HTTP Headers Analysis for https://united-internet.org

HTTP Security Headers

Status

Strict-Transport-Security

Present

max-age=31536000

Content-Security-Policy

Basic

script-src; default-src; img-src; +2 more Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Good

sameorigin

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Present

same-origin

Permissions-Policy

Missing

Not configured

Recommendations

• Increase HSTS max-age to at least 1 year and add includeSubDomains
• Improve CSP by adding more specific directives and removing 'unsafe-inline'
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

close

Transfer-Encoding

Performance

chunked

Vary

Performance

Origin, Access-Control-Request-Method, Access-Control-Request-Headers

connection: close
transfer-encoding: chunked
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers

Caching Headers

Cache-Control

Caching

no-cache, no-store, max-age=0, must-revalidate

Expires

Caching

0

Pragma

Caching

no-cache

cache-control: no-cache, no-store, max-age=0, must-revalidate
expires: 0
pragma: no-cache

Content Headers

Content-Language

Content

en

Content-Type

Content

text/html;charset=UTF-8

content-language: en
content-type: text/html;charset=UTF-8

Server Headers

Server

TopSecret

server: TopSecret

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

Cookies

set-cookie: org.springframework.web.servlet.i18n.CookieLocaleResolver.LOCALE=en; Path=/; Secure; HttpOnly; SameSite=None
IMS-TGC=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Path=/ims-sso; Secure; HttpOnly; SameSite=None
JSESSIONID=95B07B5F0DE5367124B9A7E0B25795BE.uia; Max-Age=43200; Expires=Wed, 05-Aug-2026 09:21:19 GMT; Path=/ims-sso; Secure; HttpOnly; SameSite=None

Other Headers

Date

Other

Tue, 04 Aug 2026 21:21:19 GMT

Feature-Policy

Other

geolocation 'none'; midi 'none'; sync-xhr 'none'; microphone 'none'; camera 'none'; magnetometer 'none'; gyroscope 'none'; speaker 'none'; vibrate 'none'; fullscreen 'none'; payment 'none';

Requestid

Other

ee695d26-8198-4b6c-9a28-136a536bb69d

X-Haproxy-Backend

Other

login_global

X-Haproxy-Backend-Server-Count

Other

X-Haproxy-Backend-Variable

Other

X-Haproxy-Frontend

Other

login.united-internet.org

X-Haproxy-Name

Other

laohaproxy-bap1627l01

X-Haproxy-Server

Other

bitimsloginbsa01

X-Xml-Workaround

Other

false

date: Tue, 04 Aug 2026 21:21:19 GMT
feature-policy: geolocation 'none'; midi 'none'; sync-xhr 'none'; microphone 'none'; camera 'none'; magnetometer 'none'; gyroscope 'none'; speaker 'none'; vibrate 'none'; fullscreen 'none'; payment 'none';
requestid: ee695d26-8198-4b6c-9a28-136a536bb69d
x-haproxy-backend: login_global
x-haproxy-backend-server-count: 
x-haproxy-backend-variable: 
x-haproxy-frontend: login.united-internet.org
x-haproxy-name: laohaproxy-bap1627l01
x-haproxy-server: bitimsloginbsa01
x-xml-workaround: false

Recommendations

Enable compression (gzip/brotli) to improve performance