Información Técnica
| Código de estado HTTP | 200 |
| Versión HTTP | HTTP/1.1 |
| HTTPS | ✔ Disponible |
| Dirección IP | 185.85.1.81 |
| Software del servidor | myracloud |
| CDN | CDN |
| Compresión | gzip |
|
🔒 🟡 Mixed Content (1 recursos HTTP) | La página se sirve por HTTPS pero carga 1 recurso(s) por HTTP. Esto puede bloquearse en navegadores modernos. |
|
ℹ 🔵 Falta X-Frame-Options | El sitio puede ser incrustado en iframes por terceros (riesgo de clickjacking). |
Código de estado HTTP 200
Versión HTTP HTTP/1.1
HTTPS ✔ Disponible
Dirección IP 185.85.1.81
Software del servidor myracloud
CDN CDN
Compresión gzip
🔒 🟡 Mixed Content (1 recursos HTTP) La página se sirve por HTTPS pero carga 1 recurso(s) por HTTP. Esto puede bloquearse en navegadores modernos.
ℹ 🔵 Falta X-Frame-Options El sitio puede ser incrustado en iframes por terceros (riesgo de clickjacking).
Cadena de Redirecciones
| # | URL | Código de estado HTTP | Estado |
| 1 | https://sparkasse.de:443 | 301 | HTTP/2 301 |
| 2 | https://www.sparkasse.de/ | 200 | HTTP/2 200 |
#1 URL https://sparkasse.de:443
Código de estado HTTP 301
Estado HTTP/2 301
#2 URL https://www.sparkasse.de/
Código de estado HTTP 200
Estado HTTP/2 200
Rendimiento
| Resolución DNS | 39.2 ms |
| Conexión TCP | 48.7 ms |
| Negociación TLS | 22 ms |
| Tiempo hasta el primer byte (TTFB) | 91.6 ms |
| Descarga de contenido | 29.5 ms |
| Tiempo total de respuesta | 121.1 ms |
Resolución DNS 39.2 ms
Conexión TCP 48.7 ms
Negociación TLS 22 ms
Tiempo hasta el primer byte (TTFB) 91.6 ms
Descarga de contenido 29.5 ms
Tiempo total de respuesta 121.1 ms
Seguridad
| HTTPS | ✔ Activado |
| HSTS | ✔ max-age=31536000; includeSubDomains; preload |
| CSP | ✔ Configurado |
| X-Frame-Options | ⚠ No configurado |
| X-Content-Type-Options | ✔ nosniff |
| Política de Referrer | origin |
| Política de Permisos | ✔ Configurado |
| HTTP/2 | ⚠ HTTP/1.1 |
HTTPS ✔ Activado
HSTS ✔ max-age=31536000; includeSubDomains; preload
CSP ✔ Configurado
X-Frame-Options ⚠ No configurado
X-Content-Type-Options ✔ nosniff
Política de Referrer origin
Política de Permisos ✔ Configurado
HTTP/2 ⚠ HTTP/1.1
Comprobación SEO
| Meta descripción | Zentrales Informationsportal der Sparkassen-Finanzgruppe: Produkte und Services Ihrer Sparkasse und eine Suchfunktion zur Sparkasse in Ihrer Nähe. |
| Canonical | https://www.sparkasse.de/ |
| Robots Meta | index, follow |
| Título Open Graph | Sparkasse.de |
| Descripción Open Graph | Sparkasse.de ist das zentrale Informationsportal der Sparkassen-Finanzgruppe: hier findest Du Produkte und Services Deiner Sparkasse und eine Suchfunktion zur Sparkasse in Ihrer Nähe. |
| Imagen Open Graph | https://www.sparkasse.de/api/download/60901/GSK_SPAN_1200... |
Meta descripción Zentrales Informationsportal der Sparkassen-Finanzgruppe: Produkte und Services Ihrer Sparkasse und eine Suchfunktion zur Sparkasse in Ihrer Nähe. Canonical https://www.sparkasse.de/ Robots Meta index, follow Título Open Graph Sparkasse.de Descripción Open Graph Sparkasse.de ist das zentrale Informationsportal der Sparkassen-Finanzgruppe: hier findest Du Produkte und Services Deiner Sparkasse und eine Suchfunktion zur Sparkasse in Ihrer Nähe. Imagen Open Graph https://www.sparkasse.de/api/download/60901/GSK_SPAN_1200... Tecnologías Detectadas
| Tecnología | React Google Analytics Google Tag Manager PHP Node.js Next.js Hotjar |
Tecnología React Google Analytics Google Tag Manager PHP Node.js Next.js Hotjar
