Security Analysis Results

9ef23df4edcc9814-SJC

no-cache, no-store, must-revalidate

keep-alive Transfer-Encoding

gzip

default-src 'nonce-02e510d461b40bd231ff6f9d4cb92b8c' 'self' *.hugoboss.eu *.lpsnmedia.net blob:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.cdn.optimizely.com *.snapchat.com www.googletagmanager.com *.google.com *.gstatic.com *.googleapis.com *.youtube.com *.cloud.google *.lpsnmedia.net *.doubleclick.net *.bounceexchange.com *.flashtalking.com *.criteo.com static.criteo.net lo.v.liveperson.net www.paypal.com pay.google.com *.dynamicyield.com *.usercentrics.eu *.cquotient.com *.attraqt.io *.cloudfront.net *.qualtrics.com *.liveperson.net *.contentsquare.net *.facebook.net *.bing.com *.tiktok.com *.mpulse.net *.clarity.ms *.tealiumiq.com *.cookielaw.org *.forter.com *.appsflyer.com *.usablenet.com *.rakuten.com *.liadm.com *.godatafeed.com *.gstatic.com *.adyen.com maps.googleapis.com *.hugoboss.eu; script-src-elem 'self' 'unsafe-inline' *.dynamicyield.com *.usercentrics.eu *.hugoboss.com *.cquotient.com *.attraqt.io *.hugoboss.eu app.usercentrics.eu *.paypal.com *.google.com *.gstatic.com *.adyen.com *.mastercard.com *.visa.com *.optimizely.com *.tiqcdn.com *.qualtrics.com *.liveperson.net *.contentsquare.net *.facebook.net sc-static.net *.tiktok.com js.adsrvr.org *.bing.com *.googletagmanager.com *.clarity.ms *.lpsnmedia.net *.tealiumiq.com googleads.g.doubleclick.net *.criteo.com *.contentsquare.net *.jsdelivr.net *.snapchat.com *.fitanalytics.com *.fluidconfigure.com *.googleapis.com *.bambuser.com *.dwin1.com *.roeyecdn.com *.roeye.com *.cookielaw.org *.forter.com *.cloudfront.net *.usablenet.com *.rakuten.com *.bounceexchange.com *.liadm.com *.upsellit.com; style-src 'self' 'unsafe-inline' *.adyen.com *.taggstar.com *.hugoboss.com *.googleapis.com *.fluidconfigure.com *.fitanalytics.com; img-src 'self' data: *.usercentrics.eu *.bing.com *.snapchat.com *.doubleclick.net https://googleads.g.doubleclick.net *.facebook.com *.contentsquare.net *.google.com *.google.de *.cookielaw.org *.licdn.com *.fitanalytics.com *.cdnwidget.com *.agencywithin.com *.paypalobjects.com *.gstatic.com *.bidswitch.net *.casalemedia.com https://id5-sync.com *.360yield.com *.media.net *.mediavine.com *.postrelease.com *.outbrain.com *.pubmatic.com *.rubiconproject.com *.smartadserver.com *.demdex.net *.taboola.com *.teads.tv *.tremorhub.com *.3lift.com *.yieldlab.net *.1rx.io *.agkn.com *.flashtalking.com *.usablenet.com *.linksynergy.com *.googlesyndication.com *.facebook.net *.googletagmanager.com *.hugoboss.com *.googleapis.com *.fluidconfigure.com *.lpsnmedia.net *.criteo.com *.dynamicyield.com https://id5-sync.com *.twiago.com; media-src 'self' *.hugoboss.com *.scene7.com *.lpsnmedia.net blob:; font-src 'self' *.gstatic.com *.fluidconfigure.com *.googleapis.com *.fitanalytics.com *.dynamicyield.com data:; connect-src 'self' *.hugoboss.com *.hugoboss.eu graphql.usercentrics.eu *.google-analytics.com *.tiktok.com *.usercentrics.eu *.bing.com *.bing.net api.usercentrics.eu *.dynamicyield.com *.attraqt.io maps.googleapis.com https://www.google.com *.google.com https://google.com *.google.de *.googleadservices.com *.fitanalytics.com *.doubleclick.net *.paypal.com *.clarity.ms *.contentsquare.net *.tealiumiq.com *.scene7.com *.akamaihd.net *.cdnwidget.com *.cdnbasket.net *.criteo.com *.criteo.net *.liveperson.net *.optimizely.com *.forter.com *.cookielaw.org *.onetrust.com *.snapchat.com *.mpulse.net *.qualtrics.com *.lpsnmedia.net z.clarity.ms http://widget.fitanalytics.com/ http://play.google.com/ http://www.cloudflare.com/ http://geolocation.onetrust.com/ *.akstat.io metric.hugoboss.com ssta.hugoboss.com *.cloudfront.net www.paypal.com *.siteperformancetest.net *.googletagmanager.com *.hugoboss.com *.dy-api.eu *.googleapis.com *.google-analytics.com *.addressy.com *.googlesyndication.com *.adsrvr.org *.facebook.com *.fluidconfigure.com lo.msg.liveperson.net *.forter.com *.contentsquare.net *.tiktokw.us *.verbolia.com https://svc-prod-us.liveshopping.bambuser.com; frame-src 'self' *.hugoboss.com *.google.com *.paypal.com *.mastercard.com *.visa.com *.criteo.com *.criteo.net *.optimizely.com *.lpsnmedia.net *.adsrvr.org *.snapchat.com *.googletagmanager.com *.flashtalking.com *.liveperson.net https://uhugs.omni.manh.com https://wbiprod.storedvalue.com; form-action 'self'; upgrade-insecure-requests; manifest-src 'self' *.apple.com ; worker-src 'self' blob:;

text/html;charset=UTF-8

Mon, 20 Apr 2026 06:55:12 GMT

Thu, 01 Dec 1994 16:00:00 GMT

no-cache

cloudflare

cfCacheStatus;desc="DYNAMIC" cfOrigin;dur=53,cfEdge;dur=82

max-age=31536000; includeSubDomains

chunked

Accept-Encoding

0 - 0 -

1; mode=block

DYNAMIC

/

"/cdn-cgi/speculation"

A2arJ6Ce5WkBAAB_