Información Técnica
| Código de estado HTTP | 200 |
| Versión HTTP | HTTP/1.1 |
| HTTPS | ✔ Disponible |
| Dirección IP | 80.245.152.182 |
| Software del servidor | Apache |
|
ℹ 🔵 Sin compresión | El servidor no usa Gzip ni Brotli. Habilita compresión para reducir el ancho de banda. |
Código de estado HTTP 200
Versión HTTP HTTP/1.1
HTTPS ✔ Disponible
Dirección IP 80.245.152.182
Software del servidor Apache
ℹ 🔵 Sin compresión El servidor no usa Gzip ni Brotli. Habilita compresión para reducir el ancho de banda.
Cadena de Redirecciones
| # | URL | Código de estado HTTP | Estado |
| 1 | https://bamf.de:443 | 301 | HTTP/1.1 301 Moved Permanently |
| 2 | https://www.BAMF.de/ | 302 | HTTP/1.1 302 Found |
| 3 | https://www.BAMF.de/DE/Startseite/startseite_node.html | 200 | HTTP/1.1 200 OK |
#1 URL https://bamf.de:443
Código de estado HTTP 301
Estado HTTP/1.1 301 Moved Permanently
#2 URL https://www.BAMF.de/
Código de estado HTTP 302
Estado HTTP/1.1 302 Found
#3 URL https://www.BAMF.de/DE/Startseite/startseite_node.html
Código de estado HTTP 200
Estado HTTP/1.1 200 OK
Rendimiento
| Resolución DNS | 2.3 ms |
| Conexión TCP | 11.3 ms |
| Negociación TLS | 17.9 ms |
| Tiempo hasta el primer byte (TTFB) | 43.7 ms |
| Descarga de contenido | 20 ms |
| Tiempo total de respuesta | 63.7 ms |
Resolución DNS 2.3 ms
Conexión TCP 11.3 ms
Negociación TLS 17.9 ms
Tiempo hasta el primer byte (TTFB) 43.7 ms
Descarga de contenido 20 ms
Tiempo total de respuesta 63.7 ms
Seguridad
| HTTPS | ✔ Activado |
| HSTS | ✔ max-age=31536000 |
| CSP | ✔ Configurado |
| X-Frame-Options | ✔ sameorigin |
| X-Content-Type-Options | ✔ nosniff |
| Política de Referrer | strict-origin-when-cross-origin |
| HTTP/2 | ⚠ HTTP/1.1 |
HTTPS ✔ Activado
HSTS ✔ max-age=31536000
CSP ✔ Configurado
X-Frame-Options ✔ sameorigin
X-Content-Type-Options ✔ nosniff
Política de Referrer strict-origin-when-cross-origin
HTTP/2 ⚠ HTTP/1.1
Comprobación SEO
Tecnologías Detectadas
| Tecnología | Google Analytics Apache |
Tecnología Google Analytics Apache
Cabeceras HTTP
| Date
| Sun, 23 Aug 2026 22:39:42 GMT |
| Server
| Apache |
| Vary
| Accept-Encoding |
| Referrer-Policy
| strict-origin-when-cross-origin |
| X-Frame-Options
| sameorigin |
| X-UA-Compatible
| IE=edge |
| X-Content-Type-Options
| nosniff |
| Content-Security-Policy
| default-src 'self' 'unsafe-eval'; base-uri 'self'; font-src 'self' data: ;style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.itzbund.de *.googleapis.com *.google.com *.gstatic.com www.youtube.com *.vimeo.com *.ytimg.com piwik.itzbund.de; object-src 'self' *.gsb.bund.de; media-src blob: 'self' *.gsb.bund.de *.vimeo.com *.youtube.com; frame-src *.google.com *.gstatic.com *.youtube.com *.vimeo.com; img-src 'self' blob: data: *.google.com *.gstatic.com *.youtube.com *.ytimg.com *.openstreetmap.org piwik.itzbund.de; connect-src 'self' *.itzbund.de; frame-ancestors 'self' *.intranet.bund.de; worker-src 'self'; |
| X-Permitted-Cross-Domain-Policies
| none |
| X-XSS-Protection
| 1;mode=block |
| Cache-Control
| max-age=60 |
| Content-Language
| de-DE |
| Strict-Transport-Security
| max-age=31536000 |
| X-Content-Security-Policy
| default-src 'self' 'unsafe-inline'; allow 'self'; img-src * |
| X-WebKit-CSP
| default-src 'self' 'unsafe-inline'; allow 'self'; img-src * |
| Transfer-Encoding
| chunked |
| Content-Type
| text/html;charset=utf-8 |
Meta Tags
| Title | Startseite |
| Viewport | width=device-width, initial-scale=1.0, maximum-scale=1.5, user-scalable=1 |
| Generator | Government Site Builder |
| Google-site-verification | Y9rTM5gqYnerTdBEr1BUuexYB2Y62zBEcXPJMUD7cZI |
| Facebook-domain-verification | echewtsqpvpa5s9xkwjq9wb8xoiw1v |
| Msapplication-TileImage |  |
| Msapplication-square70x70logo |  |
| Msapplication-square150x150logo |  |
| Msapplication-square310x310logo |  |
| Apple-mobile-web-app-title | BAMFWEB |
| Msapplication-TileColor | #ffffff |
| Msapplication-config | none |
| Application-name | BAMFWEB |
| Theme-color | #ffffff |
| Keywords | Die Keywords |
| Description | Homepage des deutschsprachigen Auftritts |
Date Sun, 23 Aug 2026 22:39:42 GMT
Server Apache
Vary Accept-Encoding
Referrer-Policy strict-origin-when-cross-origin
X-Frame-Options sameorigin
X-UA-Compatible IE=edge
X-Content-Type-Options nosniff
Content-Security-Policy default-src 'self' 'unsafe-eval'; base-uri 'self'; font-src 'self' data: ;style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.itzbund.de *.googleapis.com *.google.com *.gstatic.com www.youtube.com *.vimeo.com *.ytimg.com piwik.itzbund.de; object-src 'self' *.gsb.bund.de; media-src blob: 'self' *.gsb.bund.de *.vimeo.com *.youtube.com; frame-src *.google.com *.gstatic.com *.youtube.com *.vimeo.com; img-src 'self' blob: data: *.google.com *.gstatic.com *.youtube.com *.ytimg.com *.openstreetmap.org piwik.itzbund.de; connect-src 'self' *.itzbund.de; frame-ancestors 'self' *.intranet.bund.de; worker-src 'self';
X-Permitted-Cross-Domain-Policies none
X-XSS-Protection 1;mode=block
Cache-Control max-age=60
Content-Language de-DE
Strict-Transport-Security max-age=31536000
X-Content-Security-Policy default-src 'self' 'unsafe-inline'; allow 'self'; img-src *
X-WebKit-CSP default-src 'self' 'unsafe-inline'; allow 'self'; img-src *
Transfer-Encoding chunked
Content-Type text/html;charset=utf-8
