HTTPS Enabled
content-security-policydefault-src 'self' https://*.getprintbox.com; connect-src 'self' blob: monacoprint.de monacoprint.getprintbox.com www.monacoprint.de www.monacoprint.getprintbox.com monacoprint-pbx2.getprintbox.com pbx2-brian.s3.amazonaws.com pbx2-brian.s3.eu-central-1.amazonaws.com pbx2-monacoprint.s3.eu-central-1.amazonaws.com pbx2-monacoprint.s3.eu-central-1.amazonaws.com printbox-js.s3.amazonaws.com https://*.getprintbox.com https://dbg.getprintbox.com:8888 https://*.printboxteam.com https://*.google-analytics.com https://*.google.com https://*.facebook.com https://*.bing.com https://*.olark.com wss://*.zopim.com https://*.zopim.com https://stats.g.doubleclick.net https://www.paypal.com https://*.stripe.com https://*.hotjar.com wss://*.hotjar.com wss://*.getprintbox.com https://*.googleapis.com https://*.smartsupp.com wss://*.smartsupp.com https://api.instagram.com https://graph.instagram.com https://*.facebook.net https://*.gstatic.com https://www.googletagmanager.com https://tagmanager.google.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://bam.nr-data.net https://*.nets.com.sg https://*.enets.sg; script-src 'self' monacoprint.de monacoprint.getprintbox.com www.monacoprint.de www.monacoprint.getprintbox.com monacoprint-pbx2.getprintbox.com printbox-js.s3.amazonaws.com https://dbg.getprintbox.com:8000 https://dbg.getprintbox.com:8888 'unsafe-inline' 'unsafe-eval' https://*.getprintbox.com https://js-agent.newrelic.com https://bam.nr-data.net https://*.google.com https://*.google.pl https://*.google.dk https://*.googleapis.com https://*.googletagmanager.com https://*.bing.com https://*.gstatic.com https://*.google-analytics.com https://cdn.mouseflow.com https://*.facebook.net https://api.instagram.com https://api.flickr.com https://*.twitter.com https://*.pinterest.com https://cdn.klarna.com https://*.stripe.com https://*.olark.com https://chimpstatic.com https://*.zopim.com https://*.bootstrapcdn.com https://cdn.tinymce.com https://www.paypal.com https://www.paypalobjects.com https://*.hotjar.com https://*.prestashop.com https://auth-server.herokuapp.com https://cdnjs.cloudflare.com https://www.youtube.com https://*.ytimg.com/ https://smartsupp-widget-161959.c.cdn77.org https://bootstrap.smartsuppchat.com https://www.smartsuppchat.com https://tagmanager.google.com https://*.enets.sg; img-src 'self' data: blob: https: www.googletagmanager.com https://ssl.gstatic.com https://www.gstatic.com https://www.google-analytics.com https://googleads.g.doubleclick.net https://www.google.com; style-src 'self' 'unsafe-inline' printbox-js.s3.amazonaws.com https://dbg.getprintbox.com:8888 https://*.getprintbox.com https://*.googleapis.com https://*.olark.com https://*.bootstrapcdn.com https://*.prestashop.com https://cdnjs.cloudflare.com https://smartsupp-widget-161959.c.cdn77.org https://tagmanager.google.com https://*.enets.sg; font-src 'self' data: blob: monacoprint.de monacoprint.getprintbox.com www.monacoprint.de www.monacoprint.getprintbox.com pbx2-monacoprint.s3.eu-central-1.amazonaws.com printbox-js.s3.amazonaws.com https://dbg.getprintbox.com:8888 https://*.getprintbox.com https://*.googleapis.com https://fonts.gstatic.com https://*.bootstrapcdn.com https://*.hotjar.com https://*.prestashop.com https://cdnjs.cloudflare.com https://*.zopim.com https://smartsupp-widget-161959.c.cdn77.org https://*.enets.sg; frame-src 'self' monacoprint.de monacoprint.getprintbox.com www.monacoprint.de www.monacoprint.getprintbox.com monacoprint-pbx2.getprintbox.com https://*.getprintbox.com https://*.google.com https://*.googletagmanager.com https://*.facebook.com https://*.facebook.net https://www.youtube.com https://www.youtube-nocookie.com https://cdn.klarna.com https://*.prestashop.com https://*.stripe.com https://*.cardinalcommerce.com https://*.olark.com https://*.twitter.com https://*.hotjar.com https://*.googleapis.com https://bid.g.doubleclick.net; media-src 'self' https://dbg.getprintbox.com:8888 https://*.olark.com https://smartsupp-widget-161959.c.cdn77.org; object-src ; report-uri https://sentry.getprintbox.com/api/48/security/?sentry_key=67bc25495b504a2488cb2aa64ff50c4f;Controls resources the browser can load. Prevents XSS.
x-content-type-optionsnosniffPrevents MIME type sniffing. Should be 'nosniff'.
x-frame-optionsSAMEORIGINControls framing. Use CSP frame-ancestors instead.
strict-transport-securitymax-age=31536000; includeSubDomainsForces HTTPS. Recommended: max-age=31536000; includeSubDomains
referrer-policystrict-origin-when-cross-originControls referrer info. Recommended: strict-origin-when-cross-origin
permissions-policyControls browser features. Recommended: camera=(), microphone=(), geolocation=()
cross-origin-opener-policyControls cross-origin window access. Recommended: same-origin
cross-origin-resource-policyControls cross-origin resource access. Recommended: same-origin
cross-origin-embedder-policyControls cross-origin embedding. Recommended: require-corp
cache-controlmax-age=0, no-cacheCaching policy. Use no-store/private for sensitive pages.
x-powered-byShould be removed. Reveals server technology to attackers.
Missing: permissions-policy
Recommendation: Controls browser features. Recommended: camera=(), microphone=(), geolocation=()
Missing: cross-origin-opener-policy
Recommendation: Controls cross-origin window access. Recommended: same-origin
Missing: cross-origin-resource-policy
Recommendation: Controls cross-origin resource access. Recommended: same-origin
Missing: cross-origin-embedder-policy
Recommendation: Controls cross-origin embedding. Recommended: require-corp