Headers of https://www.osprey.com/gb/

text/html; charset=UTF-8

close

Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA

same-origin

?1

same-origin

SAMEORIGIN

yrlCzgQx8x0sxN4V/qECuNp9YzouZWaofCHF7V3oiACT/NyfD4WFAoqVARg5SiTbBv1QbyUycQbcVx5492MNvR5YJZk499buzpeZ7xN89WXnE9YFzaSzJxovpqeGzucNG3zosNiBVdXWyPgGb0FdaQ==$aEHSJojFac7dIMHBDjZE9g==

Thu, 01 Jan 1970 00:00:01 GMT

base-uri 'self' 'unsafe-inline' 'unsafe-eval'; child-src http: https: blob: 'self' 'unsafe-inline'; connect-src *.rapidspike.com www.cloudflare.com commerce.adobedtm.com commerce.adobedc.net *.snplow.net dpm.demdex.net amcglobal.sc.omtrdc.net api.magento.com commerce.adobe.io performance.typekit.net commerce.adobe.net region1.google-analytics.com google.com us-central1-adaptive-growth.cloudfunctions.net app-measurement.com doubleclickbygoogle.com doubleclick.com doubleclick.net googleadservices.com *.googlesyndication-cn.com *.googlesyndication.com googletagservices.com *.google.co.uk *.google.fr *.google.de *.google.es *.google.it *.google.nl *.google.be *.google.pl *.google.se *.google.ie *.google.dk *.google.pt *.google.gr *.google.fi *.google.cz *.google.hu *.google.at *.google.ro *.google.sk *.google.si *.google.bg *.google.hr *.google.lt *.google.lv *.google.ee *.google.mt *.google.cy *.google.lu *.google.us *.google.com.au *.google.ca *.google.com.pr *.google.com.mx *.google.co.cr *.google.com/recaptcha/ www.recaptcha.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.stripe.network brilliantcollector.com *.brilliantcollector.com *.newrelic.com *.nr-data.net consent-pref.trustarc.com edge.adobedc.net adobedc.demdex.net *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io *.algolia.io www.wepowerconnections.com the.sciencebehindecommerce.com lantern.roeye.com www.zenaps.com bat.bing.com api.crobox.com cdn.crobox.io static.klaviyo.com static-forms.klaviyo.com fast.a.klaviyo.com a.klaviyo.com static-tracking.klaviyo.com telemetrics.klaviyo.com kustomerapp.com *.kustomerapp.com locally.com *.locally.com api.addressy.com ekr.zdassets.com parcellab.com *.parcellab.com ct.pinterest.com pinterest.com accounts.studentbeans.com *.pixriot.com *.storeimaging.com yotpo.com *.yotpo.com swellrewards.com *.swellrewards.com *.kaltura.com *.pndsn.com cdn.jsdelivr.net *.pubnub.com *.pubnub.net *.pubnub.io rapid-cdn.yottaa.com *.yottaa.net d5yoctgpv4cpx.cloudfront.net rkkck31tec.execute-api.eu-central-1.amazonaws.com *.tiktok.com 'self' 'unsafe-inline' www.googleadservices.com *.googletagmanager.com *.google-analytics.com *.analytics.google.com *.g.doubleclick.net *.google.com googletagmanager.com; font-src use.typekit.net *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.trustarc.com cdn.crobox.io *.klaviyo.com kustomerapp.com *.kustomerapp.com use.fontawesome.com maxcdn.bootstrapcdn.com *.yotpo.com *.googleapis.com *.gstatic.com data: 'self' 'unsafe-inline' fonts.gstatic.com; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com www.facebook.com yotpo.com *.yotpo.com swellrewards.com *.swellrewards.com 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com 'self'; manifest-src 'self' 'unsafe-inline'; media-src *.adobe.com *.vimeo.com download-video.akamaized.net *.osprey.com blob: data: 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; style-src *.adobe.com static.klaviyo.com parcellab.com *.parcellab.com yotpo.com *.yotpo.com swellrewards.com *.swellrewards.com maxcdn.bootstrapcdn.com *.googleapis.com use.typekit.net p.typekit.net 'self' 'unsafe-inline' fonts.googleapis.com googletagmanager.com *.googletagmanager.com tagmanager.google.com; worker-src 'self' 'unsafe-inline' 'unsafe-eval' osprey.com/p/1/2 blob:; upgrade-insecure-requests; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=sXyXSr3WXZolJyz7bsNEXZX023coxrb3MIlB..QAdKg-1722967839-1.0.1.1-DZQ6whIe4HBQm5x5PoHB2s7bFflr0X3RJqKgBzG3CdDFCC3ysoAgna7OzecBJcuDEXIVdoyyiZ17pSoxQ38sggB1ocTfvFbJV8NTCgFPbb9JDaY9DyZjhjKyY0k7Q12t9NT8qvGVByEsf1zxjlfjfjHeqsJu1nY9gk44vCH7kakMnEHQGlgkLyVUa.PllA1OY4XMqMnw5O7nda0ymAlN3A; report-to cf-fjhcfxcnkdpbgxml

frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net player.vimeo.com *.google.com/recaptcha/ www.recaptcha.net www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.stripe.network consent-pref.trustarc.com helenoftroy.demdex.net www.zenaps.com www.facebook.com *.kmail-lists.com *.kustomer.support knowledge-base-eu.osprey.com locally.com *.locally.com connect.studentbeans.com accounts.studentbeans.com www.xtento.com yotpo.com *.yotpo.com swellrewards.com *.swellrewards.com embed.podcasts.apple.com 'self' 'unsafe-inline' td.doubleclick.net *.googletagmanager.com *.fls.doubleclick.net; img-src cdnjs.cloudflare.com widgets.magentocommerce.com assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com p.typekit.net *.googletagmanager.com *.g.doubleclick.net www.googleadservices.com *.analytics.google.com *.google-analytics.com *.google.com *.google.co.uk *.google.fr *.google.de *.google.es *.google.it *.google.nl *.google.be *.google.pl *.google.se *.google.ie *.google.dk *.google.pt *.google.gr *.google.fi *.google.cz *.google.hu *.google.at *.google.ro *.google.sk *.google.si *.google.bg *.google.hr *.google.lt *.google.lv *.google.ee *.google.mt *.google.cy *.google.lu *.google.us *.google.com.au *.google.ca *.google.com.pr *.google.com.mx *.google.co.cr *.vimeocdn.com validator.swagger.io www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com t.paypal.com *.trustarc.com *.112.2o7.net lantern.roeye.com www.awin1.com www.zenaps.com bat.bing.com *.crobox.com *.crobox.io www.facebook.com static.klaviyo.com static-forms.klaviyo.com fast.a.klaviyo.com a.klaviyo.com *.cloudfront.net static-tracking.klaviyo.com telemetrics.klaviyo.com kustomerapp.com *.kustomerapp.com *.kustomerhostedcontent.com locally.com *.locally.com parcellab.com *.parcellab.com *.pixriot.com *.storeimaging.com www.xtento.com cdn.xtento.com yotpo.com *.yotpo.com swellrewards.com *.swellrewards.com yotpo-editor-production.s3.amazonaws.com *.kaltura.com *.tiktok.com *.osprey.com data: 'self' 'unsafe-inline' *.helenoftroy.com google.com www.gstatic.com ssl.gstatic.com googletagmanager.com fonts.googleapis.com *.fls.doubleclick.net ad.doubleclick.net ade.googlesyndication.com; script-src *.rapidspike.com static.cloudflareinsights.com ajax.cloudflare.com cdnjs.cloudflare.com unpkg.com commerce.adobedtm.com assets.adobedtm.com *.adobe.com includestest.ccdc02.com amcglobal.sc.omtrdc.net use.typekit.net commerce.adobe.net *.googletagmanager.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com magento-recs-sdk.adobe.net vimeo.com www.vimeo.com *.vimeocdn.com player.vimeo.com *.gstatic.com/recaptcha/ *.google.com/recaptcha/ www.recaptcha.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.stripe.network *.newrelic.com *.nr-data.net *.trustarc.com adobedtm.com *.algolia.net www.dwin1.com lantern.roeyecdn.com www.wepowerconnections.com the.sciencebehindecommerce.com www.zenaps.com bat.bing.com api.crobox.com cdn.crobox.io connect.facebook.net static.klaviyo.com static-forms.klaviyo.com fast.a.klaviyo.com a.klaviyo.com static-tracking.klaviyo.com telemetrics.klaviyo.com kustomerapp.com *.kustomerapp.com locally.com *.locally.com s7.addthis.com parcellab.com *.parcellab.com *.smartling.com cdn.studentbeans.com www.xtento.com cdn.xtento.com yotpo.com *.yotpo.com swellrewards.com *.swellrewards.com *.avmws.com *.kaltura.com rapid-cdn.yottaa.com d5yoctgpv4cpx.cloudfront.net rkkck31tec.execute-api.eu-central-1.amazonaws.com *.tiktok.com 'self' 'unsafe-inline' 'unsafe-eval' googletagmanager.com tagmanager.google.com www.google.com; worker-src 'self' 'unsafe-inline' 'unsafe-eval' osprey.com/p/2/2 blob:; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=F3qltb_JSRK8ymonVySSDlQpacR5tvas9yUynSoo81Q-1722967839-1.0.1.1-y42ZjPjFaK1q.E6j0twIuNS2SKOBsUu.QUkYFBRhg6N8G_OY8A2gAp0dfRE1QTHlyzPSIjWNQdnH6ZdRJVCA3cUm4xb2jOXGHHsg4Q011jM.zULhlz.SHtkguT5B2rhQNUv1fgcYOf9CCCfQCpsn.7d55crHXfA9_Ja8oI.sK6oW._6V.la9v.iOIyw3K.woLFD4Qccihn1Epi3yt47p4w; report-to cf-zncflhavwdgtwuad

cloudflare

h3=":443"; ma=86400