Sckin.com

server: nginx
date: Wed, 23 Oct 2024 20:43:36 GMT
content-type: text/html; charset=iso-8859-1
content-length: 230
location: https://www.sckin.com/
x-cache-nxaccel: BYPASS

HTTP/2 301 
server: nginx
date: Wed, 23 Oct 2024 20:43:36 GMT
content-type: text/html; charset=UTF-8
location: https://www.skintrends.com/
set-cookie: PHPSESSID=a1936fdf56f4fce9dbf8f88d0964f53c; expires=Thu, 24 Oct 2024 06:43:36 GMT; Max-Age=36000; path=/; domain=skintrends.com; secure; HttpOnly; SameSite=Lax
pragma: no-cache
cache-control: max-age=0, must-revalidate, no-cache, no-store
expires: Mon, 23 Oct 2023 20:43:36 GMT
content-security-policy: font-src *.gstatic.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.bootstrapcdn.com *.hotjar.com *.nxcli.net *.googleapis.com https://eadn-wc02-4115481.nxedge.io https://unpkg.com https://eadn-wc02-4115481.nxedge.io/cdn https://cdnjs.cloudflare.com *.fontawesome.com maxcdn.bootstrapcdn.com www.skintrends.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * data: *.twitter.com https://feedback.webengage.com https://snapservice.webengage.com www.skintrends.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.stripe.com stripe.com www.skintrends.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.google.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com https://www.googletagmanager.com/ www.facebook.com platform.twitter.com *.vimeo.com *.google.com *.google.com.vn *.hotjar.com *.webengage.co *.g.doubleclick.net *.twitter.com https://feedback.webengage.com https://snapservice.webengage.com *.facebook.com *.paypalobjects.com https://td.doubleclick.net www.skintrends.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com https://images.unsplash.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ www.facebook.com pinterest.com assets.pinterest.com syndication.twitter.com 'self' data: *.nxcli.net *.g.doubleclick.net http://seal-westflorida.bbb.org *.authorizedstore.com https://seal.godaddy.com *.google.com *.google.com.vn *.skintrends.com *.cloudfront.net *.nexcesscdn.net http://www.googletagmanager.com http://lghttp.32136.nexcesscdn.net *.nextopia.net *.bing.com *.webengage.com *.clarity.ms https://nxtuploads.s3.amazonaws.com https://eadn-wc02-4115481.nxedge.io *.affirm.com www.skintrends.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ connect.facebook.net twitter.com platform.twitter.com *.googleapis.com *.gstatic.com *.googletagmanager.com *.hotjar.com https://chimpstatic.com *.nextopia.net https://googleads.g.doubleclick.net *.authorizedstore.com http://seal-westflorida.bbb.org https://seal.godaddy.com https://c.webengage.com *.bootstrapcdn.com *.google.com *.amazonaws.com *.ecomm-nav.com *.bing.com *.webengage.co *.c.webengage.com *.clarity.ms https://d10lpsik1i8c69.cloudfront.net https://ac.nextopiasoftware.com https://eadn-wc02-4115481.nxedge.io https://ssl.widgets.webengage.com *.vimeo.com *.zopim.com *.zdassets.com www.skintrends.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.googleapis.com unsafe-inline assets.braintreegateway.com http://fonts.googleapis.com *.bootstrapcdn.com *.nextopia.net *.authorizedstore.com http://seal-westflorida.bbb.org http://seal-blue.bbb.org https://eadn-wc02-4115481.nxedge.io https://unpkg.com *.cloudfront.net https://cdnjs.cloudflare.com *.fontawesome.com maxcdn.bootstrapcdn.com www.skintrends.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ *.cloudfront.net www.skintrends.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ *.googleadservices.com *.google.com.vn *.hotjar.com *.hotjar.io wss://ws6.hotjar.com wss://ws3.hotjar.com wss://ws4.hotjar.com wss://ws5.hotjar.com wss://ws1.hotjar.com wss://ws8.hotjar.com wss://ws1.hotjar.co *.facebook.com *.google-analytics.com *.g.doubleclick.net *.clarity.ms *.luckyorange.net https://eadn-wc02-4115481.nxedge.io https://c.webengage.com wss://visitors.live/socket.io/ wss://in.visitors.live/socket.io/ *.zopim.com wss://widget-mediator.zopim.com *.zdassets.com *.cloudfront.net www.skintrends.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com www.skintrends.com http: https: blob: 'self' 'unsafe-inline'; default-src www.skintrends.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';
strict-transport-security: max-age=31536000
content-security-policy: upgrade-insecure-requests;
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-cache-nxaccel: BYPASS

