HTTPS is an extension of HTTP that ensures secure data transfer over the web using encryption protocols like TLS or SSL. It's vital for websites handling sensitive information, signified by a padlock icon in the browser's address bar.

Everything is ok

  https://www.energbank.com/

STATUS 200 OK

Header	Value
Content-Length	2968
Content-Type	text/html; charset=utf-8
Date	Sun, 26 Jan 2025 00:00:20 GMT
ETag	"b98-p+ZNhVRLeDEdXBcKIAFeHfQkhpQ"
Server	Apache
Vary	Accept-Encoding
Via	1.1 pwww-app.energbank.com:18080 (Apache/2.4.59)
X-Content-Type-Options	nosniff
X-Frame-Options	sameorigin

  https://energbank.com

STATUS 301 Moved Permanently

Header	Value
CF-RAY	907c38deef8324c5-KBP
Cache-Control	max-age=3600
Connection	keep-alive
Content-Length	167
Content-Type	text/html
Date	Sun, 26 Jan 2025 00:00:20 GMT
Expires	Sun, 26 Jan 2025 01:00:20 GMT
Location	https://www.energbank.com/
NEL	{"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Report-To	{"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=S%2FOHVJ%2BAVC6JtILHi2bd7dCFb3jUdVS5ZJN90WClN%2BejyMXNF6EWUGQae%2BrWUpZdxJQ9RYXT4GV3Nsh%2BDQoNU0gb0nhJ4itBC0vIlQYXDQRrw5OS%2F9mu7dlqDkrS%2FBP6"}],"group":"cf-nel","max_age":604800}
Server	cloudflare
Strict-Transport-Security	max-age=15552000; includeSubDomains; preload
X-Content-Type-Options	nosniff
alt-svc	h3=":443"; ma=86400
server-timing	cfL4;desc="?proto=TCP&rtt=11159&min_rtt=11111&rtt_var=4264&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2831&recv_bytes=482&delivery_rate=251826&cwnd=251&unsent_bytes=0&cid=1f4c4484bff00d4e&ts=101&x=0"

HTTPS is properly configured

When HTTPS is set up correctly, it ensures secure communication between a website and its visitors. This is achieved through the use of a valid SSL/TLS certificate, which encrypts data exchanged between the user's browser and the server. Security headers like Content Security Policy (CSP) and HTTP Strict Transport Security (HSTS) are in place to enhance protection against cyber threats. All resources on the website are loaded securely over HTTPS, preventing mixed content issues. This not only improves security but also boosts the website's SEO ranking and builds trust with users, as indicated by the padlock icon in the browser's address bar.