DNS Gurus
Open Cached · just now
33 Headers

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=10886400; includeSubdomains
Content-Security-Policy
Basic
child-src; connect-src; default-src; +9 more
X-Frame-Options
Good
SAMEORIGIN
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • • Improve CSP by adding more specific directives and removing 'unsafe-inline'
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

Performance Headers

2 headers
Connection
Performance
Transfer-Encoding
Transfer-Encoding
Performance
chunked

Caching Headers

2 headers
Cache-Control
Caching
no-store, max-age=0, private, must-revalidate
Expires
Caching
Thu, 01 Jan 1970 00:00:00 GMT

Content Headers

1 headers
Content-Type
Content
text/html;charset=utf-8

Server Headers

1 headers
Server
Server
nginx

CORS Headers

0 headers
No CORS headers found

Cookies Headers

1 headers
Set-Cookie
Cookies
ak_bmsc=3CB57BDEA3518B4ABD267E35B9823185~000000000000000000000000000000~YAAQC2rcF46S36maAQAALzYszh0KkInwN3gid3OsH8L83HUG3Qa1biR9IoKHW9nAbOFlyVSFy7E6Zq/dVaejoxi3if/uZ2hyEttjhw6Fm5GosLgXFQpe8hplf7L4/eZKZdllXVVtBU48VV0m+mTmYPuo1hXNvt4aZGkK614jE27bOfKfUSZrl+kUTqjBK+Nc7p8c4soZY9Fvy/l2PI1Qbnv8P7S1rhEvncO4qArbJ9kMSt94jY5xrLWW3S4iaomT6CDBdHDvJAf51VMSRSHmjzvJFJl9N9MG/mfdBeqObX7xlbHzlUPGfA5EpsCSEaftY3IOTGjhhRlC0+q1e+JalpmuuXIclM9nOjPB; Domain=.airbnb.de; Path=/; Expires=Sat, 29 Nov 2025 07:53:14 GMT; Max-Age=7199; HttpOnly

Other Headers

21 headers
Accept-Ch
Other
Sec-CH-Device-Memory, Sec-CH-DPR, ECT, Sec-CH-UA-Platform-Version, Sec-CH-Viewport-Width, Sec-CH-Device-Memory, Sec-CH-DPR, ECT, Sec-CH-UA-Platform-Version, Sec-CH-Viewport-Width
Accept-Ch-Lifetime
Other
31536000
Akamai-Request-Bc
Other
[a=23.220.106.11,b=1635656567,c=g,n=US_VA_ASHBURN,o=20940],[c=c,n=US_VA_STERLING,o=20940],[a=217,c=o]
Alt-Svc
Other
h3=":443"; ma=93600
Cachestatus
Other
on
Date
Other
Sat, 29 Nov 2025 05:53:15 GMT
Link
Other
<https://a0.muscache.com/airbnb/static/packages/web/common/frontend/core-guest-loop/apps/core-guest-spa/client.1a121a9b2a.css>;rel=preload;as=style;crossorigin=anonymous;media=print,<https://a0.muscache.com/airbnb/static/airbnb-dls-web/build/fonts/cereal-variable/AirbnbCerealVF_W_Wght.2d9d32865ef1262644c455b3ead871e9.woff2>;rel=preload;as=font;type=font/woff2;crossorigin=anonymous,<https://a0.muscache.com/airbnb>;rel=preconnect;crossorigin=anonymous
Origin-Trial
Other
AkOekvxwprBLSP7I2nhyRn5yZGt9lTJN6UIYziFKVYg5OhlzmlNDciWbBWkEQ5TYPz+aqsuIUT2pPEjPUD5dFAsAAABneyJvcmlnaW4iOiJodHRwczovL2FpcmJuYi5jb206NDQzIiwiZmVhdHVyZSI6IlByaW9yaXR5SGludHNBUEkiLCJleHBpcnkiOjE2NDc5OTM1OTksImlzU3ViZG9tYWluIjp0cnVlfQ==
Server-Timing
Other
cdn-cache; desc=MISS, edge; dur=38, origin; dur=112
Status
Other
200 OK
X-Airbnb-Everest-Device-Id
Other
1764395594.EAZjA0NTVkNTJkNzZkNj.9jCJ4bM3Hjygrvf22VlYPhf2JfLk1pofp-e7LaT2zYw
X-Airbnb-Internal-Trace-Id
Other
lGbpB9QO491PBxyWEmeHtw==
X-Airbnb-Kraken-Flush-Body
Other
1
X-Airbnb-Sureride
Other
c1a1o.0.0b6adc17.1764395594.617e2377%%i1c1o%%t1d1o.lGbpB9QO491PBxyWEmeHtw==%%h1
X-Browser-Type
Other
unknown
X-Envoy-Upstream-Service-Time
Other
107
X-Erf-Bev-Bev
Other
1764395594_EAYjk5YWNiYmMxYz
X-Erf-Bev-Bev-Is-Generated
Other
1
X-Instrumentation
Other
airbnb
X-Kraken-Loop-Name
Other
core-guest-loop
X-Server-Lifecycle-Phase
Other
running

Recommendations

Enable compression (gzip/brotli) to improve performance

Analysis completed in 1128ms