coyuchi.com

HTTP/1.1 301 Moved Permanently
Retry-After: 0
Location: https://coyuchi.com/
Content-Length: 0
Accept-Ranges: bytes
Date: Wed, 20 Oct 2021 05:31:09 GMT
Connection: close
X-Served-By: cache-chi21149-CHI
X-Cache: HIT
X-Cache-Hits: 0
X-Timer: S1634707870.952481,VS0,VE2
strict-transport-security: max-age=31536000
Vary: 

HTTP/2 301 
cache-control: max-age=0, must-revalidate, no-cache, no-store
content-security-policy-report-only: font-src *.yotpo.com *.googleapis.com *.gstatic.com static.afterpay.com yotpo-stool.s3.amazonaws.com/images/Coyuchi/ *.google.com *.googletagmanager.com fonts.gstatic.com data: https://cdn1-gae-ssl-default.akamaized.net https://cdnjs.cloudflare.com static.formstack.com api.stripe.com js.stripe.com m.stripe.com x.klarnacdn.net klarna.com na.playground.klarnaevt.com eu.playground.klarnaevt.com klarna-payments-eu.playground.klarna.com klarna-payments-na.playground.klarna.com use.fontawesome.com maxcdn.bootstrapcdn.com 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com yotpo.com *.amazon.com *.google.com *.googletagmanager.com *.googleapis.com *.gstatic.com *.amazonaws.com tr.snapchat.com www.facebook.com ct.pinterest.com p.yotpo.com loyalty.yotpo.com cdn-swell-assets.yotpo.com cdn-widget-assets.yotpo.com cdn-widgetsrepository.yotpo.com swellrewards.com cdn.swellrewards.com https://store.plumrocket.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net secure.authorize.net test.authorize.net www.paypal.com www.sandbox.paypal.com player.vimeo.com www.googletagmanager.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com yotpo.com ct.pinterest.com *.maker.co *.hotjar.com *.adsrvr.org *.amazon.com *.dotdigital-pages.com *.dotdigital.com www.xtento.com https://www.google.com www.youtube.com https://www.p65warnings.ca.gov tr.snapchat.com bid.g.doubleclick.net www.doubleclick.com coyuchiinc.formstack.com www.facebook.com *.paypalobjects.com api.stripe.com js.stripe.com m.stripe.com x.klarnacdn.net klarna.com na.playground.klarnaevt.com eu.playground.klarnaevt.com klarna-payments-eu.playground.klarna.com klarna-payments-na.playground.klarna.com *.weltpixel.com p.yotpo.com loyalty.yotpo.com cdn-swell-assets.yotpo.com cdn-widget-assets.yotpo.com cdn-widgetsrepository.yotpo.com swellrewards.com cdn.swellrewards.com cdn.dnky.co webchat.dotdigital.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com https://store.plumrocket.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com s.ytimg.com https://static.afterpay.com yotpo.com store.paradoxlabs.com google.com mid.rkdms.com secure.insightexpressai.com token.rubiconproject.com uipglob.semasio.net loadm.exelator.com load77.exelator.com match.sync.ad.cpe.dotomi.com eb2.3lift.com ads.scorecardresearch.com idpix.media6degrees.com usermatch.krxd.net su.addthis.com beacon.krxd.net match.sharethrough.com sync.mathtag.com s.thebrighttag.com i.liadm.com dmp.truoptik.com tags.rd.linksynergy.com ml314.com odr.mookie1.com pixel.tapad.com ib.adnxs.com s.amazon-adsystem.com v2assets.zopim.io us-u.openx.net https://cm.g.doubleclick.net https://fcmatch.youtube.com/pixel d3k81ch9hvuctc.cloudfront.net match.adsrvr.org pippio.com tags.bluekai.com rc.rlcdn.com ups.analytics.yahoo.com subscription.omnithrottle.com pixel.rubiconproject.com googleads.g.doubleclick.net fr.shopping.rakuten.com sync.commander1.com adventori.com prod.y-medialink.com staticw2.yotpo.com cdn-yotpo-images-production.yotpo.com