Mazdacollection.com

Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 29 Nov 2024 17:24:32 GMT
Content-Type: text/html
Content-Length: 178
Connection: keep-alive
Location: https://www.mazdacollection.com/

HTTP/2 200 
date: Fri, 29 Nov 2024 17:24:32 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-magento-cache-debug: HIT
grace: none
pragma: no-cache
expires: -1
cache-control: no-store, no-cache, must-revalidate, max-age=0
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-security-policy: child-src ; connect-src 'self' in.hotjar.com surveystats.hotjar.io metrics.hotjar.io ask.hotjar.io *.bdashops.com *.fullstory.com *.google-analytics.com *.klaviyo.com *.onetrust.com analytics.google.com api.addressy.com cdn.cookielaw.org stats.g.doubleclick.net translate.googleapis.com *.postcodeanywhere.co.uk *.salesforce-sites.com wss://ws.hotjar.com https://content.hotjar.io https://in.hotjar.com *.googleapis.com; default-src 'self'; font-src 'self' script.hotjar.com *.typekit.net *.cloudfront.net *.googleapis.com *.gstatic.com *.klaviyo.com c1.sfdcstatic.com data:; frame-src 'self' *.adobe.com *.bdashops.com *.google.com *.incontact.com *.labs.wesupply.xyz *.onetrust.com *.pingone.com *.smartsheet.com service.force.com www.weltpixel.com wesupplylabs.com; img-src 'self' script.hotjar.com *.googletagmanager.com *.gstatic.com cdn.cookielaw.org *.cloudfront.net *.lightning.force.com *.salesforce.com *.force.com *.googleapis.com *.google.com data:; media-src 'self'; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.bdashops.com *.demdex.net *.fullstory.com *.google.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.klaviyo.com *.maxmind.com *.pcapredict.com *.postcodeanywhere.co.uk *.punchout2go.com *.salesforceliveagent.com *.salesforce.com *.salesforce-sites.com cdn.cookielaw.org js-agent.newrelic.com *.force.com static.cloudflareinsights.com *.hotjar.com https://script.hotjar.com; style-src 'self' 'unsafe-inline' *.bdashops.com *.googleapis.com *.gstatic.com *.postcodeanywhere.co.uk *.punchout2go.com *.typekit.net *.salesforce-sites.com service.force.com *.klaviyo.com; base-uri 'self'; form-action 'self' 'unsafe-inline' *.onetrust.com *.pingone.com *.tradecentric.com; frame-ancestors 'self';  worker-src 'none';
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 8ea44ab46e5889f7-ORD
content-encoding: gzip
alt-svc: h3=":443"; ma=86400