HTTP Headers Analysis for https://ibkr.com.cn

Detected Technologies from Headers

See all in URL Inspect 2

Apache

PHP

HTTP Security Headers

Status

Strict-Transport-Security

Missing

Not configured

Content-Security-Policy

Weak

frame-ancestors Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Missing

Not configured

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Present

Origin-when-cross-origin

Permissions-Policy

Missing

Not configured

Recommendations

• Add Strict-Transport-Security header with max-age of at least 1 year
• Significantly strengthen CSP directives
• Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

close

Vary

Performance

Accept-Encoding,Origin

connection: close
vary: Accept-Encoding,Origin

Caching Headers

Cache-Control

Caching

no-store, no-cache, must-revalidate

Expires

Caching

Thu, 19 Nov 1981 08:52:00 GMT

Pragma

Caching

no-cache

cache-control: no-store, no-cache, must-revalidate
expires: Thu, 19 Nov 1981 08:52:00 GMT
pragma: no-cache

Content Headers

Content-Length

Content

50934

Content-Type

Content

text/html; charset=UTF-8

content-length: 50934
content-type: text/html; charset=UTF-8

Server Headers

Server

Apache

server: Apache

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

Cookies

set-cookie: PHPSESSID=vutbu9vq6vi972vrhdt40j0oek; path=/
ib=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.ibkr.com.cn; secure
web=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.ibkr.com.cn; secure
ib_fb_px=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.ibkr.com.cn; secure
ibmkturl=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.ibkr.com.cn; secure
IB_PRTNR=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.ibkr.com.cn; secure
_ib_tag=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.ibkr.com.cn; secure
_zitok=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.ibkr.com.cn; secure
_utma=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.ibkr.com.cn; secure
_utmz=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.ibkr.com.cn; secure
_ga=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.ibkr.com.cn; secure
_ga_UA-2677475-1=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.ibkr.com.cn; secure
_gid=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.ibkr.com.cn; secure
_uetsid=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.ibkr.com.cn; secure
_gat_UA-2677514-1=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.ibkr.com.cn; secure
_fbp=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.ibkr.com.cn; secure
_gcl_au=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.ibkr.com.cn; secure
IDE=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.ibkr.com.cn; secure
FLC=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.ibkr.com.cn; secure
DSID=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.ibkr.com.cn; secure
ibotsessionid=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.ibkr.com.cn; secure
ibotcookieinit=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.ibkr.com.cn; secure
IB_LANG=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.ibkr.com.cn; secure
IB_SEARCH=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.ibkr.com.cn; secure
voting=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.ibkr.com.cn; secure

Other Headers

Date

Other

Wed, 07 Oct 2026 00:56:21 GMT

date: Wed, 07 Oct 2026 00:56:21 GMT

Recommendations

Enable compression (gzip/brotli) to improve performance