Checking results for: www.copaair.com
-
www.copaair.com is ONLINE
Additional info for https://www.copaair.com
Technical Information
| HTTP Status Code | 401 |
|---|---|
| HTTP Version | HTTP/1.1 |
| HTTPS | ✔ Available |
| IP Address | 107.154.76.229 |
| Server Software | CloudFront |
| CDN | CDN |
| Compression | gzip |
| 🚫 🟡 HTTP 401 Error | The server returned a 401 error. Check the access configuration. |
HTTP Status Code 401
HTTP Version HTTP/1.1
HTTPS ✔ Available
IP Address 107.154.76.229
Server Software CloudFront
CDN CDN
Compression gzip
🚫 🟡 HTTP 401 Error The server returned a 401 error. Check the access configuration.
HTTP Version HTTP/1.1
HTTPS ✔ Available
IP Address 107.154.76.229
Server Software CloudFront
CDN CDN
Compression gzip
🚫 🟡 HTTP 401 Error The server returned a 401 error. Check the access configuration.
Redirect Chain
| # | URL | HTTP Status Code | Status |
|---|---|---|---|
| 1 | https://www.copaair.com:443 | 308 | HTTP/2 308 |
| 2 | https://www.copaair.com/es-gs/ | 401 | HTTP/2 401 |
#1 URL https://www.copaair.com:443
HTTP Status Code 308
Status HTTP/2 308
#2 URL https://www.copaair.com/es-gs/
HTTP Status Code 401
Status HTTP/2 401
HTTP Status Code 308
Status HTTP/2 308
#2 URL https://www.copaair.com/es-gs/
HTTP Status Code 401
Status HTTP/2 401
Performance
| DNS Lookup | 6.3 ms |
|---|---|
| TCP Connect | 20.2 ms |
| TLS Handshake | 16.9 ms |
| Time To First Byte (TTFB) | 153.1 ms |
| Content Download | 0.2 ms |
| Total Response Time | 153.3 ms |
DNS Lookup 6.3 ms
TCP Connect 20.2 ms
TLS Handshake 16.9 ms
Time To First Byte (TTFB) 153.1 ms
Content Download 0.2 ms
Total Response Time 153.3 ms
TCP Connect 20.2 ms
TLS Handshake 16.9 ms
Time To First Byte (TTFB) 153.1 ms
Content Download 0.2 ms
Total Response Time 153.3 ms
Security
| HTTPS | ✔ Enabled |
|---|---|
| HSTS | ✔ max-age=31536000; includeSubDomains; preload |
| CSP | ✔ Configured |
| X-Frame-Options | ✔ SAMEORIGIN |
| X-Content-Type-Options | ✔ nosniff |
| Referrer Policy | no-referrer |
| HTTP/2 | ⚠ HTTP/1.1 |
HTTPS ✔ Enabled
HSTS ✔ max-age=31536000; includeSubDomains; preload
CSP ✔ Configured
X-Frame-Options ✔ SAMEORIGIN
X-Content-Type-Options ✔ nosniff
Referrer Policy no-referrer
HTTP/2 ⚠ HTTP/1.1
HSTS ✔ max-age=31536000; includeSubDomains; preload
CSP ✔ Configured
X-Frame-Options ✔ SAMEORIGIN
X-Content-Type-Options ✔ nosniff
Referrer Policy no-referrer
HTTP/2 ⚠ HTTP/1.1
SEO Quick Check
| Title | copaair.com |
|---|
Title copaair.com
Detected Technologies
| Technology | jQuery Google Analytics Google Tag Manager HubSpot |
|---|
Technology jQuery Google Analytics Google Tag Manager HubSpot
HTTP Headers
| Server | CloudFront |
|---|---|
| Date | Thu, 20 Aug 2026 11:54:01 GMT |
| Content-type | text/html;charset=utf-8 |
| X-datadome | protected |
| Accept-ch | Sec-CH-UA,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-Device-Memory |
| Charset | utf-8 |
| Cache-control | max-age=0, private, no-cache, no-store, must-revalidate |
| Pragma | no-cache |
| X-datadome-cid | AHrlqAAAAAMA4XAiSM08IrsANC_MAg== |
| X-dd-b | 1 |
| Set-cookie | incap_ses_562_2847270=UWkEDgceU04mMzfXKKDMB9jqhmoAAAAAG2i7cPn+UQzSBameYowj4A==; path=/ |
| X-cache | LambdaGeneratedResponse from cloudfront |
| Via | 1.1 aa904c87fdb175b5620db71dd20c10f6.cloudfront.net (CloudFront) |
| X-amz-cf-pop | AMS56-P1 |
| X-amz-cf-id | VAFr51yxjXxgZBe9dCDGq9kAexfkNic4RaBKhA0aAX8kh9pLemo7uQ== |
| X-xss-protection | 1; mode=block |
| X-frame-options | SAMEORIGIN |
| Referrer-policy | no-referrer |
