| date: |
Tue, 01 Oct 2024 20:31:25 GMT |
| content-type: |
text/html; charset=UTF-8 |
| content-length: |
452565 |
| connection: |
close |
| vary: |
Accept-Encoding, Accept-Encoding |
| report-to: |
{"group":"report-endpoint","max_age":10886400,"endpoints":[{"url":"\/_csp-reporting"}]} |
| content-security-policy-report-only: |
font-src apps.bazaarvoice.com assets.tailwindapp.com at.alicdn.com cdn-uicons.flaticon.com cdnjs.cloudflare.com cdn.honey.io cdn.joinhoney.com cdn.scite.ai ecomm-cdn.trurating.com fast.wistia.com fast.wistia.net fonts.gstatic.com font.static.useinsider.com *.hotjar.com insight.adsrvr.org match.adsrvr.org pro.fontawesome.com shopping.qantas.com static.zipmoney.com.au www.slant.co zip-co-media.s3.ap-southeast-2.amazonaws.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * api.bazaarvoice.com stg.api.bazaarvoice.com ct.pinterest.com www.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * widgets.sandbox.afterpay.com widgets.sandbox.clearpay.co.uk display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com 12757253.fls.doubleclick.net 12761252.fls.doubleclick.net 6895031.fls.doubleclick.net 8219837.fls.doubleclick.net accentgroup.formstack.com analytics.tiktok.com aus59.dayforcehcm.com ausaz231.dayforcehcm.com connect.facebook.net *.criteo.com *.criteo.net ct.pinterest.com drwnt-pr11.ntschools.net gateway.zscalerthree.net www.googleapis.com insight.adsrvr.org insight.adsrvr.org.x.84c439f70e5c7046810abf7058a74d187b80.43d75326.id.opendns.com invidious.projectsegfau.lt match.adsrvr.org my.volumental.com ole.worldmanager.com portal.afterpay.com rcg.demdex.net safe.menlosecurity.com servedby.flashtalking.com socialq.net td.doubleclick.net theathletesfootau.api.useinsider.com theathletesfootnz.api.useinsider.com tpc.googlesyndication.com www.dayforcehcm.com www.facebook.com www.google.com yt.artemislena.eu 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com https://static.afterpay.com https://site-assets.afterpay.com/ display.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com network-a.bazaarvoice.com network-stg-a.bazaarvoice.com photos-uat-us.bazaarvoice.com img.youtube.com 1f2e7.v.fwmrm.net aa.agkn.com accentgroupsupport.zendesk.com ade.clmbtech.com adgen.socdm.com adservice.google.com adservice.google.com.au adservice.google.se ads.stickyadstv.com adx.dable.io ad.360yield.com ad.as.amanad.adtdp.com ad.doubleclick.net ad.tpmn.co.kr ad.yieldlab.net analytics.tiktok.com api.fillr.com assets.api.useinsider.com cdn.attraqt.io a.twiago.com bam.nr-data.net bat.bing.com beacon.krxd.net cdn.aralego.net cdn.honey.io cloud.shopback.com cms.quantserve.com cm.adform.net cm.adgrx.com cm.g.doubleclick.net connect.facebook.net contextual.media.net criteo-partners.tremorhub.com criteo-sync.teads.tv *.criteo.com *.criteo.net cs.adingo.jp ct.pinterest.com c.bing.com d3nocrch4qti4v.cloudfront.net developers.google.com df45ay5pw60dy.cloudfront.net dsum-sec.casalemedia.com duuytoqss3gu4.cloudfront.net e1.emxdgt.com eb2.3lift.com ecomm-cdn.trurating.com embed-ssl.wistia.com encrypted-tbn3.gstatic.com engage-assets.volumental.com exchange.mediavine.com fast.wistia.com fast.wistia.net fonts.gstatic.com hb.yahoo.net *.hotjar.com i6.liadm.com ib.adnxs.com id5-sync.com idsync.rlcdn.com image.useinsider.com insight.adsrvr.cn insight.adsrvr.org i.liadm.com jadserve.postrelease.com js-agent.newrelic.com khms0.googleapis.com khms1.googleapis.com lantern.roeye.com lh3.ggpht.com *.lightboxcdn.com log.api.useinsider.com log.pinterest.com maps.googleapis.com maps.gstatic.com matching.ivitrack.com match.adsrvr.org match.prod.bidr.io match.sharethrough.com media.littlebirdie.com.au p25.zdusercontent.com pagead2.googlesyndication.com partner.mediawallahscript.com photos-eu.bazaarvoice.com pixel-sync.sitescout.com pixel.rubiconproject.com pixel.tapad.com pm.w55c.net pos.baidu.com