| server: |
nginx/1.22.0 |
| date: |
Sat, 05 Oct 2024 09:57:27 GMT |
| content-type: |
text/html; charset=UTF-8 |
| content-length: |
529602 |
| connection: |
close |
| vary: |
Accept-Encoding, Accept-Encoding |
| content-security-policy: |
font-src fonts.gstatic.com use.typekit.net *.kekale.fi *.accolade.fi maxcdn.bootstrapcdn.com *.gstatic.com js.klevu.com *.cloudflare.com *.twitter.com *.google.com *.google.co.in *.google.fi *.google.ro *.facebook.com *.typekit.net *.twimg.com *.trustedshops.com *.googleapis.com *.amazonaws.com *.houston-analytics.com *.cookieinformation.com *.wisepops.com *.adform.net *.sizebay.technology *.amplifyapp.com *.pingdom.net *.klarnacdn.net *.klevu.com *.ksearchnet.com 'self' data: data: 'self' 'unsafe-inline'; form-action *.paytrail.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com player.vimeo.com https://www.google.com/recaptcha/ *.google.com *.twitter.com https://www.facebook.com *.klarna.com *.klarnaevt.com *.criteo.net *.criteo.com *.amazonaws.com *.cookieinformation.com *.wisepops.com *.adform.net *.sizebay.technology *.amplifyapp.com *.pinterest.com *.pingdom.net *.feedbackly.com *.doubleclick.net 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.kekale.fi *.accolade.fi *.paytrail.com *.placeholder.com *.zopim.com *.zopim.io *.klevu.com *.ctfassets.net *.facebook.com https://stats.g.doubleclick.net *.google.com *.google.co.in *.google.fi *.google.ro *.connect.facebook.net *.segmentify.com *.klarna.com *.klarnaevt.com *.smaato.net *.doubleclick.net *.360yield.com *.adnxs.com *.rubiconproject.com *.yahoo.com *.yahoo.net *.smartadserver.com *.pubmatic.com *.outbrain.com *.casalemedia.com *.adform.com *.adform.net *.openx.net *.advertising.com *.ivitrack.com *.omnitagjs.com *.twiago.com *.3lift.com *.taboola.com *.adscale.de *.teads.tv *.media.net *.bidswitch.net *.yieldlab.net *.criteo.com *.1rx.io *.unrulymedia.com *.houston-analytics.com *.cookieinformation.com *.sizebay.technology *.amplifyapp.com *.google-analytics.com *.analytics.google.com *.clarity.ms *.pinterest.com *.bing.com *.pingdom.net *.sharethrough.com *.emxdgt.com https://id5-sync.com *.mediavine.com *.tremorhub.com *.yieldmo.com *.demdex.net *.krxd.net *.thebrighttag.com *.seadform.net *.postrelease.com *.omappapi.com *.klarnacdn.net *.ksearchnet.com 'self' data: data: 'self' 'unsafe-inline'; script-src googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.kekale.fi *.accolade.fi *.google.com *.gstatic.com *.ccdc02.com *.zdassets.com *.klevu.com *.zopim.com *.googletagmanager.com *.facebook.net *.segmentify.com *.custobar.com adtr.io *.criteo.net *.criteo.com *.googleapis.com *.google.co.in *.facebook.com *.googleadservices.com *.google-analytics.com *.analytics.google.com *.bootstrapcdn.com *.klarna.com *.klarnaevt.com *.doubleclick.net *.amazonaws.com *.houston-analytics.com *.cookieinformation.com *.wisepops.com *.adform.net *.sizebay.technology *.amplifyapp.com *.clarity.ms *.pinimg.com *.pinterest.com *.bing.com *.sgmntfy.com *.pingdom.net *.feedbackly.com *.omappapi.com *.tiktok.com *.klarnacdn.net *.klarnaservices.com *.ksearchnet.com https://js.klevu.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com *.kekale.fi *.accolade.fi maxcdn.bootstrapcdn.com fonts.gstatic.com js.klevu.com *.googleapis.com *.twitter.com *.google.com *.google.co.in *.google.fi *.google.ro *.facebook.com *.segmentify.com *.klarna.com *.klarnaevt.com *.cookieinformation.com *.wisepops.com *.adform.net *.sizebay.technology *.amplifyapp.com *.google-analytics.com *.analytics.google.com *.pingdom.net *.omappapi.com *.klarnacdn.net *.klevu.com *.ksearchnet.com *.gstatic.com https://js.klevu.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.zdassets.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com *.adobe.io performance.typekit.net *.sentry.io *.kekale.fi *.accolade.fi *.authorize.net *.zdassets.com *.zendesk.com *.zopim.com wss://*.zopim.com *.google.com *.googletagmanager.com *.google-analytics.com *.analytics.google.com *.googlesyndication.com *.doubleclick.net *.ksearchnet.com *.segmentify.com *.klarna.com *.klarnaevt.com *.criteo.net *.criteo.com *.custobar.com *.facebook.com *.amazonaws.com *.houston-analytics.com *.cookieinformation.com *.wisepops.com *.adform.net *.sizebay.technology *.amplifyapp.com *.clarity.ms *.pinterest.com *.bing.com *.pingdom.net *.sharethrough.com *.emxdgt.com https://id5-sync.com *.mediavine.com *.tremorhub.com *.yieldmo.com *.demdex.net *.krxd.net *.thebrighttag.com *.omappapi.com *.feedbackly.com *.tiktok.com *.klarnacdn.net *.klarnaservices.com *.klevu.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; |
| strict-transport-security: |
max-age=31536000 |
| x-content-type-options: |
nosniff, nosniff |
| x-xss-protection: |
1; mode=block |
| x-frame-options: |
SAMEORIGIN, SAMEORIGIN |
| pragma: |
no-cache |
| expires: |
-1 |
| cache-control: |
no-store, no-cache, must-revalidate, max-age=0 |
| accept-ranges: |
bytes |
| access-control-allow-origin: |
* |
| access-control-allow-methods: |
GET, POST, OPTIONS |
| x-ua-compatible: |
IE=Edge,chrome=1 |
|
