DNS Gurus
Cached · just now
21 Headers

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

Performance Headers

3 headers
Connection
Performance
close
Transfer-Encoding
Performance
chunked
Vary
Performance
Accept-Encoding

Caching Headers

1 headers
Cache-Control
Caching
no-store

Content Headers

1 headers
Content-Type
Content
text/html;charset=UTF-8

Server Headers

1 headers
Server
Server
Tengine

CORS Headers

1 headers
Access-Control-Allow-Credentials
Cors
true

Cookies Headers

1 headers
Set-Cookie
Cookies
x5secdata=xg43d89f93cf51eab9ja812a26531e2e7ab4844433c17571dd5d1768220833a1732647551a1750343195abaad2aaa33bf79ca7584ab34294226b62cb16dc49c6__bx__www.1688.com:443; Max-Age=20; Expires=Mon, 12-Jan-2026 12:27:33 GMT; Domain=1688.com; Path=/

Other Headers

13 headers
Ab-Pct
Other
ab_pct:100
Ali-Swift-Global-Savetime
Other
1768220833
Bxpunish
Other
1
Date
Other
Mon, 12 Jan 2026 12:27:13 GMT
Eagleid
Other
083055a217682208335306604e
Site
Other
site:outsite
Timing-Allow-Origin
Other
*
Trace-Sid
Other
033061023050100067148162
Via
Other
ens-cache5.us24[194,194,200-0,M], ens-cache14.us24[196,0]
X-Air-Pt
Other
null
X-Cache
Other
MISS TCP_MISS dirn:-2:-2
X-Swift-Cachetime
Other
0
X-Swift-Savetime
Other
Mon, 12 Jan 2026 12:27:13 GMT

Recommendations

Enable compression (gzip/brotli) to improve performance