32 technologies5 categories
samash.com is built on Magento with Google Tag Manager and Google Analytics.
The frontend relies on RequireJS. Analytics are handled by Google Tag Manager and Google Analytics. Infrastructure includes Fastly and Amazon S3.
Tech Stack Highlights
Core Platform2
Magento
Ecommerce
100%
3 evidence signals
Cookie
mage-cache-storageCookie
mage-cache-storage-section-invalidationScript
https://www.samash.com/static/frontend/Astound/samash/en_US/Magento_Translation/js/mage-translation-dictionary.jsCart Functionality
Ecommerce
50%
1 evidence signal
HTML
implied by Google Analytics Enhanced eCommerceFrameworks & Languages4
RequireJS
JavaScript frameworks
75%
1 evidence signal
Script
https://www.samash.com/static/frontend/Astound/samash/en_US/requirejs/require.jsPHP
Programming languages
75%
1 evidence signal
Cookie
PHPSESSIDBootstrap
UI frameworks
75%
3 evidence signals
Script
https://www.samash.com/static/frontend/Astound/samash/en_US/mage/bootstrap.jsScript
https://www.samash.com/static/frontend/Astound/samash/en_US/Magento_Ui/js/lib/knockout/bootstrap.jsScript
https://www.samash.com/static/frontend/Astound/samash/en_US/Magento_Ui/js/lib/knockout/bindings/bootstrap.jsMySQL
Databases
75%
1 evidence signal
HTML
implied by MagentoAnalytics & Marketing10
Google Tag Manager
Tag managers
100%
3 evidence signals
HTML
googletagmanager.com/gtm.jsJS Global
google_tag_manager → objectJS Global
dataLayer → objectGoogle Analytics
Analytics
100%
5 evidence signals
Cookie
_gaCookie
_gidScript
https://www.google-analytics.com/analytics.jsScript
https://www.googletagmanager.com/gtag/js?id=G-8Q5TD5SS8P&cx=c>m=4e6481JS Global
GoogleAnalyticsObject → stringFacebook Pixelv2.9.297
Analytics
100%
4 evidence signals
Script
https://connect.facebook.net/signals/config/10051464368216385?v=2.9.297&r=stable&domain=www.samash.com&hme=c048e760b3fdc0fbdc117d7607b2c36e13eff2660c515ac72e86dac5ba060bb9&ex_m=104%2C205%2C154%2C22%2C72%2C73%2C145%2C68%2C67%2C11%2C162%2C90%2C16%2C138%2C127%2C39%2C75%2C78%2C134%2C159%2C164%2C8%2C4%2C5%2C7%2C6%2C3%2C91%2C101%2C165%2C170%2C219%2C62%2C186%2C187%2C55%2C277%2C30%2C74%2C231%2C230%2C229%2C23%2C33%2C103%2C61%2C10%2C63%2C97%2C98%2C99%2C105%2C130%2C31%2C29%2C132%2C133%2C129%2C128%2C155%2C76%2C158%2C156%2C157%2C50%2C60%2C123%2C15%2C161%2C45%2C264%2C265%2C263%2C26%2C27%2C28%2C48%2C146%2C77%2C112%2C18%2C20%2C44%2C40%2C42%2C41%2C83%2C92%2C96%2C110%2C144%2C147%2C46%2C111%2C24%2C21%2C119%2C69%2C36%2C149%2C148%2C150%2C141%2C139%2C25%2C35%2C59%2C109%2C160%2C70%2C17%2C152%2C114%2C81%2C66%2C19%2C85%2C86%2C116%2C84%2C136%2C135%2C34%2C279%2C294%2C212%2C201%2C202%2C200%2C297%2C289%2C52%2C213%2C107%2C131%2C80%2C121%2C54%2C47%2C49%2C113%2C120%2C126%2C58%2C64%2C151%2C115%2C37%2C32%2C53%2C56%2C100%2C163%2C1%2C124%2C14%2C122%2C12%2C2%2C57%2C93%2C65%2C118%2C89%2C88%2C166%2C167%2C94%2C95%2C9%2C125%2C102%2C51%2C142%2C87%2C79%2C71%2C117%2C106%2C43%2C143%2C0%2C82%2C137%2C140%2C153%2C38%2C108%2C13%2C168%2C228%2C227%2C222%2C224%2C225%2C226%2C223%2C211%2C221%2C233%2C193%2C190%2C191%2C185%2C189%2C192%2C188%2C183%2C317%2C196%2C215%2C184%2C182%2C210%2C235%2C206%2C176%2C177%2C172%2C178%2C175%2C173%2C174%2C171%2C169%2C180%2C181%2C179%2C266%2C316%2C194%2C239%2C252%2C244%2C248%2C249%2C247%2C253%2C250%2C246%2C251%2C245Script
https://connect.facebook.net/signals/config/1713341582220707?v=2.9.297&r=stable&domain=www.samash.com&hme=c048e760b3fdc0fbdc117d7607b2c36e13eff2660c515ac72e86dac5ba060bb9&ex_m=104%2C205%2C154%2C22%2C72%2C73%2C145%2C68%2C67%2C11%2C162%2C90%2C16%2C138%2C127%2C39%2C75%2C78%2C134%2C159%2C164%2C8%2C4%2C5%2C7%2C6%2C3%2C91%2C101%2C165%2C170%2C219%2C62%2C186%2C187%2C55%2C277%2C30%2C74%2C231%2C230%2C229%2C23%2C33%2C103%2C61%2C10%2C63%2C97%2C98%2C99%2C105%2C130%2C31%2C29%2C132%2C133%2C129%2C128%2C155%2C76%2C158%2C156%2C157%2C50%2C60%2C123%2C15%2C161%2C45%2C264%2C265%2C263%2C26%2C27%2C28%2C48%2C146%2C77%2C112%2C18%2C20%2C44%2C40%2C42%2C41%2C83%2C92%2C96%2C110%2C144%2C147%2C46%2C111%2C24%2C21%2C119%2C69%2C36%2C149%2C148%2C150%2C141%2C139%2C25%2C35%2C59%2C109%2C160%2C70%2C17%2C152%2C114%2C81%2C66%2C19%2C85%2C86%2C116%2C84%2C136%2C135%2C34%2C279%2C294%2C212%2C201%2C202%2C200%2C297%2C289%2C52%2C213%2C107%2C131%2C80%2C121%2C54%2C47%2C49%2C113%2C120%2C126%2C58%2C64%2C151%2C115%2C37%2C32%2C53%2C56%2C100%2C163%2C1%2C124%2C14%2C122%2C12%2C2%2C57%2C93%2C65%2C118%2C89%2C88%2C166%2C167%2C94%2C95%2C9%2C125%2C102%2C51%2C142%2C87%2C79%2C71%2C117%2C106%2C43%2C143%2C0%2C82%2C137%2C140%2C153%2C38%2C108%2C13%2C168Script