| Content-security-policy | default-src 'self' https://*.captcha-delivery.com https://*.datadome.co https://*.trustarc.com https://*.trustarc.eu https://*.truste.com https://*.visualwebsiteoptimizer.com https://*.zdassets.com https://*.zendesk.com https://api.smooch.io https://app.vwo.com wss://api.smooch.io; worker-src 'self' blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.ads-twitter.com https://*.airtrfx.com https://*.captcha-delivery.com https://*.copaair.com https://*.copaairlines-mktg.com https://*.datadome.co https://*.doubleclick.net https://*.dynatrace.com https://*.google.com https://*.groovinads.com https://*.logr-ingest.com https://*.lr-in-prod.com https://*.qualtrics.com https://*.s3-us-west-2.amazonaws.com https://*.sharepoint.com https://*.smartvel.com https://*.sojern.com https://*.trustarc.com https://*.trustarc.eu https://*.truste.com https://*.visualwebsiteoptimizer.com https://*.zdassets.com https://*.zendesk.com https://api.smooch.io https://app.vwo.com https://cdn.uplift-platform.com https://code.jquery.com https://dd.copaair.com https://gtm-server.copaairlines-mktg.com https://js.hsforms.net https://www.gstatic.com https://www.googletagmanager.com wss://api.smooch.io; style-src 'self' 'unsafe-inline' https://*.airtrfx.com https://*.directus.app https://*.smartvel.com https://*.zdassets.com https://*.zendesk.com https://api.smooch.io https://fonts.googleapis.com wss://api.smooch.io; font-src 'self' https://*.airtrfx.com https://*.copaair.com https://*.directus.app https://*.zdassets.com https://*.zendesk.com https://api.smooch.io https://cdn.smartvel.com https://fonts.gstatic.com https://www.gstatic.com wss://api.smooch.io; img-src 'self' data: https://*.airtrfx.com https://*.cm-blue.com https://*.copaair.com https://*.copaairlines-mktg.com https://*.datadome.co https://*.directus.app https://*.doubleclick.net https://*.dynatrace.com https://*.e-planning.net https://*.google-analytics.com https://*.google.com https://*.groovinads.com https://*.hsforms.com https://*.imgix.net https://*.mgid.com https://*.qualtrics.com https://*.s3.amazonaws.com https://*.smartvel.com https://*.taboola.com https://*.visualwebsiteoptimizer.com https://*.zdassets.com https://*.zendesk.com https://analytics.twitter.com https://api.smooch.io https://bat.bing.com https://ciqtracking.com https://conocedores.com https://fonts.gstatic.com https://google.com https://gtm-server.copaairlines-mktg.com https://ib.adnxs.com https://t.co https://www.google.com.co https://www.google.com.pa https://www.gstatic.com https://www.googletagmanager.com wss://api.smooch.io; frame-src 'self' https://*.captcha-delivery.com https://*.copaair.com https://*.copaairlines-mktg.com https://*.doubleclick.net https://*.groovinads.com https://*.hsforms.com https://*.qualtrics.com https://*.securitytrfx.com https://*.visualwebsiteoptimizer.com https://*.zdassets.com https://*.zendesk.com https://api.smooch.io https://app.vwo.com https://consentag.eu https://gtm-server.copaairlines-mktg.com https://storefront.points.com https://www.google.com https://www.gstatic.com https://www.googletagmanager.com https://www.timaticweb2.com https://www.youtube.com wss://api.smooch.io; connect-src 'self' https://*.airtrfx.com https://*.azure.com https://*.copaair.com https://*.copaairlines-mktg.com https://*.datadome.co https://*.doubleclick.net https://*.dynatrace.com https://*.everymundo.workers.dev https://*.google-analytics.com https://*.google.com https://*.hsforms.com https://*.ingest-lr.com https://*.logr-ingest.com https://*.lr-in-prod.com https://*.lr-ingest.io https://*.qualtrics.com https://*.securitytrfx.com https://*.smartvel.com https://*.sumologic.com https://*.trustarc.com https://*.trustarc.eu https://*.truste.com https://*.visualwebsiteoptimizer.com https://*.zdassets.com https://*.zendesk.com https://api.copa.com https://api.smooch.io https://app.vwo.com https://e.logrocket.com https://em-prod-admin-worker.double2.io https://google.com https://gtm-server.copaairlines-mktg.com https://hubspot-forms-static-embed.s3.amazonaws.com https://www.googletagmanager.com wss://api.smooch.io; form-action https://*.copaair.com https://*.hsforms.com https://*.qualtrics.com; frame-ancestors 'self' https://*.captcha-delivery.com https://*.copaair.com https://*.five9.com https://www.google.com; object-src 'none'; base-uri 'self' |
