hapeko.de website report

HTTP/2 200 
date: Thu, 27 Aug 2026 02:28:27 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
set-cookie: CraftSessionId=282a8491d89ef58c523c15132da6ce47; path=/; secure; HttpOnly; SameSite=Lax, HAPEKO_CSRF_TOKEN=e9bf493882331865c82ad4af5285f60dca67cb5feba44bc07e4602009c37b0e3a%3A2%3A%7Bi%3A0%3Bs%3A17%3A%22HAPEKO_CSRF_TOKEN%22%3Bi%3A1%3Bs%3A40%3A%22rf_qWc9cwiJzOCm72xHwmpsfEwAfuNza8a_hFitn%22%3B%7D; path=/; secure; HttpOnly; SameSite=Lax, abtest=scenario_b;Path=/;Max-Age=86400;Secure;HttpOnly;SameSite=Lax
expires: 0
pragma: no-cache
cache-control: no-cache, no-store, must-revalidate
content-security-policy: base-uri 'self' matomo.hapeko.at; default-src 'unsafe-inline' 'self'; script-src 'self' 'unsafe-inline' 'strict-dynamic' 'unsafe-eval' 'nonce-549b81984f3b6574037c7a91a11f5ec640207375fb7c'; style-src 'unsafe-inline' 'self' fonts.googleapis.com www.googletagmanager.com *.facebook.com; img-src 'self' data: *.usercentrics.eu *.google.com *.google.de *.googleapis.com *.googleadservices.com *.gstatic.com *.ytimg.com *.vimeocdn.com www.google-analytics.com *.facebook.com *.bing.com *.clarity.ms www.googletagmanager.com *.g.doubleclick.net *.zemanta.com *.linkedin.com *.lfeeder.com; connect-src 'self' *.usercentrics.eu *.googleapis.com www.google-analytics.com *.analytics.google.com *.googleadservices.com *.google.de *.google.com *.googletagmanager.com matomo.hapeko.at *.clarity.ms *.doubleclick.net salesviewer.org *.salesviewer.com *.bing.com *.bing.net *.facebook.com *.google-analytics.com region1.google-analytics.com *.zemanta.com *.licdn.com *.oribi.io *.lfeeder.com *.linkedin.com *.googlesyndication.com *.infinity-tracking.com *.infinity-tracking.net *.outbrain.com; font-src 'self' data: fonts.gstatic.com; object-src 'none'; frame-src *.vimeo.com *.youtube.com *.facebook.com *.doubleclick.net *.googletagmanager.com; frame-ancestors 'self';
permissions-policy: autoplay=(self), camera=(self), fullscreen=(self), geolocation=(self), microphone=(self), picture-in-picture=()
strict-transport-security: max-age=31536000; includeSubDomains
x-abtest: scenario_b
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade