HTTP Headers Analysis for https://www.luckey.es

Detected Technologies from Headers

See all in URL Inspect 27

Adobe Fonts (Typekit)

Akamai

AMP

Arkose Labs

Microsoft Advertising

Branch

Envoy

Facebook

GeeTest

Google AdSense

Google Analytics

Google Cloud Storage

Google Conversion Tracking

Google DoubleClick

Google Fonts

Google Hosted Libraries

Google Maps

Google Pay

Google reCAPTCHA

Google Search

Google Static File Front End

Google Sign-In

Google Tag Manager

New Relic

Nginx

Yahoo

Google Cloud

HTTP Security Headers

Status

Strict-Transport-Security

Present

max-age=10886400; includeSubdomains

Content-Security-Policy

Basic

connect-src; default-src; font-src; +8 more Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Good

SAMEORIGIN

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Increase HSTS max-age to at least 1 year and add includeSubDomains
• Improve CSP by adding more specific directives and removing 'unsafe-inline'
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

close, Transfer-Encoding

Transfer-Encoding

Performance

chunked

connection: close, Transfer-Encoding
transfer-encoding: chunked

Caching Headers

Cache-Control

Caching

public, max-age=84364

Expires

Caching

Sat, 01 Aug 2026 23:39:23 GMT

cache-control: public, max-age=84364
expires: Sat, 01 Aug 2026 23:39:23 GMT

Content Headers

Content-Type

Content

text/html;charset=utf-8

content-type: text/html;charset=utf-8

Server Headers

Server

nginx

server: nginx

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

Cookies

set-cookie: everest_cookie=1785543199.EAYzM2ZGI0MDRlNWNmYT.mkxPTaue9imy0fa4tAv-kwOkGQ8g9CN6ugQJI0jqsyw; expires=Tue, 31-Jul-2029 00:13:19 GMT; path=/; domain=.airbnb.com; secure
bev=1785543199_EAYTY2MTk2MDFiZD; expires=Mon, 31-Jul-2028 00:13:19 GMT; path=/; domain=.airbnb.com; secure
country=US; path=/; domain=.airbnb.com; secure
ak_bmsc=2559A9DC555E1995D0476C43E0D2B5DF~000000000000000000000000000000~YAAQjIEyF1MD2KqfAQAArgyrugALRJ09nTNtQ7ZdkYVJ1T/n5pth+bMiS5hPyWcbvnVBWcRRzb8P/Rs6tGL9mgGN6jH90/FBKDBYcVZuO8yRFvVf/DhqgFxEO2wasbskskZKnedsGq5lmvfMtWswkmWHLCuYN9/DV/URUF1ypPYcOVyfHwEYnuqjv0Cqo2V/J6HlSABLBtXDqI0woOrWmaK49l41KBLCcbb9EYRaQE1mD27RvMRHgpOs9sUYHyQt05pZpey7lzJRmlwNN+SvW0gjhH8PjHrBQWL9bEj/Tifz9u6ry/w+0bvnPoTHvMEoznCpP3TiVH1ln7ChXV29/Fk9zJiReP+rZQqL; Domain=.airbnb.com; Path=/; Expires=Sat, 01 Aug 2026 02:13:19 GMT; Max-Age=7200; HttpOnly

Other Headers

Akamai-Request-Bc

Other

[a=23.50.129.140,b=2154299483,c=g,n=US_VA_ASHBURN,o=20940],[c=p,n=US_VA_ASHBURN,o=20940],[c=c,n=US_VA_ASHBURN,o=20940]

Alt-Svc

Other

h3=":443"; ma=93600

Cachestatus

Other

on

Date

Other

Sat, 01 Aug 2026 00:13:19 GMT

Link

Other

URL https://a0.muscache.com/airbnb/static/airbnb-dls-web/build/fonts/cereal-variable/AirbnbCerealVF_W_Wght.8816d9e5c3b6a860636193e36b6ac4e4.woff2

rel=preload as=font type=font/woff2 crossorigin=anonymous

URL https://a0.muscache.com/airbnb

rel=preconnect crossorigin=anonymous

Origin-Trial

Other

AkOekvxwprBLSP7I2nhyRn5yZGt9lTJN6UIYziFKVYg5OhlzmlNDciWbBWkEQ5TYPz+aqsuIUT2pPEjPUD5dFAsAAABneyJvcmlnaW4iOiJodHRwczovL2FpcmJuYi5jb206NDQzIiwiZmVhdHVyZSI6IlByaW9yaXR5SGludHNBUEkiLCJleHBpcnkiOjE2NDc5OTM1OTksImlzU3ViZG9tYWluIjp0cnVlfQ==

