Set-Cookie: tipp24_visitor=NEW_VISITOR;Max-Age=31536000;path=/
Strict-Transport-Security: max-age=15724800; includeSubDomains;
Server: nginx/1.13.3
HTTP/1.1 200
Expires: 0
X-XSS-Protection: 1; mode=block
Set-Cookie: sessionid=afa31a70-4eec-4dc0-b36e-71026b168767;path=/;Secure;HttpOnly
X-Content-Type-Options: nosniff
Pragma: no-cache
Vary: Accept-Encoding
Set-Cookie: X-CSRF-TOKEN=b00d3cdd-e4ef-4428-ab47-e510c054a160;path=/;Secure
Transfer-Encoding: chunked
X-Application-Context: cara:prod:9000
Date: Sun, 12 Nov 2017 15:32:46 GMT
Content-Type: text/html;charset=UTF-8
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Content-Security-Policy: default-src 'self' data: blob:;report-uri https://tipp24.report-uri.io/r/default/csp/enforce;script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' *.adform.net *.bing.com *.cloudflare.com *.cloudfront.net *.criteo.com *.criteo.net *.doubleclick.net *.facebook.com *.facebook.net *.getmdl.io *.getsentry.com *.globalsign.com *.google.com *.google-analytics.com *.googleadservices.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.hotjar.com cdn.jsdelivr.net *.m6r.eu *.maxymiser.net *.mylotto24.co.uk *.mylotto24.com.au *.mylotto24.ie *.mxpnl.com *.optimizely.com *.sovendus.com *.tipp24.com *.tipp24.ie *.tipp24.net *.trustedshops.com *.usabilla.com *.userlike.com userlike-cdn-widgets.s3-eu-west-1.amazonaws.com *.yahoo.com *.yimg.com *.onesignal.com ;frame-src 'self' https: *.adform.net *.computop-paygate.com *.criteo.com *.google.com *.netkauf.de api.sovendus.com *.optimizely.com ;child-src 'self' https: *.adform.net *.computop-paygate.com *.criteo.com *.google.com *.netkauf.de api.sovendus.com *.optimizely.com ;style-src data: 'unsafe-inline' 'self' *.adform.net *.cloudflare.net *.cloudfront.net *.getmdl.io *.google.com *.googleapis.com *.gstatic.com *.optimizely.com *.trustedshops.com ; font-src data: *.cloudfront.net *.googleapis.com *.gstatic.com *.trustedshops.com ; img-src * 'self' data: blob: ;connect-src * 'self' *.adform.net *.bing.com *.criteo.net *.facebook.com *.facebook.net *.getsentry.com *.google.com *.googleapis.com *.google-analytics.com *.googletagmanager.com *.hotjar.com *.optimizely.com *.sentry.io *.taboola.com *.trustedshops.com *.usabilla.com *.onesignal.com ;
Content-Language: en-IE