HTTP/1.1 403 Forbidden
Date: Sun, 05 Jan 2025 09:41:25 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 6965
Connection: close
Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
Critical-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
Cross-Origin-Embedder-Policy: require-corp
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Origin-Agent-Cluster: ?1
Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
Referrer-Policy: same-origin
X-Content-Options: nosniff
X-Frame-Options: SAMEORIGIN
cf-mitigated: challenge
cf-chl-out: BcRHEVAhpChGeIe/mBKdqpEbkkdTwVM5uD8o6Qf3+MdYk7JQcs+B+ZpNP/qk8B0wFZ5zNFcSUXxp23uytvrvcxMlY7pmNPsCwivh8BzAsrscQTxLLgYWkHczCfDPBbMHLemGnEADx0pAEsPTmc1aUQ==$oryQgtpXb/9gx0AXazBh7g==
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Set-Cookie: __cf_bm=vpSZEYWJAD0qPiGnSy94JnL0.Zomj0OvnDu0yRRie7E-1736070085-1.0.1.1-_G1lL5kJb._fpmIuQFOv2pbCWa_OsiuzUGpgINZophHO4BIy.1..zBhTHYbVWlfjAqSN6nbgMy0csmkOAcui0A; path=/; expires=Sun, 05-Jan-25 10:11:25 GMT; domain=.yalwa.es; HttpOnly
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 8fd283316b572cc2-DFW

HTTP/1.1 200 OK
Date: Wed, 22 Jan 2025 23:32:40 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
vary: Accept-Encoding
pragma: no-cache
Cache-Control: max-age=0, must-revalidate, no-cache, no-store
expires: Mon, 22 Jan 2024 23:32:38 GMT
report-to: {"group":"report-endpoint","max_age":10886400,"endpoints":[{"url":"https:\/\/humanelement.report-uri.com\/r\/d\/csp\/enforce"}]}
content-security-policy-report-only: font-src ctiapi.com s3.amazonaws.com *.fontawesome.com fonts.gstatic.com *.gstatic.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com secure.authorize.net test.authorize.net pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com ctiapi.com *.hestage.com *.ecklers.com *.ecklerscorvette.com *.macsautoparts.com *.rickscamaros.com *.classicchevy.com *.cardinalcommerce.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com secure.authorize.net test.authorize.net www.googletagmanager.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.sharethis.com *.doubleclick.net *.clarity.ms *.vantivprelive.com *.google.com *.listrak.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com validator.swagger.io *.sharethis.com ctiapi.com s3.amazonaws.com youtube.com *.ecklers.com *.gfycat.com *.imgeng.in *.cloudfront.net *.userid.io *.bing.com *.google.com *.clarity.ms *.listrakbi.com *.riskified.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.googletagmanager.com www.paypalobjects.com js.braintreegateway.com www.paypal.com www.sandbox.paypal.com t.paypal.com s.ytimg.com www.googleapis.com *.vimeo.com www.vimeo.com *.vimeocdn.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.sharethis.com us-autocomplete-pro.api.smartystreets.com ctiapi.com *.cloudfront.net *.cloudflare.com *.bc0a.com *.online-metrix.net *.vantivprelive.com *.listrak.com *.listrakbi.com *.listrakbi.net *.userid.io *.bing.com *.datasteam.io *.doubleclick.net *.upsellit.com *.clarity.ms *.murdoog.com *.dwin1.com *.needle.com *.cardinalcommerce.com *.ccdc02.com *.braintreegateway.com *.ytimg.com *.gstatic.com *.ctiapi.com *.riskified.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com *.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.sharethis.com ctiapi.com *.fontawesome.com *.cloudfront.net *.listrakbi.net *.listrakbi.com *.googleapis.com unsafe-inline *.gstatic.com 'self' 'unsafe-inline'; object-src ctiapi.com s3.amazonaws.com 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net *.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.sharethis.com us-autocomplete-pro.api.smartystreets.com ctiapi.com *.bc0a.com *.brontops.com *.ecklers.com *.doubleclick.net *.cloudfront.net *.listrak.com *.clarity.ms *.ecklerscorvette.com *.macsautoparts.com *.rickscamaros.com *.classicchevy.com *.demdex.net *.cardinalcommerce.com *.google.com *.google-analytics.com *.paypalobjects.com *.ctiapi.com *.riskified.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com t.elasticsuite.io 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://humanelement.report-uri.com/r/d/csp/enforce; report-to report-endpoint;
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-frame-options: SAMEORIGIN
Set-Cookie: PHPSESSID=013ab3e81a1042065d7fe0f670ab1abf; expires=Thu, 23-Jan-2025 00:32:38 GMT; Max-Age=3600; path=/; domain=www.macsautoparts.com; secure; HttpOnly; SameSite=Lax
access-control-allow-origin: *
access-control-allow-origin: *
x-ua-compatible: IE=edge
x-cache-nxaccel: BYPASS
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 9063582b9b766a2a-LAX