| X-content-type-options | nosniff |
| Strict-transport-security | max-age=31536000; includeSubDomains; preload |
| Vary | Origin |
| X-cdn | Imperva |
| Content-encoding | gzip |
| X-iinfo | 41-66732308-66732316 NNYN CT(1 8 0) RT(1787226840993 17) q(0 1 1 1) r(1 1) U12 |
Server CloudFront
Date Thu, 20 Aug 2026 11:54:01 GMT
Content-type text/html;charset=utf-8
X-datadome protected
Accept-ch Sec-CH-UA,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-Device-Memory
Charset utf-8
Cache-control max-age=0, private, no-cache, no-store, must-revalidate
Pragma no-cache
X-datadome-cid AHrlqAAAAAMA4XAiSM08IrsANC_MAg==
X-dd-b 1
Set-cookie incap_ses_562_2847270=UWkEDgceU04mMzfXKKDMB9jqhmoAAAAAG2i7cPn+UQzSBameYowj4A==; path=/
X-cache LambdaGeneratedResponse from cloudfront
Via 1.1 aa904c87fdb175b5620db71dd20c10f6.cloudfront.net (CloudFront)
X-amz-cf-pop AMS56-P1
X-amz-cf-id VAFr51yxjXxgZBe9dCDGq9kAexfkNic4RaBKhA0aAX8kh9pLemo7uQ==
X-xss-protection 1; mode=block
X-frame-options SAMEORIGIN
Referrer-policy no-referrer
Content-security-policy default-src 'self' https://*.captcha-delivery.com https://*.datadome.co https://*.trustarc.com https://*.trustarc.eu https://*.truste.com https://*.visualwebsiteoptimizer.com https://*.zdassets.com https://*.zendesk.com https://api.smooch.io https://app.vwo.com wss://api.smooch.io; worker-src 'self' blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.ads-twitter.com https://*.airtrfx.com https://*.captcha-delivery.com https://*.copaair.com https://*.copaairlines-mktg.com https://*.datadome.co https://*.doubleclick.net https://*.dynatrace.com https://*.google.com https://*.groovinads.com https://*.logr-ingest.com https://*.lr-in-prod.com https://*.qualtrics.com https://*.s3-us-west-2.amazonaws.com https://*.sharepoint.com https://*.smartvel.com https://*.sojern.com https://*.trustarc.com https://*.trustarc.eu https://*.truste.com https://*.visualwebsiteoptimizer.com https://*.zdassets.com https://*.zendesk.com https://api.smooch.io https://app.vwo.com https://cdn.uplift-platform.com https://code.jquery.com https://dd.copaair.com https://gtm-server.copaairlines-mktg.com https://js.hsforms.net https://www.gstatic.com https://www.googletagmanager.com wss://api.smooch.io; style-src 'self' 'unsafe-inline' https://*.airtrfx.com https://*.directus.app https://*.smartvel.com https://*.zdassets.com https://*.zendesk.com https://api.smooch.io https://fonts.googleapis.com wss://api.smooch.io; font-src 'self' https://*.airtrfx.com https://*.copaair.com https://*.directus.app https://*.zdassets.com https://*.zendesk.com https://api.smooch.io https://cdn.smartvel.com https://fonts.gstatic.com https://www.gstatic.com wss://api.smooch.io; img-src 'self' data: https://*.airtrfx.com https://*.cm-blue.com https://*.copaair.com https://*.copaairlines-mktg.com https://*.datadome.co https://*.directus.app https://*.doubleclick.net https://*.dynatrace.com https://*.e-planning.net https://*.google-analytics.com https://*.google.com https://*.groovinads.com https://*.hsforms.com https://*.imgix.net https://*.mgid.com https://*.qualtrics.com https://*.s3.amazonaws.com https://*.smartvel.com https://*.taboola.com https://*.visualwebsiteoptimizer.com https://*.zdassets.com https://*.zendesk.com https://analytics.twitter.com https://api.smooch.io https://bat.bing.com https://ciqtracking.com https://conocedores.com https://fonts.gstatic.com https://google.com https://gtm-server.copaairlines-mktg.com https://ib.adnxs.com https://t.co https://www.google.com.co