HTTP/1.1 200 OK
Date: Sun, 27 Mar 2022 16:45:04 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
content-security-policy: object-src 'self' 'self' 'unsafe-inline'; media-src 'self' https://static.zdassets.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; upgrade-insecure-requests; frame-ancestors 'self' https://*.grabagun.com https://*.credova.com https://*.authorize.net 'self' 'unsafe-inline'; form-action 'self' secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com https://*.authorize.net yotpo.com www.yotpo.com p.yotpo.com staticw2.yotpo.com w2.yotpo.com 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com/ https://widgets.turnto.com/ https://static.olark.com/ https://optimize.google.com https://fonts.googleapis.com https://web-sdk.aptrinsic.com/ http://cdn.avmws.com/ getfirebug.com https://tagmanager.google.com https://d22q3dafggn5rg.cloudfront.net https://www.google.com https://www.google.pl https://www.google.com.ua https://www.google.ca yotpo.com www.yotpo.com p.yotpo.com staticw2.yotpo.com w2.yotpo.com 'self' 'unsafe-inline'; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://cdns.brsrvr.com/ https://cdn.scarabresearch.com/ https://d22q3dafggn5rg.cloudfront.net/ https://certify-js.alexametrics.com/ https://static.zdassets.com/ https://www.googletagmanager.com/ https://google.com/ https://widget-mediator.zopim.com/ https://www.google-analytics.com/ https://www.gstatic.com/ https://widgets.turnto.com/ https://suggest.dxpapi.com https://jstest.authorize.net https://ajax.cloudflare.com/ https://js-agent.newrelic.com https://bam.nr-data.net/ https://static.olark.com/ https://maps.googleapis.com/ https://js.authorize.net/ https://www.youtube.com/ https://s.ytimg.com/ https://static.scarabresearch.com/ https://www.google.com/ https://knrpc.olark.com/ https://api.olark.com/ https://www.googleapis.com/ https://bam-cell.nr-data.net/ https://plugin.credova.com/ https://static.cloudflareinsights.com/ *.crazyegg.com https://image.grabagun.com https://optimize.google.com https://up.pixel.ad/ https://web-sdk.aptrinsic.com/ https://googleads.g.doubleclick.net/ https://cdn.avmws.com/1023073/ https://ssl.avmws.com/1023073/ https://*.googleapis.com assets.adobedtm.com secure.authorize.net test.authorize.net www.googleadservices.com https://www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com www.sandbox.paypal.com t.paypal.com s.ytimg.com video.google.com vimeo.com www.vimeo.com *.vimeocdn.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.youtube.com www.googletagmanager.com www.google-analytics.com *.plugins.emarsys.net *.scarabresearch.com www.xtento.com cdn.xtento.com https://maps.googleapis.com https://fonts.googleapis.com/* https://www.googletagmanager.com https://tagmanager.google.com https://d22q3dafggn5rg.cloudfront.net https://www.gstatic.com https://www.google.com https://www.google.pl https://www.google.com.ua https://www.google.ca https://static.zdassets.com https://cdns.brsrvr.com https://cdn.scarabresearch.com https://static.cloudflareinsights.com https://*.credova.com https://*.authorize.net *.maxmind.com *.authorize.net www.sourceknowledge.com upx.provenpixel.com yotpo.com www.yotpo.com p.yotpo.com staticw2.yotpo.com w2.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; img-src 'self' https://www.xtento.com https://certify.alexametrics.com https://p.brsrvr.com https://www.google-analytics.com https://stats.g.doubleclick.net https://www.google.com/ https://www.google.com.ua/ https://amasty.com/ data: https://maps.gstatic.com/ https://maps.googleapis.com/ https://wac.edgecastcdn.net/ https://www.googletagmanager.com/ https://www.google.ca/ https://log.olark.com/ https://bam-cell.nr-data.net/ https://plugin.credova.com/ *.crazyegg.com https://image.grabagun.com https://redirect.prod.experiment.routing.cloudfront.aws.a2z.com/ https://optimize.google.com https://pixel.sitescout.com/ https://tracking.avantlink.com/ https://*.googleapis.com widgets.magentocommerce.com www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com s.ytimg.com www.xtento.com cdn.xtento.com https://grabagun.com https://img.youtube.com https://maps.googleapis.com https://maps.gstatic.com https://wac.edgecastcdn.net https://d22q3dafggn5rg.cloudfront.net https://www.googletagmanager.com https://www.google.com https://www.google.pl https://www.google.com.ua https://www.google.ca