HTTP Headers Analysis for https://iytcdn.com

Detected Technologies from Headers

See all in URL Inspect 1

Tengine

HTTP Security Headers

Status

Strict-Transport-Security

Present

max-age=31536000, max-age=31536000

Content-Security-Policy

Missing

Not configured Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Present

ALLOW-FROM: https://gamenow.club,

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Increase HSTS max-age to at least 1 year and add includeSubDomains
• Add Content-Security-Policy header to prevent XSS attacks
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

close

Vary

Performance

Origin

connection: close
vary: Origin

Caching Headers

No caching headers found

Content Headers

Content-Length

Content

407

Content-Type

Content

text/html; charset=utf-8

content-length: 407
content-type: text/html; charset=utf-8

Server Headers

Server

Tengine/Aserver

server: Tengine/Aserver

CORS Headers

Access-Control-Allow-Credentials

Cors

true

Access-Control-Allow-Origin

Cors

https://dreamx.alibaba-inc.com

Access-Control-Expose-Headers

Cors

Date,x-fc-request-id,x-fc-error-type,x-fc-code-checksum,x-fc-invocation-duration,x-fc-max-memory-usage,x-fc-log-result,x-fc-invocation-code-version,x-fc-instance-id

access-control-allow-credentials: true
access-control-allow-origin: https://dreamx.alibaba-inc.com
access-control-expose-headers: Date,x-fc-request-id,x-fc-error-type,x-fc-code-checksum,x-fc-invocation-duration,x-fc-max-memory-usage,x-fc-log-result,x-fc-invocation-code-version,x-fc-instance-id

Cookies Headers

Set-Cookie

Cookies

set-cookie: ctoken=oTeIMq1_McID-nzvg7BQgqWn; path=/
EGG_SESS=HL44CzqDeCvrnapXG94Zn1q6GuQ4xzwX6mXfyrTnmsJBiYt9NW1sjPWCkmgKkA0BQLHWv8mMKzrxHGrzx8-p1DolUbDyQbVxdyFPpMsuSU8q6ppvRgV9C5REiRQwslXBrkoUsyaWpS23MT-4BDlHuZmKgxhC0EeLFIdbvHpMKUfy0lPIBcMk4vY-tOTLu34eaijQNZFaDSy4U1hcnPdgXNITELBYMWqsu7E6dAdZKo6LwBO-w9EI8wC7zKtgOdTpjraCVZXyNCpd9G38AhXrHReNlH7kGYnZX3pLl0NjV1PdwxTI-p7SmTaspz7be6Ug; path=/; max-age=86400; expires=Sat, 01 Aug 2026 13:29:02 GMT; httponly

Other Headers

Date

Other

Fri, 31 Jul 2026 13:29:02 GMT

Eagleeye-Traceid

Other

2107c20a17855045425983820e935f, 2107c20a17855045425983820e935f

S-Rt

Other

65

Timing-Allow-Origin

Other

*

X-Download-Options

Other

noopen

X-Fc-Code-Checksum

Other

7491165564361223823

X-Fc-Instance-Id

Other

c-6a6c4996-e0efbc53f2684c588e9a

X-Fc-Invocation-Duration

Other

43

X-Fc-Invocation-Service-Version

Other

44

X-Fc-Max-Memory-Usage

Other

0.00

X-Fc-Request-Id

Other

1-6a6ca31e-8eb742ba424402331f014202

X-Readtime

Other

38

date: Fri, 31 Jul 2026 13:29:02 GMT
eagleeye-traceid: 2107c20a17855045425983820e935f, 2107c20a17855045425983820e935f
s-rt: 65
timing-allow-origin: *
x-download-options: noopen
x-fc-code-checksum: 7491165564361223823
x-fc-instance-id: c-6a6c4996-e0efbc53f2684c588e9a
x-fc-invocation-duration: 43
x-fc-invocation-service-version: 44
x-fc-max-memory-usage: 0.00
x-fc-request-id: 1-6a6ca31e-8eb742ba424402331f014202
x-readtime: 38

Recommendations

Enable compression (gzip/brotli) to improve performance

Add Cache-Control header to optimize caching