aethercert

www.homepage-webhilfe.de

Scanned 8 days ago · Oct 22, 2026, 8:57 AM

F

Security Headers

The HTTP response headers browsers use to restrict what a page - or an attacker inside it - can do.

Score0%
  • no Content-Security-Policy header
  • no Strict-Transport-Security header
  • no X-Content-Type-Options: nosniff
  • no clickjacking protection (X-Frame-Options or frame-ancestors)
  • no Referrer-Policy header
  • no Permissions-Policy header
  • no Cross-Origin-Opener-Policy header
  • no Cross-Origin-Resource-Policy header
  • the Server header discloses "Microsoft-IIS/10.0"
  • the X-Powered-By header discloses "PHP/7.1.8, ASP.NET"
  • cookie "PHPSESSID" is missing the Secure flag
  • cookie "PHPSESSID" is missing the HttpOnly flag
Content-Security-Policynot set
Strict-Transport-Securitynot set
X-Content-Type-Optionsnot set
X-Frame-Optionsnot set
Referrer-Policynot set
Permissions-Policynot set
Cross-Origin-Opener-Policynot set
Cross-Origin-Resource-Policynot set
CookiesPHPSESSID (no flags)