Technical Information
| HTTP Status Code | 200 |
| HTTP Version | HTTP/1.1 |
| HTTPS | ✔ Available |
| IP Address | 185.84.52.158 |
| Compression | gzip |
|
🔒 🟡 Mixed Content (1 HTTP resources) | The page is served over HTTPS but loads 1 resource(s) over HTTP. This may be blocked in modern browsers. |
HTTP Status Code 200
HTTP Version HTTP/1.1
HTTPS ✔ Available
IP Address 185.84.52.158
Compression gzip
🔒 🟡 Mixed Content (1 HTTP resources) The page is served over HTTPS but loads 1 resource(s) over HTTP. This may be blocked in modern browsers.
Redirect Chain
| # | URL | HTTP Status Code | Status |
| 1 | https://su.se:443 | 301 | HTTP/1.1 301 |
| 2 | https://www.su.se/ | 200 | HTTP/1.1 200 |
#1 URL https://su.se:443
HTTP Status Code 301
Status HTTP/1.1 301
#2 URL https://www.su.se/
HTTP Status Code 200
Status HTTP/1.1 200
Performance
| DNS Lookup | 102.6 ms |
| TCP Connect | 130.6 ms |
| TLS Handshake | 32.9 ms |
| Time To First Byte (TTFB) | 202 ms |
| Content Download | 149.4 ms |
| Total Response Time | 351.5 ms |
DNS Lookup 102.6 ms
TCP Connect 130.6 ms
TLS Handshake 32.9 ms
Time To First Byte (TTFB) 202 ms
Content Download 149.4 ms
Total Response Time 351.5 ms
Security
| HTTPS | ✔ Enabled |
| HSTS | ✔ max-age=31536000 |
| CSP | ✔ Configured |
| X-Frame-Options | ✔ SAMEORIGIN |
| X-Content-Type-Options | ✔ nosniff |
| Referrer Policy | strict-origin-when-cross-origin |
| HTTP/2 | ⚠ HTTP/1.1 |
HTTPS ✔ Enabled
HSTS ✔ max-age=31536000
CSP ✔ Configured
X-Frame-Options ✔ SAMEORIGIN
X-Content-Type-Options ✔ nosniff
Referrer Policy strict-origin-when-cross-origin
HTTP/2 ⚠ HTTP/1.1
SEO Quick Check
| Title | Stockholms universitet - Stockholms universitet |
| Canonical | https://www.su.se |
Title Stockholms universitet - Stockholms universitet
Canonical https://www.su.se
Detected Technologies
| Technology | jQuery Google Analytics |
Technology jQuery Google Analytics
HTTP Headers
| Content-Security-Policy
| default-src 'self' mfstatic.com *.mediaflowpro.com *.mediaflow.com; script-src 'self' 'nonce-aee67480-8507-11f1-8092-55845bd4f6c0' 'unsafe-eval' https://www2.dsv.su.se mfstatic.com https://cdn.matomo.cloud https://su.matomo.cloud https://form.jotform.com https://form.jotformeu.com https://w.soundcloud.com https://www.ctnotes.com https://www.youtube.com https://static-chat.kundo.se https://chat.kundo.se https://stockholmuniversity.app.box.com; style-src 'self' 'unsafe-inline' http://localhost:* mfstatic.com https://su.matomo.cloud https://static-chat.kundo.se https://chat.kundo.se; frame-ancestors 'none'; frame-src 'self' youtube.com www.youtube.com www.youtube-nocookie.com api.kaltura.nordu.net https://api.kltr.nordu.net www.google.com maps.google.com https://form.jotform.com https://eu-submit.jotform.com https://embed.acast.com https://w.soundcloud.com https://org-866.chat.kundo.se *.mediaflow.com mfstatic.com *.mediaflowpro.com https://qcnl.tv https://*.qcnl.tv https://stockholmuniversity.app.box.com https://*.google.com; form-action 'self' https://www.antagning.se/se/search/public https://www.universityadmissions.se/intl/search/public https://research.ebsco.com https://logon.ebsco.zone https://su.powerinit.com https://su.ungapped.io; connect-src 'self' api.dsv.su.se mfstatic.com https://a.eu.silktide.com *.mediaflow.com *.mediaflowcdn.com cdn0-70012-liveedge0.dna.ip-only.net cdn0-70012-liveedge0.dna.contentdelivery.net https://su.matomo.cloud arkiv.kursvardering.su.se survey.kursadmin-ci.su.se survey.kursadmin-test.su.se https://sub.su.se/api/EdsApi/ https://global.ac.ebsco-content.com/autocomplete/rest/ http://ent/web-sourcemaps/api.js-4950e94a9243.map https://www.ctnotes.com https://static-chat.kundo.se https://chat.kundo.se wss://ws-eu.pusher.com https://sockjs-eu.pusher.com https://sentry.kundo.se https://static.kundo.se; media-src 'self' *.mediaflow.com *.mediaflowpro.com mfstatic.com *.mediaflowcdn.com *.inviewer.se blob: cdn0-70012-liveedge0.dna.ip-only.net cdn0-70012-liveedge0.dna.contentdelivery.net https://static-chat.kundo.se; img-src 'self' *.mediaflow.com mfstatic.com *.mediaflowpro.com *.inviewer.se https://cdn.matomo.cloud https://www.su.se https://kundo.app https://kundo-web-uploaded-files-prod.s3.amazonaws.com data:; font-src 'self' mfstatic.com http://localhost:*; worker-src 'self' blob:; |
