Heatscopeheaters.com.au

access-control-allow-headers: content-type,x-requested-with, X-FS-SESSION-URL
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: https://heatscopeheaters.com.au
age: 0
cache-control: no-store,no-cache,must-revalidate,max-age=0
cache-status: "Netlify Edge"; fwd=miss
cf-cache-status: DYNAMIC
cf-ray: 8c0aaa8fcf9e29bc-IAD
content-encoding: br
content-security-policy: upgrade-insecure-requests;
content-security-policy-report-only: font-src https://cdn1.affirm.com https://www.affirm.com https://tracker.affirm.com *.pinterest.com *.pinimg.com d2wy8f7a9ursnm.cloudfront.net *.facebook.net *.facebook.com *.newrelic.com *.translationexchange.com *.intercomcdn.com *.intercom.io *.googletagmanager.com *.googleapis.com *.googleadservices.com *.google-analytics.com *.google.com *.google.com.au *.google.com.br *.google.co.uk *.google.de *.google.co.nz *.kaltura.com *.doubleclick.net *.g.doubleclick.net *.typekit.net *.gstatic.com *.affirm.com *.braintreegateway.com *.weglot.com api.stripe.com js.stripe.com m.stripe.com x.klarnacdn.net klarna.com na.playground.klarnaevt.com eu.playground.klarnaevt.com klarna-payments-eu.playground.klarna.com klarna-payments-na.playground.klarna.com *.fontawesome.com *.segment.com *.segment.io *.vimeo.com *.youtube.com https://fonts.gstatic.com https://www.google.com https://www.gstatic.com *.yotpo.com self blob: data: https://cdn.heatscopeheaters.com.au https://heatscopeheaters.com.au data: 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.pinterest.com *.pinimg.com *.facebook.net *.facebook.com *.newrelic.com *.translationexchange.com *.intercomcdn.com *.intercom.io *.googletagmanager.com *.googleapis.com *.googleadservices.com *.google-analytics.com *.google.com *.google.com.au *.google.com.br *.google.co.uk *.google.de *.google.fr *.typekit.net *.gstatic.com *.cardinalcommerce.com *.paypal.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com secure.authorize.net test.authorize.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com www.googletagmanager.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com https://cdn1.affirm.com https://www.affirm.com https://tracker.affirm.com *.dotdigital-pages.com *.dotdigital.com cdn.dnky.co webchat.dotdigital.com *.pinterest.com *.pinimg.com *.facebook.net *.facebook.com *.newrelic.com *.translationexchange.com *.intercomcdn.com *.intercom.io *.googletagmanager.com *.googleapis.com *.googleadservices.com *.google-analytics.com *.google.com *.google.com.au *.google.com.br *.google.co.uk *.google.de *.google.fr *.hotjar.com *.hotjar.io *.doubleclick.net *.g.doubleclick.net *.typekit.net *.gstatic.com api.stripe.com js.stripe.com m.stripe.com x.klarnacdn.net klarna.com na.playground.klarnaevt.com eu.playground.klarnaevt.com klarna-payments-eu.playground.klarna.com klarna-payments-na.playground.klarna.com *.segment.com *.segment.io *.vimeo.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com *.yotpo.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com validator.swagger.io https://cdn1.affirm.com https://www.affirm.com https://tracker.affirm.com i.emlfiles.com https://bam.nr-data.net/ *.pinterest.com *.pinimg.com *.facebook.net *.facebook.com *.newrelic.com *.translationexchange.com *.intercomcdn.com *.intercom.io *.googletagmanager.com *.googleapis.com *.googleadservices.com *.google-analytics.com https://notify.bugsnag.com/js *.google.com *.google.com.au *.google.com.br *.google.co.uk *.google.de *.google.co.nz *.kaltura.com r3-t.trackedlink.net *.doubleclick.net *.g.doubleclick.net *.typekit.net *.gstatic.com *.braintreegateway.com *.intercom-attachments-1.com *.intercom-attachments-2.com *.intercom-attachments-3.com *.intercom-attachments-4.com *.intercom-attachments-5.com *.intercom-attachments-6.com *.intercom-attachments-7.com *.intercom-attachments-8.com *.intercom-attachments-9.com unpkg.com *.segment.com *.segment.io *.vimeo.com *.youtube.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.yotpo.com self blob: https://cdn.heatscopeheaters.com.au https://heatscopeheaters.com.au data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com www.sandbox.paypal.com t.paypal.com s.ytimg.com www.googleapis.com *.vimeo.com www.vimeo.com *.vimeocdn.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com polyfill.io https://cdn1.affirm.com https://www.affirm.com https://tracker.affirm.