https://connect.facebook.net/en_US/fbevents.jsJS Global
_fbq → function(v2.9.297)Microsoft Advertising
Advertising
100%
5 evidence signals
Cookie
_uetsidCookie
_uetvidScript
https://bat.bing.com/bat.jsJS Global
UET → functionJS Global
uetq → objectDotdigitalv4
Marketing automation
100%
4 evidence signals
Script
https://static.trackedweb.net/js/_dmptv4.jsJS Global
dmPt → functionJS Global
dm_insight_id → stringJS Global
dmtrackingobjectname → stringM
Microsoft 365
Email
100%
1 evidence signal
dns
DKIM selector: selector2S
SendGrid
Email
95%
1 evidence signal
dns
SPF includes sendgrid.netGoogle Analytics Enhanced eCommerce
Analytics
75%
1 evidence signal
Script
https://www.google-analytics.com/plugins/ua/ec.jsNew Relic
RUM
75%
2 evidence signals
JS Global
NREUM → objectJS Global
newrelic → objectAttentive
Personalisation
75%
2 evidence signals
JS Global
__attentive → objectJS Global
__attentive_domain → stringInfrastructure & Security9
DataDome
Security
100%
2 evidence signals
Header
protectedCookie
datadomeF
Fastly
CDN
100%
1 evidence signal
dns
CNAME: prod.magentocloud.map.fastly.netOneTrust
Cookie compliance
75%
3 evidence signals
Script
https://cdn.cookielaw.org/scripttemplates/otSDKStub.jsScript
https://cdn.cookielaw.org/scripttemplates/otSDKStub.jsScript
https://cdn.cookielaw.org/scripttemplates/otSDKStub.jsHSTS
Security
75%
1 evidence signal
Header
max-age=31536000Amazon S3
CDN
75%
1 evidence signal
Header
s3[^ ]*amazonaws\.com: upgrade-insecure-requests; font-src css.zohocdn.com fonts.gstatic.com use.typekit.net *.fontawesome.com www.google.com www.gstatic.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action *.cardinalcommerce.com secure.authorize.net test.authorize.net *.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.syfpayments.com *.syfpos.com www.facebook.com testsecureacceptance.cybersource.com secureacceptance.cybersource.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com 'self' 'unsafe-inline'; frame-ancestors www.google.com www.gstatic.com 'self'; frame-src *.zohopublic.com app.langshop.io hosted.where2getit.com *.mysynchrony.com *.captcha-delivery.com *.syfpayments.com td.doubleclick.net email.samash.com static.criteo.net *.chargeafter.com *.ca-dev.co fast.amc.demdex.net *.adobe.com *.cardinalcommerce.com secure.authorize.net test.authorize.net *.paypal.com player.vimeo.com *.youtube.com www.googletagmanager.com www.google.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de syf.demdex.net *.syfpos.com *.syf.com *.criteo.com www.facebook.com *.online-metrix.net testflex.cybersource.com flex.cybersource.com testsecureacceptance.cybersource.com secureacceptance.cybersource.com pay.google.com sandbox.secure.checkout.visa.com secure.checkout.visa.com thm.visa.com sandbox.src.mastercard.com demo2.progressivelp.com demo2.approve.me stg.api.progleasing.com progplugin-esign-dmo.progressivelp.com demo.docusign.net account-d.docusign.com progressivelp.com approve.me prod.api.progleasing.com progplugin-esign.progressivelp.com na2.docusign.net na.account.docusign.com *.dotdigital-pages.com *.dotdigital.com cdn.dnky.co assets.braintreegateway.com 'self' 'unsafe-inline'; img-src *.online-metrix.net *.zohocdn.com *.zohopublic.com www.googletagmanager.com cdn-assets.affirm.com pdpone.syfpayments.com samash.my.salesforce-sites.com cdn.cookielaw.org cdn-sandbox.ca-dev.co cdn.chargeafter.com storage.googleapis.com *.aptrinsic.com amasty.com assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com www.google-analytics.com www.paypalobjects.com *.paypal.com *.ftcdn.net *.behance.net p.typekit.net *.vimeocdn.com i.ytimg.com validator.swagger.io d3cgm8py10hi0z.cloudfront.net d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de static-eu.payments-amazon.com *.syfpos.com *.syf.com analytics.synchrony.com *.d1.sc.omtrdc.net *.mysynchrony.com *.bc0a.com *.b0e8.com samash.secure.force.com *.powerreviews.com *.linksynergy.com img.youtube.com static-na.payments-amazon.com bat.bing.com cdn.ywxi.net www.google.com csm.va.us.criteo.net s.thebrighttag.com gum.criteo.com beacon.krxd.net ad.yieldlab.net dis.criteo.com sync-criteo.ads.yieldmo.com ad.sxp.smartclip.net visitor.omnitagjs.com cm.adform.net ups.analytics.yahoo.com eb2.3lift.com criteo-sync.teads.tv sync-t1.taboola.com rtb-csync.smartadserver.com match.sharethrough.com pixel.rubiconproject.com simage2.pubmatic.com sync.outbrain.com exchange.mediavine.com contextual.media.net ad.360yield.com r.casalemedia.com