Connection: keep-alive
link: ; rel=preload; as=script; crossorigin=use-credentials, ; rel=preload; as=script; crossorigin=use-credentials, ; rel=preload; as=script; crossorigin=use-credentials, ; rel=preload; as=script; crossorigin=use-credentials
link: ; rel=preconnect
link: ; rel=preconnect
link: ; rel=preconnect
link: ; rel=preconnect
link: ; rel=preconnect
x-version: 7.81_e8f7a2b7209f63336feb83b3f66643a7f429cd37
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS, PUT
access-control-allow-headers: X-PINGOTHER,Origin,X-Requested-With,Content-Type,Accept
access-control-max-age: 86400
content-type: text/html;charset=utf-8
x-server-name: marketplace_na1
server: nginx/9.5
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Thu, 26 Nov 2020 20:07:35 GMT
X-Served-By: cache-dfw18624-DFW, cache-lga21973-LGA
X-Cache: MISS, MISS
X-Cache-Hits: 0, 0
X-Timer: S1606421253.334756,VS0,VE2566
X-Trace-Id: e348ac973f2cb12594f45e263978315a1722e1c0
Vary: Cookie, Accept-Encoding,
X-DNS-Prefetch-Control: on
Strict-Transport-Security: max-age=31536000
Server-Timing: MISS-CLUSTER, fastly;desc="Edge time";dur=2566
Timing-Allow-Origin: *
X-Xss-Protection: 1
X-Application: marketplace
X-Country: CA
content-security-policy-report-only: default-src 'self' image.spreadshirtmedia.com ; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: https: *.go-mpulse.net apis.google.com assets.adobedtm.com *.cloudfront.net nxtck.com ssl.gstatic.com ws.sessioncam.com *.spreadshirt.net *.spreadshirt.com www.google-analytics.com www.google.com googleads.g.doubleclick.net connect.facebook.net www.googleadservices.com adtm.spreadshirts.net *.spreadshirt.com.au ; img-src 'self' data: https: image.spreadshirtmedia.net image.spreadshirtmedia.net *.gstatic.com rtb-csync.smartadserver.com pixel.rubiconproject.com pixel.advertising.com dsum-sec.casalemedia.com cotads.adscale.de www.google-analytics.com eu-u.openx.net ih.adscale.de *.akstat.io www.facebook.com dsum-sec.casalemedia.com ad.yieldlab.net secure.adnxs.com mapping.nxtck.com stats.g.doubleclick.net www.google.com www.google.de cm.g.doubleclick.net ads.yahoo.com sync.ligadx.com eb2.3lift.com s.sspqns.com x.bidswitch.net image2.pubmatic.com sync.outbrain.com nxtck.com sanalytics.spreadshirt.com.au *.spreadshirt.com.au ; connect-src 'self' https: *.spreadshirt.net *.spreadshirt.com www.google-analytics.com www.google.com *.go-mpulse.net *.akstat.io/ *.spreadshirt.com.au ; font-src 'self' https: data: *.spreadshirt.com.au ; style-src 'self' data: 'unsafe-inline' https: *.spreadshirt.com.au ; object-src 'none' ; media-src image.spreadshirtmedia.com ; frame-src 'self' https: www.google.com accounts.google.com *.spreadshirt.com.au ; report-uri https://csp.spreadshirts.net/csp/reportOnly ;
Cache-Control: no-transform, max-age=60, must-revalidate, private
x-encoded-content-encoding: gzip
x-encoded-content-length: 49937