Security Analysis Results

max-age=0, no-cache, no-store, private

keep-alive Transfer-Encoding

gzip

block-all-mixed-content; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: *.kohls.com *.adobedtm.com *.yahoodns.net *.cdnbasket.net js.findmine.com lb.eu-1-id5-sync.com lb.eu-2-id5-sync.com lb.eu-3-id5-sync.com lb.eu-4-id5-sync.com lb.us-1-id5-sync.com lb.us-2-id5-sync.com diagnostics.id5-sync.com *.babylist.com *.kargo.com *.cloudfront.net esm.sh *.dotomi.com *.fastclick.net *.licdn.com *.pubmatic.com *.rubiconproject.com *.doubleclick.net *.iesnare.com *.youtube.com *.fontawesome.com kohlsblog.wpengine.com *.collectivevoice.com *.flippenterprise.net *.kohlslocal.com *.media.net *.syndigo.com *.syndigo.cloud *.rewardstyle.com *.adnxs-simple.com media.adcanvas.com *.loudcrowd.com *.2mdn.net c.tvpixel.com *.3lift.com *.flashtalking.com *.ampproject.org *.scorecardresearch.com *.evgnet.com *.vovici.com *.casalemedia.com cdn.cookielaw.org app.contentsquare.com *.fohr.co cdnjs.cloudflare.com *.yahoo.com cdn.js7k.com *.doubleverify.com *.adnxs.com *.adsafeprotected.com kohls.sspinc.io *.webcollage.net *.brsrvr.com *.pinterest.com *.curalate.com *.googleapis.com *.dynatrace.com *.snapchat.com *.go-mpulse.net *.adobedtm.com *.coherentpath.com *.igodigital.com *.bing.com *.google.com *.paypalobjects.com *.braintreegateway.com *.dynamicyield.com *.gstatic.com *.paypal.com *.micpn.com *.clicktale.net *.yimg.com *.liadm.com *.ads-twitter.com *.pinimg.com *.facebook.net *.tiktok.com *.vibescm.com sc-static.net *.googletagmanager.com *.google-analytics.com *.cnnx.link *.taboola.com *.impactradius-event.com *.ada.support *.googletagservices.com *.indexww.com *.googlesyndication.com *.bazaarvoice.com *.tagdelivery.com *.bambuser.com *.googleadservices.com *.rokt.com *.fohr.co *.recaptcha.net cadent.tv z.moatads.com *.confiant-integrations.net *.crossingminds.com *.33across.com id5-sync.com id.crwdcntrl.net *.adsrvr.org *.getamigo.io *.amigoclienttesting.io *.goodgrowth.tech *.sharethrough.com *.contentsquare.net *.noibu.com *.id5-sync.com *.adtrafficquality.google *.promoteiq.com *.cnnx.link *.granify.com *.redditstatic.com *.getmetrical.com ucm-us.verint-cdn.com *.usw2.pure.cloud *.newrelic.com *.nr-data.net; style-src 'self' 'unsafe-inline' blob: data: *.kohls.com *.licdn.com kohlsblog.wpengine.com cdn.honey.io *.flippenterprise.net *.fontawesome.com *.kohlslocal.com *.loudcrowd.com *.quantcount.com *.googleapis.com *.bazaarvoice.com *.dynamicyield.com *.crossingminds.com *.getmetrical.com ucm-us.verint-cdn.com; img-src 'self' blob: data: *.kohls.com *.cdnwidget.com imagedelivery.net pdimg-prod-fmv3.findmine.com *.yahoodns.net a.wishabi.com f.wishabi.net *.cloudfront.net *.dotomi.com *.youtube.com lb.eu-1-id5-sync.com lb.eu-2-id5-sync.com lb.eu-3-id5-sync.com lb.eu-4-id5-sync.com lb.us-1-id5-sync.com lb.us-2-id5-sync.com *.id5-sync.com *.fastclick.net *.adsensecustomsearchads.com *.doubleclick.net *.licdn.com *.scorecardresearch.com *.adnxs.com *.clicktale.net cdn.honey.io *.kohlsimg.com *.casalemedia.com *.yahoo.com *.fontawesome.com *.loudcrowd.com *.fbsbx.com kohlsblog.wpengine.com *.syndigo.com *.syndigo.cloud *.adcanvas.com *.googleadservices.com *.quantserve.com *.vibescm.com *.quantcount.com www.ojrq.net *.flippenterprise.net *.liadm.com *.rlcdn.com *.media.net us-u.openx.net *.rubiconproject.com *.demdex.net *.everesttech.net prodeastusmappscreative.azureedge.net *.pubmatic.com *.yimg.com *.kohlslocal.com *.gstatic.com *.doubleverify.com *.flashtalking.com *.advertising.com *.googleapis.com cdn.cookielaw.org *.fohr.co *.webcollage.net *.adsafeprotected.com *.curalate.com *.3lift.com *.dynamicyield.com *.stylitics.com dpm.demdex.net *.micpn.com cm.everesttech.net *.googletagmanager.com services.postcodeanywhere.co.uk *.bing.com *.paypal.com *.google.com t.co *.twitter.com *.pinterest.com *.facebook.com *.google-analytics.com *.taboola.com *.2mdn.net *.admedia.com *.admarketplace.net *.igodigital.com trkn.us *.4cinsights.com *.bazaarvoice.com *.tagdelivery.com *.bizrate.com *.googlesyndication.com *.adxcel-ec2.com *.kohlsimg.com *.fohr.co cadent.tv z.moatads.com *.confiant-integrations.net *.bttrack.com *.33across.com id5-sync.com id.crwdcntrl.net match.adsrvr.org *.getamigo.io *.amigoclienttesting.io *.goodgrowth.tech *.sharethrough.com *.contentsquare.net events.bouncex.net lh3.googleusercontent.com *.adtrafficquality.google *.promoteiq.com google.com www.akamai.com s-a.innovid.com *.granify.com *.reddit.com *.getmetrical.com ucm-us.verint-cdn.com survey.vovici.com *.usw2.pure.cloud; connect-src 'self' data: *.kohls.com *.domdog.io kohls.koddi.io *.findmine.com *.yahoodns.net lb.eu-1-id5-sync.com lb.eu-2-id5-sync.com lb.eu-3-id5-sync.com lb.eu-4-id5-sync.com lb.us-1-id5-sync.com lb.us-2-id5-sync.com *.id5-sync.com *.babylist.com *.bttrack.com *.kargo.com *.cloudfront.net *.dotomi.com *.fastclick.net *.evergage.com *.casalemedia.com *.iesnare.com *.syndigo.com *.syndigo.cloud *.adeptmind.ai endpoint.dlp-webservices.prod.dlp.adeptmind.net plausible.io *.loudcrowd.com *.fontawesome.com *.flippenterprise.net *.flipp.com *.flippback.com *.ampproject.org s.update.ib.adnxs.net *.kohlslocal.com *.google-analytics.com *.flashtalking.com *.onetrust.com cdn.cookielaw.org *.fohr.co p.tvpixel.com *.tagdelivery.com *.doubleverify.com *.adnxs.com *.curalate.com *.googleapis.com hb.emxdgt.com *.pubmatic.com *.gstatic.com *.rlcdn.com *.google.com *.yahoo.com *.facebook.com *.akstat.io *.rubiconproject.com *.3lift.com *.snapchat.com *.tiktok.com *.bing.com *.paypal.com *.techlab-cdn.com *.omtrdc.net *.go-mpulse.net *.dynatrace.com *.dynamicyield.com *.yimg.com *.liadm.com *.clicktale.net *.pinterest.com *.taboola.com *.braintree-api.com *.braintreegateway.com *.addressy.com dpm.demdex.net *.ada.support *.doubleclick.net *.googlesyndication.com *.bazaarvoice.com kohls.sjv.io *.coherentpath.com *.fohr.co *.contentsquare.net *.crossingminds.com *.33across.com id5-sync.com id.crwdcntrl.net *.adsrvr.org d.impct.site/d *.getamigo.io *.amigoclienttesting.io *.goodgrowth.tech *.sharethrough.com *.media.net events.bouncex.net *.cdnwidget.com *.cdnbasket.net *.noibu.com *.adtrafficquality.google google.com *.bizrate.com *.granify.com *.reddit.com *.redditstatic.com redditstatic.com *.getmetrical.com ucm-us.verint-cdn.com survey.vovici.com hoover.foresee.com *.xmverint.com analytics.foresee.com *.usw2.pure.cloud production-platform-media.s3.amazonaws.com www.googleadservices.com *.nr-data.net shyrka-prod-usw2.s3.us-west-2.amazonaws.com *.newrelic.com; frame-src 'self' data: survey.vovici.com *.curalate.com lb.eu-1-id5-sync.com lb.eu-2-id5-sync.com lb.eu-3-id5-sync.com lb.eu-4-id5-sync.com lb.us-1-id5-sync.com lb.us-2-id5-sync.com diagnostics.id5-sync.com *.babylist.com *.indexww.com *.brealtime.com *.2mdn.net *.adnxs.com *.rewardstyle.com *.googletagservices.com *.collectivevoice.com secure.opinionlab.com *.casalemedia.com player.vimeo.com *.youtube.com *.syndigo.com *.syndigo.cloud *.bambuser.com *.bazaarvoice.com eus.rubiconproject.com *.3lift.com *.media.net *.pubmatic.com core-gp.firstinsight.com tsdtocl.com tr.snapchat.com *.rokt.com *.google.com *.liadm.com *.pinterest.com *.doubleclick.net kohls.demdex.net *.paypal.com *.facebook.com *.ada.support *.rlcdn.com *.googlesyndication.com *.flashtalking.com *.recaptcha.net *.33across.com id5-sync.com id.crwdcntrl.net *.adsrvr.org *.sharethrough.com *.googletagmanager.com *.adtrafficquality.google *.taboola.com; worker-src 'self' blob: *.clicktale.net *.contentsquare.net *.noibu.com; child-src 'self' blob: *.clicktale.net *.contentsquare.net *.usw2.pure.cloud; font-src 'self' data: cdn.honey.io cdnjs.cloudflare.com *.kohls.com *.syndigo.com *.bazaarvoice.com *.syndigo.cloud *.fontawesome.com *.kohlslocal.com *.gstatic.com *.paypalobjects.com *.rakuten.com ucm-us.verint-cdn.com; form-action 'self' *.kohls.com *.facebook.com *.bazaarvoice.com secure.opinionlab.com *.snapchat.com *.pinterest.com; base-uri 'self' *.kohls.com; frame-ancestors 'self'; manifest-src 'self' *.kohls.com *.bazaarvoice.com; media-src 'self' blob: *.kohlsimg.com *.iesnare.com *.bazaarvoice.com *.loudcrowd.com *.fbsbx.com *.bing.com *.syndigo.com *.syndigo.cloud *.curalate.com *.usw2.pure.cloud; object-src 'self' *.getamigo.io *.amigoclienttesting.io *.goodgrowth.tech *.usw2.pure.cloud; report-uri https://csp38.domdog.io/report-uri/a9a6fb14-365a-4648-b17b-2e47930f8b49/1/1-86/block;

text/html;charset=utf-8

Fri, 15 Aug 2025 02:49:02 GMT

ENABLED

Fri, 15 Aug 2025 02:49:02 GMT

no-cache

edge; dur=12 cdn-cache; desc=HIT ak_p; desc="1755226142300_3089012111_75491133_1172_70339_11_19_-";dur=1

max-age=15768000 ; preload

chunked

Accept-Encoding

route=/content/hometest.html&variant=test

9 48569 0 pmb=mRUM,3

nosniff

SAMEORIGIN

Fri, 15 Aug 2025 04:59:59 GMT Fri, 15 Aug 2025 04:59:59 GMT Fri, 15 Aug 2025 04:59:59 GMT Fri, 15 Aug 2025 04:59:59 GMT

cache-sjc1000145-SJC

S1755203351.468634,VS0,VS0,VE403

aem

0

publish