Grolls.fi

Server: nginx
Date: Sat, 04 Mar 2023 10:56:04 GMT
Content-Type: text/html
Content-Length: 162
Location: https://www.grolls.fi/
X-Node-Id: node1

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Mar 2023 10:56:04 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 27462
Vary: Accept-Encoding
Content-Security-Policy: prefetch-src *.googlesyndication.com; worker-src blob:; font-src *.googleapis.com *.gstatic.com *.hotjar.com *.hotjar.io cdn.jsdelivr.net *.lybestatic.tech data: 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com *.facebook.net *.facebook.com *.google.com forms.hubspot.com forms.hsforms.com *.lybe.se 'self' 'unsafe-inline'; frame-ancestors *.storyblok.com 'self'; frame-src secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com assets.braintreegateway.com player.vimeo.com *.klarna.com *.facebook.net *.facebook.com *.analytics.google.com *.googletagmanager.com *.google-analytics.com *.adnxs.com *.bambuser.com *.cookiebot.com *.depashop.se *.doubleclick.net *.fls.doubleclick.net *.g.doubleclick.net *.googleapis.com *.google.com *.googlesyndication.com *.grolls.fi *.grolls.se *.hotjar.com *.hotjar.io forms.hsforms.com js.hscollectedforms.net *.hubspot.com js.hsadspixel.net js.usemessages.com *.kundo.se mailto: tel: *.microsoft.com *.protection.outlook.com *.recaptcha.net *.retain24.com *.seab.se *.swedol.se *.tools.fi *.tools.se *.univern.no *.youtube.com *.youtube-nocookie.com cloud.avensia.com:8087 data: 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: www.googleadservices.com *.google-analytics.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com s.ytimg.com *.klarna.com *.klarnaevt.com *.bird.eu *.newrelic.com *.nr-data.net *.facebook.net *.facebook.com *.fbcdn.net *.analytics.google.com *.googletagmanager.com *.storyblok.com *.adnxs.com *.adnxs-simple.com *.alligo.com *.bing.com black.bird.eu *.clarity.ms *.cloudfront.net *.crazyegg.com *.doubleclick.net *.ecoonline.com *.e-magin.se *.fls.doubleclick.net *.g.doubleclick.net *.ggpht.com *.googleapis.com *.google.at *.google.be *.google.bg *.google.ch *.google.co.uk *.google.com *.google.com.cy *.google.com.mt *.google.cz *.google.de *.google.dk *.google.ee *.google.es *.google.fi *.google.fr *.google.gl *.google.gr *.google.hr *.google.hu *.google.ie *.google.is *.google.it *.google.lt *.google.lu *.google.lv *.google.nl *.google.no *.google.pl *.google.pt *.google.ro *.google.se *.google.si *.google.sk *.gstatic.com *.googlesyndication.com *.googletagservices.com *.googleusercontent.com *.grolls.fi *.grolls.se *.hotjar.com *.hotjar.io *.hubspot.com cdn2.hubspot.net forms.hsforms.com cdn.jsdelivr.net *.leadfeeder.com *.lfeeder.com *.lybestatic.tech *.microsoft.com *.mookie1.com *.swedol.se *.tools.fi *.tools.se *.univern.no *.videoly.co *.wistia.com *.wistia.net *.yieldoptimizer.com *.youtube.com *.ytimg.com blob: data: blob: 'self' 'unsafe-inline'; script-src assets.adobedtm.com js.authorize.net jstest.authorize.net secure.authorize.net test.authorize.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com *.google-analytics.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com js.braintreegateway.com s.ytimg.com video.google.com vimeo.com www.vimeo.com *.vimeocdn.com www.youtube.com polyfill.io *.klarna.com *.newrelic.com *.nr-data.net *.facebook.net *.facebook.com *.analytics.google.com *.googletagmanager.com *.storyblok.com *.adnxs.com *.adnxs-simple.com *.bambuser.com *.bing.com *.clarity.ms *.cloudfront.net *.cookiebot.com *.crazyegg.com *.depashop.se *.doubleclick.net *.fls.doubleclick.net *.g.doubleclick.net *.ggpht.com *.googleapis.com *.google.com *.gstatic.com *.googlesyndication.com *.googletagservices.com *.googleoptimize.com *.googleusercontent.com *.hotjar.com *.hotjar.io *.hsadspixel.net *.hs-analytics.net *.hs-banner.com *.hscollectedforms.net *.hsforms.net *.hsleadflows.net *.hs-scripts.com *.hubspotfeedback.com *.usemessages.com cdn.jsdelivr.net *.kundo.se *.leadfeeder.com *.lfeeder.com *.liveshopping.bambuser.com *.lybestatic.tech *.recaptcha.net *.vendemore.com *.videoly.co *.yieldoptimizer.com *.youtube.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src getfirebug.com *.storyblok.com *.bing.com *.depashop.se *.googleapis.com *.google.com cdn.jsdelivr.net *.lybestatic.tech 'self' 'unsafe-inline'; object-src *.googlesyndication.com 'self' 'unsafe-inline'; media-src *.adnxs.com *.adnxs-simple.com data: *.google.com *.lybestatic.tech 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com payments.sandbox.braintree-api.com origin-analytics-sand.sandbox.braintree-api.com assets.braintreegateway.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io *.klarnaevt.com *.newrelic.com *.nr-data.net *.facebook.net *.facebook.com *.analytics.google.com *.googletagmanager.com *.google-analytics.com *.algolia.io *.adnxs.com *.adnxs-simple.com *.bing.com *.clarity.ms *.cloudfront.net *.cookiebot.com *.crazyegg.com *.doubleclick.net *.fls.doubleclick.net *.g.doubleclick.net *.googleapis.com *.google.com *.gstatic.com *.googlesyndication.com *.googletagservices.com *.hotjar.com *.hotjar.io *.hubspot.com js.hsadspixel.net js.hs-.net js.hs-banner.com forms.hsforms.com js.hsleadflows.net js.hs-scripts.com api.hubapi.com js.hubspotfeedback.com js.usemessages.com cdn.jsdelivr.net *.liveshopping.bambuser.com *.lybestatic.tech *.vendemore.com wss://*.hotjar.com blob: 'self' 'unsafe-inline'; child-src *.facebook.net *.facebook.com *.analytics.google.com *.googletagmanager.com *.google-analytics.com *.adnxs.com *.depashop.se *.doubleclick.net *.fls.doubleclick.net *.g.doubleclick.net *.google.com *.googlesyndication.com app.hubspot.com forms.hsforms.com js.hsadspixel.net js.hscollectedforms.net js.usemessages.com *.youtube.com http: https: blob: data: 'self' 'unsafe-inline'; default-src *.videoly.co *.wistia.com *.wistia.net *.youtube.com *.youtube-nocookie.com *.ytimg.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri *.adnxs.com 'self' 'unsafe-inline';
Strict-Transport-Security: max-age=31536000
Content-Security-Policy: upgrade-insecure-requests;
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
X-Node-Id: node2
Content-Encoding: gzip
Pragma: no-cache
Expires: -1
Cache-Control: no-store, no-cache, must-revalidate, max-age=0
Accept-Ranges: bytes
X-Node-Id: node2