| date: |
Tue, 01 Oct 2024 07:18:35 GMT |
| content-type: |
text/html; charset=UTF-8 |
| transfer-encoding: |
chunked |
| connection: |
close |
| set-cookie: |
AWSALB=XvlgV0vP6XdwHPnVCKK2ERR8lQMP5AkepJvnyRZOydhYCyJaMO4ZFuqBG2y725OYQqxFboIqxaOcFK1h49m/npzwAExoA3UY542V+hmrENvuceOoKN3KfZI1nmrz; Expires=Tue, 08 Oct 2024 07:18:35 GMT; Path=/,AWSALBCORS=XvlgV0vP6XdwHPnVCKK2ERR8lQMP5AkepJvnyRZOydhYCyJaMO4ZFuqBG2y725OYQqxFboIqxaOcFK1h49m/npzwAExoA3UY542V+hmrENvuceOoKN3KfZI1nmrz; Expires=Tue, 08 Oct 2024 07:18:35 GMT; Path=/; SameSite=None; Secure,__cf_bm=GZHtcdfWgF_HQGvbt2_R0FaoOxTVCz2JVxWgCUljHGk-1727767115-1.0.1.1-GUFAx86Hy.CH39XGOu73UAsphLWR1VFwd9uj_60eRLPl3rTbOrJEpfBenXYHHe8uZrlSfajjgrpmjcC2wfaDBnSYyteaS9PK85tan.oy.cc; path=/; expires=Tue, 01-Oct-24 07:48:35 GMT; domain=.barcodesinc.com; HttpOnly; Secure; SameSite=None |
| strict-transport-security: |
max-age=63072000; includeSubdomains; preload |
| content-security-policy: |
font-src *.fontawesome.com fonts.googleapis.com fonts.gstatic.com cdn.livechatinc.com *.tradecentric.com *.ariba.com *.monetate.net *.typekit.net *.punchout2go.com 'self' data: *.gstatic.com *.stape.io 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.cybersource.com *.tradecentric.com *.ariba.com *.t.eloqua.com tracking.barcodesinc.com *.monetate.net *.searchspring.io *.punchout2go.com 'self' data: yotpo.com www.yotpo.com p.yotpo.com staticw2.yotpo.com w2.yotpo.com 'self' 'unsafe-inline'; frame-ancestors *.tradecentric.com *.ariba.com *.monetate.net *.punchout2go.com 'self' data: 'self'; frame-src secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com secure.livechatinc.com vars.hotjar.com *.google.com *.hotjar.io *.youtube.com *.doubleclick.net *.trustpilot.com www.googletagmanager.com challenges.cloudflare.com *.tradecentric.com *.ariba.com *.jotform.com *.braintree-api.com *.braintreegateway.com *.kaptcha.com *.paypal.com *.monetate.net *.weltpixel.com *.punchout2go.com *.google.com.ua *.google.co.uk *.stape.io yotpo.com www.yotpo.com p.yotpo.com staticw2.yotpo.com w2.yotpo.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com s.ytimg.com cdn.barcodesinc.com *.bing.com *.barcodesinc.com *.shop.ocr.ca *.levata.com *.clarity.ms *.google.com www.googletagmanager.com www.google.co.in cdn.livechatinc.com *.en25.com *.powerreviews.com *.typekit.net *.gstatic.com *.googleapis.com *.googleusercontent.com *.ytimg.com *.nr-data.net *.youtube.com *.tradecentric.com *.ariba.com cdn.searchspring.net www.barcodespim.com pagesense-collect.zoho.com *.userguiding.com *.paypal.com *.cloudinary.com *.monetate.net rdcdn.com i.liadm.com aa.trkn.us p.alocdn.com *.punchout2go.com 'self' data: *.google.com.ua *.google.co.uk *.doubleclick.net *.stape.io https://redchamps.com www.xtento.com cdn.xtento.com yotpo.com www.yotpo.com p.yotpo.com staticw2.yotpo.com w2.yotpo.com 'self' 'unsafe-inline'; script-src assets.adobedtm.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com s.ytimg.com video.google.com vimeo.com www.vimeo.com www.youtube.com static.hotjar.com script.hotjar.com *.hotjar.io *.bing.com *.clarity.ms *.gstatic.com cdn.livechatinc.com api.livechatinc.com static.cloudflareinsights.com *.en25.com js-agent.newrelic.com snip.bronto.com *.nr-data.net *.barcodesinc.com *.shop.ocr.ca *.levata.com cdn.searchspring.net *.powerreviews.com *.typekit.net *.googleapis.com *.google.com *.ggpht.com *.googleusercontent.com *.noibu.com *.googleoptimize.com googleads.g.doubleclick.net cdn.pagesense.io *.trustpilot.com *.cloudflare.com challenges.cloudflare.com *.tradecentric.com *.ariba.com *.userguiding.com *.paypal.com *.monetate.net websitevisitorleads.com s3-us-west-2.amazonaws.com b-code.liadm.com data.processwebsitedata.com fe.sitedataprocessing.com *.licdn.com *.facebook.net *.thecustomproductbuilder.com *.searchspring.io *.punchout2go.com *.google.com.ua *.google.co.uk *.googletagmanager.com *.doubleclick.net *.stape.io *.avada.io https://www.googletagmanager.com tagmanager.google.com www.xtento.com cdn.xtento.com yotpo.com www.yotpo.com p.yotpo.com staticw2.yotpo.com w2.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src getfirebug.com *.fontawesome.com cdn.searchspring.net *.powerreviews.com fonts.googleapis.com *.gstatic.com *.tradecentric.com *.ariba.com *.monetate.net *.typekit.net *.punchout2go.com *.googleapis.com *.googletagmanager.com *.stape.io tagmanager.google.com yotpo.com www.yotpo.com p.yotpo.com staticw2.yotpo.com w2.yotpo.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src cdn.livechatinc.com *.monetate.net 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.barcodesinc.com *.shop.ocr.ca *.levata.com *.clarity.ms www.google-analytics.com in.hotjar.com www.googleadservices.com *.google.com *.nr-data.net vars.hotjar.com stats.g.doubleclick.net maw.bronto.com www.google.co.in *.livechatinc.com *.powerreviews.com ws27.hotjar.com wss://wsp17.hotjar.com wss://ws.hotjar.com *.noibu.com wss://input.noibu.com *.gstatic.com *.googleapis.com *.hotjar.io *.hotjar.com *.paypal.com *.bing.com cloudflareinsights.com *.tradecentric.com *.ariba.com pagesense-collect.zoho.com *.userguiding.com *.braintree-api.com *.braintreegateway.com *.monetate.net *.searchspring.io *.punchout2go.com *.google-analytics.com *.stape.io https://get.geojs.io *.avada.io yotpo.com www.yotpo.com p.yotpo.com staticw2.yotpo.com w2.yotpo.com 'self' 'unsafe-inline'; child-src static.zohocdn.com *.monetate.net http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; |
| x-content-type-options: |
nosniff |
| x-xss-protection: |
1; mode=block |
| x-frame-options: |
SAMEORIGIN |
| x-ua-compatible: |
IE=edge |
| x-ua-device: |
device-customer |
| vary: |
Accept-Encoding, User-Agent |
| pragma: |
no-cache |
| expires: |
-1 |
| cache-control: |
no-store, no-cache, must-revalidate, max-age=0 |
| cf-cache-status: |
DYNAMIC |
| server: |
cloudflare |
| cf-ray: |
8cbaadf9693e4178-AMS |
