Security Analysis Results

9b0e46c42bba5720-SYD

max-age=86400, public, s-maxage=86400

keep-alive

zstd

text/html; charset=UTF-8

Sat, 20 Dec 2025 09:57:44 GMT

{"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}

{"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=twRFMJSuwcKB57ut1Mvl7wwe8yo%2BRXYsWN7O4GrewRjq%2F4F%2F9zhAfsmVUjjRNTZnXSLuXE%2B3dZ4k%2BxcGivQjj4abFvCft8bCrMMlKs4%3D"}]}

cloudflare

cfCacheStatus;desc="DYNAMIC" cfEdge;dur=10,cfOrigin;dur=8740

"/cdn-cgi/speculation"

chunked

h3=":443"; ma=86400

DYNAMIC

font-src fonts.gstatic.com use.typekit.net *.googleapis.com *.gstatic.com *.cloudflare.com *.typekit.net *.trustedshops.com *.fontawesome.com https://fonts.bunny.net *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.google.com youtu.be *.vimeo.com *.addthis.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.trustpilot.com *.weltpixel.com *.googletagmanager.com *.doubleclick.net 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io *.googleapis.com *.gstatic.com *.cloudflare.com https://cdn.klarna.com *.paypal.com https://s.ytimg.com *.usercentrics.eu blob: *.magebig.com magefan.com cm.magefan.com *.disqus.com https://cdn.lpscreen.com https://media.lpscreen.com https://firebasestorage.googleapis.com *.facebook.com *.reddit.com *.ads-twitter.com t.co *.twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.google.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net cdn.ampproject.org raw.githubusercontent.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.cloudflare.com *.google-analytics.com *.google.com *.googleadservices.com *.trustedshops.com *.usercentrics.eu *.addthis.com *.addthisedge.com *.moatads.com *.disqus.com https://static.lpscreen.com *.avada.io *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com *.trustpilot.com *.googletagmanager.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.bing.com *.clarity.ms *.klaviyo.com unpkg.com *.doubleclick.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cloudflare.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.fontawesome.com https://fonts.bunny.net *.stripe.network *.stripecdn.com *.amazon.com *.trustpilot.com *.tagmanager.google.com *.googletagmanager.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io cdn.ampproject.org *.googleapis.com *.cloudflare.com *.paypal.com https://ipinfo.io *.facebook.com https://static.lpscreen.com https://get.geojs.io *.avada.io *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.google-analytics.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.twitter.com *.ads-twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.doubleclick.net *.run.app 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; upgrade-insecure-requests;

Sun, 21 Dec 2025 09:57:43 GMT

</media/wysiwyg/magebig/languages/en.png>; rel=preload; as=image, </media/wysiwyg/magebig/languages/de.png>; rel=preload; as=image, </media/wysiwyg/magebig/languages/es.png>; rel=preload; as=image, </media/wysiwyg/magebig/languages/fr.png>; rel=preload; as=image, </media/wysiwyg/magebig/languages/it.png>; rel=preload; as=image, </static/version1759223525/_cache/merged/708d84351227268409a6316c7837082b.min.js>; rel=preload; as=script, </static/version1759223525/_cache/merged/fd46c4cb68e2c1e64e991769142df7fa.min.css>; rel=preload; as=style, </static/version1759223525/frontend/MageBig/martfury_uplcd/en_US/css/styles-l.min.css>; rel=preload; as=style, </static/version1759223525/frontend/MageBig/martfury_uplcd/en_US/css/iconfont.min.css>; rel=preload; as=style, </static/version1759223525/frontend/MageBig/martfury_uplcd/en_US/css/print.min.css>; rel=preload; as=style, </static/version1759223525/_cache/merged/fonts_fd46c4cb68e2c1e64e991769142df7fa.min.css>; rel=preload; as=style

cache

max-age=15552000; includeSubDomains; preload

Accept-Encoding

nosniff

SAMEORIGIN

store,cms_b,mp_smtp_script,cms_p_11,cms_b_top-links

1; mode=block