29 technologies5 categories
hydroflask.com is built on Hyva Themes with Cloudflare and Livewire. It ranks #89,130 globally.
The frontend relies on Livewire. Analytics are handled by Cloudflare Browser Insights and Google Tag Manager. Infrastructure includes Cloudflare and Cloudflare DNS.
Tech Stack Highlights
Core Platform1
Hyva Themes
Ecommerce
100%
2 evidence signals
Header
^Hyva Themes$: Hyva ThemesJS Global
hyva → objectFrameworks & Languages4
Livewire
Web frameworks
100%
2 evidence signals
HTML
<script wire:Script
https://www.hydroflask.com/static/version1771500158/frontend/MagebitHoT/hydroflask/en_US/Magewirephp_Magewire/js/livewire.min.jsTailwind CSS
UI frameworks
75%
1 evidence signal
css
--tw-Alpine.js
JavaScript frameworks
75%
1 evidence signal
HTML
implied by Hyva ThemesLaravel
Web frameworks
75%
1 evidence signal
HTML
implied by LivewireAnalytics & Marketing6
K
Klaviyo
Marketing automation
100%
19 evidence signals
Script
https://static.klaviyo.com/onsite/js/P2XAyk/klaviyo.jsScript
https://static-tracking.klaviyo.com/onsite/js/build-preview/commit-5a000fd8321a59a66661da19ca3ffc6b8f5fbe87/fender_analytics.e5aba8b3a52dc623782c.js?cb=2Script
https://static-tracking.klaviyo.com/onsite/js/build-preview/commit-5a000fd8321a59a66661da19ca3ffc6b8f5fbe87/static.a7213474e9c17eda8d74.js?cb=2Script
https://static-tracking.klaviyo.com/onsite/js/build-preview/commit-5a000fd8321a59a66661da19ca3ffc6b8f5fbe87/vendors~static~in_app_forms~signup_forms~post_identification_sync~web_personalization~client_identity~reviews~telemetry~customerHubRoot~renderFavoritesButton~renderFavoritesIconButton~renderFaqWidget~.424a192f2c6d07c77056.js?cb=2Script
https://static.klaviyo.com/onsite/js/build-preview/commit-5a000fd8321a59a66661da19ca3ffc6b8f5fbe87/runtime.06c3df5a9558b794b5ed.js?cb=2Script
https://static.klaviyo.com/onsite/js/build-preview/commit-5a000fd8321a59a66661da19ca3ffc6b8f5fbe87/sharedUtils.bb1f565630cf3280d4d8.js?cb=2Script
https://static.klaviyo.com/onsite/js/build-preview/commit-5a000fd8321a59a66661da19ca3ffc6b8f5fbe87/vendors~static~in_app_forms~signup_forms~post_identification_sync~web_personalization~client_identity~reviews~telemetry~customerHubRoot~renderFavoritesButton~renderFavoritesIconButton~renderFaqWidget~.424a192f2c6d07c77056.js?cb=2Script
https://static.klaviyo.com/onsite/js/build-preview/commit-5a000fd8321a59a66661da19ca3ffc6b8f5fbe87/vendors~in_app_forms~signup_forms~client_identity~telemetry~onsite-triggering-v2~onsite-triggering~.425fcedacc97d79cadbe.js?cb=2Script
https://static.klaviyo.com/onsite/js/build-preview/commit-5a000fd8321a59a66661da19ca3ffc6b8f5fbe87/vendors~in_app_forms~signup_forms~reviews~atlas.0201e888d834a3782e3a.js?cb=2Script
https://static.klaviyo.com/onsite/js/build-preview/commit-5a000fd8321a59a66661da19ca3ffc6b8f5fbe87/vendors~in_app_forms~signup_forms.a899b049d575de74ade1.js?cb=2Script
https://static.klaviyo.com/onsite/js/build-preview/commit-5a000fd8321a59a66661da19ca3ffc6b8f5fbe87/default~in_app_forms~signup_forms.395d548ac34d4f28faaa.js?cb=2Script
https://static.klaviyo.com/onsite/js/build-preview/commit-5a000fd8321a59a66661da19ca3ffc6b8f5fbe87/signup_forms.be0a228c1ff81a6c473e.js?cb=2Script
https://static-tracking.klaviyo.com/onsite/js/build-preview/commit-5a000fd8321a59a66661da19ca3ffc6b8f5fbe87/post_identification_sync.237b6de72001b0efc6d9.js?cb=2Script
https://static-tracking.klaviyo.com/onsite/js/build-preview/commit-5a000fd8321a59a66661da19ca3ffc6b8f5fbe87/web_personalization.90468810c650ec47b93c.js?cb=2Script
https://static.klaviyo.com/onsite/js/build-preview/commit-5a000fd8321a59a66661da19ca3ffc6b8f5fbe87/event_adapter.55fd5609327fc1ee72d1.js?cb=2Script
https://static-tracking.klaviyo.com/onsite/js/build-preview/commit-5a000fd8321a59a66661da19ca3ffc6b8f5fbe87/vendors~in_app_forms~signup_forms~client_identity~telemetry~onsite-triggering-v2~onsite-triggering~.425fcedacc97d79cadbe.js?cb=2Script
https://static-tracking.klaviyo.com/onsite/js/build-preview/commit-5a000fd8321a59a66661da19ca3ffc6b8f5fbe87/telemetry.9ecc82be483a86a039e9.js?cb=2JS Global
klaviyo → objectstylesheet
https://static.klaviyo.com/onsite/js/build-preview/commit-5a000fd8321a59a66661da19ca3ffc6b8f5fbe87/532.f5cf641d94bc70223e6f.cssS
SendGrid
Email
100%
1 evidence signal
dns
DKIM selector: s1P
Proofpoint
Email
100%
1 evidence signal
dns
MX: mxb-006e9a01.gslb.pphosted.comCloudflare Browser Insights
Analytics
75%
1 evidence signal
Script
https://static.cloudflareinsights.com/beacon.min.js/v67327c56f0bb4ef8b305cae61679db8f1769101564043Google Tag Manager
Tag managers
75%
1 evidence signal
JS Global
dataLayer → objectYotpo Reviews
Reviews
75%
3 evidence signals
Script
https://cdn-widgetsrepository.yotpo.com/widget-assets/yotpo-pixel/2025-12-31_09-59-10/bundle.jsScript
https://cdn-widgetsrepository.yotpo.com/widget-assets/widgets-initializer/app.v0.9.8-7487.jsScript
https://cdn-widgetsrepository.yotpo.com/v1/loader/RNN35rs18EnLthc4o4cfcwInfrastructure & Security10
Cloudflare
CDN
100%
3 evidence signals
Header
9d6019d2ed95fa82-SJCHeader
cloudflare: cloudflareCookie
__cf_bmKustomer
SaaS
100%
3 evidence signals
Script
https://cdn.kustomerapp.com/chat-web/release-v0.1.429/widget-api.f01548e010148205886b.jsScript
https://cdn.kustomerapp.com/chat-web/widget.jsJS Global
Kustomer → objectC
Cloudflare DNS
PaaS
100%
1 evidence signal
dns
NS: vin.ns.cloudflare.comHSTS
Security
75%
1 evidence signal
Header
max-age=31557600
Amazon S3
CDN
75%
1 evidence signal
Header
s3[^ ]*amazonaws\.com: base-uri 'self' 'unsafe-inline' 'unsafe-eval'; child-src assets.braintreegateway.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; connect-src *.amazon-adsystem.com *.stripe.network www.recaptcha.net yotpo-media-temporary.s3.amazonaws.com evnt.byspotify.com *.tiktok.com *.teads.tv *.googlesyndication.com *.addressy.com *.klaviyo.com *.datadome.co insights.algolia.io *.locally.com *.yottaa.net hydro-flask.pxf.io adservice.google.com www.google.com google.com cdn.kustomerapp.com links.services.disqus.com analytics.google.com *.sdiapi.com dpm.demdex.net *.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com *.adobe.io performance.typekit.net commerce.adobedtm.com commerce.adobedc.net api.magento.com www.sandbox.paypal.com www.paypalobjects.com commerce.adobe.io commerce.adobe.net qa-api.magedevteam.com *.algolia.net *.algolia.com *.algolianet.com *.yotpo.com ekr.zdassets.com/ *.iterable.