novakola.bg

Date: Fri, 25 Sep 2026 10:29:25 GMT
Server: Apache
X-Powered-By: PHP/8.4.26
Vary: Accept-Encoding,Cookie,User-Agent
Strict-Transport-Security: max-age=15552000; includeSubDomains, max-age=63072000
Content-Security-Policy: upgrade-insecure-requests;
Permissions-Policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=(), accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()
X-Frame-Options: SAMEORIGIN, SAMEORIGIN
X-Content-Type-Options: nosniff, nosniff
Referrer-Policy: strict-origin-when-cross-origin, strict-origin-when-cross-origin
X-Permitted-Cross-Domain-Policies: none, none
Cross-Origin-Opener-Policy: unsafe-none, unsafe-none
Cross-Origin-Resource-Policy: cross-origin, cross-origin
Access-Control-Allow-Methods: GET,POST, GET,POST
Access-Control-Allow-Headers: Content-Type, Authorization, Content-Type, Authorization
Expires: Fri, 25 Sep 2026 11:29:25 GMT
Cache-Control: max-age=3600
X-Redirect-By: WordPress
Set-Cookie: nova_kola_currency=eur; expires=Sat, 25 Sep 2027 10:29:25 GMT; Max-Age=31536000; path=/; secure; SameSite=Lax, leasing_cookie=6ab64d054afa1; expires=Sat, 26 Sep 2026 10:29:25 GMT; Max-Age=86400; path=/; secure; HttpOnly; SameSite=Lax, user_interaction=a123f56c249c3b35bcf25c2a4a69c1c1512d0e12bb9707ad35e9e24c3c5b9a52; expires=Sun, 25 Oct 2026 10:29:25 GMT; Max-Age=2592000; path=/; secure
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Location: https://www.novakola.bg/
Keep-Alive: timeout=5
Content-Type: text/html; charset=UTF-8