HTTP/2 200 
server: nginx
date: Fri, 04 Jul 2025 17:26:42 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-xss-protection: 1; mode=block
content-security-policy: default-src 'self' https://static.allovoisins.com ; connect-src 'self' *.allovoisins.com *.google.com google.com ka-p.fontawesome.com api.privacy-center.org px.ads.linkedin.com px4.ads.linkedin.com analytics.tiktok.com bat.bing.com www.facebook.com graph.facebook.com https://graph.facebook.com https://capig.stape.host pagead2.googlesyndication.com securepubads.g.doubleclick.net *.googleapis.com vc.hotjar.com wss://ws.hotjar.com content.hotjar.io https://analytics-ipv6.tiktokw.us *.clarity.ms/ api.mangopay.com pci.mangopay.com *.payline.com www.welcomekit.co wss://*.twilio.com events.allovoisins.com:8443 ; img-src 'self' data: blob: *.allovoisins.com https://static.allovoisins.com *.google.com api.privacy-center.org www.googletagmanager.com px.ads.linkedin.com px1.ads.linkedin.com px2.ads.linkedin.com px3.ads.linkedin.com px4.ads.linkedin.com analytics.tiktok.com bat.bing.com www.facebook.com js.chargebee.com *.amazonaws.com sdk.privacy-center.org ; media-src 'self' blog.allovoisins.com ; font-src 'self' *.allovoisins.com ka-p.fontawesome.com *.google.com js.chargebee.com ; script-src 'self' *.allovoisins.com 'unsafe-inline' 'unsafe-eval' securepubads.g.doubleclick.net static.hotjar.com script.hotjar.com snap.licdn.com bat.bing.com analytics.tiktok.com www.facebook.com connect.facebook.net *.google.com google.com www.gstatic.com www.googletagmanager.com www.googleadservices.com sdk.privacy-center.org kit.fontawesome.com ka-p.fontawesome.com cdn.jsdelivr.net px.ads.linkedin.com px1.ads.linkedin.com px2.ads.linkedin.com px3.ads.linkedin.com px4.ads.linkedin.com js.chargebee.com www.welcomekit.co cdnjs.cloudflare.com https://www.youtube.com/ *.clarity.ms/ ; style-src 'self' *.allovoisins.com 'unsafe-inline' *.google.com ka-p.fontawesome.com px.ads.linkedin.com px1.ads.linkedin.com px2.ads.linkedin.com px3.ads.linkedin.com px4.ads.linkedin.com cdnjs.cloudflare.com js.chargebee.com ; object-src 'self' *.allovoisins.com https://static.allovoisins.com ; base-uri 'self' ; form-action 'self' sdk.privacy-center.org www.facebook.com ; frame-ancestors 'self' *.allovoisins.com *.google.com www.facebook.com js.chargebee.com ; frame-src js.chargebee.com allovoisins.chargebee.com accounts.google.com https://accounts.google.com https://www.youtube.com/ https://www.googletagmanager.com https://www.google.com ; worker-src 'self' *.allovoisins.com blob: data: ;
x-frame-options: SAMEORIGIN
permissions-policy: accelerometer=(), geolocation=self, autoplay=self, fullscreen=(), payment=()
referrer-policy: strict-origin
x-content-type-options: nosniff
set-cookie: ily_csrf_token=1420e479941f45d5c0eeb063e8cfa5f7; expires=Sat, 05 Jul 2025 17:26:42 GMT; Max-Age=86400; path=/; secure; HttpOnly; SameSite=Strict
set-cookie: session=ipgcqafujd8pee18t8m548brdm7tjc7i; expires=Sat, 05 Jul 2025 17:26:42 GMT; Max-Age=86400; path=/; secure; HttpOnly; SameSite=Lax
set-cookie: ily_ab_test_id=9; expires=Sat, 05 Jul 2025 17:28:22 GMT; Max-Age=86500; path=/; secure; HttpOnly; SameSite=Lax
last-modified: Fri, 04 Jul 2025 17:26:42 GMT
cache-control: no-store,  no-cache, max-age=0, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
expires: Mon, 26 Jul 1997 05:00:00 GMT
x-frame-options: 46.105.77.174
content-encoding: gzip
strict-transport-security: max-age=63072000; includeSubDomains; preload;
set-cookie: MOLSESSION=S3|aGgOv|aGgOv; path=/; HttpOnly; Secure; Max-Age=86400