HTTP Headers Analysis for https://transparency.airbnb.com

Detected Technologies from Headers

See all in URL Inspect 3

Akamai

Nginx

WordPress VIP

HTTP Security Headers

Status

Strict-Transport-Security

Present

max-age=10886400; includeSubdomains

Content-Security-Policy

Missing

Not configured Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Good

SAMEORIGIN

X-Content-Type-Options

Missing

Not configured

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Increase HSTS max-age to at least 1 year and add includeSubDomains
• Add Content-Security-Policy header to prevent XSS attacks
• Add X-Content-Type-Options: nosniff
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

close, Transfer-Encoding

Transfer-Encoding

Performance

chunked

connection: close, Transfer-Encoding
transfer-encoding: chunked

Caching Headers

Cache-Control

Caching

max-age=0, no-cache

Expires

Caching

Sat, 25 Jul 2026 05:58:23 GMT

Pragma

Caching

no-cache

cache-control: max-age=0, no-cache
expires: Sat, 25 Jul 2026 05:58:23 GMT
pragma: no-cache

Content Headers

Content-Type

Content

text/html; charset=UTF-8

content-type: text/html; charset=UTF-8

Server Headers

Server

nginx

X-Powered-By

Server

WordPress VIP <https://wpvip.com>

server: nginx
x-powered-by: WordPress VIP <https://wpvip.com>

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

Cookies

set-cookie: pll_language=en; expires=Sun, 25 Jul 2027 05:58:23 GMT; Max-Age=31536000; path=/; secure; SameSite=Lax
everest_cookie=1784959103.EAMzA0OGFlNDkxNzNmZj.r0mVG5dQ1TAIK85TyoSz4lZQO759biNA7bd5zZMyHlE; expires=Tue, 24-Jul-2029 05:58:23 GMT; path=/; domain=.airbnb.com; secure
ak_bmsc=29C50DE84894C47269C3FBD50C76FDB8~000000000000000000000000000000~YAAQmWvcF1/+AFWfAQAAhXPalwD5tWNrG9KQPULGUFi3BUPpAvlRmIGRiMWEiY8RVQAgnC/DxVYcAaDX5eoVhfZ6bfES7neZeBqLv7Zlw2cG3nKH0VWaBjX9dkw844O8O3SuabjM3yNa2U1EhK/RA6RQyAoosxH+U8BYi9095ZAXF3DsYJsQBNz330LtO8ieMo6kEQ4Oq7EjVePfxCNh2tiOMP1zlkelCdVxclV4ZSAnUtMER9cOVPYWZAf/OX/PczVAvTRxPxJKQxWM7FKsaaq7gw3N4iWuMhZfjLyAfSo9JRxpp/U18MnLklREuiKAboIc2LtAsf8l7CbJeFTVj76g0cN9rjPw1dh0sg==; Domain=.airbnb.com; Path=/; Expires=Sat, 25 Jul 2026 07:58:23 GMT; Max-Age=7200; HttpOnly

Other Headers

Akamai-Request-Bc

Other

[a=23.220.107.153,b=1486390424,c=g,n=US_VA_ASHBURN,o=20940],[c=c,n=US_VA_ASHBURN,o=20940],[a=247,c=o]

Cachestatus

Other

on

Date

Other

Sat, 25 Jul 2026 05:58:23 GMT

Host-Header

Other

a9130478a60e5f9135f765b23f26593b

Link

Other

URL https://news.airbnb.com/wp-json/

rel=https://api.w.org/

URL https://news.airbnb.com/wp-json/wp/v2/pages/236470

rel=alternate title=JSON type=application/json

URL https://news.airbnb.com/?p=236470

rel=shortlink

X-Airbnb-Everest-Device-Id

Other

1784959103.EAMzA0OGFlNDkxNzNmZj.r0mVG5dQ1TAIK85TyoSz4lZQO759biNA7bd5zZMyHlE

X-Airbnb-Sureride

Other

c1a1o.0.996bdc17.1784959103.58988498%%i1c1p.6NR921CG%%h1

X-Hacker

Other

If you're reading this, you should visit https://join.a8c.com/viphacker and apply to join the fun, mention this header.

X-Rq

Other

dca5 0 20 9980

akamai-request-bc: [a=23.220.107.153,b=1486390424,c=g,n=US_VA_ASHBURN,o=20940],[c=c,n=US_VA_ASHBURN,o=20940],[a=247,c=o]
cachestatus: on
date: Sat, 25 Jul 2026 05:58:23 GMT
host-header: a9130478a60e5f9135f765b23f26593b
link: <https://news.airbnb.com/wp-json/>; rel="https://api.w.org/", <https://news.airbnb.com/wp-json/wp/v2/pages/236470>; rel="alternate"; title="JSON"; type="application/json", <https://news.airbnb.com/?p=236470>; rel=shortlink
x-airbnb-everest-device-id: 1784959103.EAMzA0OGFlNDkxNzNmZj.r0mVG5dQ1TAIK85TyoSz4lZQO759biNA7bd5zZMyHlE
x-airbnb-sureride: c1a1o.0.996bdc17.1784959103.58988498%%i1c1p.6NR921CG%%h1
x-hacker: If you're reading this, you should visit https://join.a8c.com/viphacker and apply to join the fun, mention this header.
x-rq: dca5 0 20 9980

Recommendations

Enable compression (gzip/brotli) to improve performance

Consider removing X-Powered-By header to hide server technology