Other
Yes, agoda.com is a trustworthy website with a high score of 93. This indicates a generally safe experience for users.
Agoda.com is a platform for booking hotels and accommodations, although no specific homepage content could be retrieved.
Verisite checked agoda.com on July 7, 2026 and gave it a trust score of 93/100. Out of 92 checks, 76 passed, with 13 warning(s) and 3 failed check(s).
93
/100
Trust Score
Excellent
Score incl. subdomains: 78/100
11
Passed
1
Warning
1
Failed
Security Headers
Checks HTTP security headers and cookie security configuration.
Some security headers are missing or weakly configured.
Information Exposure
Checks for exposed sensitive files, directory listings, and information disclosure.
No exposed sensitive files or directories found.
Content Security
Scans page content for suspicious scripts, iframes, external forms, and cryptominers.
No suspicious content detected on the page.
SSL Certificate
Verifies the SSL/TLS certificate validity and configuration.
Valid SSL certificate found (expires 2026-10-05).
Domain Age
Checks the age of the domain registration. Very young domains are often associated with fraud.
This domain has been registered since 2004-03-16.
Privacy & Cookies
Checks for tracking cookies, consent mechanisms, and third-party trackers.
Tracking is present but a consent mechanism was detected.
Business Data
Checks for chamber of commerce number, VAT number, contact details, and required legal pages.
Business data is well represented on the website.
Reviews & Trust Seals
Checks external reviews (Trustpilot) and trust seals (Kiyoh, WebwinkelKeur).
No reviews or trust seal found.
Malicious / Safety
Checks if the domain appears on known fraud or phishing lists.
This domain was not found on any known fraud or phishing lists.
Technology & Software
Detects CMS, frameworks, and JavaScript libraries and checks for outdated versions.
No outdated or vulnerable software detected.
Email Authentication
Analyzes SPF, DKIM and DMARC configuration for email authentication.
Email authentication is well configured with SPF, DKIM and/or DMARC.
Network & Transport
Checks open ports, HTTP protocol support, redirect chain, and mixed content.
Network configuration is secure and well optimized.
DNS & Server
Checks DNS records, server information and hosting details.
DNS records are properly configured.
Security Headers
Checks HTTP security headers and cookie security configuration.
43/100
Some security headers are missing or weakly configured.
- Domain
- agoda.com
- Cookies
-
- Total: 10
- Issues: agoda.version.03: missing SameSite attribute, agoda.landings: missing SameSite attribute, agoda.attr.fe: missing SameSite attribute, agoda.attr.03: missing SameSite attribute, agoda.price.trk.01: missing SameSite attribute, agoda.price.01: missing SameSite attribute, agoda.analytics: missing SameSite attribute
- Secure cookies: 3
- Insecure cookies: 7
- HSTS max-age
- 31536000
- Missing headers
- Content-Security-Policy, Referrer-Policy, Permissions-Policy
- HSTS preload
- No
- Used browser fallback
- No
- Referrer-Policy
- No
- X-Frame-Options
- Yes
- HSTS includes subdomains
- No
- Permissions-Policy
- No
- X-Content-Type-Options
- Yes
- Content-Security-Policy
- No
- Strict-Transport-Security
- Yes
Technology & Software
Detects CMS, frameworks, and JavaScript libraries and checks for outdated versions.
100/100
No outdated or vulnerable software detected.
- Detected CMS
-
- Name:
- Slug:
- Version:
- Detected: No
- Confidence: none
- Domain
- agoda.com
- JavaScript libraries
- Pages scanned
- 2
- Vulnerable libraries
- Server technology
-
- Server:
- Powered by:
- X generator:
Information Exposure
Checks for exposed sensitive files, directory listings, and information disclosure.
100/100
No exposed sensitive files or directories found.
- Domain
- agoda.com
- Exposures
- Robots.txt analysis
-
- Exists: Yes
- Interesting paths:
- Paths checked
- 18
- Exposures found
- 0
- Directory listing enabled
- No
Email Authentication
Analyzes SPF, DKIM and DMARC configuration for email authentication.
89/100
Email authentication is well configured with SPF, DKIM and/or DMARC.
