X-Content-Type-Options: nosniff X-Cluster: default Server: nginx Date: Tue, 02 Jan 2018 10:11:11 GMT HTTP/1.1 200 OK Content-Length: 47481 X-Ua-Compatible: IE=edge Content-Language: de X-Frame-Options: SAMEORIGIN Vary: Accept-Encoding Accept-Ranges: bytes Content-Type: text/html;charset=utf-8 X-Varnish: 985227 X-Varnish-Age: 0 Content-Security-Policy: default-src 'self'; font-src 'self' https://use.typekit.net https://fonts.googleapis.com https://fonts.gstatic.com data:; img-src 'self' https://tkr.ade25.de https://p.typekit.net https://syndication.twitter.com https://platform.twitter.com/ https://pbs.twimg.com https://ton.twimg.com https://referrer.disqus.com https://c.disquscdn.com *.google-analytics.com data:; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn-images.mailchimp.com https://platform.twitter.com https://ton.twimg.com www.google-analytics.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://tkr.ade25.de https://ajax.googleapis.com https://apis.google.com *.google-analytics.com https://use.typekit.net https://platform.twitter.com https://s3.amazonaws.com https://cdn.syndication.twimg.com https://meetshaus.disqus.com platform.instagram.com; child-src 'self' https://tools.emailsys.net https://player.vimeo.com https://w.soundcloud.com https://www.youtube.com/ https://www.google.com https://syndication.twitter.com https://platform.twitter.com https://maps.google.de https://disqus.com https://giphy.com https://www.google-analytics.com; X-XSS-Protection: 1; mode=block Connection: keep-alive Via: 1.1 varnish (Varnish/5.1) X-Frame-Options: SAMEORIGIN Age: 0 Expires: Sat, 1 Jan 2000 00:00:00 GMT grace: none X-Varnish-Action: FETCH (override - backend not setting cache control)