coop.ee Review

 N/A

HTTP/1.1 302 Found
Date: Wed, 15 Apr 2026 16:50:12 GMT
Server: Apache/2.4.65 (Debian)
Location: https://www.coop.ee/
Content-Length: 277
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1

HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Date: Wed, 15 Apr 2026 16:50:13 GMT
Last-Modified: Wed, 15 Apr 2026 10:40:24 GMT
ETag: "1776249624"
Set-Cookie: AWSALB=c7MLtrR1yIvdQR3391t5LwAXkgIv6R7KT+hHly2pFW4+Sp0gHPNWZV0R1nlmX4kWQZucsstkz+aMy2nOEaob6y/7Z57PW1vgSUMy3xRktn8RrdLp5peAKIibXTGg; Expires=Wed, 22 Apr 2026 16:50:13 GMT; Path=/
Set-Cookie: AWSALBCORS=c7MLtrR1yIvdQR3391t5LwAXkgIv6R7KT+hHly2pFW4+Sp0gHPNWZV0R1nlmX4kWQZucsstkz+aMy2nOEaob6y/7Z57PW1vgSUMy3xRktn8RrdLp5peAKIibXTGg; Expires=Wed, 22 Apr 2026 16:50:13 GMT; Path=/; SameSite=None; Secure
Set-Cookie: content_update=1776211510; expires=Wed, 15 Apr 2026 00:10:10 GMT; Max-Age=0; path=/; secure; samesite=lax
Server: Apache
Cache-Control: max-age=300, public
Content-Language: et
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Expires: Sun, 19 Nov 1978 05:00:00 GMT
Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com https://cdnjs.cloudflare.com https://static.hotjar.com https://script.hotjar.com https://googleads.g.doubleclick.net https://www.google.com https://track.adform.net https://maps.googleapis.com https://s2.adform.net; object-src 'none'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com https://www.googletagmanager.com; img-src 'self' data: https://www.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com https://static.hotjar.com https://track.adform.net https://*.doubleclick.net https://*.google.com https://*.google.ee https://*.google.md https://*.googleapis.com https://*.gstatic.com; media-src 'self'; frame-src 'self' https://www.googletagmanager.com https://vars.hotjar.com https://googleads.g.doubleclick.net; frame-ancestors 'self'; child-src 'self' https://www.googletagmanager.com; font-src 'self' data: https://fonts.gstatic.com https://cdnjs.cloudflare.com https://script.hotjar.com; connect-src 'self' https://www.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com https://track.adform.net https://*.google.com https://*.doubleclick.net https://*.googleapis.com https://*.analytics.google.com https://analytics.google.com; report-uri /report-csp-violation; upgrade-insecure-requests
X-XSS-Protection: 0
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Referrer-Policy: strict-origin-when-cross-origin
Vary: Cookie
X-Cache: Miss from cloudfront
Via: 1.1 7aad92255c39d277bce3f20afa1b059c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: SEA900-P9
X-Amz-Cf-Id: WOVYFSn9t8itLLZeen6rYm2SzS3Phl27manbH1nPgfrgImp_aAHUpw==