HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Jun 2020 18:21:11 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
X-Frame-Options: SAMEORIGIN
P3p: CP="CAO PSA OUR"
Set-Cookie: frontend=l8ahevv354hnnfde281k7iiloq; expires=Mon, 29-Jun-2020 18:21:10 GMT; Max-Age=259200; path=/; domain=.cc-craft.co.uk
Set-Cookie: frontend_cid=Gj91BZUBNU4zrIDT; expires=Mon, 29-Jun-2020 18:21:10 GMT; Max-Age=259200; path=/; domain=.cc-craft.co.uk; secure
Vary: Accept-Encoding
X-Served-By: Apache, phhw-191105.cust.powerhosting.dk, ipv4: 185.31.79.63 ipv6: 2a00:b920:3:1337::63, vhost = cchobby.dk
Content-Security-Policy: default-src 'self' 'unsafe-eval' 'unsafe-inline' *.scarabresearch.com  *.google.com *.viabill.com *.google.lv *.google.de *.google.lu *.google.co.uk *.fr.eu.criteo.net *.nl.eu.criteo.net *.criteo.com *.zopim.com *.zopim.io *.zdassets.com *.zendesk.com *.fdih.dk *.stackpathdns.com *.cookieinformation.com searchanise.com *.sleeknote.com *.emaerket.dk *.facebook.com *.google-analytics.com *.facebook.net *.googleadservices.com *.googleapis.com *.gstatic.com maxcdn.bootstrapcdn.com *.doubleclick.net *.google.dk *.trustpilot.com *.google.com *.google.no *.google.it *.google.se *.google.nl *.google.fr *.partner-ads.com *.google.fi *.googletagmanager.com *.clerk.io *.addwish.com *.youtube.com v2.zopim.com https://static.zdassets.com https://ekr.zdassets.com google.com google.dk googletagmanager.com googleadservices.com facebook.com *.hotjar.com *.stats.g.doubleclick.net *.g.doubleclick.net *.myfonts.net *.searchanise.com recommender.scarabresearch.com tracking.bonusway.com *.eservice.emarsys.net link.newsletters.cchobby.com link.newsletters.sinelli.fi ; style-src 'self' 'unsafe-eval' 'unsafe-inline' https://optimize.google.com https://fonts.googleapis.com *.google.com *.viabill.com *.googleapis.com *.googletagmanager.com *.g.doubleclick.net *.myfonts.net *.facebook.com *.criteo.com *.trustedshops.com *.zopim.com *.zopim.io *.zdassets.com *.zendesk.com snisecdn-feh571kz.stackpathdns.com maxcdn.bootstrapcdn.com  az19942.vo.msecnd.net *.sleeknote.com fonts.googleapis.com tracking.bonusway.com optimize.google.com fonts.googleapis.com ; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://optimize.google.com https://www.google-analytics.com *.trustpilot.com *.pinimg.com *.scarabresearch.com *.google.com *.viabill.com *.googletagmanager.com *.intercomcdn.com *.intercom.io *.emaerket.dk  *.google.lv *.google.de *.google.lu *.google.se *.google.nl *.google.fr *.partner-ads.com *.google.fi *.google.co.uk *.google.no *.myfonts.net *.criteo.com t.raptorsmartadvisor.com *.google.dk *.googleadservices.com *.google-analytics.com *.google.com *.facebook.com *.googletagmanager.com widgets.trustedshops.com widget.trustpilot.com *.app.cookieinformation.com policy.cookieinformation.com track.adform.net invitejs.trustpilot.com *.zopim.com *.zopim.io *.zdassets.com *.zendesk.com *.public.anpdm.com dev.visualwebsiteoptimizer.com *.klarna.com maps.googleapis.com adtr.io sslwidget.criteo.com *.nl.eu.criteo.net static.criteo.net www.gstatic.com api.clerk.io bat.bing.com googleads.g.doubleclick.net snisecdn-feh571kz.stackpathdns.com assets.zendesk.com *.hotjar.com sleeknotecustomerscripts.sleeknote.com *.searchanise.com dev.visualwebsiteoptimizer.com az19942.vo.msecnd.net sleeknotestaticcontent.sleeknote.com *.g.doubleclick.net *.stats.g.doubleclick.net *.connect.facebook.com