- SPF
-
- Exists: Yes
- Policy: hardfail
- Record: v=spf1 ip4:65.181.114.0/24 ip4:103.6.182.0/24 ip4:45.113.60.117 ip4:45.113.60.116 ip4:167.89.57.3 ip4:167.89.57.31 ip4:167.89.1.129 ip4:192.254.125.94 ip4:149.72.197.53 ip4:159.183.139.160 ip4:149.72.1.154 ip4:159.183.151.81 ip4:159.183.116.235 ip4:159.183.175.123 include:spf.protection.outlook.com -all
- Mechanisms: ip4:65.181.114.0/24, ip4:103.6.182.0/24, ip4:45.113.60.117, ip4:45.113.60.116, ip4:167.89.57.3, ip4:167.89.57.31, ip4:167.89.1.129, ip4:192.254.125.94, ip4:149.72.197.53, ip4:159.183.139.160, ip4:149.72.1.154, ip4:159.183.151.81, ip4:159.183.116.235, ip4:159.183.175.123, include:spf.protection.outlook.com, all
- Policy label: checks.email_spf_hardfail
- Authorized senders: IP-adres 65.181.114.0/24, IP-adres 103.6.182.0/24, IP-adres 45.113.60.117, IP-adres 45.113.60.116, IP-adres 167.89.57.3, IP-adres 167.89.57.31, IP-adres 167.89.1.129, IP-adres 192.254.125.94, IP-adres 149.72.197.53, IP-adres 159.183.139.160, IP-adres 149.72.1.154, IP-adres 159.183.151.81, IP-adres 159.183.116.235, IP-adres 159.183.175.123, Microsoft 365
- DKIM
-
- Found: Yes
- Selectors: selector1, selector2, s1, s2
- DMARC
-
- Exists: Yes
- Policy: quarantine
- Record: v=DMARC1; p=quarantine; sp=quarantine; rua=mailto:2ab19552@mxtoolbox.dmarc-report.com,mailto:dmarc@agoda.com; ruf=mailto:2ab19552@forensics.dmarc-report.com; adkim=r; aspf=r; fo=1; pct=100; ri=172800
- Percentage: 100
- Policy label: checks.email_dmarc_quarantine
- Has reporting: Yes
- Subdomain policy: quarantine
- Domain
- agoda.com
- Authorized senders
- IP-adres 65.181.114.0/24, IP-adres 103.6.182.0/24, IP-adres 45.113.60.117, IP-adres 45.113.60.116, IP-adres 167.89.57.3, IP-adres 167.89.57.31, IP-adres 167.89.1.129, IP-adres 192.254.125.94, IP-adres 149.72.197.53, IP-adres 159.183.139.160, IP-adres 149.72.1.154, IP-adres 159.183.151.81, IP-adres 159.183.116.235, IP-adres 159.183.175.123, Microsoft 365
Domain Age
Checks the age of the domain registration. Very young domains are often associated with fraud.
100/100
This domain has been registered since 2004-03-16.
- Domain
- agoda.com
- Registrar
- MarkMonitor Inc.
- Registered
- 2004-03-16
- Age (days)
- 8148
- Expires
- 2027-03-16
Privacy & Cookies
Checks for tracking cookies, consent mechanisms, and third-party trackers.
91/100
Tracking is present but a consent mechanism was detected.
- Domain
- agoda.com
- Detected trackers
- Google Tag Manager, Google Analytics (gtag), Meta Pixel
- Pages scanned
- 2
- Total cookies
- 13
- Third-party trackers found
- 3
- Consent platform
- Cookie Consent
- Tracking cookies
-
- _fbp — Meta / Facebook — /blog
- Consent mechanism detected
- Yes
- Tracking cookies found
- 1
Network & Transport
Checks open ports, HTTP protocol support, redirect chain, and mixed content.
90/100
Network configuration is secure and well optimized.
- Domain
- agoda.com
- Open ports
- HTTP version
- HTTP/1.0
- Mixed content domains
- Pages scanned
- 1
- Redirect chain
- http://agoda.com, https://www.agoda.com/
- HTTP/2 support
- No
- HTTP/3 support
- No
- Open ports found
- 0
- Redirect loop detected
- No
- Mixed content resources
- 0
- Redirect chain length
- 1
- HTTP redirects to HTTPS
- Yes
Content Security
Scans page content for suspicious scripts, iframes, external forms, and cryptominers.
