HTTP/1.1 200 OK
Date: Fri, 15 Jan 2021 12:54:07 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 456113
Connection: keep-alive
Vary: Accept-Encoding
Vary: Accept-Encoding
Set-Cookie: PHPSESSID=i5mrudllbp5c7gkjt1sv738lnc; expires=Fri, 15-Jan-2021 13:54:06 GMT; Max-Age=3600; path=/; domain=.vibranthobbies.com; secure; HttpOnly
Set-Cookie: X-Magento-Vary=68a7c36f7c19f8a8aa05f6170d42a7ffb5555194; expires=Fri, 15-Jan-2021 13:54:07 GMT; Max-Age=3600; path=/; secure; HttpOnly; SameSite=Lax
Content-Security-Policy: frame-ancestors 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; form-action www.boardgamesindia.com www.vibranthobbies.com secure.authorize.net test.authorize.net *.twitter.com *.cdninstagram.com s7.addthis.com *.addthis.com *.moatads.com *.addthisedge.com *.facebook.com *.googleapis.com *.placeholder.com 'self' 'unsafe-inline'; media-src data: 'self' 'unsafe-inline'; worker-src blob:; font-src static.boardgamesindia.com dsiapzqk83q7s.cloudfront.net data: www.boardgamesindia.com www.vibranthobbies.com *.fontawesome.com *.cloudflare.com *.twitter.com *.gstatic.com *.typekit.net *.twimg.com *.trustedshops.com *.googleapis.com *.sandbox.paypal.com *.youtube.com *.paypal.com *.googleadservices.com *.google-analytics.com *.google.com *.cdninstagram.com s7.addthis.com *.addthis.com *.moatads.com *.addthisedge.com *.facebook.com *.placeholder.com 'self' 'unsafe-inline'; connect-src m.addthis.com static.boardgamesindia.com dsiapzqk83q7s.cloudfront.net www.boardgamesindia.com gj.track.uc.cn uc.gre pluginx.uc.local www.vibranthobbies.com *.cloudflare.com *.twitter.com *.paypal.com *.twimg.com *.google.com *.youtube.com *.cdninstagram.com s7.addthis.com *.addthis.com *.moatads.com *.addthisedge.com *.facebook.com *.googleapis.com *.placeholder.com cdn.lightwidget.com lightwidget.com 'self' 'unsafe-inline'; img-src data: media.boardgamesindia.com static.boardgamesindia.com dsiapzqk83q7s.cloudfront.net www.catan.com v1.addthisedge.com images-cdn.asmodee.us maps.gstatic.com maps.googleapis.com www.boardgamesindia.com www.gstatic.com i.ytimg.com www.facebook.com blob: www.vibranthobbies.com omnisrc.com widgets.magentocommerce.com www.paypalobjects.com t.paypal.com www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com s.ytimg.com https://wt.soundestlink.com *.cloudflare.com *.klarna.com *.googleadservices.com *.google-analytics.com *.paypal.com *.twitter.com *.twimg.com *.ytimg.com 'self' data: *.lightemporium.com *.usercentrics.eu *.cdninstagram.com *.google.com *.youtube.com s7.addthis.com *.addthis.com *.moatads.com *.addthisedge.com *.facebook.com *.googleapis.com *.placeholder.com cdn.lightwidget.com lightwidget.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline'; frame-src www.google.com platform.twitter.com s7.addthis.com www.facebook.com m.facebook.com www.youtube.com web.facebook.com secure.authorize.net test.authorize.net www.paypal.com www.sandbox.paypal.com *.twitter.com *.google.com *.youtube.com *.cdninstagram.com *.addthis.com *.moatads.com *.addthisedge.com *.facebook.com *.googleapis.com *.placeholder.com cdn.lightwidget.com lightwidget.com 'self' 'unsafe-inline'; script-src www.google.com www.gstatic.com s7.addthis.com v1.addthisedge.com connect.facebook.net api-public.addthis.com m.addthis.com static.boardgamesindia.com dsiapzqk83q7s.cloudfront.net maps.googleapis.com www.boardgamesindia.com www.vibranthobbies.com assets.adobedtm.com secure.authorize.net test.authorize.net www.paypalobjects.com js.braintreegateway.com www.paypal.com www.sandbox.paypal.com t.paypal.com s.ytimg.com video.google.com vimeo.com www.vimeo.com www.youtube.com *.avada.io https://omnisrc.com https://forms.soundestlink.com *.cloudflare.com *.twitter.com *.google-analytics.com *.twimg.com *.gstatic.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.google.com *.youtube.com *.instagram.com *.cdninstagram.com *.addthis.com *.moatads.com *.addthisedge.com *.googleapis.com *.placeholder.com cdn.lightwidget.com lightwidget.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com static.boardgamesindia.com dsiapzqk83q7s.cloudfront.net www.boardgamesindia.com media.boardgamesindia.com www.vibranthobbies.com getfirebug.com *.fontawesome.com *.cloudflare.com *.googleapis.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.google.com *.youtube.com *.cdninstagram.com s7.addthis.com *.addthis.com *.moatads.com *.addthisedge.com *.facebook.com *.placeholder.com cdn.lightwidget.com lightwidget.com 'self' 'unsafe-inline'; report-uri https://www.vibranthobbies.com/fl32csp/report/;
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Pragma: no-cache
Expires: -1
Cache-Control: no-store, no-cache, must-revalidate, max-age=0
Accept-Ranges: bytes
Server: nginx-more
Strict-Transport-Security: max-age=63072000