gsstatic.greenstory.ca cdnjs.cloudflare.com *.coyuchi.com jadserve.postrelease.com sync.mediawallahscript.com c.us1.dyntrk.com ads.dropin.io prod-east-alweb-mt.rfksrv.com bat.bing.com insight.adsrvr.org b1img.com cm.eyereturn.com ct.pinterest.com www.facebook.com secure.adnxs.com tr.snapchat.com idsync.rlcdn.com segments.company-target.com *.ssl-images-amazon.com www.xtento.com cdn.xtento.com *.google.com *.googletagmanager.com https://maps.googleapis.com *.gstatic.com www.google.com www.google.co.in https://ping-dot-acp-magento.appspot.com https://acp-magento.appspot.com https://cdn1-gae-ssl-default.akamaized.net *.instantsearchplus.com webchat.dotdigital.com https://ultimate-dot-acp-magento.appspot.com *.googleusercontent.com *.landmsupply.com https://t.powerreviews.com https://services.powerequipment.honda.com https://www.rockyboots.com https://m.media-amazon.com https://contentgrid.homedepot-static.com https://res.cloudinary.com p.adsymptotic.com coyuchi.rfk.coyuchi.com cdn.swellrewards.com cdn-swell-assets.yotpo.com cs.adingo.jp gum.criteo.com *.reson8.com sync-tm.everesttech.net cms.analytics.yahoo.com d.turn.com d8008928733095655387-t7864813545019799515.id.amgdgt.com x.dlx.addthis.com pm.w55c.net lrpush.apxlv.com gpush.cogocast.net adadvisor.net *.agkn.com *.rfihub.com *.afterpay.com i6.liadm.com *.googleadservices.com *.google-analytics.com https://a.klaviyo.com p.yotpo.com loyalty.yotpo.com cdn-widget-assets.yotpo.com cdn-widgetsrepository.yotpo.com swellrewards.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com 'self' 'unsafe-inline'; script-src assets.adobedtm.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com www.sandbox.paypal.com t.paypal.com s.ytimg.com video.google.com vimeo.com www.vimeo.com *.vimeocdn.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.youtube.com https://portal.sandbox.afterpay.com https://portal.afterpay.com https://static.afterpay.com https://js.sandbox.afterpay.com https://js.afterpay.com yotpo.com *.greenstory.ca staticw2.yotpo.com *.rfksrv.com www.googleoptimize.com *.maker.co d26opx5dl8t69i.cloudfront.net *.bing.com *.pinimg.com *.crazyegg.com *.hotjar.com sc-static.net *.yotpo.com *.facebook.net *.adsrvr.org *.pepperjam.com *.b1js.com *.zdassets.com *.livesession.io *.adreadyclick.com *.zendesk.com googleads.g.doubleclick.net *.s3.amazonaws.com b1img.com *.authorize.net *.payments-amazon.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com https://chimpstatic.com https://ping-dot-acp-magento.appspot.com https://acp-magento.appspot.com https://cdn1-gae-ssl-default.akamaized.net *.instantsearchplus.com https://maps.googleapis.com webchat.dotdigital.com https://ultimate-dot-acp-magento.appspot.com https://js-agent.newrelic.com https://bam.nr-data.net https://www.gstatic.com https://www.google.com https://ui.powerreviews.com https://static.powerreviews.com https://mpsnare.iesnare.com static-us.afterpay.com cm.g.doubleclick.net secure.insightexpressai.com uipglob.semasio.net match.sync.ad.cpe.dotomi.com token.rubiconproject.com s.thebrighttag.com eb2.3lift.com match.sharethrough.com mid.rkdms.com us-u.openx.net loadm.exelator.com load77.exelator.com idpix.media6degrees.com ml314.com sync.mathtag.com ads.scorecardresearch.com tags.rd.linksynergy.com su.addthis.com i.liadm.com i6.liadm.com fcmatch.youtube.com usermatch.krxd.net dmp.truoptik.com beacon.krxd.net ib.adnxs.com s.amazon-adsystem.com pixel.tapad.com odr.mookie1.com