puffkalica.hr

Date: Fri, 25 Sep 2026 10:42:26 GMT
Content-Type: text/html; charset=UTF-8
Connection: keep-alive
Pragma: no-cache
X-Pingback: https://www.puffkalica.hr/xmlrpc.php
Permissions-Policy: camera=(), microphone=(), usb=(), midi=(), magnetometer=(), gyroscope=(), accelerometer=(), ambient-light-sensor=(), display-capture=()
Content-Security-Policy-Report-Only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://region1.google-analytics.com; style-src 'self' 'unsafe-inline' https://use.typekit.net https://p.typekit.net https://fonts.googleapis.com; font-src 'self' data: https://use.typekit.net https://p.typekit.net https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https://www.google-analytics.com https://region1.google-analytics.com https://analytics.google.com https://stats.g.doubleclick.net https://www.googletagmanager.com https://google.hr; frame-src 'self' https://www.google.com; frame-ancestors 'self'; form-action 'self' https:; base-uri 'self'; object-src 'none'
Expires: Fri, 25 Sep 2026 11:42:26 GMT
Cache-Control: max-age=3600
X-Redirect-By: WordPress
Set-Cookie: PHPSESSID=pubbq1ii7vmf07nq0ob678j94s; path=/; secure; HttpOnly; SameSite=Lax, ywsl_wp_session=b3206976600e8ea52d00aba6e5d1097c%7C%7C1790376146%7C%7C1790374346; expires=Fri, 25 Sep 2026 22:42:26 GMT; Max-Age=43200; path=/
Location: https://www.puffkalica.hr/
Vary: Accept-Encoding
Alt-Svc: h3=":443"; ma=2592000
Strict-Transport-Security: max-age=31536000; includeSubdomains; preload
Referrer-Policy: same-origin
Cross-Origin-Opener-Policy: same-origin
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff