HTTP/1.1 200 OK
Date: Sun, 21 Jul 2019 19:22:44 GMT
Connection: keep-alive
Server: RedoocH1
Content-Type: text/html; charset=UTF-8
Vary: Accept-Encoding
Set-Cookie: R3dConsumer=ijcafmjj24h4sdgnq0679oin31; path=/; HttpOnly
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Content-Security-Policy: default-src 'self' ; frame-src 'self' gsa: gap: staticxx.facebook.com www.facebook.com www.youtube.com maps.google.com www.google.com www.googletagmanager.com *.amazon-adsystem.com *.assoc-amazon.com static.olark.com vars.hotjar.com; img-src 'self' redooc.com *.redooc.com www.google-analytics.com https://*.googleusercontent.com https://www.facebook.com https://static.olark.com https://*.fbcdn.net static.olark.com log.olark.com www.googletagmanager.com *.g.doubleclick.net www.google.com www.google.it; font-src 'self' connect.facebook.net fonts.gstatic.com maxcdn.bootstrapcdn.com; media-src 'self' *.redooc.com *.olark.com; script-src 'self'  'unsafe-eval' 'unsafe-inline'  *.hotjar.com www.google-analytics.com www.googletagmanager.com connect.facebook.net *.olark.com clients1.google.com www.googleapis.com ajax.googleapis.com; style-src 'self' 'unsafe-inline'  fonts.googleapis.com  static.olark.com maxcdn.bootstrapcdn.com; connect-src 'self' *.hotjar.com *.olark.com ws://*.hotjar.com https://www.google-analytics.com
Access-Control-Allow-Origin: https://shop.redooc.com
Access-Control-Allow-Methods: GET
X-Content-Type-Options: nosniff
Set-Cookie: _csrfcon=12d2c9e2dfa137839f486896956f86fc58500a0a3b6f616954fdd9b7b446e32aa%3A2%3A%7Bi%3A0%3Bs%3A8%3A%22_csrfcon%22%3Bi%3A1%3Bs%3A32%3A%22QdaoOwCx6qRiSAsNiOyaXMPZCvfubwXB%22%3B%7D; path=/; HttpOnly
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
X-Compression: gzip
Age: 0
X-Cache: MISS
X-Cache-Hits: 0
Accept-Ranges: bytes
transfer-encoding: chunked