gum.criteo.com idsync.reson8.com sync-tm.everesttech.net cms.analytics.yahoo.com p.adsymptotic.com d.turn.com d2625159535002696009-t2481044346926840137.id.amgdgt.com x.dlx.addthis.com coyuchimcstaging.uat.rfk.mcstaging.coyuchi.com bam-cell.nr-data.net coyuchi.rfk.coyuchi.com 201935363-prod.rfksrv.com cdn.swellrewards.com cdn-swell-assets.yotpo.com *.formstack.com ajax.googleapis.com https://static.klaviyo.com https://fast.a.klaviyo.com api.stripe.com js.stripe.com m.stripe.com x.klarnacdn.net klarna.com na.playground.klarnaevt.com eu.playground.klarnaevt.com klarna-payments-eu.playground.klarna.com klarna-payments-na.playground.klarna.com p.yotpo.com loyalty.yotpo.com cdn-widget-assets.yotpo.com cdn-widgetsrepository.yotpo.com swellrewards.com cdn.dnky.co api.comapi.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src getfirebug.com static.afterpay.com/ js.sandbox.afterpay.com js.afterpay.com yotpo.com *.googleapis.com gsstatic.greenstory.ca cdnjs.cloudflare.com staticw2.yotpo.com rfk-staticfiles-prod.s3.amazonaws.com *.klaviyo.com stats.g.doubleclick.net www.google-analytics.com *.google.com *.googletagmanager.com fonts.googleapis.com *.gstatic.com https://cdn1-gae-ssl-default.akamaized.net https://ui.powerreviews.com static.formstack.com p.yotpo.com loyalty.yotpo.com cdn-swell-assets.yotpo.com cdn-widget-assets.yotpo.com cdn-widgetsrepository.yotpo.com swellrewards.com cdn.swellrewards.com maxcdn.bootstrapcdn.com cdn.dnky.co webchat.dotdigital.com unsafe-inline 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src static.zdassets.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com static.afterpay.com js.sandbox.afterpay.com js.afterpay.com yotpo.com staticw2.yotpo.com in.hotjar.com vc.hotjar.io bat.bing.com api.rfksrv.com *.greenstory.ca https://staticw2.yotpo.com rs.livesession.io app.maker.co pixelconnector.adready.com script.crazyegg.com static-forms.klaviyo.com *.zdassets.com ct.pinterest.com coyuchi.zendesk.com tracker.adreadyclick.com *.authorize.net *.amazon.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com stats.g.doubleclick.net *.google.com *.googletagmanager.com *.googleapis.com *.gstatic.com wss: www.google-analytics.com *.paypal.com www.paypal.com https://bam.nr-data.net https://ui.powerreviews.com *.powerreviews.com telemetrics.klaviyo.com coyuchimcstaging.uat.rfk.mcstaging.coyuchi.com *.zendesk.com www.facebook.com bam-cell.nr-data.net coyuchi.rfk.coyuchi.com 201935363-prod.rfksrv.com cdn.swellrewards.com cdn-swell-assets.yotpo.com a.klaviyo.com https://static.klaviyo.com tracking.crazyegg.com https://fast.a.klaviyo.com api.stripe.com js.stripe.com m.stripe.com x.klarnacdn.net klarna.com na.playground.klarnaevt.com eu.playground.klarnaevt.com klarna-payments-eu.playground.klarna.com klarna-payments-na.playground.klarna.com p.yotpo.com loyalty.yotpo.com cdn-widget-assets.yotpo.com cdn-widgetsrepository.yotpo.com swellrewards.com api.comapi.com webchat.dotdigital.com www.sandbox.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';
content-type: text/html; charset=UTF-8
location: https://www.coyuchi.com/
set-cookie: PHPSESSID=ca192187e1b54c652f4b5351b54051e8; expires=Wed, 27-Oct-2021 05:31:10 GMT; Max-Age=604800; path=/; domain=www.coyuchi.com; secure; HttpOnly; SameSite=Lax
x-content-type-options: nosniff
x-debug-info: eyJyZXRyaWVzIjowfQ==
x-frame-options: SAMEORIGIN
x-platform-server: i-06658fd252b615c16
x-platform-server: i-06658fd252b615c16
