HTTP Headers Analysis for https://luckey.ca

Detected Technologies from Headers

See all in URL Inspect 27

Adobe Fonts (Typekit)

Akamai

AMP

Arkose Labs

Microsoft Advertising

Branch

Envoy

Facebook

GeeTest

Google AdSense

Google Analytics

Google Cloud Storage

Google Conversion Tracking

Google DoubleClick

Google Fonts

Google Hosted Libraries

Google Maps

Google Pay

Google reCAPTCHA

Google Search

Google Static File Front End

Google Sign-In

Google Tag Manager

New Relic

Nginx

Yahoo

Google Cloud

HTTP Security Headers

Status

Strict-Transport-Security

Present

max-age=10886400; includeSubdomains

Content-Security-Policy

Basic

connect-src; default-src; font-src; +8 more Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Good

SAMEORIGIN

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Increase HSTS max-age to at least 1 year and add includeSubDomains
• Improve CSP by adding more specific directives and removing 'unsafe-inline'
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

close, Transfer-Encoding

Transfer-Encoding

Performance

chunked

connection: close, Transfer-Encoding
transfer-encoding: chunked

Caching Headers

Cache-Control

Caching

public, max-age=28967

Expires

Caching

Sat, 25 Jul 2026 18:21:22 GMT

cache-control: public, max-age=28967
expires: Sat, 25 Jul 2026 18:21:22 GMT

Content Headers

Content-Type

Content

text/html;charset=utf-8

content-type: text/html;charset=utf-8

Server Headers

Server

nginx

server: nginx

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

Cookies

set-cookie: everest_cookie=1784974715.EAZDg0Y2FkNzI3Y2VmYT.6g3MKecA1Du2oJJqGKuXw_M74WMnVkKYtagy4clEaVw; expires=Tue, 24-Jul-2029 10:18:35 GMT; path=/; domain=.airbnb.com; secure
bev=1784974715_EAMGZiNTQwMTM1ZD; expires=Mon, 24-Jul-2028 10:18:35 GMT; path=/; domain=.airbnb.com; secure
country=US; path=/; domain=.airbnb.com; secure
ak_bmsc=F271152F03D6DB5DB345B3E4E58A4238~000000000000000000000000000000~YAAQhGvcF9baemefAQAALqvImAACW03J8J3GPkbpBuKvOrQUXZINSDmqiHfwC5lO1kXOlLd0jWV8yzGD5WZB2ElHCKDhLb0gemOxSkP+lVXrZ1Hyg0h+dGw01my2Q16NKCy0Pua25F9Bn18yhQnXDTEtAhL/Jt/muw/1FA4JQG00YHy5/vmPHLO8uN377jpztS4+VNLIKK9zJjTGOpUNL0f7EsQO1xeUefGDtxDNQv3KZYjv1xL3P/0ZIBiG3X6qmZfpHJ971vu8r+qj4WjldRrW6oIxB+24JgWXJybb02OIRWBI3ihpHzan1vtVzciBddOoScwBCGvA+uuberki5EeZcdmy4Z/b6RKHfw==; Domain=.airbnb.com; Path=/; Expires=Sat, 25 Jul 2026 12:18:35 GMT; Max-Age=7200; HttpOnly

Other Headers

Akamai-Request-Bc

Other

[a=23.220.107.132,b=1167147554,c=g,n=US_VA_ASHBURN,o=20940],[c=p,n=US_VA_ASHBURN,o=20940]

Alt-Svc

Other

h3=":443"; ma=93600

Cachestatus

Other

cache

Date

Other

Sat, 25 Jul 2026 10:18:35 GMT

Link

Other

URL https://a0.muscache.com/airbnb/static/airbnb-dls-web/build/fonts/cereal-variable/AirbnbCerealVF_W_Wght.8816d9e5c3b6a860636193e36b6ac4e4.woff2

rel=preload as=font type=font/woff2 crossorigin=anonymous

URL https://a0.muscache.com/airbnb

rel=preconnect crossorigin=anonymous

Origin-Trial

Other

AkOekvxwprBLSP7I2nhyRn5yZGt9lTJN6UIYziFKVYg5OhlzmlNDciWbBWkEQ5TYPz+aqsuIUT2pPEjPUD5dFAsAAABneyJvcmlnaW4iOiJodHRwczovL2FpcmJuYi5jb206NDQzIiwiZmVhdHVyZSI6IlByaW9yaXR5SGludHNBUEkiLCJleHBpcnkiOjE2NDc5OTM1OTksImlzU3ViZG9tYWluIjp0cnVlfQ==

