Transcat.com

server: nginx
date: Wed, 19 Feb 2025 11:09:17 GMT
content-type: text/html
content-length: 162
location: https://www.transcat.com/
strict-transport-security: max-age=63072000

HTTP/2 200 
server: nginx
date: Wed, 19 Feb 2025 11:09:17 GMT
content-type: text/html; charset=UTF-8
content-security-policy: font-src fonts.gstatic.com use.typekit.net *.gstatic.com 'self' data: 'self' data: https://fonts.gstatic.com https://*.cloudfront.net https://us-cdn.inside-graph.com https://c1.sfdcstatic.com https://use.typekit.net https://*.hotjar.com *.transcat.ca *.transcat.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cenpos.net *.cenpos.com *.google.com *.gstatic.com *.cardinalcommerce.com *.transcat.ca *.transcat.com *.tfaforms.com *.tfaforms.net *.hsforms.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.cenpos.net *.cenpos.com *.google.com *.gstatic.com *.cardinalcommerce.com 'self' *.transcat.com *.transcat.ca *.tfaforms.com *.tfaforms.net *.hsforms.net *.hsforms.com https://bid.g.doubleclick.net https://amc.demdex.net https://us-live.inside-graph.com https://www.cenpos.net https://www.google.com https://www.youtube.com https://maps.google.com https://www.facebook.com https://www.tfaforms.com https://online.flippingbook.com https://vars.hotjar.com https://*.dotdigital-pages.com https://home-c52.nice-incontact.com https://*.hotjar.com *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.asc-stage-magento.com asc-stage-magento.com *.channels.magento.com channels.magento.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.ftcdn.net *.behance.net *.disqus.com *.hsforms.net *.hsforms.com 'self' data: 'self' about: *.tfaforms.net *.tfaforms.com *.transcat.ca *.transcat.com http://www.transcat.com https://www.google.com https://www.facebook.com https://www.google-analytics.com https://*.cloudfront.net https://bat.bing.com https://cdn.bizible.com https://amcglobal.sc.omtrdc.net https://ssl.google-analytics.com https://cm.everesttech.net https://st2.dialogtech.com https://*.smarterspecies.com https://*.transcat.com https://a.b0e8.com https://online.flippingbook.com https://www.paypalobjects.com https://googleads.g.doubleclick.net https://i.ytimg.com https://stats.g.doubleclick.net https://cdn.bizibly.com https://p.typekit.net https://us-cdn.inside-graph.com https://c.bing.com https://heapanalytics.com https://*.hotjar.com *.gstatic.com *.facebook.com *.reddit.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.asc-stage-magento.com asc-stage-magento.com *.channels.magento.com channels.magento.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net commerce.adobe.net use.typekit.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.magento-datasolutions.com *.magento-ds.com *.cenpos.com *.cenpos.net *.google.com *.gstatic.com *.cardinalcommerce.com *.disqus.com *.hsforms.net *.hsforms.com 'self' 'unsafe-eval' 'unsafe-inline' *.transcat.com *.transcat.ca *.tfaforms.com *.tfaforms.net js.hs-scripts.com https://*.cloudfront.net https://www.tfaforms.com https://www.googlecommerce.com https://www.google.com https://www.googletagmanager.com https://www.google-analytics.com https://www.cenpos.com https://apis.google.com https://bat.bing.com https://cdn.b0e8.com https://cdn.bc0a.com https://cdn.jsdelivr.net https://cdn.inspectlet.com https://cdn.bizible.com https://connect.facebook.net https://ssl.google-analytics.com https://st1.dialogtech.com https://staging.cenpos.com https://us-tracker.inside-graph.com https://assets.adobedtm.com https://googleads.g.doubleclick.net https://static.trackedweb.net https://www.gstatic.com https://fonts.googleapis.com https://service.force.com https://*.salesforceliveagent.com https://my.jst.ai https://online.flippingbook.com https://cdn.jst.ai https://aly.jst.ai https://www.googleadservices.com https://transcat--tcatptcopy.my.salesforce.com https://us-live.inside-graph.com https://cdn.amazon.channels.magento.com https://use.typekit.net https://us-cdn.inside-graph.com https://static.hotjar.com https://script.hotjar.com https://*.dotdigital-pages.com https://solutions.invocacdn.com https://cdn.heapanalytics.com https://pnapi.invoca.net https://home-c52.nice-incontact.com https://*.hotjar.com tagmanager.google.com *.facebook.net *.redditstatic.com *.reddit.com unpkg.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.asc-stage-magento.com asc-stage-magento.com *.channels.magento.com channels.magento.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com *.googleapis.com *.gstatic.com *.transcat.ca *.transcat.com 'self' 'unsafe-eval' 'unsafe-inline' *.tfaforms.net *.tfaforms.com *.hsforms.com https://www.tfaforms.com https://*.cloudfront.net ttps://us-cdn.inside-graph.com https://fonts.googleapis.com https://service.force.com https://cdn.jst.ai https://cdn.amazon.channels.magento.com https://*.hotjar.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.asc-stage-magento.com asc-stage-magento.com *.channels.magento.com channels.magento.com 'self' 'self' 'unsafe-inline'; manifest-src *.asc-stage-magento.com asc-stage-magento.com *.channels.magento.com channels.magento.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.asc-stage-magento.com asc-stage-magento.com *.channels.magento.com channels.magento.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.magento-datasolutions.com *.magento-ds.com *.sentry.io t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com *.transcat.ca *.transcat.com 'self' *.tfaforms.com https://aly.jst.ai https://my.jst.ai https://bat.bing.com https://*.cloudfront.net https://dpm.demdex.net https://hn.inspectlet.com https://ixfd1-api.bc0a.com https://r2.trackedweb.net https://stats.g.doubleclick.net https://www.facebook.com https://www.google-analytics.com wss://us-live.inside-graph.com https://fbo-b.flippingbook.com https://tcatptcopy-transcat.cs34.force.com https://cdn.amazon.channels.magento.com https://us-cdn.inside-graph.com https://online.flippingbook.com wss://*.hotjar.com *.facebook.net *.redditstatic.com *.reddit.com *.doubleclick.net 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.asc-stage-magento.com asc-stage-magento.com *.channels.magento.com channels.magento.com *.googleapis.com 'self' https://*.cloudfront.net https://*.hotjar.com 'self' 'unsafe-inline' 'unsafe-eval'; upgrade-insecure-requests;
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: no-referrer-when-downgrade
permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=*, battery=(), camera=(), cross-origin-isolated=*, display-capture=*, document-domain=*, encrypted-media=*, execution-while-not-rendered=*, execution-while-out-of-viewport=*, fullscreen=*, geolocation=*, gyroscope=(), keyboard-map=*, magnetometer=(), microphone=(), midi=(), navigation-override=(), payment=(self "https://cenpos.com" "https://*.cenpos.com" "https://cenpos.net" "https://*.cenpos.net"), picture-in-picture=*, publickey-credentials-get=*, screen-wake-lock=*, sync-xhr=*, usb=(), web-share=*, xr-spatial-tracking=()
vary: Accept-Encoding
x-pool: prod
x-server: transcat2
content-encoding: gzip
accept-ranges: bytes
pragma: no-cache
expires: -1
cache-control: no-store, no-cache, must-revalidate, max-age=0
strict-transport-security: max-age=63072000
x-server: transcat2