HTTP/1.1 200 OK
Server: instart/master
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
X-Instart-Streaming: OTC:miss
X-Page-Type: home
X-Content-Type-Options: nosniff
Date: Wed, 25 Sep 2019 15:53:36 GMT
X-XSS-Protection: 1; mode=block
X-DNS-Prefetch-Control: off
Access-Control-Allow-Origin: *
Content-Security-Policy: connect-src 'self' blob: 172.27.38.23:* *.usautoparts.com *.carparts.com localhost:* cdn.ampproject.org *.googleapis.com deploy-preview-1--videos-autopartswarehouse-com.netlify.com *.tvpage.com *.youtube.com *.ytimg.com api.resellerratings.com api.trustpilot.com *.turnto.com polyfill.io amp-analytics.autopartswarehouse.com *.braintreegateway.com origin-analytics-sand.sandbox.braintree-api.com api.usautoparts.io api.carparts.io search.unbxd.io analytics-api.cloudinary.com res.cloudinary.com *.paypal.com www.googletagmanager.com www.google-analytics.com tagmanager.google.com bam.nr-data.net *.getblueshift.com *.adnxs.com ctiapi.com api.edq.com static-na.payments-amazon.com payments-sandbox.amazon.com payments.amazon.com *.amazonpay.com mt.auryc.com trc.taboola.com d.btttag.com shopper.shop.pe shop.pe api.turnto.com ws.turnto.com *.forter.com *.visa.com adservice.google.com *.doubleclick.net *.resellerratings.com *.amazon.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' localhost:* cdn.ampproject.org *.googleapis.com blob: deploy-preview-1--videos-autopartswarehouse-com.netlify.com *.tvpage.com *.youtube.com *.ytimg.com api.resellerratings.com api.trustpilot.com *.usautoparts.com *.carparts.com polyfill.io *.cloudinary.com *.turnto.com www.paypalobjects.com pay.google.com *.paypal.com tagmanager.google.com www.googletagmanager.com www.google-analytics.com js-agent.newrelic.com bam.nr-data.net *.getblueshift.com *.adnxs.com ctiapi.com api.edq.com apis.google.com static-na.payments-amazon.com payments-sandbox.amazon.com payments.amazon.com us.upsellit.com bat.bing.com cdn.auryc.com *.taboola.com carparts.btttag.com px.owneriq.net *.forter.com *.cloudfront.net cdn.attn.tv cdn.shop.pe shop.pe *.amazonaws.com shopper.shop.pe www.google.com www.gstatic.com *.visa.com adservice.google.com *.doubleclick.net *.bounceexchange.com *.resellerratings.com *.cnnx.io connect.facebook.net *.amazon.com; style-src 'self' *.googleapis.com 'unsafe-inline' data: deploy-preview-1--videos-autopartswarehouse-com.netlify.com *.turnto.com tagmanager.google.com ctiapi.com cdn.shop.pe addstrap-ui.addshoppers.com cdnjs.cloudflare.com *.resellerratings.com; font-src 'self' fonts.googleapis.com fonts.gstatic.com data: *.turnto.com tagmanager.google.com cdnjs.cloudflare.com cdn.shop.pe; img-src 'self' *.apwcontent.com images.apw21.com *.cpsimg.com data: blob: *.ytimg.com *.autopartswarehouse.com *.tvpage.com res.cloudinary.com cld.partsimg.com *.gstatic.com www.google-analytics.com *.carparts.com *.paypal.com staging2-cp.staticomp.com *.amazonaws.com www.youtube.com ctiapi.com *.turnto.com payments-sandbox.amazon.com payments.amazon.com wac.edgecastcdn.net images-na.ssl-images-amazon.com *.cloudfront.net bat.bing.com px.owneriq.net events.attentivemobile.com stats.g.doubleclick.net *.getblueshift.com *.adnxs.com *.doubleclick.net *.google.com *.google.com.ph *.google.ca *.google.co.in *.visa.com *.bouncex.net *.bounceexchange.com *.resellerratings.com *.googletagmanager.com *.bizrate.com *.connexity.net; frame-src *.youtube.com *.braintreegateway.com tst.kaptcha.com www.googletagmanager.com pay.google.com *.paypal.com www.sandbox.paypal.com *.googleapis.com deploy-preview-1--videos-autopartswarehouse-com.netlify.com *.ytimg.com *.tvpage.com www.cartlink.net iframe.coverking.com *.turnto.com www.google.com static-na.payments-amazon.com payments-sandbox.amazon.com payments.amazon.com *.dotomi.com px.owneriq.net carparts.attn.tv *.visa.com *.doubleclick.net *.bounceexchange.com *.amazon.com; frame-ancestors 'self' *.youtube.com deploy-preview-1--videos-autopartswarehouse-com.netlify.com *.ytimg.com *.tvpage.com *.turnto.com; child-src 'self' *.youtube.com pay.google.com *.googleapis.com deploy-preview-1--videos-autopartswarehouse-com.netlify.com *.ytimg.com *.tvpage.com *.turnto.com; worker-src 'self' blob:
Vary: Accept-Encoding
X-Download-Options: noopen
Strict-Transport-Security: max-age=5184000; includeSubDomains
X-Frame-Options: SAMEORIGIN
X-Instart-Request-ID: 14560293690971216312:QSJ01-CPVNPPRY17:1569426803:0
X-Device: Desktop
x-origin: upwa
x-instart-isbot: 0
Set-Cookie: absplit_upwa-0916502525=c;Path=/; Domain=.carparts.com; Expires =Fri, 25-Oct-19 15:53:23 GMT;
Set-Cookie: i10c_focloir=8:5e5db85271f7cf5a2aeff3c3189a5608:0:80406b1490e14cb08a49a4f8be203876;Path=/;Max-Age=3600;