royalt.store

HTTP/1.1 301 Moved Permanently
Date: Sat, 30 Oct 2021 07:26:12 GMT
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Sat, 30 Oct 2021 08:26:12 GMT
Location: https://royalt.store/
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PLoau0Awj%2BIrtWKDP3un2Chm%2F2FviB33Xo54h5kpnYl5jf5AdsVxIKf5x57rBLL5%2BVtkNwaoCdgY2P%2F23Uj3B2gbjIB4OhrS2CmJjqDVaVsOGICiR0RZjb0DIh0BPEs%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
X-Content-Type-Options: nosniff
Server: cloudflare
CF-RAY: 6a62ea000cc4636e-ORD
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400, h3-28=":443"; ma=86400, h3-27=":443"; ma=86400

HTTP/2 301 
date: Sat, 30 Oct 2021 07:26:12 GMT
cache-control: max-age=3600
expires: Sat, 30 Oct 2021 08:26:12 GMT
location: https://www.royalt.store/*
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=EgzXhHXzMByTKwEdVsvCptCtdnAbmPokn2wBklNc9hx%2FQXEeymY3OaMl7Crl6cOkDI9zmsz4Fz2DWYNzdYwDj9WroNFLrt0lJoZ10O6BIz0Qfr5XelaKgl16iyhT5BE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 6a62ea007eda29f4-ORD
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400, h3-28=":443"; ma=86400, h3-27=":443"; ma=86400

HTTP/2 302 
date: Sat, 30 Oct 2021 07:26:13 GMT
content-type: text/html; charset=UTF-8
set-cookie: PHPSESSID=epkip3qms43l9eok8bp9ufbpjl; expires=Sun, 31-Oct-2021 07:26:13 GMT; Max-Age=86400; path=/; domain=www.royalt.store
pragma: no-cache
cache-control: max-age=0, must-revalidate, no-cache, no-store
expires: Fri, 30 Oct 2020 07:26:13 GMT
location: https://www.royalt.store/catalogsearch/result/?q=%2A&amnoroute
link: 
content-security-policy-report-only: font-src fonts.gstatic.com *.zinrelo.com *.zohocdn.com *.fontawesome.com maxcdn.bootstrapcdn.com *.amazonaws.com *.cloudfront.net *.cloudflare.com *.twitter.com *.typekit.net *.twimg.com *.trustedshops.com *.googleapis.com https://fonts.gstatic.com api.stripe.com js.stripe.com m.stripe.com x.klarnacdn.net klarna.com na.playground.klarnaevt.com eu.playground.klarnaevt.com klarna-payments-eu.playground.klarna.com klarna-payments-na.playground.klarna.com 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.twitter.com *.facebook.com *.google.com https://store.plumrocket.com yotpo.com www.yotpo.com p.yotpo.com staticw2.yotpo.com w2.yotpo.com 'self' 'unsafe-inline'; frame-ancestors 'self' 'unsafe-inline'; frame-src secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com www.google.com *.doubleclick.net *.hotjar.com *.zohocdn.com *.dotdigital-pages.com *.dotdigital.com webchat.dotdigital.com *.google.com store.plumrocket.com p.yotpo.com www.yotpo.com staticw2.yotpo.com w2.yotpo.com *.twitter.com *.paypal.com *.facebook.com *.zinrelo.com *.googlesyndication.com cdn.dnky.co https://store.plumrocket.com api.stripe.com js.stripe.com m.stripe.com x.klarnacdn.net klarna.com na.playground.klarnaevt.com eu.playground.klarnaevt.com klarna-payments-eu.playground.klarna.com klarna-payments-na.playground.klarna.com yotpo.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net data: www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com s.ytimg.com *.googleadservices.com *.google-analytics.com *.paypal.com *.zohocdn.com getfirebug.com *.googleapis.com cdn.dnky.co webchat.dotdigital.com font.googleapis.com cdn.ckeditor.com/ *.fontawesome.com maxcdn.bootstrapcdn.com fonts.googleapis.com *.amazonaws.com p.yotpo.com www.yotpo.com staticw2.yotpo.com w2.yotpo.com *.cloudflare.com *.klarna.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.doubleclick.net *.paypalobjects.com *.google.lk *.google.com *.google.co.in *.payhere.lk *.cloudfront.net *.zohopublic.com *.facebook.com *.googlesyndication.com maps.googleapis.com maps.gstatic.com cdn.ckeditor.com yotpo.com 'self' 'unsafe-inline'; script-src assets.adobedtm.