gnkdinamo.hr

Date: Thu, 04 Jun 2026 16:10:13 GMT
Content-Type: text/html; charset=utf-8
Connection: keep-alive
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Location: /hr
Vary: Accept
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Reporting-Endpoints: csp-endpoint="/api/csp-report"
Permissions-Policy: accelerometer=(), autoplay=(self), camera=(), clipboard-read=(self), clipboard-write=(self), display-capture=(), encrypted-media=(self), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(self), picture-in-picture=(self), publickey-credentials-get=(self), screen-wake-lock=(), sync-xhr=(self), usb=(), web-share=(self), xr-spatial-tracking=()
Content-Security-Policy: report-uri /api/csp-report;report-to csp-endpoint;default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-hashes' https://maps.googleapis.com https://maps.gstatic.com https://www.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://www.google.com https://www.clarity.ms https://*.clarity.ms https://connect.facebook.net https://cdn.jsdelivr.net;script-src-attr 'unsafe-inline';style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net;font-src 'self' data: https://fonts.gstatic.com https://cdn.jsdelivr.net;img-src 'self' data: blob: https:;connect-src 'self' https://api.dzg.shiftonezero.com https://dzg-web-api.clubpulse.app https://api-tickets.gnkdinamo.hr https://api.ulaznice.hr https://auth.gnkdinamo.hr https://*.algolia.net https://*.algolianet.com https://*.google-analytics.com https://www.googletagmanager.com https://maps.googleapis.com https://stats.g.doubleclick.net https://*.clarity.ms https://connect.facebook.net https://www.facebook.com https://cdn.jsdelivr.net;frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://www.instagram.com https://www.facebook.com https://web.facebook.com https://platform.twitter.com https://syndication.twitter.com https://tickets.gnkdinamo.hr https://api-tickets.gnkdinamo.hr https://form.wspay.biz https://formtest.wspay.biz https://ipgtest.monri.com https://ipg.monri.com https://pgw.corvus.hr https://pgwtest.corvus.hr;frame-ancestors 'none';object-src 'none';base-uri 'self';form-action 'self';upgrade-insecure-requests
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: cross-origin
Origin-Agent-Cluster: ?1
Referrer-Policy: strict-origin-when-cross-origin
X-Content-Type-Options: nosniff
X-DNS-Prefetch-Control: off
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-XSS-Protection: 0
cf-cache-status: DYNAMIC
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=f%2B7axO2OttzCowygxDirXn03q6LLwzjneGGOo3NPRkinMZPmgGqGp2PUGJ1hB5zH3ifu%2FE1BfJ%2FG%2BiM1%2F%2BgjBX7G8y6jCf3B9mZ6HSZyPJR47CUkBWPjpenPawLFMqvWnl0k%2FxjHzA7%2BdzI%3D"}]}
Server: cloudflare
CF-RAY: a06834dc9df9d3c2-FRA
alt-svc: h3=":443"; ma=86400