Bikereg.ca

date: Sat, 27 Sep 2025 23:25:01 GMT
location: https://www.bikereg.com/
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=inxstw1W3tIgiXv11x5c2ofcCiZHwwUpyRVDip%2FrXot9ruN6qekDBS8M119TG8W7SrzZmOBF%2F5hQ8GITbEuhzydQ3tRdxWi03HFdNGRusS0QqhwopPI%3D"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
server: cloudflare
cf-ray: 985ec2074ba0dc68-FRA

HTTP/2 200 
date: Sat, 27 Sep 2025 23:25:02 GMT
content-type: text/html; charset=utf-8
content-encoding: gzip
cache-control: private
vary: Accept-Encoding
set-cookie: ASP.NET_SessionId=eycpwbb3kiescbbn2f5tdped; path=/; secure; HttpOnly; SameSite=None
set-cookie: SendSameSiteCookies=1; path=/; secure; HttpOnly; SameSite=None
set-cookie: __cf_bm=Jt5w6cQogrl3GjgZ.A.f.JkG78ZQXh4jvRqlYBBbxhY-1759015502-1.0.1.1-AkhqCN9IzA7HBQD41OfDzWFcxc0lCbNdS2dgOrUoYsB4.me3WRTL6ptOOMKUuJmPTZJpykWHxcqlHerRb5G9GbKQhaTiIIb37MBNZOuxOpY; path=/; expires=Sat, 27-Sep-25 23:55:02 GMT; domain=.bikereg.com; HttpOnly; Secure; SameSite=None
content-security-policy: default-src 'self' *.athletereg.com; upgrade-insecure-requests; script-src 'self' 'unsafe-inline' 'unsafe-eval' 'report-sample' pay.google.com *.strava-embed.com https://static.cloudflareinsights.com https://www.paypal.com https://songbird.cardinalcommerce.com *.googletagservices.com js-agent.newrelic.com service.force.com *.braintreegateway.com *.fontawesome.com *.g.doubleclick.net *.analytics.google.com *.google-analytics.com *.google.com *.googleadservices.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.hubspot.com *.jquery.com *.moatads.com *.nr-data.net *.salesforceliveagent.com *.twitter.com cdn.amplitude.com cdn.metarouter.io connect.facebook.net googleads.g.doubleclick.net js-na1.hs-scripts.com js.hs-analytics.net js.hs-banner.com js.hsadspixel.net js.hsforms.net js.hsleadflows.net outside-header.vercel.app s3.amazonaws.com *.scorecardresearch.com unpkg.com ajax.googleapis.com *.protecht-sandbox.io *.protecht.io cdnjs.cloudflare.com sealserver.trustkeeper.net *.cloudfront.net ajax.aspnetcdn.com cdn.speedcurve.com *.stripe.com *.salesforce.com connect.facebook.com salesforceliveagent.com *.googleadservices.com www.google-analytics.com athletereg.us12.list-manage.com cdn.jsdelivr.net js.hscollectedforms.net adservice.google.com metarouter-ajs-next-destinations-stage.s3.amazonaws.com es.pinkbike.org *.vercel.com cdn-prod.securiti.ai *.datadoghq-browser-agent.com *.rudderlabs.com; style-src 'self' 'unsafe-inline' 'unsafe-eval' *.typekit.net *.googleapis.com service.force.com *.gstatic.com *.cloudfront.net athletereg.my.salesforce.com cdn.jsdelivr.net *.fontawesome.com *.braintreegateway.com *.vercel.com cdn-prod.securiti.ai *.bikereg.com; img-src 'self' data: https: http://www.millenniumrunning.com; connect-src 'self' pay.google.com https://google.com/pay https://pay.google.com https://pay.google.com/about/redirect/ *.cardinalcommerce.com https://www.paypal.com *.athletereg.com *.hubspot.com *.braintree-api.com *.facebook.com *.g.doubleclick.net *.analytics.google.com *.google-analytics.com *.googleanalytics.com *.trailforks.com *.googlesyndication.com *.hubapi.com *.outsideapi.com outsideapi.com *.rivt.com api.amplitude.com *.googleapis.com *.cloudfront.net	*.nr-data.net *.braintreegateway.com *.gstatic.com *.hsforms.com *.googletagmanager.com use.fontawesome.com js.hs-banner.com *.google.com forms.hscollectedforms.net app.securiti.ai cdn-prod.securiti.ai *.rudderstack.com *.datadoghq-browser-agent.com https://browser-intake-datadoghq.com *.bikereg.com *.browser-intake-datadoghq.com *.gaiagps.com https://static.gaiagps.com *.google.com *.BikeReg.com; font-src 'self' data: fonts.gstatic.com *.typekit.net *.sfdcstatic.com use.fontawesome.com static2.sharepointonline.com rwgps-embeds.com *.millenniumrunning.com netdna.bootstrapcdn.com *.braintreegateway.com app.securiti.ai cdn-prod.securiti.ai; frame-ancestors 'self' *.athletereg.com *.bikereg.com *.runreg.com *.trireg.com *.skireg.com *.plegereg.com *.trailforks.com; frame-src 'self' *.hsforms.com *.doubleclick.net *.facebook.com *.google.com *.outsideonline.com outsideonline.com service.force.com platform.twitter.com *.salesforce.com *.braintreegateway.com *.trailforks.com/ *.mapmyfitness.com; form-action 'self' *.cardinalcommerce.com *.hsforms.com *.paypal.com *.pledgereg.com *.facebook.com *.strava.com *.salesforce.com *.outsideonline.com; base-uri 'self'; object-src 'self'; report-uri https://api.athletereg.com/ErrorReport/cspViolation;
x-aspnet-version: 4.0.30319
x-powered-by: ASP.NET
strict-transport-security: max-age=31536000
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 985ec2077869690d-FRA