https://www.google.com.pa https://www.gstatic.com https://www.googletagmanager.com wss://api.smooch.io; frame-src 'self' https://*.captcha-delivery.com https://*.copaair.com https://*.copaairlines-mktg.com https://*.doubleclick.net https://*.groovinads.com https://*.hsforms.com https://*.qualtrics.com https://*.securitytrfx.com https://*.visualwebsiteoptimizer.com https://*.zdassets.com https://*.zendesk.com https://api.smooch.io https://app.vwo.com https://consentag.eu https://gtm-server.copaairlines-mktg.com https://storefront.points.com https://www.google.com https://www.gstatic.com https://www.googletagmanager.com https://www.timaticweb2.com https://www.youtube.com wss://api.smooch.io; connect-src 'self' https://*.airtrfx.com https://*.azure.com https://*.copaair.com https://*.copaairlines-mktg.com https://*.datadome.co https://*.doubleclick.net https://*.dynatrace.com https://*.everymundo.workers.dev https://*.google-analytics.com https://*.google.com https://*.hsforms.com https://*.ingest-lr.com https://*.logr-ingest.com https://*.lr-in-prod.com https://*.lr-ingest.io https://*.qualtrics.com https://*.securitytrfx.com https://*.smartvel.com https://*.sumologic.com https://*.trustarc.com https://*.trustarc.eu https://*.truste.com https://*.visualwebsiteoptimizer.com https://*.zdassets.com https://*.zendesk.com https://api.copa.com https://api.smooch.io https://app.vwo.com https://e.logrocket.com https://em-prod-admin-worker.double2.io https://google.com https://gtm-server.copaairlines-mktg.com https://hubspot-forms-static-embed.s3.amazonaws.com https://www.googletagmanager.com wss://api.smooch.io; form-action https://*.copaair.com https://*.hsforms.com https://*.qualtrics.com; frame-ancestors 'self' https://*.captcha-delivery.com https://*.copaair.com https://*.five9.com https://www.google.com; object-src 'none'; base-uri 'self'
X-content-type-options nosniff
Strict-transport-security max-age=31536000; includeSubDomains; preload
Vary Origin
X-cdn Imperva
Content-encoding gzip
X-iinfo 41-66732308-66732316 NNYN CT(1 8 0) RT(1787226840993 17) q(0 1 1 1) r(1 1) U12
Date Thu, 20 Aug 2026 11:54:01 GMT
Content-type text/html;charset=utf-8
X-datadome protected
Accept-ch Sec-CH-UA,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-Device-Memory
Charset utf-8
Cache-control max-age=0, private, no-cache, no-store, must-revalidate
Pragma no-cache
X-datadome-cid AHrlqAAAAAMA4XAiSM08IrsANC_MAg==
X-dd-b 1
Set-cookie incap_ses_562_2847270=UWkEDgceU04mMzfXKKDMB9jqhmoAAAAAG2i7cPn+UQzSBameYowj4A==; path=/
X-cache LambdaGeneratedResponse from cloudfront
Via 1.1 aa904c87fdb175b5620db71dd20c10f6.cloudfront.net (CloudFront)
X-amz-cf-pop AMS56-P1
X-amz-cf-id VAFr51yxjXxgZBe9dCDGq9kAexfkNic4RaBKhA0aAX8kh9pLemo7uQ==
X-xss-protection 1; mode=block
X-frame-options SAMEORIGIN
Referrer-policy no-referrer
Content-security-policy default-src 'self' https://*.captcha-delivery.com https://*.datadome.co https://*.trustarc.com https://*.trustarc.eu https://*.truste.com https://*.visualwebsiteoptimizer.com https://*.zdassets.com https://*.zendesk.com https://api.smooch.io https://app.vwo.com wss://api.smooch.io; worker-src 'self' blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.ads-twitter.com https://*.airtrfx.com https://*.captcha-delivery.com https://*.copaair.com https://*.copaairlines-mktg.com https://*.datadome.co https://*.doubleclick.net https://*.dynatrace.com https://*.google.com https://*.groovinads.com https://*.logr-ingest.com https://*.lr-in-prod.com https://*.qualtrics.com https://*.s3-us-west-2.amazonaws.com https://*.sharepoint.com https://*.smartvel.com https://*.sojern.com https://*.trustarc.com https://*.trustarc.eu https://*.truste.com https://*.visualwebsiteoptimizer.com https://*.zdassets.com https://*.zendesk.com https://api.smooch.io