Zimmermannwear.com - Staging2.zimmermannwear.com

retry-after: 0
location: https://staging2.zimmermann.com/
accept-ranges: bytes
date: Thu, 28 Nov 2024 02:02:02 GMT
x-served-by: cache-chi-kigq8000086-CHI
x-cache: HIT
x-cache-hits: 0
x-timer: S1732759323.536326,VS0,VE149
strict-transport-security: max-age=31536000
vary: 
set-cookie: geoCountryCode=US; path=/; max-age=60
content-length: 0

HTTP/2 302 
retry-after: 0
location: /us
accept-ranges: bytes
date: Thu, 28 Nov 2024 02:02:02 GMT
x-served-by: cache-chi-kigq8000147-CHI
x-cache: HIT
x-cache-hits: 0
x-timer: S1732759323.717116,VS0,VE1
strict-transport-security: max-age=31536000
vary: 
set-cookie: geoCountryCode=US; path=/; max-age=60
content-length: 0

HTTP/2 200 
content-security-policy: upgrade-insecure-requests;
content-security-policy-report-only: font-src https://*.gstatic.com *.googleapis.com *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.narvar.com *.narvar.qa script.hotjar.com fonts.googleapis.com fonts.gstatic.com *.inside-graph.com integration-cdn.toshi.co acsbapp.com shopping.qantas.com appdown.pstatic.net data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.adyen.com *.facebook.com *.cardinalcommerce.com www.facebook.com *.kaptcha.com bid.g.doubleclick.net ct.pinterest.com www.rsa3dsauth.co.uk www.securesuite.co.uk *.americanexpress.com 3dsecure-vrp.de 'self' 'unsafe-inline'; frame-ancestors au-tracker.inside-graph.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com *.adyen.com *.google.com *.doubleclick.net *.facebook.com *.pinterest.com *.sharethis.com *.hotjar.co vimeo.com acsbapp.com *.kaptcha.com player.smartzer.com www.google.com www.facebook.com accounts.accessibe.com dashboard.accessibe.com cestream.me 3ds.sia.eu acs2.3dsecure.no www.houzz.com geoissuer.cardinalcommerce.com pwm-image.trendmicro.com www.rsa3dsauth.co.uk my.zimmermann.com www.paypalobjects.com *.americanexpress.com 3dsecure-vrp.de 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.adyen.com https://*.gstatic.com *.googleapis.com *.gstatic.com 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.narvar.com *.narvar.qa adservice.google.com script.hotjar.com www.google.sa www.google.ca *.bing.com *.clarity.ms data:* web1.acsbapp.com integration-sandbox-cdn.toshi.co www.google.bg www.google.be www.google.co.uk www.google.nl www.gstatic.com translate.google.com idsync.rlcdn.com consent.linksynergy.com au-live.inside-graph.com bam-cell.nr-data.net integration-cdn.toshi.co bat.bing.com www.google.com.au google.com.au *.searchspring.io *.media.tumblr.com s.ytimg.com maps.googleapis.com maps.gstatic.com au-cdn.inside-graph.com www.google.co.in d3cgm8py10hi0z.cloudfront.net track.linksynergy.com *.sharethis.com *.micpn.com *.pinterest.com www.google.tn www.google.com.hk www.google.com.et www.google.com.eg www.google.co.tz www.google.ci www.google.co.ke www.google.cm www.google.lk www.google.com.ng www.google.ne www.google.com.mm www.google.co.mz www.google.co.id www.google.bi www.google.com.kh www.google.co.ve www.google.cd www.google.com.gh www.google.so www.google.com.af www.google.ht www.google.com.ni www.google.la www.google.cg www.google.bf www.google.sn www.google.com.ly www.google.mg www.google.com.sb www.google.com.pg www.google.com.np sync.sharethis.com www.google.com.py www.google.ml www.google.com.sl www.google.co.ls www.google.to www.google.gm www.google.rw www.google.com.vn www.google.com.sv www.google.co.kr www.google.com.bo www.google.com.sg www.google.mw www.google.si www.google.tl www.google.sc www.google.co.zm www.google.tg www.google.com.pk 4mrr1kwk.micpn.com www.google.ge www.google.com.fj www.google.com.na www.google.td www.google.ee www.google.mk www.google.bj www.google.mn www.google.bt www.google.co.bw www.google.fi www.google.com.uy www.google.co.th www.google.com.pe www.google.cv www.google.co.zw www.google.ga www.google.by www.google.iq www.google.com.ec www.google.co.jp www.google.com.pa www.google.dz www.google.ws analytics.tiktok.com www.google.gy www.google.rs www.google.is www.google.co.ug www.google.ki www.google.cz www.google.com.gt www.google.sr www.google.com.my www.google.kz www.google.me www.google.st www.google.co.il www.google.jo www.google.com.ph www.google.vu www.google.co.cr www.google.com.tw www.google.com.tj www.google.lv www.google.com.om www.google.de www.google.md www.google.es www.google.fr www.google.pt www.google.ch www.google.no www.google.hr www.google.com.sa www.google.pl www.google.com.ua www.google.at www.google.co.nz www.google.com.mx www.google.lt www.google.cl www.google.hu www.google.it tags.rd.linksynergy.com www.google.gr www.google.ro www.google.co.za www.google.com.br www.google.sk www.google.ru www.google.ae www.google.com.ar www.google.lu www.google.bs www.google.com.tr www.google.se www.google.ie www.zimmermannwear.com www.google.al www.google.com.lb www.google.com.cy zimmermann.com www.google.mu www.zimmermann.com staging3.zimmermann.com staging2.zimmermann.