Gym.sh

cache-control: no-cache, no-store, max-age=0, must-revalidate
content-type: text/html; charset=utf-8
date: Sat, 13 Apr 2024 02:03:01 GMT
location: https://www.gymshark.com
pragma: no-cache
server: nginx
via: 1.1 google
x-frame-options: DENY
content-length: 59

HTTP/2 200 
content-type: text/html; charset=utf-8
server: CloudFront
date: Sat, 13 Apr 2024 02:01:56 GMT
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
referrer-policy: same-origin
content-security-policy: frame-ancestors 'self' twitter facebook t.co accounts.studentbeans.com connect.studentbeans.com *.studentbeans.com https://app.contentful.com; block-all-mixed-content ; script-src 'self' 'report-sample' 'unsafe-inline' 'unsafe-eval' https://*.algolia.io https://*.braze.eu https://*.mparticle.com https://*.googletagservices.com https://*.googlesyndication.com https://*.googleadservices.com https://*.doubleclick.net https://*.rmp.rakuten.com https://*.ep-mimecast.ads-twitter.com https://*.google.com https://analytics.tiktok.com https://analytics.twitter.com https://content.linkedin.com https://cdn.cookielaw.org https://googleads.g.doubleclick.net https://google-analytics.com https://googletagmanager.com https://platform.linkedin.com https://static-exp1.licdn.com https://snap.licdn.com https://sc-static.net https://static.ads-twitter.com https://ssl.google-analytics.com https://s.pinimg.com https://t.co https://tagmanager.google.com https://www.google-analytics.com https://www.google.com https://www.googletagmanager.com https://*.studentbeans.com http://*.studentbeans.com https://apps.bazaarvoice.com https://widget.intercom.io https://connect.facebook.net *.gymshark.com *.adsrvr.org *.intercomcdn.com *.bazaarvoice.com *.snapchat.com *.attn.tv tags.creativecdn.com bat.bing.com *.dwin1.com www.redditstatic.com *.netlify.app *.rewardstyle.com *.smartzer.com *.dynamicyield.com *.mention-me.com https://static.mention-me.com https://tag.mention-me.com; style-src 'self' 'report-sample' 'unsafe-inline' *.google.com *.licdn.com platform.twitter.com www.googletagmanager.com *.gymshark.com *.fontawesome.com *.dynamicyield.com; object-src *.googlesyndication.com; child-src 'self' blob: *.algolia.io *.braze.eu *.mparticle.com *.google.com *.doubleclick.net *.googlesyndication.com ct.pinterest.com platform.twitter.com www.googletagmanager.com *.adsrvr.org *.studentbeans.com *.snapchat.com www.youthdiscount.com form.typeform.com creatives.attn.tv *.netlify.com *.dynamicyield.com; base-uri 'self'; form-action 'self' *.twitter.com *.google.com *.pinterest.com *.facebook.com; worker-src 'self' blob: www.google.com; frame-src insight.adsrvr.org *.facebook.com creatives.attn.tv *.studentbeans.com *.adsrvr.org ct.pinterest.com *.creativecdn.com tr.snapchat.com *.doubleclick.net *.netlify.com form.typeform.com optimize.google.com www.youthdiscount.com intercom-sheets.com *.rewardstyle.com *.youtube.com *.smartzer.com *.gymshark.com checkout.shopify.com shopify-private-shop-assets.storage.googleapis.com *.mention-me.com https://mention-me.com https://gymshark.mention-me.com; media-src assets.ctfassets.net videos.ctfassets.net cdn.shopify.com;
permissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()
cache-control: public, s-maxage=60, stale-while-revalidate=120
x-powered-by: Next.js
etag: "1031l9mck98j8nv"
content-encoding: gzip
vary: Accept-Encoding
set-cookie: gs-experiment-id=842378899;Path=/
x-cache: RefreshHit from cloudfront
via: 1.1 637c6cc074af01d1a5246ebd8a4d3158.cloudfront.net (CloudFront)
x-amz-cf-pop: ORD58-P6
x-amz-cf-id: 1HRv7pYQYwG0M740xQ6_Fk2FoUvfMk3Jo2-tipp2JbQ6W8FnHh1rTw==
age: 65