HTTP/1.1 200 OK
Date: Sat, 29 Jun 2019 02:56:09 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000; preload
Referrer-Policy: origin-when-cross-origin
Content-Security-Policy:     default-src 'self' *.nrw.de;    script-src 'self' 'unsafe-inline' 'unsafe-eval' *.nrw.de *.google.com *.youtube.com *.youtu.be *.twimg.com *.twitter.com twitter.com *.jwpcdn.com *.gstatic.com *.googleapis.com *.googlesyndication.com *.openstreetmap.org *.mozilla.org *.vimeo.com *.vimeocdn.com *.flickr.com *.staticflickr.com ;    style-src 'self' 'unsafe-inline' *.nrw.de *.twitter.com twitter.com *.facebook.com *.googleapis.com *.twimg.com;    font-src *;    img-src data: *;    frame-ancestors 'self' *.nrw.de *.facebook.com *.facebook.de *.twitter.com twitter.com *.google.com *.youtube.com *.youtu.be ytchannelembed.com;    child-src 'self' *.nrw.de *.facebook.com *.facebook.de *.twitter.com twitter.com *.google.com *.youtube.com *.youtu.be ytchannelembed.com *.openstreetmap.org broschueren.nordrheinwestfalendirekt.de;    object-src 'self';    media-src *;
Vary: Accept-Encoding
Cache-Control: max-age=15
Expires: Sat, 29 Jun 2019 02:56:24 GMT
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Permitted-Cross-Domain-Policies: master-only
Content-Length: 7587
Content-Type: text/html; charset=utf-8