max.guitars website report

HTTP/2 200
date: Tue, 27 Oct 2026 21:06:38 GMT
content-type: text/html; charset=UTF-8
server: cloudflare
x-built-with: Hyva Themes
x-cache-debug: 1
x-magento-route: cms_index_index
x-magento-tags: mp_smtp_script,cat_c_675,cat_c_p_675,cat_c_702,cat_c_p_702,cat_c_775,cat_c_p_775,cat_c_7,cat_c_p_7,cat_c_8,cat_c_p_8,cat_c_114,cat_c_p_114,cat_c_113,cat_c_p_113,cat_c_6,cat_c_p_6,cat_c_764,cat_c_p_764,cat_c_9,cat_c_p_9,cat_c_118,cat_c_p_118,cat_c_117,cat_c_p_117,cat_c_119,cat_c_p_119,cat_c_120,cat_c_p_120,cat_c_115,cat_c_p_115,cat_c_116,cat_c_p_116,cat_c_121,cat_c_p_121,cat_c_10,cat_c_p_10,cat_c_768,cat_c_p_768,cat_c_727,cat_c_p_727,cat_c_122,cat_c_p_122,cat_c_128,cat_c_p_128,cat_c_141,cat_c_p_141,cat_c_728,cat_c_p_728,cat_c_136,cat_c_p_136,cat_c_137,cat_c_p_137,cat_c_138,cat_c_p_138,cat_c_140,cat_c_p_140,cat_c_132,cat_c_p_132,cat_c_729,cat_c_p_729,cat_c_147,cat_c_p_147,cat_c_129,cat_c_p_129,cat_c_169,cat_c_p_169,cat_c_148,cat_c_p_148,cat_c_144,cat_c_p_144,cat_c_145,cat_c_p_145,cat_c_139,cat_c_p_139,cat_c_150,cat_c_p_150,cat_c_152,cat_c_p_152,cat_c_146,cat_c_p_146,cat_c_149,cat_c_p_149,cat_c_11,cat_c_p_11,cat_c_760,cat_c_p_760,cat_c_170,cat_c_p_170,cat_c_280,cat_c_p_280,cat_c_316,cat_c_p_316,cat_c_315,cat_c_p_315,cat_c_163,cat_c_p_163,cat_c_171,cat_c_p_171,cat_c_173,cat_c_p_173,cat_c_180,cat_c_p_180,cat_c_185,cat_c_p_185,cat_c_182,cat_c_p_182,cat_c_187,cat_c_p_187,cat_c_179,cat_c_p_179,cat_c_188,cat_c_p_188,cat_c_189,cat_c_p_189,cat_c_190,cat_c_p_190,cat_c_191,cat_c_p_191,cat_c_192,cat_c_p_192,cat_c_193,cat_c_p_193,cat_c_195,cat_c_p_195,cat_c_196,cat_c_p_196,cat_c_197,cat_c_p_197,cat_c_198,cat_c_p_198,cat_c_174,cat_c_p_174,cat_c_177,cat_c_p_177,cat_c_176,cat_c_p_176,cat_c_153,cat_c_p_153,cat_c_178,cat_c_p_178,cat_c_326,cat_c_p_326,cat_c_766,cat_c_p_766,cat_c_686,cat_c_p_686,cat_c_687,cat_c_p_687,cat_c_151,cat_c_p_151,cat_c_689,cat_c_p_689,cms_b_footer_content,store,cms_b,cms_p_53,cms_b_321,cms_b_maxguitars_hyva_header_top_brands,cms_b_,cms_b_single-popup,cms_b_megamenu_block_left_cat702,cms_b_megamenu_block_right_cat702,cms_b_megamenu_block_left_cat9,cms_b_megamenu_block_right_cat9,cms_b_megamenu_block_left_cat10,cms_b_megamenu_block_right_cat10,cms_b_megamenu_block_left_cat11,cms_b_megamenu_block_right_cat11,cms_b_megamenu_block_left_cat326,cms_b_megamenu_block_right_cat326,cms_b_electro_home_section_1,cms_b_electro_home_new_products,cms_b_in-stock-tooltip,cms_b_electro_home_section_3,cms_b_electro_home_section_4,cms_b_electro_home_effects,cms_b_electro_home_section_2,cms_b_electro_home_accessories,cms_b_electro_home_section_5,cms_b_electro_home_section_6,cms_b_electro_home_section_7,cms_b_electro_home_section_8,cms_b_customer_service_warranty_info,cms_b_electro_footer_happy_to_help,cms_b_401,cms_b_maxguitars_google_reviews,cms_b_electro_footer_subscribe_heading,cms_b_electro_footer_column_1,cms_b_electro_footer_column_2,cms_b_electro_footer_column_3,cms_b_electro_footer_column_4,cms_b_electro_footer_icons_block,cms_b_electro_footer_copyright
x-cache-lifetime: 15552000
report-to: {"group":"report-endpoint","max_age":10886400,"endpoints":[{"url":"https:\/\/csp.threatview.app\/report"}]}
content-security-policy-report-only: font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.googleapis.com data: 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com https://static.dhlecommerce.nl https://fonts.gstatic.com https://use.fontawesome.com *.klarnacdn.net *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com *.googlesyndication.com *.tiktok.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com https://api.clerk.io https://cdn.clerk.io *.meetanshi.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * www.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com https://js.mollie.com https://checkoutshopper-test.adyen.com https://checkoutshopper.adyen.com *.adyen.com *.klarna.com *.meetanshi.com js.mollie.