HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Content-Length: 462595
Connection: keep-alive
Keep-Alive: timeout=15
Date: Tue, 15 Dec 2020 17:54:44 GMT
Server: Apache
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Last-Modified: Mon, 14 Dec 2020 20:36:00 GMT
ETag: "70f03-5b66df3e4923f"
Accept-Ranges: bytes
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
Referrer-Policy: no-referrer-when-downgrade
Content-Security-Policy: default-src u-he.com *.u-he.com *.google-analytics.com; base-uri 'self'; font-src 'self' *.bootstrapcdn.com *.googleapis.com *.gstatic.com *.typekit.net *.webtype.com; frame-src 'self' *.itunes.apple.com *.twitter.com *.youtube.com *.youtube-nocookie.com; img-src 'self' data: 'unsafe-inline' *.google-analytics.com *.googletagmanager.com *.itunes.apple.com *.kvraudio.com *.twimg.com *.twitter.com *.typekit.net u-he.com *.u-he.com *.webtype.com; media-src 'self' https://*; object-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.bootstrapcdn.com *.doubleclick.net *.feedrapp.info *.google.com *.googleapis.com *.google-analytics.com *.googletagmanager.com *.jquery.com *.typekit.net *.twimg.com *.twitter.com *.yahooapis.com *.youtube.com https://sedoparking.com/frmpark/u-he.com/IONOSParkingDE/park.js; style-src 'self' 'unsafe-inline' *.bootstrapcdn.com *.googleapis.com *.typekit.net *.twitter.com *.twimg.com *.webtype.com *.youtube.com; form-action 'self' *.twitter.com; frame-ancestors *
Feature-Policy: geolocation 'none'; midi 'none'; notifications 'none'; push 'none'; sync-xhr 'none'; microphone 'none'; camera 'none'; magnetometer 'none'; gyroscope 'none'; speaker *; vibrate *; fullscreen *; payment 'none'
Cache-Control: public, max-age=180, s-maxage=3600, no-transform