HTTP/1.1 200 OK
Cache-Control: private
Content-Type: text/html; charset=utf-8
Strict-Transport-Security: max-age=31536000
X-Frame-Options: SameOrigin
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Security-Policy: default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: ajax.aspnetcdn.com stats.g.doubleclick.net www.google-analytics.com ssl.google-analytics.com www.googletagmanager.com tagmanager.google.com www.googleadservices.com googleads.g.doubleclick.net www.google.com www.gstatic.com maps.googleapis.com www.youtube.com s.ytimg.com supertext.bamboohr.com https://localhost:44399 widget.intercom.io js.intercomcdn.com nexus-long-poller-b.intercom.io widget.privy.com platform-api.sharethis.com cdn.tynt.com de.tynt.com en.tynt.com fr.tynt.com it.tynt.com ws.sharethis.com snap.licdn.com px.ads.linkedin.com widget.trustpilot.com;object-src 'self';style-src 'self' 'unsafe-inline' cloud.webtype.com supertext.bamboohr.com fonts.googleapis.com tagmanager.google.com cdn-images.mailchimp.com widget.privy.com assets.privy.com platform-api.sharethis.com cdn.rawgit.com blob:;img-src 'self' www.supertext.ch pls.webtype.com www.google.com www.google.ch www.google.de www.google.it www.google.fr www.google.es www.google.co.uk www.googletagmanager.com stats.g.doubleclick.net ssl.google-analytics.com ssl.gstatic.com www.gstatic.com www.google-analytics.com google-analytics.com www.googleadservices.com https://googleads.g.doubleclick.net csi.gstatic.com maps.googleapis.com maps.gstatic.com www.bamboohr.com resources.bamboohr.com js.intercomcdn.com static.intercomassets.com gifs.intercomcdn.com data: widget.privy.com assets.privy.com events.privy.com api.privy.com privymktg.com ic.tynt.com www.zoiper.com;media-src 'self' js.intercomcdn.com;frame-src 'self' www.youtube.com docs.google.com www.google.com 192.168.0.115 c.sharethis.mgr.consensu.org;font-src 'self' cloud.webtype.com fonts.gstatic.com themes.googleusercontent.com js.intercomcdn.com widget.trustpilot.com data:;connect-src 'self' https://www.google-analytics.com www.google.com www.google.de www.google.en stats.g.doubleclick.net supertext.bamboohr.com api-iam.intercom.io nexus-websocket-a.intercom.io nexus-websocket-b.intercom.io wss://nexus-websocket-a.intercom.io wss://nexus-websocket-b.intercom.io uploads.intercomcdn.com js.intercomcdn.com https://nexus-long-poller-b.intercom.io https://nexus-long-poller-a.intercom.io https://groupshare.supertext.com:4430 http://grsh-srvr-test.northeurope.cloudapp.azure.com:4430 api.privy.com events.privy.com tri.privy.com l.sharethis.com c.sharethis.mgr.consensu.org https://localhost:44399;base-uri 'self';child-src 'self' blob: child.object.com;form-action 'self' https://accounts.google.com https://login.microsoftonline.com;frame-ancestors 'self' http://ami.responsivedesign.is;report-uri /WebResource.axd?cspReport=true
Set-Cookie: ASP.NET_SessionId=jfvilhtoa2cfwguzr33sjebr; path=/; secure; HttpOnly
Date: Tue, 23 Jul 2019 01:29:52 GMT
Content-Length: 20060