vilgain.sk

Date: Fri, 25 Sep 2026 11:16:42 GMT
Content-Type: text/html; charset=utf-8
Connection: keep-alive
Server: nginx
Vary: Accept-Encoding, X-Requested-With
X-Frame-Options: SAMEORIGIN
Set-Cookie: _nss=1; path=/; secure; HttpOnly; SameSite=Strict, uuid=d8a90ad5-68a7-4ef1-b935-0567b3db950d; expires=Sat, 25 Sep 2027 11:16:42 GMT; Max-Age=31536000; path=/; secure; HttpOnly; SameSite=None
x-trace-id: 58a2173af990a496bc36f780019531f6
Content-Security-Policy: default-src 'none'; form-action 'self' 3dsecure.gpwebpay.com test.3dsecure.gpwebpay.com www.facebook.com *.adyen.com; font-src 'self' data: fonts.gstatic.com *.optimonk.com; frame-ancestors 'self'; frame-src 'self' ehub.cz accounts.google.com *.doubleclick.net c.imedia.cz connect.facebook.net *.facebook.com tpc.googlesyndication.com www.googletagmanager.com www.instagram.com www.youtube.com www.zbozi.cz *.paypal.com *.optimonk.com *.ceneo.pl studentenrabatt.com *.adyen.com https://pay.google.com *.criteo.com *.googletagmanager.com *.google.com *.googleadservices.com *.googlesyndication.com *.gstatic.com *.google-analytics.com *.merchant-center-analytics.goog metrics.vilgain.sk *.google.sk tally.so; manifest-src 'self' https://pay.google.com; img-src data: https: *.gstatic.com *.paypal.com *.google-analytics.com *.adyen.com; media-src 'self' https:; script-src 'nonce-3Gvm7uSAh92cENyiG6jYtg==' 'unsafe-inline' 'unsafe-eval' 'self' ehub.cz *.sentry-cdn.com connect.facebook.net d70shl7vidtft.cloudfront.net googleads.g.doubleclick.net im9.cz *.instagram.com client.smartform.cz tpc.googlesyndication.com *.google-analytics.com *.google.com www.googleadservices.com www.googletagmanager.com www.zbozi.cz *.paypal.com *.clarity.ms *.optimonk.com *.bing.com *.luigisbox.tech *.adyen.com *.openai.com *.googletagmanager.com *.googleadservices.com *.googlesyndication.com *.doubleclick.net *.gstatic.com *.merchant-center-analytics.goog *.google.sk *.creativecdn.com https://accounts.google.com/gsi/client tally.so; script-src-attr 'unsafe-hashes'; style-src 'unsafe-inline' 'self' client.smartform.cz tagmanager.google.com fonts.googleapis.com *.paypal.com *.optimonk.com *.adyen.com *.trafficmanager.net *.googletagmanager.com *.googleapis.com *.google.com *.googleadservices.com *.googlesyndication.com *.doubleclick.net *.gstatic.com *.google-analytics.com *.merchant-center-analytics.goog *.google.sk https://accounts.google.com/gsi/style; connect-src 'self' wss: ehub.cz *.instagram.com *.facebook.com www.googleadservices.com *.googletagmanager.com pagead2.googlesyndication.com *.google-analytics.com *.sentry.io *.paypal.com *.tiktok.com *.clarity.ms *.optimonk.com *.bing.com *.luigisbox.tech *.luigisbox.com *.adyen.com *.exponea.com *.google.com *.doubleclick.net *.openai.com *.sentry-cdn.com *.tiktokw.us *.stape.day *.bing.net https://google.com/pay www.zbozi.cz im9.cz *.seznam.cz *.googleadservices.com *.googlesyndication.com *.gstatic.com *.merchant-center-analytics.goog metrics.vilgain.sk analytics-api.vilgain.sk *.google.sk *.criteo.com *.creativecdn.com nominatim.openstreetmap.org; object-src 'none'; base-uri 'none'; worker-src 'self' blob:;
Referrer-Policy: no-referrer-when-downgrade
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
Content-Encoding: gzip