HTTP/1.1 200 OK
Server: nginx
Date: Fri, 27 Sep 2019 23:25:24 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 976470
Connection: keep-alive
Vary: Accept-Encoding
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
X-Download-Options: noopen
X-Content-Type-Options: nosniff
Content-Security-Policy-Report-Only: child-src 'self' *.facebook.com *.olark.com *.mailchimp.com *.facebook.net *.list-manage.com *.linkedin.com *.licdn.com *.villada.fi; connect-src *; img-src 'self' about: data: blob: *.olark.com *.mailchimp.com *.facebook.com https://*.facebook.com unsplash.it https://unsplash.it placehold.it https://placehold.it localhost:1337 localhost:1338 api.villada.sfbagency.pilvia.io:81 https://api.villada.sfbagency.pilvia.io:81 api.villada.sfbagency.pilvia.io villadaholidays.com https://villadaholidays.com www.villadaholidays.com https://www.villadaholidays.com api.villadaholidays.com https://api.villadaholidays.com https://api.villada.sfbagency.pilvia.io staging.api.villada.sfbagency.pilvia.io:81 https://staging.api.villada.sfbagency.pilvia.io:81 *.gstatic.com https://*.gstatic.com *.googleapis.com https://*.googleapis.com villada-100.appspot.com https://villada-100.appspot.com villada.fi https://villada.fi lh3.googleusercontent.com https://lh3.googleusercontent.com *.typekit.net https://*.typekit.net scontent.cdninstagram.com https://scontent.cdninstagram.com picsum.photos https://picsum.photos https://www.google-analytics.com google-analytics.com *.doubleclick.net https://*.doubleclick.net *.google.com https://www.google.com https://img.paytrail.com img.paytrail.com *.google.se https://www.google.se *.google.fi https://www.google.fi *.google.dk https://www.google.dk *.google.no https://www.google.no https://images.villadaholidays.com https://villada.fi/googleimages; font-src 'self' fonts.googleapis.com https://fonts.googleapis.com use.fontawesome.com https://use.fontawesome.com fonts.gstatic.com https://fonts.gstatic.com cloud.typography.com https://cloud.typography.com data: use.typekit.net https://use.typekit.net villadaholidays.com https://villadaholidays.com www.villadaholidays.com https://www.villadaholidays.com; object-src 'self'; media-src 'self' static.olark.com; manifest-src 'self'; script-src 'self' 'unsafe-inline' *.linkedin.com *.licdn.com *.list-manage.com https://*.list-manage.com *.olark.com https://*.olark.com *.mailchimp.com https://*.mailchimp.com *.facebook.com https://*.facebook.com cdn.polyfill.io https://cdn.polyfill.io use.fontawesome.com https://use.fontawesome.com *.googleapis.com https://*.googleapis.com localhost:1337 localhost:1338 localhost:7331 *.gstatic.com use.typekit.net https://use.typekit.net juicer.io https://juicer.io *.facebook.net https://*.facebook.net villadaholidays.com https://villadaholidays.com www.villadaholidays.com https://www.villadaholidays.com *.googletagmanager.com https://www.googletagmanager.com google-analytics.com https://www.google-analytics.com *.doubleclick.net https://*.doubleclick.net *.google.com https://*.google.com; style-src 'self' 'unsafe-inline' blob: *.olark.com *.mailchimp.com cdn.rawgit.com/milligram/milligram/master/dist/milligram.min.css https://cdn.rawgit.com/milligram/milligram/master/dist/milligram.min.css use.fontawesome.com https://use.fontawesome.com *.googleapis.com https://*.googleapis.com localhost:7331 cloud.typography.com https://cloud.typography.com villadaholidays.com https://villadaholidays.com www.villadaholidays.com https://www.villadaholidays.com *.googletagmanager.com https://www.google-analytics.com google-analytics.com *.doubleclick.net https://*.doubleclick.net; report-uri https://api.villadaholidays.com/api/v1/info/csp-violation-report-endpoint
ETag: W/"ee656-ON4wcxkRlBMmyTMJW7i/La+KWbM"
Vary: Accept-Encoding