Bund.de - Bkg.bund.de

Date: Sun, 12 Oct 2025 17:15:01 GMT
Content-Type: text/html;charset=utf-8
Content-Length: 0
Connection: keep-alive
X-Server-Generated: Sun, 12 Oct 2025 17:14:12 GMT
X-Server-Instance-Name: live11
Referrer-Policy: origin-when-cross-origin
X-Frame-Options: sameorigin
X-UA-Compatible: IE=edge
X-Content-Type-Options: nosniff
Content-Security-Policy: default-src 'self' 'unsafe-inline' blob: data: prefix.cc *.elastic.co *.arcgis.com *.arcgisonline.com fonts.googleapis.com fonts.gstatic.com *.tiles.mapbox.com *.unity3d.com *.ec.europa.eu www.draw.io adv-smart.de *.adv-smart.de *.bkg.bund.de *.gdi-de.org *.geodatenkatalog.de *.geodatenzentrum.de *.geoportal.de *.iers.org *.stagn.de *.stagn.org; font-src 'self' data: maxcdn.bootstrapcdn.com stackpath.bootstrapcdn.com fonts.googleapis.com fonts.gstatic.com adv-smart.de *.adv-smart.de; frame-ancestors 'self' *.bkg.bund.de *.gdi-de.org *.geodatenkatalog.de *.geodatenzentrum.de *.geoportal.de *.iers.org *.stagn.de *.stagn.org; img-src 'self' blob: data: http: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' inspire.ec.europa.eu blob: ajax.aspnetcdn.com *.bootstrapcdn.com cdnjs.cloudflare.com cesium.com cdn.embedly.com www.google.com ajax.googleapis.com fonts.googleapis.com fonts.gstatic.com code.jquery.com api.mapbox.com unpkg.com adv-smart.de *.adv-smart.de cdn.datatables.net cdn.jsdelivr.net cesiumjs.org openlayers.org www.wikidata.org *.bkg.bund.de *.gdi-de.org *.geodatenkatalog.de *.geodatenzentrum.de *.geoportal.de *.iers.org *.stagn.de *.stagn.org; style-src 'self' 'unsafe-inline' *.bootstrapcdn.com cdnjs.cloudflare.com ajax.googleapis.com fonts.googleapis.com translate.googleapis.com fonts.gstatic.com code.jquery.com api.mapbox.com unpkg.com adv-smart.de *.adv-smart.de cdn.datatables.net cdn.jsdelivr.net *.bkg.bund.de *.gdi-de.org *.geodatenkatalog.de *.geodatenzentrum.de *.geoportal.de *.iers.org *.stagn.de *.stagn.org *.ec.europa.eu
X-Content-Security-Policy: default-src 'self' *.wettzell.de; base-uri 'self'; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; object-src 'self'; media-src 'self' multimedia.gsb.bund.de; frame-src *.wettzell.de *.youtube.com; img-src 'self'; worker-src 'self'; frame-ancestors 'self';
X-Permitted-Cross-Domain-Policies: none
X-XSS-Protection: 1; mode=block
Cache-Control: no-cache
Pragma: no-cache
Location: http://www.bkg.bund.de/DE/Home/home.html
Content-Language: de
X-Standort: FFM
Permissions-Policy: camera=(self), fullscreen=(*), geolocation=(self), payment=()
X-Port: 7
Strict-Transport-Security: max-age=16070400; includeSubDomains

HTTP/1.0 301 Moved Permanently
Location: https://www.bkg.bund.de/DE/Home/home.html
Server: BigIP
Connection: Keep-Alive
Content-Length: 0

HTTP/1.1 200 OK
Date: Sun, 12 Oct 2025 17:15:01 GMT
Content-Type: text/html;charset=utf-8
Connection: close
Cache-Control: no-cache
Pragma: no-cache
X-Server-Generated: Sun, 12 Oct 2025 17:14:12 GMT
X-Server-Instance-Name: live11
Referrer-Policy: origin-when-cross-origin
X-Frame-Options: sameorigin
X-UA-Compatible: IE=edge
X-Content-Type-Options: nosniff
Content-Security-Policy: connect-src 'self'; default-src 'self' data: atlas.bkg.bund.de vlbisysmon.evlbi.wettzell.de www.fs.wettzell.de http://www.fs.wettzell.de www.youtube.com; font-src 'self' data: fonts.gstatic.com use.typekit.net; frame-ancestors 'self'; img-src 'self' blob: data: www.gstatic.com translate.google.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' sg.geodatenzentrum.de; style-src 'self' 'unsafe-inline' translate.googleapis.com sg.geodatenzentrum.de
X-Content-Security-Policy: default-src 'self' *.wettzell.de; base-uri 'self'; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; object-src 'self'; media-src 'self' multimedia.gsb.bund.de; frame-src *.wettzell.de *.youtube.com; img-src 'self'; worker-src 'self'; frame-ancestors 'self';
X-Permitted-Cross-Domain-Policies: none
X-XSS-Protection: 1; mode=block
Content-Language: de
Vary: Accept-Encoding
X-Standort: FFM
Permissions-Policy: camera=(self), fullscreen=(*), geolocation=(self), payment=()
X-Port: 7
Strict-Transport-Security: max-age=16070400; includeSubDomains
Set-Cookie: JSESSIONID=AB9E7CFDFD50413728099824BEB6566D.live11; Path=/; SameSite=None; Secure; HttpOnly
Set-Cookie: TS0138f14a=011800297221d4464b760909a91f92ebda884e0486228ba28aefbbc1581af2738dfa758a35f5ebfaefade56b6e935976c539b783a4; Path=/; Secure; HttpOnly;