Checkout
Complete your purchase
✅ Skimmer blocked. CSP prevented the skimmer script from loading.
Your payment details are safe. The violation was reported to Report URI.
CSP header sent with this page
Content-Security-Policy: default-src 'self'; script-src 'self'; style-src 'self'; img-src 'self' data:; connect-src 'self'; form-action 'self'; report-uri https://helios.report-uri.com/r/t/csp/enforce; report-to default
What CSP did
script-src 'self' blocked the skimmer from loading, and
connect-src 'self' would have blocked any outbound data beacon even if the
script had found another way to execute. Both violations were reported to Report URI in real time.