HTTP Headers Analysis for https://exconnect.hsbc.de

Detected Technologies from Headers

See all in URL Inspect 4

Google reCAPTCHA

Google Search

Google Static File Front End

Google Cloud

HTTP Security Headers

Status

Strict-Transport-Security

Excellent

max-age=157680000; includeSubDomains; preload

Content-Security-Policy

Good

default-src; script-src; connect-src; +9 more Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Good

SAMEORIGIN

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Good

no-referrer

Permissions-Policy

Missing

Not configured

Recommendations

• Strengthen CSP by removing 'unsafe-eval'
• Consider adding Permissions-Policy to control browser features

Performance Headers

Accept-Ranges

Performance

bytes

Connection

Performance

close

accept-ranges: bytes
connection: close

Caching Headers

Cache-Control

Caching

no-cache, no-store, must-revalidate

Etag

Caching

"a89a-65d3ddd36ac80"

Last-Modified

Caching

Wed, 07 Oct 2026 10:49:06 GMT

cache-control: no-cache, no-store, must-revalidate
etag: "a89a-65d3ddd36ac80"
last-modified: Wed, 07 Oct 2026 10:49:06 GMT

Content Headers

Content-Type

Content

text/html; charset=utf-8

content-type: text/html; charset=utf-8

Server Headers

No server headers found

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

Cookies

set-cookie: citrix_bot_id=MDMAAAIAEoC7TAAAAADY9iipDyDLagAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALeuo1_hDQvlwn8SbVQWuKG7ItX4; Domain=exconnect.hsbc.de; Path=/; HttpOnly;

Other Headers

Cteonnt-Length

Other

43211

Date

Other

Sun, 11 Oct 2026 05:35:11 GMT

Feature-Policy

Other

camera 'none'; microphone 'none'; geolocation 'none'

cteonnt-length: 43211
date: Sun, 11 Oct 2026 05:35:11 GMT
feature-policy: camera 'none'; microphone 'none'; geolocation 'none'

Recommendations

Enable compression (gzip/brotli) to improve performance