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com cdn.dnky.co webchat.dotdigital.com https://bam.nr-data.net/ *.pinterest.com d2wy8f7a9ursnm.cloudfront.net *.pinimg.com connect.facebook.net/ www.facebook.com *.newrelic.com *.translationexchange.com *.intercomcdn.com *.intercom.io *.googletagmanager.com *.googleapis.com *.googleadservices.com *.google-analytics.com *.google.com *.google.com.au *.google.com.br *.google.co.uk *.google.de *.google.fr *.kaltura.com *.datadoghq-browser-agent.com *.doubleclick.net *.g.doubleclick.net *.hotjar.com *.hotjar.io *.typekit.net *.gstatic.com *.affirm.com *.braintreegateway.com *.weglot.com api.stripe.com js.stripe.com m.stripe.com x.klarnacdn.net klarna.com na.playground.klarnaevt.com eu.playground.klarnaevt.com klarna-payments-eu.playground.klarna.com klarna-payments-na.playground.klarna.com unpkg.com *.segment.com *.segment.io *.youtube.com *.avada.io assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com *.yotpo.com self blob: data: https://cdn.heatscopeheaters.com.au https://heatscopeheaters.com.au 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com https://cdn1.affirm.com https://www.affirm.com https://tracker.affirm.com cdn.dnky.co webchat.dotdigital.com *.pinterest.com *.pinimg.com *.facebook.net *.facebook.com *.newrelic.com *.translationexchange.com *.intercomcdn.com *.intercom.io *.googletagmanager.com *.googleapis.com *.googleadservices.com *.google-analytics.com *.google.com *.google.com.au *.google.com.br *.google.co.uk *.google.de *.google.co.nz *.kaltura.com *.doubleclick.net *.g.doubleclick.net *.typekit.net *.gstatic.com *.affirm.com *.braintreegateway.com *.weglot.com unpkg.com *.fontawesome.com *.segment.com *.segment.io unsafe-inline *.yotpo.com self blob: data: https://cdn.heatscopeheaters.com.au https://heatscopeheaters.com.au 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com self blob: data: https://cdn.heatscopeheaters.com.au https://heatscopeheaters.com.au 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com *.vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io https://cdn1.affirm.com https://www.affirm.com https://tracker.affirm.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com https://bam.nr-data.net/1/01bc4ccf52/ *.pinterest.com *.pinimg.com connect.facebook.net/ www.facebook.com *.newrelic.com *.translationexchange.com *.intercomcdn.com *.intercom.io *.googletagmanager.com *.googleapis.com *.googleadservices.com *.google-analytics.com https://d2wy8f7a9ursnm.cloudfront.net/bugsnag*.js https://notify.bugsnag.com/js/ https://i.ytimg.com/ https://google.com/pay *.google.com *.google.com.au *.google.com.br *.google.co.uk *.google.de *.google.co.nz *.kaltura.com *.doubleclick.net *.g.doubleclick.net *.typekit.net *.gstatic.com *.iconnode.com *.hotjar.com *.hotjar.io wss://*.hotjar.com *.datadoghq-browser-agent.com wss://nexus-websocket-a.intercom.io wss://nexus-websocket-b.intercom.io  *.affirm.com *.braintreegateway.com *.weglot.com api.stripe.com js.stripe.com m.stripe.com x.klarnacdn.net klarna.com na.playground.klarnaevt.com eu.playground.klarnaevt.com klarna-payments-eu.playground.klarna.com klarna-payments-na.playground.klarna.com unpkg.com *.segment.com *.segment.io *.youtube.com http://dpm.demdex.net https://www.google.com https://www.gstatic.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.yotpo.com self blob: data: https://cdn.heatscopeheaters.com.au https://heatscopeheaters.com.au 'self' 'unsafe-inline'; child-src https://cdn1.affirm.com https://www.affirm.com https://tracker.affirm.com *.intercom-sheets.com *.intercom-reporting.com fast.wistia.net *.segment.com *.segment.io *.vimeo.com *.youtube.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';
content-type: text/html; charset=UTF-8
date: Mon, 09 Sep 2024 22:38:02 GMT
expires: -1
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
netlify-vary: query
pragma: no-cache
report-to: {"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=CO3DUS%2Bn3STzemfHdWsenvZcztIdFfiWJ7MP%2BQf9csTiHucLqTRVsj%2BHoQjDdGMupZyWr1AsYQ%2Fi%2FO6LqPh0P4O3PyaZDeqNvLkElwSs4vtc1jnapniRgda8kZZziOdrgIBXd%2F9Y4t81hcjk9vfBRExo"}],"group":"cf-nel","max_age":604800}
server: Netlify
set-cookie: x-country=us;Path=/;SameSite=Lax
strict-transport-security: max-age=31536000
vary: Accept-Encoding
x-backend-server: maddesigngroup
x-cache-age: 526169
x-cache-control: max-age=0, must-revalidate, no-cache, no-store
x-cache-debug: 1
x-cache-lifetime: 1296000
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-magento-route: cms_index_index
x-nf-request-id: 01J7CEZNEQ9WQY6MXZ8HSSPME2
x-varnish-cors-response: 1
x-xss-protection: 1; mode=block