HTTP/1.1 200 OK
Date: Sun, 19 Jul 2026 06:15:30 GMT
Server: Apache
Referrer-Policy: strict-origin-when-cross-origin
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=63072000
Set-Cookie: sfg_ga=%7C%7C; secure; HttpOnly; SameSite=Lax
Content-Security-Policy: upgrade-insecure-requests; frame-ancestors 'self'  *.ttha.com ttha.com *.ttha.mysites.io ttha.mysites.io *.huntersextravaganza.com huntersextravaganza.com *.thenation.com thenation.com *.sunshineartist.com sunshineartist.com *.dollsmagazine.com dollsmagazine.com *.todayschristianliving.org todayschristianliving.org *.piperowner.org piperowner.org *.cessnaowner.org cessnaowner.org *.smart-retailer.com smart-retailer.com *.handmade-business.com handmade-business.com; object-src 'none'; report-uri /ecom/sfg/app/live/csp_monitor?t=1784441731580886&ro=N; report-to /ecom/sfg/app/live/csp_monitor?t=1784441731580886&ro=N;
X-Frame-Options: DENY
Content-Security-Policy-Report-Only: script-src https://l.getsitecontrol.com/ https://sdk.flowpoint.ai/ 'self' 'unsafe-inline' https://googletagmanager.com https://*.googletagmanager.com https://google-analytics.com https://*.google-analytics.com https://*.gstatic.com https://*.google.com https://connect.facebook.net https://www.paypalobjects.com https://www.paypal.com https://applepay.cdn-apple.com/jsapi/;connect-src https://l.getsitecontrol.com https://*.doubleclick.net 'self' https://analytics.google.com https://*.analytics.google.com https://google-analytics.com https://*.google-analytics.com https://www.google.com https://googletagmanager.com https://*.googletagmanager.com https://*.facebook.com https://www.paypal.com https://translate.googleapis.com https://translate-pa.googleapis.com;img-src https://*.google.com.at https://*.google.com.br https://*.google.com.co.uk https://*.google.com.cz https://*.google.com.fr https://*.google.com.eg https://*.google.com.es https://*.google.com.it https://*.google.com.pt https://*.google.com.uk 'self' data: https://www.merchantequip.com https://*.google.com https://googletagmanager.com https://*.googletagmanager.com https://google-analytics.com https://*.google-analytics.com https://*.facebook.com https://fonts.gstatic.com;default-src 'self' 'unsafe-inline';frame-src 'self' https://*.google.com https://*.gstatic.com https://googletagmanager.com https://*.googletagmanager.com https://www.snappayglobal.com https://www.paypal.com;style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://www.gstatic.com;font-src 'self' https://fonts.googleapis.com;form-action 'self';report-uri /ecom/sfg/app/live/csp_monitor?t=1784441731586003&ro=Y;report-to /ecom/sfg/app/live/csp_monitor?t=1784441731586003&ro=Y
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: PHPSESSID=t5mkpdkuqrcbh3pte3g2g4buqi; path=/;samesite=Lax; secure; HttpOnly
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: no-cache, no-store
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8