ib.adnxs.com *.g.doubleclick.net x.bidswitch.net criteo-partners.tremorhub.com connect.facebook.net www.facebook.com sandbox.secure.checkout.visa.com secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com assets.secure.checkout.visa.com thm.visa.com helloextend-static-assets.s3.amazonaws.com *.igodigital.com *.salesforceliveagent.com *.trackedlink.net *.gstatic.com assets.braintreegateway.com data: 'self' 'unsafe-inline'; script-src *.commerce-payment-services.com challenges.cloudflare.com ct.captcha-delivery.com *.zohocdn.com *.zohopublic.com widgets.syfpayments.com googleads.g.doubleclick.net www.clickcease.com intljs.rmtag.com *.samash.com cdn.cookielaw.org *.searchspring.io *.searchspring.net cdn-sandbox.ca-dev.co cdn.chargeafter.com *.aptrinsic.com assets.adobedtm.com *.adobe.com *.adobe.io *.cardinalcommerce.com includestest.ccdc02.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com *.paypal.com unpkg.com cdn.jsdelivr.net commerce.adobedtm.com js.magento-datasolutions.com amcglobal.sc.omtrdc.net commerce.adobe.net use.typekit.net magento-recs-sdk.adobe.net s.ytimg.com vimeo.com www.vimeo.com *.vimeocdn.com *.magento-datasolutions.com *.magento-ds.com www.googletagmanager.com polyfill-fastly.io *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.syfpos.com analytics.synchrony.com *.mysynchrony.com *.syf.com *.tiqcdn.com *.bc0a.com *.b0e8.com *.powerreviews.com cdn.ywxi.net *.datadome.co *.newrelic.com bam.nr-data.net www.youtube.com sslwidget.criteo.com *.criteo.com tag.rmp.rakuten.com bat.bing.com cdn.attn.tv dynamic.criteo.com *.facebook.net *.clarity.ms widget.us.criteo.com www.trustedsite.com *.api.progleasing.com static.criteo.net *.analytics.google.com samash.attn.tv events.attentivemobile.com matching.ivitrack.com secure.adnxs.com *.online-metrix.net testflex.cybersource.com flex.cybersource.com sandbox.secure.checkout.visa.com secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com assets.secure.checkout.visa.com thm.visa.com sandbox.src.mastercard.com stg03.api.progleasing.com api.progleasing.com *.helloextend.com *.igodigital.com *.salesforceliveagent.com x.klarnacdn.net *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal cdn.dnky.co webchat.dotdigital.com webchat.staging.dotdigital.com *.googleapis.com *.google.com *.gstatic.com *.avada.io www.googletagmanager.com assets.braintreegateway.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.zohocdn.com *.aptrinsic.com *.adobe.com *.magento-datasolutions.com *.magento-ds.com *.fontawesome.com *.syfpayments.com *.syfpos.com *.powerreviews.com cdn.dnky.co webchat.dotdigital.com webchat.staging.dotdigital.com *.googleapis.com *.google.com *.gstatic.com maxcdn.bootstrapcdn.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.zohocdn.com *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src crm.zoho.com *.uc.gateway.dev *.google.com.mx *.google.com.us *.googleadservices.com *.online-metrix.net www.facebook.com *.onetrust.com wss://vts.zohopublic.com *.zohopublic.com dp70uvwpivouv.cloudfront.net google.com *.searchspring.io measurement-api.criteo.com cdn.cookielaw.org beacon.searchspring.io *.chargeafter.com *.ca-dev.co *.aptrinsic.com dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com *.snplow.net commerce.adobedc.net api.magento.com *.adobe.io performance.typekit.net www.paypalobjects.com commerce.adobe.io *.magento-datasolutions.com *.magento-ds.com *.sentry.io *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.syfpos.com *.syfpayments.com *.syf.com *.d1.sc.omtrdc.net *.bc0a.com *.powerreviews.com *.amazonaws.com *.datadome.co *.doubleclick.net *.google-analytics.com bam.nr-data.net *.clarity.ms sslwidget.criteo.com widget.us.criteo.com bat.bing.com thm.visa.com stg03.api.progleasing.com api.progleasing.com *.helloextend.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com dpm.demdex.net www.gstatic.com get.geojs.io *.avada.io www.google-analytics.com *.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; worker-src blob:; default-src www.google-analytics.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://newrelic-draft-api.com/scp/report/send; report-to report-endpoint;Unpkg
CDN
75%
2 evidence signals
Script
https://unpkg.com/@adobe/magento-storefront-events-sdk@%5E1/dist/index.jsScript
https://unpkg.com/@adobe/magento-storefront-event-collector@%5E1/dist/index.jsClickCease
Security
75%
1 evidence signal
Script
https://www.clickcease.com/monitor/stat.jsPlatform.sh
PaaS
75%
