HTTP Headers Analysis for https://www.bdxdata.com

Detected Technologies from Headers

See all in URL Inspect 1

Tengine

HTTP Security Headers

Status

Strict-Transport-Security

Present

max-age=31536000, max-age=31536000

Content-Security-Policy

Missing

Not configured Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Present

ALLOW-FROM: https://gamenow.club,

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Increase HSTS max-age to at least 1 year and add includeSubDomains
• Add Content-Security-Policy header to prevent XSS attacks
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

close

Transfer-Encoding

Performance

chunked

Vary

Performance

Accept-Encoding, Origin

connection: close
transfer-encoding: chunked
vary: Accept-Encoding, Origin

Caching Headers

No caching headers found

Content Headers

Content-Type

Content

text/html; charset=utf-8

content-type: text/html; charset=utf-8

Server Headers

Server

Tengine/Aserver

server: Tengine/Aserver

CORS Headers

Access-Control-Allow-Credentials

Cors

true

Access-Control-Allow-Origin

Cors

https://dreamx.alibaba-inc.com

Access-Control-Expose-Headers

Cors

Date,x-fc-request-id,x-fc-error-type,x-fc-code-checksum,x-fc-invocation-duration,x-fc-max-memory-usage,x-fc-log-result,x-fc-invocation-code-version,x-fc-instance-id

access-control-allow-credentials: true
access-control-allow-origin: https://dreamx.alibaba-inc.com
access-control-expose-headers: Date,x-fc-request-id,x-fc-error-type,x-fc-code-checksum,x-fc-invocation-duration,x-fc-max-memory-usage,x-fc-log-result,x-fc-invocation-code-version,x-fc-instance-id

Cookies Headers

Set-Cookie

Cookies

set-cookie: ctoken=8w1STap741ESFMdzgFi95E1_; path=/
EGG_SESS=HL44CzqDeCvrnapXG94Zn1q6GuQ4xzwX6mXfyrTnmsJBiYt9NW1sjPWCkmgKkA0BQLHWv8mMKzrxHGrzx8-p1DolUbDyQbVxdyFPpMsuSU8q6ppvRgV9C5REiRQwslXBrkoUsyaWpS23MT-4BDlHuZmKgxhC0EeLFIdbvHpMKUfy0lPIBcMk4vY-tOTLu34eaijQNZFaDSy4U1hcnPdgXNITELBYMWqsu7E6dAdZKo4rz2bNVkPeFYIiz7wkS-JUm2C68DImL9RcEnjBjX2CWue-0vvHtNjdyDPW_F4lzRplCrTQB1daxxpX3vpNxj_J; path=/; max-age=86400; expires=Tue, 04 Aug 2026 01:11:00 GMT; httponly

Other Headers

Date

Other

Mon, 03 Aug 2026 01:11:00 GMT

Eagleeye-Traceid

Other

213e056b17857194605954419e4e8f

Timing-Allow-Origin

Other

*

X-Download-Options

Other

noopen

X-Fc-Code-Checksum

Other

7491165564361223823

X-Fc-Instance-Id

Other

c-6a6f77c4-ea865633417e4685a8cd

X-Fc-Invocation-Duration

Other

55

X-Fc-Invocation-Service-Version

Other

44

X-Fc-Max-Memory-Usage

Other

0.00

X-Fc-Request-Id

Other

1-6a6feaa4-63d1a16fd3362219b1204ff4

X-Readtime

Other

51

date: Mon, 03 Aug 2026 01:11:00 GMT
eagleeye-traceid: 213e056b17857194605954419e4e8f
timing-allow-origin: *
x-download-options: noopen
x-fc-code-checksum: 7491165564361223823
x-fc-instance-id: c-6a6f77c4-ea865633417e4685a8cd
x-fc-invocation-duration: 55
x-fc-invocation-service-version: 44
x-fc-max-memory-usage: 0.00
x-fc-request-id: 1-6a6feaa4-63d1a16fd3362219b1204ff4
x-readtime: 51

Recommendations

Enable compression (gzip/brotli) to improve performance

Add Cache-Control header to optimize caching