HTTP/1.1 200 OK
Server: nginx/1.6.2
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-cache
x-frame-options: SAMEORIGIN
x-powered-by: false
content-security-policy: true
content-security-policy-allowed: default-src 'none'; script-src https://www.3570.it www.google-analytics.com 'unsafe-inline' 'unsafe-eval'; object-src 'none'; style-src https://www.3570.it fonts.googleapis.com 'unsafe-inline'; img-src 'none'; media-src 'none'; frame-src 'none'; font-src https://www.3570.it fonts.gstatic.com fonts.googleapis.com; connect-src 'none'; form-action 'none'; sandbox 'none'; script-nonce 'none'; plugin-types 'none'; reflect-xss 'none'; report-uri 'none';
http-strict-transport-security: false
cross-origin-resource-sharing: access-control-allow-origin https://www.3570.it; access-control-expose-headers 'none'; access-control-max-age 10; access-control-allow-credentials true; access-control-allow-methods GET POST PUT PATCH DELETE;
X-SecHeader: 2016.1
Date: Sat, 11 May 2019 11:52:13 GMT
Strict-Transport-Security: max-age=31536000
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
Referrer-Policy: strict-origin-when-cross-origin