airbnb.com
HTML metadata
Technology
- Server
- nginx
- CMS
- Gatsby
Third-party hosts loaded (30)
- a0.muscache.com×90
- com.airbnb.android×1
- de.airbnb.lu×1
- fr.airbnb.be×1
- fr.airbnb.ca×1
- fr.airbnb.ch×1
- ga.airbnb.ie×1
- hi.airbnb.co.in×1
- it.airbnb.ch×1
- kn.airbnb.co.in×1
- mr.airbnb.co.in×1
- mt.airbnb.com.mt×1
- www.airbnb.ae×1
- www.airbnb.am×1
- www.airbnb.at×1
- www.airbnb.az×1
- www.airbnb.ba×1
- www.airbnb.be×1
- www.airbnb.ca×1
- www.airbnb.cat×1
- www.airbnb.ch×1
- www.airbnb.cl×1
- www.airbnb.co.cr×1
- www.airbnb.co.id×1
- www.airbnb.co.in×1
- www.airbnb.co.kr×1
- www.airbnb.co.nz×1
- www.airbnb.co.uk×1
- www.airbnb.co.ve×1
- www.airbnb.co.za×1
Registration
- Registrar
- MarkMonitor Inc.
- Created
- 2008-08-05
- Expires
- 2026-08-05 77 days left
- Updated
- 2024-10-11
- Name servers
-
- dns1.p08.nsone.net
- dns2.p08.nsone.net
- dns3.p08.nsone.net
- dns4.p08.nsone.net
- ns-1453.awsdns-53.org
- ns-1932.awsdns-49.co.uk
- ns-474.awsdns-59.com
- ns-558.awsdns-05.net
DNS records live
- NS
-
- dns1.p08.nsone.net
- dns2.p08.nsone.net
- dns3.p08.nsone.net
- dns4.p08.nsone.net
- ns-1453.awsdns-53.org
- ns-1932.awsdns-49.co.uk
- ns-474.awsdns-59.com
- ns-558.awsdns-05.net
- MX
-
- 1 aspmx.l.google.com
- 10 alt3.aspmx.l.google.com
- 10 alt4.aspmx.l.google.com
- 5 alt1.aspmx.l.google.com
- 5 alt2.aspmx.l.google.com
- TXT
-
Show 40 TXT records
adobe-idp-site-verification=e68ae64c-3a65-4439-b368-0042e72c4cc8apple-domain-verification=KVJVb0VKHY0IkzDHwework-site-verification=pnT3RXj0097aqZvBgoogle-site-verification=HEoQR0xvby-BYv7pNt06jkvTF44l6rvMnREUZSTyfYQgradle-verification=VV7U686RA4HKV4QKVJ4L85Q6V6CJ6status-page-domain-verification=vxdvtv6jn2y9miro-verification=c5c6890aa37542fb59662ade09a0778c6e028b2fMS=ms85621737cisco-ci-domain-verification=eef9c0a839b89aed57cdd00866d163bb0660fec297c0c1e4b275baec96cfa10google-site-verification=A8e2zY9GYwx8D7x0aOz09Vl4gHfPmv86y_TbW1TUDqsatlassian-domain-verification=mvMbea0qZ4IoMr8/xjkRYgjiHikXBbF04PZnZYv1Nj9UgppCnagnNaSo4T8QnCnPopenai-domain-verification=dv-g8FeEwzIIZCUjUpPuF8szG3afacebook-domain-verification=t3zulila9jjnrfbyt6vjamhqdxz47fDirectFedAuthUrl=https://airbnb.okta.com/app/airbnb_pwcprodnewhiddensaml_1/exk223q4dm1BiHGe81d8/sso/samlreejig-platform-domain-verification-0dc5cd=a9i760YDrujxnHMEEoXwZP5bDgoogle-site-verification=EFtD_37EY5f55YpAvM8rJ-e6Mwi1I3HF9Xuym2-ZlY8neat-pulse-domain-verification-Kkvm4PN=ab046095-265e-45ae-8816-c61097444bfdsegment-site-verification=ZkxkEuKJrGI9MrWGC0qw795Xkj9ZlcBqlucidlink-verification=B2MS39YZ6H92VYF0X75CJHKRC4docusign=1c606b88-26ef-48f9-8913-a4251a94753250c24edbaddf46e8ad85f3b7aa6c19bbyahoo-verification-key=YbxdxsyS96Uy5zQpwbZnLfjBY3tMlG2qWTSLHvVrsZ8=anthropic-domain-verification-2s2h87=NaRxcN9zTtIb3insUyX7U264Aecostruxure-it-verification=5dd49b15-5fc0-4967-914f-3cc7b2fd6cdfrzp-site-verification=31fa3e1cd566e8d7347ed9bb16424c59stripe-verification=271cb9609512aa1a36ff5693b0a5cd9f04d19e089e8abae29dde633abc19749dcanva-site-verification=LTDCDSi1WalQaoEcq8B1WAelevenlabs=igH15TA-6-8aXgxhsL6--iDut7kibGkXsl3Qrvth8gYmasv=MDSVaBxDxTKiIngeAbltVvdnlTkAhnciwebexdomainverification.725890277b499457e053ab06fc0a5ef4=b060825b-4db4-4ce3-a61e-debc56370fc0dtm-domain-verification=pKWJVhJM8WfWtDBjyfKZjwxGurB9fiCf1TpvWO_Kvmw_xq93ok5sfmdl10if1q09mj0s3dwyg7zwebexdomainverification.=162d362c-c218-48f0-8b53-0017116e6f29domain-verification=e9c992bdf7235e685b1c830406ca7c07bedda3556f424d92c3979eebd695c033paloaltonetworks-site-verification=4df1258d8366090409f33305a49c27e5e867aa6dfd8d8d936c60bdee3396ee04bettercomp-verify=2b6685a8a6a942417057188531c867db5c85bc8aa25f038a77784e6f0f8bc84fgoogle-site-verification=_e6Ayd8GN0S5dR116WkaM5ds5tx3ekRD5DC9-51pGrgdocusign=d56dee1c-0384-4ffa-8801-e6bea308af97status-page-domain-verification=tb81t2ndk8pbgoogle-site-verification=Dz--VdnW2R_4K45T0eM8i0vNpFlip_o10WidHL5a3cg