x-request-id: vwp2bmkamgnauouq7ic324cs
x-xss-protection: 1; mode=block
accept-ranges: bytes
date: Wed, 20 Oct 2021 05:31:10 GMT
x-served-by: cache-sea4470-SEA, cache-stl4842-STL
x-cache: MISS, MISS
x-cache-hits: 0, 0
strict-transport-security: max-age=31536000
vary: Accept-Encoding,Cookie
content-length: 0

HTTP/2 200 
content-security-policy-report-only: font-src *.yotpo.com *.googleapis.com *.gstatic.com static.afterpay.com yotpo-stool.s3.amazonaws.com/images/Coyuchi/ *.google.com *.googletagmanager.com fonts.gstatic.com data: https://cdn1-gae-ssl-default.akamaized.net https://cdnjs.cloudflare.com static.formstack.com api.stripe.com js.stripe.com m.stripe.com x.klarnacdn.net klarna.com na.playground.klarnaevt.com eu.playground.klarnaevt.com klarna-payments-eu.playground.klarna.com klarna-payments-na.playground.klarna.com use.fontawesome.com maxcdn.bootstrapcdn.com 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com yotpo.com *.amazon.com *.google.com *.googletagmanager.com *.googleapis.com *.gstatic.com *.amazonaws.com tr.snapchat.com www.facebook.com ct.pinterest.com p.yotpo.com loyalty.yotpo.com cdn-swell-assets.yotpo.com cdn-widget-assets.yotpo.com cdn-widgetsrepository.yotpo.com swellrewards.com cdn.swellrewards.com https://store.plumrocket.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net secure.authorize.net test.authorize.net www.paypal.com www.sandbox.paypal.com player.vimeo.com www.googletagmanager.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com yotpo.com ct.pinterest.com *.maker.co *.hotjar.com *.adsrvr.org *.amazon.com *.dotdigital-pages.com *.dotdigital.com www.xtento.com https://www.google.com www.youtube.com https://www.p65warnings.ca.gov tr.snapchat.com bid.g.doubleclick.net www.doubleclick.com coyuchiinc.formstack.com www.facebook.com *.paypalobjects.com api.stripe.com js.stripe.com m.stripe.com x.klarnacdn.net klarna.com na.playground.klarnaevt.com eu.playground.klarnaevt.com klarna-payments-eu.playground.klarna.com klarna-payments-na.playground.klarna.com *.weltpixel.com p.yotpo.com loyalty.yotpo.com cdn-swell-assets.yotpo.com cdn-widget-assets.yotpo.com cdn-widgetsrepository.yotpo.com swellrewards.com cdn.swellrewards.com cdn.dnky.co webchat.dotdigital.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com https://store.plumrocket.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com s.ytimg.com https://static.afterpay.com yotpo.com store.paradoxlabs.com google.com mid.rkdms.com secure.insightexpressai.com token.rubiconproject.com uipglob.semasio.net loadm.exelator.com load77.exelator.com match.sync.ad.cpe.dotomi.com eb2.3lift.com ads.scorecardresearch.com idpix.media6degrees.com usermatch.krxd.net su.addthis.com beacon.krxd.net match.sharethrough.com sync.mathtag.com s.thebrighttag.com i.liadm.com dmp.truoptik.com tags.rd.linksynergy.com ml314.com odr.mookie1.com pixel.tapad.com ib.adnxs.com s.amazon-adsystem.com v2assets.zopim.io us-u.openx.net https://cm.g.doubleclick.net https://fcmatch.youtube.com/pixel d3k81ch9hvuctc.cloudfront.net match.adsrvr.org pippio.com tags.bluekai.com rc.rlcdn.com ups.analytics.yahoo.com subscription.omnithrottle.com pixel.rubiconproject.com googleads.g.doubleclick.net fr.shopping.rakuten.com sync.commander1.com adventori.com prod.y-medialink.com staticw2.yotpo.com cdn-yotpo-images-production.yotpo.com gsstatic.greenstory.ca cdnjs.cloudflare.com *.coyuchi.com jadserve.postrelease.com