HTTPS is an extension of HTTP that ensures secure data transfer over the web using encryption protocols like TLS or SSL. It's vital for websites handling sensitive information, signified by a padlock icon in the browser's address bar.


Everything is ok

  https://online.energbank.com/olbankpf_prod/app/IBEnergPF/

STATUS 200 OK
Header Value
Accept-Ranges bytes
Access-Control-Allow-Credentials false
Access-Control-Allow-Headers x-requested-with, Content-Type, origin, authorization, accept, client-security-token
Access-Control-Allow-Methods GET,POST, PUT, DELETE, OPTIONS, HEAD
Access-Control-Allow-Origin online.energbank.com
Access-Control-Max-Age 1209600
Content-Length 9470
Content-Security-Policy default-src https: data: wss: blob: 'unsafe-inline' 'unsafe-eval'
Content-Type text/html
Date Sun, 13 Oct 2024 00:00:41 GMT
ETag W/"9470-1724424983162"
Last-Modified Fri, 23 Aug 2024 14:56:23 GMT
Server Apache
Set-Cookie jsessionid=.wcl2;path=/;Expires=Sun, Jan 01 2040 00:00:00 UTC
Strict-Transport-Security max-age=31536000;
Vary Accept-Encoding
X-Content-Type-Options nosniff
X-Frame-Options SAMEORIGIN
X-Xss-Protection 1; mode=block

  https://online.energbank.com

STATUS 302 Found
Header Value
Content-Length 241
Content-Type text/html; charset=iso-8859-1
Date Sun, 13 Oct 2024 00:00:41 GMT
Location https://online.energbank.com/olbankpf_prod/app/IBEnergPF/
Server Apache

HTTPS is properly configured

When HTTPS is set up correctly, it ensures secure communication between a website and its visitors. This is achieved through the use of a valid SSL/TLS certificate, which encrypts data exchanged between the user's browser and the server. Security headers like Content Security Policy (CSP) and HTTP Strict Transport Security (HSTS) are in place to enhance protection against cyber threats. All resources on the website are loaded securely over HTTPS, preventing mixed content issues. This not only improves security but also boosts the website's SEO ranking and builds trust with users, as indicated by the padlock icon in the browser's address bar.