Ytong.ba Summary

Date: Wed, 09 Dec 2020 07:33:20 GMT
Server: Apache
Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' 'self' https://cdn.mouseflow.com https://trackcmp.net https://*.adform.net https://connect.facebook.net https://pixel.mathtag.com https://googleads.g.doubleclick.net https://hermes.allo-media.net https://backoffice.xella.com https://www.googletagmanager.com https://www.googleadservices.com https://www.google.com https://www.google.de https://*.google-analytics.com https://*.hotjar.com https://*.getsitecontrol.com https://*.usercentrics.eu; 		frame-src https://multipor.b10calc.dk https://maps.google.de https://maps.google.com https://www.youtube-nocookie.com https://*.hotjar.com https://marketing.xella.cz https://backoffice.xella.com https://www.google.com http://www.youtube.com https://www.youtube.com https://www.facebook.com https://www.bimobject.com https://bimobject.com https://app.usercentrics.eu; 		img-src data: blob: 'self' https://aaa.bisnode.si https://*.getsitecontrol.com https://cdn.midas-network.com https://sistem.ytong.rs https://pixel.mathtag.com https://www.facebook.com www.googletagmanager.com https://googleads.g.doubleclick.net https://www.google.com https://www.google.de https://*.usercentrics.eu https://*.google-analytics.com; 		object-src 'none'
Set-Cookie: PHPSESSID=o7ij2pp22tl6bnqiq0ko0gtn30; path=/; secure; HttpOnly
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Vary: Accept-Encoding
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-Robots-Tag: all
X-Download-Options: noopen
X-Permitted-Cross-Domain-Policies: none
X-XSS-Protection: 1; mode=block
Referrer-Policy: no-referrer
X-Content-Type-Options: nosniff
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
x-encoded-content-encoding: gzip
x-encoded-content-length: 6920