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com s.ytimg.com video.google.com *.vimeo.com www.vimeo.com www.youtube.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ rum-static.pingdom.net *.hotjar.com connect.facebook.net *.googlesyndication.com cdn.zinrelo.com zinrelo.com js.zohocdn.com googleads.g.doubleclick.net salesiq.zoho.com *.authorize.net *.googleadservices.com *.google-analytics.com *.paypalobjects.com *.paypal.com *.cardinalcommerce.com *.google.com *.youtube.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com cdn.dnky.co api.comapi.com webchat.dotdigital.com *.googleapis.com cdn.ckeditor.com/ *.cloudflare.com *.twitter.com *.usercentrics.eu *.fontawesome.com *.twimg.com *.gstatic.com *.trustedshops.com *.googletagmanager.com *.googletagservices.com *.cloudflareinsights.com *.cloudfront.net *.google.co.in www.google.com.jm blob gjtrack.ucweb.com flagpedia.net www.brunswick.ca 2569f0d5d790fe1d49cc57f0725bd240.safeframe.googlesyndication.com 268692ff14b51fbd1c6c1c6eec8fc5f8.safeframe.googlesyndication.com 5156856d796a7b207504059efdb8ff70.safeframe.googlesyndication.com 877753ae90dfcda53452027f9984accf.safeframe.googlesyndication.com eb2fcdd60ae2088e3674033d468a74ea.safeframe.googlesyndication.com adservice.google.ca adservice.google.cl adservice.google.co.cr adservice.google.co.id adservice.google.co.uk adservice.google.com adservice.google.com.bz adservice.google.com.gt adservice.google.com.jm adservice.google.com.lb adservice.google.com.ng adservice.google.com.ni adservice.google.com.pe adservice.google.com.pr adservice.google.com.sa adservice.google.com.tw adservice.google.com.vc adservice.google.cz adservice.google.dk adservice.google.dm adservice.google.es adservice.google.gm adservice.google.gr adservice.google.gy adservice.google.hn adservice.google.ht adservice.google.it adservice.google.nl adservice.google.sc adservice.google.se adservice.google.sr adservice.google.tt adservice.google.vg ajax.cloudflare.com app.zinrelo.com attestation.android.com authentication.cardinalcommerce.com bucket.mlcdn.com cdn.ampproject.org css.zohocdn.com css.zohostatic.com d1fb14p1gr117g.cloudfront.net d395yjvh5spyzw.cloudfront.net dgjcoqnzn763b.cloudfront.net js.zohostatic.com marlin.firstatlanticcommerce.com pagead2.googlesyndication.com partner.googleadservices.com pixel.sitescout.com rum-collector-2.pingdom.net script.hotjar.com secure4.arcot.com securepubads.g.doubleclick.net ssl.kaptcha.com static.cloudflareinsights.com static.hotjar.com static.mailerlite.com subwayblaze.com surveystats.hotjar.io tpc.googlesyndication.com track.mailerlite.com vc.hotjar.io via.placeholder.com webfonts.zohostatic.com www.coolmarket.com:2083 www.facebook.com www.google.ca www.google.cl www.google.co.cr www.google.co.uk www.google.com.bz www.google.com.gt www.google.com.lb www.google.com.ng www.google.com.ni www.google.com.pa www.google.com.pe www.google.com.pr www.google.com.qa www.google.com.sa www.google.cz www.google.dk www.google.dm www.google.es www.google.gm www.google.gr www.google.gy www.google.hn www.google.ht www.google.it www.google.nl www.google.sc www.google.se www.google.sr www.google.tt www.google.vg www.googletagservices.com www.gstatic.com www.securesuite.co.uk vts.zohopublic.com maps.googleapis.com api.stripe.com js.stripe.com m.stripe.com x.klarnacdn.net klarna.com na.playground.klarnaevt.com eu.playground.klarnaevt.com klarna-payments-eu.playground.klarna.com klarna-payments-na.playground.klarna.com yotpo.com www.yotpo.com p.yotpo.com staticw2.yotpo.com w2.