x-iceberg-dc: |
eu-central-1 |
link: |
<https://web.static.nowtv.com/>; rel="preconnect", <https://images.metadata.sky.com/>; rel="preconnect", <https://imageservice.sky.com/>; rel="preconnect", <https://ie.api.atom.nowtv.com/>; rel="preconnect" <https://ottsas.sky.com/>; rel="preconnect" <https://uiapi.id.nowtv.com/>; rel="preconnect" <https://sas-apm.telem.prod.ott.sky/>; rel="preconnect" |
access-control-allow-origin: |
* |
access-control-allow-headers: |
X-Requested-With |
content-type: |
text/html; charset=utf-8 |
expires: |
Tue, 01 Oct 2024 01:45:57 GMT |
cache-control: |
max-age=0, no-cache |
pragma: |
no-cache |
date: |
Tue, 01 Oct 2024 01:45:57 GMT |
transfer-encoding: |
chunked |
connection: |
close, Transfer-Encoding |
set-cookie: |
_dyjsession=qb84z32did83p2lc51b80dvn9tzbxro1; Max-Age=-1; Domain=nowtv.com; Path=/,_dyid_server=-5237685415716367275; Domain=nowtv.com; Path=/,_dyjsession=qb84z32did83p2lc51b80dvn9tzbxro1; Max-Age=-1; Domain=nowtv.com; Path=/,_dyid_server=-5237685415716367275; Domain=nowtv.com; Path=/,userTerritory=NL; path=/; domain=.nowtv.com |
via: |
akamai |
content-security-policy: |
default-src https://*.nowtv.com; form-action https://tr.snapchat.com https://nowtv.secure.force.com https://nowtv.my.salesforce.com https://nowtv.my.salesforce-sites.com https://www.facebook.com; font-src 'self' https://*.nowtv.com https://www.sky.com https://static.skyassets.com https://*.leadoo.com https://cdn-eu.dynamicyield.com https://fonts.gstatic.com https://use.fontawesome.com https://cdn.braze.eu data: https://tr.snapchat.com https://*.smct.co https://*.smct.io https://fonts.gstatic.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://web.static.nowtv.com https://cdn3.optimizely.com https://cdn.optimizely.com https://cmp.sky.de https://cdn-eu.dynamicyield.com https://cdn.dynamicyield.com https://st-eu.dynamicyield.com https://*.content-square.fr https://*.contentsquare.net https://analytics.global.sky.com https://*.demdex.net https://d3c3cq33003psk.cloudfront.net https://connect.facebook.net https://static.ads-twitter.com https://analytics.twitter.com https://*.doubleclick.net https://www.googleadservices.com https://*.myvisualiq.net https://www.dwin1.com https://www.zenaps.com https://polyfill.io https://browser.sentry-cdn.com https://whatfix.com https://*.salesforce.com https://*.salesforceliveagent.com https://nowtv.my.salesforce.com https://*.force.com https://*.salesforce-sites.com https://opentag-stats.qubit.com https://*.sp-prod.net https://smetrics.sky.com https://smetrics.nowtv.com https://cdn.privacy-mgmt.com https://assets.adobedtm.com https://tapestry.tapad.com https://bat.bing.com https://www.googletagmanager.com https://help.nowtv.com https://core.spreedly.com https://the.sciencebehindecommerce.com https://*.klarnacdn.net https://*.klarnaservices.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://sc-static.net https://cl.qualaroo.com/ https://help.stage.nowtv.com https://*.leadoo.com https://analytics.tiktok.com https://s.pinimg.com https://cdn.ravenjs.com https://www.google-analytics.com https://www.google.com https://secure.quantserve.com https://gdpr-tcfv2.sp-prod.net https://jssdkcdns.mparticle.com https://www.redditstatic.com https://www.paypal.com https://servedby.flashtalking.com https://tr.snapchat.com https://analytics.tiktok.com https://www.awin1.com https://www.paypalobjects.com https://ct.pinterest.com https://rules.quantcount.com https://conversions-config.reddit.com https://*.smct.co https://*.smct.io https://smct.co https://smct.io; connect-src 'self' https://*.nowtv.com https://*.optimizely.com https://direct.dy-api.eu https://direct-collect.dy-api.eu https://async-px-eu.dynamicyield.com https://rcom-eu.dynamicyield.com https://cmp.sky.de https://*.ottcds.com https://*.skycdc.com https://*.sky.at https://*.bskyb.com https://*.sky.com https://ott-clients.s3.amazonaws.com https://*.demdex.net https://graph.facebook.com https://connect.facebook.com https://*.contentsquare.net wss://*.nowtv.lightstreamer.com https://*.nowtv.lightstreamer.com wss://*.nowtv-dev.lightstreamer.com https://*.nowtv-dev.lightstreamer.com https://*.force.com https://*.salesforce.com https://*.salesforce-sites.com https://opentag-stats.qubit.com https://*.sp-prod.net https://sourcepoint.mgr.consensu.org https://cdn.privacy-mgmt.com https://dcd12547fac74c3cb90d3307a66b8089.apm.eu-west-1.aws.cloud.es.io https://9993578564234b6d9966074b92f26161.apm.us-east-1.aws.cloud.es.io https://cdn.privacy-mgmt.com https://bat.bing.com https://www.facebook.com https://the.sciencebehindecommerce.com https://sdk.fra-01.braze.eu https://*.klarnaevt.com https://*.klarnauserservices.com https://mytv.clients.stable-int.ott.sky wss://*.bskyb.com wss://*.nowtv.com https://tr.snapchat.com https://tr6.snapchat.com https://*.leadoo.com https://adm.dynamicyield.eu