connect.facebook.com connect.facebook.net *.connect.facebook.net js-agent.newrelic.com bam.nr-data.net cdn.scarabresearch.com recommender.scarabresearch.com cdnjs.cloudflare.com tracking.bonusway.com optimize.google.com ; font-src 'self' data: 'unsafe-eval' 'unsafe-inline' https://fonts.gstatic.com *.intercomcdn.com *.viabill.com *.intercom.io *.googletagmanager.com *.fonts.net *.g.doubleclick.net *.facebook.com *.criteo.com *.myfonts.net widgets.trustedshops.com fonts.gstatic.com *.zopim.com *.zopim.io *.zdassets.com *.zendesk.com maxcdn.bootstrapcdn.com *.hotjar.com fonts.gstatic.com ; img-src 'self' data: 'unsafe-eval' 'unsafe-inline' cookieinformation.com https://optimize.google.com https://www.google-analytics.com *.pinterest.com *.gstatic.com http://i.countdownmail.com *.countdownmail.com *.trustedshops.com *.viabill.com *.google.lv *.google.de *.google.lu *.google.se *.google.nl *.google.fr *.partner-ads.com *.fbsbx.com *.google.fi *.google.co.uk *.googletagmanager.com *.google.no *.myfonts.net *.criteo.com *.klarna.com dis.eu.criteo.com *.g.doubleclick.net *.raptorsmartadvisor.com *.gstatic.com *.google.dk *.googleadservices.com *.google-analytics.com *.google.com *.facebook.com *.maps.gstatic.com maps.googleapis.com widget.trustpilot.com *.app.cookieinformation.com cookie.fdih.dk *.zopim.com *.zopim.io *.public.anpdm.com *.zdassets.com *.zendesk.com *.twimg.com dev.visualwebsiteoptimizer.com bat.bing.com analytics.sleeknote.com sleeknotestaticcontent.sleeknote.com sleeknotecustomerscripts.sleeknote.com sleeknoteimages.sleeknote.com widget.trustpilot.com *.hotjar.com fpdbs.paypal.com optimize.google.com *.cchobby.fr *.cchobby.dk *.cc-craft.ie *.cchobby.nl *.cchobby.no *.cchobby.se fpdbs.paypal.com ; frame-src 'self' 'unsafe-eval' 'unsafe-inline' https://optimize.google.com http://www.cchobby.info *.pinterest.com *.countingdownto.com *.youtube.com *.viabill.com *.myfonts.net *.g.doubleclick.net *.criteo.com *.cookieinformation.com *.app.cookieinformation.com *.facebook.com dis.eu.criteo.com static.criteo.net *.nl.eu.criteo.net vars.hotjar.com ekr.zdassets.com *.trustpilot.com player.vimeo.com www.google.com optimize.google.com kataloge.cchobby.de kataloger.cchobby.dk *.countingdownto.com *.viabill.com catalogues.cchobby.com view.ipaper.io kuvastot.cchobby.fi catalogues.cchobby.fr catalogussen.cchobby.nl kataloger.cchobby.no kataloger.cchobby.se catalogues.cc-craft.co.uk luettelo.sinelli.fi viewer.ipaper.io ; connect-src 'self' 'unsafe-eval' 'unsafe-inline' *.trustpilot.com  bam.nr-data.net *.pinterest.com *.scarabresearch.com  *.google.com *.viabill.com *.google.lv *.google.de *.google.lu *.google.fi *.google.co.uk *.googletagmanager.com *.google.no *.g.doubleclick.net *.myfonts.net *.facebook.com *.criteo.com wss://*.zopim.com *.google-analytics.com *.hotjar.com *.zopim.io *.zdassets.com *.zendesk.com widget.trustpilot.com *.app.cookieinformation.com maps.gstatic.com *.zopim.com widgets.trustedshops.com sleeknotestaticcontent.sleeknote.com recommender.scarabresearch.com *.googleapis.com vc.hotjar.io *.viabill.com recommender.scarabresearch.com ; child-src 'self' 'unsafe-eval' 'unsafe-inline' *.viabill.com assets.zendesk.com ekr.zdassets.com widget.trustpilot.com ; object-src 'self' ; report-uri /csp-report/index.php
Content-Security-Policy: upgrade-insecure-requests;
Strict-Transport-Security: max-age=31536000; preload;