| date: |
Sat, 11 Jan 2025 22:12:51 GMT |
| content-type: |
text/html; charset=UTF-8 |
| transfer-encoding: |
chunked |
| connection: |
close |
| vary: |
Accept-Encoding |
| content-security-policy: |
font-src *.gstatic.com *.carrotquest.app *.flocktory.com streamerce.ru *.loreal.io data: 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com www.pharmacosmetica.ru *.rigla.ru rigla.ru https://webvisor.com https://*.webvisor.com https://metrika.yandex.ru https://*.yandex.net https://mc.yandex.ru https://mc.yandex.az https://mc.yandex.by https://mc.yandex.com https://mc.yandex.kz https://mc.webvisor.com https://mc.webvisor.org https://yastatic.net 'self'; frame-src fast.amc.demdex.net *.adobe.com secure.authorize.net test.authorize.net player.vimeo.com *.youtube.com www.googletagmanager.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com *.google.com makeupstat.ru *.makeupstat.ru *.doubleclick.net *.flocktory.com *.modiface.com *.streamerce.ru *.1dmp.io *.facebook.com *.creativesoldiers.ru *.mail.ru *.adhigh.net *.weborama.fr www.youtube-nocookie.com *.ok.ru *.loreal.com.ru skinq-lamoda-landing.l2.oggettoweb.com metrika.yandex.ru metrika.yandex.by metrica.yandex.com metrica.yandex.com.tr *.webvisor.com metrica.yandex.ru vk.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net *.vimeocdn.com i.ytimg.com www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com yandex.ru *.yandex.ru *.yandex.net *.google.com *.google.ru *.googletagmanager.com *.maps.yandex.net vk.com *.vk.me *.mail.ru *.mneniya.pro *.carrotquest.app *.carrotquest.io *.mobfox.com *.betweendigital.com *.onaudience.com *.adnxs.com *.digitaltarget.ru *.bestssp.com *.whiteboxdigital.ru *.rutarget.ru *.admixer.net *.1dmp.io *.aidata.io *.weborama.fr *.doubleclick.net *.adriver.ru *.bidswitch.net *.facebook.com flocktory.com *.flocktory.com *.hybrid.ai *.openx.net *.retailrocket.net *.scaletrk.com *.jivosite.com pafutos.com lenkmio.com *.admitad.com *.asbmit.com artfut.com advertising.com *.advertising.com *.adform.net adform.net *.adhigh.net *.mts.ru *.popmechanic.ru *.userapi.com *.360yield.com *.stevensegallery.com streamerce.ru *.analytics.yahoo.com *.rubiconproject.com vichy.ru *.pubmatic.com *.taboola.com *.loreal.io *.smartadserver.com *.gumgum.com blob: *.vichyconsult.ru *.mindbox.ru cstatic.weborama-tech.ru data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com *.mindbox.ru *.yandex.ru *.maps.yandex.net yastatic.net *.yastatic.net *.google.com *.googleapis.com *.gstatic.com *.googletagmanager.com *.mail.ru vk.com *.facebook.net cdn.jsdelivr.net *.carrotquest.io *.retailrocket.ru *.tkrconnector.com *.artfut.com *.doubleclick.net *.jivosite.com *.youtube.com *.facebook.com *.fbcdn.net *.modiface.com *.cloudflare.com *.carrotquest.app *.carrottrack.io *.nr-data.net flocktory.com *.flocktory.com *.hybrid.ai *.jsdelivr.net *.lenmit.com *.newrelic.com *.retailrocket.net *.ttarget.ru *.unpkg.com *.jquery.com *.popmechanic.ru streamerce.ru dsf-cdn.loreal.io *.loreal.io *.tiktok.com *.weborama.fr *.ok.ru *.loreal.com.ru oatm.laroche-posay.ru inside-our-products.wsf-e-loreal.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.google.com *.googleapis.com *.jivosite.com wss://*.jivosite.com *.retailrocket.net *.flocktory.com *.googletagmanager.com www.googletagmanager.com *.cloudflare.com *.popmechanic.ru streamerce.ru *.loreal.io *.mindbox.ru *.carrotquest.app 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.jivosite.com *.carrotquest.app *.flocktory.com blob: 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.mindbox.ru yandex.ru *.yandex.ru *.yandex.net *.google.com *.google.ru *.googleapis.com *.googletagmanager.com *.dadata.ru *.carrotquest.app ws://*.carrotquest.app wss://*.carrotquest.app *.carrotquest.io *.carrottrack.io *.jivosite.com wss://*.jivosite.com *.modiface.com *.doubleclick.net *.retailrocket.net *.mail.ru vk.com *.adhigh.net *.nr-data.net *.hybrid.ai *.weborama.fr *.akamai.com *.facebook.com *.popmechanic.ru streamerce.ru *.loreal.io *.visualstudio.com *.mux.com/ cdn.jsdelivr.net oatm.laroche-posay.ru inside-our-products.wsf-e-loreal.com *.carrottrack.app 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; |
| x-content-type-options: |
nosniff, nosniff |
| x-xss-protection: |
1; mode=block, 1; mode=block |
| x-frame-options: |
ALLOW-FROM https://webvisor.com/ |
| x-vary-has-changed: |
|
| strict-transport-security: |
max-age=31536000; includeSubDomains, max-age=31536000; includeSubDomains |
| feature-policy: |
camera * |
| access-control-allow-origin: |
* |
| x-permitted-cross-domain-policies: |
master-only |
| referrer-policy: |
no-referrer-when-downgrade |
| set-cookie: |
GA_VARIATION=54; Expires=Sat, 11 Jan 2025 23:12:51 GMT; SameSite=Lax; Path=/;,__cf_bm=Wg9zG9sF1ZJPSYznZVyOkhxgyaoc_vvdej_j.Z.YiR8-1736633571-1.0.1.1-ryUFZz1SlnctXTLgFWbnYzOlu3jbj8bgj5npF2l.u.GEGvYj5ULCXf.8XqHRGIpjFl8YHGU4qI29euyQU_8X0A; path=/; expires=Sat, 11-Jan-25 22:42:51 GMT; domain=.vichy.ru; HttpOnly; Secure; SameSite=None |
| pragma: |
no-cache |
| expires: |
-1 |
| cache-control: |
no-store, no-cache, must-revalidate, max-age=0 |
| cf-cache-status: |
DYNAMIC |
| server: |
cloudflare |
| cf-ray: |
9008402f18b8b188-WAW |
