HTTP/2 200 
server: nginx
date: Wed, 08 Jan 2025 19:40:40 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
p3p: policyref="http://www.shopmania.net/w3c/p3p.xml", CP="NID DSP NOI COR"
x-powered-by: ShopMania
x-frame-options: SAMEORIGIN
referrer-policy: no-referrer, same-origin
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
report-to: {"group":"csp_reports","max_age":600,"endpoints":[{"url":"https:\/\/www.shopmania.hr\/csp?action=report_csph&k=ByIhExAab0RGdgcWMRpibG9DOCY%3D","priority":1}]}
content-security-policy: frame-ancestors 'self'; manifest-src 'none'; font-src https: data: 'self'; img-src https: data: blob: 'self'; style-src https: data: blob: 'unsafe-inline' 'self'; script-src 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' data: https://www.shopmania.hr https://s.cdnshm.com www.shopmania.net *.facebook.com *.facebook.net *.fbcdn.net *.google-analytics.com *.googleadservices.com *.googletagmanager.com *.doubleclick.net *.google.com 'self'; object-src 'self'; media-src 'self'; default-src https://www.shopmania.hr https://s.cdnshm.com www.shopmania.net *.facebook.com *.facebook.net *.fbcdn.net *.google-analytics.com *.googleadservices.com *.googletagmanager.com *.doubleclick.net *.google.com 'self'; report-to csp_reports; report-uri https://www.shopmania.hr/csp?action=report_csph&k=ByIhExAab0RGdgcWMRpibG9DOCY%3D
x-permitted-cross-domain-policies: none
feature-policy: accelerometer 'none'; autoplay 'none'; camera 'none'; encrypted-media 'none'; fullscreen 'none'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; midi 'none'; payment 'none'; picture-in-picture 'none'; usb 'none'
set-cookie: _ICD_=US; expires=Sat, 11-Jan-2025 19:40:40 GMT; Max-Age=259200; path=/; secure; HttpOnly
link: <https://s.cdnshm.com>; rel=preconnect, <https://s.cdnshm.com>; rel=dns-prefetch, <https://connect.facebook.net/>; rel=preconnect, <https://connect.facebook.net/>; rel=dns-prefetch, <https://www.facebook.com/>; rel=preconnect, <https://www.facebook.com/>; rel=dns-prefetch, <https://www.google-analytics.com/>; rel=preconnect, <https://www.google-analytics.com/>; rel=dns-prefetch
content-encoding: br