DNS Gurus
Open Cached · just now
18 Headers

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Good
SAMEORIGIN
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Good
strict-origin-when-cross-origin
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Consider adding Permissions-Policy to control browser features

Performance Headers

1 headers
Connection
Performance
keep-alive

Caching Headers

2 headers
Cache-Control
Caching
max-age=0, private, must-revalidate
Etag
Caching
W/"92b6f29a25a7d73c9a92b03c080df3b4"

Content Headers

2 headers
Content-Length
Content
63258
Content-Type
Content
text/html; charset=utf-8

Server Headers

2 headers
Server
Server
nginx/1.18.0
X-Runtime
Server
0.853791

CORS Headers

0 headers
No CORS headers found

Cookies Headers

1 headers
Set-Cookie
Cookies
_DreamIn_session=MgVZQFDbRlvqXGNR4XwFC8q97nt0dOPHwNb1djDu3yvsOIZHEk8BAWdYC00ItDnBpzFkX%2FBNcMWeEsAlbMRtsKdy%2BEkJ6Z5qdlZhC4%2B7ptXUE27WOEBjrDKNJkBMSSPb18BSqldEpUndt9cU8OxCsoa6cH1fXbvGR7VCN7EB%2FJNGeQ1dGtRpWRyS0oo1100mhyrXDx8s6pwP8QhXWtlj3CEkf4u1AGusQl3N1HlSLJfC5NhsNrf%2F6gYnhtHdqod1zNV4XJrjEzQjMXcUgvydlGyZTLbiz48NKjvIy6NB36lCNJY8SCu9sH2xx%2FY8c%2FDOvEnrvMcQTnVlgErcm%2BlUk1ccR8pLlXqK--67r7LAAL22nCF7N7--mOn%2Fsc4AjagCOhrOIr3YhQ%3D%3D; domain=.lmu-klinikum.de; path=/; HttpOnly; SameSite=Lax

Other Headers

6 headers
Date
Other
Sun, 23 Nov 2025 16:17:20 GMT
Link
Other
</assets/application-9c1f3abf5fa3be82aa6df40cf5cff97af4a2fad7aabf888af1495abb3b4e84f0.css>; rel=preload; as=style; nopush,</assets/klinikum-ecc2a1c2f9982a6469d650791b952d39404cde11f591aa8d9fa573c19710ca54.css>; rel=preload; as=style; nopush,</assets/application-2b41ac4deb98bdeb5624cf9701fa1477c0b578a020dc83a6f83b70a090258b5c.js>; rel=preload; as=script; nopush,</packs/js/main_pack-4cbd9f8c676a287229e6.js>; rel=preload; as=script; nopush,</packs/css/main_pack-f6c54ad2.css>; rel=preload; as=style; nopush
X-Download-Options
Other
noopen
X-Permitted-Cross-Domain-Policies
Other
none
X-Request-Id
Other
eef38fa2-9671-4380-ae2e-72076e9c9db5
X-Robots-Tag
Other
noindex

Recommendations

Enable compression (gzip/brotli) to improve performance

Analysis completed in 2183ms