HTTP Headers Analysis for https://agodacdn.cn

Detected Technologies from Headers

See all in URL Inspect 3

ASP.NET

Akamai Active incidents

Envoy

HTTP Security Headers

Status

Strict-Transport-Security

Present

max-age=31536000

Content-Security-Policy

Missing

Not configured Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Good

SAMEORIGIN

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Increase HSTS max-age to at least 1 year and add includeSubDomains
• Add Content-Security-Policy header to prevent XSS attacks
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

close, Transfer-Encoding

Transfer-Encoding

Performance

chunked

Vary

Performance

user-agent

connection: close, Transfer-Encoding
transfer-encoding: chunked
vary: user-agent

Caching Headers

Cache-Control

Caching

no-store, no-cache

Pragma

Caching

no-cache

cache-control: no-store, no-cache
pragma: no-cache

Content Headers

Content-Type

Content

text/html; charset=utf-8

content-type: text/html; charset=utf-8

Server Headers

No server headers found

CORS Headers

Access-Control-Allow-Credentials

Cors

true

Access-Control-Allow-Headers

Cors

Content-Type

Access-Control-Allow-Methods

Cors

GET,POST

Access-Control-Expose-Headers

Cors

ag-correlation-id

access-control-allow-credentials: true
access-control-allow-headers: Content-Type
access-control-allow-methods: GET,POST
access-control-expose-headers: ag-correlation-id

Cookies Headers

Set-Cookie

Cookies

set-cookie: ASP.NET_SessionId=3ccnki2qjznxld2nz5wyoqn5; domain=www.agoda.com; path=/; SameSite=Lax; secure; HttpOnly
agoda.version.03=CookieId=9bc49ba5-8d85-47da-b1f8-0cf418c85e02&DLang=en-us&CurLabel=USD; domain=.agoda.com; path=/; expires=Wed, 18-Aug-2027 00:00:00 GMT; secure
agoda.landings=-1|||3ccnki2qjznxld2nz5wyoqn5|2026-08-18T12:00:07|False|19-----1|||3ccnki2qjznxld2nz5wyoqn5|2026-08-18T12:00:07|False|20-----1|||3ccnki2qjznxld2nz5wyoqn5|2026-08-18T12:00:07|False|99; domain=.agoda.com; path=/; expires=Wed, 18-Aug-2027 00:00:00 GMT; secure; HttpOnly
agoda.attr.fe=-1|||3ccnki2qjznxld2nz5wyoqn5|2026-08-18T12:00:07|False|2026-09-17T12:00:07|OoljFyUlSEC24Oos; domain=.agoda.com; path=/; expires=Wed, 18-Aug-2027 00:00:00 GMT; secure
agoda.attr.03=ATItems=-1$08-18-2026 12:00$; domain=.agoda.com; path=/; expires=Wed, 18-Aug-2027 00:00:00 GMT; secure; HttpOnly
agoda.cid=-1; domain=.agoda.com; path=/; expires=Wed, 18-Aug-2027 12:00:07 GMT; secure; HttpOnly
agoda.price.01=PriceView=1; domain=.agoda.com; path=/; expires=Wed, 18-Aug-2027 12:00:07 GMT; secure
xsrf_token=CfDJ8Dkuqwv-0VhLoFfD8dw7lYzucm7L3zqLbGh2PvbOJQUMcWzhCL_ZzW2PO6T6oowwxb-JuJQQiMVC3JR5O05LO-g6b2hzzSjFSjVOVLuMg-UxSP5MA-pjrwGWnxWWHufMmcRm6K3O1I29K1RMO9r-dGc; path=/; secure; samesite=strict; httponly
t_pp=whR/JPO+ni7chKyY:A49AyvzM1V9WtabY8AC/Ig==:ggr+ouOfgBJJs95pFy5GZVfpYdHl6tbB6A9ismA61hdjRL7hiOkiGQ0YqGFz5ZELm7rYF/yFm1kvC/OaOmRODkHR/hWsIl2GG5DDbOsmLKsCBZkR5a+wNDA2V8/Mk0FU/A3Mnk7bgL1elF/xsz5HSfUaDN2dnDEeHZXzWqTrfnaphREAihVyBQayJA5J/aM9HL4sQ/XwFsa7j/os1bojIWyGJeH1RMV6T1iTTw4E0ffFtNT6r2Ju/ILeog==; domain=.agoda.com; path=/; expires=Tue, 18-Aug-2026 06:00:07 GMT; secure; HttpOnly; SameSite=None
agoda.user.03=UserId=9acd1ed6-fcf5-4947-920a-7443749eda42; domain=.agoda.com; path=/; expires=Wed, 18-Aug-2027 05:00:07 GMT; secure; SameSite=None
t_rc=dD0xJjhFVEQrMW02WEEzTlFZbTdEVlF2cFE9MSZ1aWQ9OWFjZDFlZDYtZmNmNS00OTQ3LTkyMGEtNzQ0Mzc0OWVkYTQy.8AVAdq4QtKmlGh0+f1/0C4jVzL4p205Pw9x9BcObG9o=; domain=.agoda.com; path=/; expires=Wed, 19-Aug-2026 05:00:07 GMT; secure; HttpOnly; SameSite=None
agoda.analytics=Id=-5503044826454146102&Signature=-4900317918288878458&Expiry=1787032807700; domain=.agoda.com; path=/; expires=Tue, 18-Aug-2026 06:00:07 GMT; secure
agoda.prius=PriusID=0&PointsMaxTraffic=Agoda; domain=.agoda.com; path=/; expires=Wed, 18-Aug-2027 05:00:07 GMT

Other Headers

Ag-Correlation-Id

Other

446e56c9-d35f-41a6-9653-73fdb2d0d5ed

Akamai-Grn

Other

0.3a643017.1787029207.396d3708

Date

Other

Tue, 18 Aug 2026 05:00:07 GMT

Request-Context

Other

appId=

X-Envoy-Datacenter

Other

as

X-Envoy-Upstream-Address

Other

user-68589447db-6p2qf

X-Envoy-Upstream-Service-Time

Other

46

X-Ua-Compatible

Other

IE=edge

ag-correlation-id: 446e56c9-d35f-41a6-9653-73fdb2d0d5ed
akamai-grn: 0.3a643017.1787029207.396d3708
date: Tue, 18 Aug 2026 05:00:07 GMT
request-context: appId=
x-envoy-datacenter: as
x-envoy-upstream-address: user-68589447db-6p2qf
x-envoy-upstream-service-time: 46
x-ua-compatible: IE=edge

Recommendations

Enable compression (gzip/brotli) to improve performance