pr-bh.ybp.yahoo.com prf.hn rs.fullstory.com rtb-csync.smartadserver.com r.casalemedia.com s0.2mdn.net scontent.cdninstagram.com secure.adnxs.com sentinel.api.useinsider.com simage2.pubmatic.com sync-criteo.ads.yieldmo.com sync-t1.taboola.com sync.aralego.com sync.crwdcntrl.net sync.ipredictive.com sync.outbrain.com s.ad.smaato.net s.thebrighttag.com s.trackonomics.net tags.bluekai.com tapestry.tapad.com tg.socdm.com *.theathletesfoot.com.au *.theathletesfoot.co.nz translate.google.com trends.revcontent.com um.simpli.fi ups.analytics.yahoo.com visitor.omnitagjs.com wp-log.api.useinsider.com www.bing.com www.facebook.com www.google.ae www.google.al www.google.at www.google.az www.google.ba www.google.be www.google.bg www.google.bs www.google.bt www.google.by www.google.ca www.google.cd www.google.ch www.google.ci www.google.cl www.google.cn www.google.com.ag www.google.com.ar www.google.com.au www.google.com.bd www.google.com.bh www.google.com.bn www.google.com.br www.google.com.co www.google.com.cy www.google.com.ec www.google.com.eg www.google.com.et www.google.com.fj www.google.com.gh www.google.com.gt www.google.com.hk www.google.com.jm www.google.com.kh www.google.com.kw www.google.com.lb www.google.com.ly www.google.com.mt www.google.com.mx www.google.com.my www.google.com.ng www.google.com.np www.google.com.pa www.google.com.pe www.google.com.pg www.google.com.ph www.google.com.pk www.google.com.pr www.google.com.qa www.google.com.sa www.google.com.sg www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.uy www.google.com.vn www.google.co.ck www.google.co.cr www.google.co.id www.google.co.il www.google.co.in www.google.co.jp www.google.co.ke www.google.co.kr www.google.co.ma www.google.co.nz www.google.co.th www.google.co.tz www.google.co.uk www.google.co.uz www.google.co.ve www.google.co.za www.google.cz www.google.de www.google.dk www.google.dz www.google.ee www.google.es www.google.fi www.google.fr www.google.gr www.google.hr www.google.hu www.google.ie www.google.iq www.google.it www.google.kg www.google.kz www.google.lk www.google.lt www.google.lu www.google.lv www.google.me www.google.mk www.google.mn www.google.mu www.google.nl www.google.no www.google.pl www.google.pt www.google.ro www.google.rs www.google.ru www.google.se www.google.si www.google.sk www.google.sr www.google.tn www.google.tt www.google.vu www.google.ws www.ist-track.com www.littlebirdie.com.au x.bidswitch.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://portal.sandbox.clearpay.co.uk https://portal.clearpay.co.uk https://portal.sandbox.afterpay.com https://portal.afterpay.com https://static.afterpay.com https://js.sandbox.afterpay.com https://js.afterpay.com apps.bazaarvoice.com apps.nexus.bazaarvoice.com apps-stg.nexus.bazaarvoice.com analytics-static.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com mpsnare.iesnare.com ad.doubleclick.net analytics.tiktok.com api.useinsider.com assets.api.useinsider.com assets.pinterest.com bam.nr-data.net bat.bing.com cdn.attraqt.io chat.gosquared.com configaus2.veinteractive.com connect.facebook.net *.criteo.com *.criteo.net ct.pinterest.com d1l6p2sc9645hc.cloudfront.net data2.gosquared.com data.gosquared.com dkupaw9ae63a8.cloudfront.net ecomm-cdn.trurating.com ecommwidget.trurating.com edge.fullstory.com eitri.api.useinsider.com fast.wistia.com fast.wistia.net *.forter.com foursixty.com googletagmanager.com stats.g.doubleclick.net *.hotjar.com https://www.google-analytics.com insight.adsrvr.org js-agent.newrelic.com js.adsrvr.org lantern.roeyecdn.com *.lightboxcdn.com loader.wisepops.com maps.googleapis.com match.adsrvr.org pagead2.googlesyndication.com pixel.roymorgan.com polyfill.io rs.fullstory.com srd.bazaarvoice.com static.zdassets.com s.pinimg.com s.retargeted.co tag.benchplatform.com test.socialq.net theathletesfootau.api.useinsider.com theathletesfootnz.api.useinsider.com *.theathletesfoot.com.au *.theathletesfoot.co.nz tpc.googlesyndication.com t.cfjump.com unpkg.com widget-mediator.zopim.com wss://widget-mediator.zopim.com www.everestjs.net www.googletagservices.com www.google.com www.ist-track.