HTTP/2 200 
content-type: text/html; charset=utf-8
etag: W/"19afa0-mS7Ljqhsjh2QmJsS36BSg8mryVU"
expires: Wed, 07 May 2025 16:40:25 GMT
cache-control: max-age=300, public
cross-origin-window-policy: deny
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-xss-protection: 1; mode=block
content-security-policy: default-src 'self' https://*.dormakabagroup.com blob: ; frame-src 'self' https://*.dormakabagroup.com https://*.dormakaba.com https://*.equitystory.com https://cdn.iframe.ly https://*.vimeo.com https://*.vimeocdn.com https://irs.tools.investis.com https://*.jotformeu.com https://*.jotform.com https://*.pardot.com https://www.youtube.com https://*.storelocatorwidgets.com https://web.inxmail.com https://fbweb.cypheme.com *.hotjar.com *.text.com *.files-text.com *.cdn.livechatinc.com *.livechat.com *.livechatinc.com *.livechat-static.com *.recurly.com *.cdn.chatbot.com *.chatbot.com *.recurly.com ; frame-ancestors 'self' https://*.dormakabagroup.com ; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.dormakabagroup.com https://www.googletagmanager.com https://*.equitystory.com https://*.google-analytics.com https://*.eqs.com https://maps.googleapis.com https://ajax.googleapis.com https://cdn.cookielaw.org https://*.hotjar.com https://*.storelocatorwidgets.com *.text.com *.files-text.com *.cdn.livechatinc.com *.livechat.com *.livechatinc.com *.livechat-static.com *.recurly.com *.cdn.chatbot.com *.chatbot.com *.recurly.com ; object-src 'none' ; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://*.eqs.com https://*.storelocatorwidgets.com *.text.com *.files-text.com *.cdn.livechatinc.com *.livechat.com *.livechatinc.com *.livechat-static.com *.recurly.com *.cdn.chatbot.com *.chatbot.com *.recurly.com ; img-src 'self' data: blob: https://*.dormakabagroup.com https://*.dormakaba.com https://*.ctfassets.net https://*.eqs.com https://maps.gstatic.com https://*.googleapis.com https://*.ggpht https://www.google-analytics.com https://fonts.gstatic.com https://cdn.cookielaw.org https://*.storelocatorwidgets.com storage.pardot.com *.pardot.com *.text.com *.files-text.com *.cdn.livechatinc.com *.livechat.com *.livechatinc.com *.livechat-static.com *.recurly.com *.cdn.chatbot.com *.chatbot.com *.recurly.com ; media-src 'self' https://*.ctfassets.net data: blob: ; font-src 'self' https://fonts.dormakaba.com https://fonts.gstatic.com https://*.storelocatorwidgets.com *.text.com *.files-text.com *.cdn.livechatinc.com *.livechat.com *.livechatinc.com *.livechat-static.com *.recurly.com *.cdn.chatbot.com *.chatbot.com *.recurly.com data: ; connect-src 'self' https://*.dormakabagroup.com https://*.contentful.com https://*.algolia.net https://*.algolianet.com https://*.equitystory.com https://*.cms-eqs.com https://*.storelocatorwidgets.com https://cdn.cookielaw.org https://*.google-analytics.com https://maps.googleapis.com https://www.googleapis.com https://*.onetrust.com https://analytics.google.com https://*.doubleclick.net https://*.eqs.com https://prod.spline.design https://www.gstatic.com https://unpkg.com https://fonts.gstatic.com *.hotjar.com *.hotjar.io wss://*.hotjar.com *.text.com *.files-text.com *.cdn.livechatinc.com *.livechat.com *.livechatinc.com *.livechat-static.com *.recurly.com *.cdn.chatbot.com *.chatbot.com *.recurly.com ; worker-src 'self' blob: ; upgrade-insecure-requests ; block-all-mixed-content ; manifest-src 'self' ;
content-encoding: gzip
accept-ranges: bytes
age: 0
vary: Accept-Encoding
date: Wed, 07 May 2025 16:35:25 GMT
via: 1.1 varnish
x-timer: S1746635725.626485,VS0,VE1341
x-served-by: cache-den-kden1300067-DEN
x-cache: MISS
x-cache-hits: 0