HTTP/1.1 200 OK
date: Mon, 08 Feb 2021 12:38:58 GMT
server: Apache
x-frame-options: ALLOW-FROM https://www.bestprice.gr https://webcache.googleusercontent.com https://static.googleusercontent.com
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: default-src 'self' data: maps.googleapis.com *.gstatic.com talos.adman.gr *.pstatic.gr www.bestprice.gr *.heatmap.it https://static.pexels.com; script-src 'unsafe-inline' connect.facebook.com www.google-analytics.com *.yandex.ru talos.adman.gr connect.facebook.net graph.facebook.com www.googletagmanager.com googleads.g.doubleclick.net *.googleadservices.com *.googlecode.com *.googleapis.com *.google.com *.adman.gr *.bestprice.gr *.pstatic.gr app.getsentry.com *.adsafeprotected.com pagead2.googlesyndication.com *.heatmap.it heatmap.it adservice.google.gr *.instagram.com https://*.playbuzz.com *.parsely.com https://*.smartlook.cloud https://*.smartlook.com 'unsafe-eval'; style-src 'self' 'unsafe-inline' *.googleapis.com *.pstatic.gr *.adman.gr *.facebook.com *.twitter.com *.gravatar.com *.heatmap.it *.google.com *.adsafeprotected.com *.fonts.google.com; frame-src 'self' data: *.adman.gr *.facebook.com bs.serving-sys.com *.mathtag.com *.youtube.com *.agkn.com *.heatmap.it heatmap.it *.adsafeprotected.com *.instagram.com googleads.g.doubleclick.net ads.eu.criteo.com https://embed.playbuzz.com https://optimize.google.com; frame-ancestors 'self'; connect-src 'self' stats.g.doubleclick.net api.airtable.com rpc.bestprice.gr hal.bestprice.gr www.google-analytics.com script.google.com *.yandex.ru pubsub.bestprice.gr ws://pubsub.bestprice.gr wss://pubsub.bestprice.gr script.googleusercontent.com graph.facebook.com www.bestprice.gr www.sentry.io app.getsentry.com *.pstatic.gr *.adman.gr *.adsafeprotected.com *.instagram.com api.github.com georgep.bestprice.gr https://*.playbuzz.com *.parsely.com https://*.smartlook.cloud https://*.smartlook.com; img-src 'self' data: www.bestprice.gr graph.facebook.com www.google-analytics.com platform-lookaside.fbsbx.com *.pstatic.gr *.gstatic.com *.youtube.com *.googleapis.com *.googlecode.com *.facebook.com *.twimg.com *.fbcdn.net www.google.com www.google.gr *.fbsbx.com *.googleusercontent.com *.heatmap.it heatmap.it *.adsafeprotected.com *.googlesyndication.com *.yandex.ru *.adman.gr ad.doubleclick.net https://*.playbuzz.com https://*.parsely.com bs.serving-sys.com *.demdex.net; object-src 'none'; base-uri 'self' https://optimize.google.com; worker-src *.bestprice.gr blob:
vary: Accept-Encoding
access-control-allow-origin: *
transfer-encoding: chunked
content-type: text/html; charset=UTF-8