Heals.com

accept-ranges: bytes
x-content-type-options: nosniff
set-cookie: PHPSESSID=e9a43dfbf4ee9baf48cf532ad8318df4; expires=Thu, 14-Aug-2025 16:01:44 GMT; Max-Age=604800; path=/; domain=heals.com; secure; HttpOnly; SameSite=Lax
traceresponse: 00-1859877de906821c75806f4e1201d10b-baba4daf2b45c627-01
location: https://www.heals.com/
x-timer: S1754582505.682721,VS0,VE102
content-type: text/html; charset=UTF-8
expires: Wed, 07 Aug 2024 16:01:44 GMT
content-security-policy-report-only: font-src fonts.googleapis.com fonts.gstatic.com https://cdn.checkout.com images.getfastr.com https://www.gstatic.com https://fonts.gstatic.com *.cloudfront.net *.reviews.io *.reviews.co.uk data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.nosto.com *.nos.to *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.reviews.io *.reviews.co.uk 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://js.checkout.com *.klarna.com consentcdn.cookiebot.com consentcdn.cookiebot.eu https://*.cylindo.com/ ls.smct.io td.doubleclick.net d2d7do8qaecbru.cloudfront.net ct.pinterest.com edigitalsurvey.com sst.heals.com https://*.fixtuur.io/ https://*.digitalbridgehq.com blob: intent: https://www.googletagmanager.com/ https://www.google.com *.nosto.com *.nos.to c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.reviews.io *.reviews.co.uk 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io maps.googleapis.com maps.gstatic.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com imgsct.cookiebot.com imgsct.cookiebot.eu https://*.cylindo.com/ links.imagerelay.com images.getfastr.com gis.goinstore.com bat.bing.com c.az.contentsquare.net www.google.com.ua ad.doubleclick.net adservice.google.com sp.analytics.yahoo.com insight.adsrvr.org assets.reviews.io heals.content.fixtuur.io services.postcodeanywhere.co.uk js.checkout.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.nosto.com *.nos.to www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.cloudfront.net *.reviews.io *.reviews.co.uk data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://cdn.checkout.com *.klarnacdn.net consent.cookiebot.com consent.cookiebot.eu https://*.cylindo.com/ heals-1.store-uk1.advancedcommerce.services cas.zma.gs static.klaviyo.com static-tracking.klaviyo.com gis.goinstore.com sdk.fixtuur.io cdn.shipup.co cdn.usehero.com consentcdn.cookiebot.com s.pinimg.com smct.co t.contentsquare.net bat.bing.com analytics.webgains.io cdn.sub2tech.com assets.gocertify.me js.smct.io js-agent.newrelic.com ct.pinterest.com uk005.sub2tech.com s.yimg.com sm001.sub2tech.com viewer.cylindo.com scripts.sirv.com uk002.sub2tech.com www.google.com static-na.payments-amazon.com www.gstatic.com services.postcodeanywhere.co.uk cdn.checkout.com https://*.fixtuur.io/ https://*.digitalbridgehq.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://www.google.com https://www.gstatic.com *.nosto.com *.nos.to js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.reviews.io *.reviews.co.uk 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://cdn.checkout.com https://*.cylindo.com/ cdn.shipup.co widget.reviews.io assets.reviews.io gis.goinstore.com viewer.cylindo.com scripts.sirv.com js.checkout.com https://static.klaviyo.com *.nosto.com *.nos.to unsafe-inline assets.braintreegateway.com *.cloudfront.net *.reviews.io *.reviews.co.uk 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://js.checkout.com *.klarnaevt.com consentcdn.cookiebot.com consentcdn.cookiebot.eu https://*.cylindo.com/ sst.heals.com cas.zma.gs fast.a.klaviyo.com static-forms.klaviyo.com eu.prd.impact.fixtuur.com ct.pinterest.com ep.smct.co k-eu1.az.contentsquare.net api.usehero.com c.az.contentsquare.net srm.aa.contentsquare.net bam.nr-data.net s.yimg.com adservice.google.com api.reviews.io heals.content.fixtuur.io stats.sirv.com services.postcodeanywhere.co.uk js.checkout.com fpjs.checkout.com risk.checkout.