HTTP/1.1 200 OK
Server: nginx
Date: Wed, 03 Feb 2021 03:25:07 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 126416
Connection: keep-alive
Set-Cookie: PHPSESSID=b4t5dp1bh27bhrunnb2lv2ntls; expires=Wed, 03-Feb-2021 04:25:07 GMT; Max-Age=3600; path=/; domain=xandres.com; secure; HttpOnly
Pragma: cache
Cache-Control: max-age=86400, public, s-maxage=86400
Expires: Thu, 04 Feb 2021 03:25:07 GMT
Content-Security-Policy-Report-Only: font-src fonts.googleapis.com fonts.gstatic.com 'self' 'unsafe-inline'; form-action www.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self' 'unsafe-inline'; frame-src cdn.dnky.co webchat.dotdigital.com www.google.com *.weltpixel.com *.hotjar.com www.facebook.com *.criteo.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com www.googleadservices.com www.google-analytics.com *.vimeocdn.com s.ytimg.com maps.googleapis.com maps.gstatic.com stats.g.doubleclick.net *.cdninstagram.com data: www.google.be www.google.com www.facebook.net www.facebook.com ct.pinterest.com *.adform.net *.yieldmo.com cm.g.doubleclick.net *.smaato.net *.rubiconproject.com *.outbrain.com *.bidswitch.net *.adnxs.com *.teads.tv *.yahoo.com *.casalemedia.com *.contextual.media.net *.smartadserver.com *.360yield.com *.openx.net *.pubmatic.com *.taboola.com *.3lift.com *.advertising.com *.adscale.de *.omnitagjs.com *.criteo.com *.socdm.com *.yieldlab.net *.mail.ru 'self' 'unsafe-inline'; script-src www.googleadservices.com www.google-analytics.com s.ytimg.com video.google.com vimeo.com www.vimeo.com www.youtube.com r1-t.trackedlink.net r2-t.trackedlink.net r3-t.trackedlink.net r1.trackedweb.net r2.trackedweb.net r3.trackedweb.net static.trackedweb.net maps.googleapis.com maps.gstatic.com fonts.googleapis.com cdn.dnky.co api.comapi.com webchat.dotdigital.com www.google.com www.gstatic.com *.elfsight.com www.googletagmanager.com connect.facebook.net connect.facebook.com *.hotjar.com *.pinimg.com *.trackedlink.net *.sumo.com *.criteo.net *.criteo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src getfirebug.com fonts.googleapis.com cdn.dnky.co webchat.dotdigital.com fonts.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src r1-t.trackedlink.net r2-t.trackedlink.net r3-t.trackedlink.net r1.trackedweb.net r2.trackedweb.net r3.trackedweb.net static.trackedweb.net api.comapi.com webchat.dotdigital.com apps.elfsight.com www.google-analytics.com stats.g.doubleclick.net ct.pinterest.com *.hotjar.com api.instacloud.io 'self' 'unsafe-inline'; child-src 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Vary: Accept-Encoding
Accept-Ranges: bytes
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Referrer-Policy: strict-origin-when-cross-origin
Permissions-Policy: accelerometer=();autoplay=*;camera=();document-domain=(self);encrypted-media=();fullscreen=*;geolocation=(self);gyroscope=();magnetometer=();microphone=();midi=();payment=();picture-in-picture=();publickey-credentials-get=();sync-xhr=(self);usb=();screen-wake-lock=();xr-spatial-tracking=();