Open
Cached
·
just now
21
Headers
Detected Technologies from Headers
Plyr
YouTube
Microsoft Advertising
Cloudflare
Active incidents
Cloudflare CDN
Facebook
Google AdSense
Google Analytics
Google API JS Client
Google DoubleClick
Google Fonts
Google Search
Google Static File Front End
Google Tag Manager
HubSpot Forms
jsDelivr
LinkedIn
PHP
Sentry
Spotify
Twitter
Usercentrics
Vimeo
XING
Zendesk
Google Cloud
Google Cloud Storage
HTTP Security Headers
Status
Strict-Transport-Security
Excellent
max-age=31536000; includeSubDomains; preload
X-Frame-Options
Good
SAMEORIGIN
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Good
strict-origin-when-cross-origin
Permissions-Policy
Missing
Not configured
Recommendations
- • Improve CSP by adding more specific directives and removing 'unsafe-inline'
- • Consider adding Permissions-Policy to control browser features
Performance Headers
Connection
close
Transfer-Encoding
chunked
Vary
Accept-Encoding
connection: close transfer-encoding: chunked vary: Accept-Encoding
Caching Headers
Cache-Control
private, no-store
Expires
Thu, 19 Nov 1981 08:52:00 GMT
Pragma
no-cache
cache-control: private, no-store expires: Thu, 19 Nov 1981 08:52:00 GMT pragma: no-cache
Content Headers
Content-Language
de-DE
Content-Type
text/html; charset=utf-8
content-language: de-DE content-type: text/html; charset=utf-8
CORS Headers
No CORS headers found
Cookies Headers
Other Headers
Date
Tue, 28 Apr 2026 02:38:46 GMT
Feature-Policy
geolocation 'self'; midi 'self'; payment 'self'; camera 'self'; usb 'self'; fullscreen 'self'; magnetometer 'self'; picture-in-picture *; accelerometer 'self'; encrypted-media 'self'; autoplay 'self'; gyroscope 'self'; sync-xhr 'self'; microphone 'self'
Link
URL
/typo3temp/scriptmerger/uncompressed/body-ef87361948222030c8f18ba55becb778.merged.js
rel=preload
as=script
URL
/typo3temp/scriptmerger/uncompressed/head-0b5d03b57e1e3b35f05b9a231f3f192a.merged.css
rel=preload
as=style
cf-cache-status: DYNAMIC cf-ray: 9f32b1554b3857d6-IAD date: Tue, 28 Apr 2026 02:38:46 GMT feature-policy: geolocation 'self'; midi 'self'; payment 'self'; camera 'self'; usb 'self'; fullscreen 'self'; magnetometer 'self'; picture-in-picture *; accelerometer 'self'; encrypted-media 'self'; autoplay 'self'; gyroscope 'self'; sync-xhr 'self'; microphone 'self' link: </typo3temp/scriptmerger/uncompressed/body-ef87361948222030c8f18ba55becb778.merged.js>; rel=preload; as=script, </typo3temp/scriptmerger/uncompressed/head-0b5d03b57e1e3b35f05b9a231f3f192a.merged.css>; rel=preload; as=style
Recommendations
Enable compression (gzip/brotli) to improve performance