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src getfirebug.com *.googleapis.com cdn.dnky.co webchat.dotdigital.com font.googleapis.com *.amazonaws.com p.yotpo.com www.yotpo.com staticw2.yotpo.com w2.yotpo.com *.cloudfront.net *.cloudflare.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.zohocdn.com fonts.googleapis.com/ cdn.ckeditor.com/ https://fonts.googleapis.com yotpo.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.cloudflare.com *.twitter.com *.paypal.com *.twimg.com *.doubleclick.net *.cardinalcommerce.com *.zoho.com *.zohopublic.com wss://vts.zohopublic.com *.hotjar.com *.pingdom.com *.pingdom.net *.google-analytics.com *.googlesyndication.com *.gstatic.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com api.comapi.com webchat.dotdigital.com maps.googleapis.com/ api.stripe.com js.stripe.com m.stripe.com x.klarnacdn.net klarna.com na.playground.klarnaevt.com eu.playground.klarnaevt.com klarna-payments-eu.playground.klarna.com klarna-payments-na.playground.klarna.com yotpo.com www.yotpo.com p.yotpo.com staticw2.yotpo.com w2.yotpo.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';
strict-transport-security: max-age=15552000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests;
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
cf-cache-status: DYNAMIC
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mMOSEfmKPgRq33fdmcZ9bBb54ucYGYfGqepNQQoKBVI8%2F9v4%2FEZbNvDfp4LP%2FZcgg75DvhdQt5NN8hkB03Cwerjn2NrDWrR%2BKUL35e5u7t4%2FgiAOUSaztep6z17Mri2Zhpxc"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 6a62ea00de2e2c11-ORD
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400, h3-28=":443"; ma=86400, h3-27=":443"; ma=86400

HTTP/2 200 
date: Sat, 30 Oct 2021 07:26:15 GMT
content-type: text/html; charset=UTF-8
set-cookie: PHPSESSID=r4hl4makfm3ll9otcj9hm6sqc7; expires=Sun, 31-Oct-2021 07:26:15 GMT; Max-Age=86400; path=/; domain=www.royalt.store
pragma: no-cache
cache-control: max-age=0, must-revalidate, no-cache, no-store
expires: Fri, 30 Oct 2020 07:26:14 GMT
x-magento-tags: cat_c,store,cms_b,cms_b_112,cms_b_fastest-ellyana-footer-links,cat_c_p_2,mobile,amasty_mega_menu,cms_b_osc-top-header-banner
link: ; rel=preload; as=image, ; rel=preload; as=image, ; rel=preload; as=image, ; rel=preload; as=image, ; rel=preload; as=image, ; rel=preload; as=image, ; rel=preload; as=image, ; rel=preload; as=image, ; rel=preload; as=image, ; rel=preload; as=image, ; rel=preload; as=script, ; rel=preload; as=script, ; rel=preload; as=script, ; rel=preload; as=script, ; rel=preload; as=script, ; rel=preload; as=script, ; rel=preload; as=script, ; rel=preload; as=style, ; rel=preload; as=style, ; rel=preload; as=style, ; rel=preload; as=style, ; rel=preload; as=style, ; rel=preload; as=style, ; rel=preload; as=style, ; rel=preload; as=style, ; rel=preload; as=style, ; rel=preload; as=style, ; rel=preload; as=style, ; rel=preload; as=style, ; rel=preload; as=style, ; rel=preload; as=style, ; rel=preload; as=style, ; rel=preload; as=style, ; rel=preload; as=style, ; rel=preload; as=style, ; rel=preload; as=style, ; rel=preload; as=style, ; rel=preload; as=style, ; rel=preload; as=style, ; rel=preload; as=font; crossorigin=anonymous
