date: |
Wed, 02 Oct 2024 16:05:05 GMT |
content-type: |
text/html; charset=UTF-8 |
transfer-encoding: |
chunked |
connection: |
close |
last-modified: |
Wed, 02 Oct 2024 14:37:49 GMT |
x-amz-server-side-encryption: |
AES256 |
cache-control: |
public, max-age=120 |
x-nginx-location: |
new_app |
x-frame-options: |
SAMEORIGIN |
strict-transport-security: |
max-age=2592000; |
content-security-policy: |
default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://*.adform.net https://*.appboycdn.com https://*.bing.com https://*.braintreegateway.com https://*.branch.io https://*.btncdn.com https://*.doubleclick.net https://*.facebook.net https://*.google-analytics.com https://*.google.com https://*.googleadservices.com https://*.googlesyndication.com https://*.googletagmanager.com https://*.heapanalytics.com https://*.hotjar.com https://*.iteratehq.com https://*.klarnacdn.net https://*.mention-me.com https://*.paypal.com https://*.paypalobjects.com https://*.pinimg.com https://*.pusher.com https://*.rmtag.com https://*.stripe.com https://*.tvsquared.com https://*.spoteffects.net https://*.twitter.com https://*.xg4ken.com https://*.zdassets.com https://*.zenaps.com https://*.zopim.com https://ad4m.at https://app.link https://www.googleoptimize.com https://*.cookiebot.com https://*.trustedshops.com https://*.microsoft.com https://*.klarna.com https://*.klarnaservices.com https://*.appsflyer.com https://*.inflcr.co https://*.clarity.ms https://*.keyivr.com https://*.analytics.tiktok.com https://analytics.tiktok.com https://pzapi-kg.com https://*.ad-srv.net https://cdn.optimizely.com/ https://api.smooch.io https://*.digitalgenius.com https://*.dgdeepai.com https://*.smooch.io https://dg-flow-media-eu-central-1-prod.s3.eu-central-1.amazonaws.com https://*.contentsquare.net; script-src-elem 'self' 'unsafe-inline' https://*.appboycdn.com https://*.bing.com https://*.branch.io https://*.doubleclick.net https://*.facebook.net https://*.google-analytics.com https://*.googleadservices.com https://*.googlesyndication.com https://*.googletagmanager.com https://*.heapanalytics.com https://*.hotjar.com https://*.pinimg.com https://*.rmtag.com https://*.tvsquared.com https://*.spoteffects.net https://*.zdassets.com https://*.zenaps.com https://app.link https://*.stripe.com https://*.zopim.com https://ad4m.at https://*.pusher.com https://*.braintreegateway.com https://*.mention-me.com https://*.klarnacdn.net https://www.googleoptimize.com https://*.cookiebot.com https://*.trustedshops.com https://*.microsoft.com https://*.klarna.com https://*.appsflyer.com https://*.inflcr.co https://cdn.jsdeliver.net https://*.keyivr.com https://*.clarity.ms https://*.analytics.tiktok.com https://analytics.tiktok.com https://pzapi-kg.com https://*.ad-srv.net https://*.google.com https://cdn.optimizely.com/ https://api.smooch.io https://*.digitalgenius.com https://*.dgdeepai.com https://*.smooch.io https://dg-flow-media-eu-central-1-prod.s3.eu-central-1.amazonaws.com https://*.contentsquare.net; style-src 'self' 'unsafe-inline' https://*.fontawesome.com https://cdn.honey.io https://*.klarna.com https://*.appsflyer.com https://*.google.com https://*.digitalgenius.com https://*.dgdeepai.com https://dg-flow-media-eu-central-1-prod.s3.eu-central-1.amazonaws.com; object-src 'none'; base-uri 'self'; connect-src 'self' https://*.bloomon.com https://*.bloomon.be https://*.bloomon.co.uk