Content-Security-Policy: default-src 'self'; style-src 'self' 'unsafe-inline' surveys-static-prd.survicate-cdn.com fonts.googleapis.com; font-src 'self' data: fonts.gstatic.com surveys-static-prd.survicate-cdn.com; img-src 'self' data: blob: coinmate.io i.ytimg.com img.sct.eu1.usercentrics.eu res.cloudinary.com www.google.com www.google.cz www.googletagmanager.com googleads.g.doubleclick.net pagead2.googlesyndication.com c.seznam.cz bat.bing.com www.facebook.com track.adform.net; media-src 'self' data:; frame-src 'self' blob: challenges.cloudflare.com connect.notabene.id connect.trezor.io consentcdn.cookiebot.eu www.youtube.com; script-src 'self' 'unsafe-inline' cdn.seondf.com challenges.cloudflare.com connect.notabene.id consent.cookiebot.eu consentcdn.cookiebot.eu one.one.one.one survey.survicate.com surveys-static-prd.survicate-cdn.com *.getsitecontrol.com www.googletagmanager.com 'unsafe-eval' c.seznam.cz www.google-analytics.com www.google.com googleads.g.doubleclick.net bat.bing.com connect.facebook.net cdn.jsdelivr.net scripts.clarity.ms sibautomation.com www.clarity.ms www.gstatic.com *.posthog.com; connect-src 'self' coinmate.io 1.0.0.1 cloudflare-dns.com cloudflare-eth.com cloudflare-ipfs.com cloudflare.tv consentcdn.cookiebot.eu one.one.one.one pages.dev workers.dev respondent.survicate.com *.ingest.us.sentry.io *.getsitecontrol.com *.getsitectrl.com *.seondnsresolve.com *.clarity.ms ws://127.0.0.1:21335 www.google-analytics.com region1.google-analytics.com region1.analytics.google.com pagead2.googlesyndication.com stats.g.doubleclick.net www.google.cz www.google.com bat.bing.com c.seznam.cz h.seznam.cz in-automate.brevo.com *.posthog.com; worker-src 'self' blob:; manifest-src 'self' coinmate.cloudflareaccess.com;