Timberland.co.nz

content-type: text/html; charset=UTF-8
set-cookie: PHPSESSID=6c3d7a2a2f9ebab6055403ea70b1f333; expires=Wed, 08-Feb-2023 06:18:13 GMT; Max-Age=86400; path=/; domain=timberland.co.nz; secure; HttpOnly; SameSite=Lax
set-cookie: X-Magento-Vary=c58cc7336841735bf5ef13185766282824a9d073; expires=Wed, 08-Feb-2023 06:18:14 GMT; Max-Age=86400; path=/; secure; HttpOnly; SameSite=Lax
location: https://www.timberland.co.nz/
pragma: no-cache
cache-control: max-age=0, must-revalidate, no-cache, no-store
expires: Mon, 07 Feb 2022 06:18:14 GMT
report-to: {"group":"report-endpoint","max_age":10886400,"endpoints":[{"url":"http://www.example.com/"}]}
content-security-policy-report-only: font-src *.gstatic.com 'self' data: *.doubleclick.net *.klevu.com *.ksearchnet.com *.fontawesome.com fonts.gstatic.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net pilot-payflowlink.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src secure.authorize.net test.authorize.net www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.google.com *.doubleclick.net www.xtento.com *.hotjar.com popup.laybuy.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com validator.swagger.io 'self' data: www.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net www.xtento.com cdn.xtento.com https://a.klaviyo.com *.klevu.com *.ksearchnet.com *.afterpay.com.au *.afterpay.com *.afterpay.co.nz *.secure-afterpay.com.au *.secure-afterpay.com *.timberland.co.nz *.birkenstock.co.nz *.britwyn.co.nz *.trackjs.com stats.g.doubleclick.net www.google.com.ua integration-assets.laybuy.com *.googletagmanager.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com www.sandbox.paypal.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https://www.gstatic.com/recaptcha/ www.google.com *.google.com *.googletagmanager.com/ *.facebook.net *.doubleclick.net www.xtento.com cdn.xtento.com https://static.klaviyo.com https://fast.a.klaviyo.com js.klevu.com *.ksearchnet.com *.avada.io *.afterpay.com *.klaviyo.com chimpstatic.com *.lr-ingest.io cdn.trackjs.com *.hotjar.com inside-graph.com api.addressfinder.io www.gstatic.com googleads.g.doubleclick.net assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.googleapis.com *.doubleclick.net *.klevu.com *.ksearchnet.com *.fontawesome.com *.klaviyo.com api.addressfinder.io fonts.googleapis.com maxcdn.bootstrapcdn.com unsafe-inline *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src commondatastorage.googleapis.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.google-analytics.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com *.google-analytics.com *.klaviyo.com https://fast.a.klaviyo.com *.klevu.com *.ksearchnet.com https://get.geojs.io *.avada.io *.nzpost.co.nz *.afterpay.com.au *.afterpay.com *.afterpay.co.nz *.lr-ingest.io *.trackjs.com vc.hotjar.io api.addressfinder.io *.hotjar.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri http://www.example.com/; report-to report-endpoint;
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=31536000
accept-ranges: bytes
date: Tue, 07 Feb 2023 06:18:14 GMT
x-served-by: cache-akl10332-AKL, cache-chi-klot8100123-CHI
x-cache: MISS, MISS
x-cache-hits: 0, 0
x-timer: S1675750693.351395,VS0,VE754
vary: Cookie

HTTP/2 200 
content-type: text/html; charset=UTF-8
pragma: cache
expires: Tue, 07 Feb 2023 21:22:45 GMT
report-to: {"group":"report-endpoint","max_age":10886400,"endpoints":[{"url":"http://www.example.com/"}]}
content-security-policy-report-only: font-src *.gstatic.com 'self' data: *.doubleclick.net *.klevu.com *.ksearchnet.com *.fontawesome.com fonts.gstatic.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net pilot-payflowlink.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src secure.authorize.net test.authorize.net www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.google.com *.doubleclick.net www.xtento.com *.hotjar.com popup.laybuy.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com validator.swagger.io 'self' data: www.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net www.xtento.com cdn.xtento.com https://a.klaviyo.com *.klevu.com *.ksearchnet.com *.afterpay.com.au *.afterpay.com *.afterpay.co.nz *.secure-afterpay.com.au *.secure-afterpay.com *.timberland.co.nz *.birkenstock.co.nz *.britwyn.co.nz *.trackjs.com stats.g.doubleclick.net www.google.com.ua integration-assets.laybuy.com *.googletagmanager.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com www.sandbox.paypal.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https://www.gstatic.com/recaptcha/ www.google.com *.google.com *.googletagmanager.com/ *.facebook.net *.doubleclick.net www.xtento.com cdn.xtento.com https://static.klaviyo.com https://fast.a.klaviyo.com js.klevu.com *.ksearchnet.com *.avada.io *.afterpay.com *.klaviyo.com chimpstatic.com *.lr-ingest.io cdn.trackjs.com *.hotjar.com inside-graph.com api.addressfinder.io www.gstatic.com googleads.g.doubleclick.net assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.googleapis.com *.doubleclick.net *.klevu.com *.ksearchnet.com *.fontawesome.com *.klaviyo.com api.addressfinder.io fonts.googleapis.com maxcdn.bootstrapcdn.com unsafe-inline *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src commondatastorage.googleapis.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.google-analytics.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com *.google-analytics.com *.klaviyo.com https://fast.a.klaviyo.com *.klevu.com *.ksearchnet.com https://get.geojs.io *.avada.io *.nzpost.co.nz *.afterpay.com.au *.afterpay.com *.afterpay.co.nz *.lr-ingest.io *.trackjs.com vc.hotjar.io api.addressfinder.io *.hotjar.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri http://www.example.com/; report-to report-endpoint;
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=31536000
content-encoding: gzip
accept-ranges: bytes
date: Tue, 07 Feb 2023 06:18:15 GMT
age: 32129
x-served-by: cache-akl10335-AKL, cache-phx12428-PHX
x-cache: HIT, MISS
x-cache-hits: 44, 0
x-timer: S1675750694.287150,VS0,VE844
cache-control: no-store, no-cache, must-revalidate, max-age=0
vary: Accept-Encoding,Cookie
content-length: 55161