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com gov-bam.nr-data.net bam.nr-data.net stats.g.doubleclick.net *.oxo.com helenoftroy.tt.omtrdc.net hydroflask-sandbox.api.kustomerapp.com oxo-sandbox.api.kustomerapp.com hydroflask.api.kustomerapp.com oxo.api.kustomerapp.com services.postcodeanywhere.co.uk *.parcellab.com *.rapidspike.com *.brilliantcollector.com vimeo.com *.clarity.ms bat.bing.com *.kaltura.com *.spectrumcustomizer.com *.acq.io ssl.geoplugin.net *.yimg.com *.pndsn.com m.addthis.com ct.pinterest.com pinterest.com ak.sail-horizon.com www.facebook.com public.fbot.me api.sail-personalize.com 'self' 'unsafe-inline' googletagmanager.com *.googletagmanager.com *.analytics.google.com *.g.doubleclick.net *.google.com www.googleadservices.com *.google-analytics.com *.trustarc.com cdn.jsdelivr.net services.sheerid.com mpsnare.iesnare.com *.vimeo.com api.firmly.work api.firmly.tools api.firmly.online p2iqhncxyh.execute-api.eu-central-1.amazonaws.com maps.googleapis.com player.vimeo.com *.crobox.com www.wepowerconnections.com d38xvr37kwwhcm.cloudfront.net r.lgrckt-in.com; font-src *.sdiapi.com *.klaviyo.com *.gstatic.com use.typekit.net *.yotpo.com *.googleapis.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.hydroflask.com *.oxo.com cdn.kustomerapp.com *.trustarc.com *.lightboxcdn.com *.spectrumcustomizer.com data: 'self' 'unsafe-inline' fonts.gstatic.com; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com secure.authorize.net test.authorize.net www.sandbox.paypal.com *.yotpo.com *.iterable.com *.cardinalcommerce.com *.paypal.com *.oxo.com *.brilliantcollector.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com 'self'; manifest-src 'self' 'unsafe-inline' www.google.com/pay; media-src download-video.akamaized.net *.kaltura.com cfvod.kaltura.com *.adobe.com *.oxo.com *.vimeocdn.com vod-progressive.akamaized.net blob: data: cdnapisec.kaltura.com 'self' 'unsafe-inline' *.vimeo.com; object-src 'self' 'unsafe-inline'; style-src *.adobe.com *.klaviyo.com *.yotpo.com *.googleapis.com mageside.com *.mageside.com *.oxo.com *.pcapredict.com services.postcodeanywhere.co.uk *.lightboxcdn.com *.parcellab.com disqus.com c.disquscdn.com disquscdn.com z.moatads.com moatads.com addthisedge.com v1.addthisedge.com m.addthis.com v1.addthis.com addthis.com loggly.com logs-01.loggly.com ct.pinterest.com pinterest.com s.pinimg.com pinimg.com 'self' 'unsafe-inline' googletagmanager.com *.googletagmanager.com tagmanager.google.com fonts.googleapis.com cdn.jsdelivr.net; worker-src 'self' 'unsafe-inline' 'unsafe-eval' hydroflask.com/p/1/2 blob:; upgrade-insecure-requests; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=6n6HZX1NkOEZBSz785fPM0libYqa6gyjUE6C5bDf1u0-1772451356.6268048-1.0.1.1-cBmOoTOsPLIv1U47LMxiTBvwybQzFOIiv1AkXFT.vLf5l.ttoR69srrA3MKwRcet1wAOOKYZtsRqHm6ZoBZo7RNiyhWGYprVCRklirthBFz7LfqTdCDx7fcTDBMP1vRf3YcyAibjJHCEfGyWc0u5KCUttoUB5Gmv1JdWUCDGbpeMI.AR6GrgDgBDA9GP45vRT0kFUwWStF93aekuoWnjag; report-to cf-iqpxnvizavhjtvpe
frame-src *.stripe.network www.recaptcha.net *.trustarc.com *.criteo.com *.criteo.net *.kmail-lists.com *.shopstylecollective.com app.collectivevoiceqa.com app.collectivevoice.com collectivevoice.com shopstylecollective.com *.googlesyndication.com *.sdiapi.com fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com secure.authorize.net test.authorize.net www.sandbox.paypal.com player.vimeo.com *.youtube.com *.yotpo.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com doubleclick.net *.doubleclick.net hydroflask.attn.tv *.oxo.com *.lightboxcdn.com *.hydroflask.com *.brilliantcollector.com *.demdex.net *.kustomer.support *.kustomer.help *.locally.com *.facebook.com *.fbot.me addthisedge.com s7.addthis.com addthis.com disqus.com ct.pinterest.com pinterest.com insight.adsrvr.org match.adsrvr.org helenoftroy.custhelp.com s.amazon-adsystem.com ak.sail-horizon.com helenoftroy.demdex.net promotions.spredfast.com 'self' 'unsafe-inline' *.googletagmanager.com bid.g.doubleclick.net td.doubleclick.net *.fls.doubleclick.net www.google.com/recaptcha/ services.sheerid.com geo.captcha-delivery.com www.awin1.com; img-src www.ojrq.net *.tiktok.com *.teads.tv cdnjs.cloudflare.com *.criteo.com *.criteo.net *.klaviyo.com *.cloudfront.net track.securedvisit.com match.adsrvr.org tracking.avantlink.com *.bazaarvoice.com insight.adsrvr.org googleads.g.doubleclick.net *.google.co.in google.co.in ce.lijit.com links.services.disqus.com cdn.viglink.com analytics.google.com www.google.com *.baidu.com *.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com p.typekit.net www.paypalobjects.com *.ftcdn.net *.behance.net fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com validator.swagger.io *.yotpo.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com *.paypal.com mageside.com *.mageside.com *.hydroflask.com hydroflask.attn.tv *.oxo.com *.lightboxcdn.com na-stage.hele.digital *.parcellab.com *.trustarc.com cfvod.kaltura.com *.bing.com *.clarity.ms *.hele.digital via.placeholder.com *.locally.com *.spectrumcustomizer.com stospectstageglobal.blob.core.windows.net blob: cdn.kustomerapp.com *.acq.io *.yimg.com loggly.com logs-01.loggly.com referrer.disqus.com c.disquscdn.com ct.pinterest.com pinterest.com sp.analytics.yahoo.com *.facebook.com scontent-iad3-2.cdninstagram.com stospectprodglobal.blob.core.windows.net 'self' 'unsafe-inline' google.com www.gstatic.com ssl.gstatic.com googletagmanager.com *.googletagmanager.com fonts.googleapis.com *.google-analytics.com *.analytics.google.com *.g.doubleclick.net *.fls.doubleclick.net ad.doubleclick.net ade.googlesyndication.com img.youtube.com *.google.com services.sheerid.com *.dl.dropboxusercontent.com *.dropbox.com *.crobox.com *.crobox.io www.awin1.com; script-src cdnjs.cloudflare.com *.amazon-adsystem.com *.stripe.network www.recaptcha.net ajax.cloudflare.com pixel.byspotify.com *.teads.tv *.kervinteractive.com *.tiktok.com *.yottaa.net *.yottaa.com *.klaviyo.com safevisit.online *.criteo.com *.criteo.net *.impactcdn.com *.shopstylecollective.com app.collectivevoiceqa.com app.collectivevoice.com collectivevoice.com shopstylecollective.com *.rkdms.com lsdm.co track.securedvisit.com *.googlesyndication.com *.bazaarvoice.com ssl.avmws.com cdn.avmws.com analytics-static.ugc.bazaarvoice.com apps.bazaarvoice.com c.disquscdn.com cdn.kustomerapp.com unpkg.com *.sdiapi.com f.vimeocdn.com *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com secure.authorize.net test.authorize.net www.google-analytics.com assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net www.paypalobjects.com js.braintreegateway.com commerce.adobedtm.com commerce.adobe.net www.sandbox.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com *.vimeocdn.com *.yotpo.com s7.addthis.com *.iterable.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com assets.braintreegateway.