1 evidence signal
Header
i-03f270f76125717b4
i-03f270f76125717b4Amazon Web Services
PaaS
50%
1 evidence signal
HTML
implied by Amazon S3Libraries & Utilities7
Underscore.js
JavaScript libraries
75%
1 evidence signal
Script
https://www.samash.com/static/frontend/Astound/samash/en_US/underscore.jscore-js
JavaScript libraries
75%
1 evidence signal
JS Global
__core-js_shared__ → objectPayPal
Payment processors
75%
1 evidence signal
Header
\.paypal\.com: upgrade-insecure-requests; font-src css.zohocdn.com fonts.gstatic.com use.typekit.net *.fontawesome.com www.google.com www.gstatic.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action *.cardinalcommerce.com secure.authorize.net test.authorize.net *.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.syfpayments.com *.syfpos.com www.facebook.com testsecureacceptance.cybersource.com secureacceptance.cybersource.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com 'self' 'unsafe-inline'; frame-ancestors www.google.com www.gstatic.com 'self'; frame-src *.zohopublic.com app.langshop.io hosted.where2getit.com *.mysynchrony.com *.captcha-delivery.com *.syfpayments.com td.doubleclick.net email.samash.com static.criteo.net *.chargeafter.com *.ca-dev.co fast.amc.demdex.net *.adobe.com *.cardinalcommerce.com secure.authorize.net test.authorize.net *.paypal.com player.vimeo.com *.youtube.com www.googletagmanager.com www.google.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de syf.demdex.net *.syfpos.com *.syf.com *.criteo.com www.facebook.com *.online-metrix.net testflex.cybersource.com flex.cybersource.com testsecureacceptance.cybersource.com secureacceptance.cybersource.com pay.google.com sandbox.secure.checkout.visa.com secure.checkout.visa.com thm.visa.com sandbox.src.mastercard.com demo2.progressivelp.com demo2.approve.me stg.api.progleasing.com progplugin-esign-dmo.progressivelp.com demo.docusign.net account-d.docusign.com progressivelp.com approve.me prod.api.progleasing.com progplugin-esign.progressivelp.com na2.docusign.net na.account.docusign.com *.dotdigital-pages.com *.dotdigital.com cdn.dnky.co assets.braintreegateway.com 'self' 'unsafe-inline'; img-src *.online-metrix.net *.zohocdn.com *.zohopublic.com www.googletagmanager.com cdn-assets.affirm.com pdpone.syfpayments.com samash.my.salesforce-sites.com cdn.cookielaw.org cdn-sandbox.ca-dev.co cdn.chargeafter.com storage.googleapis.com *.aptrinsic.com amasty.com assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com www.google-analytics.com www.paypalobjects.com *.paypal.com *.ftcdn.net *.behance.net p.typekit.net *.vimeocdn.com i.ytimg.com validator.swagger.io d3cgm8py10hi0z.cloudfront.net d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de static-eu.payments-amazon.com *.syfpos.com *.syf.com analytics.synchrony.com *.d1.sc.omtrdc.net *.mysynchrony.com *.bc0a.com *.b0e8.com samash.secure.force.com *.powerreviews.com *.linksynergy.com img.youtube.com static-na.payments-amazon.com bat.bing.com cdn.ywxi.net www.google.com csm.va.us.criteo.net s.thebrighttag.com gum.criteo.com beacon.krxd.net ad.yieldlab.net dis.criteo.com sync-criteo.ads.yieldmo.com ad.sxp.smartclip.net visitor.omnitagjs.com cm.adform.net ups.analytics.yahoo.com eb2.3lift.com criteo-sync.teads.tv sync-t1.taboola.com rtb-csync.smartadserver.com match.sharethrough.com pixel.rubiconproject.com simage2.pubmatic.com sync.outbrain.com exchange.mediavine.com contextual.media.net ad.360yield.com r.casalemedia.com ib.adnxs.com *.g.doubleclick.net x.bidswitch.net criteo-partners.tremorhub.com connect.facebook.net www.facebook.com sandbox.secure.checkout.visa.com secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com assets.secure.checkout.visa.com thm.visa.com helloextend-static-assets.s3.amazonaws.com *.igodigital.com *.salesforceliveagent.com *.trackedlink.net *.gstatic.com assets.braintreegateway.com data: 'self' 'unsafe-inline'; script-src *.commerce-payment-services.com challenges.cloudflare.com ct.captcha-delivery.com *.zohocdn.com *.zohopublic.com widgets.syfpayments.com googleads.g.doubleclick.net www.clickcease.com intljs.rmtag.com *.samash.com cdn.cookielaw.org *.searchspring.io *.searchspring.net cdn-sandbox.ca-dev.co cdn.chargeafter.com *.aptrinsic.com assets.adobedtm.com *.adobe.com *.adobe.io *.cardinalcommerce.com includestest.ccdc02.