HTTP/1.1 301 Moved Permanently Date: Fri, 15 Jan 2021 05:15:25 GMT Content-Type: text/html Content-Length: 178 Connection: keep-alive Server: nginx Location: https://mobilia.ca/ HTTP/2 200 date: Fri, 15 Jan 2021 05:15:26 GMT content-type: text/html; charset=UTF-8 content-length: 105922 server: nginx vary: Accept-Encoding set-cookie: PHPSESSID=7lrvrkq65b0m7og5frv3f44fqf; expires=Fri, 15-Jan-2021 06:15:26 GMT; Max-Age=3600; path=/; domain=mobilia.ca; secure; HttpOnly set-cookie: searchReport-log=0; path=/; secure; HttpOnly pragma: no-cache cache-control: max-age=0, must-revalidate, no-cache, no-store expires: Wed, 15 Jan 2020 05:15:26 GMT x-magento-tags: FPC content-security-policy: upgrade-insecure-requests; x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN content-security-policy: default-src 'self'; object-src 'none'; media-src 'none'; style-src * 'unsafe-inline'; img-src * data: blob:; font-src * data:; connect-src * data: wss://*.zopim.com; frame-src 'self' gsa://onpageload wurfl.io *.booxi.com *.online.flexiti.fi online.flexiti.fi *.flexiti.fi *.cdnjs.cloudflare.com cdnjs.cloudflare.com *.a.omappapi.com a.omappapi.com *.paysafe.com *.hotjar.com *.justuno.com *.jst.ai *.srv.stackadapt.com *.heyday.ai *.facebook.net *.google.com *.signifyd.com *.mydomastudio.com www.facebook.com store.plumrocket.com mozbar.moz.com *.cloudfront.net *.paypal.com *.addthis.com *.addthisedge.com cdncache-a.akamaihd.net www.polyvore.com acdn.adnxs.com client.comprigo.com *.amazonaws.com tpc.googlesyndication.com www.ciuvo.com *.kamaihd.net *.soundcloud.com tags.tiqcdn.com www.googletagmanager.com www.youtube.com s7.addthis.com https://*.zopim.com wss://*.zopim.com https://*.zopim.io bid.g.doubleclick.net *.fls.doubleclick.net assets.pinterest.com *.googleapis.com *.instagram.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: wurfl.io *.booxi.com *.online.flexiti.fi online.flexiti.fi *.flexiti.fi *.cdnjs.cloudflare.com cdnjs.cloudflare.com *.a.omappapi.com a.omappapi.com *.paysafe.com *.hotjar.com *.justuno.com *.jst.ai *.srv.stackadapt.com *.heyday.ai *.octapi.net *.recettes.net tagmanager.google.com captcha.gecirtnotification.com api.comprigo.com static.zdassets.com gateway.zscaler.net *.dcbap.com *.mydomastudio.com assets.shoptagr.com *.paypal.com *.signifyd.com *.addthis.com *.akamaihd.net *.addthisedge.com gateway.zscloud.net *.itineraire.info www.google.com www.google-analytics.com *.googleadservices.com *.googlesyndication.com www.googletagmanager.com www.gstatic.com googleads.g.doubleclick.net www.facebook.com connect.facebook.net t.trackedlink.net secure.adnxs.com tags.tiqcdn.com https://*.zopim.com wss://*.zopim.com https://*.zopim.io chimpstatic.com ib.adnxs.com cdn.districtm.ca pixel.adacado.com assets.pinterest.com *.googleapis.com *.instagram.com *.bing.com *.pinimg.com; report-uri /csp-test.php;