Ellaparadis.com

Retry-After: 0
Location: https://ellaparadis.com/
Content-Length: 0
Accept-Ranges: bytes
Date: Thu, 13 Jan 2022 23:29:04 GMT
Connection: close
X-Served-By: cache-pwk4923-PWK
X-Cache: HIT
X-Cache-Hits: 0
X-Timer: S1642116544.281949,VS0,VE3
Vary: 
Strict-Transport-Security: max-age=300

HTTP/2 302 
cache-control: max-age=0, must-revalidate, no-cache, no-store
content-security-policy: worker-src blob:; font-src *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com fonts.gstatic.com *.kxcdn.com *.ellaparadis.com *.klevu.com *.ksearchnet.com https://*.quadpay.com data: 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.mczbf.com *.ellaparadis.com *.paypal.com *.braintreegateway.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.google.com *.doubleclick.net *.facebook.com facebook.com www.facebook.com *.kxcdn.com youtube.com www.youtube.com platform.twitter.com google.com *.addthis.com *.dotdigital-pages.com *.dotdigital.com cdn.dnky.co webchat.dotdigital.com www.xtento.com *.mczbf.com *.ellaparadis.com *.zenaps.com *.symantec.com *.pepperjam.com *.paypal.com *.cardinalcommerce.com *.paypalobjects.com *.twitter.com *.dnky.co *.stripe.com *.klarnacdn.net *.klarna.com *.klarnaevt.com *.termly.io c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com js.stripe.com m.stripe.com x.klarnacdn.net klarna.com na.playground.klarnaevt.com klarna-payments-na.playground.klarna.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com *.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de static-eu.payments-amazon.com 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net scontent.cdninstagram.com *.kxcdn.com amcglobal.sc.omtrdc.net *.twitter.com *.googleapis.com google.com *.gstatic.com *.xtento.com cdn.xtento.com *.mczbf.com *.ellaparadis.com *.monetate.net *.safemage.com *.magentocommerce.com *.googleadservices.com *.google-analytics.com *.paypalobjects.com *.paypal.com *.cloudfront.net *.payments-amazon.com *.cdninstagram.com *.klevu.com *.ksearchnet.com *.quadpay.com *.online-metrix.net *.routeapp.io *.clearsale.com.br *.adnxs.com *.bing.com *.symantec.com *.zenaps.com https://*.quadpay.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://redchamps.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com s.ytimg.com www.googleapis.com *.vimeo.com www.vimeo.com *.vimeocdn.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.google.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.googleapis.com google.com *.gstatic.com cdn.ampproject.org connect.facebook.net www.googletagmanager.com googletagmanager.com *.kxcdn.com platform.twitter.com *.addthis.com *.addthisedge.com *.moatads.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com cdn.dnky.co webchat.dotdigital.com *.referralcandy.com www.xtento.com cdn.xtento.com *.ellaparadis.com *.cloudfront.net *.cardinalcommerce.com *.ccdc02.com *.symantec.com *.zenaps.com *.sciencebehindecommerce.com *.newrelic.com *.nr-data.net *.braintreegateway.com *.paypal.com *.ytimg.com *.googleapis.com  *.ampproject.org *.twitter.com *.dnky.co *.comapi.com *.dotdigital.com *.xtento.com *.klevu.com *.ksearchnet.com *.stripe.com *.klarnacdn.net *.klarna.com *.klarnaevt.com *.monetate.net *.mczbf.com *.pepperjam.com *.clearsale.com *.clearsale.com.br *.dwin1.com *.routeapp.io *.upsellit.com *.online-metrix.net *.iubenda.com *.avatria.com *.bing.com *.crazyegg.com *.shop.pe *.rtb123.com *.emotive.io *.wisepops.com *.adacado.com *.cybba.solutions *.amazonaws.com https://*.quadpay.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com js.stripe.com m.stripe.com x.klarnacdn.net klarna.com na.playground.klarnaevt.com klarna-payments-na.playground.klarna.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.googleapis.com *.doubleclick.net *.facebook.net google.com *.kxcdn.com *.gstatic.com cdn.dnky.co webchat.dotdigital.com *.ellaparadis.com *.klevu.com *.ksearchnet.com unsafe-inline 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.google-analytics.com *.facebook.com *.facebook.net https://www.paypal.com/xoplatform/logger/api/logger cdn.ampproject.org *.kxcdn.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com *.braintree-api.com *.braintreegateway.com *.mczbf.com *.sjwoe.com *.ellaparadis.com *.nr-data.net *.sciencebehindecommerce.com *.crazyegg.com *.wisepops.com *.shop.pe *.emotiveapp.co *.doubleclick.net *.cardinalcommerce.com *.route.com *.amazonservices.com *.amazonservices.co.uk *.amazonservices.co.jp *.amazonservices.jp *.amazonservices.it *.amazonservices.fr *.amazonservices.es *.amazonservices.de
content-type: text/html; charset=UTF-8
expires: Wed, 13 Jan 2021 23:29:04 GMT
location: https://www.ellaparadis.com/
pragma: no-cache
report-to: {"group":"report-endpoint","max_age":10886400,"endpoints":[{"url":"https://humanelement.report-uri.com/r/d/csp/enforce"}]}
set-cookie: lagrange_session=b5ba5f22-0b8e-4486-9892-8e038101189c; Path=/; Max-Age=1800; HttpOnly; Secure
set-cookie: PHPSESSID=fgls3srvgesm218tj9f84p5b81; Path=/; Domain=ellaparadis.com; Expires=Sat, 12 Feb 2022 23:29:04 GMT; Max-Age=2592000; HttpOnly; Secure; SameSite=Lax
set-cookie: X-Magento-Vary=c58cc7336841735bf5ef13185766282824a9d073; Path=/; Expires=Sat, 12 Feb 2022 23:29:04 GMT; Max-Age=2592000; HttpOnly; Secure; SameSite=Lax
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
accept-ranges: bytes
date: Thu, 13 Jan 2022 23:29:04 GMT
x-served-by: cache-pwk4923-PWK
x-cache: MISS
x-cache-hits: 0
x-timer: S1642116544.363553,VS0,VE317
vary: Cookie
strict-transport-security: max-age=300
content-length: 0

HTTP/2 200 
content-type: text/html; charset=UTF-8
expires: Fri, 14 Jan 2022 23:29:05 GMT
pragma: cache
report-to: {"group":"report-endpoint","max_age":10886400,"endpoints":[{"url":"https://humanelement.report-uri.com/r/d/csp/enforce"}]}
x-esi: 1
date: Thu, 13 Jan 2022 23:29:06 GMT
age: 0
x-served-by: cache-phx12430-PHX
x-cache: MISS
x-cache-hits: 0
x-timer: S1642116545.855624,VS0,VE1158
cache-control: no-store, no-cache, must-revalidate, max-age=0
vary: Accept-Encoding,Cookie
content-security-policy: upgrade-insecure-requests
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
feature-policy: vibrate 'self'; usermedia *;
permissions-policy: geolocation=(self), microphone=()
strict-transport-security: max-age=300
content-encoding: br
accept-ranges: none