Email authentication strong
- SPF
-
v=spf1 include:spf1.airbnb.com ip6:2c0f:fb50:4864::/56 ip6:2a00:1450:4864::/56 ip6:2800:3f0:4864::/56 ip6:2607:f8b0:4864::/56 ip6:2404:6800:4864::/56 ip6:2001:4860:4864::/56 ip4:87.253.232.0/21 ip4:76.223.176.0/20 ip4:76.223.128.0/19 -allstrict (-all) - DMARC
-
v=DMARC1;p=reject;sp=reject;pct=100;ruf=mailto:dmarc.forensic@airbnb.com;rua=mailto:dmarc.aggregate@airbnb.com;aspf=r;adkim=r;fo=1;ri=3600policy: reject (enforced) · sp=reject - DKIM
-
- google:
v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCf/XaKSG0J1epRu28cB3wCG5T38NAx/YAgQKU5QWYbvGllCu9OQtWnw+BtmVJ4JeMM751Z8vGkoaYjE9AQeS… - k1:
k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDBBUOC29DG8U8ZMCZZxx9LE+WNfr3g4xaVzaGAlnPsYGVfX+8MUl5lFZPgGQyrzW4iykmU41BPLKFBWaZ9B0wC9JY6kOK… - smtpapi:
k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDPtW5iwpXVPiH5FzJ7Nrl8USzuY9zqqzjE0D1r04xDN6qwziDnmgcFNNfMewVKN2D1O+2J9N14hRprzByFwfQW76…
selectors probed - google:
Certificate (current)
DigiCert Global G2 TLS RSA SHA256 2020 CA1
Expires in 50 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- findings
-
- short HSTS max-age
- CSP uses wildcard sources
- missing Referrer Policy
- missing Permissions Policy
Header values
- x-frame-options
SAMEORIGIN- x-content-type-options
nosniff- content-security-policy
child-src blob:; connect-src 'self' https: wss://ws.airbnb.com wss://ws.airbnb.com https://netverify.com https://*.netverify.com wss: *.amap.com https://*.mapbox.com; default-src 'self' https: blob:; font-src 'self' data: https://*.muscache.com fonts.gstatic.com https://use.typekit.net https:; frame-src * https://*.cardinalcommerce.com; img-src 'self' https: data: https://*.mapbox.com blob:; media-src 'self' https: blob:; script-src 'self' 'unsafe-eval' https://a0.muscache.com https://cdn.siftscience.com https://ss.musthird.com https://t1.musthird.com https://bat.bing.com https://connect.facebook.net https://www.google-analytics.com https://www.googleadservices.com https://tpc.googlesyndication.com https://www.googletagmanager.com https://maps.googleapis.com https://ajax.googleapis.com https://*.g.doubleclick.net https://www.google.com https://www.gstatic.com https://smartlock.google.com https://accounts.google.com https://app.link https://cdn.branch.io https://api.branch.io https://ba- strict-transport-security
max-age=10886400; includeSubdomains
Links to (5)
Linked from (50)
- reactivex.io×4
- montereyshootout.com×4
- ccianet.org×4
- visittampabay.com×4
- babeljs.io×4
- weddingsinyosemite.com×4
- graphql.org×4
- sexwithstrangersshow.com×4
- airbnb.org×4
- jestjs.io×4
- rubyonrails.org×4
- backbonejs.org×4
- visitalamance.com×3
- caldonjuan.com×3
- octorate.com×3
- json-schema.org×3
- sunnysidesisters.com×3
- lollapalooza.com×3
- pcarrier.com×3
- skyvalleyziptours.com×3
- sixthstreet.com×3
- therifeguide.com×3
- jaxvineyards.com×2
- webcurate.co×2
- alignedconference.org×2
- gfpuertoricocyclingchallenge.com×2
- zencancun.com×2
- clasicapuertorico.com×2
- tsitsikammaselfcatering.com×2
- traverseconnect.com×2
- nmchamberalliance.com×2
- botanistandbarrel.com×2
- hotspringsnc.org×2
- motellili.com×2
- downtownbooneia.com×2
- thecedarshaliburton.com×2
- ikorculainfo.com×2
- keepmcintoshbeautiful.com×2
- strattonskihouses.com×2
- startuplessonslearned.com×2
- shrevearts.org×2
- sojourndc.com×2
- earlyretirementnow.com×2
- moontowerloft.com×2
- explorecornwallct.com×2
- foxtrotcabins.com×2
- thelibertyman.com×2
- hillsborobrewingcompany.com×2
- andurrianteblog.com×2
- juicemagazine.com×2