HTTP Headers Analysis for https://api.hilltopsecurities.com

Detected Technologies from Headers

See all in URL Inspect 3

ASP.NET

Imperva Active incidents

Microsoft IIS

HTTP Security Headers

Status

Strict-Transport-Security

Excellent

max-age=31536000; includeSubDomains; preload

Content-Security-Policy

Missing

Not configured Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Excellent

DENY

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Good

strict-origin-when-cross-origin

Permissions-Policy

Present

geolocation=(), camera=(), microphone=()

Recommendations

• Add Content-Security-Policy header to prevent XSS attacks

Performance Headers

Accept-Ranges

Performance

bytes

Connection

Performance

close

Transfer-Encoding

Performance

chunked

accept-ranges: bytes
connection: close
transfer-encoding: chunked

Caching Headers

Etag

Caching

"462e675647bd41:0"

Last-Modified

Caching

Tue, 13 Nov 2018 15:20:50 GMT

etag: "462e675647bd41:0"
last-modified: Tue, 13 Nov 2018 15:20:50 GMT

Content Headers

Content-Type

Content

text/html

content-type: text/html

Server Headers

Server

Microsoft-IIS/10.0

X-Powered-By

Server

ASP.NET

server: Microsoft-IIS/10.0
x-powered-by: ASP.NET

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

Cookies

set-cookie: visid_incap_1959542=XVotsFo0Qyms+eUf8iZThK+ag2oAAAAAQUIPAAAAAACjFciTQEPlnK17gxS/78Vg; expires=Tue, 17 Aug 2027 06:24:00 GMT; HttpOnly; path=/; Domain=.hilltopsecurities.com
nlbi_1959542=f3xQEU65Yg83CAYC4zF9KAAAAABggx8sgHlTF3M6qG2uqiEo; HttpOnly; path=/; Domain=.hilltopsecurities.com
incap_ses_1018_1959542=n9YABMOuk0tGRisRpakgDrCag2oAAAAAm824UZBIRwnIT7qJZSAe+Q==; path=/; Domain=.hilltopsecurities.com

Other Headers

Date

Other

Mon, 17 Aug 2026 23:33:16 GMT

X-Cdn

Other

Imperva

X-Iinfo

Other

46-223387707-223387804 NNNN CT(48 107 0) RT(1787009711794 164) q(0 0 1 5) r(2 2) U12

date: Mon, 17 Aug 2026 23:33:16 GMT
x-cdn: Imperva
x-iinfo: 46-223387707-223387804 NNNN CT(48 107 0) RT(1787009711794 164) q(0 0 1 5) r(2 2) U12

Recommendations

Enable compression (gzip/brotli) to improve performance

Add Cache-Control header to optimize caching

Consider removing X-Powered-By header to hide server technology