hellomolly.com Review

 N/A

HTTP/1.0 308 Permanent Redirect
Content-Type: text/plain
Location: https://hellomolly.com/
Refresh: 0;url=https://hellomolly.com/
server: Vercel

HTTP/1.0 308 Permanent Redirect
Cache-Control: public, max-age=0, must-revalidate
Content-Type: text/html
Date: Mon, 25 Aug 2025 02:07:53 GMT
Location: https://www.hellomolly.com/
Refresh: 0;url=https://www.hellomolly.com/
Server: Vercel
Strict-Transport-Security: max-age=63072000
X-Vercel-Id: hnd1::chx2n-1756087673303-77bf02bd3f74

HTTP/1.0 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Age: 173436
Cache-Control: public, max-age=0, must-revalidate
Content-Disposition: inline
Content-Encoding: br
Content-Length: 18233
Content-Security-Policy: default-src 'self'; worker-src 'self' blob:; font-src 'self' data: 'unsafe-inline' https://cdn-widgetsrepository.yotpo.com/ https://fonts.gstatic.com/ https://js.stripe.com/ https://staticw2.yotpo.com/ https://use.typekit.net/; style-src 'self' 'unsafe-inline' https://cdn-widgetsrepository.yotpo.com/ https://js.stripe.com/ https://staticw2.yotpo.com/ https://vercel.live/fonts https://widget.gotolstoy.com/; style-src-elem 'self' 'unsafe-inline' http://staticw2.yotpo.com https://cdn-widgetsrepository.yotpo.com/ https://d1m2uzvk8r2fcn.cloudfront.net/scripts/embed-code/20230927/embed.css https://fonts.googleapis.com/ https://js.stripe.com/ https://vercel.live/fonts https://widget.gotolstoy.com/ https://www.googletagmanager.com/; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.hcaptcha.com *.usercentrics.eu hcaptcha.com http://cdn.scarabresearch.com http://cdn.searchspring.net/intellisuggest/is.min.js http://static.scarabresearch.com http://staticw2.yotpo.com/ https://*.bing.com https://*.cdn4.forter.com https://*.dynatrace.com https://*.google-analytics.com https://*.try.abtasty.com https://analytics.tiktok.com/ https://beacon.searchspring.io/beacon/ https://cdn-widgetsrepository.yotpo.com/ https://cdn.scarabresearch.com https://cfjump.hellomolly.com/tag/41444 https://connect.facebook.net/ https://consent.cookiebot.com/ https://consentcdn.cookiebot.com/ https://ct.pinterest.com/static/ https://d18eg7dreypte5.cloudfront.net/browse-abandonment/v2/generic.js https://d1m2uzvk8r2fcn.cloudfront.net/ https://googleads.g.doubleclick.net https://js.stripe.com/ https://*.zendesk.com/ https://s.pinimg.com/ https://shopify-gtm-suite.getelevar.com/ https://static.scarabresearch.com https://static.zdassets.com/ https://t.cfjump.com/tag/41444 https://tags.creativecdn.com/ https://try.abtasty.com https://try.abtasty.com/cross-domain-iframe.html https://us.creativecdn.com/ https://vercel.live/ https://widget.gotolstoy.com/ https://widgetsrepository.yotpo.com/ https://www.googleadservices.com/ https://www.googletagmanager.com/ www.google.com www.gstatic.com https://*.clarity.ms/ https://*.global-e.com/Scripts/Merchants/globale.merchant.storefront.js; img-src 'self' data: https: http://d3cgm8py10hi0z.cloudfront.net/is.gif http://p.yotpo.com/ http://cdn-yotpo-images-production.yotpo.com/; media-src 'self' data: https:; connect-src 'self' https: http://cdn.searchspring.net/intellisuggest/is.min.js http://staticw2.yotpo.com https://xn1d29.a.searchspring.io/ https://beacon.searchspring.io/beacon/ https://ipapi.co/json/ https://*.zendesk.com/ https://www.googletagmanager.com/ wss://*.zendesk.com/ wss://ws-us3.pusher.com/; frame-src 'self' https://consentcdn.cookiebot.com/ https://ct.pinterest.com/ https://hellomolly-embedded.myunidays.com/ https://js.stripe.com/ https://m.cmpgn.page/ https://*.gotolstoy.com/ https://tags.creativecdn.com/ https://td.doubleclick.net/ https://us.creativecdn.com/ https://vercel.live/ https://www.facebook.com/ https://www.googleadservices.com/ https://www.googletagmanager.com/ https://www.myunidays.com/ www.google.com www.gstatic.com https://shopify-gtm-suite.getelevar.com/
Content-Type: text/html; charset=utf-8
Date: Mon, 25 Aug 2025 02:07:53 GMT
Etag: "4d0d77a9ca625295a5604af6899f4e69"
Last-Modified: Fri, 22 Aug 2025 23:02:48 GMT
Referrer-Policy: same-origin
Server: Vercel
Set-Cookie: _csrfSecret=ZNcM4EZTxvqYQo4q4S4bf7xh; Path=/; Secure; HttpOnly; SameSite=strict
Strict-Transport-Security: max-age=345600; includeSubDomains
X-Content-Type-Options: nosniff
X-Csrf-Token: AAi5kw3YXnabtO5MGrHg+kdIloP5pOH1z0n8G+oO
X-Download-Options: noopen
X-Frame-Options: sameorigin
X-Matched-Path: /
X-Vercel-Cache: HIT
X-Vercel-Id: hnd1::wgg7v-1756087673433-55511c30da0e
X-Xss-Protection: 1; mode=block
Connection: keep-alive