HTTP Headers Analysis for https://portal.inter-il.com

Detected Technologies from Headers

See all in URL Inspect 18

Akamai Active incidents

Amazon Advertising

Microsoft Advertising

Facebook

Google Analytics

Google API JS Client

Google Conversion Tracking

Google DoubleClick

Google Static File Front End

Google Tag Manager

Plaid

Quora

Taboola

TikTok

TradingView

Twitter

Google Cloud

HTTP Security Headers

Status

Strict-Transport-Security

Present

max-age=15768000 ; includeSubDomains

Content-Security-Policy

Weak

frame-ancestors Analyze

Content-Security-Policy-Report-Only

Basic

script-src; report-to; report-uri Analyze

X-Frame-Options

Missing

Not configured

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Present

Origin-when-cross-origin

Permissions-Policy

Missing

Not configured

Recommendations

• Increase HSTS max-age to at least 1 year and add includeSubDomains
• Significantly strengthen CSP directives
• Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

close

Vary

Performance

Accept-Encoding,Origin

connection: close
vary: Accept-Encoding,Origin

Caching Headers

Cache-Control

Caching

max-age=0, no-cache, no-store

Expires

Caching

Wed, 07 Oct 2026 01:35:50 GMT

Pragma

Caching

no-cache

cache-control: max-age=0, no-cache, no-store
expires: Wed, 07 Oct 2026 01:35:50 GMT
pragma: no-cache

Content Headers

Content-Language

Content

en-US

Content-Length

Content

9549

Content-Type

Content

text/html;charset=UTF-8

content-language: en-US
content-length: 9549
content-type: text/html;charset=UTF-8

Server Headers

No server headers found

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

Cookies

set-cookie: partnerID=Inter_il; Domain=.inter-il.com; Path=/; Secure;Secure;SameSite=None
partnerID=Inter_il; Domain=.inter-il.com; Path=/; Secure;Secure;SameSite=None
URL_PARAM=RL%3D1&partnerID%3DInter_il; Domain=.inter-il.com; Path=/; Secure;Secure
JSESSIONID=1E9D4D1C4E5C4855153675F3E8D89F11.ny5wwwsso3; Path=/sso; Secure; HttpOnly;Secure;SameSite=None
IS_MASTER='';expires='Sun, 1 Jan 2023 00:00:00 GMT'; Max-Age=0; Path=/
x-sess-uuid=0.c478ce17.1791336949.5babfa2c; secure; HttpOnly

Other Headers

Date

Other

Wed, 07 Oct 2026 01:35:50 GMT

Report-To

Other

Group csp-endpoint max-age: 1d

Endpoint 1 /response_handlers/csplogger/index.php

Reporting-Endpoints

Other

csp-endpoint="/response_handlers/csplogger/index.php"

Server-Timing

Other

cdn-cache; desc=MISS, edge; dur=197, origin; dur=64, ak_p; desc="1791336949566_399407300_1537997356_26077_22345_63_185_-";dur=1

X-Akamai-Transformed

Other

9 1760 0 pmb=mRUM,2

date: Wed, 07 Oct 2026 01:35:50 GMT
report-to: {"group":"csp-endpoint","max_age":86400,"endpoints":[{"url":"/response_handlers/csplogger/index.php"}]}
reporting-endpoints: csp-endpoint="/response_handlers/csplogger/index.php"
server-timing: cdn-cache; desc=MISS, edge; dur=197, origin; dur=64, ak_p; desc="1791336949566_399407300_1537997356_26077_22345_63_185_-";dur=1
x-akamai-transformed: 9 1760 0 pmb=mRUM,2

Recommendations

Enable compression (gzip/brotli) to improve performance