https://cdn-eu.dynamicyield.com https://cdn.dynamicyield.com https://px-eu.dynamicyield.com https://st-eu.dynamicyield.com https://analytics.tiktok.com https://dpm.demdex.net https://ct.pinterest.com https://*.mparticle.com https://checkoutshopper-test.adyen.com https://checkoutshopper-live.adyen.com https://www.paypal.com https://sas-apm.telem.prod.ott.sky https://google.com https://www.google.com https://analytics.pangle-ads.com https://adservice.google.com https://analytics.twitter.com https://t.co https://www.redditstatic.com https://googleads.g.doubleclick.net https://conversions-config.reddit.com https://www.google-analytics.com https://translate.googleapis.com https://auth.client.ott.sky.com https://pixel.quantcount.com https://*.smct.co https://*.smct.io https://smct.co https://smct.io https://logx.optimizely.com; img-src 'self' data: https://*.nowtv.com https://skyx.sky.at https://*.skyx.sky.at https://*.sky.com https://web.static.nowtv.com http://web.static.nowtv.com https://t.co https://www.facebook.com https://*.contentsquare.net https://www.awin1.com https://www.zenaps.com https://*.epgsky.com https://*.documentforce.com https://*.force.com https://*.salesforce.com https://*.salesforce-sites.com https://cm.everesttech.net https://*.demdex.net https://aa.agkn.com https://pm.w55c.net https://cm.everesttech.net https://*.adnxs.com https://*.doubleclick.net https://rtd.tubemogul.com https://analytics.twitter.com https://p.rfihub.com https://a.collective-media.net https://pixel.quantserve.com https://*.bing.com https://pixel.advertising.com https://image5.pubmatic.com https://a.tribalfusion.com https://cms.analytics.yahoo.com https://ups.analytics.yahoo.com https://odr.mookie1.com https://dmp.v.fwmrm.net https://sync-tm.everesttech.net https://spl.zeotap.com https://imageservice.sky.com https://uk.imageservice.sky.com https://ee1.uk.imageservice.sky.com http://ee1.uk.imageservice.sky.com https://smetrics.sky.com https://smetrics.nowtv.com https://*.myvisualiq.net https://tapestry.tapad.com https://www.googletagmanager.com https://google.com https://www.google.com https://www.google.co.uk https://bat.bing.com https://cx.atdmt.com https://cdn.braze.eu https://imageservice.sky.com http://imageservice.sky.com https://*.leadoo.com https://cdn.dynamicyield.com https://cdn-eu.dynamicyield.com https://analytics.tiktok.com https://s.pinimg.com https://events.smct.co https://res.newsletter.contact.sky https://ct.pinterest.com https://connect.facebook.net https://googleads.g.doubleclick.net https://www.pinterest.com https://t.myvisualiq.net https://www.gstatic.com https://www.redditstatic.com https://alb.reddit.com https://checkoutshopper-test.adyen.com https://checkoutshopper-live.adyen.com https://www.paypalobjects.com https://servedby.flashtalking.com https://*.mparticle.com https://match.adsrvr.org https://t.paypal.com https://www.googleadservices.com https://www.google.ie https://prreqcroab.icu https://conversions-config.reddit.com https://nbcstreaming.sc.omtrdc.net https://*.smct.co https://*.smct.io https://smct.co https://smct.io; style-src 'self' 'unsafe-inline' https://static.skyassets.com https://web.static.nowtv.com https://*.salesforce.com https://*.force.com https://*.salesforce-sites.com https://help.nowtv.com https://*.leadoo.com https://cdn-eu.dynamicyield.com https://cdn.dynamicyield.com https://fonts.googleapis.com https://use.fontawesome.com; media-src 'self' data: blob: distro002-gb-vod-prd-ak.cdn.skycdp.com https://*.sky.at https://*.nowtv.com; frame-src https://core.spreedly.com https://pay.sky.com https://signup.nowtv.com https://sas.nowtv.com https://ottsas.sky.com https://client-payments.ott.sky.com https://web.static.nowtv.com https://uat-p.ottsas.sky.com https://client-payments.pfunc.ott.sky.com https://ad3.adfarm1.adition.com https://vars.hotjar.com https://bskyb.demdex.net https://nowtv.my.salesforce.com https://nowtv.secure.force.com https://nowtv.my.salesforce-sites.com https://*.sp-prod.net https://cdn.privacy-mgmt.com https://*.fls.doubleclick.net https://td.doubleclick.net https://*.klarna.com https://*.klarnacdn.net https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://dntcl.qualaroo.com/ https://tr.snapchat.com https://js.smct.io https://js.smct.co https://www.zenaps.com https://checkoutshopper-test.adyen.com https://checkoutshopper-live.adyen.com https://www.paypal.com https://ct.pinterest.com https://www.youtube.com https://www.awin1.com https://www.paypalobjects.com https://td.doubleclick.net https://*.smct.co https://*.smct.io https://smct.co https://smct.io https://*.cdn.optimizely.com; worker-src blob:; upgrade-insecure-requests; |
strict-transport-security: |
max-age=15768000 ; includeSubDomains |
x-xss-protection: |
1; mode=block |
x-content-type-options: |
nosniff |
x-frame-options: |
sameorigin |