Headers of https://cloud.mfk-bank.ru

HTTP/1.1 302 Found
Server
nginx
Date
Thu, 22 Dec 2022 07:52:23 GMT
Content-Type
text/html; charset=UTF-8
Connection
close
Expires
Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control
no-store, no-cache, must-revalidate
Pragma
no-cache
Set-Cookie
oc_sessionPassphrase=RWnQqLYjug1NO2llZpjT2N5rq0ooMnyhjrQtdP0Ze5eg5V1EWBiql3UrvV4mjW0Jc%2B7HLyHV5xH8BBW8eFNYYYXQPmwQbUq%2Fsya0ij9ddyUD315TEmNzp6TZg9PUAKFy; path=/; secure; HttpOnly
Set-Cookie
oc0b4kefe08l=k6j1m4562ue10bireqf522ul88; path=/; secure; HttpOnly
Content-Security-Policy
default-src 'self'; script-src 'self' 'nonce-VDNMRy9FNHRlTjFZbUNIVFcyMGVUWE1uVzM2L3FncC9EOFBDZzhzZElzQT06TGlDcHp6cFZIcGNBNkhqcUVscElLaEoyTjFHVW1VTVVUZkd4OVB0VVVwTT0='; style-src 'self' 'unsafe-inline'; frame-src *; img-src * data: blob:; font-src 'self' data:; media-src *; connect-src *; object-src 'none'; base-uri 'self';
Set-Cookie
__Host-nc_sameSiteCookielax=true; path=/; httponly;secure; expires=Fri, 31-Dec-2100 23:59:59 GMT; SameSite=lax
Set-Cookie
__Host-nc_sameSiteCookiestrict=true; path=/; httponly;secure; expires=Fri, 31-Dec-2100 23:59:59 GMT; SameSite=strict
Location
https://cloud.mfk-bank.ru/login
Strict-Transport-Security
max-age=31536000; includeSubDomains; preload;
Permissions-Policy
accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()
Referrer-Policy
no-referrer
X-Content-Type-Options
nosniff
X-Download-Options
noopen
X-Frame-Options
SAMEORIGIN
X-Permitted-Cross-Domain-Policies
none
X-Robots-Tag
none
X-XSS-Protection
1; mode=block
HTTP/1.1 302 Found
Server
nginx
Date
Thu, 22 Dec 2022 07:52:23 GMT
Content-Type
text/html; charset=UTF-8
Connection
close
Expires
Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control
no-store, no-cache, must-revalidate
Pragma
no-cache
Set-Cookie
oc_sessionPassphrase=apspr7TSMpEvJMBnTWCovgOP4vCbgRD4Y8LbHg7WOaz3Ctql5GP44gFk3uBX2cCXDZxWkjEZ4mXjRI4VDH7zJdlPpvuwGwUY%2F6ICTGkd8I8xllfZhT%2BoZ3GLGCQUIzkR; path=/; secure; HttpOnly
Set-Cookie
oc0b4kefe08l=fcs3hhqvduprgdn1rqsh52ijgt; path=/; secure; HttpOnly
Content-Security-Policy
default-src 'self'; script-src 'self' 'nonce-R3RRYVhoTEZPbFNRdlF4b3VaSzUycUFTbDRyeU1pT3dqSXpDVUZxTmF0az06ZllRdmEzVHlTejc5eFdBYzNmbndrT3RSeHNhZFIyVEJ4ZUR6T0NyYldyVT0='; style-src 'self' 'unsafe-inline'; frame-src *; img-src * data: blob:; font-src 'self' data:; media-src *; connect-src *; object-src 'none'; base-uri 'self';
Set-Cookie
__Host-nc_sameSiteCookielax=true; path=/; httponly;secure; expires=Fri, 31-Dec-2100 23:59:59 GMT; SameSite=lax
Set-Cookie
__Host-nc_sameSiteCookiestrict=true; path=/; httponly;secure; expires=Fri, 31-Dec-2100 23:59:59 GMT; SameSite=strict
Location
/index.php/apps/limit_login_to_ip/denied
Strict-Transport-Security
max-age=31536000; includeSubDomains; preload;
Permissions-Policy
accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()
Referrer-Policy
no-referrer
X-Content-Type-Options
nosniff
X-Download-Options
noopen
X-Frame-Options
SAMEORIGIN
X-Permitted-Cross-Domain-Policies
none
X-Robots-Tag
none
X-XSS-Protection
1; mode=block
HTTP/1.1 403 Forbidden
Server
nginx
Date
Thu, 22 Dec 2022 07:52:24 GMT
Content-Type
text/html; charset=UTF-8
Content-Length
8905
Connection
close
Vary
Accept-Encoding
Expires
Thu, 19 Nov 1981 08:52:00 GMT
Pragma
no-cache
Set-Cookie
oc_sessionPassphrase=e4IzIoVYjwGW0BfG1ZlwKqKzPTQH1EgeoMquH1XyCAeRK7iy7d2mfqdmakslP5%2FlBpKfD9P0R9G9VkAwnJ8dyOXb%2FfVe9OKESX5AMF3TJ9Znv8fuWjPRTedRdBLEnsZe; path=/; secure; HttpOnly
Set-Cookie
oc0b4kefe08l=00ka0m9qdleikbguml3euvtm9u; path=/; secure; HttpOnly
Set-Cookie
__Host-nc_sameSiteCookielax=true; path=/; httponly;secure; expires=Fri, 31-Dec-2100 23:59:59 GMT; SameSite=lax
Set-Cookie
__Host-nc_sameSiteCookiestrict=true; path=/; httponly;secure; expires=Fri, 31-Dec-2100 23:59:59 GMT; SameSite=strict
Cache-Control
no-cache, no-store, must-revalidate
Content-Security-Policy
default-src 'none';base-uri 'none';manifest-src 'self';script-src 'self';style-src 'self' 'unsafe-inline';img-src 'self' data: blob:;font-src 'self' data:;connect-src 'self';media-src 'self';frame-src 'self';frame-ancestors 'self';form-action 'self'
Feature-Policy
autoplay 'self';camera 'none';fullscreen 'self';geolocation 'none';microphone 'none';payment 'none'
X-Robots-Tag
none
Strict-Transport-Security
max-age=31536000; includeSubDomains; preload;
Referrer-Policy
no-referrer
X-Content-Type-Options
nosniff
X-Download-Options
noopen
X-Frame-Options
SAMEORIGIN
X-Permitted-Cross-Domain-Policies
none
X-Robots-Tag
none
X-XSS-Protection
1; mode=block