Technical Information
| HTTP Status Code | 200 |
| HTTP Version | HTTP/1.1 |
| HTTPS | ✔ Available |
| IP Address | 46.4.65.203 |
| Server Software | nginx/1.30.0 |
| Compression | gzip |
|
🔒 🟡 Mixed Content (2 HTTP resources) | The page is served over HTTPS but loads 2 resource(s) over HTTP. This may be blocked in modern browsers. |
|
ℹ 🔵 Missing Content Security Policy | CSP is not configured. It helps prevent XSS attacks and content injection. |
|
ℹ 🔵 Missing X-Frame-Options | The site can be embedded in iframes by third parties (clickjacking risk). |
HTTP Status Code 200
HTTP Version HTTP/1.1
HTTPS ✔ Available
IP Address 46.4.65.203
Server Software nginx/1.30.0
Compression gzip
🔒 🟡 Mixed Content (2 HTTP resources) The page is served over HTTPS but loads 2 resource(s) over HTTP. This may be blocked in modern browsers.
ℹ 🔵 Missing Content Security Policy CSP is not configured. It helps prevent XSS attacks and content injection.
ℹ 🔵 Missing X-Frame-Options The site can be embedded in iframes by third parties (clickjacking risk).
Redirect Chain
| # | URL | HTTP Status Code | Status |
| 1 | https://zum.de:443 | 301 | HTTP/1.1 301 Moved Permanently |
| 2 | https://www.zum.de/ | 302 | HTTP/1.1 302 Found |
| 3 | https://www.zum.de/portal | 200 | HTTP/1.1 200 OK |
#1 URL https://zum.de:443
HTTP Status Code 301
Status HTTP/1.1 301 Moved Permanently
#2 URL https://www.zum.de/
HTTP Status Code 302
Status HTTP/1.1 302 Found
#3 URL https://www.zum.de/portal
HTTP Status Code 200
Status HTTP/1.1 200 OK
Performance
| DNS Lookup | 1.6 ms |
| TCP Connect | 14.8 ms |
| TLS Handshake | 32.3 ms |
| Time To First Byte (TTFB) | 240.9 ms |
| Content Download | 13.8 ms |
| Total Response Time | 254.7 ms |
DNS Lookup 1.6 ms
TCP Connect 14.8 ms
TLS Handshake 32.3 ms
Time To First Byte (TTFB) 240.9 ms
Content Download 13.8 ms
Total Response Time 254.7 ms
Security
| HTTPS | ✔ Enabled |
| HSTS | ✔ max-age=15768000; includeSubDomains; preload |
| CSP | ⚠ Not configured |
| X-Frame-Options | ⚠ Not configured |
| X-Content-Type-Options | ⚠ Not configured |
| Permissions Policy | ✔ Configured |
| HTTP/2 | ⚠ HTTP/1.1 |
HTTPS ✔ Enabled
HSTS ✔ max-age=15768000; includeSubDomains; preload
CSP ⚠ Not configured
X-Frame-Options ⚠ Not configured
X-Content-Type-Options ⚠ Not configured
Permissions Policy ✔ Configured
HTTP/2 ⚠ HTTP/1.1
SEO Quick Check
| Title | Zentrale für Unterrichtsmedien im Internet e.V. |
| Canonical | https://www.zum.de/portal/ |
| Robots Meta | max-image-preview:large |
Title Zentrale für Unterrichtsmedien im Internet e.V.
Canonical https://www.zum.de/portal/
Robots Meta max-image-preview:large
Detected Technologies
| Technology | WordPress jQuery Google Analytics Cloudflare Nginx PHP Matomo |
Technology WordPress jQuery Google Analytics Cloudflare Nginx PHP Matomo
HTTP Headers
| Date
| Tue, 21 Jul 2026 12:56:53 GMT |
| Server
| nginx/1.30.0 |
| Content-Type
| text/html; charset=UTF-8 |
| Permissions-Policy
| private-state-token-redemption=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com"), private-state-token-issuance=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com") |
| Link
| ; rel=shortlink |
| Strict-Transport-Security
| max-age=15768000; includeSubDomains; preload |
| Vary
| Accept-Encoding |
| Content-Encoding
| gzip |
| Transfer-Encoding
| chunked |
| Content-Language
| de |
Meta Tags
| Viewport | width=device-width, initial-scale=1 |
| Robots | max-image-preview:large |
| Generator | WordPress 7.0.2 |
| Msapplication-TileImage |  |
Date Tue, 21 Jul 2026 12:56:53 GMT
Server nginx/1.30.0
Content-Type text/html; charset=UTF-8
Permissions-Policy private-state-token-redemption=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com"), private-state-token-issuance=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com")
Link ; rel=shortlink
Strict-Transport-Security max-age=15768000; includeSubDomains; preload
Vary Accept-Encoding
Content-Encoding gzip
Transfer-Encoding chunked
Content-Language de
