HTTP/1.1 200 OK
Date: Fri, 18 Feb 2022 14:07:32 GMT
Server: Apache/2.4.52 (Ubuntu)
Set-Cookie: PHPSESSID=2d4ljhm0opftb90aafngibsmau; expires=Fri, 18-Feb-2022 15:07:32 GMT; Max-Age=3600; path=/; domain=www.storefrontdirect.com; secure; HttpOnly
Expires: Thu, 18 Feb 2021 06:07:17 GMT
Cache-Control: max-age=0, must-revalidate, no-cache, no-store
Pragma: no-cache
Content-Security-Policy-Report-Only: font-src https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com 'self' https://www.facebook.com/tr/ 'self' 'unsafe-inline'; frame-ancestors 'self' 'unsafe-inline'; frame-src secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com 'self' https://www.facebook.com https://www.facebook.com 'self' https://oxfordoffers.ca https://oxfordoffers.ca *.wesupply.xyz *.weltpixel.com 'self' https://www.google.com https://www.google.com 'self' https://bid.g.doubleclick.net https://bid.g.doubleclick.net 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com www.paypalobjects.com t.paypal.com *.vimeocdn.com s.ytimg.com data: https://www.magecomp.com/ *.gstatic.com https://www.google.com/pagead/1p-user-list/ https://www.google.ca/pagead/1p-user-list/ https://googleads.g.doubleclick.net/pagead/viewthroughconversion/ https://www.google-analytics.com https://www.facebook.com https://www.googletagmanager.com 'self' 'unsafe-inline'; script-src assets.adobedtm.com secure.authorize.net test.authorize.net www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com s.ytimg.com video.google.com vimeo.com www.vimeo.com www.youtube.com https://jquery.sellxed.com/jquery.min.js https://www.beanstream.com/scripts/tokenization/legato-1.1.min.js https://www.gstatic.com *.cloudflare.com https://www.googleadservices.com/pagead/conversion_async.js https://googleads.g.doubleclick.net/pagead/viewthroughconversion/ https://www.googletagmanager.com tagmanager.google.com https://www.google.com https://www.google-analytics.com https://connect.facebook.net https://dow068lag04cv.cloudfront.net/vantage-external-3.3-min.js https://d2wa5sea6guof0.cloudfront.net/2.10.2.js https://dow068lag04cv.cloudfront.net/12102-d5e7704d310221c06f44ffe61d1f2560.js https://dow068lag04cv.cloudfront.net/27338-7f512e674ce4a301d04d3b667e8f65b9.js https://dow068lag04cv.cloudfront.net/27337-eab986e29bdf45e99fc019c7e1938459.js https://dow068lag04cv.cloudfront.net/27335-165385154f4741be1c10e4bc3f3a2343.js https://dow068lag04cv.cloudfront.net/27339-73a83b1bdffee608941686275713954b.js https://dow068lag04cv.cloudfront.net/27336-ea466e69431aa189b2bc932d6cc7d254.js 'self' 'unsafe-inline' 'unsafe-eval'; style-src getfirebug.com https://maxcdn.bootstrapcdn.com https://fonts.googleapis.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com https://web.na.bambora.com/scripts/tokenization/tokens 'self' https://www.facebook.com/tr/ https://www.facebook.com/tr/ *.vantageanalytics.com https://www.google-analytics.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Vary: Accept-Encoding
X-UA-Compatible: IE=edge
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8