HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Content-Security-Policy: base-uri 'self' https://zonky.cz https://www.zonky.cz https://optimize.google.com; default-src 'self'; child-src https://vars.hotjar.com; connect-src 'self' https://zonky.cz https://googleads.g.doubleclick.net https://*.trackjs.com https://*.facebook.com https://api.intercom.io https://api-iam.intercom.io https://api-ping.intercom.io https://nexus-websocket-a.intercom.io https://nexus-websocket-b.intercom.io https://nexus-long-poller-a.intercom.io https://nexus-long-poller-b.intercom.io wss://nexus-websocket-a.intercom.io wss://nexus-websocket-b.intercom.io https://uploads.intercomcdn.com https://uploads.intercomusercontent.com https://app.getsentry.com https://*.hotjar.com wss://*.hotjar.com https://*.force.com https://api.mapy.cz https://sheets.googleapis.com https://apis.google.com/; font-src 'self' https://zonky.cz https://fonts.gstatic.com https://js.intercomcdn.com https://www.planetazonky.cz https://www.zia2019.cz https://static.hotjar.com https://optimize.google.com https://api.mapy.cz data:; form-action 'self'; frame-ancestors 'self' https://*.bankovnipoplatky.com https://www.kalkulackacistemzdy.cz; frame-src 'self' https://stags.bluekai.com https://staticxx.facebook.com https://*.doubleclick.net https://vars.hotjar.com https://www.google.com https://www.google.cz https://*.googletagmanager.com https://*.youtube.com https://*.youtube-nocookie.com https://c.imedia.cz https://www.facebook.com https://connect.facebook.net https://c1613.affilbox.cz https://*.hit.gemius.pl https://optimize.google.com https://datastudio.google.com https://player.vimeo.com https://*.salesforce.com https://*.force.com https://flickrembed.com; img-src 'self' https://*.zonky.cz https://zonky.cz https://zonky-times-prod-a.s3.amazonaws.com https://*.ads.linkedin.com https://secure.adnxs.com https://img.youtube.com https://*.youtube.com https://www.google.com https://www.google.cz https://*.trackjs.com https://c.imedia.cz https://*.facebook.com https://*.google-analytics.com https://*.gstatic.com https://www.googleadservices.com https://*.doubleclick.net https://*.adform.net https://d9hhrg4mnvzow.cloudfront.net https://js.intercomcdn.com https://static.intercomassets.com https://downloads.intercomcdn.com https://uploads.intercomusercontent.com https://gifs.intercomcdn.com https://insights.hotjar.com https://static.hotjar.com https://lh3.googleusercontent.com lh3.googleusercontent.com https://optimize.google.com https://api.mapy.cz https://mapserver.mapy.cz data:; media-src 'self' https://js.intercomcdn.com; object-src 'none'; script-src 'self' https://www.google-analytics.com https://secure.adnxs.com https://*.ads.linkedin.com https://snap.licdn.com https://sjs.bizographics.com https://*.trackjs.com https://c1613.affilbox.cz https://*.nr-data.net https://*.newrelic.com https://tags.bkrtx.com https://*.bluekai.com https://bluekai.com https://eu.prgmt.com https://spir.hit.gemius.pl https://platform.twitter.com https://www.google.com https://www.google.cz https://*.googletagmanager.com https://tagmanager.google.com https://www.googletagservices.com/ https://*.google-analytics.com https://*.gstatic.com https://*.googlesyndication.com https://track.adform.net https://connect.facebook.net https://*.youtube.com https://*.ytimg.com https://www.googleadservices.com https://adservice.google.com https://adservice.google.cz https://googleads.g.doubleclick.net https://c.imedia.cz https://c1819.affilbox.cz https://ajax.googleapis.com https://app.intercom.io https://widget.intercom.io https://js.intercomcdn.com https://*.getsmartlook.com ws://*.getsmartlook.com https://static.hotjar.com https://script.hotjar.com https://dnn506yrbagrg.cloudfront.net https://builder-assets.unbounce.com https://d2xxq4ijfwetlm.cloudfront.net https://login.dognet.sk https://optimize.google.com https://*.force.com https://*.salesforce.com https://*.salesforceliveagent.com https://api.mapy.cz https://apis.google.com 'unsafe-inline' 'unsafe-eval'; style-src 'self' https://*.myfonts.net https://tagmanager.google.com https://fonts.googleapis.com https://builder-assets.unbounce.com https://optimize.google.com https://*.salesforce.com https://*.force.com https://api.mapy.cz 'unsafe-inline'; upgrade-insecure-requests;
Date: Fri, 19 Jul 2019 05:07:56 GMT
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Pragma: no-cache
Referrer-Policy: no-referrer
Server: Apache
Set-Cookie: CAKEPHP=k1sbk1gtrl33du8qm30lp8qk62; expires=Fri, 19-Jul-2019 05:17:56 GMT; Max-Age=600; path=/; secure; HttpOnly
Set-Cookie: csrfToken=f0e323b383c335a9468f33259fcbcbfcccb8f0c2a0c9769e77d101645824754a6d02226c42f2822b484d2bac635f646292a4466d6fb75514cedc29571f143340; path=/; secure; httponly
Strict-Transport-Security: max-age=31536000; includeSubdomains; preload
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1; mode=block
Vary: Accept-Encoding
X-Cache: Miss from cloudfront
Via: 1.1 f1a854950c455aa09a16f375d3bcf438.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: DFW3-C1
X-Amz-Cf-Id: nEaGnwzCGDAYD0ejK-EP4epHI0PT7ROwl6VjeeLtkcsNe8G1GyhPQw==