WWW.LULUS.COM ウェブサイトのレビュー

HTTP/1.1 301 Moved Permanently
Server: Varnish
Retry-After: 0
Location: https://www.lulus.com/
Content-Length: 0
Accept-Ranges: bytes
Date: Wed, 17 Oct 2018 13:13:31 GMT
Connection: close
X-Served-By: cache-jfk8134-JFK
X-Cache: HIT
X-Cache-Hits: 0

HTTP/1.1 200 OK
Server: nginx
Content-Type: text/html; charset=utf-8
Set-Cookie: wtid=4f9qosv3tqn4535si0f0lvqaeberudginhj3549mnoigg4ldgdkg; Max-Age=1209600; Domain=.lulus.com; Path=/; Expires=Wed, 31 Oct 2018 13:13:31 GMT; HttpOnly; Secure
Set-Cookie: _csrf=8DjPnAgJ6UUdED2gaUiNKji5; Domain=.lulus.com; Path=/; HttpOnly; Secure
Set-Cookie: dtm_tracker=1; Domain=.lulus.com; Path=/; Secure
Content-Security-Policy: default-src 'self'; script-src 'self' *.lulus.com https://xo.lulus.com assets.adobedtm.com www.adobetag.com cdn.pbbl.co *.google-analytics.com stats.g.doubleclick.net www.googletagmanager.com www.googleadservices.com googleads.g.doubleclick.net www.googlecommerce.com *.google.com *.gstatic.com sc-static.net static.criteo.net *.criteo.com *.liveperson.net *.lpsnmedia.net *.certona.net *.certona.com *.res-x.com res-x.com *.certona.com p.bm23.com js.bronto.com ajax.googleapis.com *.bouncepilot.com s.pinimg.com *.pinterest.com bat.bing.com *.hotjar.com 'unsafe-inline' 'unsafe-eval' *.pbbl.co connect.facebook.net d116tqlcqfmz3v.cloudfront.net api.curalate.com js-agent.newrelic.com bam.nr-data.net; frame-src *.liveperson.net *.lpsnmedia.net *.google.com bid.g.doubleclick.net www.googletagmanager.com tr.snapchat.com fast.lulus.demdex.net lulus.demdex.net *.hotjar.com *.criteo.com static.criteo.net www.facebook.com connect.facebook.net *.pinterest.com; style-src 'unsafe-inline' *.lulus.com 'self'; media-src *.lpsnmedia.net *.lulus.com *.lulusdev.com; img-src 'self' data: *.lulusdev.com *.lulus.com https://xo.lulus.com *.lpsnmedia.net www.googletagmanager.com *.google-analytics.com stats.g.doubleclick.net csi.gstatic.com px0.pbbl.co aa.agkn.com googleads.g.doubleclick.net www.google.com dpm.demdex.net lulus.sc.omtrdc.net cm.everesttech.net bat.bing.com *.bouncepilot.com alocdn.com p.alocdn.com pippio.com www.facebook.com *.criteo.com *.cloudfront.net *.pinterest.com; connect-src 'self' dpm.demdex.net *.tt.omtrdc.net *.sc.omtrdc.net stats.g.doubleclick.net *.certona.com *.hotjar.com wss://*.hotjar.com maw.bronto.com *.bouncepilot.com *.google.com bam.nr-data.net api.curalate.com *.pinterest.com
X-DNS-Prefetch-Control: off
Strict-Transport-Security: max-age=15552000; includeSubDomains
X-Download-Options: noopen
ETag: "3aff2-tOoJiXWAc5zd61UwbRnq61cPyr0"
Content-Encoding: gzip
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Fastly-Restarts: 1
Accept-Ranges: bytes
Transfer-Encoding: chunked
Accept-Ranges: bytes
Date: Wed, 17 Oct 2018 13:13:32 GMT
Age: 0
Connection: keep-alive
X-Served-By: cache-jfk8128-JFK
X-Cache: MISS
X-Cache-Hits: 0
Vary: Accept-Encoding