Brennenstuhl.it

content-security-policy: default-src 'self' *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.mouseflow.com *.amazon-adsystem.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.google-analytics.com sibautomation.com *.googletagmanager.com *.youtube.com *.facebook.net vjs.zencdn.net amazon-adsystem.com maps.googleapis.com *.mouseflow.com *.amazon-adsystem.com *.googleadservices.com *.doubleclick.net *.google.com *.google.de; connect-src 'self' *.googleapis.com *.google-analytics.com *.google.com *.google.de *.doubleclick.net *.doubleclick.com *.sendinblue.com pro.ip-api.com *.mouseflow.com *.deepl.com; style-src 'self' 'unsafe-inline' cloud.typenetwork.com fonts.googleapis.com; img-src 'self' *.webtype.com *.youtube.com *.facebook.com *.google-analytics.com *.googletagmanager.com maps.gstatic.com maps.googleapis.com shoplogos.commerce-connector.de aax-eu.amazon-adsystem.com versandhandel.dimdi.de *.doubleclick.net *.google.com *.google.de data:; font-src 'self' fastly-cloud.typenetwork.com fonts.gstatic.com data:; frame-src 'self' 'unsafe-inline' 'unsafe-eval' sibautomation.com *.facebook.com *.youtube.com *.youtube-nocookie.com player.vimeo.com aax-eu.amazon-adsystem.com *.doubleclick.net;
strict-transport-security: max-age=15768000;includeSubDomains
x-xss-protection: 1; mode=block
x-dns-prefetch-control: off
x-content-type-options: nosniff
x-frame-options: sameorigin
referrer-policy: same-origin
permissions-policy: notifications=(self), push=(self)
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
set-cookie: skin=website; path=/
set-cookie: lang[website]=it; path=/
set-cookie: lang[checkout]=it; path=/
set-cookie: lang[mobile]=it; path=/
set-cookie: lang[mobile_checkout]=it; path=/
set-cookie: country=it; path=/
set-cookie: site=0; path=/
set-cookie: session_bren2017=f4srukvbhbc1d99obldhijcjlc; expires=Tue, 27-Jun-2023 22:23:03 GMT; Max-Age=604800; path=/; secure; HttpOnly
location: https://www.brennenstuhl.it/
x-ua-compatible: IE=edge
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
access-control-allow-origin: https://service.brennenstuhl.com
x-content-type-options: nosniff
cache-control: no-transform
content-length: 0
content-type: text/html; charset=UTF-8
date: Tue, 20 Jun 2023 22:23:03 GMT
server: Apache/2.4.56 (Debian)

HTTP/2 200 
content-security-policy: default-src 'self' *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.mouseflow.com *.amazon-adsystem.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.google-analytics.com sibautomation.com *.googletagmanager.com *.youtube.com *.facebook.net vjs.zencdn.net amazon-adsystem.com maps.googleapis.com *.mouseflow.com *.amazon-adsystem.com *.googleadservices.com *.doubleclick.net *.google.com *.google.de; connect-src 'self' *.googleapis.com *.google-analytics.com *.google.com *.google.de *.doubleclick.net *.doubleclick.com *.sendinblue.com pro.ip-api.com *.mouseflow.com *.deepl.com; style-src 'self' 'unsafe-inline' cloud.typenetwork.com fonts.googleapis.com; img-src 'self' *.webtype.com *.youtube.com *.facebook.com *.google-analytics.com *.googletagmanager.com maps.gstatic.com maps.googleapis.com shoplogos.commerce-connector.de aax-eu.amazon-adsystem.com versandhandel.dimdi.de *.doubleclick.net *.google.com *.google.de data:; font-src 'self' fastly-cloud.typenetwork.com fonts.gstatic.com data:; frame-src 'self' 'unsafe-inline' 'unsafe-eval' sibautomation.com *.facebook.com *.youtube.com *.youtube-nocookie.com player.vimeo.com aax-eu.amazon-adsystem.com *.doubleclick.net;
strict-transport-security: max-age=15768000;includeSubDomains
x-xss-protection: 1; mode=block
x-dns-prefetch-control: off
x-content-type-options: nosniff
x-frame-options: sameorigin
referrer-policy: same-origin
permissions-policy: notifications=(self), push=(self)
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
set-cookie: skin=website; path=/
set-cookie: lang[website]=it; path=/
set-cookie: lang[checkout]=it; path=/
set-cookie: lang[mobile]=it; path=/
set-cookie: lang[mobile_checkout]=it; path=/
set-cookie: country=it; path=/
set-cookie: site=0; path=/
set-cookie: session_bren2017=ue39uru0nc2sfh67bcklsnvd2b; expires=Tue, 27-Jun-2023 22:23:04 GMT; Max-Age=604800; path=/; secure; HttpOnly
vary: Accept-Encoding
content-encoding: gzip
x-ua-compatible: IE=edge
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
access-control-allow-origin: https://service.brennenstuhl.com
x-content-type-options: nosniff
cache-control: no-transform
content-length: 15619
content-type: text/html; charset=UTF-8
date: Tue, 20 Jun 2023 22:23:04 GMT
server: Apache/2.4.56 (Debian)