Aftonbladet.se

server: awselb/2.0
date: Fri, 18 Sep 2026 15:26:02 GMT
content-type: application/octet-stream
content-length: 0
location: https://www.aftonbladet.se
strict-transport-security: max-age=31536000

HTTP/2 200 
content-type: text/html; charset=utf-8
content-encoding: br
date: Fri, 18 Sep 2026 15:26:02 GMT
x-xss-protection: 1; mode=block
cache-control: no-cache
content-security-policy: frame-ancestors 'self' http://localhost:* https://*.aftonbladet-cdn.se https://*.aftonbladet.dev https://*.aftonbladet.localhost https://*.aftonbladet.se https://*.apple-mapkit.com https://*.plan3.se https://*.plan3dev.se https://*.schibsted.media https://*.svd.se https://*.vg.no https://admarket.no https://admarket.schibsted.se https://schibsted.dredition.aptoma.no; manifest-src 'self' https://www.vg.no https://static.vg.no/; font-src 'self' data: https://cdn.aftenposten.no https://cdn.aftonbladet.se https://cdn.bt.no https://cdn.aftenbladet.no https://cdn.stream.schibsted.media https://cdn.vev.design https://core-header.schibsted.tech https://default.sacdn.no https://e24.no https://e24.vgc.no https://fonts.vev.design https://fonts.gstatic.com https://static.svd.se https://static.vg.no https://vgc.no https://www.aftenbladet.no https://www.aftenposten.no https://www.bt.no https://www.vg.no; upgrade-insecure-requests; object-src 'none';
link: <https://akamai.vgc.no>; rel=preconnect;, <https://id.aftonbladet.se>; rel=preconnect;crossorigin=use-credentials, <https://esm.schibsted.tech>; rel=preconnect;crossorigin=anonymous, <https://ib.adnxs.com/>; rel=preconnect;crossorigin=use-credentials, <https://ams3-ib.adnxs.com>; rel=preconnect;crossorigin=use-credentials, <https://ams3-ib.adnxs-simple.com>; rel=preconnect;crossorigin=use-credentials, <https://fra1-ib.adnxs-simple.com>; rel=preconnect;crossorigin=use-credentials, <https://cdn.aftonbladet.se/fonts/ABMonumentGroteskHeadline/ABMonumentGroteskHeadline-Bold750.woff2>; rel=preload; as=font; type=font/woff2; crossorigin=anonymous; fetchpriority=high, <https://cdn.aftonbladet.se/fonts/ABMonumentGrotesk/ABMonumentGrotesk-Regular.woff2>; rel=preload; as=font; type=font/woff2; crossorigin=anonymous; fetchpriority=high, <https://cdn.aftonbladet.se/fonts/ABMonumentGrotesk/ABMonumentGrotesk-Bold.woff2>; rel=preload; as=font; type=font/woff2; crossorigin=anonymous; fetchpriority=high
permissions-policy: accelerometer=(), camera=(), cross-origin-isolated=(), display-capture=(), geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), payment=(), publickey-credentials-get=(), usb=(), xr-spatial-tracking=(), clipboard-read=(self), clipboard-write=(self), hid=(), fullscreen=(self "https://www.youtube.com" "https://www.youtube-nocookie.com"), idle-detection=(), unload=()
referrer-policy: strict-origin-when-cross-origin
supports-loading-mode: credentialed-prerender
surrogate-control: max-age=15, stale-while-revalidate=300, stale-if-error=86400
surrogate-key: AB-FRONT
x-content-type-options: nosniff
x-frame-options: DENY
strict-transport-security: max-age=63072000; includeSubDomains; preload
via: 1.1 21369bf2bfeb79adaa5bef1cb96f8540.cloudfront.net (CloudFront), 1.1 888de1b5ef00615a29430ec5b60c057a.cloudfront.net (CloudFront)
x-amz-cf-pop: FRA60-P4
vary: x-sch-device,x-sch-variant,Origin,Accept-Encoding
x-cache: Miss from cloudfront
x-amz-cf-pop: FRA56-P17
x-amz-cf-id: ASRV_ifRaBAKEkHjxo9_wDDksQSysCeoWw29GcOdfCb2hGq5k51TAg==
vary: Origin