yotoplay.com Review

 N/A

HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Tue, 19 Aug 2025 22:53:08 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://yotoplay.com/
X-Cache: Redirect from cloudfront
Via: 1.1 1c37116cbfe9d9ab1d19c37d356598a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: NRT57-P9
X-Amz-Cf-Id: 4aiVTWY7bB-l8LNxBuitJKrwmPMyQ6-BIidJb3XuDyJLJxBo9xAbDA==
x-viewer-country: 

HTTP/1.1 302 Moved Temporarily
Content-Length: 0
Connection: keep-alive
Server: CloudFront
Date: Tue, 19 Aug 2025 21:21:47 GMT
Location: https://au.yotoplay.com/
x-viewer-country: JP
X-Cache: Hit from cloudfront
Via: 1.1 92e3d3961440871305e475333ed7fe7a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: NRT57-P9
X-Amz-Cf-Id: 8K1jvl9mIRCJ3Uqd8c4TOyH_eMKLP1mtKHcggUDZ8Xrrl0sWIfzRtg==
Age: 5481

HTTP/1.1 200 OK
Age: 23590
Cache-Control: public,max-age=0,must-revalidate
Cache-Status: "Next.js"; hit
Cache-Status: "Netlify Edge"; fwd=stale
Content-Encoding: br
Content-Length: 42993
Content-Security-Policy: default-src 'self' assets.gorgias.chat; base-uri 'none'; child-src 'self' blob: app.netlify.com netlify-cdp-loader.netlify.app; connect-src 'self' lb.affilae.com *.lottiefiles.com *.myshopify.com *.onetrust.com graphql.datocms.com test.aws.fooropa.com stockist.co *.stockist.workers.dev *.cloudfunctions.net bat.bing.com *.ip-api.com *.mapbox.com www.facebook.com *.doubleclick.net analytics.tiktok.com api.yotoplay.com geo.yotoplay.com *.sentry.io *.amplitude.com *.maze.co cdn.amplitude.com au.yotoplay.com uk.yotoplay.com eu.yotoplay.com us.yotoplay.com ca.yotoplay.com adservice.google.com www.googletagmanager.com www.googleadservices.com *.google-analytics.com *.analytics.google.com www.google.com www.google.co.uk *.googleapis.com analytics.google.com www.google-analytics.com ws: *.gorgias.chat *.gorgias.io api.gorgias.work storage.googleapis.com gorgias-convert.com wss://us-east1-898b.gorgias.chat sdk.fra-02.braze.eu api.pennies.org.uk yoto-media-api-prod-smart-cable-photos.s3.eu-west-2.amazonaws.com ingesteer.services-prod.nsvcs.net heapanalytics.com c.us.heap-api.com *.contentsquare.net widget.trustpilot.com *.fastly.mux.com *.cfcdn.mux.com stream.mux.com *.abtasty.com aspireiq.go2cloud.org browser-intake-datadoghq.com rum.browser-intake-datadoghq.eu rum.browser-intake-datadoghq.com www.wepowerconnections.com the.sciencebehindecommerce.com; media-src 'self' cdn.yoto.io cdn.shopify.com listen.radioking.com www.datocms-assets.com s3.radio.co *.gorgias.chat blob: data: stream.mux.com *.fastly.mux.com *.cfcdn.mux.com; font-src 'self' data: fonts.gstatic.com *.gorgias.chat *.gorgias.io *.maze.co cdn.shopify.com heapanalytics.com *.auryc.com common-fonts.abtasty.com; form-action 'self' www.facebook.com yoto-media-api-prod-smart-cable-photos.s3.eu-west-2.amazonaws.com; frame-ancestors *.netlify.app 'self'; frame-src 'self' player.vimeo.com widget.trustpilot.com support.yotoplay.com *.netlify.app lb.affilae.com https://www.googletagmanager.com td.doubleclick.net www.awin1.com contact.gorgias.help yoto-support.gorgias.help www.google.com app.netlify.com netlify-cdp-loader.netlify.app *.maze.co www.facebook.com js.stripe.com www.youtube.com qa-assistant.abtasty.com; img-src blob: data: 'unsafe-inline' static.affilae.com lb.affilae.com www.datocms-assets.com dummyimage.com source.unsplash.com images.unsplash.com cdn.shopify.com *.onetrust.com *.blob.core.windows.net ssl.gstatic.com bat.bing.com stockist.co *.mapbox.com *.clarity.ms www.facebook.com connect.facebook.net *.doubleclick.net *.quantcount.com *.quantserve.com picsum.photos *.picsum.photos *.maze.co *.tvsquared.com *.demdex.net 'self' lantern.roeye.com www.awin1.com translate.google.com lh3.google.com www.googletagmanager.com www.google-analytics.com analytics.google.com www.google.com www.google.co.uk www.google.com.au www.google.ie *.gstatic.com *googleapis.com lh3.googleusercontent.com maps.googleapis.com www.googleadservices.com *.gorgias.chat config.gorgias.io us-east1-898b.gorgias.chat storage.googleapis.com api.gorgias.work contact.gorgias.help appboy-images.com braze-images.com cdn.braze.eu s3-eu-west-1.amazonaws.com/penniesfoundation/charities/000000-150.png s3-eu-west-1.amazonaws.com/penniesfoundation/charities/20000073-150.png heapanalytics.com *.contentsquare.net editor-assets.abtasty.com www.abtasty.com teddytor.abtasty.com *.lightboxcdn.com c5.adalyser.com; manifest-src 'self'; object-src 'none'; script-src 'self' 'unsafe-eval' 'unsafe-inline' static.affilae.com bat.bing.com *.onetrust.com *.mountain.com www.facebook.com connect.facebook.net widget.trustpilot.com www.google-analytics.com *.googleapis.com cdn.jsdelivr.net stockist.co *.stockist.co *.cloudflare.com www.googleoptimize.com analytics.tiktok.com the.sciencebehindecommerce.com app.backinstock.org *.quantcount.com *.quantserve.com polyfill.io snippet.maze.co snap.licdn.com *.amplitude.com js.go2sdk.com flackr.github.io uk.yotoplay.com us.yotoplay.com eu.yotoplay.com ca.yotoplay.com au.yotoplay.com *.yotoplay.com googleads.g.doubleclick.net www.awin1.com www.dwin1.com lantern.roeyecdn.com www.googletagmanager.com tagmanager.google.com app.netlify.com netlify-cdp-loader.netlify.app netlify-rum.netlify.app *.maze.co rum.browser-intake-datadoghq.eu rum.browser-intake-datadoghq.com www.datadoghq-browser-agent.com browser.sentry-cdn.com *.tvsquared.com js.sentry-cdn.com js.appboycdn.com contact.gorgias.help/api/contact-forms/loader.js www.google.com config.gorgias.chat assets.gorgias.chat config.gorgias.io us-east1-898b.gorgias.chat storage.googleapis.com api.gorgias.work www.gstatic.com contact.gorgias.help *.dyn-rev.app bundle.dyn-rev.app js.stripe.com/v3 js.stripe.com/v3/fingerprinted/* https://js.stripe.com/v3/fingerprinted/js/embedded-checkout-outer-e5064220e674a4bc7ec61e3c563354eb.js https://js.stripe.com/v3/fingerprinted/js/trusted-types-checker-efd8cf45ce422659c098993bfc62531b.js heapanalytics.com cdn.heapanalytics.com cdn.us.heap-api.com t.contentsquare.net cdn.logwork.com try.abtasty.com teddytor.abtasty.com qa-assistant.abtasty.com *.lightboxcdn.com backinstock.useamp.com c5.adalyser.com www.redditstatic.com; style-src * 'self' data: 'unsafe-inline' www.datocms-assets.com tagmanager.google.com fonts.googleapis.com blob: try.abtasty.com heapanalytics.com; worker-src 'self' blob:; report-uri https://o219359.ingest.sentry.io/api/4505918023008256/security/?sentry_key=2ac3cae6afd61d8a2d6e49621c07025f; report-to csp-endpoint;
Content-Type: text/html; charset=utf-8
Date: Tue, 19 Aug 2025 22:53:09 GMT
Etag: "3wodt3bhsy9zw7-df"
Netlify-Vary: query=__nextDataReq|_rsc,header=x-nextjs-data|x-next-debug-logging|next-router-prefetch|next-router-segment-prefetch|next-router-state-tree|next-url|rsc,cookie=__prerender_bypass|__next_preview_data
Referrer-Policy: origin-when-cross-origin
Server: Netlify
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
X-Dns-Prefetch-Control: on
X-Frame-Options: DENY
X-Nextjs-Date: Tue, 19 Aug 2025 22:53:09 GMT
X-Nf-Request-Id: 01K328JJXV7ZBCZNCQE5J5G5Q2
X-Powered-By: Next.js
X-Xss-Protection: 1; mode=block