horace.co website report

HTTP/2 200
date: Sun, 25 Oct 2026 11:39:45 GMT
content-type: text/html; charset=utf-8
cf-ray: a500f14b6e0c14c6-CDG
cf-cache-status: DYNAMIC
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: -1
server: cloudflare
set-cookie: lagrange_session=df816bdf-e300-4abb-a3c9-120d92ff71b1; Path=/; Max-Age=1800; HttpOnly; SameSite=Lax, wcid=fPk3c+msVNOwAAAB; Path=/; Max-Age=31536000; HttpOnly; SameSite=Lax
strict-transport-security: max-age=31536000; includeSubDomains
vary: Accept-Encoding
pragma: no-cache
content-security-policy-report-only: font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com cdn.jsdelivr.net cdn.almapay.com https://cdnjs.cloudflare.com *.fontawesome.com horace.com cdn.kustomerapp.com static.klaviyo.com https://www.gstatic.com https://fonts.gstatic.com *.klarnacdn.net https://fonts.bunny.net maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action *.paypal.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.sharethis.com *.getalma.eu *.almapay.com/ *.stripe.com/ *.checkout.com/ *.adyen.com/ td.doubleclick.net www.facebook.com tr.snapchat.com tr6.snapchat.com www.googletagmanager.com *.paidonresults.net *.paidonresults.com portgk.com porjs.com https://www.google.com *.weltpixel.com *.googletagmanager.com *.doubleclick.net *.klarna.com js.mollie.com 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com *.sharethis.com https://images.unsplash.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://maps.googleapis.com https://maps.gstatic.com horace.com www.facebook.com bat.bing.net c.contentsquare.net cdn.cookielaw.org bat.bing.com www.google.fr maps.gstatic.com cdn.prod2.kustomerhostedcontent.com www.google.es www.google.us www.google.co.uk www.google.de www.google.ir tr.snapchat.com tr6.snapchat.com pagead2.googlesyndication.com *.facebook.com *.reddit.com *.googletagmanager.com *.doubleclick.net *.google.com maps.googleapis.com *.klarna.com *.klarnaevt.com *.klarnacdn.net https://firebasestorage.googleapis.com https://www.mollie.com https://www.google.fr https://api.mapbox.com *.tile.openstreetmap.org data: 'self' 'unsafe-inline'; script-src googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.sharethis.com cdn.jsdelivr.net https://maps.googleapis.com https://player.vimeo.com widget.freshworks.com m2epro.freshdesk.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://cdnjs.cloudflare.com cdn.cookielaw.org horace.com browser.sentry-cdn.com polyfill-fastly.io static.klaviyo.com connect.facebook.net *.convertexperiments.com logs.convertexperiments.com static-tracking.klaviyo.com www.artfut.com bat.bing.com www.tag4arm.com t.contentsquare.net static.affilae.com sc-static.net analytics.tiktok.com www.clarity.ms scripts.clarity.ms cdn.amplitude.com cdn.kustomerapp.com maps.googleapis.com ajax.cloudflare.com tr.snapchat.com k-aeu1.contentsquare.net js.mollie.com porjs.com *.paidonresults.net *.paidonresults.com portgk.com trt.usedrop.io trt-scripts.usedrop.io https://www.google.com https://www.gstatic.com *.googletagmanager.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com unpkg.com *.doubleclick.net *.klarna.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.avada.io *.shopify.com https://browser.sentry-cdn.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com *.sharethis.com cdn.jsdelivr.net widget.freshworks.com m2epro.freshdesk.com https://static.klaviyo.com https://fonts.googleapis.com https://cdnjs.cloudflare.com *.fontawesome.com horace.com *.tagmanager.google.com *.googletagmanager.com *.klarnacdn.net https://fonts.bunny.net maxcdn.bootstrapcdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src download-video-ak.vimeocdn.com player.vimeo.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com vimeo.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.sharethis.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io *.getalma.eu *.almapay.com https://maps.googleapis.com https://player.vimeo.com widget.freshworks.com m2epro.freshdesk.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ horace.com region1.analytics.google.com cdn.cookielaw.org o4508795589427200.ingest.de.sentry.io fast.a.klaviyo.com static-forms.klaviyo.com v.clarity.ms j.clarity.ms *.convertexperiments.com logs.convertexperiments.com *.metrics.convertexperiments.com *.signals.convertexperiments.com region1.google-analytics.com maps.googleapis.com horace.api.kustomerapp.com k-aeu1.contentsquare.net www.google-analytics.com tr.snapchat.com tr6.snapchat.com s.clarity.ms bat.bing.net c.contentsquare.net www.tag4arm.com matomo.horace.app api.eu.amplitude.com *.paidonresults.net *.paidonresults.com portgk.com porjs.com pagead2.googlesyndication.com browser.sentry-cdn.com www.google.fr www.google.es www.google.co.uk www.google.de www.google.us www.google.it www.google.be q.clarity.ms trt.usedrop.io trt-scripts.usedrop.io *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.doubleclick.net *.run.app *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com https://get.geojs.io *.avada.io https://nominatim.openstreetmap.org sentry.horace.tech 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src horace.com bat.bing.com bat.bing.net c.contentsquare.net k-aeu1.contentsquare.net v.clarity.ms j.clarity.ms googleads.g.doubleclick.net www.tag4arm.com matomo.horace.app tr6.snapchat.com analytics.tiktok.com www.google.fr www.google.com porjs.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';, default-src 'self' https: data: blob: 'unsafe-inline' 'unsafe-eval'; report-uri https://sentry.horace.tech/api/3/security/?sentry_key=954b57762b0f58307418ab76cbad963a, default-src 'self' https: data: blob: 'unsafe-inline' 'unsafe-eval'; report-uri https://sentry.horace.tech/api/3/security/?sentry_key=954b57762b0f58307418ab76cbad963a
permissions-policy: camera=(), microphone=(), geolocation=(self), payment=(self)
referrer-policy: strict-origin-when-cross-origin
x-built-with: Hyva Themes
x-cache: HIT
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=t8xXIKVop%2FH8fFsQwcVH3uFRP5pfhy06mZYgB8fSp7MbO6NncEp39wZHpk%2F5TF6Saeeh418AeZOu%2F9AFMYU08JJK88LJOSgucyWeYwBEaAcD5N1%2BY4DkpouWAK0%3D"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
content-encoding: br