kulturlx.lu

Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; media-src 'self' https:; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self'; script-src 'self' 'unsafe-inline' www.googletagmanager.com kulturlx.lu cdnjs.cloudflare.com static.axept.io unpkg.com www.gstatic.com www.google.com challenges.cloudflare.com maps.googleapis.com www.google-analytics.com connect.facebook.net www.kulturlx.lu www.instagram.com 'unsafe-eval'; script-src-elem 'self' 'unsafe-inline' www.googletagmanager.com kulturlx.lu cdnjs.cloudflare.com static.axept.io unpkg.com www.gstatic.com www.google.com challenges.cloudflare.com maps.googleapis.com www.google-analytics.com connect.facebook.net www.kulturlx.lu www.instagram.com 'unsafe-eval'; script-src-attr 'self' 'unsafe-inline' www.googletagmanager.com kulturlx.lu cdnjs.cloudflare.com static.axept.io unpkg.com www.gstatic.com www.google.com challenges.cloudflare.com maps.googleapis.com www.google-analytics.com connect.facebook.net www.kulturlx.lu www.instagram.com 'unsafe-eval'; style-src 'self' https: 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data: https:; connect-src 'self' https:; frame-src 'self' challenges.cloudflare.com www.youtube.com www.googletagmanager.com open.spotify.com www.instagram.com; worker-src 'self' blob:; upgrade-insecure-requests; report-uri https://csp.binsfeld.lu/wp-json/binsfeld/v1/reports;
Content-Type: text/html; charset=UTF-8
Date: Fri, 25 Sep 2026 10:06:55 GMT
Expires: Fri, 25 Sep 2026 11:06:55 GMT
Location: https://www.kulturlx.lu/
Permissions-Policy: geolocation=(), microphone=(), camera=()
Pragma: no-cache
Referrer-Policy: strict-origin-when-cross-origin
Server: nginx
Set-Cookie: opening_animate=1; expires=Fri, 25 Sep 2026 11:06:55 GMT; Max-Age=3600, PHPSESSID=c305d80d06fde08a64c215c5b887cc33; path=/
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Powered-By: binsfeld cybersecurity, PleskLin
X-Redirect-By: WordPress
X-Xss-Protection: 1; mode=block