Headers of https://www.osprey.com/gb/

text/html; charset=UTF-8

close

Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA

same-origin

?1

same-origin

SAMEORIGIN

51eMMfyEQrdbSZ87gDQThOQb6zVW4dXU25rcHYCSpQgb6mQ7+YncWa9ziKg0HersfuIez7uXeVWWnOIr1TR+qfZPFK1aw+WVrAVD2O/v30g3C1fwWgJKUX1wx6z0Wlei2lSIPESrRwYO+6Y7UxtGeg==$fNZRmHnmAc996KLS5gWr+A==

Thu, 01 Jan 1970 00:00:01 GMT

base-uri 'self' 'unsafe-inline' 'unsafe-eval'; child-src http: https: blob: 'self' 'unsafe-inline'; connect-src *.rapidspike.com www.cloudflare.com commerce.adobedtm.com commerce.adobedc.net *.snplow.net dpm.demdex.net amcglobal.sc.omtrdc.net api.magento.com commerce.adobe.io performance.typekit.net commerce.adobe.net region1.google-analytics.com google.com us-central1-adaptive-growth.cloudfunctions.net app-measurement.com doubleclickbygoogle.com doubleclick.com doubleclick.net googleadservices.com *.googlesyndication-cn.com *.googlesyndication.com googletagservices.com *.google.co.uk *.google.fr *.google.de *.google.es *.google.it *.google.nl *.google.be *.google.pl *.google.se *.google.ie *.google.dk *.google.pt *.google.gr *.google.fi *.google.cz *.google.hu *.google.at *.google.ro *.google.sk *.google.si *.google.bg *.google.hr *.google.lt *.google.lv *.google.ee *.google.mt *.google.cy *.google.lu *.google.us *.google.com.au *.google.ca *.google.com.pr *.google.com.mx *.google.co.cr *.google.com/recaptcha/ www.recaptcha.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.stripe.network brilliantcollector.com *.brilliantcollector.com *.newrelic.com *.nr-data.net consent-pref.trustarc.com edge.adobedc.net adobedc.demdex.net *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io *.algolia.io www.wepowerconnections.com the.sciencebehindecommerce.com lantern.roeye.com www.zenaps.com bat.bing.com api.crobox.com cdn.crobox.io static.klaviyo.com static-forms.klaviyo.com fast.a.klaviyo.com a.klaviyo.com static-tracking.klaviyo.com telemetrics.klaviyo.com kustomerapp.com *.kustomerapp.com locally.com *.locally.com api.addressy.com ekr.zdassets.com parcellab.com *.parcellab.com ct.pinterest.com pinterest.com accounts.studentbeans.com *.pixriot.com *.storeimaging.com yotpo.com *.yotpo.com swellrewards.com *.swellrewards.com *.kaltura.com *.pndsn.com cdn.jsdelivr.net *.pubnub.com *.pubnub.net *.pubnub.io rapid-cdn.yottaa.com *.yottaa.net d5yoctgpv4cpx.cloudfront.net rkkck31tec.execute-api.eu-central-1.amazonaws.com *.tiktok.com 'self' 'unsafe-inline' www.googleadservices.com *.googletagmanager.com *.google-analytics.com *.analytics.google.com *.g.doubleclick.net *.google.com googletagmanager.com; font-src use.typekit.net *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.trustarc.com cdn.crobox.io *.klaviyo.com kustomerapp.com *.kustomerapp.com use.fontawesome.com maxcdn.bootstrapcdn.com *.yotpo.com *.googleapis.com *.gstatic.com data: 'self' 'unsafe-inline' fonts.gstatic.com; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com www.facebook.com yotpo.com *.yotpo.com swellrewards.com *.swellrewards.com 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com 'self'; manifest-src 'self' 'unsafe-inline'; media-src *.adobe.com *.vimeo.com download-video.akamaized.net *.osprey.com blob: data: 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; style-src *.adobe.com static.klaviyo.com parcellab.com *.parcellab.com yotpo.com *.yotpo.com swellrewards.com *.swellrewards.com maxcdn.bootstrapcdn.com *.googleapis.com use.typekit.net p.typekit.net 'self' 'unsafe-inline' fonts.googleapis.com googletagmanager.com *.googletagmanager.com tagmanager.google.com; worker-src 'self' 'unsafe-inline' 'unsafe-eval' osprey.com/p/1/2 blob:; upgrade-insecure-requests; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=1p6YXXDaz28N2Bwhj0mKzYlsQmVf1jDAxGffqapyRBI-1723032878-1.0.1.1-KkKFwr8wHw3isy410coi1gc3KMFejiA2BfFnIu0sKik9.iSezDRD.D.O3a4KZ_K8D1xgtL5TcqWWebmNm22ZsjN13DGLUQva5v_ZM4xNIRjsHNaM6aGBXSe.G1L9aQGuTDq0ijtH2ySGPSyDfXqVhEeaELenxVO4G0XC5a13OKwu0xUBIO342GOjtyMRl_KSXLaXaKSy._smjK5q0PHZjw; report-to cf-kqhbcmufctbmvbqm

frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net player.vimeo.com *.google.com/recaptcha/ www.recaptcha.net www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.stripe.network consent-pref.trustarc.com helenoftroy.demdex.net www.zenaps.com www.facebook.com *.kmail-lists.com *.kustomer.support knowledge-base-eu.osprey.com locally.com *.locally.com connect.studentbeans.com accounts.studentbeans.com www.xtento.com yotpo.com *.yotpo.com swellrewards.com *.swellrewards.com embed.podcasts.apple.com 'self' 'unsafe-inline' td.doubleclick.net *.googletagmanager.com *.fls.doubleclick.net; img-src cdnjs.cloudflare.com widgets.magentocommerce.com assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com p.typekit.net *.googletagmanager.com *.g.doubleclick.net www.googleadservices.com *.analytics.google.com *.google-analytics.com *.google.com *.google.co.uk *.google.fr *.google.de *.google.es *.google.it *.google.nl *.google.be *.google.pl *.google.se *.google.ie *.google.dk *.google.pt *.google.gr *.google.fi *.google.cz *.google.hu *.google.at *.google.ro *.google.sk *.google.si *.google.bg *.google.hr *.google.lt *.google.lv *.google.ee *.google.mt *.google.cy *.google.lu *.google.us *.google.com.au *.google.ca *.google.com.pr *.google.com.mx *.google.co.cr *.vimeocdn.com validator.swagger.io www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com t.paypal.com *.trustarc.com *.112.2o7.net lantern.roeye.com www.awin1.com www.zenaps.com bat.bing.com *.crobox.com *.crobox.io www.facebook.com static.klaviyo.com static-forms.klaviyo.com fast.a.klaviyo.com a.klaviyo.com *.cloudfront.net static-tracking.klaviyo.com telemetrics.klaviyo.com kustomerapp.com *.kustomerapp.com *.kustomerhostedcontent.com locally.com *.locally.com parcellab.com *.parcellab.com *.pixriot.com *.storeimaging.com www.xtento.com cdn.xtento.com yotpo.com *.yotpo.com swellrewards.com *.swellrewards.com yotpo-editor-production.s3.amazonaws.com *.kaltura.com *.tiktok.com *.osprey.com data: 'self' 'unsafe-inline' *.helenoftroy.com google.com www.gstatic.com ssl.gstatic.com googletagmanager.com fonts.googleapis.com *.fls.doubleclick.net ad.doubleclick.net ade.googlesyndication.com; script-src *.rapidspike.com static.cloudflareinsights.com ajax.cloudflare.com cdnjs.cloudflare.com unpkg.com commerce.adobedtm.com assets.adobedtm.com *.adobe.com includestest.ccdc02.com amcglobal.sc.omtrdc.net use.typekit.net commerce.adobe.net *.googletagmanager.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com magento-recs-sdk.adobe.net vimeo.com www.vimeo.com *.vimeocdn.com player.vimeo.com *.gstatic.com/recaptcha/ *.google.com/recaptcha/ www.recaptcha.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.stripe.network *.newrelic.com *.nr-data.net *.trustarc.com adobedtm.com *.algolia.net www.dwin1.com lantern.roeyecdn.com www.wepowerconnections.com the.sciencebehindecommerce.com www.zenaps.com bat.bing.com api.crobox.com cdn.crobox.io connect.facebook.net static.klaviyo.com static-forms.klaviyo.com fast.a.klaviyo.com a.klaviyo.com static-tracking.klaviyo.com telemetrics.klaviyo.com kustomerapp.com *.kustomerapp.com locally.com *.locally.com s7.addthis.com parcellab.com *.parcellab.com *.smartling.com cdn.studentbeans.com www.xtento.com cdn.xtento.com yotpo.com *.yotpo.com swellrewards.com *.swellrewards.com *.avmws.com *.kaltura.com rapid-cdn.yottaa.com d5yoctgpv4cpx.cloudfront.net rkkck31tec.execute-api.eu-central-1.amazonaws.com *.tiktok.com 'self' 'unsafe-inline' 'unsafe-eval' googletagmanager.com tagmanager.google.com www.google.com; worker-src 'self' 'unsafe-inline' 'unsafe-eval' osprey.com/p/2/2 blob:; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=cZaOSt9BcxKEln400BBHLZHpnPr2nESZ0ZcFA6vIAHI-1723032878-1.0.1.1-DMXcvMDIKH3ESqKqWUg2_9G.hMynhd97fYDDmuDVC7t_C_Y4xmwZfhO3JmTX1GJ1_42V02HjGlQ52tvLMCk95_BA6CuFrW3MO0o1_RrvfHvo0oVFQB3nX1GEcjOfdV7bI47u2SDVCuwsYCUM6YOyJ_bTvsVPs5LpRmNjQKqBTR77ubRhr_hplu49RaUHlSTgChvCPs0KEn96I.GukX6nwg; report-to cf-zjdmxrtpmqzyljed

cloudflare

h3=":443"; ma=86400