https://*.bloomon.de https://*.bloomon.dk https://*.bloomon.nl https://*.bing.com https://*.braintree-api.com https://*.braintreegateway.com https://*.branch.io https://*.braze.com https://*.bugsnag.com https://*.contentful.com https://*.doubleclick.net https://*.facebook.com https://*.google-analytics.com https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com https://*.klarnaevt.com https://*.pinterest.com https://*.postcodeanywhere.co.uk https://*.pusher.com wss://*.pusher.com https://*.stripe.com https://*.zdassets.com https://*.zendesk.com https://bw-contact-uploads.s3-eu-west-1.amazonaws.com https://vimeo.com wss://*.pusherapp.com wss://*.zopim.com https://*.sciencebehindecommerce.com wss://*.hotjar.com https://*.heapanalytics.com https://heapanalytics.com https://*.mention-me.com https://bw-form-uploads.s3-eu-west-1.amazonaws.com https://*.cookiebot.com https://*.trustedshops.com https://*.etrusted.com https://*.trustbadge.com https://*.klarna.com https://*.klarnauserservices.com https://*.appsflyer.com https://*.onelink.me https://capi.bloomandwild.com https://www.instagram.com https://*.google.com https://google.com https://*.clarity.ms https://*.keyivr.com https://analytics.tiktok.com https://*.auryc.com https://cdn.optimizely.com/ https://logx.optimizely.com/ wss://api.smooch.io https://api.smooch.io https://api.pwnedpasswords.com https://*.digitalgenius.com https://*.dgdeepai.com https://*.smooch.io https://dg-flow-media-eu-central-1-prod.s3.eu-central-1.amazonaws.com https://*.contentsquare.net; font-src 'self' data: https://*.fontawesome.com https://cdn.honey.io https://*.hotjar.com https://fonts.gstatic.com https://*.klarna.com https://*.appsflyer.com https://*.auryc.com https://*.digitalgenius.com; frame-src 'self' https://*.bloomon.com https://*.bloomon.be https://*.bloomon.co.uk https://*.bloomon.de https://*.bloomon.dk https://*.bloomon.nl https://bloomwild.typeform.com https://bloomandwild.typeform.com https://www.mainadv.com https://www.pinterest.de https://www.pinterest.dk https://www.pinterest.co.uk https://*.pinterest.com https://*.pinterest.fr https://*.pinterest.com.au https://*.pinterest.ie https://*.pinterest.at https://*.pinterest.ca https://*.pinterest.es https://*.pinterest.nz https://*.braintreegateway.com https://*.doubleclick.net https://*.facebook.com https://*.googlesyndication.com https://*.hotjar.com https://*.klarna.com https://*.paypal.com https://*.stripe.com https://*.vimeo.com https://*.youtube.com https://*.youtube-nocookie.com https://*.zenaps.com https://ad4m.at https://ad4mat.net https://mention-me.com https://*.mention-me.com https://*.cookiebot.com https://*.appsflyer.com https://*.inflcr.co https://*.keyivr.com https://*.google.com https://*.digitalgenius.com https://*.dgdeepai.com https://dg-flow-media-eu-central-1-prod.s3.eu-central-1.amazonaws.com; child-src 'self' blob: https://*.braintreegateway.com https://*.paypal.com https://*.klarna.com https://*.appsflyer.com https://*.digitalgenius.com https://*.dgdeepai.com https://dg-flow-media-eu-central-1-prod.s3.eu-central-1.amazonaws.com; manifest-src 'self'; media-src 'self' https://*.zdassets.com https://*.klarna.com https://*.appsflyer.com https://*.vimeo.com https://download-video.akamaized.net https://*.digitalgenius.com https://*.dgdeepai.com https://dg-flow-media-eu-central-1-prod.s3.eu-central-1.amazonaws.com; img-src 'self' data: