HTTP Headers Analysis for https://qa.us-east-1.interactivebrokers.com

Detected Technologies from Headers

See all in URL Inspect 7

Akamai Active incidents

Microsoft Advertising

Google DoubleClick

Google Tag Manager

PHP

Taboola

TradingView

HTTP Security Headers

Status

Strict-Transport-Security

Excellent

max-age=63072000 ; includeSubDomains ; preload

Content-Security-Policy

Weak

frame-ancestors Analyze

Content-Security-Policy-Report-Only

Basic

script-src; report-to; report-uri Analyze

X-Frame-Options

Missing

Not configured

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Present

Origin-when-cross-origin

Permissions-Policy

Missing

Not configured

Recommendations

• Significantly strengthen CSP directives
• Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

close, Transfer-Encoding

Transfer-Encoding

Performance

chunked

Vary

Performance

User-Agent,Accept-Encoding,Origin

connection: close, Transfer-Encoding
transfer-encoding: chunked
vary: User-Agent,Accept-Encoding,Origin

Caching Headers

Cache-Control

Caching

max-age=0, no-cache, no-store

Expires

Caching

Wed, 07 Oct 2026 00:21:44 GMT

Pragma

Caching

no-cache

cache-control: max-age=0, no-cache, no-store
expires: Wed, 07 Oct 2026 00:21:44 GMT
pragma: no-cache

Content Headers

Content-Type

Content

text/html; charset=UTF-8

content-type: text/html; charset=UTF-8

Server Headers

No server headers found

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

Cookies

set-cookie: iab=qa; path=/; domain=qa.us-east-1.interactivebrokers.com; secure; HttpOnly
PHPSESSID=ds41du3bub53r09qt8ie9uqha0; path=/
ib=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.interactivebrokers.com; secure
web=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.interactivebrokers.com; secure
ib_fb_px=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.interactivebrokers.com; secure
ibmkturl=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.interactivebrokers.com; secure
IB_PRTNR=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.interactivebrokers.com; secure
_ib_tag=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.interactivebrokers.com; secure
_zitok=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.interactivebrokers.com; secure
_utma=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.interactivebrokers.com; secure
_utmz=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.interactivebrokers.com; secure
_ga=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.interactivebrokers.com; secure
_ga_UA-2677475-1=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.interactivebrokers.com; secure
_gid=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.interactivebrokers.com; secure
_uetsid=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.interactivebrokers.com; secure
_gat_UA-2677514-1=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.interactivebrokers.com; secure
_fbp=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.interactivebrokers.com; secure
_gcl_au=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.interactivebrokers.com; secure
IDE=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.interactivebrokers.com; secure
FLC=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.interactivebrokers.com; secure
DSID=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.interactivebrokers.com; secure
ibotsessionid=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.interactivebrokers.com; secure
ibotcookieinit=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.interactivebrokers.com; secure
IB_LANG=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.interactivebrokers.com; secure
IB_SEARCH=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.interactivebrokers.com; secure
voting=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.interactivebrokers.com; secure
IB_LANG=en; expires=Sat, 02-Oct-2027 00:21:44 GMT; Max-Age=31104000; path=/; domain=.interactivebrokers.com; secure
x-sess-uuid=0.ab643017.1791332504.4fd6d165; path=/; secure; HttpOnly

Other Headers

Date

Other

Wed, 07 Oct 2026 00:21:44 GMT

Report-To

Other

Group csp-endpoint max-age: 1d

Endpoint 1 /response_handlers/csplogger/index.php

Reporting-Endpoints

Other

csp-endpoint="/response_handlers/csplogger/index.php"

Server-Timing

Other

cdn-cache; desc=MISS, edge; dur=31, origin; dur=561, ak_p; desc="1791332504285_389047467_1339478373_59170_1137_17_89_-";dur=1

X-Akamai-Transformed

Other

9 - 0 pmb=mRUM,2

date: Wed, 07 Oct 2026 00:21:44 GMT
report-to: {"group":"csp-endpoint","max_age":86400,"endpoints":[{"url":"/response_handlers/csplogger/index.php"}]}
reporting-endpoints: csp-endpoint="/response_handlers/csplogger/index.php"
server-timing: cdn-cache; desc=MISS, edge; dur=31, origin; dur=561, ak_p; desc="1791332504285_389047467_1339478373_59170_1137_17_89_-";dur=1
x-akamai-transformed: 9 - 0 pmb=mRUM,2

Recommendations

Enable compression (gzip/brotli) to improve performance