coop.ee Review

 N/A

HTTP/1.1 302 Found
Date: Thu, 02 Apr 2026 18:55:54 GMT
Server: Apache/2.4.65 (Debian)
Location: https://www.coop.ee/
Content-Length: 277
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1

HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Date: Thu, 02 Apr 2026 18:55:55 GMT
Last-Modified: Thu, 02 Apr 2026 14:37:48 GMT
ETag: "1775140668"
Set-Cookie: AWSALB=8NxqatjQz4Y+moIYj9jpShIjNAJ1NHhGvy9R2xMnSWuY/n5QXp/syDJHKctamyy6eQB17wcPZ5SuD2TmWJfJ37nfoLwt2kpWqwCREggTI/CBkOsOkvPEYxJ33sOU; Expires=Thu, 09 Apr 2026 18:55:55 GMT; Path=/
Set-Cookie: AWSALBCORS=8NxqatjQz4Y+moIYj9jpShIjNAJ1NHhGvy9R2xMnSWuY/n5QXp/syDJHKctamyy6eQB17wcPZ5SuD2TmWJfJ37nfoLwt2kpWqwCREggTI/CBkOsOkvPEYxJ33sOU; Expires=Thu, 09 Apr 2026 18:55:55 GMT; Path=/; SameSite=None; Secure
Set-Cookie: content_update=1775111010; expires=Thu, 02 Apr 2026 06:28:30 GMT; Max-Age=0; path=/; secure; samesite=lax
Server: Apache
Cache-Control: max-age=300, public
Content-Language: et
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Expires: Sun, 19 Nov 1978 05:00:00 GMT
Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com https://cdnjs.cloudflare.com https://static.hotjar.com https://script.hotjar.com https://googleads.g.doubleclick.net https://www.google.com https://track.adform.net https://maps.googleapis.com https://s2.adform.net; object-src 'none'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com https://www.googletagmanager.com; img-src 'self' data: https://www.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com https://static.hotjar.com https://track.adform.net https://*.doubleclick.net https://*.google.com https://*.google.ee https://*.google.md https://*.googleapis.com https://*.gstatic.com; media-src 'self'; frame-src 'self' https://www.googletagmanager.com https://vars.hotjar.com https://googleads.g.doubleclick.net; frame-ancestors 'self'; child-src 'self' https://www.googletagmanager.com; font-src 'self' data: https://fonts.gstatic.com https://cdnjs.cloudflare.com https://script.hotjar.com; connect-src 'self' https://www.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com https://track.adform.net https://*.google.com https://*.doubleclick.net https://*.googleapis.com https://*.analytics.google.com https://analytics.google.com; report-uri /report-csp-violation; upgrade-insecure-requests
X-XSS-Protection: 0
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Referrer-Policy: strict-origin-when-cross-origin
Vary: Cookie
X-Cache: Miss from cloudfront
Via: 1.1 087b179013ed486bf34db435cff85f08.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: SEA900-P9
X-Amz-Cf-Id: y08YZRdcCX3TJgO_V2Rf9Mhkm_boJXd-lYfZR2i_XDvc_PZVHT-OxA==