morh.hr

Date: Thu, 04 Jun 2026 16:27:18 GMT
X-Redirect-By: WordPress
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=31536000; includeSubDomains
Referrer-Policy: no-referrer-when-downgrade
Location: https://www.morh.hr/
Cache-Control: max-age=0
Expires: Thu, 04 Jun 2026 16:27:18 GMT
Content-Security-Policy: default-src 'self' 'unsafe-inline' 'unsafe-eval' data: *.vimeo.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: *.cloudflare.com *.sharethis.com *.bootstrapcdn.com *.google.com *.gstatic.com *.consensu.org *.doubleclick.net *.staticflickr.com *.flickr.com widget.gleamjs.io *.vimeo.com *.vimeocdn.com *.newrelic.com *.nr-data.net www.googletagservices.com *.googlesyndication.com *.googleadservices.com googleads.g.doubleclick.net adservice.google.com www.google-analytics.com ssl.google-analytics.com stats.g.doubleclick.net ajax.googleapis.com maps.google.com maps.gstatic.com maps.googleapis.com translate.googleapis.com translate.google.com www.googletagmanager.com analytics.google.com region1.analytics.google.com *.recaptcha.net www.gstatic.com; style-src 'self' 'unsafe-inline' data: *.cloudflare.com *.sharethis.com *.bootstrapcdn.com *.google.com *.gstatic.com *.consensu.org *.doubleclick.net *.staticflickr.com *.vimeocdn.com fonts.googleapis.com maps.googleapis.com translate.googleapis.com; img-src 'self' data: *.flickr.com *.cloudflare.com *.sharethis.com *.bootstrapcdn.com *.google.com *.google.de *.google.hr *.gstatic.com *.consensu.org *.doubleclick.net *.staticflickr.com s.w.org ps.w.org ts.w.org secure.gravatar.com www.gravatar.com *.gleam.io *.googlesyndication.com stats.g.doubleclick.net www.google-analytics.com translate.googleapis.com translate.google.com www.google.com www.gstatic.com i.ytimg.com www.googletagmanager.com *.recaptcha.net; connect-src 'self' *.sharethis.com *.vimeo.com *.googlesyndication.com googleads.g.doubleclick.net stats.g.doubleclick.net www.google-analytics.com translate.googleapis.com analytics.google.com region1.analytics.google.com *.google-analytics.com *.recaptcha.net www.google.com api.zippopotam.us; font-src 'self' data: *.cloudflare.com *.sharethis.com *.bootstrapcdn.com *.google.com *.gstatic.com *.consensu.org *.doubleclick.net *.staticflickr.com fonts.gstatic.com; media-src 'self' *.cloudflare.com *.sharethis.com *.bootstrapcdn.com *.google.com *.gstatic.com *.consensu.org *.doubleclick.net *.staticflickr.com; frame-src 'self' data: *.consensu.org *.google.com gleam.io *.vimeo.com *.vimeocdn.com *.googlesyndication.com googleads.g.doubleclick.net www.youtube.com *.recaptcha.net www.google.com/recaptcha/; child-src 'self' data: *.vimeo.com *.vimeocdn.com www.youtube.com *.recaptcha.net; worker-src 'self' blob:;
X-XSS-Protection: 1; mode=block;
X-UA-Compatible: IE=edge
Keep-Alive: timeout=5, max=82
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
Set-Cookie: TS0151e4f8=011f32beb3920900de03f8c2546f183ff3dfa3ebeaf8506553e76aaa8050a9b137c63316657077f62fcca60dfedc9d71df65dd19be; Path=/
Transfer-Encoding: chunked