sync.mediawallahscript.com c.us1.dyntrk.com ads.dropin.io prod-east-alweb-mt.rfksrv.com bat.bing.com insight.adsrvr.org b1img.com cm.eyereturn.com ct.pinterest.com www.facebook.com secure.adnxs.com tr.snapchat.com idsync.rlcdn.com segments.company-target.com *.ssl-images-amazon.com www.xtento.com cdn.xtento.com *.google.com *.googletagmanager.com https://maps.googleapis.com *.gstatic.com www.google.com www.google.co.in https://ping-dot-acp-magento.appspot.com https://acp-magento.appspot.com https://cdn1-gae-ssl-default.akamaized.net *.instantsearchplus.com webchat.dotdigital.com https://ultimate-dot-acp-magento.appspot.com *.googleusercontent.com *.landmsupply.com https://t.powerreviews.com https://services.powerequipment.honda.com https://www.rockyboots.com https://m.media-amazon.com https://contentgrid.homedepot-static.com https://res.cloudinary.com p.adsymptotic.com coyuchi.rfk.coyuchi.com cdn.swellrewards.com cdn-swell-assets.yotpo.com cs.adingo.jp gum.criteo.com *.reson8.com sync-tm.everesttech.net cms.analytics.yahoo.com d.turn.com d8008928733095655387-t7864813545019799515.id.amgdgt.com x.dlx.addthis.com pm.w55c.net lrpush.apxlv.com gpush.cogocast.net adadvisor.net *.agkn.com *.rfihub.com *.afterpay.com i6.liadm.com *.googleadservices.com *.google-analytics.com https://a.klaviyo.com p.yotpo.com loyalty.yotpo.com cdn-widget-assets.yotpo.com cdn-widgetsrepository.yotpo.com swellrewards.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com 'self' 'unsafe-inline'; script-src assets.adobedtm.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com www.sandbox.paypal.com t.paypal.com s.ytimg.com video.google.com vimeo.com www.vimeo.com *.vimeocdn.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.youtube.com https://portal.sandbox.afterpay.com https://portal.afterpay.com https://static.afterpay.com https://js.sandbox.afterpay.com https://js.afterpay.com yotpo.com *.greenstory.ca staticw2.yotpo.com *.rfksrv.com www.googleoptimize.com *.maker.co d26opx5dl8t69i.cloudfront.net *.bing.com *.pinimg.com *.crazyegg.com *.hotjar.com sc-static.net *.yotpo.com *.facebook.net *.adsrvr.org *.pepperjam.com *.b1js.com *.zdassets.com *.livesession.io *.adreadyclick.com *.zendesk.com googleads.g.doubleclick.net *.s3.amazonaws.com b1img.com *.authorize.net *.payments-amazon.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com https://chimpstatic.com https://ping-dot-acp-magento.appspot.com https://acp-magento.appspot.com https://cdn1-gae-ssl-default.akamaized.net *.instantsearchplus.com https://maps.googleapis.com webchat.dotdigital.com https://ultimate-dot-acp-magento.appspot.com https://js-agent.newrelic.com https://bam.nr-data.net https://www.gstatic.com https://www.google.com https://ui.powerreviews.com https://static.powerreviews.com https://mpsnare.iesnare.com static-us.afterpay.com cm.g.doubleclick.net secure.insightexpressai.com uipglob.semasio.net match.sync.ad.cpe.dotomi.com token.rubiconproject.com s.thebrighttag.com eb2.3lift.com match.sharethrough.com mid.rkdms.com us-u.openx.net loadm.exelator.com load77.exelator.com idpix.media6degrees.com ml314.com sync.mathtag.com ads.scorecardresearch.com tags.rd.linksynergy.com su.addthis.com i.liadm.com i6.liadm.com fcmatch.youtube.com usermatch.krxd.net dmp.truoptik.com beacon.krxd.net ib.adnxs.com s.amazon-adsystem.com pixel.tapad.com odr.mookie1.com gum.criteo.com idsync.reson8.com sync-tm.everesttech.net cms.analytics.yahoo.com