https://app.vwo.com https://cdn.uplift-platform.com https://code.jquery.com https://dd.copaair.com https://gtm-server.copaairlines-mktg.com https://js.hsforms.net https://www.gstatic.com https://www.googletagmanager.com wss://api.smooch.io; style-src 'self' 'unsafe-inline' https://*.airtrfx.com https://*.directus.app https://*.smartvel.com https://*.zdassets.com https://*.zendesk.com https://api.smooch.io https://fonts.googleapis.com wss://api.smooch.io; font-src 'self' https://*.airtrfx.com https://*.copaair.com https://*.directus.app https://*.zdassets.com https://*.zendesk.com https://api.smooch.io https://cdn.smartvel.com https://fonts.gstatic.com https://www.gstatic.com wss://api.smooch.io; img-src 'self' data: https://*.airtrfx.com https://*.cm-blue.com https://*.copaair.com https://*.copaairlines-mktg.com https://*.datadome.co https://*.directus.app https://*.doubleclick.net https://*.dynatrace.com https://*.e-planning.net https://*.google-analytics.com https://*.google.com https://*.groovinads.com https://*.hsforms.com https://*.imgix.net https://*.mgid.com https://*.qualtrics.com https://*.s3.amazonaws.com https://*.smartvel.com https://*.taboola.com https://*.visualwebsiteoptimizer.com https://*.zdassets.com https://*.zendesk.com https://analytics.twitter.com https://api.smooch.io https://bat.bing.com https://ciqtracking.com https://conocedores.com https://fonts.gstatic.com https://google.com https://gtm-server.copaairlines-mktg.com https://ib.adnxs.com https://t.co https://www.google.com.co https://www.google.com.pa https://www.gstatic.com https://www.googletagmanager.com wss://api.smooch.io; frame-src 'self' https://*.captcha-delivery.com https://*.copaair.com https://*.copaairlines-mktg.com https://*.doubleclick.net https://*.groovinads.com https://*.hsforms.com https://*.qualtrics.com https://*.securitytrfx.com https://*.visualwebsiteoptimizer.com https://*.zdassets.com https://*.zendesk.com https://api.smooch.io https://app.vwo.com https://consentag.eu https://gtm-server.copaairlines-mktg.com https://storefront.points.com https://www.google.com https://www.gstatic.com https://www.googletagmanager.com https://www.timaticweb2.com https://www.youtube.com wss://api.smooch.io; connect-src 'self' https://*.airtrfx.com https://*.azure.com https://*.copaair.com https://*.copaairlines-mktg.com https://*.datadome.co https://*.doubleclick.net https://*.dynatrace.com https://*.everymundo.workers.dev https://*.google-analytics.com https://*.google.com https://*.hsforms.com https://*.ingest-lr.com https://*.logr-ingest.com https://*.lr-in-prod.com https://*.lr-ingest.io https://*.qualtrics.com https://*.securitytrfx.com https://*.smartvel.com https://*.sumologic.com https://*.trustarc.com https://*.trustarc.eu https://*.truste.com https://*.visualwebsiteoptimizer.com https://*.zdassets.com https://*.zendesk.com https://api.copa.com https://api.smooch.io https://app.vwo.com https://e.logrocket.com https://em-prod-admin-worker.double2.io https://google.com https://gtm-server.copaairlines-mktg.com https://hubspot-forms-static-embed.s3.amazonaws.com https://www.googletagmanager.com wss://api.smooch.io; form-action https://*.copaair.com https://*.hsforms.com https://*.qualtrics.com; frame-ancestors 'self' https://*.captcha-delivery.com https://*.copaair.com https://*.five9.com https://www.google.com; object-src 'none'; base-uri 'self'
X-content-type-options nosniff
Strict-transport-security max-age=31536000; includeSubDomains; preload
Vary Origin
X-cdn Imperva
Content-encoding gzip
X-iinfo 41-66732308-66732316 NNYN CT(1 8 0) RT(1787226840993 17) q(0 1 1 1) r(1 1) U12
Also check www.copaair.com
Non-stop browsing & internet stability
Best VPN in AdBlocking & Malware detection
Best VPN in AdBlocking & Malware detection
Offer ends in:
