Technical Information
| HTTP Status Code | 200 |
| HTTP Version | HTTP/1.1 |
| HTTPS | ✔ Available |
| IP Address | 213.160.74.220 |
| Server Software | nginx |
| Compression | gzip |
|
🔒 🟡 Mixed Content (11 HTTP resources) | The page is served over HTTPS but loads 11 resource(s) over HTTP. This may be blocked in modern browsers. |
|
ℹ 🔵 Missing HSTS | HTTP Strict Transport Security is not configured. Recommended for HTTPS sites. |
HTTP Status Code 200
HTTP Version HTTP/1.1
HTTPS ✔ Available
IP Address 213.160.74.220
Server Software nginx
Compression gzip
🔒 🟡 Mixed Content (11 HTTP resources) The page is served over HTTPS but loads 11 resource(s) over HTTP. This may be blocked in modern browsers.
ℹ 🔵 Missing HSTS HTTP Strict Transport Security is not configured. Recommended for HTTPS sites.
Performance
| DNS Lookup | 17.7 ms |
| TCP Connect | 30.8 ms |
| TLS Handshake | 16.9 ms |
| Time To First Byte (TTFB) | 333 ms |
| Content Download | 0.3 ms |
| Total Response Time | 333.2 ms |
DNS Lookup 17.7 ms
TCP Connect 30.8 ms
TLS Handshake 16.9 ms
Time To First Byte (TTFB) 333 ms
Content Download 0.3 ms
Total Response Time 333.2 ms
Security
| HTTPS | ✔ Enabled |
| HSTS | ✘ Not configured |
| CSP | ✔ Configured |
| X-Frame-Options | ✔ SAMEORIGIN |
| X-Content-Type-Options | ✔ nosniff |
| Referrer Policy | strict-origin-when-cross-origin |
| Permissions Policy | ✔ Configured |
| HTTP/2 | ⚠ HTTP/1.1 |
HTTPS ✔ Enabled
HSTS ✘ Not configured
CSP ✔ Configured
X-Frame-Options ✔ SAMEORIGIN
X-Content-Type-Options ✔ nosniff
Referrer Policy strict-origin-when-cross-origin
Permissions Policy ✔ Configured
HTTP/2 ⚠ HTTP/1.1
SEO Quick Check
| Title | SPD-Unterbezirk München-Stadt |
Title SPD-Unterbezirk München-Stadt
Detected Technologies
| Technology | Google Analytics Nginx |
Technology Google Analytics Nginx
HTTP Headers
| Server
| nginx |
| Date
| Wed, 22 Jul 2026 23:30:38 GMT |
| Content-type
| text/html; charset=utf-8 |
| Vary
| Accept-Encoding |
| Cache-control
| no-transform |
| Expires
| Mon, 12 Dec 1982 06:14:00 GMT |
| Last-modified
| Wed, 22 Jul 2026 23:30:38 GMT |
| Pragma
| no-cache |
| X-frame-options
| SAMEORIGIN |
| X-content-type-options
| nosniff |
| X-xss-protection
| 1; mode=block |
| X-sym-took
| 0.265 |
| Permissions-policy
| interest-cohort=() |
| Referrer-policy
| strict-origin-when-cross-origin |
| Content-security-policy
| default-src 'none'; base-uri 'self'; child-src https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.blitzvideoserver.de https://em.altruja.de; connect-src 'self' https://altruja.de https://em.altruja.de https://dataservices.spd.de; font-src 'self'; form-action 'self' https://www.paypal.com/donate; frame-src https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.blitzvideoserver.de https://em.altruja.de; img-src 'self' data: https://em.altruja.de https://www.paypal.com https://www.paypalobjects.com; media-src 'self' https://spd-webomat.s3.eu-central-1.amazonaws.com https://spd-webomat-media.s3.eu-central-1.amazonaws.com; object-src 'self'; script-src 'self' https://altruja.de https://em.altruja.de https://dataservices.spd.de; style-src 'self'; frame-ancestors 'self' |
| X-cache-status
| EXPIRED |
| Content-encoding
| gzip |
Meta Tags
| X-UA-Compatible | IE=edge |
| Viewport | width=device-width, initial-scale=1 |
Server nginx
Date Wed, 22 Jul 2026 23:30:38 GMT
Content-type text/html; charset=utf-8
Vary Accept-Encoding
Cache-control no-transform
Expires Mon, 12 Dec 1982 06:14:00 GMT
Last-modified Wed, 22 Jul 2026 23:30:38 GMT
Pragma no-cache
X-frame-options SAMEORIGIN
X-content-type-options nosniff
X-xss-protection 1; mode=block
X-sym-took 0.265
Permissions-policy interest-cohort=()
Referrer-policy strict-origin-when-cross-origin
Content-security-policy default-src 'none'; base-uri 'self'; child-src https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.blitzvideoserver.de https://em.altruja.de; connect-src 'self' https://altruja.de https://em.altruja.de https://dataservices.spd.de; font-src 'self'; form-action 'self' https://www.paypal.com/donate; frame-src https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.blitzvideoserver.de https://em.altruja.de; img-src 'self' data: https://em.altruja.de https://www.paypal.com https://www.paypalobjects.com; media-src 'self' https://spd-webomat.s3.eu-central-1.amazonaws.com https://spd-webomat-media.s3.eu-central-1.amazonaws.com; object-src 'self'; script-src 'self' https://altruja.de https://em.altruja.de https://dataservices.spd.de; style-src 'self'; frame-ancestors 'self'
X-cache-status EXPIRED
Content-encoding gzip
