Supplemynts.com

server: nginx
date: Wed, 29 Oct 2025 02:38:02 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
pragma: cache
cache-control: max-age=86400, public, s-maxage=86400
expires: Thu, 30 Oct 2025 02:38:01 GMT
x-magento-tags: store,cms_b,gdpr_c,NAVIGATIONPRO_MENU_7,theme_editor_backend_css_block,cms_b_header_cms_links,cms_b_argento_scroll_up,cms_b_footer_benefits,cms_b_footer_cms_content,cms_b_footer_newsletter,placeholder__1,placeholder__4,cms_p_2,easyslide_slider_3,cat_c,cat_c_56,cat_c_37,cat_c_60,cat_c_59,cat_c_58,cat_c_55,cat_c_3,cat_c_61,cat_c_62,cat_c_27,cat_c_46,cat_c_57,cat_c_35,cat_c_34,cat_c_33,cat_c_31,cat_c_32,cat_c_30,cat_c_29,cat_c_14,cat_c_13,cat_c_12,cat_c_11,cat_c_10,cat_c_9,cat_c_8,cat_c_7,cat_c_5,cat_c_6,cat_c_17,cat_c_18,cat_c_19,cat_c_20,cat_c_21,cat_c_22,cat_c_28,cat_c_24,cat_c_25,cat_c_26,cat_c_23,cat_c_16,cat_c_15,cat_c_63,cat_c_67,cat_c_69,cat_c_71,cat_c_73,cat_c_74,cat_c_80,cat_c_85,cat_c_101,cat_c_106,cat_c_130,cat_c_132,cat_c_135,cat_c_47,cat_c_53,cat_c_45,cat_c_44,cat_c_43,cat_c_42,cat_c_38,cat_c_41,cat_c_40,cat_c_39,cat_c_48,cat_c_49,cat_c_50,cat_c_36,cat_c_4,cat_c_52,cat_c_54,cat_c_51,easytabs_entity_7,easytabs_entity_8,easytabs_entity_9,easytabs_entity_10,cat_p_290,cat_p,cat_p_174,cat_p_160,cat_p_159,cat_p_158,cat_p_156,cat_p_155,cat_p_154,cat_p_253,cat_p_1770,cat_p_867,cat_p_798,cat_p_130,cat_p_67,cat_p_770,cat_p_195,easyslide_slider_4
content-security-policy-report-only: font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.facebook.com www.xtento.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io magefan.com cm.magefan.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com maps.googleapis.com cdn.ampproject.org www.gstatic.com connect.facebook.net www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com www.gstatic.com maxcdn.bootstrapcdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com places.googleapis.com cdn.ampproject.org 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
set-cookie: PHPSESSID=02c2ac5d03b015da3ffd72978d8c13fb; expires=Wed, 29 Oct 2025 03:38:01 GMT; Max-Age=3600; path=/; domain=supplemynts.com; secure; HttpOnly; SameSite=Lax
set-cookie: _nx-nocache=1
x-ua-compatible: IE=edge
x-frame-options: SAMEORIGIN
x-cache-nxaccel: BYPASS
content-encoding: br