HTTP/1.1 200 OK
Date: Sun, 07 Nov 2021 05:34:09 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 492929
Connection: keep-alive
Content-Security-Policy: font-src *.gstatic.com smct.co *.smct.co smct.io *.smct.io *.amazonaws.com *.cloudfront.net *.adbr.io *.bootstrapcdn.com *.fontawesome.com 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.facebook.com *.nexi.it 'self' 'unsafe-inline'; frame-ancestors 'self' 'unsafe-inline'; frame-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com *.iubenda.com *.google.com *.livechatinc.com *.online-metrix.net *.tracead.com tracead.com *.signifyd.com img.signifyd.com *.addthis.com *.jrs5.com pubxtag1.com amc.demdex.net *.facebook.com smct.co *.smct.co smct.io *.smct.io *.amazonaws.com *.adbr.io *.youtube-nocookie.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com s.ytimg.com *.payments-amazon.com *.linksynergy.com *.nxtck.com *.mediaforge.com *.jrs5.com *.dc-storm.com *.rd.linksynergy.com *.ra.linksynergy.com *.facebook.com *.google.it *.google.com www.google.com *.signifyd.com *.e.aa.online-metrix.net *.gstatic.com *.googleapis.com data: amcglobal.sc.omtrdc.net cm.everesttech.net smct.co *.smct.co smct.io *.smct.io *.amazonaws.com *.demdex.net *.cloudfront.net *.adabra.com *.adroll.com *.google-analytics.com *.bing.com *.adbr.io d.adroll.com *.advertising.com *.rubiconproject.com *.outbrain.com *.pubmatic.com *.yahoo.com *.taboola.com *.bidswitch.net *.3lift.net *.3lift.com *.adnxs.com *.openx.com *.openx.net *.casalemedia.com *.nexi.it masterpass.com *.vitamincenter.com *.facebook.net *.g.doubleclick.net cm.g.doubleclick.net cm.g.dou *.doubleclick.net 'self' 'unsafe-inline'; script-src assets.adobedtm.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com js.authorize.net jstest.authorize.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com video.google.com vimeo.com www.vimeo.com www.youtube.com polyfill.io *.iubenda.com *.googletagmanager.com *.chimpstatic.com chimpstatic.com *.doofinder.com *.gstatic.com *.google.com *.signifyd.com *.livechatinc.com *.facebook.net *.rmtag.com *.tracead.com tracead.com *.addthis.com *.amazon.com *.amazonaws.com *.googleapis.com *.jsdelivr.net *.moatads.com *.addthisedge.com widget.pinterest.com smct.co *.smct.co smct.io *.smct.io *.cloudfront.net *.adbr.io *.newrelic.com *.nr-data.net *.bing.com *.adroll.com *.google-analytics.com d.adroll.mgr.consensu.org vitamincenter.disqus.com *.disqus.com *.nexi.it *.googleadservices.com *.kk-resources.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src getfirebug.com *.cloudflare.com *.cloudfront.net *.googleapis.com *.jsdelivr.net *.gstatic.com *.adbr.io *.bootstrapcdn.com *.adroll.com vitamincenter.disqus.com *.disqus.com *.fontawesome.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.algolia.net *.iubenda.com *.doofinder.com *.g.doubleclick.net *.doubleclick.net *.signifyd.com *.signifyd.com:11103 *.signifyd.com:11103/onload https://bt.signifyd.com:11103 https://bt.signifyd.com:11103/onload bt.signifyd.com *.facebook.com *.facebook.net *.google-analytics.com *.livechatinc.com *.addthis.com dpm.demdex.net smct.co *.smct.co smct.io *.smct.io *.amazonaws.com *.cloudfront.net *.adbr.io *.nr-data.net *.adroll.com *.bing.com *.google.com *.nexi.it 'self' 'unsafe-inline'; child-src 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Vary: Accept-Encoding
K-Hosting-By: Akoova
Pragma: no-cache
Expires: -1
Cache-Control: no-store, no-cache, must-revalidate, max-age=0
Accept-Ranges: bytes