| Server | Apache |
| X-Frame-Options | SAMEORIGIN |
| X-Xss-Protection | 1; mode=block |
| X-Content-Type-Options | nosniff |
| Vary | Host |
| Strict-Transport-Security | max-age=31536000; includeSubDomains |
| Expires | Thu, 01 Jan 1970 00:00:00 GMT |
| Pragma | no-cache |
| Cache-Control | no-cache, no-store |
| Content-Security-Policy | default-src 'self'; script-src 'self' service.bmf.gv.at static.etracker.com www.etracker.de code.etracker.com 'unsafe-eval' 'unsafe-inline'; img-src data: 'self' www.etracker.de; connect-src 'self' www.etracker.de; style-src 'self' 'unsafe-inline'; frame-ancestors 'self'; child-src 'self'; frame-src 'self'; form-action 'self'; upgrade-insecure-requests; block-all-mixed-content; |
| Referrer-Policy | no-referrer-when-downgrade |
| Content-Length | 15889 |
| Keep-Alive | timeout=5, max=100 |
| Connection | Keep-Alive |
| Content-Type | text/html;charset=UTF-8 |