Open
Cached
·
just now
18
Headers
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Good
SAMEORIGIN
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Good
strict-origin-when-cross-origin
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Consider adding Permissions-Policy to control browser features
Performance Headers
1 headers
Connection
Performance
close
Caching Headers
2 headers
Cache-Control
Caching
max-age=0, private, must-revalidate
Etag
Caching
W/"99b0f74c4c39eb2b84a73327fe9a8254"
Content Headers
2 headers
Content-Length
Content
49424
Content-Type
Content
text/html; charset=utf-8
Server Headers
2 headers
Server
Server
nginx/1.18.0
X-Runtime
Server
0.333593
CORS Headers
0 headers
No CORS headers found
Cookies Headers
1 headers
Set-Cookie
Cookies
_DreamIn_session=hxYm2I9l9YyHlTQzxfWZMhmjKcKrQrTyYINVwp%2BaRwxnbtf1SBgzgqvkVSZxmu%2FOEkcyU7Kk6p5qVxJH8A24t94CjQGB1d%2Brrh%2Fn3nQGGFRk9xle68TikU%2BaJDs1VXfA2wttXfins4gQUafQoTbM5Jx505ex3jwdG26fGkvJ4xS4db2b3XATNVF92GObg68iBPlOGUurOxJfV%2B0LgXfe79h7WvoWYzKtQSBbvNMyFuGEd3pDRY%2Fmxlyq3gehp1XyEWct40Rc%2FxjVcX2y8TiDgNr3u4EUUx4ad7Yyl4kS4B6fbf0c43U5d4ZJEfJkMx0arxq53O54GxSYltmcagqHrYExY%2FzlexLw--1be1WZxGBSFATKTo--u5M3%2FvWb%2F2lDugDFHYnXNg%3D%3D; domain=.ccc-muenchen.de; path=/; HttpOnly; SameSite=Lax
Other Headers
6 headers
Date
Other
Fri, 05 Dec 2025 20:02:27 GMT
Link
Other
</assets/application-9c1f3abf5fa3be82aa6df40cf5cff97af4a2fad7aabf888af1495abb3b4e84f0.css>; rel=preload; as=style; nopush,</assets/independent_pages/external_ccc-muenchen/external_ccc-muenchen-53728c43064cc5788034a86fdde338ee398821dd8d41c3786962b52c87db4aa4.css>; rel=preload; as=style; nopush,</assets/application-169ff81b4b5ae8cb97d0e882b60c6b168482a0cc9312eca2829cf731ca84e520.js>; rel=preload; as=script; nopush,</packs/js/main_pack-331801b2b481e1145de1.js>; rel=preload; as=script; nopush,</packs/css/main_pack-f6c54ad2.css>; rel=preload; as=style; nopush
X-Download-Options
Other
noopen
X-Permitted-Cross-Domain-Policies
Other
none
X-Request-Id
Other
fa8f0d6d-dae4-495f-a012-f3f36e8dd677
X-Robots-Tag
Other
noindex
Recommendations
Enable compression (gzip/brotli) to improve performance
Analysis completed in 1334ms