Technical Information
| HTTP Status Code | 200 |
| HTTP Version | HTTP/1.1 |
| HTTPS | ✔ Available |
| IP Address | 137.208.2.41 |
| Server Software | nginx |
| CDN | CDN (HIT) |
| Compression | gzip |
|
🔒 🟡 Mixed Content (1 HTTP resources) | The page is served over HTTPS but loads 1 resource(s) over HTTP. This may be blocked in modern browsers. |
|
ℹ 🔵 Missing X-Frame-Options | The site can be embedded in iframes by third parties (clickjacking risk). |
HTTP Status Code 200
HTTP Version HTTP/1.1
HTTPS ✔ Available
IP Address 137.208.2.41
Server Software nginx
CDN CDN (HIT)
Compression gzip
🔒 🟡 Mixed Content (1 HTTP resources) The page is served over HTTPS but loads 1 resource(s) over HTTP. This may be blocked in modern browsers.
ℹ 🔵 Missing X-Frame-Options The site can be embedded in iframes by third parties (clickjacking risk).
Redirect Chain
| # | URL | HTTP Status Code | Status |
| 1 | https://wu.ac.at:443 | 301 | HTTP/2 301 |
| 2 | https://www.wu.ac.at/ | 200 | HTTP/2 200 |
#1 URL https://wu.ac.at:443
HTTP Status Code 301
Status HTTP/2 301
#2 URL https://www.wu.ac.at/
HTTP Status Code 200
Status HTTP/2 200
Performance
| DNS Lookup | 101.5 ms |
| TCP Connect | 126.5 ms |
| TLS Handshake | 31.5 ms |
| Time To First Byte (TTFB) | 206.9 ms |
| Content Download | 1.4 ms |
| Total Response Time | 208.3 ms |
DNS Lookup 101.5 ms
TCP Connect 126.5 ms
TLS Handshake 31.5 ms
Time To First Byte (TTFB) 206.9 ms
Content Download 1.4 ms
Total Response Time 208.3 ms
Security
| HTTPS | ✔ Enabled |
| HSTS | ✔ max-age=31536000 |
| CSP | ✔ Configured |
| X-Frame-Options | ⚠ Not configured |
| X-Content-Type-Options | ✔ nosniff |
| Referrer Policy | no-referrer-when-downgrade |
| HTTP/2 | ⚠ HTTP/1.1 |
HTTPS ✔ Enabled
HSTS ✔ max-age=31536000
CSP ✔ Configured
X-Frame-Options ⚠ Not configured
X-Content-Type-Options ✔ nosniff
Referrer Policy no-referrer-when-downgrade
HTTP/2 ⚠ HTTP/1.1
SEO Quick Check
Detected Technologies
| Technology | jQuery Google Analytics Google Tag Manager Cloudflare Nginx Hotjar |
Technology jQuery Google Analytics Google Tag Manager Cloudflare Nginx Hotjar
HTTP Headers
| Server
| nginx |
| Date
| Tue, 28 Jul 2026 16:41:50 GMT |
| Content-type
| text/html; charset=utf-8 |
| X-powered-by
| PHP/8.2.32 |
| Content-language
| de |
| Expires
| Tue, 28 Jul 2026 16:58:59 GMT |
| Etag
| W/"44d61b78078d64064bab6b53b502a716" |
| Cache-control
| max-age=1081 |
| Pragma
| public |
| Content-encoding
| gzip |
| X-cache
| HIT |
| X-content-type-options
| nosniff |
| X-xss-protection
| 1; mode=block |
| Referrer-policy
| no-referrer-when-downgrade |
| Strict-transport-security
| max-age=31536000 |
| Access-control-allow-origin
| * |
| Origin-agent-cluster
| ?0 |
| Content-security-policy
| default-src 'self'; img-src https: data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://chatbot.wu.ac.at https://static.ads-twitter.com https://*.licdn.com https://*.twitter.com https://www.googletagmanager.com https://demo.mindbreeze.com https://www.google.com/recaptcha/* https://www.googleadservices.com https://*.googlesyndication.com https://*.azurewebsites.net https://*.cloudflare.com https://s.ytimg.com https://www.youtube.com https://piwik.wu.ac.at https://ajax.googleapis.com https://maps.googleapis.com https://*.newrelic.com https://*.nr-data.net https://platform.twitter.com https://connect.facebook.net https://*.vo.msecnd.net/ https://newsletter.wu.ac.at/ https://wu.ac.at/typo3temp/hotfix/hotfix.js https://wu.ac.at/typo3temp/hotfix/extension.js https://wu.ac.at/typo3temp/hotfix/cooperationtemplate/cooperation.js https://www.wu.ac.at/typo3temp/hotfix/extension/readcsv.js https://www.wu.ac.at/typo3temp/hotfix/extension/bawiso.js https://www.wu.ac.at/typo3temp/chatbot/chatbot.js https://www.wu.ac.at/typo3temp/hotfix/atscript.js https://static.hotjar.com https://script.hotjar.com https://*.clickdimensions.com; style-src 'self' 'unsafe-inline' https://*.sms.ingress.wu.ac.at https://*.azurewebsites.net https://*.clickdimensions.com https://demo.mindbreeze.com https://*.fabasoft.com https://piwik.wu.ac.at/ https://wu.ac.at/typo3temp/hotfix/hotfix.css https://wu.ac.at/typo3temp/hotfix/cooperationtemplate/cooperation.css https://www.wu.ac.at/typo3temp/hotfix/extension/readcsv.css https://www.wu.ac.at/typo3temp/hotfix/extension/bawiso.css https://www.wu.ac.at/typo3temp/chatbot/chatbot.css https://www.googleadservices.com https://fonts.googleapis.com https://*.vo.msecnd.net/; frame-src https:; frame-ancestors 'self' https://wuvienna.atlassian.net https://jsm-survey.its.ingress.wu.ac.at https://servicekatalog-fe.wu.ac.at https://piwik.wu.ac.at/ https://www.thinglink.com/; font-src 'self' https://fonts.gstatic.com; connect-src 'self' wss://api.azure-cloud.aios.dev https://*.sms.ingress.wu.ac.at https://chatbot.wu.ac.at https://googleads.g.doubleclick.net https://www.google-analytics.com https://*.google-analytics.com https://www.googleadservices.com https://www.google.com https://maps.googleapis.com https://region1.analytics.google.com/* https://region1.analytics.google.com/g/collect https://*.azurewebsites.net https://*.googlesyndication.com https://vimeo.com https://bach.wu.ac.at https://apps.wu.ac.at https://cdn.linkedin.oribi.io https://facebook.com/tr/ https://puredata.wu.ac.at https://servicekatalog-fe.wu.ac.at https://jsm-survey.its.ingress.wu.ac.at wss://ws.hotjar.com https://content.hotjar.io https://metrics.hotjar.io https://my.zbp.at/de/jobs; form-action 'self' https:; media-src 'self'; object-src 'self'; manifest-src 'self' |
| Front-end-https
| on |
Meta Tags
| X-UA-Compatible | IE=edge |
| Generator | TYPO3 CMS |
| Last-modified | 2026-07-28T10:38:19+02:00 |
| Viewport | width=device-width, initial-scale=1 |
| Msapplication-TileColor | #da532c |
| Msapplication-TileImage |  |
| Theme-color | #ffffff |
| Apple-mobile-web-app-title | WU Wien |
| Application-name | WU Wien |
Server nginx
Date Tue, 28 Jul 2026 16:41:50 GMT
Content-type text/html; charset=utf-8
X-powered-by PHP/8.2.32
Content-language de
Expires Tue, 28 Jul 2026 16:58:59 GMT
Etag W/"44d61b78078d64064bab6b53b502a716"
Cache-control max-age=1081
Pragma public
Content-encoding gzip
X-cache HIT
X-content-type-options nosniff
X-xss-protection 1; mode=block
Referrer-policy no-referrer-when-downgrade
Strict-transport-security max-age=31536000
Access-control-allow-origin *
Origin-agent-cluster ?0
Content-security-policy default-src 'self'; img-src https: data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://chatbot.wu.ac.at https://static.ads-twitter.com https://*.licdn.com https://*.twitter.com https://www.googletagmanager.com https://demo.mindbreeze.com https://www.google.com/recaptcha/* https://www.googleadservices.com https://*.googlesyndication.com https://*.azurewebsites.net https://*.cloudflare.com https://s.ytimg.com https://www.youtube.com https://piwik.wu.ac.at https://ajax.googleapis.com https://maps.googleapis.com https://*.newrelic.com https://*.nr-data.net https://platform.twitter.com https://connect.facebook.net https://*.vo.msecnd.net/ https://newsletter.wu.ac.at/ https://wu.ac.at/typo3temp/hotfix/hotfix.js https://wu.ac.at/typo3temp/hotfix/extension.js https://wu.ac.at/typo3temp/hotfix/cooperationtemplate/cooperation.js https://www.wu.ac.at/typo3temp/hotfix/extension/readcsv.js https://www.wu.ac.at/typo3temp/hotfix/extension/bawiso.js https://www.wu.ac.at/typo3temp/chatbot/chatbot.js https://www.wu.ac.at/typo3temp/hotfix/atscript.js https://static.hotjar.com https://script.hotjar.com https://*.clickdimensions.com; style-src 'self' 'unsafe-inline' https://*.sms.ingress.wu.ac.at https://*.azurewebsites.net https://*.clickdimensions.com https://demo.mindbreeze.com https://*.fabasoft.com https://piwik.wu.ac.at/ https://wu.ac.at/typo3temp/hotfix/hotfix.css https://wu.ac.at/typo3temp/hotfix/cooperationtemplate/cooperation.css https://www.wu.ac.at/typo3temp/hotfix/extension/readcsv.css https://www.wu.ac.at/typo3temp/hotfix/extension/bawiso.css https://www.wu.ac.at/typo3temp/chatbot/chatbot.css https://www.googleadservices.com https://fonts.googleapis.com https://*.vo.msecnd.net/; frame-src https:; frame-ancestors 'self' https://wuvienna.atlassian.net https://jsm-survey.its.ingress.wu.ac.at https://servicekatalog-fe.wu.ac.at https://piwik.wu.ac.at/ https://www.thinglink.com/; font-src 'self' https://fonts.gstatic.com; connect-src 'self' wss://api.azure-cloud.aios.dev https://*.sms.ingress.wu.ac.at https://chatbot.wu.ac.at https://googleads.g.doubleclick.net https://www.google-analytics.com https://*.google-analytics.com https://www.googleadservices.com https://www.google.com https://maps.googleapis.com https://region1.analytics.google.com/* https://region1.analytics.google.com/g/collect https://*.azurewebsites.net https://*.googlesyndication.com https://vimeo.com https://bach.wu.ac.at https://apps.wu.ac.at https://cdn.linkedin.oribi.io https://facebook.com/tr/ https://puredata.wu.ac.at https://servicekatalog-fe.wu.ac.at https://jsm-survey.its.ingress.wu.ac.at wss://ws.hotjar.com https://content.hotjar.io https://metrics.hotjar.io https://my.zbp.at/de/jobs; form-action 'self' https:; media-src 'self'; object-src 'self'; manifest-src 'self'
Front-end-https on