85/100
No suspicious content detected on the page.
- Domain
- agoda.com
- Cryptominer scripts
- Pages scanned
- 2
- External form domains
- External script sources
- cdn6.agoda.net
- Obfuscation patterns
- 1
- Cryptominers detected
- 0
- Suspicious iframe details
- External form targets
- 0
- Obfuscated code patterns
- Long unicode-encoded string
- External script domains
- 1
- Suspicious iframes
- 0
Business Data
Checks for chamber of commerce number, VAT number, contact details, and required legal pages.
70/100
Business data is well represented on the website.
- Domain
- agoda.com
- Email address present
- Yes
- Phone number present
- No
- Terms and conditions present
- No
- Chamber of Commerce number found
- No
- VAT number found
- No
- Physical address present
- Yes
- Pages scanned
- 2
- Return policy present
- No
- Privacy policy present
- Yes
- Privacy policy page
- /info/agoda-privacy.html
- Contact details found
- 2
Reviews & Trust Seals
Checks external reviews (Trustpilot) and trust seals (Kiyoh, WebwinkelKeur).
10/100
No reviews or trust seal found.
- Domain
- agoda.com
- Kiyoh trust seal found
- No
- Trust seal present
- No
- Review sources
- Trustpilot page
- https://www.trustpilot.com/review/agoda.com
- Trustpilot profile found
- No
- WebwinkelKeur trust seal found
- No
Malicious / Safety
Checks if the domain appears on known fraud or phishing lists.
100/100
This domain was not found on any known fraud or phishing lists.
- Checked domain
- agoda.com
SSL Certificate
Verifies the SSL/TLS certificate validity and configuration.
100/100
Valid SSL certificate found (expires 2026-10-05).
- Expiry date
- 2026-10-05
- Issuer
- Sectigo Limited
- Subject
- agoda.com
- Valid until
- 2026-10-06
- Valid from
- 2025-09-05
- TLS version
- TLSv1.3
- Serial number
- E72FDCA40FED21DDA9553C0898A1A1C9
DNS & Server
Checks DNS records, server information and hosting details.
90/100
DNS records are properly configured.
- IP Address
- 103.6.182.20
- SPF record
- Yes
- IPv6 support
- No
- DMARC record
- Yes
- DNSSEC
- No
- MX Records
- agoda-com.mail.protection.outlook.com
- Nameservers
- edns2.ultradns.com, edns2.ultradns.net, edns2.ultradns.org, edns2.ultradns.biz
- IP Addresses
- 103.6.182.20
- IPv6 Addresses
Discovered subdomains (2)
About this website
Agoda.com is an online booking platform for hotels and other accommodations. Despite the lack of specific homepage content, the site has passed several important safety checks, such as a high score for technology (100) and SSL security (100). The website is also relatively old, which often contributes to reliability.
However, there are some points of concern. The site has a warning for security headers (score 39), which is a partial issue that may affect trust. Additionally, Agoda.com has a low score for user reviews (score 10), which may indicate a concrete risk for users relying on feedback from others.
What our scores mean for you
The warning for security headers means there may be vulnerabilities that could undermine trust in the site. This could potentially affect how safely your data is handled. The low score for user reviews is a significant concern; it may suggest that previous customers have had negative experiences, which could influence your decision to book.
What this means
Verisite is an independent platform that runs automated trust checks on websites. For visitors, this score means that Agoda.com is generally safe, but caution is advised due to the low review score. For the company itself, the low review score may serve as a signal to improve customer satisfaction and build trust.
Frequently asked questions
Does agoda.com have a valid SSL certificate?
Yes, agoda.com has a valid SSL certificate, ensuring your data is secure during transmission.
Has agoda.com ever been reported for fraud?
No external red flags or evidence were found indicating that agoda.com has been reported for fraud.
Why is the review score so low?
The low review score (10) may indicate negative experiences from previous customers.
What does a warning for security headers mean?
A warning for security headers means there may be potential vulnerabilities that could affect trust in the site.
Is agoda.com safe to use?
Overall, agoda.com is safe, but be cautious due to the low review score.
How old is the domain of agoda.com?
The domain of agoda.com is relatively old, which is often a sign of reliability.