HTTP Headers Analysis for https://ibkr.ca

Detected Technologies from Headers

See all in URL Inspect 19

Akamai Active incidents

Amazon Advertising

Microsoft Advertising

Facebook

Google Analytics

Google API JS Client

Google Conversion Tracking

Google DoubleClick

Google Static File Front End

Google Tag Manager

PHP

Plaid

Quora

Taboola

TikTok

TradingView

Twitter

Google Cloud

HTTP Security Headers

Status

Strict-Transport-Security

Present

max-age=600 ; includeSubDomains

Content-Security-Policy

Weak

frame-ancestors Analyze

Content-Security-Policy-Report-Only

Basic

script-src; report-to; report-uri Analyze

X-Frame-Options

Missing

Not configured

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Present

Origin-when-cross-origin

Permissions-Policy

Missing

Not configured

Recommendations

• Increase HSTS max-age to at least 1 year and add includeSubDomains
• Significantly strengthen CSP directives
• Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

close, Transfer-Encoding

Transfer-Encoding

Performance

chunked

Vary

Performance

User-Agent,Accept-Encoding,Origin

connection: close, Transfer-Encoding
transfer-encoding: chunked
vary: User-Agent,Accept-Encoding,Origin

Caching Headers

Cache-Control

Caching

max-age=0, no-cache, no-store

Expires

Caching

Tue, 06 Oct 2026 22:38:15 GMT

Pragma

Caching

no-cache

cache-control: max-age=0, no-cache, no-store
expires: Tue, 06 Oct 2026 22:38:15 GMT
pragma: no-cache

Content Headers

Content-Type

Content

text/html; charset=UTF-8

content-type: text/html; charset=UTF-8

Server Headers

No server headers found

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

Cookies

set-cookie: PHPSESSID=7c7fpsf2p13qk38u6sltagaq8j; path=/
ib=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.interactivebrokers.ca; secure
web=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.interactivebrokers.ca; secure
ib_fb_px=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.interactivebrokers.ca; secure
ibmkturl=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.interactivebrokers.ca; secure
IB_PRTNR=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.interactivebrokers.ca; secure
_ib_tag=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.interactivebrokers.ca; secure
_zitok=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.interactivebrokers.ca; secure
_utma=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.interactivebrokers.ca; secure
_utmz=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.interactivebrokers.ca; secure
_ga=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.interactivebrokers.ca; secure
_ga_UA-2677475-1=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.interactivebrokers.ca; secure
_gid=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.interactivebrokers.ca; secure
_uetsid=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.interactivebrokers.ca; secure
_gat_UA-2677514-1=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.interactivebrokers.ca; secure
_fbp=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.interactivebrokers.ca; secure
_gcl_au=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.interactivebrokers.ca; secure
IDE=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.interactivebrokers.ca; secure
FLC=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.interactivebrokers.ca; secure
DSID=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.interactivebrokers.ca; secure
ibotsessionid=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.interactivebrokers.ca; secure
ibotcookieinit=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.interactivebrokers.ca; secure
IB_LANG=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.interactivebrokers.ca; secure
IB_SEARCH=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.interactivebrokers.ca; secure
voting=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.interactivebrokers.ca; secure
HomePageCA80=B; expires=Fri, 01-Oct-2027 22:38:15 GMT; Max-Age=31104000; path=/; domain=.interactivebrokers.ca; secure
x-sess-uuid=0.9b6bdc17.1791326295.aef60d4; secure; HttpOnly

Other Headers

Date

Other

Tue, 06 Oct 2026 22:38:15 GMT

Report-To

Other

Group csp-endpoint max-age: 1d

Endpoint 1 /response_handlers/csplogger/index.php

Reporting-Endpoints

Other

csp-endpoint="/response_handlers/csplogger/index.php"

Server-Timing

Other

cdn-cache; desc=MISS, edge; dur=62, origin; dur=146, ak_p; desc="1791326295396_400321435_183460052_20790_17830_0_7_-";dur=1

X-Akamai-Transformed

Other

9 25876 0 pmb=mRUM,2

X-Ibkr-Debug-Origin

Other

date: Tue, 06 Oct 2026 22:38:15 GMT
report-to: {"group":"csp-endpoint","max_age":86400,"endpoints":[{"url":"/response_handlers/csplogger/index.php"}]}
reporting-endpoints: csp-endpoint="/response_handlers/csplogger/index.php"
server-timing: cdn-cache; desc=MISS, edge; dur=62, origin; dur=146, ak_p; desc="1791326295396_400321435_183460052_20790_17830_0_7_-";dur=1
x-akamai-transformed: 9 25876 0 pmb=mRUM,2
x-ibkr-debug-origin:

Recommendations

Enable compression (gzip/brotli) to improve performance