Security Report Summary
C
Site: https://www.kleinanzeigen.de/
IP Address: 2.19.176.217
Report Time: 27 Oct 2026 23:19:58 UTC
Headers:
  • X-Content-Type-Options
  • X-Frame-Options
  • Strict-Transport-Security
  • Content-Security-Policy
  • Referrer-Policy
  • Permissions-Policy
Advanced:
Not bad… Maybe you should perform a deeper security analysis of your website and APIs:
Missing Headers
Content-Security-PolicyContent Security Policy is an effective measure to protect your site from XSS attacks. By whitelisting sources of approved content, you can prevent the browser from loading malicious assets.
Referrer-PolicyReferrer Policy is a new header that allows a site to control how much information the browser includes with navigations away from a document and should be set by all sites.
Permissions-PolicyPermissions Policy is a new header that allows a site to control which features and APIs can be used in the browser.
Raw Headers
HTTP/2200
x-gateway-request-ida873e2be-3bf6-488b-ade4-b3d255d63f17
x-gateway-routemicrofrontend-red-web
varyUser-Agent,Accept-Encoding
x-gateway-dynamic-servingtrue
content-typetext/html
x-content-type-optionsnosniff
x-frame-optionsDENY
x-akamai-transformed0 - 0 -
content-encodinggzip
dateTue, 27 Oct 2026 23:19:58 GMT
set-cookielnFeMonitoring=12; Path=/; HttpOnly; Secure; SameSite=Strict
set-cookiekameleoonVisitorCode=hjvpdxq7hk8ww6jr; Max-Age=31536000; Path=/; Secure; SameSite=Lax
strict-transport-securitymax-age=63072000 ; includeSubDomains ; preload
set-cookie_abck=AB97043D00216838C112E64DE87F3F9C~-1~YAAQ1rATAmkJC3mhAQAAhtOpfxAU7zX0KVV4zSa6NXiyanjZFBIyWNHH4nQ9hhYuzaYd0F6EzaPHJSHO2T3HdxuGxf+370jho0Q3kHPfOv5MT73hMZAsaSFHDdOr3gxAz1v1WC2oOEbY/DLH9tHhYsvwWtD0H8z6jNtZlDXjiVzHKirLuwXV4DaZtOIKZciD5ArXURvVI1/4/xI6YL+RzRfqzuGRLEk+7nGJ8HD0Rq0jhn5/5bguKbGMlidzlzYCMPRZpbOUEZGXf2i6H50okfCh13iZXYTx3E7UeRfIg86yFob5XDBnzGxkgZJPRmxTjBEMfIMuvUBBG/RncDLsWqhI17TgvjLqRhD2JzjH3izF1AMYWUt6J9AfLfGOlLvO9Ge/gspZv8uKMX51WEU/Par5jw1gzGdKelns/fCdN6fHl9G8WfupJtlJdXs4lP5g5e3gmJ+wO0U1r7JMmro=~-1~-1~-1~-1~-1; Domain=.kleinanzeigen.de; Path=/; Expires=Wed, 27 Oct 2027 23:19:58 GMT; Max-Age=31536000; Secure
set-cookieak_bmsc=FE97C57680116DDF431CE26637A6FE16~000000000000000000000000000000~YAAQ1rATAmoJC3mhAQAAhtOpfwHuZPTxL2tlURrsb5075yU6MBA+qAxy3SgHuoUVwJmy+/Mt1cFL6LjxVUwOaw7YRG7Em/WW8k4MsMsxX/PudvpnLSMA0ezDd3KlFwaR7rkFypYtwJzzCzJmGetW1s4SmDWbLnaUr9Lu0hspGYSeHQVa9D8wMDSPeXFpyQg9G9WiAyaqYHnNuckqiVp/qzVIO4X2fG7jn5+6BLq8Vi4i2xSo19yksrftTpnMUPgvMDQ56puzNnIC/xl9dKNo/VQo2CCqPNgPgd6BiRc4MFn42sfJk9KAboEiR/np8zTnaZlbiD1qnaLHv18Vy/EoNmA25XlUSLphdGen0mPzg5Kzi/N2RPP01ZZ+NC3X+YXjk4DlDT7ugXeOuKxipgE3Aagy4A==; Domain=.kleinanzeigen.de; Path=/; Expires=Wed, 28 Oct 2026 01:19:58 GMT; Max-Age=7200; HttpOnly
set-cookiebm_mi=40CD20ED365E7C9A87D5F8FC3DE313A4~YAAQ1rATAmsJC3mhAQAAhtOpfwE8mPLljlB83x+AQSNizSnOPLXwJcLRaC93C1kHLjX20wkH0QhgcHjpD+N8TW4fjUsMbh0tzRsCRyWPChX69wKhnX7W9Xfne7VkQxiqsyuL1ovcPvT2rwkEW2+O1+V+U/zNdX+Bp1pe2S4/YY8rfEE9J+QYhzELueysqOFgzqzmYc/FbAl3FbDC8SrXpb32k2yx1f+lRjjw/jj4nLjbY+jgohgNrZj2zF9kTLno4dgCG4AZo7lHGRvxNwQ75bMZi7ET1S7ciQ5//EtWqcXNrw9ptVZFoO7/394WvKGig+ru~1; Domain=.kleinanzeigen.de; Path=/; Expires=Tue, 27 Oct 2026 23:19:58 GMT; Max-Age=0; Secure
set-cookiebm_sz=8CF35CDB4E64095CA3409E4438FA8E69~YAAQ1rATAmwJC3mhAQAAhtOpfwHJGYlnhw+/JFrzPMHa0u1EZoGCMTyYz04wzftwwVakJYBd+uDaILrf6hgUGhOPvTIOyLga90I9kaNugeqPPuMiRCgiIS5HO71WVW06EmT7+gY4K6SOYRA1g7V4M33SAH1ji3SbaSbzjoqccV+GJehlaz/fynskGt5PMUBBwMFsuvcj2sPPLmcWWlsBigxMDWoRSK0oOoOWau6yhVoSjPOLQ2EV3B7NBxualc0Ry4iVw0s7kRylpRTTl2+x4Wla2m8/WkXKicUgkJ3YE5OU0AKuNegxvpj9iiFVHdicFaaZBtPvIf2tNAEgjCvZU7iM5EaSzIb4rgriiUBHY/CfTWESuQ3EX0h6K+dQ1UWdZK0WEHy6vZY3X8VBHXqmEfDeU1Kl~4605491~3752516; Domain=.kleinanzeigen.de; Path=/; Expires=Wed, 28 Oct 2026 03:19:58 GMT; Max-Age=14400
Upcoming Headers
Cross-Origin-Embedder-PolicyCross-Origin Embedder Policy allows a site to prevent assets being loaded that do not grant permission to load them via CORS or CORP.
Cross-Origin-Opener-PolicyCross-Origin Opener Policy allows a site to opt-in to Cross-Origin Isolation in the browser.
Cross-Origin-Resource-PolicyCross-Origin Resource Policy allows a resource owner to specify who can load the resource.
Additional Information
x-content-type-optionsX-Content-Type-Options stops a browser from trying to MIME-sniff the content type and forces it to stick with the declared content-type. The only valid value for this header is "X-Content-Type-Options: nosniff".
x-frame-optionsX-Frame-Options tells the browser whether you want to allow your site to be framed or not. By preventing a browser from framing your site you can defend against attacks like clickjacking.
strict-transport-securityHTTP Strict Transport Security is an excellent feature to support on your site and strengthens your implementation of TLS by getting the User Agent to enforce the use of HTTPS.