| date: |
Tue, 08 Oct 2024 07:00:18 GMT |
| content-type: |
text/html; charset=UTF-8 |
| transfer-encoding: |
chunked |
| connection: |
close |
| set-cookie: |
PHPSESSID=0ucjtdbinqv59g29m61shcob41; expires=Tue, 08-Oct-2024 11:00:17 GMT; Max-Age=14400; path=/; domain=xandres.com; secure; HttpOnly; SameSite=Lax |
| content-security-policy-report-only: |
font-src fonts.googleapis.com fonts.gstatic.com *.gstatic.com 'self' data: https://widgets.trustedshops.com *.tradetracker.net *.tradetracker.com *.hotjar.com *.kickbite.io *.useinsider.com *.trackedlink.net *.ftz.io *.fitizzy.com *.xandres.com *.geojs.io data: 'self' 'unsafe-inline'; form-action www.facebook.com sc-static.net *.onetrust.com *.useinsider.com *.cookiepro.com *.doubleclick.net tr.snapchat.com *.tradetracker.net *.tradetracker.com *.hotjar.com *.kickbite.io *.trackedlink.net *.ftz.io *.fitizzy.com *.xandres.com *.geojs.io 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src bid.g.doubleclick.net www.youtube.com *.youtube-nocookie.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ www.googletagmanager.com js.mollie.com www.google.com *.weltpixel.com *.hotjar.com www.facebook.com *.criteo.com view.publitas.com sc-static.net *.eu.freshchat.com *.eu.webpush.freshchat.com static.criteo.net *.onetrust.com *.useinsider.com *.cookiepro.com *.doubleclick.net tr.snapchat.com getflowbox.com app.acuityscheduling.com *.tradetracker.net *.tradetracker.com *.kickbite.io *.pinterest.com *.mollie.com *.trackedlink.net *.ftz.io *.fitizzy.com xandres-help.freshchat.com *.xandres.com *.geojs.io *.adform.net 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.youtube.com maps.googleapis.com maps.gstatic.com https://www.mollie.com https://api.mapbox.com *.hsforms.net *.hsforms.com 'self' data: https://widgets.trustedshops.com https://widgets-qa.trustedshops.com *.doubleclick.net *.cdninstagram.com www.google.be connect.facebook.net www.facebook.net connect.facebook.com www.facebook.com ct.pinterest.com *.pinterest.com *.adform.net *.yieldmo.com *.smaato.net *.rubiconproject.com *.outbrain.com *.bidswitch.net *.adnxs.com *.teads.tv *.yahoo.com *.casalemedia.com *.contextual.media.net *.smartadserver.com *.360yield.com *.openx.net *.pubmatic.com *.taboola.com *.3lift.com *.advertising.com *.adscale.de *.omnitagjs.com *.criteo.com *.socdm.com *.yieldlab.net *.mail.ru *.cloudfront.net *.mollie.com *.ivitrack.com *.media.net *.sharethrough.com ade.clmbtech.com cm.mgid.com sync.e-planning.net ads.stickyadstv.com i.liadm.com ad.sxp.smartclip.net pixel.tapad.com dpm.demdex.net tags.bluekai.com s.thebrighttag.com a.twiago.com sync-tm.everesttech.net idsync.rlcdn.com cdn.stickyadstv.com sync.ad-stir.com jadserve.postrelease.com *.onetrust.com *.useinsider.com *.cookiepro.com bat.bing.com tr.snapchat.com *.getflowbox.com *.wisepops.com *.tradetracker.net *.tradetracker.com *.hotjar.com *.kickbite.io *.google-analytics.com *.analytics.google.com *.trackedlink.net *.xandres.com *.ftz.io *.fitizzy.com *.geojs.io data: 'self' 'unsafe-inline'; script-src www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com s.ytimg.com www.googleapis.com player.vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ maps.googleapis.com maps.gstatic.com fonts.googleapis.com s7.addthis.com js.mollie.com *.google.com www.gstatic.com *.hsforms.net *.hsforms.com *.gstatic.