zapatos.hu website report

HTTP/2 200 
server: nginx/1.18.0 (Ubuntu)
date: Sat, 17 Oct 2026 08:28:59 GMT
content-type: text/html; charset=utf-8
content-length: 63577
vary: Accept-Encoding, Accept-Encoding, Origin, Accept-Encoding
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
origin-agent-cluster: ?1
referrer-policy: strict-origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-dns-prefetch-control: off
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-xss-protection: 0
access-control-allow-credentials: true
content-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://js.stripe.com https://www.googletagmanager.com https://www.google-analytics.com https://googleads.g.doubleclick.net https://*.doubleclick.net https://www.googleadservices.com https://*.googlesyndication.com https://www.google.com https://connect.facebook.net https://accounts.google.com https://apis.google.com https://maps.googleapis.com https://pay.google.com https://www.gstatic.com https://www.youtube.com https://pixelapi.zappatos.ro https://pixelapi.zapatos.bg https://pixelapi.zapatos.hu https://pixelapi.zappatos.gr https://pixelapi.zapatos.si https://pixelapi.zapatos.fr https://pixelapi.zapatos.hr https://pixelapi.zappatos.it https://pixelapi.zapatos.cz https://pixelapi.zapatos.sk https://pixelapi.zapatos.pl https://pixelapi.zapatos.md https://*.criteo.com https://*.criteo.net https://login.dognet.sk https://pixel.wp.pl https://attr-2p.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://accounts.google.com https://www.gstatic.com https://use.typekit.net https://p.typekit.net; img-src 'self' data: blob: https:; font-src 'self' data: https://fonts.gstatic.com https://use.typekit.net; connect-src 'self' https://api.stripe.com https://*.google-analytics.com https://*.analytics.google.com https://stats.g.doubleclick.net https://ad.doubleclick.net https://*.doubleclick.net https://www.googletagmanager.com https://www.google.com https://www.google.ro https://www.googleadservices.com https://*.googlesyndication.com https://maps.googleapis.com https://accounts.google.com https://www.facebook.com https://pay.google.com https://pixelapi.zappatos.ro https://pixelapi.zapatos.bg https://pixelapi.zapatos.hu https://pixelapi.zappatos.gr https://pixelapi.zapatos.si https://pixelapi.zapatos.fr https://pixelapi.zapatos.hr https://pixelapi.zappatos.it https://pixelapi.zapatos.cz https://pixelapi.zapatos.sk https://pixelapi.zapatos.pl https://pixelapi.zapatos.md https://*.criteo.com https://*.criteo.net https://login.dognet.sk https://*.wp.pl https://event.2performant.com; frame-src 'self' https://js.stripe.com https://hooks.stripe.com https://www.googletagmanager.com https://www.youtube.com https://www.youtube-nocookie.com https://accounts.google.com https://www.facebook.com https://td.doubleclick.net https://*.doubleclick.net https://pay.google.com https://gum.criteo.com https://event.2performant.com https://chat-app-zapatosbot-prod.azurewebsites.net; media-src 'self' blob: https://img.zappatos.ro; object-src 'none'; base-uri 'self'; form-action 'self' https://secure.payu.ro https://www.facebook.com https://accounts.google.com; frame-ancestors 'self'; worker-src 'self' blob:; report-uri /api/csp-report
permissions-policy: camera=(), microphone=(), geolocation=(), usb=(), browsing-topics=()
ratelimit-policy: 40;w=60
ratelimit-limit: 40
ratelimit-remaining: 37
ratelimit-reset: 58
cache-control: no-cache, private
etag: W/"f859-nxAn8qsHyESCpSWacGFTC+7Q+hA"