HTTPS is an extension of HTTP that ensures secure data transfer over the web using encryption protocols like TLS or SSL. It's vital for websites handling sensitive information, signified by a padlock icon in the browser's address bar.


Everything is ok

  https://micb.md

STATUS 200 OK
Header Value
Access-Control-Allow-Origin *
Connection keep-alive
Content-Security-Policy script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: *.jquery.com *.jsdelivr.net *.fontawesome.com *.youtube.com maps.gstatic.com *.google.com *.googleapis.com *.googletagmanager.com consent.cookiebot.com consentcdn.cookiebot.com connect.facebook.net www.gstatic.com; style-src 'self' 'unsafe-inline' https: *.jsdelivr.net *.fontawesome.com fonts.googleapis.com; img-src 'self' data: https: *.google.com *.gstatic.com *.googleapis.com *.googletagmanager.com *.facebook.com www.facebook.com stats.g.doubleclick.net *.youtube.com consent.cookiebot.com consentcdn.cookiebot.com assets.zendesk.com; font-src 'self' https: data: *.jsdelivr.net *.fontawesome.com fonts.gstatic.com fonts.googleapis.com; frame-src 'self' https: blob: *.youtube.com *.facebook.com s-static.ak.facebook.com tautt.zendesk.com assets.zendesk.com consent.cookiebot.com consentcdn.cookiebot.com www.google.com *.gstatic.com *.googletagmanager.com *.recaptcha.net; connect-src 'self' https: *.google-analytics.com *.analytics.google.com *.googletagmanager.com *.googleapis.com *.gstatic.com *.facebook.com consent.cookiebot.com consentcdn.cookiebot.com assets.zendesk.com; base-uri 'self'; form-action 'self'; frame-ancestors 'none';
Content-Type text/html; charset=UTF-8
Date Sun, 12 Oct 2025 00:00:43 GMT
Link <https://micb.md/>; rel=shortlink
Referrer-Policy strict-origin-when-cross-origin
Server nginx
Set-Cookie incap_ses_788_3095709=376iMwJQjyTTEk558YnvCqvv6mgAAAAABPNg3zZmxM/ACxLqUm+T9g==; path=/; Domain=.micb.md
Strict-Transport-Security max-age=31536000; includeSubDomains; preload
Transfer-Encoding chunked
X-CDN Imperva
X-Content-Type-Options nosniff
X-DNS-Prefetch-Control off
X-Download-Options noopen
X-Frame-Options SAMEORIGIN
X-Iinfo 9-541003-541004 NNNN CT(26 27 0) RT(1760227243544 81) q(0 0 1 0) r(1 3) U12
X-Permitted-Cross-Domain-Policies none
X-XSS-Protection 1; mode=block

HTTPS is properly configured

When HTTPS is set up correctly, it ensures secure communication between a website and its visitors. This is achieved through the use of a valid SSL/TLS certificate, which encrypts data exchanged between the user's browser and the server. Security headers like Content Security Policy (CSP) and HTTP Strict Transport Security (HSTS) are in place to enhance protection against cyber threats. All resources on the website are loaded securely over HTTPS, preventing mixed content issues. This not only improves security but also boosts the website's SEO ranking and builds trust with users, as indicated by the padlock icon in the browser's address bar.