HTTPS is an extension of HTTP that ensures secure data transfer over the web using encryption protocols like TLS or SSL. It's vital for websites handling sensitive information, signified by a padlock icon in the browser's address bar.


Everything is ok

  https://extract.micb.md/ExtractPOS/Login.aspx

STATUS 200 OK
Header Value
Cache-Control private
Content-Type text/html; charset=utf-8
Date Sun, 13 Apr 2025 00:00:52 GMT
Permissions-Policy camera=(), microphone=()
Set-Cookie incap_ses_1077_3103996=bvIHRluPEAe6LWVmGkbyDrX++mcAAAAAlATuMx2GLcGIBoKcyUrSTQ==; path=/; Domain=.micb.md; Secure; SameSite=None
Strict-Transport-Security max-age=31536000; includeSubDomains
Transfer-Encoding chunked
X-AspNet-Version 4.0.30319
X-CDN Imperva
X-Content-Security-Policy allow 'self'
X-Content-Type-Options nosniff
X-Frame-Options SAMEORIGIN
X-Iinfo 14-23701312-23701321 SNNN RT(1744502453546 303) q(0 0 0 0) r(1 1) U12
X-Permitted-Cross-Domain-Policies master-only
X-Powered-By ASP.NET
X-Webkit-CSP allow 'self'
X-XSS-Protection 1; mode=block
plaintextCopyEditContent-Security-Policy default-src 'none';style-src 'self';img-src 'self' data:;font-src 'self';connect-src 'self';frame-src 'none';object-src 'none';media-src 'self';base-uri 'none';form-action 'self';upgrade-insecure-requests;block-all-mixed-content;

  https://extract.micb.md

STATUS 302 Found
Header Value
Cache-Control private
Content-Length 162
Content-Type text/html; charset=utf-8
Date Sun, 13 Apr 2025 00:00:52 GMT
Location https://extract.micb.md/ExtractPOS/Login.aspx
Permissions-Policy camera=(), microphone=()
Set-Cookie incap_ses_1077_3103996=XhmMdJJqBza6LWVmGkbyDrX++mcAAAAAwOoBYyMkay/Smu+3qaOCZQ==; path=/; Domain=.micb.md; Secure; SameSite=None
Strict-Transport-Security max-age=31536000; includeSubDomains
X-AspNet-Version 4.0.30319
X-CDN Imperva
X-Content-Security-Policy allow 'self'
X-Content-Type-Options nosniff
X-Frame-Options SAMEORIGIN
X-Iinfo 14-23701312-23701321 NNNN CT(32 78 0) RT(1744502453546 102) q(0 0 2 0) r(2 2) U11
X-Permitted-Cross-Domain-Policies master-only
X-Powered-By ASP.NET
X-Webkit-CSP allow 'self'
X-XSS-Protection 1; mode=block
plaintextCopyEditContent-Security-Policy default-src 'none';style-src 'self';img-src 'self' data:;font-src 'self';connect-src 'self';frame-src 'none';object-src 'none';media-src 'self';base-uri 'none';form-action 'self';upgrade-insecure-requests;block-all-mixed-content;

HTTPS is properly configured

When HTTPS is set up correctly, it ensures secure communication between a website and its visitors. This is achieved through the use of a valid SSL/TLS certificate, which encrypts data exchanged between the user's browser and the server. Security headers like Content Security Policy (CSP) and HTTP Strict Transport Security (HSTS) are in place to enhance protection against cyber threats. All resources on the website are loaded securely over HTTPS, preventing mixed content issues. This not only improves security but also boosts the website's SEO ranking and builds trust with users, as indicated by the padlock icon in the browser's address bar.