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.elfsight.com connect.facebook.net connect.facebook.com *.hotjar.com *.pinimg.com *.trackedlink.net *.sumo.com *.criteo.net *.criteo.com *.wisepops.com view.publitas.com sc-static.net wchat.eu.freshchat.com assetscdn-wchat.eu.freshchat.com *.eu.webpush.freshchat.com *.onetrust.com *.useinsider.com *.cookiepro.com *.doubleclick.net bat.bing.com embed.acuityscheduling.com *.getflowbox.com *.tiktok.com *.tradetracker.net *.tradetracker.com *.kickbite.io *.mollie.com *.ftz.io *.fitizzy.com d5yoctgpv4cpx.cloudfront.net vimeo.com xandres-help.freshchat.com *.xandres.com *.geojs.io *.adform.net connect.getflowbox.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com *.googleapis.com *.gstatic.com https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com fonts.gstatic.com embed.acuityscheduling.com *.getflowbox.com *.useinsider.com *.wisepops.com wchat.eu.freshchat.com assetscdn-wchat.eu.freshchat.com *.tradetracker.net *.tradetracker.com *.hotjar.com *.kickbite.io *.trackedlink.net *.ftz.io *.fitizzy.com xandres-help.freshchat.com *.xandres.com *.geojs.io 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.vimeo.com ekr.zdassets.com/ autocomplete2.postdirekt.de t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com *.trustedshops.com *.etrusted.com https://integrations.etrusted.site apps.elfsight.com *.analytics.google.com maps.googleapis.com *.doubleclick.net ct.pinterest.com *.hotjar.com wss://*.hotjar.com *.hotjar.io sumo.com api.instacloud.io *.wisepops.com cicptqmkej.execute-api.eu-west-1.amazonaws.com *.onetrust.com *.useinsider.com *.cookiepro.com *.getflowbox.com *.tiktok.com *.tradetracker.net *.tradetracker.com *.kickbite.io *.trackedlink.net *.ftz.io *.fitizzy.com rkkck31tec.execute-api.eu-central-1.amazonaws.com *.xandres.com *.geojs.io *.adform.net connect.getflowbox.com 9mn3sm7015.execute-api.eu-west-1.amazonaws.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; |
| x-content-type-options: |
nosniff |
| x-xss-protection: |
1; mode=block |
| x-frame-options: |
SAMEORIGIN, SAMEORIGIN |
| pragma: |
no-cache |
| expires: |
-1 |
| cache-control: |
no-store, no-cache, must-revalidate, max-age=0 |
| strict-transport-security: |
max-age=31536000; includeSubDomains |
| referrer-policy: |
strict-origin-when-cross-origin |
| permissions-policy: |
accelerometer=(),autoplay=*,camera=(),document-domain=(self),encrypted-media=(),fullscreen=*,geolocation=(self),gyroscope=(),magnetometer=(),microphone=(),midi=(),payment=(),picture-in-picture=(),publickey-credentials-get=(),sync-xhr=(self),usb=(),screen-wake-lock=(),xr-spatial-tracking=() |
| cf-cache-status: |
DYNAMIC |
| report-to: |
{"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lIIYE%2Fp9%2BYe7CUngaeOift3rKVHIXKRHFN9uq%2FY9uoZDIu3BQ5YOXtIe0snpMfXMQzRBTml7kBGJ6XnDcbay9SDb0MQ4gYvP%2FSOSunmhvGIpuBnQpXw1atQ570iOmIy28D8%3D"}],"group":"cf-nel","max_age":604800} |
| nel: |
{"success_fraction":0,"report_to":"cf-nel","max_age":604800} |
| speculation-rules: |
"/cdn-cgi/speculation" |
| server: |
cloudflare |
| cf-ray: |
8cf440c6ea62b97b-AMS |
|