HTTP/2 200 
server: nginx
date: Wed, 23 Oct 2024 20:43:36 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
set-cookie: PHPSESSID=f864e1ae4c5e87489ef95991394faa4e; expires=Thu, 24 Oct 2024 06:43:36 GMT; Max-Age=36000; path=/; domain=skintrends.com; secure; HttpOnly; SameSite=Lax
x-built-with: Hyva Themes
link: </media/logo/websites/1/logo.png>; rel=preload; as=image, </media/logo/websites/1/logo.png>; rel=preload; as=image, </media/wysiwyg/payment_methods_update.png>; rel=preload; as=image, </media/logo/websites/1/logo.png>; rel=preload; as=image, </media/wysiwyg/home_banner/Authorized_Store_Website_Banner.png>; rel=preload; as=image, </media/amasty/amoptmobile/wysiwyg/home_banner/Authorized_Store_Website_Banner.png>; rel=preload; as=image, </static/version1729584098/frontend/Hyva/skintrends/en_US/Bss_HyvaCompatBase/js/alpinejs/plugins/component.min.js>; rel=preload; as=script, </static/version1729584098/frontend/Hyva/skintrends/en_US/Hyva_Theme/js/alpine3.min.js>; rel=preload; as=script, </static/version1729584098/_cache/merged/81272bf333fe5861c5fd4aff556312df.css>; rel=preload; as=style, </static/version1729584098/frontend/Hyva/skintrends/en_US/fonts/opensans/light/opensans-300.woff2>; rel=preload; as=font; crossorigin=anonymous, </static/version1729584098/frontend/Hyva/skintrends/en_US/fonts/opensans/regular/opensans-400.woff2>; rel=preload; as=font; crossorigin=anonymous, </static/version1729584098/frontend/Hyva/skintrends/en_US/fonts/opensans/semibold/opensans-600.woff2>; rel=preload; as=font; crossorigin=anonymous, </static/version1729584098/frontend/Hyva/skintrends/en_US/fonts/opensans/bold/opensans-700.woff2>; rel=preload; as=font; crossorigin=anonymous
pragma: no-cache
cache-control: max-age=0, must-revalidate, no-cache, no-store
expires: Mon, 23 Oct 2023 05:39:19 GMT
content-security-policy: font-src *.gstatic.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.bootstrapcdn.com *.hotjar.com *.nxcli.net *.googleapis.com https://eadn-wc02-4115481.nxedge.io https://unpkg.com https://eadn-wc02-4115481.nxedge.io/cdn https://cdnjs.cloudflare.com *.fontawesome.com maxcdn.bootstrapcdn.com www.skintrends.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * data: *.twitter.com https://feedback.webengage.com https://snapservice.webengage.com www.skintrends.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.stripe.com stripe.com www.skintrends.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.google.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com https://www.googletagmanager.com/ www.facebook.com platform.twitter.com *.vimeo.com *.google.com *.google.com.vn *.hotjar.com *.webengage.co *.g.doubleclick.net *.twitter.com https://feedback.webengage.com https://snapservice.webengage.com *.facebook.com *.paypalobjects.com https://td.doubleclick.net www.skintrends.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com https://images.unsplash.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ www.facebook.com pinterest.com assets.pinterest.com syndication.twitter.com 'self' data: *.nxcli.net *.g.doubleclick.net http://seal-westflorida.bbb.org *.authorizedstore.com https://seal.godaddy.com *.google.com *.google.com.vn *.skintrends.com *.cloudfront.net *.nexcesscdn.net http://www.googletagmanager.com http://lghttp.32136.nexcesscdn.net *.nextopia.net *.bing.com *.webengage.com *.clarity.ms https://nxtuploads.s3.amazonaws.com https://eadn-wc02-4115481.nxedge.io *.affirm.com www.skintrends.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ connect.facebook.net twitter.com platform.twitter.com *.googleapis.com *.gstatic.com *.googletagmanager.com *.hotjar.com https://chimpstatic.com *.nextopia.net https://googleads.g.doubleclick.net *.authorizedstore.com http://seal-westflorida.bbb.org https://seal.godaddy.com https://c.webengage.com *.bootstrapcdn.com *.google.com *.amazonaws.com *.ecomm-nav.com *.bing.com *.webengage.co *.c.webengage.com *.clarity.ms https://d10lpsik1i8c69.cloudfront.net https://ac.nextopiasoftware.com https://eadn-wc02-4115481.nxedge.io https://ssl.widgets.webengage.com *.vimeo.com *.zopim.com *.zdassets.com www.skintrends.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.googleapis.com unsafe-inline assets.braintreegateway.com http://fonts.googleapis.com *.bootstrapcdn.com *.nextopia.net *.authorizedstore.com http://seal-westflorida.bbb.org http://seal-blue.bbb.org https://eadn-wc02-4115481.nxedge.io https://unpkg.com *.cloudfront.net https://cdnjs.cloudflare.com *.fontawesome.com maxcdn.bootstrapcdn.com www.skintrends.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ *.cloudfront.net www.skintrends.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ *.googleadservices.com *.google.com.vn *.hotjar.com *.hotjar.io wss://ws6.hotjar.com wss://ws3.hotjar.com wss://ws4.hotjar.com wss://ws5.hotjar.com wss://ws1.hotjar.com wss://ws8.hotjar.com wss://ws1.hotjar.co *.facebook.com *.google-analytics.com *.g.doubleclick.net *.clarity.ms *.luckyorange.net https://eadn-wc02-4115481.nxedge.io https://c.webengage.com wss://visitors.live/socket.io/ wss://in.visitors.live/socket.io/ *.zopim.com wss://widget-mediator.zopim.com *.zdassets.com *.cloudfront.net www.skintrends.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com www.skintrends.com http: https: blob: 'self' 'unsafe-inline'; default-src www.skintrends.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';
strict-transport-security: max-age=31536000
content-security-policy: upgrade-insecure-requests;
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-cache-nxaccel: BYPASS
content-encoding: br