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.nosto.com *.nos.to api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.cloudfront.net *.reviews.io *.reviews.co.uk 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src bat.bing.com k-eu1.az.contentsquare.net c.az.contentsquare.net bam.nr-data.net www.google.com google.com stats.sirv.com heals-1.tracking-uk1.advancedcommerce.services www.paypal.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://349fdf52-472e-46ad-8c8c-5e785e5026a3.sansec.watch/; report-to report-endpoint;
cache-control: max-age=0, must-revalidate, no-cache, no-store
x-platform-server: i-085b648bd30adeac6
x-platform-server: i-085b648bd30adeac6
report-to: {"group":"report-endpoint","max_age":10886400,"endpoints":[{"url":"https://349fdf52-472e-46ad-8c8c-5e785e5026a3.sansec.watch/"}]}
x-xss-protection: 1; mode=block
x-debug-info: eyJyZXRyaWVzIjowfQ==
pragma: no-cache
x-frame-options: SAMEORIGIN
date: Thu, 07 Aug 2025 16:01:44 GMT
x-served-by: cache-lhr-egll1980026-LHR, cache-lhr-egll1980026-LHR, cache-fra-etou8220177-FRA
x-cache: MISS, MISS, MISS
x-cache-hits: 0, 0, 0
strict-transport-security: max-age=31536000
vary: Accept-Encoding,Cookie
content-length: 0

HTTP/2 200 
expires: Fri, 08 Aug 2025 14:55:35 GMT
x-xss-protection: 1; mode=block
pragma: cache
traceresponse: 00-185983e1cb1be97c6053b3f2f145e924-41e000f54ffaa281-01
x-platform-server: i-0e5edbbca2b0f3b20
x-platform-server: i-0e5edbbca2b0f3b20
x-timer: S1754578536.630872,VS0,VE1429
content-type: text/html; charset=UTF-8
report-to: {"group":"report-endpoint","max_age":10886400,"endpoints":[{"url":"https://349fdf52-472e-46ad-8c8c-5e785e5026a3.sansec.watch/"}]}
x-content-type-options: nosniff
content-security-policy-report-only: font-src fonts.googleapis.com fonts.gstatic.com https://cdn.checkout.com images.getfastr.com https://www.gstatic.com https://fonts.gstatic.com *.cloudfront.net *.reviews.io *.reviews.co.uk data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.nosto.com *.nos.to *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.reviews.io *.reviews.co.uk 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://js.checkout.com *.klarna.com consentcdn.cookiebot.com consentcdn.cookiebot.eu https://*.cylindo.com/ ls.smct.io td.doubleclick.net d2d7do8qaecbru.cloudfront.net ct.pinterest.com edigitalsurvey.com sst.heals.com https://*.fixtuur.io/ https://*.digitalbridgehq.com blob: intent: https://www.googletagmanager.com/ https://www.google.com *.nosto.com *.nos.to c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.reviews.io *.reviews.co.uk 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io maps.googleapis.com maps.gstatic.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com imgsct.cookiebot.com imgsct.cookiebot.eu https://*.cylindo.com/ links.imagerelay.com images.getfastr.com gis.goinstore.com bat.bing.com c.az.contentsquare.net www.google.com.ua ad.doubleclick.net adservice.google.com sp.analytics.yahoo.com insight.adsrvr.org assets.reviews.io heals.content.fixtuur.io services.postcodeanywhere.co.uk js.checkout.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.nosto.com *.nos.to www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.cloudfront.net *.reviews.io *.reviews.co.uk data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://cdn.checkout.com *.klarnacdn.net consent.cookiebot.com consent.cookiebot.eu https://*.cylindo.com/ heals-1.store-uk1.advancedcommerce.services cas.zma.gs static.klaviyo.com static-tracking.klaviyo.com gis.goinstore.com sdk.fixtuur.io cdn.shipup.co cdn.usehero.com consentcdn.cookiebot.com s.pinimg.com smct.co t.contentsquare.net bat.bing.com analytics.webgains.io cdn.sub2tech.com assets.gocertify.me js.smct.io js-agent.newrelic.com ct.pinterest.com uk005.sub2tech.com s.yimg.com sm001.sub2tech.com viewer.cylindo.com scripts.sirv.com uk002.sub2tech.com www.google.com static-na.payments-amazon.com www.gstatic.com services.postcodeanywhere.co.uk cdn.checkout.com https://*.fixtuur.io/ https://*.digitalbridgehq.