date: |
Wed, 02 Oct 2024 14:04:24 GMT |
content-type: |
text/html; charset=UTF-8 |
transfer-encoding: |
chunked |
connection: |
close |
x-cache-debug: |
1 |
x-magento-route: |
cms_index_index |
x-magento-tags: |
store,cms_b,mp_smtp_script,amasty_mostviewed_,mostviewed_group_4,snowdog_menu_menu_3,BLOCK_HTML,snowdog_menu_menu,cms_b_header_banner,snowdog_menu_menu_1,cms_b_footer_payments,storyblok_12919029,cms_p_2,cms_b_tab_new_releases,cat_p_41488,cat_p,cat_p_40985,cat_p_41491,cat_p_41258,cat_p_40356,cat_p_41489,cat_p_39696,cat_p_39948,cat_p_40567,cat_p_40357,cat_p_41490,cat_p_39697,cms_b_tab_preorders,cat_p_40672,cat_p_41723,cat_p_40992,cat_p_41086,cat_p_41265,cat_p_41561,cat_p_41056,cat_p_41264,cat_p_40683,cat_p_41070,cat_p_40589,cms_b_tab_best_sellers,cat_p_41528,cat_p_38930,cat_p_36918,cat_p_20509,cat_p_36916,cat_p_40137,cat_p_38723,cat_p_35860 |
x-cache-lifetime: |
15552000 |
report-to: |
{"group":"report-endpoint","max_age":10886400,"endpoints":[{"url":"https:\/\/thegamecollection2.report-uri.com\/r\/d\/csp\/reportOnly"}]} |
content-security-policy-report-only: |
font-src *.klarnacdn.net *.gstatic.com *.stape.io *.fontawesome.com *.cloudflare.com *.twitter.com *.typekit.net *.googleapis.com *.bootstrapcdn.com *.tradedoubler.com maxcdn.bootstrapcdn.com https://cdnjs.cloudflare.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.twitter.com *.trustpilot.com *.clerk.io *.paypal.com *.braintreegateway.com *.cardinalcommerce.com *.tradedoubler.com thegamecollection.us2.list-manage.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.google.com *.klarna.com *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.stape.io *.addthis.com *.facebook.com *.twitter.com *.trustpilot.com *.clerk.io *.cardinalcommerce.com *.authorize.net *.paypal.com *.braintreegateway.com *.kaptcha.com *.craftyclicks.co.uk *.tradedoubler.com *.paypalobjects.com www.xtento.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com * 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com 'self' data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com *.klarna.com *.klarnaevt.com *.klarnacdn.net *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.gstatic.com *.doubleclick.net *.stape.io *.addthisedge.com *.twitter.com *.sooqr.com *.cloudflare.com *.googleadservices.com *.google-analytics.com *.paypal.com *.trustpilot.com *.clerk.io *.storyblok.com *.ytimg.com *.tradedoubler.com *.tumblr.com *.paypalobjects.com *.facebook.com www.xtento.com cdn.xtento.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: data: 'self' 'unsafe-inline'; script-src googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ www.google.com/recaptcha/ www.gstatic.com/recaptcha/ chimpstatic.com downloads.mailchimp.com *.list-manage.com *.klarna.com *.klarnacdn.net *.klarnaservices.com *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.gstatic.com *.googletagmanager.com *.doubleclick.net *.stape.io *.avada.io *.addthis.com *.moatads.com *.addthisedge.com *.facebook.net *.twitter.com *.sooqr.com *.cloudflare.com *.google-analytics.com *.fontawesome.com *.trustpilot.com *.clerk.io *.signifyd.com *.authorize.net *.cardinalcommerce.com *.braintreegateway.com *.paypal.com *.braintree-api.com *.sandbox.braintree-api.com *.kaptcha.com *.craftyclicks.co.uk *.mailchimp.com *.tradedoubler.com *.paypalobjects.com *.cloudflareinsights.com *.cookiefirst.com *.newrelic.com www.xtento.com cdn.xtento.com https://cdnjs.cloudflare.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com songbird.cardinalcommerce.com https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src downloads.mailchimp.com *.klarnacdn.net *.googleapis.com *.googletagmanager.com *.stape.io *.fontawesome.com *.sooqr.com *.cloudflare.com *.twitter.com *.gstatic.com *.trustpilot.com *.clerk.io *.bootstrapcdn.com *.mailchimp.com *.tradedoubler.com *.cookiefirst.com maxcdn.bootstrapcdn.com https://fonts.googleapis.com https://cdnjs.cloudflare.com unsafe-inline assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.klarnaevt.com *.klarnacdn.net *.klarna.com *.klarnaservices.com *.google-analytics.com *.google.com *.doubleclick.net *.googlesyndication.com *.stape.io https://get.geojs.io *.avada.io *.cloudflare.com *.twitter.com *.paypal.com *.trustpilot.com *.clerk.io *.braintreegateway.com *.braintree-api.com *.sandbox.braintree-api.com *.kaptcha.com *.amazonaws.com *.tradedoubler.com *.cardinalcommerce.com *.cookiefirst.com bam.eu01.nr-data.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com google.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://thegamecollection2.report-uri.com/r/d/csp/reportOnly; report-to report-endpoint; |
x-content-type-options: |
nosniff, nosniff |
x-xss-protection: |
1; mode=block, 1; mode=block |
strict-transport-security: |
max-age=31536000; includeSubDomains; preload |
x-cache-age: |
149 |
pragma: |
no-cache |
expires: |
-1 |
cache-control: |
no-store, no-cache, must-revalidate, max-age=0 |
cf-cache-status: |
DYNAMIC |
server: |
cloudflare |
cf-ray: |
8cc53dcf0ae696f9-AMS |
|