Cabeceras HTTP
| Server
| myracloud |
| Date
| Thu, 23 Jul 2026 08:08:59 GMT |
| Content-type
| text/html; charset=utf-8 |
| Cache-control
| max-age=21600 |
| X-cache-group
| content |
| Permissions-policy
| fullscreen=(self "https://www.youtube.com" "https://youtu.be"), geolocation=(self), camera=(), microphone=() |
| X-content-type-options
| nosniff |
| Referrer-policy
| origin |
| Last-modified
| Mon, 20 Jul 2026 09:27:54 GMT |
| Etag
| "g3dlgzsn8bdewx" |
| Vary
| accept-encoding |
| Content-encoding
| gzip |
| Content-security-policy
| default-src 'self' amazon-adsystem.com *.amazon-adsystem.com paa-reporting-advertising.amazon *.paa-reporting-advertising.amazon; script-src 'unsafe-inline' 'unsafe-eval' 'self' www.googletagmanager.com www.yellowmap.de cdn.yellowmap.de cdn.trustcommander.net www.youtube.com www.google-analytics.com *.doubleclick.net connect.facebook.net assets.adobedtm.com adobedc.demdex.net edge.adobedc.net *.adform.net static.hotjar.com script.hotjar.com *.amazon-adsystem.com t23.intelliad.de *.outbrain.com *.helixjobs.com bt.fraud0.com *.fraud0.com; style-src 'self' 'unsafe-inline' cdn.yellowmap.de static.hotjar.com script.hotjar.com *.helixjobs.com; connect-src 'self' *.sparkasse.de autocomplete.smartmaps.cloud events.flagship.io *.yellowmap.de *.trustcommander.net *.commander1.com *.google-analytics.com *.analytics.google.com *.doubleclick.net *.sparkassen-finanzportal.de eu-api.friendlycaptcha.eu www.facebook.com assets.adobedtm.com adobedc.demdex.net edge.adobedc.net *.hotjar.com *.hotjar.io wss://*.hotjar.com www.google.com/ccm/collect *.paa-reporting-advertising.amazon *.amazon-adsystem.com *.sentry.io api.sparkassen-mediacenter.de cdn.sparkassen-mediacenter.de sparkassen-mediacenter.de *.outbrain.com *.fraud0.com; img-src data: 'self' 'unsafe-inline' i.ytimg.com map.iib-institut.de *.yellowmaps.eu tiles.smartmaps.cloud www.yellowmap.de *.sparkasse.de *.trustcommander.net *.commander1.com img.youtube.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com www.google.com www.google.de api.sparkassen-mediacenter.de kvp-skmc.dbc-gmbh.com *.doubleclick.net images.podigee-cdn.net feeds.sparkassen-finanzportal.de events.flagship.io www.facebook.com widgets.kununu.com assets.kununu.com alias.maptoolkit.net cdn.sparkassen-mediacenter.de static.hotjar.com script.hotjar.com survey-images.hotjar.com api.immobilie1.de cdn.immobilie1.de *.outbrain.com *.fraud0.com portal.fio.de cdnihddipa.cloudimg.io; media-src 'self' blob: api.sparkassen-mediacenter.de cdn.sparkassen-mediacenter.de sparkassen-mediacenter.de kvp-skmc.dbc-gmbh.com youtu.be www.youtube.com youtube.com; frame-src data: 'self' cdn.trustcommander.net widget.civey.com sparkasse.linda-chatbot.de www.youtube.com player.podigee-cdn.net td.doubleclick.net www.googletagmanager.com s-tag.sparkasse.de *.amazon-adsystem.com *.helixjobs.com; font-src data: 'self' webfonts.sparkasse.de cdn.yellowmap.de *.hotjar.com; object-src 'self'; manifest-src 'self'; worker-src 'self' blob:; frame-ancestors 'self' *.content-manager.sparkasse.de; |
| Strict-transport-security
| max-age=31536000; includeSubDomains; preload |
| Expires
| Thu, 23 Jul 2026 13:35:32 GMT |
| X-cdn
| 1 |
Meta Tags
| Viewport | width=device-width |
| X:site_search_overline | Die neue Serie der Sparkasse |
| X:site_search_description | Sparkasse.de ist das zentrale Informationsportal der Sparkassen-Finanzgruppe: hier findest Du Produkte und Services Deiner Sparkasse und eine Suchfunktion zur Sparkasse in Ihrer Nähe. |
