HTTP/1.1 200 OK
Server: nginx
Date: Tue, 30 Jul 2019 13:59:38 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Set-Cookie: frontend=2fp2nrr8g9j3l5483lv2oq17pm; expires=Fri, 02-Aug-2019 13:59:38 GMT; Max-Age=259200; path=/; domain=www.cchobby.es; HttpOnly
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: frontend_cid=S44WwFpeaIqxIvAB; expires=Fri, 02-Aug-2019 13:59:38 GMT; Max-Age=259200; path=/; domain=www.cchobby.es; secure; HttpOnly
Set-Cookie: experiment=0; path=/; domain=www.cchobby.es; HttpOnly
X-Frame-Options: SAMEORIGIN
P3p: CP="CAO PSA OUR"
Content-Security-Policy: default-src 'self' 'unsafe-eval' 'unsafe-inline' *.google.lv *.google.de *.google.lu *.google.co.uk *.fr.eu.criteo.net *.nl.eu.criteo.net *.criteo.com *.zopim.com *.zopim.io *.zdassets.com *.zendesk.com *.fdih.dk *.stackpathdns.com *.cookieinformation.com searchanise.com *.sleeknote.com *.emaerket.dk *.facebook.com *.google-analytics.com *.facebook.net *.googleadservices.com *.googleapis.com *.gstatic.com maxcdn.bootstrapcdn.com *.doubleclick.net *.google.dk *.trustpilot.com *.google.com *.google.no *.google.it *.google.se *.google.nl *.google.fr *.partner-ads.com *.google.fi *.googletagmanager.com *.clerk.io *.addwish.com *.youtube.com v2.zopim.com https://static.zdassets.com https://ekr.zdassets.com google.com google.dk googletagmanager.com googleadservices.com facebook.com *.hotjar.com *.stats.g.doubleclick.net *.g.doubleclick.net *.myfonts.net *.searchanise.com recommender.scarabresearch.com ; style-src 'self' 'unsafe-eval' 'unsafe-inline' *.googletagmanager.com *.g.doubleclick.net *.myfonts.net *.facebook.com *.criteo.com *.trustedshops.com *.zopim.com *.zopim.io *.zdassets.com *.zendesk.com snisecdn-feh571kz.stackpathdns.com maxcdn.bootstrapcdn.com  az19942.vo.msecnd.net *.sleeknote.com fonts.googleapis.com ; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.intercomcdn.com *.intercom.io *.emaerket.dk  *.google.lv *.google.de *.google.lu *.google.se *.google.nl *.google.fr *.partner-ads.com *.google.fi *.google.co.uk *.google.no *.myfonts.net *.criteo.com t.raptorsmartadvisor.com *.google.dk *.googleadservices.com *.google-analytics.com *.google.com *.facebook.com *.googletagmanager.com widgets.trustedshops.com widget.trustpilot.com *.app.cookieinformation.com policy.cookieinformation.com track.adform.net invitejs.trustpilot.com *.zopim.com *.zopim.io *.zdassets.com *.zendesk.com *.public.anpdm.com dev.visualwebsiteoptimizer.com *.klarna.com maps.googleapis.com adtr.io sslwidget.criteo.com *.nl.eu.criteo.net static.criteo.net www.gstatic.com api.clerk.io bat.bing.com googleads.g.doubleclick.net snisecdn-feh571kz.stackpathdns.com assets.zendesk.com *.hotjar.com sleeknotecustomerscripts.sleeknote.com *.searchanise.com dev.visualwebsiteoptimizer.com az19942.vo.msecnd.net sleeknotestaticcontent.sleeknote.com *.g.doubleclick.net *.stats.g.doubleclick.net *.connect.facebook.com connect.facebook.com connect.facebook.net *.connect.facebook.net js-agent.newrelic.com bam.nr-data.net cdn.scarabresearch.com recommender.scarabresearch.com ; font-src 'self' data: 'unsafe-eval' 'unsafe-inline' *.intercomcdn.com *.intercom.io *.googletagmanager.com *.fonts.net *.g.doubleclick.net *.facebook.com *.criteo.com *.myfonts.net widgets.trustedshops.com fonts.gstatic.com *.zopim.com *.zopim.io *.zdassets.com *.zendesk.com maxcdn.bootstrapcdn.com *.hotjar.com ; img-src 'self' data: 'unsafe-eval' 'unsafe-inline' *.trustedshops.com *.google.lv *.google.de *.google.lu *.google.se *.google.nl *.google.fr *.partner-ads.com *.fbsbx.com *.google.fi *.google.co.uk *.googletagmanager.com *.google.no *.myfonts.net *.criteo.com *.klarna.com dis.eu.criteo.com *.g.doubleclick.net *.raptorsmartadvisor.com *.gstatic.com *.google.dk *.googleadservices.com *.google-analytics.com *.google.com *.facebook.com *.maps.gstatic.com maps.googleapis.com widget.trustpilot.com *.app.cookieinformation.com cookie.fdih.dk *.zopim.com *.zopim.io *.public.anpdm.com *.zdassets.com *.zendesk.com *.twimg.com dev.visualwebsiteoptimizer.com bat.bing.com analytics.sleeknote.com sleeknotestaticcontent.sleeknote.com sleeknotecustomerscripts.sleeknote.com sleeknoteimages.sleeknote.com widget.trustpilot.com *.hotjar.com *.cchobby.fr *.cchobby.dk *.cc-craft.ie *.cchobby.nl *.cchobby.no *.cchobby.se ; frame-src 'self' 'unsafe-eval' 'unsafe-inline' *.youtube.com *.myfonts.net *.g.doubleclick.net *.criteo.com *.cookieinformation.com *.app.cookieinformation.com *.facebook.com dis.eu.criteo.com static.criteo.net *.nl.eu.criteo.net vars.hotjar.com ekr.zdassets.com *.trustpilot.com player.vimeo.com www.google.com kataloge.cchobby.de kataloger.cchobby.dk catalogues.cchobby.com view.ipaper.io kuvastot.cchobby.fi catalogues.cchobby.fr catalogussen.cchobby.nl kataloger.cchobby.no kataloger.cchobby.se catalogues.cc-craft.co.uk luettelo.sinelli.fi viewer.ipaper.io ; connect-src 'self' 'unsafe-eval' 'unsafe-inline' *.google.com *.google.lv *.google.de *.google.lu *.google.fi *.google.co.uk *.googletagmanager.com *.google.no *.g.doubleclick.net *.myfonts.net *.facebook.com *.criteo.com wss://*.zopim.com *.google-analytics.com *.hotjar.com *.zopim.io *.zdassets.com *.zendesk.com widget.trustpilot.com *.app.cookieinformation.com maps.gstatic.com *.zopim.com widgets.trustedshops.com sleeknotestaticcontent.sleeknote.com recommender.scarabresearch.com *.googleapis.com vc.hotjar.io recommender.scarabresearch.com ; child-src 'self' 'unsafe-eval' 'unsafe-inline' assets.zendesk.com ekr.zdassets.com widget.trustpilot.com ; object-src 'self' ; report-uri /csp-report/index.php;