thewitchery.com website report

HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
Date: Fri, 23 Oct 2026 23:05:56 GMT
Server: Microsoft-IIS/10.0
Content-Encoding: gzip
Set-Cookie: ARRAffinity=1fb25d3acf105cc5dc921bb006b8a24bdb8410956e7d2a55de9119893aa3a384;Path=/;HttpOnly;Secure;Domain=www.thewitchery.com, ARRAffinitySameSite=1fb25d3acf105cc5dc921bb006b8a24bdb8410956e7d2a55de9119893aa3a384;Path=/;HttpOnly;SameSite=None;Secure;Domain=www.thewitchery.com
Transfer-Encoding: chunked
Vary: Accept-Encoding
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Referrer-Policy: strict-origin
X-Permitted-Cross-Domain-Policies: none
Permissions-Policy: accelerometer=(self), autoplay=(self), camera=(self), clipboard-read=(self), clipboard-write=(self), display-capture=(self), encrypted-media=(self), fullscreen=(self), gamepad=(self), geolocation=(self), gyroscope=(self), hid=(self), idle-detection=(self), keyboard-map=(self), magnetometer=(self), microphone=(self), midi=(self), payment=(self), picture-in-picture=*, publickey-credentials-get=(self), screen-wake-lock=(self), serial=(self), usb=(self), web-share=(self), xr-spatial-tracking=(self)
Content-Security-Policy: connect-src 'self' ws: *.google.com *.googletagmanager.com tagmanager.google.com fonts.googleapis.com *.googleapis.com *.gstatic.com *.marker.io *.amazonaws.com *.cookiebot.com www.youtube.com www.youtube-nocookie.com *.flodesk.com stats.g.doubleclick.net ad.doubleclick.net *.hotjar.io *.bing.com *.bing.net *.clarity.ms *.google-analytics.com www.facebook.com *.googlesyndication.com *.google.com www.googleadservices.com www.google.co.uk ws.hotjar.com www.facebook.com www.google.bg *.google-analytics.com www.google.de *.googlesyndication.com www.google.com.hk www.google.it www.google.ie www.google.co.in www.google.com.gh www.google.fi www.google.ru www.google.im www.google.co.uk www.google.cz www.google.co.il www.google.com www.google.dk www.google.ro www.google.com.br www.google.com.ph www.google.ca www.google.com.au ws.hotjar.com www.google.com.ar www.google.es www.google.ch www.google.com.mx *.resdiary.com *.stripe.com; default-src 'self'; font-src 'self' data: fonts.gstatic.com *.google.com *.marker.io *.amazonaws.com *.cookiebot.com *.flodesk.com *.resdiary.com; form-action 'self' *.marker.io *.google.com *.amazonaws.com *.flodesk.com clicks.emailmarketingbrilliance.co.uk; frame-ancestors 'self' *.marker.io *.google.com *.amazonaws.com *.resdiary.com ; frame-src 'self' *.marker.io *.google.com *.amazonaws.com *.resdiary.com *.cookiebot.com www.youtube.com www.youtube-nocookie.com player.vimeo.com *.flodesk.com *.googletagmanager.com *.facebook.com be.synxis.com bat.bing.com *.stripe.com *.doubleclick.net td.doubleclick.net player.mediadelivery.net; img-src 'self' data: *.umbraco.com *.google.com *.googletagmanager.com  *.googleapis.com *.gstatic.com *.marker.io *.amazonaws.com *.cookiebot.com i.ytimg.com i.vimeocdn.com *.flodesk.com *.google.com *.google.co.uk stats.g.doubleclick.net ad.doubleclick.net *.clarity.ms *.bing.com *.bing.net *.facebook.com *.googlesyndication.com connect.facebook.net www.google.de www.google.ca www.google.ie www.google.fr www.google.com.au www.google.es www.google.nl www.google.it www.google.ch www.google.co.in www.google.dk www.google.se www.google.com.ar www.google.fi www.google.is www.google.com.tr www.google.bg www.google.com.sg www.google.com.br www.google.be www.google.com.om www.google.ru www.google.co.nz www.google.am www.google.pl www.google.com.hk www.google.iq www.google.cz www.google.com.mx *.googlesyndication.com www.google.ae www.google.co.il www.google.com.ua www.google.co.kr www.google.no www.google.pt www.google.co.za www.google.im www.googleadservices.com www.google.gr www.google.com.gh www.google.com.ph www.google.co.jp www.google.al www.google.kg www.google.ro www.google.com.eg www.google.bs www.google.hu www.google.co.th www.google.com.pk www.google.com.pe resdiary.blob.core.windows.net booking.resdiary.com; media-src 'self' *.marker.io *.google.com *.amazonaws.com www.youtube.com www.youtube-nocookie.com player.vimeo.com player.vimeo.com vimeo.com *.flodesk.com ; report-uri https://csp.click2convert.dev/api/csp-collector; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.google.com *.googletagmanager.com tagmanager.google.com *.marker.io *.amazonaws.com *.googleapis.com *.gstatic.com *.cookiebot.com www.youtube.com www.youtube-nocookie.com player.vimeo.com vimeo.com f.vimeocdn.com *.flodesk.com *.hotjar.com *.clarity.ms *.bing.com *.bing.net *.facebook.net sc-static.net static.hotjar.com *.resdiary.com *.stripe.com *.doubleclick.net *.g.doubleclick.net; style-src 'self' 'unsafe-inline'  *.google.com *.googletagmanager.com tagmanager.google.com fonts.googleapis.com *.marker.io *.amazonaws.com *.googleapis.com *.gstatic.com *.cookiebot.com *.flodesk.com *.clarity.ms *.resdiary.com *.stripe.com; worker-src 'self' *.marker.io *.google.com *.amazonaws.com;
X-Powered-By: ASP.NET