HTTP/1.1 200 OK
Date: Thu, 03 Oct 2019 06:36:44 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 20820
Connection: keep-alive
Server: nginx/1.13.3
Vary: Accept-Encoding
Last-Modified: Wed, 24 Jul 2019 16:20:49 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 3bf3e75bcb9a86b3eb343a1d4392a6df.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA2-C1
X-Amz-Cf-Id: osf5yogZfCTNT3QWbWB4GiuEE0-aNdmlv0b5DVtn0SAtlq32RGA7Tg==
Age: 29387
Expires: Thu, 31 Dec 2037 23:55:55 GMT
x-cache: Wed, 02 Oct 2019 22:26:58 GMT
Strict-Transport-Security: max-age=2592000; includeSubDomains; preload
X-Frame-Options: sameorigin
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Referrer-Policy: strict-origin-when-cross-origin
Content-Security-Policy: connect-src 'self' https://*.hotjar.com wss://*.hotjar.com respondent.survicate.com vc.hotjar.io liveformhq.com www.google-analytics.com sumo.com stats.g.doubleclick.net trc.taboola.com *.intercomcdn.com wss://*.intercom.io https://*.intercom.io wss://*.getsurance.de https://*.getsurance.de *.ekomi.com *.here.com wss://*.layer.com https://*.layer.com *.app-us1.com; default-src 'self' *.getsurance.de; script-src 'self' 'unsafe-inline' 'unsafe-eval' secure.adnxs.com surveys-static.survicate.com survey.survicate.com bat.bing.com cdn.taboola.com fat.financeads.net online.adservicemedia.dk tpc.googlesyndication.com static.criteo.net cdn.mouseflow.com *.hotjar.com www.googletagmanager.com tagmanager.google.com www.linkedin.com px.ads.linkedin.com www.googleadservices.com connect.facebook.net googleads.g.doubleclick.net *.intercomcdn.com *.ekomiapps.de *.intercom.io www.google-analytics.com *.app-us1.com *.sumo.com *.outbrain.com *.getsurance.de; media-src 'self' js.intercomcdn.com; img-src * data:; object-src 'none'; frame-src 'self' tpc.googlesyndication.com bid.g.doubleclick.net connect.facebook.net giphy.com vars.hotjar.com gum.criteo.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com *.ekomiapps.de *.ekomi.com maxcdn.bootstrapcdn.com *.app-us1.com s3.eu-central-1.amazonaws.com tagmanager.google.com; font-src 'self' surveys-static.survicate.com fonts.gstatic.com *.intercomcdn.com *.ekomiapps.de maxcdn.bootstrapcdn.com fonts.gstatic.com *.getsurance.de; report-uri https://getsurance.report-uri.com/r/d/csp/enforce;