Paintandpaperlibrary.com

Server: nginx
Date: Sat, 22 Jun 2024 09:10:02 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://www.paintandpaperlibrary.com/
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block

HTTP/2 200 
date: Sat, 22 Jun 2024 09:10:03 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
content-security-policy-report-only: font-src *.googleapis.com *.gstatic.com https://maxcdn.bootstrapcdn.com https://cdnjs.cloudflare.com https://fonts.intercomcdn.com/ use.fontawesome.com/releases/v5.6.0/webfonts *.opayo.eu.elavon.com *.fontawesome.com maxcdn.bootstrapcdn.com 'self' data: data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.adyen.com https://www.facebook.com/ https://*.realexpayments.com/ *.opayo.eu.elavon.com *.nosto.com *.nos.to *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com https://www.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ bid.g.doubleclick.net *.adyen.com https://lgpc.prismic.io *.weltpixel.com https://vars.hotjar.com/ https://www.facebook.com/ https://*.realexpayments.com/ https://player.vimeo.com/ https://www.google.com/ *.trustpilot.com https://newassets.hcaptcha.com/ https://static.cdn.prismic.io/ https://example-repository.prismic.io/ https://ct.pinterest.com/ https://r3.girogate.de/ *.dotdigital-pages.com *.dotdigital.com cdn.dnky.co webchat.dotdigital.com webchat.staging.dotdigital.com *.opayo.eu.elavon.com *.dnp-cdms.jp *.revolut.com *.bankserv.co.za *.swisscard.ch *.six-group.com *.marqeta.com *.cardinalcommerce.com *.wlp-acs.com *.imbank.com *.tsys.co.uk *.sia.eu *.garanti.com.tr *.commerzbank.de *.cmbchina.com *.alahli.com *.mycardsecure.com *.gps.com.bh *.citibank.com *.wibmo.com *.dkb.de *.monzo.com *.alinma.com *.nccc.com.tw account.fetchify.com *.nosto.com *.nos.to c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.paypal.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.adyen.com *.googleapis.com *.gstatic.com https://images.prismic.io/lgpc/ https://bat.bing.com/ https://www.facebook.com https://*.pinterest.com/ https://www.google-analytics.com https://www.google.com https://www.google.co.uk https://snapppt.com/ https://*.snapppt.com/ https://maps.googleapis.com/ https://images.prismic.io/ https://prismic-io.s3.amazonaws.com/ https://cookie-cdn.cookiepro.com https://www.magecomp.com/ https://streetviewpixels-pa.googleapis.com/ https://js.intercomcdn.com/ https://www.google.com.ua/ *.paypal.com *.opayo.eu.elavon.com ebizmarts-website.s3.amazonaws.com www.feedoptimise.com cdn.feedoptimise.com *.nosto.com *.nos.to www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com https://player.vimeo.com/ www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.adyen.com *.googleapis.com *.gstatic.com https://static.cdn.prismic.io https://prismic.io https://cdnjs.cloudflare.com https://use.fontawesome.com https://*.hotjar.com/ https://connect.facebook.net/ https://s.pinimg.com/ https://bat.bing.com/ https://snapppt.com/ https://*.snapppt.com/ https://maps.googleapis.com/ https://js.intercomcdn.com/ *.trustpilot.com https://*.azureedge.net/ https://cookie-cdn.cookiepro.com/ https://widget.intercom.io https://widgets.pinterest.com https://assets.pinterest.com https://www.google-analytics.com https://stats.g.doubleclick.net https://www.google.com https://www.gstatic.com https://hcaptcha.com https://cookie-cdn.cookiepro.com https://www.googleoptimize.com/ https://oc-cdn-public-gbr.azureedge.net/ https://emarketing.littlegreene.com/ https://www.googletagmanager.com tagmanager.google.com *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal cdn.dnky.co webchat.dotdigital.com webchat.staging.dotdigital.com *.opayo.eu.elavon.com www.feedoptimise.com cdn.feedoptimise.com player.vimeo.com *.nosto.com *.nos.to js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com songbird.cardinalcommerce.com *.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://fonts.googleapis.com/ https://cdnjs.cloudflare.com https://*.azureedge.net/ https://hello.myfonts.net/ tagmanager.google.com use.fontawesome.com/releases/v5.6.0/css cdn.dnky.co webchat.dotdigital.com webchat.staging.dotdigital.com *.opayo.eu.elavon.com cc-cdn.com *.fontawesome.com maxcdn.bootstrapcdn.com *.nosto.com *.nos.to unsafe-inline assets.braintreegateway.com *.googleapis.com *.gstatic.com *.trustpilot.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.adyen.com *.googleapis.com https://*.hotjar.com/ https://*.pinterest.com/ https://www.google-analytics.com https://stats.g.doubleclick.net https://lg-gb.lgpcm2.ctidev https://snapppt.com/ https://*.snapppt.com/ https://maps.googleapis.com/ https://api-iam.intercom.io/ https://api.craftyclicks.co.uk/ https://www.facebook.com/ wss://nexus-websocket-a.intercom.io https://bat.bing.com/ https://bam.nr-data.net/ https://cookie-cdn.cookiepro.com/ https://privacyportal.cookiepro.com/ https://geolocation.onetrust.com/ https://invitejs.trustpilot.com/ *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com *.paypal.com *.opayo.eu.elavon.com api.craftyclicks.co.uk pcls1.craftyclicks.co.uk *.nosto.com *.nos.to api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com *.google.com google.com t.elasticsuite.io *.google-analytics.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: 
strict-transport-security: max-age=31536000; includeSubDomains
age: 11270
x-magento-cache-debug: HIT
grace: none
pragma: no-cache
expires: -1
cache-control: no-store, no-cache, must-revalidate, max-age=0
x-cti: 2
cf-cache-status: DYNAMIC
set-cookie: __cf_bm=3B_APQ8vZSi_OALWOQ0mzE3z4QW1OGBHSGsw6pDaPwc-1719047403-1.0.1.1-BPM2MbJwwTeAVvtrxKsFRPbfkHDe70jEuIkhxKX3VHT6QebBYIcUxV2V0Y.oQJrU6VaxQ7uaQWGPZCbUCbybUQ; path=/; expires=Sat, 22-Jun-24 09:40:03 GMT; domain=.paintandpaperlibrary.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 897b1a5cbf17232f-ORD
content-encoding: br
alt-svc: h3=":443"; ma=86400