puuilo.fi

Connection: keep-alive
Content-Length: 0
x-xss-protection: 1; mode=block
x-debug-info: eyJyZXRyaWVzIjowfQ==
x-content-type-options: nosniff
x-platform-server: i-025b5e72020b32ac6, i-025b5e72020b32ac6
content-security-policy: font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.googleapis.com data: static.lipscore.com *.fontawesome.com *.criteo.com *.hotjar.com *.hotjar.io data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com test1.maksuturva.fi payments.maksuturva.fi www.maksuturva.fi *.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.googleapis.com 'self'; frame-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com www.google.com fi1.frosmo.com *.fi1.frosmo.com d2oarllo6tn86.cloudfront.net sdx.microsoft.com amc.demdex.net *.facebook.com *.hotjar.com *.hotjar.io *.criteo.com *.googlesyndication.com *.doubleclick.net *.googletagmanager.com *.google.analytics.com *.google-analytics.com *.googleusercontent.com *.googleapis.com *.googleadservices.com *.gstatic.com *.app.cookieinformation.com *.visualwebsiteoptimizer.com app.vwo.com https://mfiltersuodattimet.fi/ metrics.puuilo.fi view.publitas.com *.weltpixel.com *.typeform.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.googleapis.com static.lipscore.com blob: img.youtube.com https://www.unifaunonline.se https://*.tile.openstreetmap.org/ fi1.frosmo.com *.fi1.frosmo.com d2oarllo6tn86.cloudfront.net *.bing.com  *.microsoft.com * *.wistia.com *.wistia.net *.clarity.ms *.analytics.google.com *.visualwebsiteoptimizer.com app.vwo.com chart.googleapis.com wingify-assets.s3.amazonaws.com *.ytimg.com *.facebook.com *.reddit.com *.googletagmanager.com *.doubleclick.net *.google.com *.maksuturva.fi data: 'self' 'unsafe-inline'; script-src geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com www.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com ajax.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ static.lipscore.com https://api.unifaun.com https://bat.bing.com https://r.bing.com *.convertexperiments.com data: www.google.com maps.googleapis.com tagmanager.google.com *.google-analytics.com js-agent.newrelic.com bam.nr-data.net api.custobar.com connect.facebook.net *.criteo.net *.criteo.com payments.maksuturva.fi *.googlesyndication.com *.hotjar.com *.hotjar.io gstatic.com *.confirmit.com *.doubleclick.net *.jquery.com *.licdn.com d2oarllo6tn86.cloudfront.net cdnjs.cloudflare.com *.videoly.co *.analytics.solteq.solutions *.youtube-nocookie.com *.wistia.com *.wistia.net *.app.cookieinformation.com *.clarity.ms *.visualwebsiteoptimizer.com app.vwo.com fi1.frosmo.com *.fi1.frosmo.com */chart.js analytics.tiktok.com *.amplifyapp.com reservation.rowlygo.fi view.publitas.com *.googletagmanager.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com unpkg.com *.typeform.com *.maksuturva.fi 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com static.lipscore.com *.fontawesome.com fi1.frosmo.com *.fi1.frosmo.com d2oarllo6tn86.cloudfront.net *.bing.com use.typekit.net p.typekit.net tagmanager.google.com *.visualwebsiteoptimizer.com app.vwo.com *.tagmanager.google.com *.googletagmanager.com *.typeform.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src data: 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io maps.googleapis.com wapi.lipscore.com users.lipscore.com fi1.frosmo.com *.fi1.frosmo.com d2oarllo6tn86.cloudfront.net *.bing.com wss://*.bing.com env-6410208.paas.datacenter.fi bam.nr-data.net dpm.demdex.net *.analytics.google.com stats.g.doubleclick.net googleads.g.doubleclick.net api.custobar.com *.hotjar.com *.hotjar.io wss://*.hotjar.com wss://*.hotjar.io payments.maksuturva.fi *.criteo.com *.confirmit.com *.doubleclick.net *.googletagmanager.com metrics.puuilo.se metrics.puuilo.fi gtm-wgmks6q-ytfmm.uc.r.appspot.com *.metrics.convertexperiments.com logs.convertexperiments.com *.deepvision.cloud.solteq.com *.analytics.solteq.solutions *.app.cookieinformation.com *.clarity.ms *.visualwebsiteoptimizer.com app.vwo.com *.googlesyndication.com analytics.tiktok.com bat.bing.net bc65ygo6vze6fgbi7acxh7f6je.appsync-api.eu-west-1.amazonaws.com urentdealer168766d54a99427da340b38b0ae0181a135646-master.s3.eu-west-1.amazonaws.com cognito-identity.eu-west-1.amazonaws.com *.amplifyapp.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.run.app *.typeform.com *.maksuturva.fi 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src fi1.frosmo.com *.fi1.frosmo.com d2oarllo6tn86.cloudfront.net env-6410208.paas.datacenter.fi 'unsafe-inline' *.videoly.com *.youtube-nocookie.com *.youtube.com *.ytimg.com *.wistia.com *.wistia.net *.videoly.net 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';
traceresponse: 00-18b4ad388de31e2269bfb59bfd24bd43-92b13850a7afd007-01
pragma: no-cache
content-type: text/html; charset=UTF-8
x-frame-options: SAMEORIGIN
accept-ranges: bytes
location: https://www.puuilo.fi/
expires: Sat, 31 May 2025 14:36:51 GMT
set-cookie: PHPSESSID=f744b27262d15df9fe885dc59aea074e; expires=Fri, 05 Jun 2026 14:36:51 GMT; Max-Age=432000; path=/; domain=puuilo.fi; secure; HttpOnly; SameSite=Lax, wp_ga4_user_id=deleted; expires=Thu, 01 Jan 1970 00:00:01 GMT; Max-Age=0; path=/; domain=puuilo.fi; SameSite=Lax, wp_ga4_customerGroup=NOT%20LOGGED%20IN; expires=Mon, 31 May 2027 14:36:51 GMT; Max-Age=31536000; path=/; domain=puuilo.fi; SameSite=Lax, X-Magento-Vary=585d32bb7399a2d4e85299728224cd7ef4d290fb9460167659e47d52439e6613; expires=Fri, 05 Jun 2026 14:36:51 GMT; Max-Age=432000; path=/; secure; HttpOnly; SameSite=Lax
x-timer: S1780238211.121548,VS0,VE107
cache-control: max-age=0, must-revalidate, no-cache, no-store
Date: Sun, 31 May 2026 14:36:51 GMT
X-Served-By: cache-lhr-egwu1540053-LHR, cache-lhr-egwu1540053-LHR, cache-lhr-egwu1540033-LHR, cache-par-lfpg1960086-PAR
X-Cache: MISS, MISS, MISS
X-Cache-Hits: 0, 0, 0
strict-transport-security: max-age=31536000
Vary: Accept-Encoding,Cookie