open.nrw Review

 N/A

HTTP/1.1 301 Moved Permanently
Date: Sun, 24 Aug 2025 05:49:14 GMT
Server: Apache
Referrer-Policy: strict-origin-when-cross-origin
Content-Security-Policy: connect-src 'self' *.nrw.de; default-src 'self' *.nrw.de; font-src data: *; frame-ancestors 'self' *.nrw.de; frame-src 'self' *.nrw.de; img-src data: *; media-src *; object-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.nrw.de; style-src 'self' 'unsafe-inline' *.nrw.de; worker-src 'self' *.nrw.de;
Location: https://open.nrw/
Cache-Control: max-age=15
Expires: Sun, 24 Aug 2025 05:49:29 GMT
Content-Length: 225
Keep-Alive: timeout=5, max=250
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1

HTTP/1.1 200 OK
Date: Wed, 20 Aug 2025 12:59:05 GMT
Server: Apache
Cache-Control: must-revalidate, no-cache, private
Content-language: de
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Expires: Sun, 19 Nov 1978 05:00:00 GMT
Strict-Transport-Security: max-age=31536000; preload
Referrer-Policy: strict-origin-when-cross-origin
Content-Security-Policy:      default-src 'self' *.nrw.de;      script-src  'self' 'unsafe-inline' 'unsafe-eval' *.nrw.de *.google.com *.youtube.com *.youtu.be *.twimg.com *.twitter.com twitter.com *.jwpcdn.com *.gstatic.com *.googleapis.com *.googlesyndication.com *.openstreetmap.org *.mozilla.org *.vimeo.com *.vimeocdn.com *.flickr.com *.staticflickr.com *.cloudflare.com cdn.jsdelivr.net svc.webspellchecker.net;     style-src   'self' 'unsafe-inline' *.nrw.de *.twitter.com twitter.com *.facebook.com *.googleapis.com *.twimg.com *.cloudflare.com cdn.jsdelivr.net svc.webspellchecker.net;     font-src data: *;     img-src  data: *;     frame-ancestors 'self' *.nrw.de *.facebook.com *.facebook.de *.twitter.com twitter.com *.google.com *.youtube.com *.youtu.be ytchannelembed.com;     worker-src  'self' *.nrw.de *.facebook.com *.facebook.de *.twitter.com twitter.com *.google.com *.youtube.com *.youtu.be ytchannelembed.com *.openstreetmap.org broschueren.nordrheinwestfalendirekt.de;     frame-src   'self' *.nrw.de *.facebook.com *.facebook.de *.twitter.com twitter.com *.google.com *.youtube.com *.youtu.be ytchannelembed.com *.openstreetmap.org broschueren.nordrheinwestfalendirekt.de app.sli.do;     object-src  'self';     connect-src 'self' *.nrw.de svc.webspellchecker.net dateien.open.nrw;     media-src *; 	upgrade-insecure-requests;
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Vary: Accept-Encoding
Content-Encoding: gzip
X-XSS-Protection: 0; mode=block
X-Permitted-Cross-Domain-Policies: master-only
Content-Length: 18564
Keep-Alive: timeout=5, max=250
Content-Type: text/html; charset=UTF-8