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com *.paypal.com unpkg.com cdn.jsdelivr.net commerce.adobedtm.com js.magento-datasolutions.com amcglobal.sc.omtrdc.net commerce.adobe.net use.typekit.net magento-recs-sdk.adobe.net s.ytimg.com vimeo.com www.vimeo.com *.vimeocdn.com *.magento-datasolutions.com *.magento-ds.com www.googletagmanager.com polyfill-fastly.io *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.syfpos.com analytics.synchrony.com *.mysynchrony.com *.syf.com *.tiqcdn.com *.bc0a.com *.b0e8.com *.powerreviews.com cdn.ywxi.net *.datadome.co *.newrelic.com bam.nr-data.net www.youtube.com sslwidget.criteo.com *.criteo.com tag.rmp.rakuten.com bat.bing.com cdn.attn.tv dynamic.criteo.com *.facebook.net *.clarity.ms widget.us.criteo.com www.trustedsite.com *.api.progleasing.com static.criteo.net *.analytics.google.com samash.attn.tv events.attentivemobile.com matching.ivitrack.com secure.adnxs.com *.online-metrix.net testflex.cybersource.com flex.cybersource.com sandbox.secure.checkout.visa.com secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com assets.secure.checkout.visa.com thm.visa.com sandbox.src.mastercard.com stg03.api.progleasing.com api.progleasing.com *.helloextend.com *.igodigital.com *.salesforceliveagent.com x.klarnacdn.net *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal cdn.dnky.co webchat.dotdigital.com webchat.staging.dotdigital.com *.googleapis.com *.google.com *.gstatic.com *.avada.io www.googletagmanager.com assets.braintreegateway.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.zohocdn.com *.aptrinsic.com *.adobe.com *.magento-datasolutions.com *.magento-ds.com *.fontawesome.com *.syfpayments.com *.syfpos.com *.powerreviews.com cdn.dnky.co webchat.dotdigital.com webchat.staging.dotdigital.com *.googleapis.com *.google.com *.gstatic.com maxcdn.bootstrapcdn.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.zohocdn.com *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src crm.zoho.com *.uc.gateway.dev *.google.com.mx *.google.com.us *.googleadservices.com *.online-metrix.net www.facebook.com *.onetrust.com wss://vts.zohopublic.com *.zohopublic.com dp70uvwpivouv.cloudfront.net google.com *.searchspring.io measurement-api.criteo.com cdn.cookielaw.org beacon.searchspring.io *.chargeafter.com *.ca-dev.co *.aptrinsic.com dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com *.snplow.net commerce.adobedc.net api.magento.com *.adobe.io performance.typekit.net www.paypalobjects.com commerce.adobe.io *.magento-datasolutions.com *.magento-ds.com *.sentry.io *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.syfpos.com *.syfpayments.com *.syf.com *.d1.sc.omtrdc.net *.bc0a.com *.powerreviews.com *.amazonaws.com *.datadome.co *.doubleclick.net *.google-analytics.com bam.nr-data.net *.clarity.ms sslwidget.criteo.com widget.us.criteo.com bat.bing.com thm.visa.com stg03.api.progleasing.com api.progleasing.com *.helloextend.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com dpm.demdex.net www.gstatic.com get.geojs.io *.avada.io www.google-analytics.com *.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; worker-src blob:; default-src www.google-analytics.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://newrelic-draft-api.com/scp/report/send; report-to report-endpoint;MobX
JavaScript libraries
75%
1 evidence signal
JS Global
__mobxInstanceCount → numberMoment.js
JavaScript libraries
75%
1 evidence signal
Script
https://www.samash.com/static/frontend/Astound/samash/en_US/Mageplaza_Reports/js/lib/moment.min.jsKlarna Checkout
Payment processors
75%
1 evidence signal
Header
\.klarna(?:cdn|services)\.(?:net|com): upgrade-insecure-requests; font-src css.zohocdn.com fonts.gstatic.com use.typekit.net *.fontawesome.com www.google.com www.gstatic.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action *.cardinalcommerce.com secure.authorize.net test.authorize.net *.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.syfpayments.com *.syfpos.com www.facebook.com testsecureacceptance.cybersource.com secureacceptance.cybersource.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com 'self' 'unsafe-inline'; frame-ancestors www.google.com www.gstatic.com 'self'; frame-src *.zohopublic.com app.langshop.io hosted.where2getit.com *.mysynchrony.com *.captcha-delivery.com *.syfpayments.com td.doubleclick.net email.samash.com static.criteo.net *.chargeafter.com *.ca-dev.co fast.amc.demdex.net *.adobe.com *.cardinalcommerce.com secure.authorize.net test.authorize.net *.paypal.com player.vimeo.com *.youtube.com www.googletagmanager.com www.google.