Masif.ro

server: nginx
date: Tue, 18 Mar 2025 17:30:22 GMT
content-type: text/html; charset=UTF-8
content-length: 60467
report-to: {"group":"report-endpoint","max_age":10886400,"endpoints":[{"url":"https://f3c9ff08-81a6-4d3d-9f53-8c9df6bc38ad.sansec.watch/"}]}
content-security-policy: font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com https://www.gstatic.com https://fonts.gstatic.com *.fontawesome.com https://www.google.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.paypal.com *.facebook.com https://lapp.leanpay.hr https://app.leanpay.hr https://stage-app.leanpay.si https://app.leanpay.si https://stage-app.leanpay.ro https://vendor.leanpay.ro https://plumrocket.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://*.google.com *.doubleclick.net *.facebook.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com https://plumrocket.com *.wesupply.xyz https://wesupplylabs.com *.weltpixel.com www.xtento.com *.googletagmanager.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io 'self' data: https://*.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com www.apptrian.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com https://*.gstatic.com https://*.googleapis.com https://*.googleusercontent.com magefan.com cm.magefan.com t.themarketer.com cdn1.themarketer.com https://trusted.ro/atestare/marca-19b89-1.webp https://www.google.ro/pagead/ https://www.google.ro/ads/ *.hsforms.net *.hsforms.com maps.gstatic.com *.pixriot.com *.storeimaging.com www.xtento.com cdn.xtento.com *.clarity.ms *.contentspeed.ro www.google.ae www.google.al www.google.at www.google.az www.google.be www.google.ca www.google.ch www.google.co.ao www.google.co.il www.google.co.in www.google.co.ke www.google.co.kr www.google.co.ma www.google.com.au www.google.com.bd www.google.com.br www.google.com.cy www.google.com.ec www.google.com.eg www.google.com.gt www.google.com.hk www.google.com.mm www.google.com.mx www.google.com.my www.google.com.pe www.google.com.ph www.google.com.pk www.google.com.qa www.google.com.sa www.google.com.sg www.google.com.sv www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.vn www.google.co.nz www.google.co.th www.google.co.tz www.google.co.uk www.google.co.ve www.google.cz www.google.de www.google.dk www.google.es www.google.fi www.google.fr www.google.gr www.google.hu www.google.ie www.google.is www.google.it www.google.lu www.google.md www.google.me www.google.mg www.google.nl www.google.no www.google.pl www.google.pt www.google.rs www.google.ru www.google.sc www.google.se www.google.si www.google.sk www.google.sn *.kaercher-media.com *.netlogiq.info *.themarketer.com data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com www.apptrian.com chimpstatic.com downloads.mailchimp.com *.list-manage.com https://*.gstatic.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com *.googleapis.com t.themarketer.com cdn1.themarketer.com https://sdk.flowpoint.ai/ https://static.hotjar.com/ https://script.hotjar.com/ *.newsmanapp.com *.hsforms.net *.hsforms.com maps.googleapis.com *.cloudflare.com www.xtento.com cdn.xtento.com https://chimpstatic.com *.clarity.ms *.themarketer.com *.jsdelivr.net 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com downloads.mailchimp.com https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com *.fontawesome.com *.google.com maxcdn.bootstrapcdn.com t.themarketer.com cdn1.themarketer.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.google-analytics.com *.facebook.com *.facebook.net https://*.google.com www.apptrian.com https://ipinfo.io https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com http://dpm.demdex.net https://www.google.com https://www.gstatic.com t.themarketer.com cdn1.themarketer.com https://pagead2.googlesyndication.com/pagead/buyside_topics/set/ https://sdk.flowpoint.ai/ https://googleads.g.doubleclick.net/pagead/landing wss://ws.hotjar.com/api/v2/client/ https://content.hotjar.io/ t.elasticsuite.io *.hsforms.net *.hsforms.com *.pixriot.com *.storeimaging.com *.clarity.ms *.doubleclick.net www.google.at www.google.be www.google.bg www.google.ca www.google.ch www.google.co.ao www.google.co.in www.google.co.ke www.google.com.cy www.google.com.hk www.google.com.mx www.google.com.qa www.google.com.tr www.google.com.ua www.google.co.uk www.google.cz www.google.de www.google.dk www.google.es www.google.fr www.google.gr www.google.hu www.google.ie www.google.it www.google.md www.google.me www.google.nl www.google.no www.google.pl www.google.pt www.google.ro www.google.rs www.google.ru www.google.sc www.google.se www.google.si *.hotjar.io *.newsmanapp.com *.themarketer.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://f3c9ff08-81a6-4d3d-9f53-8c9df6bc38ad.sansec.watch/; report-to report-endpoint;
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-ua-compatible: IE=edge
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-encoding: gzip
vary: Accept-Encoding
pragma: no-cache
expires: -1
cache-control: no-store, no-cache, must-revalidate, max-age=0
accept-ranges: bytes