horse24.com website report

HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Connection: keep-alive
Date: Thu, 01 Oct 2026 00:53:16 GMT
Access-Control-Allow-Headers: Origin,Content-Type,Accept,Authorization,X-CSRF-Token,X-Requested-With
Server: nginx
Vary: Accept-Encoding
Cache-Control: no-cache, private
Reporting-Endpoints: default="https://hjd54fc5.uriports.com/reports"
Report-To: {"group":"default","max_age":10886400,"endpoints":[{"url":"https:\/\/hjd54fc5.uriports.com\/reports"}],"include_subdomains":true}
NEL: {"report_to":"default","max_age":2592000,"include_subdomains":true,"failure_fraction":1}
Content-Security-Policy-Report-Only: report-uri https://hjd54fc5.uriports.com/reports;base-uri 'self';connect-src 'self' *.horse24.com timesync.dressage24.com timesync.horse24.com *.theo.live *.theoplayer.com *.millicast.com ws://*.pusher.com wss://*.pusher.com ws://pusher.dressage24.com wss://pusher.dressage24.com ws://pusher.horse24.com wss://pusher.horse24.com https://api.ipdata.co https://www.google.com https://www.google-analytics.com https://www.googleadservices.com https://stats.g.doubleclick.net https://pagead2.googlesyndication.com https://www.googletagmanager.com https://translate.googleapis.com https://fp.te.horse24.com https://fpte.horse24.com https://consentcdn.cookiebot.com https://consent.cookiebot.com https://www.facebook.com https://connect.facebook.net https://graph.facebook.com;default-src 'self';form-action 'self' https://www.facebook.com https://www.googletagmanager.com https://www.google.com;img-src 'self' dressage24.s3.amazonaws.com horse24-local.s3.amazonaws.com horse24-medias.s3.amazonaws.com https://imgsc.cookiebot.com https://imgsct.cookiebot.com *.ytimg.com *.youtube.com https://licensing.theoplayer.com https://www.facebook.com https://connect.facebook.net https://www.google-analytics.com https://www.googletagmanager.com https://www.google.com https://translate.google.com https://fonts.gstatic.com data:;media-src 'self' data:;object-src 'none';script-src 'self' 'strict-dynamic' 'unsafe-eval' www.googletagmanager.com consent.cookiebot.com consentcdn.cookiebot.com connect.facebook.net 'nonce-zACsHSFhQ6kZ9uXEIEvS8TwnpSFgQjOt';style-src 'self' 'unsafe-inline' cdn.jsdelivr.net fonts.googleapis.com https://www.gstatic.com;font-src 'self' fonts.gstatic.com cdn.jsdelivr.net data:;frame-src https://consentcdn.cookiebot.com https://www.youtube.com http://www.youtube.com https://www.youtube-nocookie.com https://www.google.com/ https://access.workspace.google.com https://www.googletagmanager.com https://fpte.horse24.com https://www.hippomundo.com https://www.facebook.com;child-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://www.hippomundo.com
Set-Cookie: XSRF-TOKEN=eyJpdiI6IlVjWnY4ODVsZloyclNjVVY5Slwvell3PT0iLCJ2YWx1ZSI6ImpHaG9NTGVlczZVc3kwUGloaHVpT2orMHRVV1ExTG5GQVUrVGdGXC96MFhBXC85MUJEemlvZDVoQU5jTVNJekFLUCIsIm1hYyI6IjVkYWE4OWI2NjM3ZjVjNjliNGJjMTAzZGQwNTk2ZjRkMTgzZTY5MDEwMjliYjFjNjIyYzEwN2YwNDhiMzYxMTUifQ%3D%3D; expires=Thu, 01-Oct-2026 02:53:16 GMT; Max-Age=7200; path=/; samesite=lax, horse24_session=eyJpdiI6ImNMZTlQSFk1c1ZwMnZvdWUxODBUOVE9PSIsInZhbHVlIjoiREJ3TkpxbDZ5RUV5U2twVXoxUEpMRyt4bXUzSnpIZ3EyK0FBWXl2dVNKSXc3Mm5jYlBmbnA1citGZ1Z1Vjh4SiIsIm1hYyI6ImMxYjM2NTkwNGVkZjQxZTZkMDVjZmUzOTVjYmM5MjQzYTcxZmE1MTY1Y2FhNDNhNTI3MGY2MTYzMWMzOWM1ZTIifQ%3D%3D; expires=Thu, 01-Oct-2026 02:53:16 GMT; Max-Age=7200; path=/; httponly; samesite=lax
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS, PUT, DELETE, HEAD
Access-Control-Allow-Credentials: true always
X-Cache: Miss from cloudfront
Via: 1.1 74b852b2cc37f65a489023e039126b5c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR61-P3
X-Amz-Cf-Id: mS72RAvqPprtabuCUYn6Do945DSYQaFf0ZR6HA16Hzu4UfJAz7z8ZA==
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Referrer-Policy: strict-origin-when-cross-origin
X-Content-Type-Options: nosniff