content-security-policy-report-only: font-src fonts.gstatic.com *.zinrelo.com *.zohocdn.com *.fontawesome.com maxcdn.bootstrapcdn.com *.amazonaws.com *.cloudfront.net *.cloudflare.com *.twitter.com *.typekit.net *.twimg.com *.trustedshops.com *.googleapis.com https://fonts.gstatic.com api.stripe.com js.stripe.com m.stripe.com x.klarnacdn.net klarna.com na.playground.klarnaevt.com eu.playground.klarnaevt.com klarna-payments-eu.playground.klarna.com klarna-payments-na.playground.klarna.com 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.twitter.com *.facebook.com *.google.com https://store.plumrocket.com yotpo.com www.yotpo.com p.yotpo.com staticw2.yotpo.com w2.yotpo.com 'self' 'unsafe-inline'; frame-ancestors 'self' 'unsafe-inline'; frame-src secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com www.google.com *.doubleclick.net *.hotjar.com *.zohocdn.com *.dotdigital-pages.com *.dotdigital.com webchat.dotdigital.com *.google.com store.plumrocket.com p.yotpo.com www.yotpo.com staticw2.yotpo.com w2.yotpo.com *.twitter.com *.paypal.com *.facebook.com *.zinrelo.com *.googlesyndication.com cdn.dnky.co https://store.plumrocket.com api.stripe.com js.stripe.com m.stripe.com x.klarnacdn.net klarna.com na.playground.klarnaevt.com eu.playground.klarnaevt.com klarna-payments-eu.playground.klarna.com klarna-payments-na.playground.klarna.com yotpo.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net data: www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com s.ytimg.com *.googleadservices.com *.google-analytics.com *.paypal.com *.zohocdn.com getfirebug.com *.googleapis.com cdn.dnky.co webchat.dotdigital.com font.googleapis.com cdn.ckeditor.com/ *.fontawesome.com maxcdn.bootstrapcdn.com fonts.googleapis.com *.amazonaws.com p.yotpo.com www.yotpo.com staticw2.yotpo.com w2.yotpo.com *.cloudflare.com *.klarna.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.doubleclick.net *.paypalobjects.com *.google.lk *.google.com *.google.co.in *.payhere.lk *.cloudfront.net *.zohopublic.com *.facebook.com *.googlesyndication.com maps.googleapis.com maps.gstatic.com cdn.ckeditor.com yotpo.com 'self' 'unsafe-inline'; script-src assets.adobedtm.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com s.ytimg.com video.google.com *.vimeo.com www.vimeo.com www.youtube.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ rum-static.pingdom.net *.hotjar.com connect.facebook.net *.googlesyndication.com cdn.zinrelo.com zinrelo.com js.zohocdn.com googleads.g.doubleclick.net salesiq.zoho.com *.authorize.net *.googleadservices.com *.google-analytics.com *.paypalobjects.com *.paypal.com *.cardinalcommerce.com *.google.com *.youtube.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com cdn.dnky.co api.comapi.com webchat.dotdigital.com *.googleapis.com cdn.ckeditor.com/ *.cloudflare.com *.twitter.com *.usercentrics.eu *.fontawesome.com *.twimg.com *.gstatic.com *.trustedshops.com *.googletagmanager.com *.googletagservices.com *.cloudflareinsights.com *.cloudfront.net *.google.co.in www.google.com.jm blob gjtrack.ucweb.com flagpedia.net www.brunswick.ca 2569f0d5d790fe1d49cc57f0725bd240.safeframe.googlesyndication.com 268692ff14b51fbd1c6c1c6eec8fc5f8.safeframe.googlesyndication.com 5156856d796a7b207504059efdb8ff70.safeframe.googlesyndication.com 877753ae90dfcda53452027f9984accf.safeframe.googlesyndication.com eb2fcdd60ae2088e3674033d468a74ea.safeframe.googlesyndication.com adservice.google.ca adservice.google.cl adservice.google.co.cr adservice.google.co.id adservice.google.co.uk adservice.google.com adservice.google.com.bz adservice.google.com.gt adservice.google.com.jm adservice.google.com.lb adservice.google.com.ng adservice.google.com.ni adservice.google.com.pe adservice.google.com.pr adservice.google.com.sa adservice.google.com.tw adservice.google.com.vc