Zaunonline.de

server: nginx
date: Mon, 13 Mar 2023 13:42:07 GMT
content-type: text/html
content-length: 162
location: https://www.zaunonline.de/
strict-transport-security: max-age=31536000;

HTTP/2 200 
server: nginx
date: Mon, 13 Mar 2023 13:42:08 GMT
content-type: text/html; charset=UTF-8
content-length: 38033
report-to: {"group":"report-endpoint","max_age":10886400,"endpoints":[{"url":"http://csp-reporting-service.com/my-project/endpoint"}]}
content-security-policy: font-src fonts.gstatic.com *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.fontawesome.com maxcdn.bootstrapcdn.com *.cloudflare.com *.twitter.com *.typekit.net *.twimg.com *.trustedshops.com *.googleapis.com *.criteo.net *.criteo.com *.trustpilot.com v2.zopim.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.facebook.com *.twitter.com *.criteo.net *.criteo.com *.trustpilot.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com static.criteo.net 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ www.google.com *.google.com *.doubleclick.net *.facebook.com *.twitter.com *.reginox.nl sibautomation.com *.hotjar.com *.criteo.net *.yieldlab.net *.criteo.com *.trustpilot.com *.paypal.com gum.criteo.com vars.hotjar.com *.pinterest.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io data: www.google.nl *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.gstatic.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com *.sooqr.com flagpedia.net https://www.mollie.com *.cloudflare.com *.klarna.com *.googleadservices.com *.google-analytics.com *.paypal.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.reginox.nl *.bing.com *.google.nl *.krxd.net id5-sync.com *.yieldlab.net *.criteo.com *.criteo.net *.trustpilot.com *.semasio.net www.magmodules.eu *.squeezely.tech www.hekwerkonline.nl hekwerkonline.test hekwerkonline20.hypernode.io bat.bing.com t.squeezely.tech secure.adnxs.com ib.adnxs.com simage2.pubmatic.com criteo-sync.teads.tv matching.ivitrack.com visitor.omnitagjs.com ads.stickyadstv.com jadserve.postrelease.com ad.sxp.smartclip.net criteo-partners.tremorhub.com ade.clmbtech.com gum.criteo.com ads.yieldmo.com s.thebrighttag.com tags.bluekai.com sync.ad-stir.com pixel.tapad.com ds1.nl tm-tradetracker.net cdn.consentmanager.mgr.consensu.org consentmanager.mgr.consensu.org cdn.stickyadstv.com ct.pinterest.com c.bing.com s.ad.smaato.net pixel.rubiconproject.com sync.outbrain.com rtb-csync.smartadserver.com contextual.media.net ad.360yield.com r.casalemedia.com eb2.3lift.com cm.adform.net x.bidswitch.net match.sharethrough.com exchange.mediavine.com sync-t1.taboola.com sync-criteo.ads.yieldmo.com i.liadm.com e1.emxdgt.com ups.analytics.yahoo.com sp.analytics.yahoo.com dis.criteo.com ads.yahoo.com *.cloudfront.net *.amazonaws.com widgets.trustedshops.com *.google.de *.google.co.uk *.fenceweb.com *.zaunonline.de *.fenceonline.co.uk *.giphy.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ cdn.ampproject.org raw.githubusercontent.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.google.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com chimpstatic.com downloads.mailchimp.com *.list-manage.com https://cdn.polyfill.io https://browser.sentry-cdn.com *.sooqr.com js.mollie.com *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.chimpstatic.com *.hotjar.com *.bing.com sibautomation.com *.opmnstr.com *.feedbackcompany.com *.criteo.com *.yieldlab.net *.trustpilot.com squeezely.tech www.squeezely.tech *.squeezely.tech rum-static.pingdom.net *.zopim.com *.criteo.net static.sooqr.com static.zdassets.com bat.bing.com static.buckaroo.nl maps.googleapis.com tm-tradetracker.net *.authorize.net cdn.consentmanager.mgr.consensu.org consentmanager.mgr.consensu.org googleoptimize.com www.googleoptimize.com s.pinimg.com static.hotjar.com script.hotjar.com *.googleapis.com *.trengo.eu *.widget.trengo.eu *.lr-ingest.io *.google.de *.google.nl *.google.co.uk *.pusher.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com downloads.mailchimp.com *.fontawesome.com *.sooqr.com maxcdn.bootstrapcdn.com *.cloudflare.com *.twitter.com *.twimg.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.omappapi.com *.trustpilot.com *.criteo.net *.criteo.com static.sooqr.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.trengo.eu *.widget.trengo.eu 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com cdn.ampproject.org *.google-analytics.com *.facebook.com *.facebook.net *.google.com https://*.ingest.sentry.io www.gstatic.com *.cloudflare.com *.twitter.com *.paypal.com *.twimg.com *.omappapi.com *.doubleclick.net *.feedbackcompany.com *.sendinblue.com *.hotjar.com wss://*.hotjar.com *.trustpilot.com *.criteo.net *.criteo.com squeezely.tech *.squeezely.tech *.zdassets.com wss://widget-mediator.zopim.com/ stats.g.doubleclick.net cognito-identity.eu-central-1.amazonaws.com rum-collector-2.pingdom.net cdn.consentmanager.mgr.consensu.org ct.pinterest.com vars.hotjar.com *.trengo.eu *.widget.trengo.eu content.hotjar.io *.lr-ingest.io *.hotjar.io *.pusher.com *.amazonaws.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri http://csp-reporting-service.com/my-project/endpoint; report-to report-endpoint;
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
content-encoding: gzip
vary: Accept-Encoding
age: 238
x-magento-cache-debug: HIT
grace: none
pragma: no-cache
expires: -1
cache-control: no-store, no-cache, must-revalidate, max-age=0
accept-ranges: bytes
strict-transport-security: max-age=31536000;