Vichy.ru

date: Thu, 07 Nov 2024 03:47:02 GMT
content-type: text/html
content-length: 143
location: https://www.vichy.ru/
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
set-cookie: __cf_bm=zolCw_2.0l85Mgdr6NSGRn77rUoqsoERHaBO9Ma45CU-1730951222-1.0.1.1-IwWJn0Q_ohMgELVqLCmf5GJDxtASpIgUt1onsTC3dAY4.ZSn8S9v3h09trQbQD7Enh_FgbBf3Gm7DAZSeZw16g; path=/; expires=Thu, 07-Nov-24 04:17:02 GMT; domain=.vichy.ru; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
cf-ray: 8dea56f149fa0298-ORD

HTTP/2 200 
date: Thu, 07 Nov 2024 03:47:02 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
content-security-policy: font-src *.gstatic.com *.carrotquest.app *.flocktory.com streamerce.ru *.loreal.io data: 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com www.pharmacosmetica.ru *.rigla.ru rigla.ru https://webvisor.com https://*.webvisor.com https://metrika.yandex.ru https://*.yandex.net https://mc.yandex.ru https://mc.yandex.az https://mc.yandex.by https://mc.yandex.com https://mc.yandex.kz https://mc.webvisor.com https://mc.webvisor.org https://yastatic.net 'self'; frame-src fast.amc.demdex.net *.adobe.com secure.authorize.net test.authorize.net player.vimeo.com *.youtube.com www.googletagmanager.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com *.google.com makeupstat.ru *.makeupstat.ru *.doubleclick.net *.flocktory.com *.modiface.com *.streamerce.ru *.1dmp.io *.facebook.com *.creativesoldiers.ru *.mail.ru *.adhigh.net *.weborama.fr www.youtube-nocookie.com *.ok.ru *.loreal.com.ru skinq-lamoda-landing.l2.oggettoweb.com metrika.yandex.ru metrika.yandex.by metrica.yandex.com metrica.yandex.com.tr *.webvisor.com metrica.yandex.ru vk.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net *.vimeocdn.com i.ytimg.com www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com yandex.ru *.yandex.ru *.yandex.net *.google.com *.google.ru *.googletagmanager.com *.maps.yandex.net vk.com *.vk.me *.mail.ru *.mneniya.pro *.carrotquest.app *.carrotquest.io *.mobfox.com *.betweendigital.com *.onaudience.com *.adnxs.com *.digitaltarget.ru *.bestssp.com *.whiteboxdigital.ru *.rutarget.ru *.admixer.net *.1dmp.io *.aidata.io *.weborama.fr *.doubleclick.net *.adriver.ru *.bidswitch.net *.facebook.com flocktory.com *.flocktory.com *.hybrid.ai *.openx.net *.retailrocket.net *.scaletrk.com *.jivosite.com pafutos.com lenkmio.com *.admitad.com *.asbmit.com artfut.com advertising.com *.advertising.com *.adform.net adform.net *.adhigh.net *.mts.ru *.popmechanic.ru *.userapi.com *.360yield.com *.stevensegallery.com streamerce.ru *.analytics.yahoo.com *.rubiconproject.com vichy.ru *.pubmatic.com *.taboola.com *.loreal.io *.smartadserver.com *.gumgum.com blob: *.vichyconsult.ru *.mindbox.ru cstatic.weborama-tech.ru data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com *.mindbox.ru *.yandex.ru *.maps.yandex.net yastatic.net *.yastatic.net *.google.com *.googleapis.com *.gstatic.com *.googletagmanager.com *.mail.ru vk.com *.facebook.net cdn.jsdelivr.net *.carrotquest.io *.retailrocket.ru *.tkrconnector.com *.artfut.com *.doubleclick.net *.jivosite.com *.youtube.com *.facebook.com *.fbcdn.net *.modiface.com *.cloudflare.com *.carrotquest.app *.carrottrack.io *.nr-data.net flocktory.com *.flocktory.com *.hybrid.ai *.jsdelivr.net *.lenmit.com *.newrelic.com *.retailrocket.net *.ttarget.ru *.unpkg.com *.jquery.com *.popmechanic.ru streamerce.ru dsf-cdn.loreal.io *.loreal.io *.tiktok.com *.weborama.fr *.ok.ru *.loreal.com.ru oatm.laroche-posay.ru inside-our-products.wsf-e-loreal.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.google.com *.googleapis.com *.jivosite.com wss://*.jivosite.com *.retailrocket.net *.flocktory.com *.googletagmanager.com www.googletagmanager.com *.cloudflare.com *.popmechanic.ru streamerce.ru *.loreal.io *.mindbox.ru *.carrotquest.app 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.jivosite.com *.carrotquest.app *.flocktory.com blob: 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.mindbox.ru yandex.ru *.yandex.ru *.yandex.net *.google.com *.google.ru *.googleapis.com *.googletagmanager.com *.dadata.ru *.carrotquest.app ws://*.carrotquest.app wss://*.carrotquest.app *.carrotquest.io *.carrottrack.io *.jivosite.com wss://*.jivosite.com *.modiface.com *.doubleclick.net *.retailrocket.net *.mail.ru vk.com *.adhigh.net *.nr-data.net *.hybrid.ai *.weborama.fr *.akamai.com *.facebook.com *.popmechanic.ru streamerce.ru *.loreal.io *.visualstudio.com *.mux.com/ cdn.jsdelivr.net oatm.laroche-posay.ru inside-our-products.wsf-e-loreal.com *.carrottrack.app 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';
x-content-type-options: nosniff
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-xss-protection: 1; mode=block
x-frame-options: ALLOW-FROM https://webvisor.com/
x-vary-has-changed: 
strict-transport-security: max-age=31536000; includeSubDomains
strict-transport-security: max-age=31536000; includeSubDomains
feature-policy: camera *
access-control-allow-origin: *
x-permitted-cross-domain-policies: master-only
referrer-policy: no-referrer-when-downgrade
set-cookie: GA_VARIATION=86; Expires=Thu, 07 Nov 2024 04:47:02 GMT; SameSite=Lax; Path=/;
pragma: no-cache
expires: -1
cache-control: no-store, no-cache, must-revalidate, max-age=0
cf-cache-status: DYNAMIC
set-cookie: __cf_bm=4hEdD5w3kC_dLX3k.XnRJ0GvV.552wwhSDZtfBFkwbg-1730951222-1.0.1.1-Ur3vJRG3pmbOhYrTpBBHtfhjOQjQnL.9K8L.Y.fSkAEaM8o.ec_jNQUypmt.yWSccI6bi3kV3BlVQgLpG8srLQ; path=/; expires=Thu, 07-Nov-24 04:17:02 GMT; domain=.vichy.ru; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 8dea56f1ddee232e-ORD
content-encoding: br