Aeo.eu

Server: nginx
Date: Wed, 16 Jun 2021 14:25:44 GMT
Content-Type: text/html
Content-Length: 178
Connection: keep-alive
Location: https://aeo.eu/

HTTP/2 302 
server: nginx
date: Wed, 16 Jun 2021 14:25:45 GMT
content-type: text/html; charset=UTF-8
content-length: 20
set-cookie: PHPSESSID=gvktfoslic8rubp8okmgcrtdc4; expires=Thu, 16-Jun-2022 14:25:45 GMT; Max-Age=31536000; path=/; domain=aeo.eu; secure; HttpOnly
set-cookie: esw-location=%7B%22country%22%3A%7B%22iso_code%22%3A%22MT%22%7D%7D; path=/
set-cookie: esw-currency=EUR; path=/
location: https://aeo.eu/en/
content-encoding: gzip
vary: Accept-Encoding
pragma: no-cache
expires: -1
cache-control: no-store, no-cache, must-revalidate, max-age=0

HTTP/2 200 
server: nginx
date: Wed, 16 Jun 2021 14:25:45 GMT
content-type: text/html; charset=UTF-8
content-length: 20236
report-to: {"group":"report-endpoint","max_age":10886400,"endpoints":[{"url":"https://csp.vdshop.es/reports"}]}
content-security-policy-report-only: font-src https://static.aeo.eu/ https://*.gstatic.com/ 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com secure.authorize.net test.authorize.net https://*.facebook.net/ https://*.facebook.com/ 'self' 'unsafe-inline'; frame-ancestors 'self' 'unsafe-inline'; frame-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com secure.authorize.net test.authorize.net www.paypal.com www.sandbox.paypal.com *.google.com/ https://www.youtube.com/ https://*.cookiebot.com/ https://*.facebook.net/ https://*.facebook.com/ https://mc.yandex.ru/ 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com www.googleadservices.com www.google-analytics.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com s.ytimg.com www.xtento.com cdn.xtento.com https://www.magezon.com https://*.klaviyo.com/ https://static.aeo.eu/ https://*.gstatic.com/ https://lh3.googleusercontent.com/ https://*.facebook.net/ https://*.facebook.com/ data: https://www.google.com/ https://www.google.es/ https://googleads.g.doubleclick.net/ https://*.cloudfront.net/ https://mc.yandex.ru/ 'self' 'unsafe-inline'; script-src assets.adobedtm.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com secure.authorize.net test.authorize.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com video.google.com vimeo.com www.vimeo.com js.authorize.net jstest.authorize.net js.braintreegateway.com www.youtube.com www.xtento.com cdn.xtento.com https://static.klaviyo.com https://fast.a.klaviyo.com https://www.google.com/ https://*.cookiebot.com/ https://www.mczbf.com/ https://*.klaviyo.com/ https://static.addtoany.com/ https://static.aeo.eu/ https://www.googletagmanager.com/ https://tagmanager.google.com/ https://*.facebook.net/ https://*.facebook.com/ https://www.google.es/ https://googleads.g.doubleclick.net/ https://mc.yandex.ru/ https://yastatic.net/ 'self' 'unsafe-inline' 'unsafe-eval'; style-src getfirebug.com https://static.addtoany.com/ https://static.aeo.eu/ https://tagmanager.google.com/ https://fonts.googleapis.com/ https://static.klaviyo.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com https://geoip-js.com https://static.klaviyo.com https://www.mczbf.com/ https://www.sjwoe.com/policy https://static.aeo.eu/ https://*.klaviyo.com/ https://www.google-analytics.com/ https://*.doubleclick.net/ https://*.facebook.net/ https://*.facebook.com/ https://mc.yandex.ru/ 'self' 'unsafe-inline'; child-src https://mc.yandex.ru/ 'self' 'unsafe-inline'; default-src https://static.klaviyo.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://csp.vdshop.es/reports; report-to report-endpoint;
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
vary: Accept-Encoding,Esw-location
content-encoding: gzip
pragma: no-cache
expires: -1
cache-control: no-store, no-cache, must-revalidate, max-age=0
accept-ranges: bytes