capitalbolig.dk

Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
Content-Type: text/html; charset=UTF-8
X-Pingback: https://capitalbolig.dk/xmlrpc.php
Link: <https://capitalbolig.dk/wp-json/>; rel="https://api.w.org/", <https://capitalbolig.dk/wp-json/wp/v2/pages/2>; rel="alternate"; title="JSON"; type="application/json", <https://capitalbolig.dk/>; rel=shortlink
Date: Fri, 25 Sep 2026 09:11:33 GMT
Server: LiteSpeed
X-NF-Server: Yes
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: default-src 'self';     base-uri 'self';     form-action 'self' https:;     frame-ancestors 'self';     upgrade-insecure-requests;     block-all-mixed-content;     script-src 'self' 'unsafe-inline' 'unsafe-eval' https:       consent.cookiebot.com       www.googletagmanager.com       www.google-analytics.com       www.google.com       www.gstatic.com       static.cloudflareinsights.com;     style-src 'self' 'unsafe-inline' https: fonts.googleapis.com;     img-src 'self' data: https:;     font-src 'self' data: https: fonts.gstatic.com;     connect-src 'self' https:       www.google-analytics.com       stats.g.doubleclick.net;     frame-src 'self' www.google.com consent.cookiebot.com;
Referrer-Policy: strict-origin-when-cross-origin
Permissions-Policy: camera=(), microphone=(), geolocation=()
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000