adservice.google.cz adservice.google.dk adservice.google.dm adservice.google.es adservice.google.gm adservice.google.gr adservice.google.gy adservice.google.hn adservice.google.ht adservice.google.it adservice.google.nl adservice.google.sc adservice.google.se adservice.google.sr adservice.google.tt adservice.google.vg ajax.cloudflare.com app.zinrelo.com attestation.android.com authentication.cardinalcommerce.com bucket.mlcdn.com cdn.ampproject.org css.zohocdn.com css.zohostatic.com d1fb14p1gr117g.cloudfront.net d395yjvh5spyzw.cloudfront.net dgjcoqnzn763b.cloudfront.net js.zohostatic.com marlin.firstatlanticcommerce.com pagead2.googlesyndication.com partner.googleadservices.com pixel.sitescout.com rum-collector-2.pingdom.net script.hotjar.com secure4.arcot.com securepubads.g.doubleclick.net ssl.kaptcha.com static.cloudflareinsights.com static.hotjar.com static.mailerlite.com subwayblaze.com surveystats.hotjar.io tpc.googlesyndication.com track.mailerlite.com vc.hotjar.io via.placeholder.com webfonts.zohostatic.com www.coolmarket.com:2083 www.facebook.com www.google.ca www.google.cl www.google.co.cr www.google.co.uk www.google.com.bz www.google.com.gt www.google.com.lb www.google.com.ng www.google.com.ni www.google.com.pa www.google.com.pe www.google.com.pr www.google.com.qa www.google.com.sa www.google.cz www.google.dk www.google.dm www.google.es www.google.gm www.google.gr www.google.gy www.google.hn www.google.ht www.google.it www.google.nl www.google.sc www.google.se www.google.sr www.google.tt www.google.vg www.googletagservices.com www.gstatic.com www.securesuite.co.uk vts.zohopublic.com maps.googleapis.com api.stripe.com js.stripe.com m.stripe.com x.klarnacdn.net klarna.com na.playground.klarnaevt.com eu.playground.klarnaevt.com klarna-payments-eu.playground.klarna.com klarna-payments-na.playground.klarna.com yotpo.com www.yotpo.com p.yotpo.com staticw2.yotpo.com w2.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src getfirebug.com *.googleapis.com cdn.dnky.co webchat.dotdigital.com font.googleapis.com *.amazonaws.com p.yotpo.com www.yotpo.com staticw2.yotpo.com w2.yotpo.com *.cloudfront.net *.cloudflare.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.zohocdn.com fonts.googleapis.com/ cdn.ckeditor.com/ https://fonts.googleapis.com yotpo.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.cloudflare.com *.twitter.com *.paypal.com *.twimg.com *.doubleclick.net *.cardinalcommerce.com *.zoho.com *.zohopublic.com wss://vts.zohopublic.com *.hotjar.com *.pingdom.com *.pingdom.net *.google-analytics.com *.googlesyndication.com *.gstatic.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com api.comapi.com webchat.dotdigital.com maps.googleapis.com/ api.stripe.com js.stripe.com m.stripe.com x.klarnacdn.net klarna.com na.playground.klarnaevt.com eu.playground.klarnaevt.com klarna-payments-eu.playground.klarna.com klarna-payments-na.playground.klarna.com yotpo.com www.yotpo.com p.yotpo.com staticw2.yotpo.com w2.yotpo.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';
strict-transport-security: max-age=15552000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests;
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
cf-cache-status: DYNAMIC
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9A9XLevLvltJFddSy3qFNQuQekG1KL9xqVY5v5ANxBqSNfGh6mwO1FUsgkEZuZdoEorVv8szXjqUUmfreBZoeeTxTsrIUrKo2zYaPprdSEMFcDTCyJVhg1Rjb1HXCvpVBG4G"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 6a62ea083d042c11-ORD
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400, h3-28=":443"; ma=86400, h3-27=":443"; ma=86400