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de syf.demdex.net *.syfpos.com *.syf.com *.criteo.com www.facebook.com *.online-metrix.net testflex.cybersource.com flex.cybersource.com testsecureacceptance.cybersource.com secureacceptance.cybersource.com pay.google.com sandbox.secure.checkout.visa.com secure.checkout.visa.com thm.visa.com sandbox.src.mastercard.com demo2.progressivelp.com demo2.approve.me stg.api.progleasing.com progplugin-esign-dmo.progressivelp.com demo.docusign.net account-d.docusign.com progressivelp.com approve.me prod.api.progleasing.com progplugin-esign.progressivelp.com na2.docusign.net na.account.docusign.com *.dotdigital-pages.com *.dotdigital.com cdn.dnky.co assets.braintreegateway.com 'self' 'unsafe-inline'; img-src *.online-metrix.net *.zohocdn.com *.zohopublic.com www.googletagmanager.com cdn-assets.affirm.com pdpone.syfpayments.com samash.my.salesforce-sites.com cdn.cookielaw.org cdn-sandbox.ca-dev.co cdn.chargeafter.com storage.googleapis.com *.aptrinsic.com amasty.com assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com www.google-analytics.com www.paypalobjects.com *.paypal.com *.ftcdn.net *.behance.net p.typekit.net *.vimeocdn.com i.ytimg.com validator.swagger.io d3cgm8py10hi0z.cloudfront.net d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de static-eu.payments-amazon.com *.syfpos.com *.syf.com analytics.synchrony.com *.d1.sc.omtrdc.net *.mysynchrony.com *.bc0a.com *.b0e8.com samash.secure.force.com *.powerreviews.com *.linksynergy.com img.youtube.com static-na.payments-amazon.com bat.bing.com cdn.ywxi.net www.google.com csm.va.us.criteo.net s.thebrighttag.com gum.criteo.com beacon.krxd.net ad.yieldlab.net dis.criteo.com sync-criteo.ads.yieldmo.com ad.sxp.smartclip.net visitor.omnitagjs.com cm.adform.net ups.analytics.yahoo.com eb2.3lift.com criteo-sync.teads.tv sync-t1.taboola.com rtb-csync.smartadserver.com match.sharethrough.com pixel.rubiconproject.com simage2.pubmatic.com sync.outbrain.com exchange.mediavine.com contextual.media.net ad.360yield.com r.casalemedia.com ib.adnxs.com *.g.doubleclick.net x.bidswitch.net criteo-partners.tremorhub.com connect.facebook.net www.facebook.com sandbox.secure.checkout.visa.com secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com assets.secure.checkout.visa.com thm.visa.com helloextend-static-assets.s3.amazonaws.com *.igodigital.com *.salesforceliveagent.com *.trackedlink.net *.gstatic.com assets.braintreegateway.com data: 'self' 'unsafe-inline'; script-src *.commerce-payment-services.com challenges.cloudflare.com ct.captcha-delivery.com *.zohocdn.com *.zohopublic.com widgets.syfpayments.com googleads.g.doubleclick.net www.clickcease.com intljs.rmtag.com *.samash.com cdn.cookielaw.org *.searchspring.io *.searchspring.net cdn-sandbox.ca-dev.co cdn.chargeafter.com *.aptrinsic.com assets.adobedtm.com *.adobe.com *.adobe.io *.cardinalcommerce.com includestest.ccdc02.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com *.paypal.com unpkg.com cdn.jsdelivr.net commerce.adobedtm.com js.magento-datasolutions.com amcglobal.sc.omtrdc.net commerce.adobe.net use.typekit.net magento-recs-sdk.adobe.net s.ytimg.com vimeo.com www.vimeo.com *.vimeocdn.com *.magento-datasolutions.com *.magento-ds.com www.googletagmanager.com polyfill-fastly.io *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.syfpos.com analytics.synchrony.com *.mysynchrony.com *.syf.com *.tiqcdn.com *.bc0a.com *.b0e8.com *.powerreviews.com cdn.ywxi.net *.datadome.co *.newrelic.com bam.nr-data.net www.youtube.com sslwidget.criteo.com *.criteo.com tag.rmp.rakuten.com bat.bing.com cdn.attn.tv dynamic.criteo.com *.facebook.net *.clarity.ms widget.us.criteo.com www.trustedsite.com *.api.progleasing.com static.criteo.net *.analytics.google.com samash.attn.tv events.attentivemobile.com matching.ivitrack.com secure.adnxs.com *.online-metrix.net testflex.cybersource.com flex.cybersource.com sandbox.secure.checkout.visa.com secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com assets.secure.checkout.visa.com thm.visa.com sandbox.src.mastercard.com stg03.api.progleasing.com api.progleasing.com *.helloextend.com *.igodigital.com *.salesforceliveagent.com x.klarnacdn.net *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal cdn.dnky.co webchat.dotdigital.com webchat.staging.dotdigital.com *.googleapis.com *.google.com *.gstatic.com *.avada.io www.googletagmanager.com assets.braintreegateway.