Strict-Transport-Security: max-age=63072000; includeSubdomains Cache-Control: max-age=604800 X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none Date: Fri, 20 Oct 2017 02:58:43 GMT X-XSS-Protection: 1;mode=block Expires: Fri, 27 Oct 2017 02:58:43 GMT Content-Type: text/html; charset=utf-8 Server: nginx HTTP/1.1 200 OK Content-Security-Policy: default-src https: data: 'unsafe-inline' 'unsafe-eval' Content-Language: de X-Frame-Options: SAMEORIGIN Cache-Control: public, max-age=1d Content-Length: 6513 Connection: keep-alive