Traffic Report and Web Analysis for Tol - tol.do

0 :HTTP/2 200
date :Sat, 08 Aug 2026 02:28:29 GMT
content-type :text/html; charset=utf-8
report-to :{"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=59c
EEniRVzZhwp7t2Yqv4A2zhqjk2ez9hmEk9OXd4G9VhhF1NJyyJ05DRMxpXTBAofUA6b7JEiCc1hIcKl7%2FzTnyXXKwsxGJ7%2FS
iL5KrsXLgmyGmCU4joHj4LbSBGQ%3D%3D"}]}
nel :{"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
access-control-allow-origin :https://herohero.co/
cache-control :private, max-age=0, must-revalidate
strict-transport-security :max-age=0; includeSubDomains; preload
x-rendered-by :Cloudflare Pages Worker
x-ssr-status :Skipped-NoHandler
content-security-policy :base-uri 'self'; frame-ancestors 'self'; default-src 'self'; object-src 'none'; script-src 'self' 'n
once-EDNfnf03nceIOffn39fn3e9h3sdfa' 'strict-dynamic' blob: https: 'unsafe-inline' assets.mediadelive
ry.net *.googletagmanager.com *.google-analytics.com 'wasm-unsafe-eval'; connect-src 'self' *.double
click.net *.googlesyndication.com *.facebook.com *.google-analytics.com *.googletagmanager.com analy
tics.tiktok.com analytics-ipv6.tiktokw.us *.ezdrm.com *.gjirafa.net cdn.vpplayer.tech *.wasabisys.co
m *.vpplayer.net *.gjirafa.tech *.blob.gjirafa.tech ingest.eu.signoz.cloud *.sentry.io *.ingest.sent
ry.io *.stripe.com *.herohero.co herohero.co *.googleapis.com *.google.cz *.google.sk *.google.com *
.google.nl *.google.es *.google.pl www.lhinsights.com *.bunnycdn.com cdnjs.cloudflare.com *.conversi
onsapigateway.com blob:; media-src 'self' *.herohero.co blob: cdn.vpplayer.tech *.vpplayer.net *.gji
rafa.tech *.bunnycdn.com; style-src 'self' 'unsafe-inline' cdnjs.cloudflare.com iframe.mediadelivery
.net *.bunnycdn.com fonts.googleapis.com; font-src 'self' data: fonts.gstatic.com fonts.googleapis.c
om; img-src 'self' *.vpplayer.tech cdn.vpplayer.tech *.vpplayer.net github.githubassets.com cdn.jsde
livr.net *.google-analytics.com *.googletagmanager.com https://pagead2.googlesyndication.com *.faceb
ook.com facebook.com connect.facebook.net heroheroco-assets.storage.googleapis.com heroheroco-assets
-prod.storage.googleapis.com *.google.cz *.google.sk *.google.com *.google.nl *.google.es *.google.p
l analytics-ipv6.tiktokw.us analytics.tiktok.com cdnjs.cloudflare.com *.herohero.co *.cloudimg.io *.
ytimg.com blob: data:; child-src 'self' blob: *.google-analytics.com *.googletagmanager.com td.doubl
eclick.net *.facebook.com www.youtube-nocookie.com *.herohero.co herohero.co *.stripe.com iframe.med
iadelivery.net *.bunnycdn.com; worker-src 'self' blob:; report-to csp-endpoint
cross-origin-opener-policy :same-origin-allow-popups
permissions-policy :geolocation=(), microphone=(), camera=()
referrer-policy :origin
reporting-endpoints :csp-endpoint="https://herohero.co/csp-report?t=759b9c777372fdcf62688a71cc67665c31c96779a4107ab93efa1
31e1fd42987"
x-content-type-options :nosniff
x-frame-options :DENY
x-xss-protection :1; mode=block
server :cloudflare
cf-cache-status :DYNAMIC
cf-ray :a27b16842b3a51e4-CDG
alt-svc :h3=":443"; ma=86400