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com js-agent.newrelic.com bam.nr-data.net bam-cell.nr-data.net mageside.com *.mageside.com doubleclick.net *.hydroflask.com *.oxo.com *.pcapredict.com *.lightboxcdn.com *.locally.com lightboxapi.azurewebsites.net *.fbot.me services.postcodeanywhere.co.uk *.parcellab.com *.trustarc.com cdn-assets.rapidspike.com cdnapisec.kaltura.com *.brilliantcollector.com js.stripe.com connect.facebook.net bat.bing.com *.clarity.ms *.spectrumcustomizer.com js.acq.io ssl.geoplugin.net *.yimg.com ajax.googleapis.com cdn.pushplanet.com *.cloudfront.net moatads.com z.moatads.com addthisedge.com v1.addthisedge.com m.addthis.com v1.addthis.com addthis.com loggly.com logs-01.loggly.com hydroflask.disqus.com ct.pinterest.com pinterest.com s.pinimg.com pinimg.com *.impactradius-event.com js.adsrvr.org insight.adsrvr.org ak.sail-horizon.com 'self' 'unsafe-inline' 'unsafe-eval' googletagmanager.com *.googletagmanager.com tagmanager.google.com www.gstatic.com/recaptcha/ www.google.com/recaptcha/ www.googleadservices.com www.google.com googleads.g.doubleclick.net cdn.jsdelivr.net mpsnare.iesnare.com d5yoctgpv4cpx.cloudfront.net maps.googleapis.com *.crobox.io *.crobox.com *.vimeo.com *.cloudflareinsights.com www.awin1.com www.dwin1.com lantern.roeyecdn.com cdn.fonts.net *.safevisit.online r.lgrckt-in.com cdn.lgrckt-in.com; worker-src 'self' 'unsafe-inline' 'unsafe-eval' hydroflask.com/p/2/2 blob:; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=5_M7P4pfBcqdlI4mS9m9DarCsRS89F_xGWjJGnSPOrY-1772451356.6268048-1.0.1.1-a8KakbeUMIJWcBplYNPOcW2UDHorDNSGcDMqM4HKayNKC93Xzi_ITv3RNpKMHjr7KBaXk0AaXOO6sK6wIUnNYaDqkGDvIX4zyznUnod1t5wka8MRhDEbKIEVadmgANbdeKsQCRK5bDr0i8AudR.8.ZsZ2k0LaVANZVMV.zWYpOd2cDPit36vW8sdo0gWy34.ZcgfmHvkm8pUla1sCJihHA; report-to cf-zdoifhyfashvqeukCloudflare Bot Management
Security
75%
1 evidence signal
Cookie
__cf_bmTrustArc
Cookie compliance
75%
4 evidence signals
Script
https://consent.trustarc.com/autoblockasset/core.min.js?domain=www.hydroflask.comScript
https://consent.trustarc.com/autoblockoptout?domain=www.hydroflask.comScript
https://consent.trustarc.com/notice?domain=www.hydroflask.com&c=teconsent&js=nj¬iceType=bb&text=true>m=true&privacypolicylink=https%3A%2F%2Fwww.hydroflask.com%2FprivacyScript
https://consent.trustarc.com/asset/notice.js/v/v1.7-7241Cloudflare Zaraz
Performance
75%
2 evidence signals
JS Global
zaraz → objectJS Global
zarazData → objectPlatform.sh
PaaS
75%
1 evidence signal
Header
i-0c294fe8fe2b2ea99
i-0c294fe8fe2b2ea99Amazon Web Services
PaaS
50%
1 evidence signal
HTML
implied by Amazon S3Libraries & Utilities8
core-js
JavaScript libraries
75%
1 evidence signal
JS Global
__core-js_shared__ → objectPayPal
Payment processors
75%
1 evidence signal
Header
\.paypal\.com: base-uri 'self' 'unsafe-inline' 'unsafe-eval'; child-src assets.braintreegateway.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; connect-src *.amazon-adsystem.com *.stripe.network www.recaptcha.net yotpo-media-temporary.s3.amazonaws.com evnt.byspotify.com *.tiktok.com *.teads.tv *.googlesyndication.com *.addressy.com *.klaviyo.com *.datadome.co insights.algolia.io *.locally.com *.yottaa.net hydro-flask.pxf.io adservice.google.com www.google.com google.com cdn.kustomerapp.com links.services.disqus.com analytics.google.com *.sdiapi.com dpm.demdex.net *.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com *.adobe.io performance.typekit.net commerce.adobedtm.com commerce.adobedc.net api.magento.com www.sandbox.paypal.com www.paypalobjects.com commerce.adobe.io commerce.adobe.net qa-api.magedevteam.com *.algolia.net *.algolia.com *.algolianet.com *.yotpo.com ekr.zdassets.com/ *.iterable.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com gov-bam.nr-data.net bam.nr-data.net stats.g.doubleclick.net *.oxo.com helenoftroy.tt.omtrdc.net hydroflask-sandbox.api.kustomerapp.com oxo-sandbox.api.kustomerapp.com hydroflask.api.kustomerapp.com oxo.api.kustomerapp.com services.postcodeanywhere.co.uk *.parcellab.com *.rapidspike.com *.brilliantcollector.com vimeo.com *.clarity.ms bat.bing.com *.kaltura.com *.spectrumcustomizer.com *.acq.io ssl.geoplugin.net *.yimg.com *.pndsn.com m.addthis.com ct.pinterest.com pinterest.com ak.sail-horizon.com www.facebook.com public.fbot.me api.sail-personalize.com 'self' 'unsafe-inline' googletagmanager.com *.googletagmanager.com *.analytics.google.com *.g.doubleclick.net *.google.com www.googleadservices.com *.google-analytics.com *.trustarc.com cdn.jsdelivr.net services.sheerid.com mpsnare.iesnare.com *.vimeo.com api.firmly.work api.firmly.tools api.firmly.online p2iqhncxyh.execute-api.eu-central-1.amazonaws.com maps.googleapis.com player.vimeo.com *.crobox.com www.wepowerconnections.com d38xvr37kwwhcm.cloudfront.net r.lgrckt-in.com; font-src *.sdiapi.com *.klaviyo.com *.gstatic.com use.typekit.net *.yotpo.com *.googleapis.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.hydroflask.com *.oxo.com cdn.kustomerapp.com *.trustarc.com *.lightboxcdn.com *.spectrumcustomizer.com data: 'self' 'unsafe-inline' fonts.gstatic.com; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com secure.authorize.net test.authorize.net www.sandbox.paypal.com *.yotpo.com *.iterable.com *.cardinalcommerce.com *.paypal.com *.oxo.com *.brilliantcollector.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com 'self'; manifest-src 'self' 'unsafe-inline' www.google.com/pay; media-src download-video.akamaized.net *.kaltura.com cfvod.kaltura.com *.adobe.com *.oxo.com *.vimeocdn.com vod-progressive.akamaized.net blob: data: cdnapisec.kaltura.com 'self' 'unsafe-inline' *.vimeo.com; object-src 'self' 'unsafe-inline'; style-src *.adobe.com *.klaviyo.com *.yotpo.com *.googleapis.com mageside.com *.mageside.com *.oxo.com *.pcapredict.com services.postcodeanywhere.co.uk *.lightboxcdn.com *.parcellab.com disqus.com c.disquscdn.com disquscdn.com z.moatads.com moatads.com addthisedge.com v1.addthisedge.com m.addthis.com v1.addthis.com addthis.com loggly.com logs-01.loggly.com ct.pinterest.com pinterest.com s.pinimg.com pinimg.com 'self' 'unsafe-inline' googletagmanager.com *.googletagmanager.com tagmanager.google.com fonts.googleapis.com cdn.jsdelivr.net; worker-src 'self' 'unsafe-inline' 'unsafe-eval' hydroflask.com/p/1/2 blob:; upgrade-insecure-requests; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=6n6HZX1NkOEZBSz785fPM0libYqa6gyjUE6C5bDf1u0-1772451356.6268048-1.0.1.1-cBmOoTOsPLIv1U47LMxiTBvwybQzFOIiv1AkXFT.vLf5l.ttoR69srrA3MKwRcet1wAOOKYZtsRqHm6ZoBZo7RNiyhWGYprVCRklirthBFz7LfqTdCDx7fcTDBMP1vRf3YcyAibjJHCEfGyWc0u5KCUttoUB5Gmv1JdWUCDGbpeMI.AR6GrgDgBDA9GP45vRT0kFUwWStF93aekuoWnjag; report-to cf-iqpxnvizavhjtvpe
