Soundflave.com

server: nginx
date: Mon, 20 Oct 2025 03:56:57 GMT
content-type: text/html; charset=UTF-8
pragma: cache
expires: Tue, 21 Oct 2025 03:56:57 GMT
x-built-with: Hyva Themes
x-magento-tags: store,cms_b,cms_p_65
content-security-policy-report-only: font-src fonts.gstatic.com use.typekit.net *.sparkleshome.com *.sparklesrhinestones.com *.sparklesstudio.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com fonts.googleapis.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.facebook.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com player.vimeo.com www.google.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com snapwidget.com instagram.com www.instagram.com interfaces.zapier.com accounts.google.com *.google.com td.doubleclick.net www.googletagmanager.com *.googletagmanager.com sparklescustomers.zapier.app *.zapier.app www.faire.com *.faire.com www.facebook.com *.facebook.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net https://images.unsplash.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com *.sparkleshome.com *.sparklesrhinestones.com *.sparklesstudio.com www.google.com *.google.com *.googletagmanager.com *.google-analytics.com www.googletagmanager.com ssl.gstatic.com www.gstatic.com sparklesrhinestones.com www.sparkleshome.com www.sparklesstudio.com images.unsplash.com *.cdninstagram.com *.fbcdn.net scontent.cdninstagram.com instagram.com www.instagram.com www.facebook.com *.facebook.com connect.facebook.net google.com www.google.co.uk www.google.com.au www.google.ca www.google.co.nz www.google.co.in www.google.de www.google.fr www.google.es www.google.it www.google.nl www.google.se www.google.no www.google.dk www.google.be www.google.com.mx www.google.com.br www.google.co.jp www.google.com.sg www.google.ie c.clarity.ms c.bing.com ig.socialapi-v2.workers.dev www.google-analytics.com ssl.google-analytics.com *.doubleclick.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com www.gstatic.com www.google.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net https://maps.googleapis.com chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com *.sparkleshome.com *.sparklesrhinestones.com *.sparklesstudio.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com *.googletagmanager.com tagmanager.google.com unpkg.com applepay.cdn-apple.com sparklesrhinestones.com www.sparkleshome.com www.sparklesstudio.com interfaces.zapier.com connect.facebook.net www.clarity.ms *.clarity.ms scripts.clarity.ms google.com www.google-analytics.com ssl.google-analytics.com www.googletagmanager.com *.doubleclick.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com downloads.mailchimp.com *.sparkleshome.com *.sparklesrhinestones.com *.sparklesstudio.com *.stripe.network *.stripecdn.com *.amazon.com tagmanager.google.com fonts.google.com sparklesrhinestones.com www.sparkleshome.com www.sparklesstudio.com google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.adobe.io performance.typekit.net *.sentry.io https://maps.googleapis.com https://player.vimeo.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com *.sparklesrhinestones.com *.sparklesstudio.com www.googleadservices.com *.googleadservices.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com bam.nr-data.net bam-cell.nr-data.net interfaces.zapier.com www.google.com google.com *.google.com stats.g.doubleclick.net td.doubleclick.net www.facebook.com *.facebook.com l.clarity.ms q.clarity.ms *.clarity.ms www.google-analytics.com ssl.google-analytics.com www.googletagmanager.com analytics.google.com region1.google-analytics.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';
strict-transport-security: max-age=31536000
content-security-policy: upgrade-insecure-requests;
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
set-cookie: PHPSESSID=1va911vo0ordli6gna61ufn534; expires=Tue, 21 Oct 2025 03:56:57 GMT; Max-Age=86400; path=/; domain=.sparklesrhinestones.com; secure; HttpOnly; SameSite=Lax
cache-control: public, max-age=86400
vary: Accept-Encoding
content-encoding: gzip
x-ua-compatible: IE=edge
x-frame-options: SAMEORIGIN
age: 0
x-cache: MISS
accept-ranges: bytes