| Server | nginx/1.13.3 |
| Content-Type | text/html;charset=UTF-8 |
| Transfer-Encoding | chunked |
| X-Content-Type-Options | nosniff |
| X-XSS-Protection | 1; mode=block |
| Cache-Control | no-cache, no-store, max-age=0, must-revalidate |
| Pragma | no-cache |
| Expires | 0 |
| Strict-Transport-Security | max-age=15724800; includeSubDomains; |
| Content-Security-Policy | default-src 'self' data: blob:;report-uri https://tipp24.report-uri.io/r/default/csp/enforce;script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' *.adform.net *.bing.com *.cloudflare.com *.cloudfront.net *.criteo.com *.criteo.net *.doubleclick.net *.facebook.com *.facebook.net *.getmdl.io *.getsentry.com *.globalsign.com *.google.com *.google-analytics.com *.googleadservices.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.hotjar.com cdn.jsdelivr.net *.m6r.eu *.maxymiser.net *.mylotto24.co.uk *.mylotto24.com.au *.mylotto24.ie *.mxpnl.com *.optimizely.com *.sovendus.com *.tipp24.com *.tipp24.ie *.tipp24.net *.trustedshops.com *.usabilla.com *.userlike.com userlike-cdn-widgets.s3-eu-west-1.amazonaws.com *.yahoo.com *.yimg.com *.onesignal.com ;frame-src 'self' https: *.adform.net *.computop-paygate.com *.criteo.com *.google.com *.netkauf.de api.sovendus.com *.optimizely.com ;child-src 'self' https: *.adform.net *.computop-paygate.com *.criteo.com *.google.com *.netkauf.de api.sovendus.com *.optimizely.com ;style-src data: 'unsafe-inline' 'self' *.adform.net *.cloudflare.net *.cloudfront.net *.getmdl.io *.google.com *.googleapis.com *.gstatic.com *.optimizely.com *.trustedshops.com ; font-src data: *.cloudfront.net *.googleapis.com *.gstatic.com *.trustedshops.com ; img-src * 'self' data: blob: ;connect-src * 'self' *.adform.net *.bing.com *.criteo.net *.facebook.com *.facebook.net *.getsentry.com *.google.com *.googleapis.com *.google-analytics.com *.googletagmanager.com *.hotjar.com *.optimizely.com *.sentry.io *.taboola.com *.trustedshops.com *.usabilla.com *.onesignal.com ; |
| X-Application-Context | cara:prod:9000 |
| Content-Language | en-IE |
| Content-Encoding | gzip |
| Vary | Accept-Encoding |