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.zohocdn.com *.aptrinsic.com *.adobe.com *.magento-datasolutions.com *.magento-ds.com *.fontawesome.com *.syfpayments.com *.syfpos.com *.powerreviews.com cdn.dnky.co webchat.dotdigital.com webchat.staging.dotdigital.com *.googleapis.com *.google.com *.gstatic.com maxcdn.bootstrapcdn.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.zohocdn.com *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src crm.zoho.com *.uc.gateway.dev *.google.com.mx *.google.com.us *.googleadservices.com *.online-metrix.net www.facebook.com *.onetrust.com wss://vts.zohopublic.com *.zohopublic.com dp70uvwpivouv.cloudfront.net google.com *.searchspring.io measurement-api.criteo.com cdn.cookielaw.org beacon.searchspring.io *.chargeafter.com *.ca-dev.co *.aptrinsic.com dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com *.snplow.net commerce.adobedc.net api.magento.com *.adobe.io performance.typekit.net www.paypalobjects.com commerce.adobe.io *.magento-datasolutions.com *.magento-ds.com *.sentry.io *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.syfpos.com *.syfpayments.com *.syf.com *.d1.sc.omtrdc.net *.bc0a.com *.powerreviews.com *.amazonaws.com *.datadome.co *.doubleclick.net *.google-analytics.com bam.nr-data.net *.clarity.ms sslwidget.criteo.com widget.us.criteo.com bat.bing.com thm.visa.com stg03.api.progleasing.com api.progleasing.com *.helloextend.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com dpm.demdex.net www.gstatic.com get.geojs.io *.avada.io www.google-analytics.com *.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; worker-src blob:; default-src www.google-analytics.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://newrelic-draft-api.com/scp/report/send; report-to report-endpoint;authorize.net
Payment processors
75%
1 evidence signal
Header
\.authorize\.net\s: upgrade-insecure-requests; font-src css.zohocdn.com fonts.gstatic.com use.typekit.net *.fontawesome.com www.google.com www.gstatic.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action *.cardinalcommerce.com secure.authorize.net test.authorize.net *.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.syfpayments.com *.syfpos.com www.facebook.com testsecureacceptance.cybersource.com secureacceptance.cybersource.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com 'self' 'unsafe-inline'; frame-ancestors www.google.com www.gstatic.com 'self'; frame-src *.zohopublic.com app.langshop.io hosted.where2getit.com *.mysynchrony.com *.captcha-delivery.com *.syfpayments.com td.doubleclick.net email.samash.com static.criteo.net *.chargeafter.com *.ca-dev.co fast.amc.demdex.net *.adobe.com *.cardinalcommerce.com secure.authorize.net test.authorize.net *.paypal.com player.vimeo.com *.youtube.com www.googletagmanager.com www.google.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de syf.demdex.net *.syfpos.com *.syf.com *.criteo.com www.facebook.com *.online-metrix.net testflex.cybersource.com flex.cybersource.com testsecureacceptance.cybersource.com secureacceptance.cybersource.com pay.google.com sandbox.secure.checkout.visa.com secure.checkout.visa.com thm.visa.com sandbox.src.mastercard.com demo2.progressivelp.com demo2.approve.me stg.api.progleasing.com progplugin-esign-dmo.progressivelp.com demo.docusign.net account-d.docusign.com progressivelp.com approve.me prod.api.progleasing.com progplugin-esign.progressivelp.com na2.docusign.net na.account.docusign.com *.dotdigital-pages.com *.dotdigital.com cdn.dnky.co assets.braintreegateway.com 'self' 'unsafe-inline'; img-src *.online-metrix.net *.zohocdn.com *.zohopublic.com www.googletagmanager.com cdn-assets.affirm.com pdpone.syfpayments.com samash.my.salesforce-sites.com cdn.cookielaw.org cdn-sandbox.ca-dev.co cdn.chargeafter.com storage.googleapis.com *.aptrinsic.com amasty.com assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com www.google-analytics.com www.paypalobjects.com *.paypal.com *.ftcdn.net *.behance.net p.typekit.net *.vimeocdn.com i.ytimg.com validator.swagger.io d3cgm8py10hi0z.cloudfront.net d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de static-eu.payments-amazon.com *.syfpos.com *.syf.com analytics.synchrony.com *.d1.sc.omtrdc.net *.mysynchrony.com *.bc0a.com *.b0e8.com samash.secure.force.com *.powerreviews.com *.linksynergy.com img.youtube.com static-na.payments-amazon.com bat.bing.com cdn.ywxi.net www.google.com csm.va.us.criteo.net s.thebrighttag.com gum.criteo.com beacon.krxd.net ad.yieldlab.net dis.criteo.com sync-criteo.ads.yieldmo.com ad.sxp.smartclip.net