HTTP/2 200 
cache-control: private
content-type: text/html; charset=utf-8
content-encoding: gzip
accept-ranges: bytes
fetchimage: HIT
set-cookie: CTX=fr-ch_31; expires=Tue, 04-Mar-2025 17:20:54 GMT; path=/; secure; HttpOnly
access-control-allow-origin: https://www.babyliss.ch
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS
access-control-allow-headers: Content-Type, Accept, X-Requested-With
access-control-allow-credentials: true
x-ua-compatible: IE=Edge
content-security-policy: frame-ancestors 'self' banana-new.hostsolutions.ch; script-src 'self' localhost 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' *.google-analytics.com static-cl.icecubeapps.com *.usersnap.com www.googletagmanager.com cdn.curator.io js.stripe.com connect.facebook.net s.pinimg.com ct.pinterest.com analytics.tiktok.com;
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubDomains; preload
date: Tue, 04 Feb 2025 17:20:54 GMT
content-length: 29665