Security Analysis Results

DYNAMIC

9f3571c03d349b57-SEA

private

keep-alive

zstd

text/html; charset=utf-8

Tue, 28 Apr 2026 10:39:40 GMT

{"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}

{"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=dlR%2BEv%2FFpcLTnZ4WxhFMeMEvxiaJPoKH4hIdE8MPb3A3tv%2F7vrvL%2FEz2MZb3S3hxbuAgzdHA1X%2BLwgSM5L7pjNKAU3%2BkV48Xx6FKmhoDGXofv%2BM%2BdVTlvh2NacxzLyG%2FJzAnEaayVA%3D%3D"}]}

cloudflare

cfCacheStatus;desc="DYNAMIC" cfEdge;dur=18,cfOrigin;dur=0,cfWorker;dur=1312

chunked

Accept-Encoding

1.1 2501b465adde8e5aedc3f38e3dfcdc22.cloudfront.net (CloudFront)

h3=":443"; ma=86400

default-src 'self' 'unsafe-inline'; img-src 'self' *.boltdns.net *.brightcove.com *.brightcovecdn.com *.clarity.ms *.karte.io *.revico.jp *.shoplive.cloud *.visumo.io *.visumo.jp ajax.googleapis.com analytics.twitter.com b98.yahoo.co.jp b99.yahoo.co.jp c.bing.com connect.facebook.net contents.online.checkout.rakuten.co.jp d2vfodruoehyag.cloudfront.net fonts.gstatic.com forte-staging.s3.ap-northeast-1.amazonaws.com googleads.g.doubleclick.net i.ytimg.com images-fe.ssl-images-amazon.com images-na.ssl-images-amazon.com m.media-amazon.com maihada.jp maison.kose.co.jp players.brightcove.net px.a8.net s3-ap-northeast-1.amazonaws.com sdk.hellouniweb.com seal.globalsign.com sekkisei.jp ssif1.globalsign.com static-fe.payments-amazon.com static-na.payments-amazon.com stats.g.doubleclick.net t.co tr.line.me visumojp-www.s3-ap-northeast-1.amazonaws.com www.addiction-beauty.com www.decorte.com www.facebook.com www.google.ca www.google.ch www.google.co.id www.google.co.in www.google.co.jp www.google.co.kr www.google.co.nz www.google.co.th www.google.co.uk www.google.com www.google.com.au www.google.com.hk www.google.com.ph www.google.com.sg www.google.com.tw www.google.com.vn www.google.de www.google.fr www.google.ie www.google.pl www.google.se www.googleadservices.com www.googletagmanager.com www.jillstuart-floranotisjillstuart.com data:; font-src 'self' 'unsafe-inline' *.karte.io *.revico.jp *.shoplive.cloud assets.payments-amazon.com at.alicdn.com cdn.jsdelivr.net cdn.yiban.io fonts.googleapis.com fonts.gstatic.com maxcdn.bootstrapcdn.com players.brightcove.net s3-ap-northeast-1.amazonaws.com webfont.fontplus.jp data:; connect-src 'self' *.boltdns.net *.brightcove.com *.brightcovecdn.com *.clarity.ms *.karte.io *.line.me *.revico.jp *.shoplive.cloud *.visumo.io *.visumo.jp analytics.google.com analytics.twitter.com apac.account.amazon.com api.amazon.co.jp api.amazon.com apm.yahoo.co.jp bs.nakanohito.jp cdn.jsdelivr.net cdnjs.cloudflare.com dc.services.visualstudio.com dpolc4ci3j.execute-api.ap-northeast-1.amazonaws.com edge.api.brightcove.com googleads.g.doubleclick.net hacobuneprodmedia.blob.core.windows.net liffsdk.line-scdn.net lightning-recommend.io m.media-amazon.com mws.amazonservices.com mws.amazonservices.jp o4506773005533184.ingest.sentry.io payments-fe.amazon.com payments-jp.amazon.com payments.amazon.co.jp players.brightcove.net private.shopliveapi.com region1.analytics.google.com sdk.hellouniweb.com stats.g.doubleclick.net t.co webfont.fontplus.jp www.facebook.com www.google.ca www.google.ch www.google.co.id www.google.co.in www.google.co.jp www.google.co.kr www.google.co.nz www.google.co.th www.google.co.uk www.google.com www.google.com.au www.google.com.hk www.google.com.ph www.google.com.sg www.google.com.tw www.google.com.vn www.google.de www.google.fr www.google.ie www.google.pl www.google.se www.google-analytics.com www.googleadservices.com www.googletagmanager.com blob:; frame-src 'self' *.revico.jp *.shoplive.cloud api.kaiu-marketing.com payments-jp.amazon.com payments.amazon.co.jp players.brightcove.net recaptcha.google.com static-fe.payments-amazon.com static-na.payments-amazon.com toolytics.pa.clients6.google.com webfont.fontplus.jp www.facebook.com www.google.com www.googletagmanager.com www.youtube.com; media-src 'self' *.boltdns.net *.brightcovecdn.com *.cf.brightcove.com *.media.brightcove.com *.visumo.io *.visumo.jp private.shopliveapi.com blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.clarity.ms *.ebis.ne.jp *.karte.io *.mul-pay.jp *.revico.jp *.shoplive.cloud *.visumo.io *.visumo.jp adebisns.addiction-beauty.com ajax.googleapis.com api.kaiu-marketing.com apis.google.com assets.payments-amazon.com b98.yahoo.co.jp b99.yahoo.co.jp cdn.credit.gmo-ab.com cdn.jsdelivr.net cdnjs.cloudflare.com connect.facebook.net contents.online.checkout.rakuten.co.jp cs.nakanohito.jp d.line-scdn.net fraud-buster.appspot.com googleads.g.doubleclick.net lightning-recommend.io platform.twitter.com players.brightcove.net rec.ebis.ne.jp s.yimg.jp s3-ap-northeast-1.amazonaws.com sdk.hellouniweb.com seal.globalsign.com ssif1.globalsign.com static.ads-twitter.com static.line-scdn.net static-fe.payments-amazon.com static-na.payments-amazon.com statics.a8.net taj1.ebis.ne.jp vjs.zencdn.net webfont.fontplus.jp www.google.com www.google-analytics.com www.googletagmanager.com www.gstatic.com www.youtube.com blob:; style-src 'self' 'unsafe-inline' *.revico.jp *.shoplive.cloud *.visumo.jp ajax.googleapis.com api.kaiu-marketing.com assets.payments-amazon.com cdn.jsdelivr.net cdnjs.cloudflare.com fonts.googleapis.com fonts.gstatic.com maxcdn.bootstrapcdn.com players.brightcove.net s3-ap-northeast-1.amazonaws.com vjs.zencdn.net; worker-src 'self' blob:; report-to csp-endpoint;

no-referrer-when-downgrade

csp-endpoint="/csp/reporting"

xdQO6SBD6KffIfkA93Fl7L2OyHh2J2WwGGlW23gSjjM1kDCXYF4oyg==

SEA900-P9

Miss from cloudfront

SAMEORIGIN