| X:site_search_image |  |
| Description | Zentrales Informationsportal der Sparkassen-Finanzgruppe: Produkte und Services Ihrer Sparkasse und eine Suchfunktion zur Sparkasse in Ihrer Nähe. |
| Robots | index, follow |
| Theme-color | #ee0000 |
| Msapplication-TileColor | #da532c |
Server myracloud
Date Thu, 23 Jul 2026 08:08:59 GMT
Content-type text/html; charset=utf-8
Cache-control max-age=21600
X-cache-group content
Permissions-policy fullscreen=(self "https://www.youtube.com" "https://youtu.be"), geolocation=(self), camera=(), microphone=()
X-content-type-options nosniff
Referrer-policy origin
Last-modified Mon, 20 Jul 2026 09:27:54 GMT
Etag "g3dlgzsn8bdewx"
Vary accept-encoding
Content-encoding gzip
Content-security-policy default-src 'self' amazon-adsystem.com *.amazon-adsystem.com paa-reporting-advertising.amazon *.paa-reporting-advertising.amazon; script-src 'unsafe-inline' 'unsafe-eval' 'self' www.googletagmanager.com www.yellowmap.de cdn.yellowmap.de cdn.trustcommander.net www.youtube.com www.google-analytics.com *.doubleclick.net connect.facebook.net assets.adobedtm.com adobedc.demdex.net edge.adobedc.net *.adform.net static.hotjar.com script.hotjar.com *.amazon-adsystem.com t23.intelliad.de *.outbrain.com *.helixjobs.com bt.fraud0.com *.fraud0.com; style-src 'self' 'unsafe-inline' cdn.yellowmap.de static.hotjar.com script.hotjar.com *.helixjobs.com; connect-src 'self' *.sparkasse.de autocomplete.smartmaps.cloud events.flagship.io *.yellowmap.de *.trustcommander.net *.commander1.com *.google-analytics.com *.analytics.google.com *.doubleclick.net *.sparkassen-finanzportal.de eu-api.friendlycaptcha.eu www.facebook.com assets.adobedtm.com adobedc.demdex.net edge.adobedc.net *.hotjar.com *.hotjar.io wss://*.hotjar.com www.google.com/ccm/collect *.paa-reporting-advertising.amazon *.amazon-adsystem.com *.sentry.io api.sparkassen-mediacenter.de cdn.sparkassen-mediacenter.de sparkassen-mediacenter.de *.outbrain.com *.fraud0.com; img-src data: 'self' 'unsafe-inline' i.ytimg.com map.iib-institut.de *.yellowmaps.eu tiles.smartmaps.cloud www.yellowmap.de *.sparkasse.de *.trustcommander.net *.commander1.com img.youtube.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com www.google.com www.google.de api.sparkassen-mediacenter.de kvp-skmc.dbc-gmbh.com *.doubleclick.net images.podigee-cdn.net feeds.sparkassen-finanzportal.de events.flagship.io www.facebook.com widgets.kununu.com assets.kununu.com alias.maptoolkit.net cdn.sparkassen-mediacenter.de static.hotjar.com script.hotjar.com survey-images.hotjar.com api.immobilie1.de cdn.immobilie1.de *.outbrain.com *.fraud0.com portal.fio.de cdnihddipa.cloudimg.io; media-src 'self' blob: api.sparkassen-mediacenter.de cdn.sparkassen-mediacenter.de sparkassen-mediacenter.de kvp-skmc.dbc-gmbh.com youtu.be www.youtube.com youtube.com; frame-src data: 'self' cdn.trustcommander.net widget.civey.com sparkasse.linda-chatbot.de www.youtube.com player.podigee-cdn.net td.doubleclick.net www.googletagmanager.com s-tag.sparkasse.de *.amazon-adsystem.com *.helixjobs.com; font-src data: 'self' webfonts.sparkasse.de cdn.yellowmap.de *.hotjar.com; object-src 'self'; manifest-src 'self'; worker-src 'self' blob:; frame-ancestors 'self' *.content-manager.sparkasse.de;
Strict-transport-security max-age=31536000; includeSubDomains; preload
Expires Thu, 23 Jul 2026 13:35:32 GMT
X-cdn 1