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://www.google.com https://www.gstatic.com *.nosto.com *.nos.to js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.reviews.io *.reviews.co.uk 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://cdn.checkout.com https://*.cylindo.com/ cdn.shipup.co widget.reviews.io assets.reviews.io gis.goinstore.com viewer.cylindo.com scripts.sirv.com js.checkout.com https://static.klaviyo.com *.nosto.com *.nos.to unsafe-inline assets.braintreegateway.com *.cloudfront.net *.reviews.io *.reviews.co.uk 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://js.checkout.com *.klarnaevt.com consentcdn.cookiebot.com consentcdn.cookiebot.eu https://*.cylindo.com/ sst.heals.com cas.zma.gs fast.a.klaviyo.com static-forms.klaviyo.com eu.prd.impact.fixtuur.com ct.pinterest.com ep.smct.co k-eu1.az.contentsquare.net api.usehero.com c.az.contentsquare.net srm.aa.contentsquare.net bam.nr-data.net s.yimg.com adservice.google.com api.reviews.io heals.content.fixtuur.io stats.sirv.com services.postcodeanywhere.co.uk js.checkout.com fpjs.checkout.com risk.checkout.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.nosto.com *.nos.to api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.cloudfront.net *.reviews.io *.reviews.co.uk 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src bat.bing.com k-eu1.az.contentsquare.net c.az.contentsquare.net bam.nr-data.net www.google.com google.com stats.sirv.com heals-1.tracking-uk1.advancedcommerce.services www.paypal.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://349fdf52-472e-46ad-8c8c-5e785e5026a3.sansec.watch/; report-to report-endpoint;
x-debug-info: eyJyZXRyaWVzIjowfQ==
link: /static/version1753445080/_cache/merged/4b422aba0048d39e9fbb52067cb295fe.min.css, https://cdn.shipup.co/latest_v2/shipup.css, /static/version1753445080/frontend/heals/theme-frontend-heals/en_GB/css/styles-l.min.css, /static/version1753445080/frontend/heals/theme-frontend-heals/en_GB/css/print.min.css, https://widget.reviews.io/rating-snippet/dist.css, /static/version1753445080/frontend/heals/theme-frontend-heals/en_GB/requirejs/require.min.js, /static/version1753445080/frontend/heals/theme-frontend-heals/en_GB/requirejs-min-resolver.min.js, /static/version1753445080/frontend/heals/theme-frontend-heals/en_GB/mage/requirejs/mixins.min.js, /static/version1753445080/frontend/heals/theme-frontend-heals/en_GB/requirejs-config.min.js, /static/version1753445080/frontend/heals/theme-frontend-heals/en_GB/js/theme_custom.min.js, https://static.klaviyo.com/onsite/js/klaviyo.js?company_id=WVZRnf, https://consent.cookiebot.com/uc.js, /static/version1753445080/frontend/heals/theme-frontend-heals/en_GB/jquery.min.js, /static/version1753445080/frontend/heals/theme-frontend-heals/en_GB/mage/dataPost.min.js, /static/version1753445080/frontend/heals/theme-frontend-heals/en_GB/mage/bootstrap.min.js
x-frame-options: SAMEORIGIN
content-encoding: br
accept-ranges: bytes
date: Thu, 07 Aug 2025 16:01:44 GMT
age: 3967
x-served-by: cache-lhr-egll1980052-LHR, cache-lhr-egll1980044-LHR, cache-fra-etou8220171-FRA
x-cache: MISS, HIT, HIT
x-cache-hits: 0, 9, 1
strict-transport-security: max-age=31536000
cache-control: no-store, no-cache, must-revalidate, max-age=0
vary: Accept-Encoding,Cookie
content-length: 63490