Server-Timing

Other

ingress;dur=280, upstream;dur=280, cdn-cache; desc=MISS, edge; dur=172, origin; dur=UNSET

Status

Other

200 OK

X-Airbnb-Everest-Device-Id

Other

1785543199.EAYzM2ZGI0MDRlNWNmYT.mkxPTaue9imy0fa4tAv-kwOkGQ8g9CN6ugQJI0jqsyw

X-Airbnb-Internal-Trace-Id

Other

T2j_2HTS7PtvrqfuONUh3A==

X-Airbnb-Kraken-Flush-Body

Other

1

X-Airbnb-Sureride

Other

c1a1o.0.8c813217.1785543199.8068005b%%i1c1o%%t1d1o.T2j_2HTS7PtvrqfuONUh3A==%%e1f1o.E2IHEUl1EAUJMgtdDyMSFxQwFlwXegYeDXFGTg%%t1d1o.T2j_2HTS7PtvrqfuONUh3A==%%h1

X-Browser-Type

Other

unknown

X-Envoy-Upstream-Service-Time

Other

280

X-Erf-Bev-Bev

Other

1785543199_EAYTY2MTk2MDFiZD

X-Erf-Bev-Bev-Is-Generated

Other

1

X-Instrumentation

Other

airbnb

X-Kraken-Loop-Name

Other

seo-loop

X-Server-Lifecycle-Phase

Other

running

X-Server-Name

Other

www.airbnb.com

akamai-request-bc: [a=23.50.129.140,b=2154299483,c=g,n=US_VA_ASHBURN,o=20940],[c=p,n=US_VA_ASHBURN,o=20940],[c=c,n=US_VA_ASHBURN,o=20940]
alt-svc: h3=":443"; ma=93600
cachestatus: on
date: Sat, 01 Aug 2026 00:13:19 GMT
link: <https://a0.muscache.com/airbnb/static/airbnb-dls-web/build/fonts/cereal-variable/AirbnbCerealVF_W_Wght.8816d9e5c3b6a860636193e36b6ac4e4.woff2>;rel=preload;as=font;type=font/woff2;crossorigin=anonymous,<https://a0.muscache.com/airbnb>;rel=preconnect;crossorigin=anonymous
origin-trial: AkOekvxwprBLSP7I2nhyRn5yZGt9lTJN6UIYziFKVYg5OhlzmlNDciWbBWkEQ5TYPz+aqsuIUT2pPEjPUD5dFAsAAABneyJvcmlnaW4iOiJodHRwczovL2FpcmJuYi5jb206NDQzIiwiZmVhdHVyZSI6IlByaW9yaXR5SGludHNBUEkiLCJleHBpcnkiOjE2NDc5OTM1OTksImlzU3ViZG9tYWluIjp0cnVlfQ==
server-timing: ingress;dur=280, upstream;dur=280, cdn-cache; desc=MISS, edge; dur=172, origin; dur=UNSET
status: 200 OK
x-airbnb-everest-device-id: 1785543199.EAYzM2ZGI0MDRlNWNmYT.mkxPTaue9imy0fa4tAv-kwOkGQ8g9CN6ugQJI0jqsyw
x-airbnb-internal-trace-id: T2j_2HTS7PtvrqfuONUh3A==
x-airbnb-kraken-flush-body: 1
x-airbnb-sureride: c1a1o.0.8c813217.1785543199.8068005b%%i1c1o%%t1d1o.T2j_2HTS7PtvrqfuONUh3A==%%e1f1o.E2IHEUl1EAUJMgtdDyMSFxQwFlwXegYeDXFGTg%%t1d1o.T2j_2HTS7PtvrqfuONUh3A==%%h1
x-browser-type: unknown
x-envoy-upstream-service-time: 280
x-erf-bev-bev: 1785543199_EAYTY2MTk2MDFiZD
x-erf-bev-bev-is-generated: 1
x-instrumentation: airbnb
x-kraken-loop-name: seo-loop
x-server-lifecycle-phase: running
x-server-name: www.airbnb.com

Recommendations

Enable compression (gzip/brotli) to improve performance