Technical Information
| HTTP Status Code | 200 |
| HTTP Version | HTTP/1.1 |
| HTTPS | ✔ Available |
| IP Address | 185.175.196.120 |
| Server Software | nginx |
| Compression | gzip |
|
ℹ 🔵 Missing Content Security Policy | CSP is not configured. It helps prevent XSS attacks and content injection. |
|
ℹ 🔵 Missing X-Frame-Options | The site can be embedded in iframes by third parties (clickjacking risk). |
HTTP Status Code 200
HTTP Version HTTP/1.1
HTTPS ✔ Available
IP Address 185.175.196.120
Server Software nginx
Compression gzip
ℹ 🔵 Missing Content Security Policy CSP is not configured. It helps prevent XSS attacks and content injection.
ℹ 🔵 Missing X-Frame-Options The site can be embedded in iframes by third parties (clickjacking risk).
Redirect Chain
| # | URL | HTTP Status Code | Status |
| 1 | https://bmwopen.de:443 | 301 | HTTP/2 301 |
| 2 | https://www.bmwopen.de/ | 200 | HTTP/2 200 |
#1 URL https://bmwopen.de:443
HTTP Status Code 301
Status HTTP/2 301
#2 URL https://www.bmwopen.de/
HTTP Status Code 200
Status HTTP/2 200
Performance
| DNS Lookup | 13.7 ms |
| TCP Connect | 37.4 ms |
| TLS Handshake | 32.2 ms |
| Time To First Byte (TTFB) | 118.9 ms |
| Content Download | 23.7 ms |
| Total Response Time | 142.6 ms |
DNS Lookup 13.7 ms
TCP Connect 37.4 ms
TLS Handshake 32.2 ms
Time To First Byte (TTFB) 118.9 ms
Content Download 23.7 ms
Total Response Time 142.6 ms
Security
| HTTPS | ✔ Enabled |
| HSTS | ✔ max-age=63072000; includeSubDomains; preload |
| CSP | ⚠ Not configured |
| X-Frame-Options | ⚠ Not configured |
| X-Content-Type-Options | ✔ nosniff |
| HTTP/2 | ⚠ HTTP/1.1 |
HTTPS ✔ Enabled
HSTS ✔ max-age=63072000; includeSubDomains; preload
CSP ⚠ Not configured
X-Frame-Options ⚠ Not configured
X-Content-Type-Options ✔ nosniff
HTTP/2 ⚠ HTTP/1.1
SEO Quick Check
| Title | BMW Open – München | ATP 500 |
| Canonical | https://www.bmwopen.de/ |
| Robots Meta | max-image-preview:large |
Title BMW Open – München | ATP 500
Canonical https://www.bmwopen.de/
Robots Meta max-image-preview:large
Detected Technologies
| Technology | WordPress WooCommerce Google Analytics Google Tag Manager Nginx PHP |
Technology WordPress WooCommerce Google Analytics Google Tag Manager Nginx PHP
HTTP Headers
| Server
| nginx |
| Date
| Thu, 20 Aug 2026 10:59:31 GMT |
| Content-type
| text/html; charset=UTF-8 |
| Vary
| Clonable-Clone-Domain,Clonable-Clone-Subfolder |
| Cache-control
| must-revalidate |
| Last-modified
| Fri, 24 Jul 2026 18:28:20 GMT |
| Age
| 2305868 |
| Strict-transport-security
| max-age=63072000; includeSubDomains; preload |
| X-varnish-cache
| HIT |
| X-cacheable
| YES |
| X-content-type-options
| nosniff |
| X-xss-protection
| 1; mode=block |
| Content-encoding
| gzip |
Meta Tags
| Viewport | width=device-width, initial-scale=1 |
| Robots | max-image-preview:large |
| Clonable-verification | 3d3b34456a51b7582bc6be8142cafdeebe8359d1 |
| Generator | Elementor 4.0.1; features: e_font_icon_svg, additional_custom_breakpoints; settings: css_print_method-external, google_font-disabled, font_display-swap |
| Google-site-verification | maqyoKJ0L-9JtLmUHjnBzR9VgpnMAyKGRAK2Wi146Bk |
| Google-adsense-platform-account | ca-host-pub-2644536267352236 |
| Google-adsense-platform-domain | sitekit.withgoogle.com |
| Msapplication-TileImage |  |
Server nginx
Date Thu, 20 Aug 2026 10:59:31 GMT
Content-type text/html; charset=UTF-8
Vary Clonable-Clone-Domain,Clonable-Clone-Subfolder
Cache-control must-revalidate
Last-modified Fri, 24 Jul 2026 18:28:20 GMT
Age 2305868
Strict-transport-security max-age=63072000; includeSubDomains; preload
X-varnish-cache HIT
X-cacheable YES
X-content-type-options nosniff
X-xss-protection 1; mode=block
Content-encoding gzip
