Rufflebutts.com

retry-after: 0
cache-control: max-age=86400
location: https://www.rufflebutts.com/
accept-ranges: bytes
date: Wed, 25 Dec 2024 08:09:19 GMT
x-served-by: cache-nyc-kteb1890029-NYC
x-cache: HIT
x-cache-hits: 0
x-timer: S1735114160.978233,VS0,VE0
strict-transport-security: max-age=31536000
vary: 
content-length: 0

HTTP/2 200 
content-type: text/html; charset=UTF-8
pragma: cache
expires: Wed, 25 Dec 2024 21:19:06 GMT
x-esi: 1
report-to: {"group":"report-endpoint","max_age":10886400,"endpoints":[{"url":"https://ed914368-2c72-4b16-a9e8-feba9261bfe1.sansec.watch/"}]}
content-security-policy-report-only: font-src *.squarecdn.com *.alothemes.com *.magepow.com *.cloudfront.net *.reviews.io *.reviews.co.uk 'self' data: *.zopim.com fonts.gstatic.com staticw2.yotpo.com https://*.hotjar.com cdn-4.convertexperiments.com *.googleapis.com *.icomoon.io *.klaviyo.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.reviews.io *.reviews.co.uk *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ widgets.sandbox.afterpay.com *.cash.app c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.reviews.io *.reviews.co.uk *.criteo.com *.criteo.net https://www.paypalobjects.com https://tst.kaptcha.com https://ssl.kaptcha.com *.addthis.com *.doubleclick.net https://*.hotjar.com cdn-4.convertexperiments.com *.pinterest.com *.afterpay.com *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.afterpay.com/ *.cash.app www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://img.youtube.com *.alothemes.com *.magepow.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cloudfront.net *.reviews.io *.reviews.co.uk 'self' data: *.klaviyo.com *.gstatic.com *.google.com *.googleadservices.com https://www.google-analytics.com https://www.paypalobjects.com *.googleapis.com *.cloudflare.com *.pinterest.com *.revcontent.com *.clmbtech.com *.bing.com *.tapad.com *.criteo.com *.addthis.com *.yahoo.com *.outbrain.com *.pubmatic.com *.3lift.com *.media.net *.bidswitch.net *.casalemedia.com *.taboola.com *.teads.tv *.smartadserver.com *.sharethrough.com *.360yield.com *.liadm.com *.postrelease.com *.tremorhub.com *.stickyadstv.com *.mediavine.com *.yieldmo.com *.turn.com *.bluekai.com *.krxd.net *.agkn.com *.smaato.net *.emxdgt.com *.adnxs.com *.doubleclick.net *.mediawallahscript.com *.rlcdn.com *.zopim.com cdn.searchspring.net *.pippio.com pippio.com https://beacon.walmart.com *.searchspring.io *.blogspot.com *.rubiconproject.com *.omnitagjs.com https://ws.rqtrk.eu/ https://*.hotjar.com cdn-4.convertexperiments.com *.convertexperiments.com *.cdninstagram.com *.amazonaws.com *.clarity.ms *.facebook.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://portal.sandbox.afterpay.com https://portal.afterpay.com https://static.afterpay.com *.squarecdn.com https://hbiq.net *.cash.app js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ s7.addthis.com *.alothemes.com *.magepow.com https://connect.facebook.net connect.facebook.net graph.facebook.com business.facebook.com *.reviews.io *.reviews.co.uk www.google.com www.gstatic.com maps.googleapis.com 'self' data: *.google.com https://googleads.g.doubleclick.net *.klaviyo.com s.pinimg.com *.criteo.net *.criteo.com *.searchspring.net *.searchspring.io *.zopim.com https://static.zdassets.com https://z.moatads.com *.addthis.com *.addthisedge.com https://cdn.acsbapp.com *.googleadservices.com https://www.google-analytics.com https://analytics.google.com https://analytics.tiktok.com https://*.hotjar.com cdn-4.convertexperiments.com player.vimeo.com *.site24x7rum.com *.clarity.ms *.faire.com https://cdn.searchspring.net/intellisuggest/is.min.js https://www.googletagmanager.com tagmanager.google.com *.facebook.net unpkg.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com static.afterpay.com/ *.squarecdn.com *.cash.app unsafe-inline assets.braintreegateway.com https://static.klaviyo.com *.alothemes.com *.magepow.com *.cloudfront.net *.reviews.io *.reviews.co.uk 'self' data: *.klaviyo.com *.yotpo.com https://*.hotjar.com cdn-4.convertexperiments.com *.googleapis.com player.vimeo.com *.icomoon.io tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.afterpay.com *.squarecdn.com https://hbiq.net https://iq.afterpay-beta.com https://iq.afterpay.com *.cash.app api.lab.amplitude.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ ekr.zdassets.com/ *.alothemes.com *.magepow.com connect.facebook.net graph.facebook.com business.facebook.com *.cloudfront.net *.reviews.io *.reviews.co.uk *.klaviyo.com *.pinterest.com *.searchspring.io *.googleapis.com *.doubleclick.net *.zendesk.com *.zopim.com wss://widget-mediator.zopim.com/ https://api-js.datadome.co/ https://cdn.acsbapp.com *.googleadservices.com https://www.google-analytics.com *.addthis.com https://analytics.tiktok.com https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com cdn-4.convertexperiments.com logs.convertexperiments.com https://beacon.searchspring.io/beacon *.google-analytics.com *.facebook.net 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://ed914368-2c72-4b16-a9e8-feba9261bfe1.sansec.watch/; report-to report-endpoint;
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
access-control-allow-origin: https://www.rufflebutts.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With,Range
access-control-expose-headers: Authorization
accept-ranges: none
age: 39013
date: Wed, 25 Dec 2024 08:09:20 GMT
x-served-by: cache-lga21965-LGA, cache-chi-klot8100033-CHI
x-cache: HIT, HIT
x-cache-hits: 5, 0
x-timer: S1735114160.011827,VS0,VE3
strict-transport-security: max-age=31536000
cache-control: no-store, no-cache, must-revalidate, max-age=0
vary: Accept-Encoding, Origin,Host,Cookie
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-encoding: br