frame-src *.stripe.network www.recaptcha.net *.trustarc.com *.criteo.com *.criteo.net *.kmail-lists.com *.shopstylecollective.com app.collectivevoiceqa.com app.collectivevoice.com collectivevoice.com shopstylecollective.com *.googlesyndication.com *.sdiapi.com fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com secure.authorize.net test.authorize.net www.sandbox.paypal.com player.vimeo.com *.youtube.com *.yotpo.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com doubleclick.net *.doubleclick.net hydroflask.attn.tv *.oxo.com *.lightboxcdn.com *.hydroflask.com *.brilliantcollector.com *.demdex.net *.kustomer.support *.kustomer.help *.locally.com *.facebook.com *.fbot.me addthisedge.com s7.addthis.com addthis.com disqus.com ct.pinterest.com pinterest.com insight.adsrvr.org match.adsrvr.org helenoftroy.custhelp.com s.amazon-adsystem.com ak.sail-horizon.com helenoftroy.demdex.net promotions.spredfast.com 'self' 'unsafe-inline' *.googletagmanager.com bid.g.doubleclick.net td.doubleclick.net *.fls.doubleclick.net www.google.com/recaptcha/ services.sheerid.com geo.captcha-delivery.com www.awin1.com; img-src www.ojrq.net *.tiktok.com *.teads.tv cdnjs.cloudflare.com *.criteo.com *.criteo.net *.klaviyo.com *.cloudfront.net track.securedvisit.com match.adsrvr.org tracking.avantlink.com *.bazaarvoice.com insight.adsrvr.org googleads.g.doubleclick.net *.google.co.in google.co.in ce.lijit.com links.services.disqus.com cdn.viglink.com analytics.google.com www.google.com *.baidu.com *.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com p.typekit.net www.paypalobjects.com *.ftcdn.net *.behance.net fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com validator.swagger.io *.yotpo.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com *.paypal.com mageside.com *.mageside.com *.hydroflask.com hydroflask.attn.tv *.oxo.com *.lightboxcdn.com na-stage.hele.digital *.parcellab.com *.trustarc.com cfvod.kaltura.com *.bing.com *.clarity.ms *.hele.digital via.placeholder.com *.locally.com *.spectrumcustomizer.com stospectstageglobal.blob.core.windows.net blob: cdn.kustomerapp.com *.acq.io *.yimg.com loggly.com logs-01.loggly.com referrer.disqus.com c.disquscdn.com ct.pinterest.com pinterest.com sp.analytics.yahoo.com *.facebook.com scontent-iad3-2.cdninstagram.com stospectprodglobal.blob.core.windows.net 'self' 'unsafe-inline' google.com www.gstatic.com ssl.gstatic.com googletagmanager.com *.googletagmanager.com fonts.googleapis.com *.google-analytics.com *.analytics.google.com *.g.doubleclick.net *.fls.doubleclick.net ad.doubleclick.net ade.googlesyndication.com img.youtube.com *.google.com services.sheerid.com *.dl.dropboxusercontent.com *.dropbox.com *.crobox.com *.crobox.io www.awin1.com; script-src cdnjs.cloudflare.com *.amazon-adsystem.com *.stripe.network www.recaptcha.net ajax.cloudflare.com pixel.byspotify.com *.teads.tv *.kervinteractive.com *.tiktok.com *.yottaa.net *.yottaa.com *.klaviyo.com safevisit.online *.criteo.com *.criteo.net *.impactcdn.com *.shopstylecollective.com app.collectivevoiceqa.com app.collectivevoice.com collectivevoice.com shopstylecollective.com *.rkdms.com lsdm.co track.securedvisit.com *.googlesyndication.com *.bazaarvoice.com ssl.avmws.com cdn.avmws.com analytics-static.ugc.bazaarvoice.com apps.bazaarvoice.com c.disquscdn.com cdn.kustomerapp.com unpkg.com *.sdiapi.com f.vimeocdn.com *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com secure.authorize.net test.authorize.net www.google-analytics.com assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net www.paypalobjects.com js.braintreegateway.com commerce.adobedtm.com commerce.adobe.net www.sandbox.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com *.vimeocdn.com *.yotpo.com s7.addthis.com *.iterable.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com assets.braintreegateway.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com js-agent.newrelic.com bam.nr-data.net bam-cell.nr-data.net mageside.com *.mageside.com doubleclick.net *.hydroflask.com *.oxo.com *.pcapredict.com *.lightboxcdn.com *.locally.com lightboxapi.azurewebsites.net *.fbot.me services.postcodeanywhere.co.uk *.parcellab.com *.trustarc.com cdn-assets.rapidspike.com cdnapisec.kaltura.com *.brilliantcollector.com js.stripe.com connect.facebook.net bat.bing.com *.clarity.ms *.spectrumcustomizer.com js.acq.io ssl.geoplugin.net *.yimg.com ajax.googleapis.com cdn.pushplanet.com *.cloudfront.net moatads.com z.moatads.com addthisedge.com v1.addthisedge.com m.addthis.com v1.addthis.com addthis.com loggly.com logs-01.loggly.com hydroflask.disqus.com ct.pinterest.com pinterest.com s.pinimg.com pinimg.com *.impactradius-event.com js.adsrvr.org insight.adsrvr.org ak.sail-horizon.com 'self' 'unsafe-inline' 'unsafe-eval' googletagmanager.com *.googletagmanager.com tagmanager.google.com www.gstatic.com/recaptcha/ www.google.com/recaptcha/ www.googleadservices.com www.google.com googleads.g.doubleclick.net cdn.jsdelivr.net mpsnare.iesnare.com d5yoctgpv4cpx.cloudfront.net maps.googleapis.com *.crobox.io *.crobox.com *.vimeo.com *.cloudflareinsights.com www.awin1.com www.dwin1.com lantern.roeyecdn.com cdn.fonts.net *.safevisit.online r.lgrckt-in.com cdn.lgrckt-in.com; worker-src 'self' 'unsafe-inline' 'unsafe-eval' hydroflask.com/p/2/2 blob:; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=5_M7P4pfBcqdlI4mS9m9DarCsRS89F_xGWjJGnSPOrY-1772451356.6268048-1.0.1.1-a8KakbeUMIJWcBplYNPOcW2UDHorDNSGcDMqM4HKayNKC93Xzi_ITv3RNpKMHjr7KBaXk0AaXOO6sK6wIUnNYaDqkGDvIX4zyznUnod1t5wka8MRhDEbKIEVadmgANbdeKsQCRK5bDr0i8AudR.8.ZsZ2k0LaVANZVMV.zWYpOd2cDPit36vW8sdo0gWy34.ZcgfmHvkm8pUla1sCJihHA; report-to cf-zdoifhyfashvqeukKlarna Checkout
Payment processors
75%
1 evidence signal
Header
\.klarna(?:cdn|services)\.(?:net|com): base-uri 'self' 'unsafe-inline' 'unsafe-eval'; child-src assets.braintreegateway.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; connect-src *.amazon-adsystem.com *.stripe.network www.recaptcha.net yotpo-media-temporary.s3.amazonaws.com evnt.byspotify.com *.tiktok.com *.teads.tv *.googlesyndication.com *.addressy.com *.klaviyo.com *.datadome.co insights.algolia.io *.locally.com *.yottaa.net hydro-flask.pxf.io adservice.google.com www.google.com google.com cdn.kustomerapp.com links.services.disqus.com analytics.google.com *.sdiapi.com dpm.demdex.net *.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com *.adobe.io performance.typekit.net commerce.adobedtm.com commerce.adobedc.net api.magento.com www.sandbox.paypal.com www.paypalobjects.com commerce.adobe.io commerce.adobe.net qa-api.magedevteam.com *.algolia.net *.algolia.com *.algolianet.com *.yotpo.com ekr.zdassets.com/ *.iterable.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com gov-bam.nr-data.net bam.nr-data.net stats.g.doubleclick.net *.oxo.com helenoftroy.tt.omtrdc.net hydroflask-sandbox.api.kustomerapp.com oxo-sandbox.api.kustomerapp.com hydroflask.api.kustomerapp.com oxo.api.kustomerapp.com services.postcodeanywhere.co.uk *.parcellab.com *.rapidspike.com *.brilliantcollector.com vimeo.com *.clarity.ms bat.bing.com *.kaltura.com *.spectrumcustomizer.com *.acq.io ssl.geoplugin.net *.yimg.com *.pndsn.com m.addthis.com ct.pinterest.com pinterest.com ak.sail-horizon.com www.facebook.com public.fbot.me api.sail-personalize.com 'self' 'unsafe-inline' googletagmanager.com *.googletagmanager.com *.analytics.google.com *.g.doubleclick.net *.google.com www.googleadservices.com *.google-analytics.com *.trustarc.com cdn.jsdelivr.net services.sheerid.com mpsnare.iesnare.com *.vimeo.com api.firmly.work api.firmly.tools api.firmly.online p2iqhncxyh.execute-api.eu-central-1.amazonaws.com maps.googleapis.com player.vimeo.com *.crobox.com www.wepowerconnections.com d38xvr37kwwhcm.cloudfront.net r.lgrckt-in.com; font-src *.sdiapi.com *.klaviyo.com *.gstatic.com use.typekit.net *.yotpo.com *.googleapis.