| Server | Cowboy |
| Connection | keep-alive |
| Strict-Transport-Security | max-age=15552000000; includeSubDomains; preload |
| X-Frame-Options | ALLOW-FROM solkart.no |
| X-Xss-Protection | 1; mode=block |
| X-Content-Type-Options | nosniff |
| Content-Type | text/html; charset=utf-8 |
| Etag | W/"2031-/c0jNc2ZqaotzWvQbi1lEMxXWTw" |
| Vary | Accept-Encoding |
| Content-Encoding | gzip |
| Content-Security-Policy | child-src 'self' *.youtube.com *.facebook.com;connect-src 'self' https://api.otovo.com api.smooch.io *.config.smooch.io wss://api.smooch.io app.getsentry.com sentry.io *.facebook.com *.facebook.net;default-src 'none';font-src 'self' netdna.bootstrapcdn.com fonts.gstatic.com;frame-ancestors 'self' solkart.no;frame-src 'self' *.youtube.com *.facebook.com checkout.stripe.com;img-src 'self' https://api.otovo.com data: www.google-analytics.com www.google.no/ads/ www.google.com/ads/ www.facebook.com *.smooch.io *.gstatic.com maps.googleapis.com *.amazonaws.com www.gravatar.com stats.g.doubleclick.net;media-src cdn.smooch.io;script-src 'self' data: www.google-analytics.com *.google-analytics.com maps.googleapis.com *.facebook.net cdn.smooch.io api.smooch.io;style-src 'self' 'unsafe-inline' fonts.googleapis.com cdn.smooch.io blob: |
| Transfer-Encoding | chunked |
| Via | 1.1 vegur |