HTTP Headers Analysis for https://agoda.net

Detected Technologies from Headers

See all in URL Inspect 3

ASP.NET

Akamai Active incidents

Envoy

HTTP Security Headers

Status

Strict-Transport-Security

Present

max-age=31536000

Content-Security-Policy

Missing

Not configured Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Good

SAMEORIGIN

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Increase HSTS max-age to at least 1 year and add includeSubDomains
• Add Content-Security-Policy header to prevent XSS attacks
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

close, Transfer-Encoding

Transfer-Encoding

Performance

chunked

Vary

Performance

user-agent

connection: close, Transfer-Encoding
transfer-encoding: chunked
vary: user-agent

Caching Headers

Cache-Control

Caching

no-store, no-cache

Pragma

Caching

no-cache

cache-control: no-store, no-cache
pragma: no-cache

Content Headers

Content-Type

Content

text/html; charset=utf-8

content-type: text/html; charset=utf-8

Server Headers

No server headers found

CORS Headers

Access-Control-Allow-Credentials

Cors

true

Access-Control-Allow-Headers

Cors

Content-Type

Access-Control-Allow-Methods

Cors

GET,POST

Access-Control-Expose-Headers

Cors

ag-correlation-id

access-control-allow-credentials: true
access-control-allow-headers: Content-Type
access-control-allow-methods: GET,POST
access-control-expose-headers: ag-correlation-id

Cookies Headers

Set-Cookie

Cookies

set-cookie: ASP.NET_SessionId=rdpan1pfgxkyyaine00mqsjl; domain=www.agoda.com; path=/; SameSite=Lax; secure; HttpOnly
agoda.version.03=CookieId=60b20dfa-f100-4770-8ed2-5f274820182b&DLang=en-us&CurLabel=USD; domain=.agoda.com; path=/; expires=Sun, 15-Aug-2027 00:00:00 GMT; secure
agoda.landings=-1|||rdpan1pfgxkyyaine00mqsjl|2026-08-15T09:27:32|False|19-----1|||rdpan1pfgxkyyaine00mqsjl|2026-08-15T09:27:32|False|20-----1|||rdpan1pfgxkyyaine00mqsjl|2026-08-15T09:27:32|False|99; domain=.agoda.com; path=/; expires=Sun, 15-Aug-2027 00:00:00 GMT; secure; HttpOnly
agoda.attr.fe=-1|||rdpan1pfgxkyyaine00mqsjl|2026-08-15T09:27:32|False|2026-09-14T09:27:32|rbxa8IdHd+cTgb3q; domain=.agoda.com; path=/; expires=Sun, 15-Aug-2027 00:00:00 GMT; secure
agoda.attr.03=ATItems=-1$08-15-2026 09:27$; domain=.agoda.com; path=/; expires=Sun, 15-Aug-2027 00:00:00 GMT; secure; HttpOnly
agoda.cid=-1; domain=.agoda.com; path=/; expires=Sun, 15-Aug-2027 09:27:32 GMT; secure; HttpOnly
agoda.price.01=PriceView=1; domain=.agoda.com; path=/; expires=Sun, 15-Aug-2027 09:27:32 GMT; secure
xsrf_token=CfDJ8Dkuqwv-0VhLoFfD8dw7lYxsWnwwFhttZrTQWKWbYvhrPWeO_wQYwFb02uvJzP7LhYmt6nVMzthw9DU-temftZeKvBABvqanYbvhONZGncL3J0BskNdXFbRF2sHQmBTryesb2yW5Mouj7WItTcb7jb4; path=/; secure; samesite=strict; httponly
t_pp=LhoHA94uwGrPGRxa:JSMZ3qtR/ik8ynLDQf3jZw==:s539q+wp8YRRJNA8McylKLLVVlMCr54sj8T2VJx1/ckRlZKRrKii2fhZ41E5zsJAo1qtXW26P5dZJG8HRWcVpdxz/vYDlqTvcP3YJQHlpj6ew9CSQ0ovAEDULZF5TllIwx8gPWtYqL0Yzrn7dZTd1nBy5nTWECJZHQ25nrCRSNUJ7eJL3r+NSlusbrYr2UGcQqBB7Ha9LNCfin6fpUjsZqYHLVS+DsJZwluA+RuUjGp3jakR7uqiARQDSA==; domain=.agoda.com; path=/; expires=Sat, 15-Aug-2026 03:27:32 GMT; secure; HttpOnly; SameSite=None
agoda.user.03=UserId=4bb2f6cc-e6e5-44ed-8fc3-ab1ca4b80fbd; domain=.agoda.com; path=/; expires=Sun, 15-Aug-2027 02:27:32 GMT; secure; SameSite=None
t_rc=dD0xJjhFVEQrMW02WEEzTlFZbTdEVlF2cFE9MSZ1aWQ9NGJiMmY2Y2MtZTZlNS00NGVkLThmYzMtYWIxY2E0YjgwZmJk.NU0ex2cM0nwGNI9ML/17rugNBzizXRis88xnaN8eLGA=; domain=.agoda.com; path=/; expires=Sun, 16-Aug-2026 02:27:32 GMT; secure; HttpOnly; SameSite=None
agoda.analytics=Id=-7355548132529281249&Signature=-4849591052375276972&Expiry=1786764452525; domain=.agoda.com; path=/; expires=Sat, 15-Aug-2026 03:27:32 GMT; secure
agoda.prius=PriusID=0&PointsMaxTraffic=Agoda; domain=.agoda.com; path=/; expires=Sun, 15-Aug-2027 02:27:32 GMT

Other Headers

Ag-Correlation-Id

Other

25536165-4abf-49a3-a5b6-0f798202bb69

Akamai-Grn

Other

0.29643017.1786760852.22c9c016

Date

Other

Sat, 15 Aug 2026 02:27:32 GMT

Request-Context

Other

appId=

X-Envoy-Datacenter

Other

as

X-Envoy-Upstream-Address

Other

user-6469cfb98b-rf2nv

X-Envoy-Upstream-Service-Time

Other

57

X-Ua-Compatible

Other

IE=edge

ag-correlation-id: 25536165-4abf-49a3-a5b6-0f798202bb69
akamai-grn: 0.29643017.1786760852.22c9c016
date: Sat, 15 Aug 2026 02:27:32 GMT
request-context: appId=
x-envoy-datacenter: as
x-envoy-upstream-address: user-6469cfb98b-rf2nv
x-envoy-upstream-service-time: 57
x-ua-compatible: IE=edge

Recommendations

Enable compression (gzip/brotli) to improve performance