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.hydroflask.com *.oxo.com cdn.kustomerapp.com *.trustarc.com *.lightboxcdn.com *.spectrumcustomizer.com data: 'self' 'unsafe-inline' fonts.gstatic.com; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com secure.authorize.net test.authorize.net www.sandbox.paypal.com *.yotpo.com *.iterable.com *.cardinalcommerce.com *.paypal.com *.oxo.com *.brilliantcollector.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com 'self'; manifest-src 'self' 'unsafe-inline' www.google.com/pay; media-src download-video.akamaized.net *.kaltura.com cfvod.kaltura.com *.adobe.com *.oxo.com *.vimeocdn.com vod-progressive.akamaized.net blob: data: cdnapisec.kaltura.com 'self' 'unsafe-inline' *.vimeo.com; object-src 'self' 'unsafe-inline'; style-src *.adobe.com *.klaviyo.com *.yotpo.com *.googleapis.com mageside.com *.mageside.com *.oxo.com *.pcapredict.com services.postcodeanywhere.co.uk *.lightboxcdn.com *.parcellab.com disqus.com c.disquscdn.com disquscdn.com z.moatads.com moatads.com addthisedge.com v1.addthisedge.com m.addthis.com v1.addthis.com addthis.com loggly.com logs-01.loggly.com ct.pinterest.com pinterest.com s.pinimg.com pinimg.com 'self' 'unsafe-inline' googletagmanager.com *.googletagmanager.com tagmanager.google.com fonts.googleapis.com cdn.jsdelivr.net; worker-src 'self' 'unsafe-inline' 'unsafe-eval' hydroflask.com/p/1/2 blob:; upgrade-insecure-requests; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=6n6HZX1NkOEZBSz785fPM0libYqa6gyjUE6C5bDf1u0-1772451356.6268048-1.0.1.1-cBmOoTOsPLIv1U47LMxiTBvwybQzFOIiv1AkXFT.vLf5l.ttoR69srrA3MKwRcet1wAOOKYZtsRqHm6ZoBZo7RNiyhWGYprVCRklirthBFz7LfqTdCDx7fcTDBMP1vRf3YcyAibjJHCEfGyWc0u5KCUttoUB5Gmv1JdWUCDGbpeMI.AR6GrgDgBDA9GP45vRT0kFUwWStF93aekuoWnjag; report-to cf-iqpxnvizavhjtvpe
frame-src *.stripe.network www.recaptcha.net *.trustarc.com *.criteo.com *.criteo.net *.kmail-lists.com *.shopstylecollective.com app.collectivevoiceqa.com app.collectivevoice.com collectivevoice.com shopstylecollective.com *.googlesyndication.com *.sdiapi.com fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com secure.authorize.net test.authorize.net www.sandbox.paypal.com player.vimeo.com *.youtube.com *.yotpo.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com doubleclick.net *.doubleclick.net hydroflask.attn.tv *.oxo.com *.lightboxcdn.com *.hydroflask.com *.brilliantcollector.com *.demdex.net *.kustomer.support *.kustomer.help *.locally.com *.facebook.com *.fbot.me addthisedge.com s7.addthis.com addthis.com disqus.com ct.pinterest.com pinterest.com insight.adsrvr.org match.adsrvr.org helenoftroy.custhelp.com s.amazon-adsystem.com ak.sail-horizon.com helenoftroy.demdex.net promotions.spredfast.com 'self' 'unsafe-inline' *.googletagmanager.com bid.g.doubleclick.net td.doubleclick.net *.fls.doubleclick.net www.google.com/recaptcha/ services.sheerid.com geo.captcha-delivery.com www.awin1.com; img-src www.ojrq.net *.tiktok.com *.teads.tv cdnjs.cloudflare.com *.criteo.com *.criteo.net *.klaviyo.com *.cloudfront.net track.securedvisit.com match.adsrvr.org tracking.avantlink.com *.bazaarvoice.com insight.adsrvr.org googleads.g.doubleclick.net *.google.co.in google.co.in ce.lijit.com links.services.disqus.com cdn.viglink.com analytics.google.com www.google.com *.baidu.com *.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com p.typekit.net www.paypalobjects.com *.ftcdn.net *.behance.net fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com validator.swagger.io *.yotpo.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com *.paypal.com mageside.com *.mageside.com *.hydroflask.com hydroflask.attn.tv *.oxo.com *.lightboxcdn.com na-stage.hele.digital *.parcellab.com *.trustarc.com cfvod.kaltura.com *.bing.com *.clarity.ms *.hele.digital via.placeholder.com *.locally.com *.spectrumcustomizer.com stospectstageglobal.blob.core.windows.net blob: cdn.kustomerapp.com *.acq.io *.yimg.com loggly.com logs-01.loggly.com referrer.disqus.com c.disquscdn.com ct.pinterest.com pinterest.com sp.analytics.yahoo.com *.facebook.com scontent-iad3-2.cdninstagram.com stospectprodglobal.blob.core.windows.net 'self' 'unsafe-inline' google.com www.gstatic.com ssl.gstatic.com googletagmanager.com *.googletagmanager.com fonts.googleapis.com *.google-analytics.com *.analytics.google.com *.g.doubleclick.net *.fls.doubleclick.net ad.doubleclick.net ade.googlesyndication.com img.youtube.com *.google.com services.sheerid.com *.dl.dropboxusercontent.com *.dropbox.com *.crobox.com *.crobox.io www.awin1.com; script-src cdnjs.cloudflare.com *.amazon-adsystem.com *.stripe.network www.recaptcha.net ajax.cloudflare.com pixel.byspotify.com *.teads.tv *.kervinteractive.com *.tiktok.com *.yottaa.net *.yottaa.com *.klaviyo.com safevisit.online *.criteo.com *.criteo.net *.impactcdn.com *.shopstylecollective.com app.collectivevoiceqa.com app.collectivevoice.com collectivevoice.com shopstylecollective.com *.rkdms.com lsdm.co track.securedvisit.com *.googlesyndication.com *.bazaarvoice.com ssl.avmws.com cdn.avmws.com analytics-static.ugc.bazaarvoice.com apps.bazaarvoice.com c.disquscdn.com cdn.kustomerapp.com unpkg.com *.sdiapi.com f.vimeocdn.com *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com secure.authorize.net test.authorize.net www.google-analytics.com assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net www.paypalobjects.com js.braintreegateway.com commerce.adobedtm.com commerce.adobe.net www.sandbox.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com *.vimeocdn.com *.yotpo.com s7.addthis.com *.iterable.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com assets.braintreegateway.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com js-agent.newrelic.com bam.nr-data.net bam-cell.nr-data.net mageside.com *.mageside.com doubleclick.net *.hydroflask.com *.oxo.com *.pcapredict.com *.lightboxcdn.com *.locally.com lightboxapi.azurewebsites.net *.fbot.me services.postcodeanywhere.co.uk *.parcellab.com *.trustarc.com cdn-assets.rapidspike.com cdnapisec.kaltura.com *.brilliantcollector.com js.stripe.com connect.facebook.net bat.bing.com *.clarity.ms *.spectrumcustomizer.com js.acq.io ssl.geoplugin.net *.yimg.com ajax.googleapis.com cdn.pushplanet.com *.cloudfront.net moatads.com z.moatads.com addthisedge.com v1.addthisedge.com m.addthis.com v1.addthis.com addthis.com loggly.com logs-01.loggly.com hydroflask.disqus.com ct.pinterest.com pinterest.com s.pinimg.com pinimg.com *.impactradius-event.com js.adsrvr.org insight.adsrvr.org ak.sail-horizon.com 'self' 'unsafe-inline' 'unsafe-eval' googletagmanager.com *.googletagmanager.com tagmanager.google.com www.gstatic.com/recaptcha/ www.google.com/recaptcha/ www.googleadservices.com www.google.com googleads.g.doubleclick.net cdn.jsdelivr.net mpsnare.iesnare.com d5yoctgpv4cpx.cloudfront.net maps.googleapis.com *.crobox.io *.crobox.com *.vimeo.com *.cloudflareinsights.com www.awin1.com www.dwin1.com lantern.roeyecdn.com cdn.fonts.net *.safevisit.online r.lgrckt-in.com cdn.lgrckt-in.com; worker-src 'self' 'unsafe-inline' 'unsafe-eval' hydroflask.com/p/2/2 blob:; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=5_M7P4pfBcqdlI4mS9m9DarCsRS89F_xGWjJGnSPOrY-1772451356.6268048-1.0.1.1-a8KakbeUMIJWcBplYNPOcW2UDHorDNSGcDMqM4HKayNKC93Xzi_ITv3RNpKMHjr7KBaXk0AaXOO6sK6wIUnNYaDqkGDvIX4zyznUnod1t5wka8MRhDEbKIEVadmgANbdeKsQCRK5bDr0i8AudR.8.ZsZ2k0LaVANZVMV.zWYpOd2cDPit36vW8sdo0gWy34.ZcgfmHvkm8pUla1sCJihHA; report-to cf-zdoifhyfashvqeukGlider.js
