HTTP Headers Analysis for https://luckey.es

Detected Technologies from Headers

See all in URL Inspect 27

Adobe Fonts (Typekit)

Akamai

AMP

Arkose Labs

Microsoft Advertising

Branch

Envoy

Facebook

GeeTest

Google AdSense

Google Analytics

Google Cloud Storage

Google Conversion Tracking

Google DoubleClick

Google Fonts

Google Hosted Libraries

Google Maps

Google Pay

Google reCAPTCHA

Google Search

Google Static File Front End

Google Sign-In

Google Tag Manager

New Relic

Nginx

Yahoo

Google Cloud

HTTP Security Headers

Status

Strict-Transport-Security

Present

max-age=10886400; includeSubdomains

Content-Security-Policy

Basic

connect-src; default-src; font-src; +8 more Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Good

SAMEORIGIN

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Increase HSTS max-age to at least 1 year and add includeSubDomains
• Improve CSP by adding more specific directives and removing 'unsafe-inline'
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

close, Transfer-Encoding

Transfer-Encoding

Performance

chunked

connection: close, Transfer-Encoding
transfer-encoding: chunked

Caching Headers

Cache-Control

Caching

public, max-age=41476

Expires

Caching

Wed, 29 Jul 2026 04:16:56 GMT

cache-control: public, max-age=41476
expires: Wed, 29 Jul 2026 04:16:56 GMT

Content Headers

Content-Type

Content

text/html;charset=utf-8

content-type: text/html;charset=utf-8

Server Headers

Server

nginx

server: nginx

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

Cookies

set-cookie: everest_cookie=1785257140.EANTczNWE2YmUyNzU3Zm.u9WzAJGcrgDQgUWP0Iwbqthor9lbJyI6RppqhWbvV4Q; expires=Fri, 27-Jul-2029 16:45:40 GMT; path=/; domain=.airbnb.com; secure
bev=1785257140_EANDNmYzE2NzU1MD; expires=Thu, 27-Jul-2028 16:45:40 GMT; path=/; domain=.airbnb.com; secure
country=US; path=/; domain=.airbnb.com; secure
ak_bmsc=8A1A7EE31169E37DD88C90A14A97D866~000000000000000000000000000000~YAAQzV7IF/XoW2+fAQAAGSGeqQCc5VzhAX19aOQwKya15JWIrOsHZUvSiZyC6ygIYgiqvio63cC9eU18rK9BtaxeQjKpxNl2xJ3Jp4WrwIQIzDzAmZIzQDSnEnxPS4FmAWv4lswZgKTSHZWj3R8J65IG7SWTvUHZUAeqXxTiumRH7dY4Wb8SO9xVLC5ypqDhqeA8hNoA15fnOWvpKyzRcTvmzrKQZiuxUq39jsT6ay9ryNiSwWq51debeSoczRHkRI3qVzd9AGldSeizfRYCumCzCb0tBhNvCralmVQfNKNzm9uQMnWIliFnLB8Yc0cAgcZyD0HqpK3vJR5E9TahV6MEzH3L/Sms+yUx0A==; Domain=.airbnb.com; Path=/; Expires=Tue, 28 Jul 2026 18:45:40 GMT; Max-Age=7200; HttpOnly

Other Headers

Akamai-Request-Bc

Other

[a=23.200.94.205,b=351638821,c=g,n=US_VA_STERLING,o=20940]

Alt-Svc

Other

h3=":443"; ma=93600

Cachestatus

Other

cache

Date

Other

Tue, 28 Jul 2026 16:45:40 GMT

Link

Other

URL https://a0.muscache.com/airbnb/static/airbnb-dls-web/build/fonts/cereal-variable/AirbnbCerealVF_W_Wght.8816d9e5c3b6a860636193e36b6ac4e4.woff2

rel=preload as=font type=font/woff2 crossorigin=anonymous

URL https://a0.muscache.com/airbnb

rel=preconnect crossorigin=anonymous

Origin-Trial

Other

AkOekvxwprBLSP7I2nhyRn5yZGt9lTJN6UIYziFKVYg5OhlzmlNDciWbBWkEQ5TYPz+aqsuIUT2pPEjPUD5dFAsAAABneyJvcmlnaW4iOiJodHRwczovL2FpcmJuYi5jb206NDQzIiwiZmVhdHVyZSI6IlByaW9yaXR5SGludHNBUEkiLCJleHBpcnkiOjE2NDc5OTM1OTksImlzU3ViZG9tYWluIjp0cnVlfQ==

Server-Timing

Other

ingress;dur=336, upstream;dur=336, cdn-cache; desc=HIT, edge; dur=1, origin; dur=UNSET

Status

Other

200 OK

X-Airbnb-Everest-Device-Id

Other

1785257140.EANTczNWE2YmUyNzU3Zm.u9WzAJGcrgDQgUWP0Iwbqthor9lbJyI6RppqhWbvV4Q

X-Airbnb-Internal-Trace-Id

Other

H7DRTim7sE63phHhrW34pw==

X-Airbnb-Kraken-Flush-Body

Other

1

X-Airbnb-Sureride

Other

c1a1c.0.cd5ec817.1785257140.14f59525%%h1

X-Browser-Type

Other

unknown

X-Envoy-Upstream-Service-Time

Other

336

X-Erf-Bev-Bev

Other

1785257140_EANDNmYzE2NzU1MD

X-Erf-Bev-Bev-Is-Generated

Other

1

X-Instrumentation

Other

airbnb

X-Kraken-Loop-Name

Other

seo-loop

X-Server-Lifecycle-Phase

Other

running

X-Server-Name

Other

www.airbnb.com

akamai-request-bc: [a=23.200.94.205,b=351638821,c=g,n=US_VA_STERLING,o=20940]
alt-svc: h3=":443"; ma=93600
cachestatus: cache
date: Tue, 28 Jul 2026 16:45:40 GMT
link: <https://a0.muscache.com/airbnb/static/airbnb-dls-web/build/fonts/cereal-variable/AirbnbCerealVF_W_Wght.8816d9e5c3b6a860636193e36b6ac4e4.woff2>;rel=preload;as=font;type=font/woff2;crossorigin=anonymous,<https://a0.muscache.com/airbnb>;rel=preconnect;crossorigin=anonymous
origin-trial: AkOekvxwprBLSP7I2nhyRn5yZGt9lTJN6UIYziFKVYg5OhlzmlNDciWbBWkEQ5TYPz+aqsuIUT2pPEjPUD5dFAsAAABneyJvcmlnaW4iOiJodHRwczovL2FpcmJuYi5jb206NDQzIiwiZmVhdHVyZSI6IlByaW9yaXR5SGludHNBUEkiLCJleHBpcnkiOjE2NDc5OTM1OTksImlzU3ViZG9tYWluIjp0cnVlfQ==
server-timing: ingress;dur=336, upstream;dur=336, cdn-cache; desc=HIT, edge; dur=1, origin; dur=UNSET
status: 200 OK
x-airbnb-everest-device-id: 1785257140.EANTczNWE2YmUyNzU3Zm.u9WzAJGcrgDQgUWP0Iwbqthor9lbJyI6RppqhWbvV4Q
x-airbnb-internal-trace-id: H7DRTim7sE63phHhrW34pw==
x-airbnb-kraken-flush-body: 1
x-airbnb-sureride: c1a1c.0.cd5ec817.1785257140.14f59525%%h1
x-browser-type: unknown
x-envoy-upstream-service-time: 336
x-erf-bev-bev: 1785257140_EANDNmYzE2NzU1MD
x-erf-bev-bev-is-generated: 1
x-instrumentation: airbnb
x-kraken-loop-name: seo-loop
x-server-lifecycle-phase: running
x-server-name: www.airbnb.com

Recommendations

Enable compression (gzip/brotli) to improve performance