Brandalley.com - Media.brandalley.com

date: Mon, 09 Feb 2026 22:55:42 GMT
content-length: 0
location: https://www.brandalley.co.uk/
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=qvOVopp4TcZdlILIVjoYnv4UXZrLOcQ1LHRO9vJW5y9g8W61TIpAFc26QDvwMW2qZrjTfDDS05aGhXrwJd%2F3e9X6%2BNLaBiTXzSF3CU1mXBde4Eu2PQSBIIgYCmwl%2B%2Fd5"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
server: cloudflare
cf-ray: 9cb6f4afabe79bfb-FRA
alt-svc: h3=":443"; ma=86400

HTTP/2 200 
date: Mon, 09 Feb 2026 22:55:42 GMT
content-type: text/html; charset=UTF-8
content-encoding: br
x-built-with: Hyva Themes
report-to: {"group":"report-endpoint","max_age":10886400,"endpoints":[{"url":"https://40871933-022f-46d7-b0d0-5308685527b1.sansec.watch/"}]}
content-security-policy: font-src *.klarnacdn.net *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnaevt.com *.link.com *.amazon.com *.fontawesome.com fonts.gstatic.com *.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ notifications.wisepops.com wisepops.net brand.brandalley.co.uk *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.clearpay.co.uk *.trustpilot.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://images.unsplash.com dev.visualwebsiteoptimizer.com cdn-ukwest.onetrust.com *.brandalley.co.uk *.brandalley.fr *.mirakl.net *.google.co.uk *.google.com *.google.ie *.doubleclick.net *.facebook.com *.bing.com *.facebook.net *.cloudflareaccess.com fonts.gstatic.com www.emjcd.com cj.dotomi.com cdn.wisepops.com tracking.wisepops.com dx4nr741tfc02.cloudfront.net wisp-production-storage.s3.amazonaws.com cdn.wisepops.net assets.wisepops.net *.bing.net delight-custom-plugins.fly.dev *.afterpay.com *.clearpay.co.uk *.googletagmanager.com *.google-analytics.com ssl.gstatic.com www.gstatic.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ d5yoctgpv4cpx.cloudfront.net dev.visualwebsiteoptimizer.com cdn-ukwest.onetrust.com *.mention-me.com code.jquery.com *.sentry-cdn.com *.klarnaservices.com osm.klarnaservices.com na-library.klarnaservices.com *.cloudflareinsights.com insights.algolia.io *.attn.tv *.bing.com *.pinimg.com *.facebook.net *.emjcd.com *.scarabresearch.com *.facebook.com *.pinterest.com cdn.cookielaw.org/ gtm.brandalley.co.uk *.mczbf.com *.sjwoe.com *.cj.com cdn.wisepops.com app.getwisp.co wisepops.net cdn.wisepops.net *.taggstar.com brand.brandalley.co.uk sdk.privacy-center.org delight-custom-plugins.fly.dev *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com *.afterpay.com *.clearpay.co.uk *.squarecdn.com https://hbiq.net cdn.rudderlabs.com *.googletagmanager.com tagmanager.google.com *.trustpilot.com *.plugins.emarsys.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com fonts.gstatic.com *.klarnacdn.net googletagmanager.com *.taggstar.com *.stripe.network *.stripecdn.com *.amazon.com *.afterpay.com/ *.squarecdn.com *.fontawesome.com tagmanager.google.com fonts.google.com *.trustpilot.com unsafe-inline assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io d5yoctgpv4cpx.cloudfront.net p2iqhncxyh.execute-api.eu-central-1.amazonaws.com dev.visualwebsiteoptimizer.com *.onetrust.com *.mention-me.com static.mention-me.com *.trustpilot.com *.brandalley.fr *.brandalley.co.uk analytics-staging.brandalley.fr analytics-staging.brandalley.co.uk analytics.brandalley.fr analytics.brandalley.co.uk *.afterpay.com *.klarnaservices.com *.sentry.io *.doubleclick.net *.pinterest.com pagead2.googlesyndication.com events.attentivemobile.com *.attn.tv *.bing.com *.mczbf.com activity.wisepops.com tracking.wisepops.com app.getwisp.co wisepops.net *.bing.net *.taggstar.com *.rudderlabs.com brand.brandalley.co.uk sdk.privacy-center.org delight-custom-plugins.fly.dev api.delightglobal.io pro.ip-api.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.clearpay.co.uk *.squarecdn.com https://hbiq.net https://iq.afterpay-beta.com https://iq.afterpay.com *.rudderstack.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com *.scarabresearch.com *.eservice.emarsys.net api.addressy.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://40871933-022f-46d7-b0d0-5308685527b1.sansec.watch/; report-to report-endpoint;
vary: Accept-Encoding
grace: none
trace: varnish-varnish-enterprise-1->MISS, varnish-varnish-enterprise-0->HIT
x-magento-cache-debug: MISS
pragma: no-cache
expires: -1
cache-control: no-store, no-cache, must-revalidate, max-age=0
cf-cache-status: DYNAMIC
strict-transport-security: max-age=15552000
expect-ct: max-age=86400, enforce
referrer-policy: same-origin
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
server: cloudflare
cf-ray: 9cb6f4afdb853616-FRA
alt-svc: h3=":443"; ma=86400