HTTP/1.1 200 OK
Server: nginx
Date: Wed, 05 Jun 2019 17:49:23 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"4c96248c4d3a3b4e2e8946e030280563"
Cache-Control: max-age=0, private, must-revalidate
Set-Cookie: _cariparma_session=d1b2589ec61280243183613bffeffce5; path=/; expires=Fri, 05 Jul 2019 17:49:23 -0000; secure; HttpOnly; SameSite=Lax
X-Request-Id: 3cbce75c-d30d-401c-ad85-9d89b076b43e
Expect-CT: enforce, max-age=631152000, report-uri="https://www.credit-agricole.it"
Content-Security-Policy: default-src http: https: 'self' data:; base-uri 'self'; child-src *; connect-src *; frame-ancestors https://landing.credit-agricole.it/; object-src 'self'; script-src 'unsafe-inline' 'unsafe-eval' 'self' data: *.credit-agricole.it http://*.credit-agricole.it https://*.credit-agricole.it *.cloudfront.net http://*.cloudfront.net https://*.cloudfront.net *.doubleclick.net http://*.doubleclick.net https://*.doubleclick.net connect.ekomi.de http://connect.ekomi.de https://connect.ekomi.de widgets.ekomi.com http://widgets.ekomi.com https://widgets.ekomi.com *.facebook.net http://*.facebook.net https://*.facebook.net www.google.com http://www.google.com https://www.google.com www.google.it http://www.google.it https://www.google.it *.google-analytics.com http://*.google-analytics.com https://*.google-analytics.com www.googleadservices.com http://www.googleadservices.com https://www.googleadservices.com www.googletagmanager.com http://www.googletagmanager.com https://www.googletagmanager.com www.gstatic.com http://www.gstatic.com https://www.gstatic.com script.hotjar.com http://script.hotjar.com https://script.hotjar.com static.hotjar.com http://static.hotjar.com https://static.hotjar.com cdn.jsdelivr.net http://cdn.jsdelivr.net https://cdn.jsdelivr.net maps.ubiest.com http://maps.ubiest.com https://maps.ubiest.com www.youtube.com http://www.youtube.com https://www.youtube.com ajax.googleapis.com http://ajax.googleapis.com https://ajax.googleapis.com tagmanager.google.com http://tagmanager.google.com https://tagmanager.google.com *.amazonaws.com http://*.amazonaws.com https://*.amazonaws.com cdn.ravenjs.com http://cdn.ravenjs.com https://cdn.ravenjs.com *.ekomiapps.de http://*.ekomiapps.de https://*.ekomiapps.de *.mynsystems.com http://*.mynsystems.com https://*.mynsystems.com secure.adnxs.com http://secure.adnxs.com https://secure.adnxs.com ads.avocet.io http://ads.avocet.io https://ads.avocet.io s.yimg.com http://s.yimg.com https://s.yimg.com *.analytics.yahoo.com http://*.analytics.yahoo.com https://*.analytics.yahoo.com; style-src 'unsafe-inline' 'self' *.credit-agricole.it http://*.credit-agricole.it https://*.credit-agricole.it *.amazonaws.com http://*.amazonaws.com https://*.amazonaws.com fonts.googleapis.com http://fonts.googleapis.com https://fonts.googleapis.com tagmanager.google.com http://tagmanager.google.com https://tagmanager.google.com widgets.ekomi.com http://widgets.ekomi.com https://widgets.ekomi.com *.ekomiapps.de http://*.ekomiapps.de https://*.ekomiapps.de
Strict-Transport-Security: max-age=631152000; includeSubdomains; preload
Referrer-Policy: origin-when-cross-origin
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: ALLOW-FROM https://landing.credit-agricole.it/
X-Permitted-Cross-Domain-Policies: none
X-XSS-Protection: 1