HTTP Headers

Show the HTTP headers for a URL, with a full break-down of details. Will follow redirects.

Summary

Response
403
Total Requests
1
Total Time
64 ms
  • IP
    18.238.80.38
    View Map

  • Timing

    Wait

    0 ms

    DNS

    20 ms

    TCP

    4 ms

    Request

    0 ms

    First Byte

    25 ms

    Download

    2 ms

    Total

    64 ms

  • HTTP Headers

    Content-Type

    text/html;charset=utf-8

    The MIME type of this content.

    Problems were detected with this header

    • Unknown MIME type.
    Content-Length

    775

    The length of the response body in octets (8-bit bytes).

    Connection

    keep-alive

    Control options for the current connection and list of hop-by-hop response fields.

    keep-alive - The client would like to keep the connection open.

    Server

    DataDome

    A name for the server.

    DataDome - Description of the server software.

    Access-Control-Allow-Credentials

    true

    Allow credentials to be sent in CORS requests.

    X-Datadome

    protected

    X-Envoy-Upstream-Service-Time

    3

    Date

    Sun, 20 Sep 2026 19:05:12 GMT

    The date and time that the message was sent.

    Access-Control-Allow-Origin

    *

    Indicate whether the response can be shared with the given origin.

    * - The browser is allowed to request resources from the origin.

    X-Dd-B

    2

    Pragma

    no-cache

    HTTP/1.0 backwards compatible cache handling.

    no-cache - Force requests to the origin server before releasing a cache.

    X-Datadome-Cid

    AHrlqAAAAAMAyBdMUvroY_UAwPH2-w==

    Cache-Control

    no-store, must-revalidate

    Inform all caching mechanisms from server to client whether they may cache this object.

    • no-store

      May not be stored by any cache.

    • must-revalidate

      Stale caches must not be used.

    Set-Cookie

    datadome=l6bKhAJ_I0bPY1BzwMxTp8_ACdmLnB7cAzw0t7iyaFkOzV_UFR1xD7KwYdRSVD64fkpAIgXZMGj~J2i0CPy6NfJlHf0HIBBxW_51Yqm1sNItEqtbbeFDcLgo90PDRJM0; Max-Age=31104000; Domain=.tripadvisor.com; Path=/; Secure; SameSite=Lax

    A cookie sent from the server to be set on the client

    • datadome

      l6bKhAJ_I0bPY1BzwMxTp8_ACdmLnB7cAzw0t7iyaFkOzV_UFR1xD7KwYdRSVD64fkpAIgXZMGj~J2i0CPy6NfJlHf0HIBBxW_51Yqm1sNItEqtbbeFDcLgo90PDRJM0

      Cookie name and value.

    • Max-Age

      31104000 (360 days)

      Number of seconds until the cookie expires.

    • Domain

      .tripadvisor.com

      The client will only send the cookie when requesting from this domain.

    • Path

      /

      The client will only send the cookie when requesting this path, or subdirectories, from the server.

    • Secure

      The cookie is only sent when requesting from a https domain.

    • Samesite

      Lax

      Cookie is not sent on cross-site requests but is when following a link to the origin.

    Set-Cookie

    TAUnique=%1%enc%3ALbKzObzNTqEGMg%2FWCbrT1JPASnJfDz38R0DHhWNvXwaT%2B4Mc%2FGbLqnrmi5YgNsXiNox8JbUSTxk%3D; Max-Age=63072000; HttpOnly; Path=/

    A cookie sent from the server to be set on the client

    • TAUnique

      %1%enc%3ALbKzObzNTqEGMg%2FWCbrT1JPASnJfDz38R0DHhWNvXwaT%2B4Mc%2FGbLqnrmi5YgNsXiNox8JbUSTxk%3D

      Cookie name and value.

    • Max-Age

      63072000 (2 years)

      Number of seconds until the cookie expires.

    • HttpOnly

      Prevents access to the cookie through JavaScript.

    • Path

      /

      The client will only send the cookie when requesting this path, or subdirectories, from the server.

    Accept-Ch

    Sec-CH-UA,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-Device-Memory

    Specify what client hints should be included in subsequent requests.

    • sec-ch-ua

      Problems were found.

      • Option is not one of known values.

    • sec-ch-ua-mobile

      Problems were found.

      • Option is not one of known values.

    • sec-ch-ua-platform

      Problems were found.

      • Option is not one of known values.

    • sec-ch-ua-arch

      Problems were found.

      • Option is not one of known values.

    • sec-ch-ua-full-version-list

      Problems were found.

      • Option is not one of known values.

    • sec-ch-ua-model

      Problems were found.

      • Option is not one of known values.

    • sec-ch-device-memory

      Problems were found.

      • Option is not one of known values.
    Access-Control-Expose-Headers

    x-dd-b, x-set-cookie

    Charset

    utf-8

    Strict-Transport-Security

    max-age=31536000; includeSubDomains

    A HSTS Policy informing the HTTP client how long to cache the HTTPS only policy and whether this applies to subdomains.

    • Max-Age

      31536000 (1 year)

      The time a browser should remember a site can only be accessed with https (seconds).

    • includesubdomains

      max-age applies to subdomains as well.

    X-Request-Id

    1d8b251b-0e2b-48ff-a5be-8747182fdbcf

    Vary

    Accept-Encoding

    Indicates that different content may be provided to different clients, depending on the vary header.

    • Headers

      • Accept-Encoding
    X-Cache

    Error from cloudfront

    Indicates whether a cache was used to server this response.

    Via

    1.1 44bf771f8484aeae8f408da7ade14f32.cloudfront.net (CloudFront)

    Added by proxies to track a request through proxies and to avoid loops.

    • Version

      1.1

      Protocol version.

    • Host

      Host name.

    X-Amz-Cf-Pop

    JFK52-P5

    X-Amz-Cf-Id

    FN7n0BxDVS6SRNcAcORooEClXXu9eHcN-uj_SLeYHvUoViXQLRHMag==