https://*.bloomon.com https://*.bloomon.be https://*.bloomon.co.uk https://*.bloomon.de https://*.bloomon.dk https://*.bloomon.nl https://*.google-analytics.com https://*.google.ae https://*.google.al https://*.google.co.in https://*.google.co.nz https://*.google.co.uk https://*.google.com https://*.google.com.au https://*.google.com.sg https://*.google.de https://*.google.dk https://*.google.es https://*.google.fr https://*.google.ie https://*.google.it https://*.google.lk https://*.google.nl https://*.google.ro https://*.google.ch https://*.google.pt https://*.google.fi https://*.google.co.za https://*.google.lt https://*.google.cz https://*.google.com.ph https://*.google.lv https://*.google.kz https://*.google.com.hk https://*.google.at https://*.google.be https://*.google.se https://*.google.no https://*.google.je https://*.google.com.qa https://*.google.pl https://*.google.gr https://*.google.com.sa https://*.google.ru https://*.google.hu https://*.google.com.pk https://*.google.com.np https://*.google.com.gh https://*.google.com.cy https://*.google.lu https://*.google.com.tr https://*.google.co.uk https://*.ad4mat.net https://*.adform.net https://*.adition.com https://*.adnxs.com https://*.adscale.de https://*.adserver01.de https://*.amazon-adsystem.com https://*.atdmt.com https://*.bidswitch.net https://*.bing.com https://*.braintreegateway.com https://*.branch.io https://*.contentful.com https://*.creative-serving.com https://*.ctfassets.net https://*.demdex.net https://*.doubleclick.net https://*.facebook.com https://*.facebook.net https://*.googletagmanager.com https://*.gstatic.com https://cdn.honey.io https://*.linksynergy.com https://*.mention-me.com https://*.paypal.com https://*.pinterest.com https://*.rubiconproject.com https://*.stripe.com https://*.taboola.com https://*.tvsquared.com https://*.spoteffects.net https://*.twiago.com https://*.twitter.com https://*.yieldlab.net https://*.zenaps.com https://ad4m.at https://as.ad4m.at https://heapanalytics.com https://id5-sync.com https://carrier-logos.s3-eu-west-1.amazonaws.com https://*.trustedshops.com https://*.klarna.com https://*.klarnaevt.com https://*.klarnacdn.net https://*.appsflyer.com https://*.inflcr.co https://impressions.onelink.me https://www.instagram.com https://*.bloomandwild.zendesk.com https://bloomandwild.zendesk.com https://*.keyivr.com https://*.clarity.ms https://prf.hn https://*.hotjar.com https://static.zdassets.com https://i.vimeocdn.com https://*.digitalgenius.com https://*.dgdeepai.com https://*.cookiebot.com/ https://dg-flow-media-eu-central-1-prod.s3.eu-central-1.amazonaws.com https://*.contentsquare.net; report-uri https://api.bloomandwild.com/csp-violations; report-to {"max_age":86400,"endpoints":[{"url":"https://api.bloomandwild.com/csp-violations"}]} |
x-envoy-upstream-service-time: |
26 |
x-kong-upstream-latency: |
27 |
x-kong-proxy-latency: |
0 |
via: |
1.1 kong/3.8.0 |
x-kong-request-id: |
71085f1a6c2e984bc2428b6014f8147b |
cf-cache-status: |
REVALIDATED |
accept-ranges: |
bytes |
report-to: |
{"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IqbF1AeeAQkK0qX%2Fk73nk9uAwRPyaHj2Q893efjqVCr8jvy3uT2zVU3P556xOZYJ2V9MRlb4CdIs%2B5VHjnGu90wViLXlMG7d2yXgCFAqzC%2Fae99LRubSvHCY3QI1du2A"}],"group":"cf-nel","max_age":604800} |
nel: |
{"success_fraction":0,"report_to":"cf-nel","max_age":604800} |
server: |
cloudflare |
cf-ray: |
8cc5ee9198cc0b5a-AMS |