Monese.com

date: Mon, 28 Nov 2022 11:51:41 GMT
server: nginx
content-security-policy: default-src 'self' 'unsafe-inline';script-src 'self' https://optimize.google.com/optimize/editor/js/js.js https://optimize.google.com https://assets.ctfassets.net *.adalyser.com/adalyser.js *.amplify.outbrain.com *.trustpilot.com *.zdassets.com *.outbrain.com/ *.googletagmanager.com *.google-analytics.com *.googleadservices.com https://www.youtube.com https://player.vimeo.com https://connect.facebook.net http://platform.twitter.com https://a.quora.com *.hotjar.com *.analytics.twitter.com http://cdn.mxpnl.com http://bat.bing.com/bat.js https://googleads.g.doubleclick.net https://script.hotjar.com *.ads-twitter.com http://widgets.getsitecontrol.com https://analytics.twitter.com https://d3tcnne2px03ip.cloudfront.net/landing-page-monese/ https://tyviso.com/rewards-page/ https://tyviso-rewards-page.netlify.app/ 'unsafe-inline' 'unsafe-eval';font-src 'self' data: https://d3tcnne2px03ip.cloudfront.net/landing-page-monese/;connect-src 'self' https://tyviso-rewards-page.netlify.app/ https://tyviso-rewards.netlify.app/;style-src-elem 'self' https://d3tcnne2px03ip.cloudfront.net/landing-page-monese/ https://tyviso-rewards-page.netlify.app/ 'unsafe-inline';style-src 'self' https://d3tcnne2px03ip.cloudfront.net/landing-page-monese/ https://tyviso-rewards-page.netlify.app/ 'unsafe-inline';img-src 'self' https://d3tcnne2px03ip.cloudfront.net/landing-page-monese/ https://www.google-analytics.com/collect https://tyviso.fra1.digitaloceanspaces.com/tyviso/rewards/;frame-src 'self' https://d3tcnne2px03ip.cloudfront.net/
x-dns-prefetch-control: off
expect-ct: max-age=0
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-download-options: noopen
x-content-type-options: nosniff
x-permitted-cross-domain-policies: none
referrer-policy: no-referrer
x-xss-protection: 0
access-control-allow-origin: same-origin
cross-origin-opener-policy: *
location: /gb/en
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
permissions-policy: geolocation=(), camera=(), speaker=(), microphone=()

HTTP/2 200 
date: Mon, 28 Nov 2022 11:51:41 GMT
content-type: text/html; charset=utf-8
server: nginx
content-security-policy: script-src 'self' https://optimize.google.com/optimize/editor/js/js.js https://optimize.google.com https://assets.ctfassets.net *.adalyser.com/adalyser.js *.amplify.outbrain.com *.trustpilot.com *.zdassets.com *.outbrain.com/ *.googletagmanager.com *.google-analytics.com *.googleadservices.com https://d3tcnne2px03ip.cloudfront.net/ https://www.youtube.com https://player.vimeo.com https://connect.facebook.net http://platform.twitter.com https://a.quora.com *.hotjar.com *.analytics.twitter.com http://cdn.mxpnl.com http://bat.bing.com/bat.js https://googleads.g.doubleclick.net https://script.hotjar.com *.ads-twitter.com http://widgets.getsitecontrol.com https://analytics.twitter.com https://tyviso.com/rewards-page/ *.visualwebsiteoptimizer.com app.vwo.com cdn.pushcrew.com 'unsafe-inline' 'unsafe-eval'; object-src none
x-dns-prefetch-control: off
expect-ct: max-age=0
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-download-options: noopen
x-content-type-options: nosniff
x-permitted-cross-domain-policies: none
referrer-policy: no-referrer
x-xss-protection: 0
access-control-allow-origin: same-origin
cross-origin-opener-policy: *
x-powered-by: Next.js
cache-control: no-cache
vary: Accept-Encoding
content-encoding: gzip
expires: Thu, 01 Jan 1970 00:00:01 GMT
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
permissions-policy: geolocation=(), camera=(), speaker=(), microphone=()