visitor.omnitagjs.com cm.adform.net ups.analytics.yahoo.com eb2.3lift.com criteo-sync.teads.tv sync-t1.taboola.com rtb-csync.smartadserver.com match.sharethrough.com pixel.rubiconproject.com simage2.pubmatic.com sync.outbrain.com exchange.mediavine.com contextual.media.net ad.360yield.com r.casalemedia.com ib.adnxs.com *.g.doubleclick.net x.bidswitch.net criteo-partners.tremorhub.com connect.facebook.net www.facebook.com sandbox.secure.checkout.visa.com secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com assets.secure.checkout.visa.com thm.visa.com helloextend-static-assets.s3.amazonaws.com *.igodigital.com *.salesforceliveagent.com *.trackedlink.net *.gstatic.com assets.braintreegateway.com data: 'self' 'unsafe-inline'; script-src *.commerce-payment-services.com challenges.cloudflare.com ct.captcha-delivery.com *.zohocdn.com *.zohopublic.com widgets.syfpayments.com googleads.g.doubleclick.net www.clickcease.com intljs.rmtag.com *.samash.com cdn.cookielaw.org *.searchspring.io *.searchspring.net cdn-sandbox.ca-dev.co cdn.chargeafter.com *.aptrinsic.com assets.adobedtm.com *.adobe.com *.adobe.io *.cardinalcommerce.com includestest.ccdc02.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com *.paypal.com unpkg.com cdn.jsdelivr.net commerce.adobedtm.com js.magento-datasolutions.com amcglobal.sc.omtrdc.net commerce.adobe.net use.typekit.net magento-recs-sdk.adobe.net s.ytimg.com vimeo.com www.vimeo.com *.vimeocdn.com *.magento-datasolutions.com *.magento-ds.com www.googletagmanager.com polyfill-fastly.io *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.syfpos.com analytics.synchrony.com *.mysynchrony.com *.syf.com *.tiqcdn.com *.bc0a.com *.b0e8.com *.powerreviews.com cdn.ywxi.net *.datadome.co *.newrelic.com bam.nr-data.net www.youtube.com sslwidget.criteo.com *.criteo.com tag.rmp.rakuten.com bat.bing.com cdn.attn.tv dynamic.criteo.com *.facebook.net *.clarity.ms widget.us.criteo.com www.trustedsite.com *.api.progleasing.com static.criteo.net *.analytics.google.com samash.attn.tv events.attentivemobile.com matching.ivitrack.com secure.adnxs.com *.online-metrix.net testflex.cybersource.com flex.cybersource.com sandbox.secure.checkout.visa.com secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com assets.secure.checkout.visa.com thm.visa.com sandbox.src.mastercard.com stg03.api.progleasing.com api.progleasing.com *.helloextend.com *.igodigital.com *.salesforceliveagent.com x.klarnacdn.net *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal cdn.dnky.co webchat.dotdigital.com webchat.staging.dotdigital.com *.googleapis.com *.google.com *.gstatic.com *.avada.io www.googletagmanager.com assets.braintreegateway.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.zohocdn.com *.aptrinsic.com *.adobe.com *.magento-datasolutions.com *.magento-ds.com *.fontawesome.com *.syfpayments.com *.syfpos.com *.powerreviews.com cdn.dnky.co webchat.dotdigital.com webchat.staging.dotdigital.com *.googleapis.com *.google.com *.gstatic.com maxcdn.bootstrapcdn.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.zohocdn.com *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src crm.zoho.com *.uc.gateway.dev *.google.com.mx *.google.com.us *.googleadservices.com *.online-metrix.net www.facebook.com *.onetrust.com wss://vts.zohopublic.com *.zohopublic.com dp70uvwpivouv.cloudfront.net google.com *.searchspring.io measurement-api.criteo.com cdn.cookielaw.org beacon.searchspring.io *.chargeafter.com *.ca-dev.co *.aptrinsic.com dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com *.snplow.net commerce.adobedc.net api.magento.com *.adobe.io performance.typekit.net www.paypalobjects.com commerce.adobe.io *.magento-datasolutions.com *.magento-ds.com *.sentry.io *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.syfpos.com *.syfpayments.com *.syf.com *.d1.sc.omtrdc.net *.bc0a.com *.powerreviews.com *.amazonaws.com *.datadome.co *.doubleclick.net *.google-analytics.com bam.nr-data.net *.clarity.ms sslwidget.criteo.com widget.us.criteo.com bat.bing.com thm.visa.com stg03.api.progleasing.com api.progleasing.com *.helloextend.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com dpm.demdex.net www.gstatic.com get.geojs.io *.avada.io www.google-analytics.com *.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; worker-src blob:; default-src www.google-analytics.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://newrelic-draft-api.com/scp/report/send; report-to report-endpoint;