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com https://d1pna5l3xsntoj.cloudfront.net https://helloretailcdn.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.googleapis.com 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.roeye.com *.tiktok.com https://meetanshi.com/media/logo.png https://cdn.clerk.io https://maps.googleapis.com https://maps.gstatic.com https://s3.amazonaws.com https://aggregate-imgs.s3.eu-north-1.amazonaws.com https://fsc-images.s3.eu-north-1.amazonaws.com https://checkoutshopper-test.adyen.com https://checkoutshopper.adyen.com checkoutshopper-test.cdn.adyen.com checkoutshopper.cdn.adyen.com *.cdn.adyen.com *.adyen.com https://images.unsplash.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ magefan.com cm.magefan.com *.klarna.com *.klarnaevt.com *.klarnacdn.net https://firebasestorage.googleapis.com *.meetanshi.com https://www.mollie.com *.google-analytics.com ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline'; style-src *.adobe.com fonts.googleapis.com https://d1pna5l3xsntoj.cloudfront.net https://helloretailcdn.com assets.braintreegateway.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.tiktok.com https://api.clerk.io https://cdn.clerk.io https://static.dhlecommerce.nl https://maps.googleapis.com https://fonts.googleapis.com https://static.klaviyo.com https://use.fontawesome.com *.klarnacdn.net *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com https://*.cookiecode.nl tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; connect-src https://tagging.max.guitars dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://core.helloretail.com https://helloretailcdn.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.googleapis.com *.google-analytics.com *.facebook.com *.facebook.net *.doubleclick.net *.googlesyndication.com *.tiktok.com https://api-gw.dhlparcel.nl https://static.dhlecommerce.nl https://maps.googleapis.com https://*.fero.com https://*.ngrok.app wss://*.ngrok.app wss://fero.ngrok.app:3000/ws https://checkoutshopper-test.adyen.com https://checkoutshopper.adyen.com checkoutshopper-test.cdn.adyen.com checkoutshopper-live.cdn.adyen.com *.adyen.com https://player.vimeo.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com https://get.geojs.io *.avada.io *.meetanshi.com https://*.cookiecode.nl *.analytics.google.com *.googletagmanager.com *.pay.nl https: 'self' 'unsafe-inline'; script-src https://tagging.max.guitars assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://core.helloretail.com https://d1pna5l3xsntoj.cloudfront.net https://helloretailcdn.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.googlesyndication.com *.jsdelivr.net *.tiktok.com https://api.clerk.io https://cdn.clerk.io https://custom.clerk.io https://static.dhlecommerce.nl https://maps.googleapis.com https://js.mollie.com https://*.ngrok.app https://checkoutshopper-test.adyen.com https://checkoutshopper.adyen.com *.adyen.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.google-analytics.com  https://gtm.js *.paypalobjects.com *.google.com/recaptcha/ https://*.cookiecode.nl https://max.guitars *.klarna.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.avada.io player.vimeo.com *.meetanshi.com js.mollie.com https://*.hotjar.com tagmanager.google.com https: 'self' 'unsafe-inline' 'unsafe-eval'; report-uri https://csp.threatview.app/report; report-to report-endpoint;
vary: accept-encoding
x-cache-age: 15091
pragma: no-cache
expires: -1
cache-control: no-store, no-cache, must-revalidate, max-age=0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-permitted-cross-domain-policies: master-only
referrer-policy: strict-origin-when-cross-origin
alt-svc: h3=":443"; ma=86400
cf-cache-status: DYNAMIC
content-encoding: zstd
cf-ray: a514aa704972eba9-CDG