Sydneymetro.info

server: nginx
date: Sat, 01 Apr 2023 11:05:07 GMT
content-type: text/html; charset=iso-8859-1
content-length: 237
location: https://www.sydneymetro.info/
x-content-type-options: nosniff
cache-control: max-age=1209600
expires: Thu, 13 Apr 2023 04:00:17 GMT
x-request-id: v-61bf36a4-ceaf-11ed-9fe3-6f74154c2313
age: 198289
via: varnish
x-cache: HIT
x-cache-hits: 296

HTTP/2 200 
server: nginx
date: Sat, 01 Apr 2023 11:05:07 GMT
content-type: text/html; charset=UTF-8
content-length: 45371
cache-control: max-age=2764800, public
x-drupal-dynamic-cache: UNCACHEABLE
x-ua-compatible: IE=edge
x-ua-compatible: IE=edge
content-language: en
x-content-type-options: nosniff
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
expires: Sun, 19 Nov 1978 05:00:00 GMT
last-modified: Fri, 31 Mar 2023 01:17:01 GMT
etag: "1680225421"
vary: Cookie,Accept-Encoding
x-generator: Drupal 9 (https://www.drupal.org)
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob:  *.googletagmanager.com *.google-analytics.com *.googleapis.com *.google.com unpkg.com *.cloudflare.com *.jsdelivr.net *.youtube.com *.gstatic.com https://translate.googleapis.com/ *.addthis.com *.moatads.com *.addthisedge.com *.pinterest.com *.vimeo.com *.facebook.net *.hotjar.com *.marker.io *.newrelic.com *.nr-data.net *.googleapis.com; object-src 'none'; style-src 'self' 'unsafe-inline' *.googletagmanager.com *.google-analytics.com *.googleapis.com *.google.com *.cloudflare.com *.jsdelivr.net *.marker.io; img-src 'self' data: *.gstatic.com *.googleapis.com *.google-analytics.com *.cloudflare.com *.ogilvy.com.au *.google.com i.ytimg.com *.addthis.com *.pinterest.com *.vimeocdn.com *.ggpht.com *.youtube.com *.marker.io *.doubleclick.net *.facebook.com; media-src 'self'; frame-src 'self' *.youtube.com *.vimeo.com vimeo.com *.google.com *.addthis.com *.pinterest.com *.marker.io *.doubleclick.net *.hotjar.com *.facebook.com; frame-ancestors 'self'; child-src 'self' blob:; font-src 'self' *.gstatic.com *.amazonaws.com data:; connect-src 'self' *.google-analytics.com *.googleapis.com *.addthis.com vimeo.com *.marker.io *.nr-data.net *.hotjar.com *.doubleclick.net *.facebook.com *.facebook.net; report-uri /report-csp-violation; upgrade-insecure-requests
x-xss-protection: 1; mode=block
strict-transport-security: max-age=2592000
referrer-policy: no-referrer-when-downgrade
expect-ct: max-age=86400
feature-policy: 
x-drupal-cache: HIT
content-encoding: gzip
x-request-id: v-be9a0aae-cf61-11ed-9584-b36c01dcbd80
x-ah-environment: prod
age: 121684
via: varnish
x-cache: HIT
x-cache-hits: 5769
accept-ranges: bytes