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com unsafe-inline assets.braintreegateway.com static.afterpay.com/ js.sandbox.afterpay.com js.afterpay.com display.ugc.bazaarvoice.com apps.bazaarvoice.com assets.api.useinsider.com cdn.honey.io fast.wistia.com fonts.googleapis.com foursixty.com www.googletagmanager.com *.lightboxcdn.com pwm-image.trendmicro.com www.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com api.retargeted.co ausaz231.dayforcehcm.com cdn.attraqt.io connect.facebook.net *.criteo.com embed-cloudfront.wistia.com embed-ssl.wistia.com embedwistia-a.akamaihd.net fast.wistia.com *.forter.com googleads.g.doubleclick.net insight.adsrvr.org match.adsrvr.org region1.google-analytics.com ssl.google-analytics.com ssl.gstatic.com static.zdassets.com td.doubleclick.net www.bing.com www.googletagmanager.com www.google.com.hk www.google.co.in www.google.gr 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com static.afterpay.com static.sandbox.afterpay.com js.sandbox.afterpay.com js.afterpay.com api.bazaarvoice.com stg.api.bazaarvoice.com apps.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com abacus.api.useinsider.com adobedc.demdex.net adservice.google.com ad.doubleclick.net analytics.tiktok.com api.retargeted.co api.trongrid.io api.useinsider.com bam.nr-data.net bat.bing.com carrier.useinsider.com collect-ap2.attraqt.io content.hotjar.io *.criteo.com cs.hae123.cn ct.pinterest.com d1wix2gc2cgqis.cloudfront.net d2o5idwacg3gyw.cloudfront.net d3in1te4fdays6.cloudfront.net devtools-euw1c-interaction-server-004-mobile.browserstack.com distillery.wistia.com doublestat.info ecmacore.com ecommapi.trurating.com edge.fullstory.com ekr.zdassets.com embed-cloudfront.wistia.com embed-ssl.wistia.com fast.wistia.com fast.wistia.net fg8vvsvnieiv3ej16jby.litix.io *.forter.com foursixty.com googleads4.g.doubleclick.net hit.api.useinsider.com *.hotjar.com ip.x2convert.com jb-on-site.api.useinsider.com locationv2.api.useinsider.com maps.googleapis.com metrics.hotjar.io network-a.bazaarvoice.com pagead2.googlesyndication.com pipedream.wistia.com portal.afterpay.com rcg.api.fluentretail.com rcg.tt.omtrdc.net recommendationv2.api.useinsider.com recommendation.api.useinsider.com region1.google-analytics.com rh.nexus.bazaarvoice.com rs.fullstory.com segment.api.useinsider.com stats.g.doubleclick.net surveystats.hotjar.io tafnz.api.fluentretail.com theathletesfootau.api.useinsider.com theathletesfootcustomercarenz.zendesk.com theathletesfootcustomercare.zendesk.com theathletesfootnz.api.useinsider.com *.theathletesfoot.com.au translate.googleapis.com tru-live-eventhubs.servicebus.windows.net unification.useinsider.com vc.hotjar.io widget-mediator.zopim.com wss://widget-mediator.zopim.com wss://ws.hotjar.com www.facebook.com www.google.com www.google.com.au zendesk-eu.my.sentry.io 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src edgeshoppingstatic.azureedge.net *.hotjar.com *.lightboxcdn.com wss://cdn0.forter.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri www.theathletesfoot.com 'self' 'unsafe-inline'; report-uri /_csp-reporting; report-to report-endpoint; |
| x-content-type-options: |
nosniff |
| x-xss-protection: |
1; mode=block |
| x-frame-options: |
SAMEORIGIN |
| access-control-allow-origin: |
* |
| x-request-id: |
f063d02b6f2a4994f0781aad7ab22b1f |
| pragma: |
no-cache |
| expires: |
-1 |
| cache-control: |
no-store, no-cache, must-revalidate, max-age=0 |
| age: |
1849 |
| accept-ranges: |
bytes |
| section-io-ps-capability: |
ll,ii,dj: |
| x-magento-cache-debug: |
HIT |
| section-io-id: |
e496646aec886eddc1d89d77a1d7c0e5 |
