HTTP/1.1 200 OK
Date: Wed, 31 Aug 2022 04:29:29 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
vary: Accept-Encoding
content-security-policy-report-only: font-src *.fontawesome.com maxcdn.bootstrapcdn.com fonts.gstatic.com https://fonts.gstatic.com 'self' data: *.gstatic.com www.craftelier.com data: 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net pilot-payflowlink.paypal.com https://www.facebook.com www.paycomet.com api.paycomet.com www.craftelier.com 'self' 'unsafe-inline'; frame-ancestors www.craftelier.com 'self' 'unsafe-inline'; frame-src fast.amc.demdex.net *.adobe.com secure.authorize.net test.authorize.net www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ www.facebook.com platform.twitter.com www.paycomet.com api.paycomet.com https://sandbox.sequracdn.com https://live.sequracdn.com https://player.vimeo.com https://www.youtube-nocookie.com *.trustpilot.com www.craftelier.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.salesmanago.pl *.salesmanago.es *.salesmanago.com validate.fishpig.co.uk www.facebook.com pinterest.com assets.pinterest.com syndication.twitter.com https://www.google.com https://www.google.es https://scontent.cdninstagram.com https://sandbox.sequracdn.com https://live.sequracdn.com blob: https://updates.themepunch.tools http://updates.themepunch.tools https://updates.themepunch-ext-a.tools http://updates.themepunch-ext-a.tools https://updates.themepunch-ext-b.tools http://updates.themepunch-ext-b.tools https://dev.sliderrevolution.com https://revolution.themepunch.com http://revolution5.themepunch.com http://pbs.twimg.com https://pbs.twimg.com http://scontent.cdninstagram.com https://img.youtube.com http://live.staticflickr.com https://live.staticflickr.com www.craftelier.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com secure.authorize.net test.authorize.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.salesmanago.pl *.salesmanago.es *.salesmanago.com *.avada.io connect.facebook.net twitter.com platform.twitter.com http://api.brainsins.com https://api.brainsins.com http://d2xkqxdy6ewr93.cloudfront.net https://d2xkqxdy6ewr93.cloudfront.net http://mw.brainsins.com https://mw.brainsins.com http://recommender.brainsins.com https://recommender.brainsins.com http://cdn.doofinder.com https://cdn.doofinder.com https://www.googletagmanager.com https://www.google-analytics.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://api.instagram.com https://static.zdassets.com https://js-agent.newrelic.com https://bam.eu01.nr-data.net https://cdn.connectif.cloud www.paycomet.com api.paycomet.com https://sandbox.sequracdn.com https://live.sequracdn.com https://player.vimeo.com https://www.youtube.com https://cdn.scalapay.com *.trustpilot.com www.craftelier.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.fontawesome.com maxcdn.bootstrapcdn.com https://cdn.doofinder.com https://fonts.googleapis.com http://fonts.googleapis.com *.trustpilot.com www.craftelier.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com https://static.zdassets.com https://video.cdninstagram.com blob: www.craftelier.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com *.salesmanago.pl *.salesmanago.es *.salesmanago.com https://get.geojs.io *.avada.io https://api.brainsins.com http://eu1-search.doofinder.com https://eu1-search.doofinder.com https://eu1-layer.doofinder.com wss://eu1-layer.doofinder.com https://www.google-analytics.com https://stats.g.doubleclick.net https://ekr.zendesk.com wss://widget-mediator.zopim.com https://mitiendadearte.zendesk.com https://craftelier.zendesk.com https://bam.eu01.nr-data.net https://eu5-api.connectif.cloud https://sandbox.sequracdn.com https://live.sequracdn.com https://fonts.googleapis.com https://fonts.gstatic.com https://api.weatherbit.io www.craftelier.com 'self' 'unsafe-inline'; child-src www.craftelier.com http: https: blob: 'self' 'unsafe-inline'; default-src *.salesmanago.pl *.salesmanago.es *.salesmanago.com https://mitiendadearte.com https://craftelier.com https://staging.mitiendadearte.com https://staging.craftelier.com https://dev.mitiendadearte.com https://dev.craftelier.com www.craftelier.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';
age: 8451
x-magento-cache-debug: HIT
grace: none
pragma: no-cache
expires: -1
Cache-Control: no-store, no-cache, must-revalidate, max-age=0
strict-transport-security: max-age=15552000; includeSubdomains
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,POST,PUT
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Origin,X-CSRFToken,Content-Language,Accept-Language,X-Access-Token,X-User-Agent
CF-Cache-Status: DYNAMIC
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gTzpGL%2FsTaTBQvuQKse8N%2BUbNuyncY9bWt6joLmL5C54xLhiINLxYhWQyZw2JZtrckDF7ggBUaF8YL4JANb7H9cqBU95vBqSOVm2XrfRZwIcy1Q1A3ZNbIjb6RK2C%2FCLew%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7433067fcf99aa79-DFW
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400