JavaScript libraries
75%
1 evidence signal
Script
https://www.hydroflask.com/static/version1771500158/frontend/MagebitHoT/hydroflask/en_US/Magento_PageBuilder/js/glider.min.jsauthorize.net
Payment processors
75%
1 evidence signal
Header
\.authorize\.net\s: base-uri 'self' 'unsafe-inline' 'unsafe-eval'; child-src assets.braintreegateway.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; connect-src *.amazon-adsystem.com *.stripe.network www.recaptcha.net yotpo-media-temporary.s3.amazonaws.com evnt.byspotify.com *.tiktok.com *.teads.tv *.googlesyndication.com *.addressy.com *.klaviyo.com *.datadome.co insights.algolia.io *.locally.com *.yottaa.net hydro-flask.pxf.io adservice.google.com www.google.com google.com cdn.kustomerapp.com links.services.disqus.com analytics.google.com *.sdiapi.com dpm.demdex.net *.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com *.adobe.io performance.typekit.net commerce.adobedtm.com commerce.adobedc.net api.magento.com www.sandbox.paypal.com www.paypalobjects.com commerce.adobe.io commerce.adobe.net qa-api.magedevteam.com *.algolia.net *.algolia.com *.algolianet.com *.yotpo.com ekr.zdassets.com/ *.iterable.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com gov-bam.nr-data.net bam.nr-data.net stats.g.doubleclick.net *.oxo.com helenoftroy.tt.omtrdc.net hydroflask-sandbox.api.kustomerapp.com oxo-sandbox.api.kustomerapp.com hydroflask.api.kustomerapp.com oxo.api.kustomerapp.com services.postcodeanywhere.co.uk *.parcellab.com *.rapidspike.com *.brilliantcollector.com vimeo.com *.clarity.ms bat.bing.com *.kaltura.com *.spectrumcustomizer.com *.acq.io ssl.geoplugin.net *.yimg.com *.pndsn.com m.addthis.com ct.pinterest.com pinterest.com ak.sail-horizon.com www.facebook.com public.fbot.me api.sail-personalize.com 'self' 'unsafe-inline' googletagmanager.com *.googletagmanager.com *.analytics.google.com *.g.doubleclick.net *.google.com www.googleadservices.com *.google-analytics.com *.trustarc.com cdn.jsdelivr.net services.sheerid.com mpsnare.iesnare.com *.vimeo.com api.firmly.work api.firmly.tools api.firmly.online p2iqhncxyh.execute-api.eu-central-1.amazonaws.com maps.googleapis.com player.vimeo.com *.crobox.com www.wepowerconnections.com d38xvr37kwwhcm.cloudfront.net r.lgrckt-in.com; font-src *.sdiapi.com *.klaviyo.com *.gstatic.com use.typekit.net *.yotpo.com *.googleapis.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.hydroflask.com *.oxo.com cdn.kustomerapp.com *.trustarc.com *.lightboxcdn.com *.spectrumcustomizer.com data: 'self' 'unsafe-inline' fonts.gstatic.com; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com secure.authorize.net test.authorize.net www.sandbox.paypal.com *.yotpo.com *.iterable.com *.cardinalcommerce.com *.paypal.com *.oxo.com *.brilliantcollector.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com 'self'; manifest-src 'self' 'unsafe-inline' www.google.com/pay; media-src download-video.akamaized.net *.kaltura.com cfvod.kaltura.com *.adobe.com *.oxo.com *.vimeocdn.com vod-progressive.akamaized.net blob: data: cdnapisec.kaltura.com 'self' 'unsafe-inline' *.vimeo.com; object-src 'self' 'unsafe-inline'; style-src *.adobe.com *.klaviyo.com *.yotpo.com *.googleapis.com mageside.com *.mageside.com *.oxo.com *.pcapredict.com services.postcodeanywhere.co.uk *.lightboxcdn.com *.parcellab.com disqus.com c.disquscdn.com disquscdn.com z.moatads.com moatads.com addthisedge.com v1.addthisedge.com m.addthis.com v1.addthis.com addthis.com loggly.com logs-01.loggly.com ct.pinterest.com pinterest.com s.pinimg.com pinimg.com 'self' 'unsafe-inline' googletagmanager.com *.googletagmanager.com tagmanager.google.com fonts.googleapis.com cdn.jsdelivr.net; worker-src 'self' 'unsafe-inline' 'unsafe-eval' hydroflask.com/p/1/2 blob:; upgrade-insecure-requests; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=6n6HZX1NkOEZBSz785fPM0libYqa6gyjUE6C5bDf1u0-1772451356.6268048-1.0.1.1-cBmOoTOsPLIv1U47LMxiTBvwybQzFOIiv1AkXFT.vLf5l.ttoR69srrA3MKwRcet1wAOOKYZtsRqHm6ZoBZo7RNiyhWGYprVCRklirthBFz7LfqTdCDx7fcTDBMP1vRf3YcyAibjJHCEfGyWc0u5KCUttoUB5Gmv1JdWUCDGbpeMI.AR6GrgDgBDA9GP45vRT0kFUwWStF93aekuoWnjag; report-to cf-iqpxnvizavhjtvpe
frame-src *.stripe.network www.recaptcha.net *.trustarc.com *.criteo.com *.criteo.net *.kmail-lists.com *.shopstylecollective.com app.collectivevoiceqa.com app.collectivevoice.com collectivevoice.com shopstylecollective.com *.googlesyndication.com *.sdiapi.com fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com secure.authorize.net test.authorize.net www.sandbox.paypal.com player.vimeo.com *.youtube.com *.yotpo.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com doubleclick.net *.doubleclick.net hydroflask.attn.tv *.oxo.com *.lightboxcdn.com *.hydroflask.com *.brilliantcollector.com *.demdex.net *.kustomer.support *.kustomer.help *.locally.com *.facebook.com *.fbot.me addthisedge.com s7.addthis.com addthis.com disqus.com ct.pinterest.com pinterest.com insight.adsrvr.org match.adsrvr.org helenoftroy.custhelp.com s.amazon-adsystem.com ak.sail-horizon.com helenoftroy.demdex.net promotions.spredfast.com 'self' 'unsafe-inline' *.googletagmanager.com bid.g.doubleclick.net td.doubleclick.net *.fls.doubleclick.net www.google.com/recaptcha/ services.sheerid.com geo.captcha-delivery.com www.awin1.com; img-src www.ojrq.net *.tiktok.com *.teads.tv cdnjs.cloudflare.com *.criteo.com *.criteo.net *.klaviyo.com *.cloudfront.net track.securedvisit.com match.adsrvr.org tracking.avantlink.com *.bazaarvoice.com insight.adsrvr.org googleads.g.doubleclick.net *.google.co.in google.co.in ce.lijit.com links.services.disqus.com cdn.viglink.com analytics.google.com www.google.com *.baidu.com *.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com p.typekit.net www.paypalobjects.com *.ftcdn.net *.behance.net fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com validator.swagger.io *.yotpo.