AGU.COM Website Review

HTTP/1.1 200 OK
Connection: keep-alive
report-to: {"group":"report-endpoint","max_age":10886400,"endpoints":[{"url":"https:\/\/d3a47fe8-35b6-4db2-9ced-33cd80c05948.sansec.watch\/"}]}
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
pragma: cache
x-content-type-options: nosniff
x-debug-info: eyJyZXRyaWVzIjowfQ==
x-platform-server: i-095315e20e87cdb29
x-platform-server: i-095315e20e87cdb29
content-security-policy-report-only: font-src cash-f.squarecdn.com *.yotpo.com *.googleapis.com *.gstatic.com *.flaticon.com *.baomitu.com *.googleusercontent.com *.faircado.com *.faceworks.nl *.jsdelivr.net *.typekit.net *.cloudflare.com data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com * *.facebook.com *.yotpo.com *.3dsecure.no *.wlp-acs.com *.marqeta.com *.cardcomplete.com *.securesuite.net *.eewosecure.com *.apata.io *.google.com *.easybank.at *.americanexpress.com *.securesuite.co.uk *.rsa3dsauth.com *.n26.com *.monext.fr *.ing.de *.sparkassen-kreditkarten.de *.firstdata.de *.arcot.com *.psa.at 3dsecure-vrp.de *.rabobank.nl *.salesforce.com *.sparkasse.at 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ * *.sendcloud.sc *.weltpixel.com *.yotpo.com *.opendns.com *.rabobank.nl *.wlp-acs.com *.psa.at *.bing.com *.arcot.com *.google.com *.firstdata.de google.com 3dsecure-vrp.de *.vimeo.com *.zscaler.net *.easybank.at *.americanexpress.com *.microsoftonline.com *.sbk-vs.de *.marqeta.com *.ing.de *.doubleclick.net *.rsa3dsauth.com *.facebook.com *.googletagmanager.com *.zscloud.net *.apata.io *.sparkassen-kreditkarten.de *.eewosecure.com *.agu.com *.convert.com *.3dsecure.no *.securesuite.net *.monext.fr *.securesuite.co.uk *.tradetracker.net *.sparkasse.at bing.com *.saasprotection.com vimeo.com *.n26.com *.cloudflare.com caclk.com *.zscalertwo.net 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io * https://www.google.nl magefan.com cm.magefan.com *.gstatic.com *.facebook.com *.yotpo.com *.facebook.net *.google.com *.agu.com *.trustedshops.com *.tradetracker.net *.googleusercontent.com *.tiktok.com *.bing.net *.bing.com *.google-analytics.com *.vimeo.com *.h-ams.net *.doubleclick.net *.convertexperiments.com ipavatarbucket.s3.eu-central-1.amazonaws.com *.googleadservices.com yastatic.net *.trackedlink.net *.googletagmanager.com *.linkedin.com agu.com *.googleapis.com bucket-ip-website.s3.eu-central-1.amazonaws.com *.trackedweb.net google.com *.flaticon.com *.clarity.ms data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com *.sendcloud.sc https://www.googletagmanager.com tagmanager.google.com *.facebook.net unpkg.com *.yotpo.com *.convertexperiments.com *.doubleclick.net *.bing.com d5yoctgpv4cpx.cloudfront.net *.kk-resources.com *.google.com *.vimeo.com *.googletagmanager.com *.convert.com *.eyefitu.com *.clarity.ms *.googleapis.com *.cookie-script.com secured-pixel.com *.trustedshops.com *.tiktok.com *.trackedweb.net *.agu.com *.googleadservices.com *.tradetracker.net *.varify.io *.licdn.com *.trackedlink.net 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; style-src *.adobe.com *.cash.app tagmanager.google.com *.yotpo.com *.googleapis.com *.gstatic.com *.googletagmanager.com *.cloudflare.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.bing.com *.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com * *.google-analytics.com *.facebook.net *.yotpo.com *.visualstudio.com *.clarity.ms *.googleapis.com *.agu.com *.gstatic.com *.trustedshops.com *.convertexperiments.com *.google.com *.doubleclick.net *.facebook.com *.linkedin.com *.bing.net *.hotjar.io agu.com *.eyefitu.com *.cookie-script.com *.npass.app *.tiktok.com *.varify.io google.com p2iqhncxyh.execute-api.eu-central-1.amazonaws.com *.azure.com *.googleadservices.com *.bing.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri *.clarity.ms 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; report-uri https://d3a47fe8-35b6-4db2-9ced-33cd80c05948.sansec.watch/; report-to report-endpoint;
traceresponse: 00-188653d8b498284212506c8b68b785c7-370f72f64875b302-01
x-esi: 1
x-timer: S1767192094.918278,VS0,VE596
content-type: text/html; charset=UTF-8
expires: Thu, 01 Jan 2026 14:41:34 GMT
Date: Thu, 01 Jan 2026 04:24:46 GMT
Age: 49392
X-Served-By: cache-ams21067-AMS, cache-ams2100145-AMS, cache-iad-kiad7000108-IAD
X-Cache: MISS, HIT, HIT
X-Cache-Hits: 0, 132, 1
strict-transport-security: max-age=31536000
Cache-Control: no-store, no-cache, must-revalidate, max-age=0
Vary: Accept-Encoding,Cookie
client_region: US,NJ
weather: normal
content-encoding: gzip
accept-ranges: none
transfer-encoding: chunked