Cache-Control: max-age=165, public Content-Type: text/html; charset=UTF-8 Vary: Accept-Encoding ETag: "37bc66a41aa512fded85d9d56b49e70c" Expires: Thu, 08 Jun 2017 07:47:14 GMT X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff HTTP/1.1 200 OK X-XSS-Protection: 1; mode=block Connection: keep-alive Content-Security-Policy: default-src 'self'; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: https://www.gstatic.com/ https://www.google.com/ https://ajax.googleapis.com/ajax/ https://www.gstatic.com/charts/ https://www.google-analytics.com/ https://platform.twitter.com https://cdn.syndication.twimg.com https://api.userlike.com/ https://s3-eu-west-1.amazonaws.com https://*.s3-eu-west-1.amazonaws.com https://*.cloudfront.net/ https://cdnjs.cloudflare.com/ https://assets.zendesk.com/ https://*.zopim.com/ https://js.hs-scripts.com/3307911.js https://js.hs-analytics.net/ https://js.hsleadflows.net/leadflows.js https://api.usemessages.com/messages/v2/embed/3307911.js https://js.hscollectedforms.net/collectedforms.js; img-src 'self' data: https://ssl.google-analytics.com https://www.google-analytics.com/ https://ajax.googleapis.com https://arkahost.com/ https://*.cloudfront.net/ https://secure.gravatar.com https://www.gravatar.com/avatar/ https://stats.g.doubleclick.net/ https://s.w.org/images/core/emoji/ https://syndication.twitter.com https://*.twimg.com https://platform.twitter.com/css/ http://api.devn.co https://cdn.whmcs.com https://*.zopim.com/ https://v2assets.zopim.io/ https://pixabay.com/get/ https://www.paypal.com/ https://track.hubspot.com/ https://ssl-vg03.met.vgwort.de/; style-src 'self' 'unsafe-inline' data: https://ajax.googleapis.com https://www.google.com/uds/ https://fonts.googleapis.com https://www.gstatic.com/charts/ https://platform.twitter.com/css/ https://cdnjs.cloudflare.com; font-src 'self' data: https://fonts.gstatic.com https://*.cloudfront.net/ https://cdnjs.cloudflare.com https://*.zopim.com/; child-src 'self' https://www.google.com/maps/ https://www.google.com/recaptcha/ https://assets.zendesk.com/; connect-src 'self' https://spacehost.zendesk.com/ https://*.zopim.com/ wss://*.zopim.com/ https://forms.hubspot.com/; media-src 'self' https://v2.zopim.com/widget/sounds/ Server: nginx X-Pingback: https://spacehost.de/blog/xmlrpc.php Date: Thu, 08 Jun 2017 07:44:30 GMT Last-Modified: Thu, 08 Jun 2017 06:47:14 GMT Strict-Transport-Security: max-age=31536000; preload Transfer-Encoding: chunked Expect-CT: enforce; max-age=30; report-uri=https://spacehost.de/reportExpectCT Pragma: public Vary: Accept-Encoding Referrer-Policy: origin-when-cross-origin