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com *.paypal.com mageside.com *.mageside.com *.hydroflask.com hydroflask.attn.tv *.oxo.com *.lightboxcdn.com na-stage.hele.digital *.parcellab.com *.trustarc.com cfvod.kaltura.com *.bing.com *.clarity.ms *.hele.digital via.placeholder.com *.locally.com *.spectrumcustomizer.com stospectstageglobal.blob.core.windows.net blob: cdn.kustomerapp.com *.acq.io *.yimg.com loggly.com logs-01.loggly.com referrer.disqus.com c.disquscdn.com ct.pinterest.com pinterest.com sp.analytics.yahoo.com *.facebook.com scontent-iad3-2.cdninstagram.com stospectprodglobal.blob.core.windows.net 'self' 'unsafe-inline' google.com www.gstatic.com ssl.gstatic.com googletagmanager.com *.googletagmanager.com fonts.googleapis.com *.google-analytics.com *.analytics.google.com *.g.doubleclick.net *.fls.doubleclick.net ad.doubleclick.net ade.googlesyndication.com img.youtube.com *.google.com services.sheerid.com *.dl.dropboxusercontent.com *.dropbox.com *.crobox.com *.crobox.io www.awin1.com; script-src cdnjs.cloudflare.com *.amazon-adsystem.com *.stripe.network www.recaptcha.net ajax.cloudflare.com pixel.byspotify.com *.teads.tv *.kervinteractive.com *.tiktok.com *.yottaa.net *.yottaa.com *.klaviyo.com safevisit.online *.criteo.com *.criteo.net *.impactcdn.com *.shopstylecollective.com app.collectivevoiceqa.com app.collectivevoice.com collectivevoice.com shopstylecollective.com *.rkdms.com lsdm.co track.securedvisit.com *.googlesyndication.com *.bazaarvoice.com ssl.avmws.com cdn.avmws.com analytics-static.ugc.bazaarvoice.com apps.bazaarvoice.com c.disquscdn.com cdn.kustomerapp.com unpkg.com *.sdiapi.com f.vimeocdn.com *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com secure.authorize.net test.authorize.net www.google-analytics.com assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net www.paypalobjects.com js.braintreegateway.com commerce.adobedtm.com commerce.adobe.net www.sandbox.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com *.vimeocdn.com *.yotpo.com s7.addthis.com *.iterable.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com assets.braintreegateway.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com js-agent.newrelic.com bam.nr-data.net bam-cell.nr-data.net mageside.com *.mageside.com doubleclick.net *.hydroflask.com *.oxo.com *.pcapredict.com *.lightboxcdn.com *.locally.com lightboxapi.azurewebsites.net *.fbot.me services.postcodeanywhere.co.uk *.parcellab.com *.trustarc.com cdn-assets.rapidspike.com cdnapisec.kaltura.com *.brilliantcollector.com js.stripe.com connect.facebook.net bat.bing.com *.clarity.ms *.spectrumcustomizer.com js.acq.io ssl.geoplugin.net *.yimg.com ajax.googleapis.com cdn.pushplanet.com *.cloudfront.net moatads.com z.moatads.com addthisedge.com v1.addthisedge.com m.addthis.com v1.addthis.com addthis.com loggly.com logs-01.loggly.com hydroflask.disqus.com ct.pinterest.com pinterest.com s.pinimg.com pinimg.com *.impactradius-event.com js.adsrvr.org insight.adsrvr.org ak.sail-horizon.com 'self' 'unsafe-inline' 'unsafe-eval' googletagmanager.com *.googletagmanager.com tagmanager.google.com www.gstatic.com/recaptcha/ www.google.com/recaptcha/ www.googleadservices.com www.google.com googleads.g.doubleclick.net cdn.jsdelivr.net mpsnare.iesnare.com d5yoctgpv4cpx.cloudfront.net maps.googleapis.com *.crobox.io *.crobox.com *.vimeo.com *.cloudflareinsights.com www.awin1.com www.dwin1.com lantern.roeyecdn.com cdn.fonts.net *.safevisit.online r.lgrckt-in.com cdn.lgrckt-in.com; worker-src 'self' 'unsafe-inline' 'unsafe-eval' hydroflask.com/p/2/2 blob:; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=5_M7P4pfBcqdlI4mS9m9DarCsRS89F_xGWjJGnSPOrY-1772451356.6268048-1.0.1.1-a8KakbeUMIJWcBplYNPOcW2UDHorDNSGcDMqM4HKayNKC93Xzi_ITv3RNpKMHjr7KBaXk0AaXOO6sK6wIUnNYaDqkGDvIX4zyznUnod1t5wka8MRhDEbKIEVadmgANbdeKsQCRK5bDr0i8AudR.8.ZsZ2k0LaVANZVMV.zWYpOd2cDPit36vW8sdo0gWy34.ZcgfmHvkm8pUla1sCJihHA; report-to cf-zdoifhyfashvqeukSheerID
Miscellaneous
75%
1 evidence signal
Header
\.sheerid\.com: base-uri 'self' 'unsafe-inline' 'unsafe-eval'; child-src assets.braintreegateway.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; connect-src *.amazon-adsystem.com *.stripe.network www.recaptcha.net yotpo-media-temporary.s3.amazonaws.com evnt.byspotify.com *.tiktok.com *.teads.tv *.googlesyndication.com *.addressy.com *.klaviyo.com *.datadome.co insights.algolia.io *.locally.com *.yottaa.net hydro-flask.pxf.io adservice.google.com www.google.com google.com cdn.kustomerapp.com links.services.disqus.com analytics.google.com *.sdiapi.com dpm.demdex.net *.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com *.adobe.io performance.typekit.net commerce.adobedtm.com commerce.adobedc.net api.magento.com www.sandbox.paypal.com www.paypalobjects.com commerce.adobe.io commerce.adobe.net qa-api.magedevteam.com *.algolia.net *.algolia.com *.algolianet.com *.yotpo.com ekr.zdassets.com/ *.iterable.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com gov-bam.nr-data.net bam.nr-data.net stats.g.doubleclick.net *.oxo.com helenoftroy.tt.omtrdc.net hydroflask-sandbox.api.kustomerapp.com oxo-sandbox.api.kustomerapp.com hydroflask.api.kustomerapp.com oxo.api.kustomerapp.com services.postcodeanywhere.co.uk *.parcellab.com *.rapidspike.com *.brilliantcollector.com vimeo.com *.clarity.ms bat.bing.com *.kaltura.com *.spectrumcustomizer.com *.acq.io ssl.geoplugin.net *.yimg.com *.pndsn.com m.addthis.com ct.pinterest.com pinterest.com ak.sail-horizon.com www.facebook.com public.fbot.me api.sail-personalize.com 'self' 'unsafe-inline' googletagmanager.com *.googletagmanager.com *.analytics.google.com *.g.doubleclick.net *.google.com www.googleadservices.com *.google-analytics.com *.trustarc.com cdn.jsdelivr.net services.sheerid.com mpsnare.iesnare.com *.vimeo.com api.firmly.work api.firmly.tools api.firmly.online p2iqhncxyh.execute-api.eu-central-1.amazonaws.com maps.googleapis.com player.vimeo.com *.crobox.com www.wepowerconnections.com d38xvr37kwwhcm.cloudfront.net r.lgrckt-in.com; font-src *.sdiapi.com *.klaviyo.com *.gstatic.com use.typekit.net *.yotpo.com *.googleapis.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.hydroflask.com *.oxo.com cdn.kustomerapp.com *.trustarc.com *.lightboxcdn.com *.spectrumcustomizer.com data: 'self' 'unsafe-inline' fonts.gstatic.com; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com secure.authorize.net test.authorize.net www.sandbox.paypal.com *.yotpo.com *.iterable.com *.cardinalcommerce.com *.paypal.com *.oxo.com *.brilliantcollector.