-bc: [a=23.192.164.14,b=971628716,c=g,n=US_IL_CHICAGO,o=20940],[c=c,n=US_IL_ELKGROVEVILLAGE,o=20940],[a=237,c=o]
alt-svc: h3=":443"; ma=93600
cachestatus: on
date: Mon, 27 Apr 2026 04:20:18 GMT
link: <https://a0.muscache.com/airbnb/static/packages/web/common/frontend/core-guest-loop/apps/core-guest-spa/client.c88ac7dde3.css>;rel=preload;as=style;crossorigin=anonymous;media=print,<https://a0.muscache.com/airbnb/static/airbnb-dls-web/build/fonts/cereal-variable/AirbnbCerealVF_W_Wght.8816d9e5c3b6a860636193e36b6ac4e4.woff2>;rel=preload;as=font;type=font/woff2;crossorigin=anonymous,<https://a0.muscache.com/airbnb>;rel=preconnect;crossorigin=anonymous
origin-trial: AkOekvxwprBLSP7I2nhyRn5yZGt9lTJN6UIYziFKVYg5OhlzmlNDciWbBWkEQ5TYPz+aqsuIUT2pPEjPUD5dFAsAAABneyJvcmlnaW4iOiJodHRwczovL2FpcmJuYi5jb206NDQzIiwiZmVhdHVyZSI6IlByaW9yaXR5SGludHNBUEkiLCJleHBpcnkiOjE2NDc5OTM1OTksImlzU3ViZG9tYWluIjp0cnVlfQ==
server-timing: ingress;dur=53, upstream;dur=53, cdn-cache; desc=MISS, edge; dur=36, origin; dur=136
status: 200 OK
x-airbnb-everest-device-id: 1777263618.EAMzI0ZDY3YjljMWNmMD.ednZDh4oUX7cIHvmSi637iZs97mU2-W1onA_zn5st4g
x-airbnb-internal-trace-id: DFNKFX2vVmG89P5qQ79wCA==
x-airbnb-kraken-flush-body: 1
x-airbnb-sureride: c1a1o.0.0ea4c017.1777263618.39e9e0ac%%i1c1o%%t1d1o.DFNKFX2vVmG89P5qQ79wCA==%%e1f1o.E2IHEUl1EAUJMgtdDy4GAxRiGQ%%t1d1o.DFNKFX2vVmG89P5qQ79wCA==%%h1
x-browser-type: unknown
x-envoy-upstream-service-time: 53
x-erf-bev-bev: 1777263618_EANDVlMmRhY2YzMW
x-erf-bev-bev-is-generated: 1
x-instrumentation: airbnb
x-kraken-loop-name: core-guest-loop
x-server-lifecycle-phase: running

Recommendations

Enable compression (gzip/brotli) to improve performance