Toogoodtogo.ie

date: Fri, 06 Oct 2023 05:50:01 GMT
location: https://www.toogoodtogo.ie/
cache-control: max-age=3600
expires: Fri, 06 Oct 2023 06:50:01 GMT
report-to: {"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v3?s=JucARI9Q8dQDhCqEVhpg0AOiD5QYiozA7nbaVb7ZH5AEtBkQ6B8botoprs9PdsVNQaKWX%2ByoOJ1EW1hKhIvtBftcZAUhWZLmcGhaIiv5QOi5O5Td7mm39K%2FHkf1rq6ATNg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 811b9fde4e656330-ORD
alt-svc: h3=":443"; ma=86400

HTTP/2 301 
content-type: text/html
content-length: 119
location: https://www.toogoodtogo.com/en-ie
date: Fri, 06 Oct 2023 05:50:02 GMT
content-security-policy: default-src 'self';frame-src 'self' player.vimeo.com www.youtube.com policy.app.cookieinformation.com *.hotjar.com *.doubleclick.net *.facebook.com;media-src 'none';font-src 'self' blob: data: *.abtasty.com *.gstatic.com *.googleapis.com;script-src 'self' 'unsafe-inline' 'unsafe-eval' *.hotjar.com widget.dixa.io *.polyfill.io datadome.co *.app.cookieinformation.com *.google.com www.googletagmanager.com tagmanager.google.com *.sentry.io *.sentry-cdn.com *.bing.com blob: *.abtasty.com *.googleapis.com;img-src 'self' data: *.bing.com *.google.com *.doubleclick.net *.linkedin.com *.facebook.com *.ytimg.com *.googletagmanager.com *.amazonaws.com *.abtasty.com *.hotjar.com *.google.es *.google.co.uk *.google.fr *.google.dk *.google.it *.google.de *.google.no *.google.pt *.google.ie *.google.ch *.google.nl *.google.be *.google.pl *.google.se *.google.at *.google.ca blob: *.abtasty.com *.amazonaws.com images.tgtg.ninja i.vimeocdn.com apptoogoodtogo.com;worker-src 'self' blob: www.google.com;style-src 'self' 'unsafe-inline' static.hotjar.com script.hotjar.com *.gstatic.com *.googleapis.com unsafe-inline: *.abtasty.com *.gstatic.com *.googleapis.com;connect-src 'self' *.bing.com cdn.linkedin.oribi.io https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com *.facebook.com *.google.com *.linkedin.com localhost:* www.google-analytics.com *.abtasty.com *.sentry.io www.google.com logs1412.xiti.com *.app.cookieinformation.com mkt-cms.toogoodtogo.com mkt-cms.toogoodtogo.com adservice.google.com mkt-cms-staging.toogoodtogo.com;form-action 'self' *.google.com *.facebook.com *.facebook.net;script-src-elem 'self' 'unsafe-inline' localhost:* *.googleadservices.com *.google.com connect.facebook.net snap.licdn.com *.realytics.io *.hotjar.com *.hotjar.io *.hotjar.com *.bing.com *.abtasty.com www.googletagmanager.com *.app.cookieinformation.com *.aticdn.net;object-src 'none';
x-frame-options: SAMEORIGIN
referrer-policy: same-origin
cross-origin-opener-policy: same-origin
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 2ac235acced332a2c079b041387a4918.cloudfront.net (CloudFront)
x-amz-cf-pop: ORD56-P1
x-amz-cf-id: GtO9cQ7S2T0n8FKBnOaD0msKq9zr75AoCwPQCr884glLubt4vl-jNw==

HTTP/2 200 
content-type: text/html;charset=utf-8
date: Fri, 06 Oct 2023 05:50:02 GMT
content-security-policy: default-src 'self';frame-src 'self' player.vimeo.com www.youtube.com policy.app.cookieinformation.com *.hotjar.com *.doubleclick.net *.facebook.com;media-src 'none';font-src 'self' blob: data: *.abtasty.com *.gstatic.com *.googleapis.com;script-src 'self' 'unsafe-inline' 'unsafe-eval' *.hotjar.com widget.dixa.io *.polyfill.io datadome.co *.app.cookieinformation.com *.google.com www.googletagmanager.com tagmanager.google.com *.sentry.io *.sentry-cdn.com *.bing.com blob: *.abtasty.com *.googleapis.com;img-src 'self' data: *.bing.com *.google.com *.doubleclick.net *.linkedin.com *.facebook.com *.ytimg.com *.googletagmanager.com *.amazonaws.com *.abtasty.com *.hotjar.com *.google.es *.google.co.uk *.google.fr *.google.dk *.google.it *.google.de *.google.no *.google.pt *.google.ie *.google.ch *.google.nl *.google.be *.google.pl *.google.se *.google.at *.google.ca blob: *.abtasty.com *.amazonaws.com images.tgtg.ninja i.vimeocdn.com apptoogoodtogo.com;worker-src 'self' blob: www.google.com;style-src 'self' 'unsafe-inline' static.hotjar.com script.hotjar.com *.gstatic.com *.googleapis.com unsafe-inline: *.abtasty.com *.gstatic.com *.googleapis.com;connect-src 'self' *.bing.com cdn.linkedin.oribi.io https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com *.facebook.com *.google.com *.linkedin.com localhost:* www.google-analytics.com *.abtasty.com *.sentry.io www.google.com logs1412.xiti.com *.app.cookieinformation.com mkt-cms.toogoodtogo.com mkt-cms.toogoodtogo.com adservice.google.com mkt-cms-staging.toogoodtogo.com;form-action 'self' *.google.com *.facebook.com *.facebook.net;script-src-elem 'self' 'unsafe-inline' localhost:* *.googleadservices.com *.google.com connect.facebook.net snap.licdn.com *.realytics.io *.hotjar.com *.hotjar.io *.hotjar.com *.bing.com *.abtasty.com www.googletagmanager.com *.app.cookieinformation.com *.aticdn.net;object-src 'none';
x-frame-options: SAMEORIGIN
referrer-policy: same-origin
cross-origin-opener-policy: same-origin
cache-control: public, max-age=60, s-maxage=60
x-powered-by: Nuxt
content-encoding: gzip
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 0f5dfd0195eddd55ca4681b68f93d9ae.cloudfront.net (CloudFront)
x-amz-cf-pop: ORD56-P9
x-amz-cf-id: AI1qyNE2FYpPPjSiLzIqPBMWxMcmj6k2ihpOdcgJlinNKQQ1oQCpJA==