Server-Timing

Other

ingress;dur=346, upstream;dur=345, cdn-cache; desc=MISS, edge; dur=55, origin; dur=UNSET

Status

Other

200 OK

X-Airbnb-Everest-Device-Id

Other

1784974715.EAZDg0Y2FkNzI3Y2VmYT.6g3MKecA1Du2oJJqGKuXw_M74WMnVkKYtagy4clEaVw

X-Airbnb-Internal-Trace-Id

Other

3HGxF5b3f_VoRdBIuCix8w==

X-Airbnb-Kraken-Flush-Body

Other

1

X-Airbnb-Sureride

Other

c1a1o.0.846bdc17.1784974715.45914222%%i1c1o%%t1d1o.3HGxF5b3f_VoRdBIuCix8w==%%e1f1o.E2IHEUl1EAUJMgtdDycGChQwFlwXegYeDXFGTg%%t1d1o.3HGxF5b3f_VoRdBIuCix8w==%%h1

X-Browser-Type

Other

unknown

X-Envoy-Upstream-Service-Time

Other

345

X-Erf-Bev-Bev

Other

1784974715_EAMGZiNTQwMTM1ZD

X-Erf-Bev-Bev-Is-Generated

Other

1

X-Instrumentation

Other

airbnb

X-Kraken-Loop-Name

Other

seo-loop

X-Server-Lifecycle-Phase

Other

running

X-Server-Name

Other

www.airbnb.com

akamai-request-bc: [a=23.220.107.132,b=1167147554,c=g,n=US_VA_ASHBURN,o=20940],[c=p,n=US_VA_ASHBURN,o=20940]
alt-svc: h3=":443"; ma=93600
cachestatus: cache
date: Sat, 25 Jul 2026 10:18:35 GMT
link: <https://a0.muscache.com/airbnb/static/airbnb-dls-web/build/fonts/cereal-variable/AirbnbCerealVF_W_Wght.8816d9e5c3b6a860636193e36b6ac4e4.woff2>;rel=preload;as=font;type=font/woff2;crossorigin=anonymous,<https://a0.muscache.com/airbnb>;rel=preconnect;crossorigin=anonymous
origin-trial: AkOekvxwprBLSP7I2nhyRn5yZGt9lTJN6UIYziFKVYg5OhlzmlNDciWbBWkEQ5TYPz+aqsuIUT2pPEjPUD5dFAsAAABneyJvcmlnaW4iOiJodHRwczovL2FpcmJuYi5jb206NDQzIiwiZmVhdHVyZSI6IlByaW9yaXR5SGludHNBUEkiLCJleHBpcnkiOjE2NDc5OTM1OTksImlzU3ViZG9tYWluIjp0cnVlfQ==
server-timing: ingress;dur=346, upstream;dur=345, cdn-cache; desc=MISS, edge; dur=55, origin; dur=UNSET
status: 200 OK
x-airbnb-everest-device-id: 1784974715.EAZDg0Y2FkNzI3Y2VmYT.6g3MKecA1Du2oJJqGKuXw_M74WMnVkKYtagy4clEaVw
x-airbnb-internal-trace-id: 3HGxF5b3f_VoRdBIuCix8w==
x-airbnb-kraken-flush-body: 1
x-airbnb-sureride: c1a1o.0.846bdc17.1784974715.45914222%%i1c1o%%t1d1o.3HGxF5b3f_VoRdBIuCix8w==%%e1f1o.E2IHEUl1EAUJMgtdDycGChQwFlwXegYeDXFGTg%%t1d1o.3HGxF5b3f_VoRdBIuCix8w==%%h1
x-browser-type: unknown
x-envoy-upstream-service-time: 345
x-erf-bev-bev: 1784974715_EAMGZiNTQwMTM1ZD
x-erf-bev-bev-is-generated: 1
x-instrumentation: airbnb
x-kraken-loop-name: seo-loop
x-server-lifecycle-phase: running
x-server-name: www.airbnb.com

Recommendations

Enable compression (gzip/brotli) to improve performance