Open
Cached
·
just now
12
Headers
Detected Technologies from Headers
YouTube
AppNexus (Xandr)
AWS
Bing
Cookiebot
Facebook
Google AdSense
Google Analytics
Google API JS Client
Google Conversion Tracking
Google DoubleClick
Google Fonts
Google Search
Google Static File Front End
Google Tag Manager
Hotjar
jsDelivr
LinkedIn
Microsoft Clarity
OneTrust
Pinterest
Salesforce Personalization
Siteimprove
Snapchat
Sprinklr
Active incidents
Teads
TikTok
TikTok Analytics
Usercentrics
Google Cloud
HTTP Security Headers
Status
Strict-Transport-Security
Excellent
max-age=31556926; includeSubDomains; preload
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Good
NOSNIFF
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Improve CSP by adding more specific directives and removing 'unsafe-inline'
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
Performance Headers
Accept-Ranges
bytes
Connection
close
Transfer-Encoding
chunked
Vary
Accept-Encoding,User-Agent
accept-ranges: bytes connection: close transfer-encoding: chunked vary: Accept-Encoding,User-Agent
Caching Headers
Cache-Control
max-age=0,no-cache
cache-control: max-age=0,no-cache
Content Headers
Content-Type
text/html;charset=utf-8
content-type: text/html;charset=utf-8
Server Headers
No server headers found
CORS Headers
No CORS headers found
Cookies Headers
Other Headers
Date
Fri, 24 Jul 2026 21:25:40 GMT
Reporting-Endpoints
csp-endpoint='https://www.magenta.at/csp-report'
X-Dns-Prefetch-Control
off
date: Fri, 24 Jul 2026 21:25:40 GMT reporting-endpoints: csp-endpoint='https://www.magenta.at/csp-report' x-dns-prefetch-control: off
Recommendations
Enable compression (gzip/brotli) to improve performance