tivolicasino.dk

Cache-Control: no-cache, no-store
Pragma: no-cache
Content-Type: text/html; charset=utf-8
Expires: -1
X-TC-Env: cd102
X-Content-Type-Options: nosniff
Content-Security-Policy-Report-Only: default-src 'self'; script-src 'self' 'unsafe-inline' https://kundecrm.my.site.com https://kundecrm.my.salesforce.com; script-src-elem 'self' 'unsafe-inline' https://kundecrm.my.site.com https://kundecrm.my.salesforce.com https://service.force.com https://operationsmessengerservices.azurewebsites.net https://nexus.ensighten.com https://www.googletagmanager.com https://*.salesforceliveagent.com https://bs.serving-sys.com https://img.en25.com https://files.cdn.leadfamly.com https://*.snapchat.com https://app.varify.io https://*.clarity.ms https://*.hotjar.com https://sc-static.net https://connect.facebook.net https://collect.danskespil.dk https://tags.danskespil.dk; style-src * 'unsafe-inline'; style-src-elem * 'unsafe-inline'; font-src 'self' data: https://fonts.gstatic.com https://operationsmessengerservices.azurewebsites.net; img-src 'self' data: https://track.adform.net https://www.facebook.com https://s166423343.t.eloqua.com https://ad.doubleclick.net https://*.clarity.ms https://tc-static.dk https://*.tc-static.dk; connect-src 'self' https://kundecrm.my.site.com https://kundecrm.my.salesforce-scrt.com https://kundecrm.secure.force.com https://operationsmessengerservices.azurewebsites.net https://dsoperationsmessenger.blob.core.windows.net https://region1.google-analytics.com https://region1.analytics.google.com https://www.googletagmanager.com https://tivoli-casino-be.dsservice.eu https://dawa.aws.dk https://*.snapchat.com https://app.varify.io https://analytics.google.com https://stats.g.doubleclick.net https://*.hotjar.io https://*.clarity.ms https://doh.cq0.co https://collect.danskespil.dk https://tags.danskespil.dk https://tracking.danskespil.dk wss://ws.hotjar.com; frame-src * intent:; report-uri /api/tivolicasino/security/csp/testreport; block-all-mixed-content;
Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://kundecrm.my.site.com https://kundecrm.my.salesforce.com; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' https://kundecrm.my.site.com https://kundecrm.my.salesforce.com https://service.force.com https://operationsmessengerservices.azurewebsites.net https://nexus.ensighten.com https://www.googletagmanager.com https://*.salesforceliveagent.com https://bs.serving-sys.com https://img.en25.com https://files.cdn.leadfamly.com https://*.snapchat.com https://app.varify.io https://*.clarity.ms https://*.hotjar.com https://sc-static.net https://connect.facebook.net https://collect.danskespil.dk https://tags.danskespil.dk; style-src * 'unsafe-inline'; style-src-elem * 'unsafe-inline'; font-src 'self' data: https://fonts.gstatic.com https://operationsmessengerservices.azurewebsites.net; img-src * data:; connect-src 'self' https://kundecrm.my.site.com https://kundecrm.my.salesforce-scrt.com https://kundecrm.secure.force.com https://operationsmessengerservices.azurewebsites.net https://dsoperationsmessenger.blob.core.windows.net https://region1.google-analytics.com https://region1.analytics.google.com https://www.googletagmanager.com https://tivoli-casino-be.dsservice.eu https://dawa.aws.dk https://*.snapchat.com https://app.varify.io https://analytics.google.com https://stats.g.doubleclick.net https://*.hotjar.io https://*.clarity.ms https://doh.cq0.co https://collect.danskespil.dk https://tags.danskespil.dk https://tracking.danskespil.dk wss://ws.hotjar.com; frame-src * intent:; report-uri /api/tivolicasino/security/csp/report; block-all-mixed-content;
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Mon, 01 Jun 2026 21:15:03 GMT
Content-Length: 20
Connection: keep-alive
Set-Cookie: shell#lang=en; path=/; secure; SameSite=None, TC_Asp.Net_SessionId=x3z3o1a54n0a0xrm0aw4foe4; path=/; secure; HttpOnly; SameSite=Lax;Secure;SameSite=None, .ASPXAUTH=; expires=Mon, 11-Oct-1999 22:00:00 GMT; path=/; HttpOnly; SameSite=Lax;Secure;SameSite=None, TS6d4e8ece027=08bdb9ca61ab200033826e83134fbbd0b1461f350d777b472f070629cdba6b4be29c2be455f55a01085a28a128113000484ab36008d286100acd69f0564e7f79cadefc7f078190f8969d0a13db04a0dbb9b6f25a1fdc02b958e890400ae74f65; Path=/
Akamai-Cache-Status: NotCacheable from child