HTTP Headers Analysis for https://ad.youku.com

Detected Technologies from Headers

See all in URL Inspect 1

Tengine

HTTP Security Headers

Status

Strict-Transport-Security

Present

max-age=31536000, max-age=31536000

Content-Security-Policy

Missing

Not configured Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Present

ALLOW-FROM: https://gamenow.club,

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Increase HSTS max-age to at least 1 year and add includeSubDomains
• Add Content-Security-Policy header to prevent XSS attacks
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

close

Transfer-Encoding

Performance

chunked

Vary

Performance

Accept-Encoding, Accept-Encoding, Origin

connection: close
transfer-encoding: chunked
vary: Accept-Encoding, Accept-Encoding, Origin

Caching Headers

No caching headers found

Content Headers

Content-Type

Content

text/html; charset=utf-8

content-type: text/html; charset=utf-8

Server Headers

Server

Tengine/Aserver

server: Tengine/Aserver

CORS Headers

Access-Control-Allow-Credentials

Cors

true

Access-Control-Allow-Origin

Cors

https://dreamx.alibaba-inc.com

access-control-allow-credentials: true
access-control-allow-origin: https://dreamx.alibaba-inc.com

Cookies Headers

Set-Cookie

Cookies

set-cookie: ctoken=EbzwGhrzaF65YKxMOMholLO9; path=/; samesite=none; secure
EGG_SESS=HL44CzqDeCvrnapXG94Zn1q6GuQ4xzwX6mXfyrTnmsJBiYt9NW1sjPWCkmgKkA0BQLHWv8mMKzrxHGrzx8-p1DolUbDyQbVxdyFPpMsuSU8q6ppvRgV9C5REiRQwslXBrkoUsyaWpS23MT-4BDlHuZmKgxhC0EeLFIdbvHpMKUfy0lPIBcMk4vY-tOTLu34eaijQNZFaDSy4U1hcnPdgXNITELBYMWqsu7E6dAdZKo5MX9JS_IhHV1dVm_g0WsJxxVcI84AExCsvpkgh0gsOnHhh0tIFZ4CfTfIOi0jRGy-hdB3NCeftgvxJWcd_m6gh; path=/; max-age=86400; expires=Sat, 01 Aug 2026 12:08:47 GMT; samesite=none; secure; httponly

Other Headers

Date

Other

Fri, 31 Jul 2026 12:08:47 GMT

Eagleeye-Traceid

Other

2130732f17854997277933958e79c5, 2130732f17854997277933958e79c5

S-Rt

Other

190

Timing-Allow-Origin

Other

*

X-Download-Options

Other

noopen

X-Readtime

Other

108

X-Server-Id

Other

ffc88488c91b1bfe22f3fa58047395acb91ef773efb56dadd6da202022bc7f0fbe93192261c5c71d

date: Fri, 31 Jul 2026 12:08:47 GMT
eagleeye-traceid: 2130732f17854997277933958e79c5, 2130732f17854997277933958e79c5
s-rt: 190
timing-allow-origin: *
x-download-options: noopen
x-readtime: 108
x-server-id: ffc88488c91b1bfe22f3fa58047395acb91ef773efb56dadd6da202022bc7f0fbe93192261c5c71d

Recommendations

Enable compression (gzip/brotli) to improve performance

Add Cache-Control header to optimize caching