HTTP/1.1 301 Moved Permanently
Date: Sun, 12 Dec 2021 08:15:30 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://www.heuver.de/
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Security-Policy: default-src 'self' https://www.google-analytics.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://bat.bing.com https://tr.datatrics.com https://sjs.bizographics.com/ https://tagmanager.google.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://www.google-analytics.com https://www.googleadservices.com/pagead/conversion_async.js https://www.googletagmanager.com https://maps.google.com https://maps.googleapis.com https://ssl.google-analytics.com https://assets.zendesk.com https://connect.facebook.net https://www.youtube.com https://api.tiles.mapbox.com https://*.go-mpulse.net https://snap.licdn.com http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io https://dev.visualwebsiteoptimizer.com https://app.vwo.com https://d5phz18u4wuww.cloudfront.netdev.visualwebsiteoptimizer.com; img-src 'self' blob: data: https://www.heuver.bg/ https://www.heuver.es/ https://www.heuver.fi/ https://www.heuver.fr/ https://www.heuver.com/ https://www.heuver.it/ https://www.heuver.nl/ https://www.heuver.pl/ https://www.heuver.ro/ https://www.heuver.se/ https://sabslrsesbprod.blob.core.windows.net/ https://bat.bing.com https://tr.datatrics.com https://www.google.com/ https://www.google.nl/ https://stats.g.doubleclick.net https://images.heuver.com https://maps.google.com https://maps.googleapis.com https://maps.gstatic.com https://www.google-analytics.com https://ssl.google-analytics.com https://s-static.ak.facebook.com https://assets.zendesk.com https://secure.gravatar.com https://*.akstat.io https://px.ads.linkedin.com/ http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io https://dev.visualwebsiteoptimizer.com https://*.visualwebsiteoptimizer.com https://app.vwo.com https://www.googletagmanager.com https://www.facebook.com; connect-src 'self' 'unsafe-inline' https://api.datatrics.com https://*.akamaihd.net https://*.akstat.io https://c.go-mpulse.net https://www.google-analytics.com https://ssl.gstatic.com https://www.gstatic.com https://*.g.doubleclick.net https://*.google.com http://*.hotjar.com:* https://*.hotjar.com:* http://*.hotjar.io https://*.hotjar.io wss://*.hotjar.com https://*.visualwebsiteoptimizer.com https://app.vwo.com https://*.bing.com/ https://*.google.nl/; style-src 'self' 'unsafe-inline' https://tagmanager.google.com https://fonts.googleapis.com https://use.typekit.net https://assets.zendesk.com https://api.tiles.mapbox.com https://app.vwo.com; font-src 'self' data: https://fonts.gstatic.com https://fonts.googleapis.com https://use.typekit.net https://themes.googleusercontent.com http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.i https://app.vwo.com; frame-src 'self' https://www2.heuver.com https://www.googletagmanager.com https://www.youtube.com https://www.youtube-nocookie.com https://assets.zendesk.com https://www.facebook.com https://s-static.ak.facebook.com https://tautt.zendesk.com https://*.doubleclick.net https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io https://app.vwo.com; worker-src 'self' 'unsafe-inline' blob:; object-src 'none';
Referrer-Policy: no-referrer-when-downgrade
Strict-Transport-Security: max-age=31536000; includeSubDomains
Feature-Policy: geolocation none;midi none;notifications none;push none;sync-xhr none;microphone none;camera none;magnetometer none;gyroscope none;speaker self;vibrate none;fullscreen self;payment none;
HTTP/2 302
content-length: 0
location: https://login.heuver.com/auth/realms/heuver/protocol/openid-connect/auth?response_type=code&client_id=heuver-online-platform&redirect_uri=http%3A%2F%2Fwww.heuver.de%2F&state=3454dab7-2184-44c8-801f-dfcacbfd020f&login=true&scope=openid
strict-transport-security: max-age=15724800; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-security-policy: default-src 'self' https://www.google-analytics.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://bat.bing.com https://tr.datatrics.com https://sjs.bizographics.com/ https://tagmanager.google.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://www.google-analytics.com https://www.googleadservices.com/pagead/conversion_async.js https://www.googletagmanager.com https://maps.google.com https://maps.googleapis.com https://ssl.google-analytics.com https://assets.zendesk.com https://connect.facebook.net https://www.youtube.com https://api.tiles.mapbox.com https://*.go-mpulse.net https://snap.licdn.com http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io https://dev.visualwebsiteoptimizer.com https://app.vwo.com https://d5phz18u4wuww.cloudfront.netdev.visualwebsiteoptimizer.com; img-src 'self' blob: data: https://www.heuver.bg/ https://www.heuver.es/ https://www.heuver.fi/ https://www.heuver.fr/ https://www.heuver.com/ https://www.heuver.it/ https://www.heuver.nl/ https://www.heuver.pl/ https://www.heuver.ro/ https://www.heuver.se/ https://sabslrsesbprod.blob.core.windows.net/ https://bat.bing.com https://tr.datatrics.com https://www.google.com/ https://www.google.nl/ https://stats.g.doubleclick.net https://images.heuver.com https://maps.google.com https://maps.googleapis.com https://maps.gstatic.com https://www.google-analytics.com https://ssl.google-analytics.com https://s-static.ak.facebook.com https://assets.zendesk.com https://secure.gravatar.com https://*.akstat.io https://px.ads.linkedin.com/ http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io https://dev.visualwebsiteoptimizer.com https://*.visualwebsiteoptimizer.com https://app.vwo.com https://www.googletagmanager.com https://www.facebook.com; connect-src 'self' 'unsafe-inline' https://api.datatrics.com https://*.akamaihd.net https://*.akstat.io https://c.go-mpulse.net https://www.google-analytics.com https://ssl.gstatic.com https://www.gstatic.com https://*.g.doubleclick.net https://*.google.com http://*.hotjar.com:* https://*.hotjar.com:* http://*.hotjar.io https://*.hotjar.io wss://*.hotjar.com https://*.visualwebsiteoptimizer.com https://app.vwo.com https://*.bing.com/ https://*.google.nl/; style-src 'self' 'unsafe-inline' https://tagmanager.google.com https://fonts.googleapis.com https://use.typekit.net https://assets.zendesk.com https://api.tiles.mapbox.com https://app.vwo.com; font-src 'self' data: https://fonts.gstatic.com https://fonts.googleapis.com https://use.typekit.net https://themes.googleusercontent.com http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.i https://app.vwo.com; frame-src 'self' https://www2.heuver.com https://www.googletagmanager.com https://www.youtube.com https://www.youtube-nocookie.com https://assets.zendesk.com https://www.facebook.com https://s-static.ak.facebook.com https://tautt.zendesk.com https://*.doubleclick.net https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io https://app.vwo.com; worker-src 'self' 'unsafe-inline' blob:; object-src 'none';
referrer-policy: no-referrer-when-downgrade
strict-transport-security: max-age=31536000; includeSubDomains
feature-policy: geolocation none;midi none;notifications none;push none;sync-xhr none;microphone none;camera none;magnetometer none;gyroscope none;speaker self;vibrate none;fullscreen self;payment none;
date: Sun, 12 Dec 2021 08:15:30 GMT
set-cookie: JSESSIONID=F158B35AC060605A6142D095506D4B9D; Max-Age=43200; Expires=Sun, 12-Dec-2021 20:15:30 GMT; Path=/; HttpOnly
set-cookie: OAuth_Token_Request_State=3454dab7-2184-44c8-801f-dfcacbfd020f; Version=1; HttpOnly
HTTP/2 200
date: Sun, 12 Dec 2021 08:15:31 GMT
content-type: text/html;charset=utf-8
content-length: 6637
cache-control: no-store, must-revalidate, max-age=0
set-cookie: AUTH_SESSION_ID=977b84ac-60a6-4c08-b837-cb0f4b450ec4.heu-keycloak-775bf784df-9m2p5; Version=1; Path=/auth/realms/heuver/; HttpOnly
set-cookie: KC_RESTART=eyJhbGciOiJIUzI1NiIsInR5cCIgOiAiSldUIiwia2lkIiA6ICI2OTI1NzU4MS00OTUwLTRjYjItOWY1OS04NTBmNzk0ODMwNDUifQ.eyJjaWQiOiJoZXV2ZXItb25saW5lLXBsYXRmb3JtIiwicHR5Ijoib3BlbmlkLWNvbm5lY3QiLCJydXJpIjoiaHR0cDovL3d3dy5oZXV2ZXIuZGUvIiwiYWN0IjoiQVVUSEVOVElDQVRFIiwibm90ZXMiOnsic2NvcGUiOiJvcGVuaWQiLCJpc3MiOiJodHRwczovL2xvZ2luLmhldXZlci5jb20vYXV0aC9yZWFsbXMvaGV1dmVyIiwicmVzcG9uc2VfdHlwZSI6ImNvZGUiLCJjb2RlX2NoYWxsZW5nZV9tZXRob2QiOiJwbGFpbiIsInJlZGlyZWN0X3VyaSI6Imh0dHA6Ly93d3cuaGV1dmVyLmRlLyIsInN0YXRlIjoiMzQ1NGRhYjctMjE4NC00NGM4LTgwMWYtZGZjYWNiZmQwMjBmIiwiY2xpZW50X3JlcXVlc3RfcGFyYW1fbG9naW4iOiJ0cnVlIn19.2RhbDi7oH0weYpET2Yaz36vyg2mPDo2gcuqQDjPkyoQ; Version=1; Path=/auth/realms/heuver/; HttpOnly
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
content-security-policy: frame-src 'self'; frame-ancestors 'self'; object-src 'none';
x-robots-tag: none
strict-transport-security: max-age=15724800; includeSubDomains
x-content-type-options: nosniff
content-language: en
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-security-policy: default-src 'self' https://www.google-analytics.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google-analytics.com https://www.googleadservices.com/pagead/conversion_async.js https://www.googletagmanager.com https://maps.google.com https://maps.googleapis.com https://ssl.google-analytics.com https://assets.zendesk.com https://connect.facebook.net https://api.tiles.mapbox.com; img-src 'self' blob: data: https://images.heuver.com https://maps.google.com https://maps.gstatic.com https://www.google-analytics.com https://ssl.google-analytics.com https://s-static.ak.facebook.com https://assets.zendesk.com https://secure.gravatar.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://assets.zendesk.com https://api.tiles.mapbox.com; font-src 'self' data: https://fonts.gstatic.com https://themes.googleusercontent.com; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://assets.zendesk.com https://www.facebook.com https://s-static.ak.facebook.com https://tautt.zendesk.com; object-src 'none'
referrer-policy: no-referrer-when-downgrade
strict-transport-security: max-age=31536000; includeSubDomains
feature-policy: geolocation none;midi none;notifications none;push none;sync-xhr none;microphone none;camera none;magnetometer none;gyroscope none;speaker self;vibrate none;fullscreen self;payment none;
|