p.adsymptotic.com d.turn.com d2625159535002696009-t2481044346926840137.id.amgdgt.com x.dlx.addthis.com coyuchimcstaging.uat.rfk.mcstaging.coyuchi.com bam-cell.nr-data.net coyuchi.rfk.coyuchi.com 201935363-prod.rfksrv.com cdn.swellrewards.com cdn-swell-assets.yotpo.com *.formstack.com ajax.googleapis.com https://static.klaviyo.com https://fast.a.klaviyo.com api.stripe.com js.stripe.com m.stripe.com x.klarnacdn.net klarna.com na.playground.klarnaevt.com eu.playground.klarnaevt.com klarna-payments-eu.playground.klarna.com klarna-payments-na.playground.klarna.com p.yotpo.com loyalty.yotpo.com cdn-widget-assets.yotpo.com cdn-widgetsrepository.yotpo.com swellrewards.com cdn.dnky.co api.comapi.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src getfirebug.com static.afterpay.com/ js.sandbox.afterpay.com js.afterpay.com yotpo.com *.googleapis.com gsstatic.greenstory.ca cdnjs.cloudflare.com staticw2.yotpo.com rfk-staticfiles-prod.s3.amazonaws.com *.klaviyo.com stats.g.doubleclick.net www.google-analytics.com *.google.com *.googletagmanager.com fonts.googleapis.com *.gstatic.com https://cdn1-gae-ssl-default.akamaized.net https://ui.powerreviews.com static.formstack.com p.yotpo.com loyalty.yotpo.com cdn-swell-assets.yotpo.com cdn-widget-assets.yotpo.com cdn-widgetsrepository.yotpo.com swellrewards.com cdn.swellrewards.com maxcdn.bootstrapcdn.com cdn.dnky.co webchat.dotdigital.com unsafe-inline 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src static.zdassets.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com static.afterpay.com js.sandbox.afterpay.com js.afterpay.com yotpo.com staticw2.yotpo.com in.hotjar.com vc.hotjar.io bat.bing.com api.rfksrv.com *.greenstory.ca https://staticw2.yotpo.com rs.livesession.io app.maker.co pixelconnector.adready.com script.crazyegg.com static-forms.klaviyo.com *.zdassets.com ct.pinterest.com coyuchi.zendesk.com tracker.adreadyclick.com *.authorize.net *.amazon.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com stats.g.doubleclick.net *.google.com *.googletagmanager.com *.googleapis.com *.gstatic.com wss: www.google-analytics.com *.paypal.com www.paypal.com https://bam.nr-data.net https://ui.powerreviews.com *.powerreviews.com telemetrics.klaviyo.com coyuchimcstaging.uat.rfk.mcstaging.coyuchi.com *.zendesk.com www.facebook.com bam-cell.nr-data.net coyuchi.rfk.coyuchi.com 201935363-prod.rfksrv.com cdn.swellrewards.com cdn-swell-assets.yotpo.com a.klaviyo.com https://static.klaviyo.com tracking.crazyegg.com https://fast.a.klaviyo.com api.stripe.com js.stripe.com m.stripe.com x.klarnacdn.net klarna.com na.playground.klarnaevt.com eu.playground.klarnaevt.com klarna-payments-eu.playground.klarna.com klarna-payments-na.playground.klarna.com p.yotpo.com loyalty.yotpo.com cdn-widget-assets.yotpo.com cdn-widgetsrepository.yotpo.com swellrewards.com api.comapi.com webchat.dotdigital.com www.sandbox.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
x-debug-info: eyJyZXRyaWVzIjowfQ==
x-esi: 1
x-frame-options: SAMEORIGIN
x-platform-server: i-06658fd252b615c16
x-platform-server: i-06658fd252b615c16
x-request-id: xla5rq7svb6w7o3fi5lqberd
x-xss-protection: 1; mode=block
date: Wed, 20 Oct 2021 05:31:10 GMT
age: 12412
x-served-by: cache-sea4470-SEA, cache-chi21152-CHI
x-cache: HIT, MISS
x-cache-hits: 1, 0
strict-transport-security: max-age=31536000
cache-control: no-store, no-cache, must-revalidate, max-age=0
vary: Accept-Encoding,Cookie