Online-antikvariat.cz

location: https://www.restorio.cz?
vary: Accept-Encoding
content-type: text/html; charset=UTF-8
cache-control: no-cache, no-store, must-revalidate, max-age=0
expires: Fri, 11 Jul 2025 12:10:00 GMT
content-encoding: gzip
date: Thu, 11 Jul 2024 12:10:00 GMT
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
alt-svc: h3-34=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-27=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"

HTTP/2 200 
server: nginx
date: Thu, 11 Jul 2024 12:10:02 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
set-cookie: PHPSESSID=2db2117f23fb63820075fec62121c8fb; expires=Tue, 16 Jul 2024 17:10:01 GMT; Max-Age=450000; path=/; domain=www.restorio.cz; secure; HttpOnly; SameSite=Lax
report-to: {"group":"report-endpoint","max_age":10886400,"endpoints":[{"url":"https://sentry.vegadesign.cz/api/4/security/?sentry_key=aabf49608cca46b2bf8fb3c0ad2a8eba"}]}
content-security-policy-report-only: font-src *.googleapis.com *.gstatic.com *.fontawesome.com maxcdn.bootstrapcdn.com *.restorio.cz *.restorio.sk *.vegadesign.cz *.vegadesign.local 'self' data: *.twitter.com *.twimg.com *.zopim.com data: 'self' 'unsafe-inline'; form-action *.restorio.cz *.restorio.sk *.vegadesign.cz *.vegadesign.local *.facebook.com *.twitter.com yaby.eu 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com player.vimeo.com https://www.google.com/recaptcha/ www.google.com www.facebook.com platform.twitter.com *.restorio.cz *.restorio.sk *.vegadesign.cz *.vegadesign.local *.criteo.com *.criteo.net *.doubleclick.net *.facebook.com *.google.com *.googletagmanager.com *.gopay.cz *.gopay.com *.hotjar.com *.ladesk.com elibro.ladesk.com *.packeta.com *.pinterest.com *.twitter.com www.xtento.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.googleapis.com *.gstatic.com data: *.facebook.com www.facebook.com pinterest.com assets.pinterest.com syndication.twitter.com *.restorio.cz *.restorio.sk media.restorio.cz media.restorio.sk *.vegadesign.cz *.vegadesign.local blob: *.bing.com *.doubleclick.net *.clarity.ms *.facebook.net *.googleadservices.com *.google-analytics.com *.googletagmanager.com *.googlesyndication.com *.googleusercontent.com *.google.com *.google.cz *.google.sk *.heureka.cz *.heureka.sk im9.cz *.imedia.cz *.seznam.cz t.co *.twitter.com *.twimg.com yaby.eu *.ytimg.com *.zopim.com *.criteo.com sync.1rx.io ad.360yield.com eb2.3lift.com *.adform.net ib.adnxs.com x.bidswitch.net r.casalemedia.com csm.fr3.eu.criteo.net e1.emxdgt.com id5-sync.com matching.ivitrack.com exchange.mediavine.com contextual.media.net visitor.omnitagjs.com sync.outbrain.com jadserve.postrelease.com simage2.pubmatic.com pixel.rubiconproject.com match.sharethrough.com rtb-csync.smartadserver.com sync-t1.taboola.com sync.targeting.unrulymedia.com criteo-sync.teads.tv criteo-partners.tremorhub.com sync-criteo.ads.yieldmo.com ad.yieldlab.net www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ https://cdn.polyfill.io https://browser.sentry-cdn.com *.googletagmanager.com *.facebook.net connect.facebook.net twitter.com platform.twitter.com *.restorio.cz *.restorio.sk static.restorio.cz static.restorio.sk *.vegadesign.cz *.vegadesign.local *.addthis.com *.bing.com *.cloudflare.com *.clarity.ms *.cloudflareinsights.com *.cookiehub.com cookiehub.net *.cookiehub.eu *.criteo.com *.criteo.net *.dognet.sk login.dognet.sk *.doofinder.com *.doubleclick.net *.facebook.com *.fontawesome.com *.google.com *.google.cz *.google-analytics.com *.googleadservices.com *.googlesyndication.com *.gopay.cz *.gopay.com *.hotjar.com *.im9.cz *.imedia.cz *.ladesk.com *.packeta.com *.pinterest.com *.pinimg.com *.seznam.cz sc-static.net *.tiktok.com *.ads-twitter.com *.twitter.com *.twimg.com *.zdassets.com *.zopim.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com maxcdn.bootstrapcdn.com *.restorio.cz *.restorio.sk static.restorio.cz static.restorio.sk *.vegadesign.cz *.vegadesign.local *.cookiehub.com *.cookiehub.eu cookiehub.net *.googleapis.com *.gstatic.com *.twitter.com *.twimg.com *.zopim.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com data: 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com *.googleapis.com https://*.ingest.sentry.io *.google-analytics.com *.restorio.cz *.restorio.sk *.vegadesign.cz *.vegadesign.local *.bing.com bat.bing.com *.clarity.ms *.cookiehub.net *.criteo.com *.doofinder.com *.doubleclick.net *.facebook.com *.google.com *.google.cz *.google.sk *.googlesyndication.com *.packeta.com *.pinterest.com *.tiktok.com *.twitter.com *.twimg.com *.zdassets.com wss://widget-mediator.zopim.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.restorio.cz *.restorio.sk *.vegadesign.cz *.vegadesign.local yaby.eu 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://sentry.vegadesign.cz/api/4/security/?sentry_key=aabf49608cca46b2bf8fb3c0ad2a8eba; report-to report-endpoint;
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
vary: Accept-Encoding
x-magento-cache-debug: MISS
pragma: no-cache
expires: -1
cache-control: no-store, no-cache, must-revalidate, max-age=0
strict-transport-security: max-age=31536000; includeSubDomains; preload
referrer-policy: strict-origin-when-cross-origin
x-permitted-cross-domain-policies: master-only
permissions-policy: camera=(), microphone=()
content-encoding: br