31 Headers

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=10886400; includeSubdomains
Content-Security-Policy
Basic
connect-src; default-src; font-src; +8 more Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Good
SAMEORIGIN
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Improve CSP by adding more specific directives and removing 'unsafe-inline'
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

Performance Headers

Connection
Performance
close, Transfer-Encoding
Transfer-Encoding
Performance
chunked

Caching Headers

Cache-Control
Caching
public, max-age=75428
Expires
Caching
Wed, 29 Jul 2026 06:58:07 GMT

Content Headers

Content-Type
Content
text/html;charset=utf-8

Server Headers

Server
Server
nginx

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie
Cookies

Other Headers

Akamai-Request-Bc
Other
[a=23.220.107.147,b=1753458398,c=g,n=US_VA_ASHBURN,o=20940],[c=p,n=US_VA_ASHBURN,o=20940],[c=c,n=US_VA_STERLING,o=20940],[c=p,n=US_VA_STERLING,o=20940]
Alt-Svc
Other
h3=":443"; ma=93600
Cachestatus
Other
cache
Date
Other
Tue, 28 Jul 2026 10:00:59 GMT
Origin-Trial
Other
AkOekvxwprBLSP7I2nhyRn5yZGt9lTJN6UIYziFKVYg5OhlzmlNDciWbBWkEQ5TYPz+aqsuIUT2pPEjPUD5dFAsAAABneyJvcmlnaW4iOiJodHRwczovL2FpcmJuYi5jb206NDQzIiwiZmVhdHVyZSI6IlByaW9yaXR5SGludHNBUEkiLCJleHBpcnkiOjE2NDc5OTM1OTksImlzU3ViZG9tYWluIjp0cnVlfQ==
Server-Timing
Other
ingress;dur=354, upstream;dur=354, cdn-cache; desc=MISS, edge; dur=-136, origin; dur=368
Status
Other
200 OK
X-Airbnb-Everest-Device-Id
Other
1785232858.EAN2MxM2MxNjhjOTU2MD.g29v_xD1B0RO1oo82NPGgQ-3GaoMt3fwgpWBw3fUUyA
X-Airbnb-Internal-Trace-Id
Other
rVLUcpK-UpB0m3ppZb_E-A==
X-Airbnb-Kraken-Flush-Body
Other
1
X-Airbnb-Sureride
Other
c1a1o.0.936bdc17.1785232858.6883a6de%%i1c1o%%t1d1o.rVLUcpK-UpB0m3ppZb_E-A==%%e1f1o.E2IHEUl1EAUJMgtdDyMSFxQwFlwXegYeDXFGTg%%t1d1o.rVLUcpK-UpB0m3ppZb_E-A==%%h1
X-Browser-Type
Other
unknown
X-Envoy-Upstream-Service-Time
Other
354
X-Erf-Bev-Bev
Other
X-Erf-Bev-Bev-Is-Generated
Other
0
X-Instrumentation
Other
airbnb
X-Kraken-Loop-Name
Other
seo-loop
X-Server-Lifecycle-Phase
Other
running

Recommendations

Enable compression (gzip/brotli) to improve performance