| Referrer-Policy
| strict-origin-when-cross-origin |
| Strict-Transport-Security
| max-age=31536000 |
| X-Frame-Options
| SAMEORIGIN |
| X-XSS-Protection
| 1; mode=block |
| X-Content-Type-Options
| nosniff |
| P3P
| CP="This is not a P3P policy!" |
| Cache-Control
| no-cache, no-store, must-revalidate |
| Pragma
| no-cache |
| Expires
| Thu, 01 Jan 1970 00:00:00 GMT |
| Link
| ; rel=preload; as=style |
| Vary
| accept-encoding |
| Content-Encoding
| gzip |
| Content-Type
| text/html;charset=UTF-8 |
| Transfer-Encoding
| chunked |
| Date
| Tue, 21 Jul 2026 13:25:47 GMT |
Meta Tags
| Viewport | width=device-width, initial-scale=1, minimum-scale=1, shrink-to-fit=no |
| Dcterms.identifier | https://www.su.se |
| Dcterms.language | sv |
| Dcterms.format | text/html |
| Dcterms.type | text |
Content-Security-Policy default-src 'self' mfstatic.com *.mediaflowpro.com *.mediaflow.com; script-src 'self' 'nonce-aee67480-8507-11f1-8092-55845bd4f6c0' 'unsafe-eval' https://www2.dsv.su.se mfstatic.com https://cdn.matomo.cloud https://su.matomo.cloud https://form.jotform.com https://form.jotformeu.com https://w.soundcloud.com https://www.ctnotes.com https://www.youtube.com https://static-chat.kundo.se https://chat.kundo.se https://stockholmuniversity.app.box.com; style-src 'self' 'unsafe-inline' http://localhost:* mfstatic.com https://su.matomo.cloud https://static-chat.kundo.se https://chat.kundo.se; frame-ancestors 'none'; frame-src 'self' youtube.com www.youtube.com www.youtube-nocookie.com api.kaltura.nordu.net https://api.kltr.nordu.net www.google.com maps.google.com https://form.jotform.com https://eu-submit.jotform.com https://embed.acast.com https://w.soundcloud.com https://org-866.chat.kundo.se *.mediaflow.com mfstatic.com *.mediaflowpro.com https://qcnl.tv https://*.qcnl.tv https://stockholmuniversity.app.box.com https://*.google.com; form-action 'self' https://www.antagning.se/se/search/public https://www.universityadmissions.se/intl/search/public https://research.ebsco.com https://logon.ebsco.zone https://su.powerinit.com https://su.ungapped.io; connect-src 'self' api.dsv.su.se mfstatic.com https://a.eu.silktide.com *.mediaflow.com *.mediaflowcdn.com cdn0-70012-liveedge0.dna.ip-only.net cdn0-70012-liveedge0.dna.contentdelivery.net https://su.matomo.cloud arkiv.kursvardering.su.se survey.kursadmin-ci.su.se survey.kursadmin-test.su.se https://sub.su.se/api/EdsApi/ https://global.ac.ebsco-content.com/autocomplete/rest/ http://ent/web-sourcemaps/api.js-4950e94a9243.map https://www.ctnotes.com https://static-chat.kundo.se https://chat.kundo.se wss://ws-eu.pusher.com https://sockjs-eu.pusher.com https://sentry.kundo.se https://static.kundo.se; media-src 'self' *.mediaflow.com *.mediaflowpro.com mfstatic.com *.mediaflowcdn.com *.inviewer.se blob: cdn0-70012-liveedge0.dna.ip-only.net cdn0-70012-liveedge0.dna.contentdelivery.net https://static-chat.kundo.se; img-src 'self' *.mediaflow.com mfstatic.com *.mediaflowpro.com *.inviewer.se https://cdn.matomo.cloud https://www.su.se https://kundo.app https://kundo-web-uploaded-files-prod.s3.amazonaws.com data:; font-src 'self' mfstatic.com http://localhost:*; worker-src 'self' blob:;
Referrer-Policy strict-origin-when-cross-origin
Strict-Transport-Security max-age=31536000
X-Frame-Options SAMEORIGIN
X-XSS-Protection 1; mode=block
X-Content-Type-Options nosniff
P3P CP="This is not a P3P policy!"
Cache-Control no-cache, no-store, must-revalidate
Pragma no-cache
Expires Thu, 01 Jan 1970 00:00:00 GMT
Link ; rel=preload; as=style
Vary accept-encoding
Content-Encoding gzip
Content-Type text/html;charset=UTF-8
Transfer-Encoding chunked
Date Tue, 21 Jul 2026 13:25:47 GMT