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.adyen.com *.googleapis.com *.gstatic.com *.google.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com https://cdn.searchspring.net/intellisuggest/is.min.js analytics.tiktok.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net widgets.magentocommerce.com *.searchspring.net *.acsbapp.com au-tracker.inside-graph.com cdn.scarabresearch.com intljs.rmtag.com *.inside-graph.co js-agent.newrelic.com *.inside-graph.com acsbapp.com tag.lexer.io *.toshi.co *.bugsnag.com *.sharethis.com script.crazyegg.com *.clarity.ms www.fullstory.com songbirdstag.cardinalcommerce.com www.gstatic.com vimeocdn.com youtube.com googletagmanager.com maps.googleapis.com fullstory.com bat.bing.com 4mrr1kwk.micpn.com ut.rd.linksynergy.com f.vimeocdn.com sdk.privacy-center.org cdn.weglot.com unsafe-hashes *.pinimg.com tag.rmp.rakuten.com edge.fullstory.com *.hotjar.com static.hotjar.com script.hotjar.com ct.pinterest.com www.onelink-edge.com snapui.searchspring.io unsafe-inline syd.onelink-edge.com uat-commerceops.tryzens-analytics.com unpkg.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com https://fonts.googleapis.com/ fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com au-cdn.inside-graph.com cdn.searchspring.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.narvar.com *.narvar.qa au-cdn.inside-graph.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adyen.com *.googleapis.com *.google-analytics.com *.facebook.com *.facebook.net *.google.com https://beacon.searchspring.io/beacon analytics.tiktok.com data.stbuttons.click www.google.com.au translate.googleapis.com *.searchspring.io *.acsbapp.co cdn.acsbapp.com au-live.inside-graph.com bam.nr-data.net uat.tryzens-analytics.com:12280 *.scarabresearch.com wss://au-live.inside-graph.com  *.bugsnag.com *.postcodeanywhere.co.uk *.sharethis.com script.crazyegg.com stats.g.doubleclick.net www.google.co.ke www.google.bi pagestates-tracking.crazyegg.com www.google.com.sl www.google.co.ao www.google.cm www.google.com.np www.google.cd www.google.co.ve www.google.lk www.google.co.tz www.google.com.ng www.google.so www.google.ne www.google.co.id www.google.co.ls www.google.tn assets-tracking.crazyegg.com www.google.ht www.google.co.mz acsbapp.com www.google.com.co cp.crwdcntrl.net www.google.ci tracking.crazyegg.com www.google.co.za www.google.tl www.google.com.pk www.google.com.sv www.google.com.ly www.google.mg www.google.tg www.google.gm www.google.com.eg www.google.co.kr www.google.bf www.google.sn www.google.ga www.google.bj ad.doubleclick.net www.google.cg www.google.com.ar www.google.co.ma www.google.com.et www.google.fr www.google.com.na www.google.co.uk www.google.nl www.google.ml www.google.rw www.google.com.uy www.google.com.bo www.google.com.ni www.google.ki www.google.ee www.google.com.gt www.google.com.py www.google.com.gh www.google.com.kh www.google.com.vn www.google.ru www.google.cv www.google.com.mm www.google.co.zm www.google.vu www.google.com.ec www.google.es www.google.at bat.bing.com vc.hotjar.io www.google.de ws.hotjar.com content.hotjar.io metrics.hotjar.io www.google.ca www.tryzens-analytics.com ct.pinterest.com www.google.com.pe www.google.co.in www.google.ge api.privacy-center.org cdn.weglot.com googleads.g.doubleclick.net track.lexer.io *.pinimg.com static.hotjar.com *.pinterest.com pagead2.googlesyndication.com *.fullstory.com edge.fullstory.com wss://ws.hotjar.com www.onelink-edge.com bcp.crwdcntrl.net syd.onelink-edge.com commerceops.tryzens-analytics.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://289r1hnfc9.execute-api.eu-west-1.amazonaws.com/prod/zmn-cspdata; report-to report-endpoint;
content-type: text/html; charset=UTF-8
expires: Fri, 29 Nov 2024 02:02:03 GMT
pragma: cache
report-to: {"group":"report-endpoint","max_age":10886400,"endpoints":[{"url":"https://289r1hnfc9.execute-api.eu-west-1.amazonaws.com/prod/zmn-cspdata"}]}
traceresponse: 00-180bff6c6e9670f632a1afc40496d6f0-05e7e5f71cb33cc4-01
x-content-type-options: nosniff
x-debug-info: eyJyZXRyaWVzIjowfQ==
x-esi: 1
x-frame-options: SAMEORIGIN
x-platform-server: i-0d0d3a1266a9eb7f9
x-platform-server: i-0d0d3a1266a9eb7f9
x-xss-protection: 1; mode=block
accept-ranges: none
age: 0
date: Thu, 28 Nov 2024 02:02:05 GMT
x-served-by: cache-syd10170-SYD, cache-chi-kigq8000147-CHI
x-cache: MISS, MISS
x-cache-hits: 0, 0
strict-transport-security: max-age=31536000
cache-control: no-store, no-cache, must-revalidate, max-age=0
vary: Accept-Encoding,Cookie
set-cookie: geoCountryCode=US; path=/; max-age=60
content-encoding: br