https://static.zdassets.com https://cdns.brsrvr.com https://cdn.scarabresearch.com https://*.credova.com https://*.omtrdc.net/ https://cm.everesttech.net store.paradoxlabs.com www.sourceknowledge.com upx.provenpixel.com yotpo.com www.yotpo.com p.yotpo.com staticw2.yotpo.com w2.yotpo.com 'self' 'unsafe-inline'; frame-src 'self' https://static.olark.com/ https://www.google.com https://www.youtube.com https://gun-rebates.com/ https://win-a-truck.com/ https://preferences.grabagun.com/ https://www.youtube-nocookie.com https://sandbox-lending.credova.com/ https://lending.credova.com/ https://image.grabagun.com/ https://optimize.google.com https://pixel.sitescout.com/ https://photos.pixlee.co/ https://*.doubleclick.net/ secure.authorize.net test.authorize.net www.paypal.com www.sandbox.paypal.com player.vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.googletagmanager.com https://*.grabagun.com https://*.credova.com https://*.authorize.net yotpo.com www.yotpo.com p.yotpo.com staticw2.yotpo.com w2.yotpo.com 'self' 'unsafe-inline'; font-src 'self' https://fonts.gstatic.com https://optimize.google.com https://image.grabagun.com data: https://d22q3dafggn5rg.cloudfront.net https://*.authorize.net 'self' 'unsafe-inline'; connect-src 'self' https://ekr.zdassets.com/ https://recommender.scarabresearch.com/ https://grabagun.zendesk.com/ wss://widget-mediator.zopim.com https://cdn-ws.turnto.com/ https://bam.nr-data.net/ https://js.authorize.net/ https://jstest.authorize.net/ https://www.google-analytics.com https://ws.turnto.com https://webchannel-content.eservice.emarsys.net https://recommender-eu.scarabresearch.com/ https://static.zdassets.com/ https://knrpc.olark.com/ https://apitest.authorize.net/ wss://grabagun.zendesk.com/ https://api2.authorize.net/ https://stats.g.doubleclick.net/ https://bam-cell.nr-data.net/ https://sandbox-lending-api.credova.com/ https://lending-api.credova.com/ https://we.turnto.com/ *.crazyegg.com https://image.grabagun.com https://esp-m.aptrinsic.com/ https://*.googleapis.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.scarabresearch.com *.eservice.emarsys.net https://stats.g.doubleclick.net https://d22q3dafggn5rg.cloudfront.net https://bam-cell.nr-data.net https://grabagun.zendesk.com https://static.zdassets.com https://cdns.brsrvr.com https://cdn.scarabresearch.com https://*.credova.com https://*.demdex.net https://*.authorize.net *.mmapiws.com *.authorize.net yotpo.com www.yotpo.com p.yotpo.com staticw2.yotpo.com w2.yotpo.com 'self' 'unsafe-inline'; default-src 'self' https://static.zdassets.com https://static.olark.com *.crazyegg.com https://fonts.googleapis.com/ https://image.grabagun.com https://d22q3dafggn5rg.cloudfront.net 'self' 'unsafe-inline' 'unsafe-eval'; worker-src 'self' 'unsafe-eval' 'unsafe-inline' https://cdns.brsrvr.com/ https://cdn.scarabresearch.com/ https://d22q3dafggn5rg.cloudfront.net/ https://certify-js.alexametrics.com/ https://static.zdassets.com/ https://www.googletagmanager.com/ https://google.com/ https://widget-mediator.zopim.com/ https://www.google-analytics.com/ https://www.gstatic.com/ https://widgets.turnto.com/ https://suggest.dxpapi.com https://jstest.authorize.net https://ajax.cloudflare.com/ https://js-agent.newrelic.com https://bam.nr-data.net/ https://static.olark.com/ https://maps.googleapis.com/ https://js.authorize.net/ https://www.youtube.com/ https://s.ytimg.com/ https://static.scarabresearch.com/ https://www.google.com/ https://knrpc.olark.com/ https://api.olark.com/ https://www.googleapis.com/ https://bam-cell.nr-data.net/ https://plugin.credova.com/ https://static.cloudflareinsights.com/ *.crazyegg.com https://image.grabagun.com https://optimize.google.com blob:;
expires: Mon, 28 Mar 2022 15:45:09 GMT
pragma: cache
x-content-type-options: nosniff
x-debug-info: eyJyZXRyaWVzIjowfQ==
x-esi: 1
x-frame-options: SAMEORIGIN
x-platform-server: i-03ab06ca1df188bbb
x-platform-server: i-03ab06ca1df188bbb
x-request-id: 00-16e04758a0ba2f0228b36e6e146e066f-cf12d74538c1b18c-00
x-xss-protection: 1; mode=block
age: 3595
x-served-by: cache-sea4473-SEA, cache-dfw18681-DFW
x-cache: HIT, HIT
x-cache-hits: 1, 5
strict-transport-security: max-age=31536000
Cache-Control: no-store, no-cache, must-revalidate, max-age=0
vary: Accept-Encoding,Cookie
CF-Cache-Status: DYNAMIC
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 6f299829ed290b91-DFW