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:cf:8d:27:a8:9a:c9:68:11:28:b5:a7:a2:24:52:3c
        Signature Algorithm: ecdsa-with-SHA256
        Issuer: C=US, O=Google Trust Services, CN=WE1
        Validity
            Not Before: Jan 20 21:18:02 2025 GMT
            Not After : Apr 20 22:18:00 2025 GMT
        Subject: CN=macsautoparts.com
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub:
                    04:fc:79:56:62:77:c2:df:0d:f4:ab:37:52:16:96:
                    a4:ae:a0:da:30:99:96:00:61:fb:75:42:41:97:70:
                    fe:a5:17:75:24:f9:44:88:1d:fe:54:c0:6a:b3:b7:
                    92:34:d2:54:b2:38:ee:b7:57:92:ec:fc:a8:57:13:
                    57:b3:52:96:0c
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                C7:5D:C4:E7:4A:A0:D4:F7:11:68:1D:DC:EE:BB:20:50:96:B8:00:C6
            X509v3 Authority Key Identifier: 
                90:77:92:35:67:C4:FF:A8:CC:A9:E6:7B:D9:80:79:7B:CC:93:F9:38
            Authority Information Access: 
                OCSP - URI:http://o.pki.goog/s/we1/IM8
                CA Issuers - URI:http://i.pki.goog/we1.crt
            X509v3 Subject Alternative Name: 
                DNS:macsautoparts.com, DNS:*.macsautoparts.com
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://c.pki.goog/we1/UIumR6EfnvM.crl
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : CF:11:56:EE:D5:2E:7C:AF:F3:87:5B:D9:69:2E:9B:E9:
                                1A:71:67:4A:B0:17:EC:AC:01:D2:5B:77:CE:CC:3B:08
                    Timestamp : Jan 20 22:18:03.367 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:80:E4:19:86:DB:C7:E6:EC:F1:BE:39:
                                D2:3D:7B:50:FE:A5:BA:72:E6:58:D9:CF:FA:08:B6:D7:
                                B7:5D:DC:94:DB:02:20:5C:70:40:B3:7F:16:59:F1:6B:
                                D3:F8:7B:8E:1F:0B:A9:98:2A:97:A6:BD:64:8E:6A:B2:
                                74:1E:04:4C:82:8F:E0
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 73:20:22:0F:08:16:8A:F9:F3:C4:A6:8B:0A:B2:6A:9A:
                                4A:00:EE:F5:77:85:8A:08:4D:05:00:D4:A5:42:44:59
                    Timestamp : Jan 20 22:18:03.349 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:CB:F7:26:5B:9F:86:83:20:44:5A:84:
                                41:6E:9C:4A:A0:77:BD:E5:1C:29:C3:0D:BB:B4:4F:9A:
                                9B:56:D7:01:3B:02:21:00:CD:14:D1:54:47:36:D3:3F:
                                FB:CD:65:B7:39:E9:51:64:38:A1:5B:B2:EC:CB:1F:E3:
                                A1:A8:8D:84:DA:73:2E:3C
    Signature Algorithm: ecdsa-with-SHA256
    Signature Value:
        30:45:02:21:00:ab:dc:f3:ab:79:ce:f9:92:13:06:64:5d:8f:
        8b:1d:25:f6:be:79:d6:12:01:cb:73:ab:b1:05:bb:63:bf:e7:
        7a:02:20:65:29:91:32:c2:08:a2:b5:9b:45:d1:cc:9f:b6:e9:
        42:33:5f:80:95:44:1a:e2:df:6d:b3:b7:fd:be:9c:28:59

HTTP/1.1 400 Bad Request
Server: cloudflare
Date: Tue, 21 Jan 2025 08:56:23 GMT
Content-Type: text/html
Content-Length: 655
Connection: close
CF-RAY: -

HTTP/1.1 403 Forbidden
Date: Fri, 17 Jan 2025 04:28:56 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 5892
Connection: close
X-Frame-Options: SAMEORIGIN
Referrer-Policy: same-origin
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 903399f42e3e1019-LAX

HTTP/1.1 400 Bad Request
Server: cloudflare
Date: Mon, 13 Jan 2025 02:26:10 GMT
Content-Type: text/html
Content-Length: 655
Connection: close
CF-RAY: -

CloudFlare

HTTP/1.1 403 Forbidden
Date: Wed, 01 Jan 2025 09:24:14 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 5895
Connection: close
X-Frame-Options: SAMEORIGIN
Referrer-Policy: same-origin
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 8fb17485c8247745-AMS

CloudFlare

HTTP/1.1 400 Bad Request
Server: cloudflare
Date: Sun, 19 Jan 2025 08:17:53 GMT
Content-Type: text/html
Content-Length: 655
Connection: close
CF-RAY: -

HTTP/1.1 403 Forbidden
Date: Wed, 01 Jan 2025 06:31:36 GMT
Content-Type: text/plain; charset=UTF-8
Content-Length: 16
Connection: close
X-Frame-Options: SAMEORIGIN
Referrer-Policy: same-origin
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Server: cloudflare
CF-RAY: 8fb077a2efb02d41-DFW

error code: 1003