HTTP/1.1 200 OK
Cache-Control: public
Content-Type: text/html; charset=utf-8
Last-Modified: Tue, 21 May 2019 11:00:00 GMT
Vary: Accept-Encoding,Origin
Server: Microsoft-IIS/10.0
Referrer-Policy: no-referrer, strict-origin-when-cross-origin
X-XSS-Protection: 1; mode=block
Content-Security-Policy: default-src 'none'; base-uri 'self' *.adform.net *.seadform.net; connect-src 'self' https://ajax.googleapis.com https://www.googletagmanager.com https://www.google-analytics.com https://www.googletagservices.com 'unsafe-inline' 'unsafe-eval' *; font-src 'self' data: https://nouw.com https://fonts.gstatic.com 'unsafe-inline' 'unsafe-eval' *; form-action 'self' http://nouw.com *.facebook.com *.facebook.net https://secure.pay-read.se; frame-ancestors 'self' http://frame.bloglovin.com https://blogkeen.com; frame-src 'self' *.youtube.com *.spotify.com *.facebook.com *.facebook.net 'unsafe-inline' 'unsafe-eval' *; img-src * data: blob:; manifest-src 'self'; media-src *; object-src 'none'; report-uri https://nouw.com/api/misc/csp; style-src * blob: 'unsafe-inline'; worker-src 'self'; script-src 'self' https://nouw.com https://cdnjs.cloudflare.com *.facebook.com *.facebook.net https://ajax.googleapis.com https://www.googletagmanager.com https://www.google-analytics.com https://www.googletagservices.com 'unsafe-inline' 'unsafe-eval' *
X-Content-Type-Options: nosniff
X-Powered-By: ARR/3.0
Date: Sat, 25 May 2019 03:56:12 GMT
Content-Length: 6802