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com 'self'; manifest-src 'self' 'unsafe-inline' www.google.com/pay; media-src download-video.akamaized.net *.kaltura.com cfvod.kaltura.com *.adobe.com *.oxo.com *.vimeocdn.com vod-progressive.akamaized.net blob: data: cdnapisec.kaltura.com 'self' 'unsafe-inline' *.vimeo.com; object-src 'self' 'unsafe-inline'; style-src *.adobe.com *.klaviyo.com *.yotpo.com *.googleapis.com mageside.com *.mageside.com *.oxo.com *.pcapredict.com services.postcodeanywhere.co.uk *.lightboxcdn.com *.parcellab.com disqus.com c.disquscdn.com disquscdn.com z.moatads.com moatads.com addthisedge.com v1.addthisedge.com m.addthis.com v1.addthis.com addthis.com loggly.com logs-01.loggly.com ct.pinterest.com pinterest.com s.pinimg.com pinimg.com 'self' 'unsafe-inline' googletagmanager.com *.googletagmanager.com tagmanager.google.com fonts.googleapis.com cdn.jsdelivr.net; worker-src 'self' 'unsafe-inline' 'unsafe-eval' hydroflask.com/p/1/2 blob:; upgrade-insecure-requests; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=6n6HZX1NkOEZBSz785fPM0libYqa6gyjUE6C5bDf1u0-1772451356.6268048-1.0.1.1-cBmOoTOsPLIv1U47LMxiTBvwybQzFOIiv1AkXFT.vLf5l.ttoR69srrA3MKwRcet1wAOOKYZtsRqHm6ZoBZo7RNiyhWGYprVCRklirthBFz7LfqTdCDx7fcTDBMP1vRf3YcyAibjJHCEfGyWc0u5KCUttoUB5Gmv1JdWUCDGbpeMI.AR6GrgDgBDA9GP45vRT0kFUwWStF93aekuoWnjag; report-to cf-iqpxnvizavhjtvpe
frame-src *.stripe.network www.recaptcha.net *.trustarc.com *.criteo.com *.criteo.net *.kmail-lists.com *.shopstylecollective.com app.collectivevoiceqa.com app.collectivevoice.com collectivevoice.com shopstylecollective.com *.googlesyndication.com *.sdiapi.com fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com secure.authorize.net test.authorize.net www.sandbox.paypal.com player.vimeo.com *.youtube.com *.yotpo.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com doubleclick.net *.doubleclick.net hydroflask.attn.tv *.oxo.com *.lightboxcdn.com *.hydroflask.com *.brilliantcollector.com *.demdex.net *.kustomer.support *.kustomer.help *.locally.com *.facebook.com *.fbot.me addthisedge.com s7.addthis.com addthis.com disqus.com ct.pinterest.com pinterest.com insight.adsrvr.org match.adsrvr.org helenoftroy.custhelp.com s.amazon-adsystem.com ak.sail-horizon.com helenoftroy.demdex.net promotions.spredfast.com 'self' 'unsafe-inline' *.googletagmanager.com bid.g.doubleclick.net td.doubleclick.net *.fls.doubleclick.net www.google.com/recaptcha/ services.sheerid.com geo.captcha-delivery.com www.awin1.com; img-src www.ojrq.net *.tiktok.com *.teads.tv cdnjs.cloudflare.com *.criteo.com *.criteo.net *.klaviyo.com *.cloudfront.net track.securedvisit.com match.adsrvr.org tracking.avantlink.com *.bazaarvoice.com insight.adsrvr.org googleads.g.doubleclick.net *.google.co.in google.co.in ce.lijit.com links.services.disqus.com cdn.viglink.com analytics.google.com www.google.com *.baidu.com *.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com p.typekit.net www.paypalobjects.com *.ftcdn.net *.behance.net fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com validator.swagger.io *.yotpo.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com *.paypal.com mageside.com *.mageside.com *.hydroflask.com hydroflask.attn.tv *.oxo.com *.lightboxcdn.com na-stage.hele.digital *.parcellab.com *.trustarc.com cfvod.kaltura.com *.bing.com *.clarity.ms *.hele.digital via.placeholder.com *.locally.com *.spectrumcustomizer.com stospectstageglobal.blob.core.windows.net blob: cdn.kustomerapp.com *.acq.io *.yimg.com loggly.com logs-01.loggly.com referrer.disqus.com c.disquscdn.com ct.pinterest.com pinterest.com sp.analytics.yahoo.com *.facebook.com scontent-iad3-2.cdninstagram.com stospectprodglobal.blob.core.windows.net 'self' 'unsafe-inline' google.com www.gstatic.com ssl.gstatic.com googletagmanager.com *.googletagmanager.com fonts.googleapis.com *.google-analytics.com *.analytics.google.com *.g.doubleclick.net *.fls.doubleclick.net ad.doubleclick.net ade.googlesyndication.com img.youtube.com *.google.com services.sheerid.com *.dl.dropboxusercontent.com *.dropbox.com *.crobox.com *.crobox.io www.awin1.com; script-src cdnjs.cloudflare.com *.amazon-adsystem.com *.stripe.network www.recaptcha.net ajax.cloudflare.com pixel.byspotify.com *.teads.tv *.kervinteractive.com *.tiktok.com *.yottaa.net *.yottaa.com *.klaviyo.com safevisit.online *.criteo.com *.criteo.net *.impactcdn.com *.shopstylecollective.com app.collectivevoiceqa.com app.collectivevoice.com collectivevoice.com shopstylecollective.com *.rkdms.com lsdm.co track.securedvisit.com *.googlesyndication.com *.bazaarvoice.com ssl.avmws.com cdn.avmws.com analytics-static.ugc.bazaarvoice.com apps.bazaarvoice.com c.disquscdn.com cdn.kustomerapp.com unpkg.com *.sdiapi.com f.vimeocdn.com *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com secure.authorize.net test.authorize.net www.google-analytics.com assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net www.paypalobjects.com js.braintreegateway.com commerce.adobedtm.com commerce.adobe.net www.sandbox.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com *.vimeocdn.com *.yotpo.com s7.addthis.com *.iterable.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com assets.braintreegateway.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com js-agent.newrelic.com bam.nr-data.net bam-cell.nr-data.net mageside.com *.mageside.com doubleclick.net *.hydroflask.com *.oxo.com *.pcapredict.com *.lightboxcdn.com *.locally.com lightboxapi.azurewebsites.net *.fbot.me services.postcodeanywhere.co.uk *.parcellab.com *.trustarc.com cdn-assets.rapidspike.com cdnapisec.kaltura.com *.brilliantcollector.com js.stripe.com connect.facebook.net bat.bing.com *.clarity.ms *.spectrumcustomizer.com js.acq.io ssl.geoplugin.net *.yimg.com ajax.googleapis.com cdn.pushplanet.com *.cloudfront.net moatads.com z.moatads.com addthisedge.com v1.addthisedge.com m.addthis.com v1.addthis.com addthis.com loggly.com logs-01.loggly.com hydroflask.disqus.com ct.pinterest.com pinterest.com s.pinimg.com pinimg.com *.impactradius-event.com js.adsrvr.org insight.adsrvr.org ak.sail-horizon.com 'self' 'unsafe-inline' 'unsafe-eval' googletagmanager.com *.googletagmanager.com tagmanager.google.com www.gstatic.com/recaptcha/ www.google.com/recaptcha/ www.googleadservices.com www.google.com googleads.g.doubleclick.net cdn.jsdelivr.net mpsnare.iesnare.com d5yoctgpv4cpx.cloudfront.net maps.googleapis.com *.crobox.io *.crobox.com *.vimeo.com *.cloudflareinsights.com www.awin1.com www.dwin1.com lantern.roeyecdn.com cdn.fonts.net *.safevisit.online r.lgrckt-in.com cdn.lgrckt-in.com; worker-src 'self' 'unsafe-inline' 'unsafe-eval' hydroflask.com/p/2/2 blob:; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=5_M7P4pfBcqdlI4mS9m9DarCsRS89F_xGWjJGnSPOrY-1772451356.6268048-1.0.1.1-a8KakbeUMIJWcBplYNPOcW2UDHorDNSGcDMqM4HKayNKC93Xzi_ITv3RNpKMHjr7KBaXk0AaXOO6sK6wIUnNYaDqkGDvIX4zyznUnod1t5wka8MRhDEbKIEVadmgANbdeKsQCRK5bDr0i8AudR.8.ZsZ2k0LaVANZVMV.zWYpOd2cDPit36vW8sdo0gWy34.ZcgfmHvkm8pUla1sCJihHA; report-to cf-zdoifhyfashvqeukCrobox
Widgets
75%
1 evidence signal
JS Global
crobox → objectMagewire
Miscellaneous
75%
1 evidence signal
JS Global
magewire → object