bleau.dk website report

HTTP/2 200
content-type: text/html; charset=utf-8
date: Fri, 23 Oct 2026 11:39:46 GMT
content-encoding: gzip
etag: "2A972529D1C88ADE810CF9A79F8027F5A2C072C3482DF7029AF190A9FA6E8A09"
set-cookie: ARRAffinity=921fde596badeeac31f8017ab62e7761b901cce895773207dafa2a31a5236964;Path=/;HttpOnly;Secure;Domain=bleau.dk, ARRAffinitySameSite=921fde596badeeac31f8017ab62e7761b901cce895773207dafa2a31a5236964;Path=/;HttpOnly;SameSite=None;Secure;Domain=bleau.dk
vary: Accept, User-Agent,Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
request-context: appId=cid-v1:a4f289dc-d71e-4c7a-b000-4950756c8067
content-security-policy: default-src 'self' fonts.gstatic.com fonts.googleapis.com static.moliri.dk *.azure.com *.google-analytics.com *.doubleclick.net data: www.gstatic.com statservicefunctions.azurewebsites.net hearingportalfilestorage.blob.core.windows.net cookiecontrol.bleau.dk *.devtunnels.ms api-eu1.cludo.com *.moliri.dk dawa.aws.dk cdn.jsdelivr.net cdnjs.cloudflare.com moliricdn.azurewebsites.net t.visitorqueue.com  v.clarity.ms e.clarity.ms localhost:52443 localhost:52406 https://localhost:44337 https://e.clarity.ms px.ads.linkedin.com https://l.clarity.ms/collect *.environment.api.powerplatform.com default9c1980f0adce447d8380efa6727b77.59 ;style-src 'self' 'unsafe-inline' fonts.googleapis.com cdhsign.dk cdnjs.cloudflare.com unpkg.com static.moliri.dk customer.cludo.com *.gstatic.com npmcdn.com moliricdn.azurewebsites.net t.visitorqueue.com v.clarity.ms cdn.gtranslate.net;script-src 'self' 'unsafe-inline' *.moliri.dk *.bleau.dk *.cludo.com *.gstatic.com *.monsido.com moliricdn.azurewebsites.net *.azure.com cdn.jsdelivr.net cookiecontrol.bleau.dk *.devtunnels.ms *.siteimproveanalytics.com dawa.aws.dk moliricdn.azurewebsites.net *.lfeeder.com googletagmanager.com *.visitorqueque.com 'unsafe-eval' www.googletagmanager.com t.visitorqueue.com www.google-analytics.com www.clarity.ms scripts.clarity.ms snap.licdn.com 'unsafe-eval';frame-ancestors https://localhost:44399 https://admin-dev.moliri.dk https://admin.moliri.dk https://admin-beta.moliri.dk https://localhost:5001 https://localhost:44337 *.videotool.dk *.vimeo.com scribehow.com share.synthesia.io https://share.synthesia.io/ https://bleau-my.sharepoint.com/;frame-src https://localhost:44399 https://admin-dev.moliri.dk https://admin.moliri.dk https://admin-beta.moliri.dk https://localhost:5001 https://localhost:44337 *.videotool.dk *.vimeo.com scribehow.com share.synthesia.io https://share.synthesia.io/ https://bleau-my.sharepoint.com/;img-src 'self'  data: hearingportalfilestorage.blob.core.windows.net cdhsign.dk *.cludo.com static.moliri.dk *.monsido.com *.devtunnels.ms moliri.dk *.moliri.dk *.azureedge.net *.siteimproveanalytics.com *.siteimproveanalytics.io *.openstreetmap.org moliri-media-service-api-clone.azurewebsites.net moliricdn.azurewebsites.net *.lfeeder.com t.visitorqueue.com www.google-analytics.com faellesbo.dk ajeuwbhvhr.cloudimg.io px.ads.linkedin.com;media-src 'self' dreambroker.com youtube.com vimeo.com molirivideostorage.blob.core.windows.net cdhsign.dk delivery.twentythree.com cdn.skyfish.com *.cloudfront.net *.devtunnels.ms moliri-media-service-api-clone.azurewebsites.net moliricdn.azurewebsites.net static.moliri.dk www.static.moliri.dk video.moliri.dk;
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
permissions-policy: accelerometer=(self), camera=(self), geolocation=(self), gyroscope=(self), magnetometer=(self), microphone=(self "https://chatbot.indialog.ai"), payment=(self), usb=(self)
x-permitted-cross-domain-policies: none
expect-ct: max-age=86400, enforce