Bluefireco.com

server: nginx/1.14.1
date: Fri, 17 Jan 2025 16:15:34 GMT
content-type: text/html; charset=iso-8859-1
content-length: 235
location: https://www.bluefireco.com/
x-cache: HIT from Backend
strict-transport-security: max-age=31536000
x-content-type-options: nosniff

HTTP/2 200 
server: nginx/1.14.1
date: Fri, 17 Jan 2025 16:15:34 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
link: </static/version1734084472/_cache/merged/d97b5250e6c83834393cb7325e1f5534.js>; rel=preload; as=script, </static/version1734084472/_cache/merged/157db09cf3290db8354b4bda45ac0d4d.min.css>; rel=preload; as=style, </static/version1734084472/frontend/Bluefire/default/de_DE/css/styles-l.min.css>; rel=preload; as=style, </static/version1734084472/frontend/Bluefire/default/de_DE/css/print.min.css>; rel=preload; as=style
pragma: no-cache
cache-control: max-age=0, must-revalidate, no-cache, no-store
expires: Wed, 17 Jan 2024 16:10:05 GMT
content-security-policy: font-src *.googleapis.com *.gstatic.com *.fontawesome.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com player.vimeo.com https://www.google.com/recaptcha/ *.google.com/ js.mollie.com js.klarna.com www.xtento.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.youtube.com *.googleapis.com *.gstatic.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com https://www.magezon.com https://www.mollie.com www.google.de *.cdninstagram.com maps.gstatic.com maps.google.com fonts.googleapis.com fonts.gstatic.com *.klarnacdn.net www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.googleapis.com *.gstatic.com chimpstatic.com downloads.mailchimp.com *.list-manage.com https://unpkg.com *.google.com/ js.mollie.com maps.googleapis.com *.klarnacdn.net eu.klarnaevt.com stats.g.doubleclick.net www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com downloads.mailchimp.com *.fontawesome.com maxcdn.bootstrapcdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com vimeo.com *.googleapis.com graph.instagram.com maps.googleapis.com fonts.googleapis.com fonts.gstatic.com *.klarnacdn.net eu.klarnaevt.com stats.g.doubleclick.net 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
set-cookie: PHPSESSID=clok94b3a8g1vu1un7jfmlv20a; expires=Sat, 18 Jan 2025 16:15:34 GMT; Max-Age=86400; path=/; domain=.bluefireco.com; secure; HttpOnly; SameSite=Lax
x-ua-compatible: IE=edge
x-frame-options: SAMEORIGIN
x-cache: HIT from Backend
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-encoding: gzip