The page is served over HTTPS but loads 8 resource(s) over HTTP. This may be blocked in modern browsers.
ℹ 🔵Missing Content Security Policy
CSP is not configured. It helps prevent XSS attacks and content injection.
ℹ 🔵Missing X-Frame-Options
The site can be embedded in iframes by third parties (clickjacking risk).
HTTP Status Code200 HTTP VersionHTTP/1.1 HTTPS✔ Available IP Address85.13.156.171 Server Softwarenginx Compressiongzip 🔒 🟡Mixed Content (8 HTTP resources)The page is served over HTTPS but loads 8 resource(s) over HTTP. This may be blocked in modern browsers. ℹ 🔵Missing Content Security PolicyCSP is not configured. It helps prevent XSS attacks and content injection. ℹ 🔵Missing X-Frame-OptionsThe site can be embedded in iframes by third parties (clickjacking risk).
Performance
DNS Lookup
30 ms
TCP Connect
59 ms
TLS Handshake
36.6 ms
Time To First Byte (TTFB)
402.8 ms
Content Download
29.1 ms
Total Response Time
432 ms
DNS Lookup30 ms TCP Connect59 ms TLS Handshake36.6 ms Time To First Byte (TTFB)402.8 ms Content Download29.1 ms Total Response Time432 ms
Security
HTTPS
✔ Enabled
HSTS
✔ max-age=600000
CSP
⚠ Not configured
X-Frame-Options
⚠ Not configured
X-Content-Type-Options
⚠ Not configured
HTTP/2
⚠ HTTP/1.1
HTTPS✔ Enabled HSTS✔ max-age=600000 CSP⚠ Not configured X-Frame-Options⚠ Not configured X-Content-Type-Options⚠ Not configured HTTP/2⚠ HTTP/1.1
SEO Quick Check
Title
flossmann.de – Denk mal
Canonical
https://flossmann.de/
Robots Meta
max-image-preview:large
Titleflossmann.de – Denk mal Canonicalhttps://flossmann.de/ Robots Metamax-image-preview:large