monkeystudio.it website report

HTTP/2 200
access-control-allow-credentials: true
access-control-allow-headers: Origin, Content-Type, Accept, Authorization, X-Request-With, Set-Cookie, Cookie, Bearer
access-control-allow-methods: GET, POST, OPTIONS
access-control-expose-headers: Content-Security-Policy, Location
access-control-max-age: 600
x-content-type-options: nosniff, nosniff
strict-transport-security: max-age=4838400; includeSubdomains;, max-age=4838400; includeSubdomains;
referrer-policy: strict-origin, strict-origin
permissions-policy: accelerometer=(),gyroscope=(),magnetometer=(),microphone=(),midi=(),payment=(), accelerometer=(),gyroscope=(),magnetometer=(),microphone=(),midi=(),payment=()
server: unknown, Apache/2.4.69 (Debian)
x-xss-protection: 1; mode=block, 1; mode=block
access-control-allow-origin: https://vipdistrict.com
vary: Origin,Accept-Encoding
date: Fri, 23 Oct 2026 19:40:34 GMT
cache-control: public, max-age=0, s-maxage=600
content-security-policy: default-src https: wss: data: 'unsafe-inline' 'unsafe-eval'; frame-src 'self' blob: https://www.google.com https://www.gstatic.com https://recaptcha.google.com https://*.hubspot.com https://*.hsforms.net https://*.hubspot.net https://vimeo.com https://player.vimeo.com; script-src 'unsafe-inline' 'unsafe-eval' 'self' https://ams.wpml.org *.stackpathcdn.com *.vipbonus.it static.zdassets.com *.google.com www.googleadservices.com googleads.g.doubleclick.net api.eu-1.smooch.io static.zdassets.com cdn.ckeditor.com oss.maxcdn.com d3js.org gyrocode.github.io ws.sharethis.com *.netdna-ssl.com *.hotjar.com c64.assets-yammer.com unpkg.com *.googleapis.com *.google-analytics.com *.colectivosvip.com code.jquery.com cdnjs.cloudflare.com cdn.jsdelivr.net *.gstatic.com *.vimeo.com stats.g.doubleclick.net *.googletagmanager.com cdn.tiny.cloud cdn.datatables.net maxcdn.bootstrapcdn.com momentjs.com stackpath.bootstrapcdn.com clubandalbrok.com www.clubandalbrok.com *.cookieyes.com cdn-cookieyes.com https://*.hubspot.com https://*.hs-scripts.com https://*.hs-banner.com https://*.hs-analytics.net https://*.hsadspixel.net https://*.hscollectedforms.net https://*.hsforms.com https://*.hsforms.net https://*.hsappstatic.net https://*.hscta.net https://*.usemessages.com www.clarity.ms *.clarity.ms sc.lfeeder.com assets.apollo.io *.apollo.io; img-src 'self' data: https: https://*.hsforms.com https://*.hubspot.com www.googleadservices.com googleads.g.doubleclick.net *.doubleclick.net; connect-src 'self' https: wss: https://*.hubspot.com https://*.hubapi.com; worker-src 'self' blob:;
link: <https://vipdistrict.com/>; rel=shortlink
content-encoding: gzip
x-frame-options: SAMEORIGIN
content-length: 53208
content-type: text/html; charset=UTF-8