Vulcano.vn

date: Thu, 11 Jun 2026 00:43:34 GMT
content-type: text/html; charset=UTF-8
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
pragma: no-cache
cache-control: max-age=0, must-revalidate, no-cache, no-store
expires: Wed, 11 Jun 2025 00:43:33 GMT
content-security-policy: font-src *.typekit.net *.gstatic.com fonts.gstatic.com use.typekit.net *.fontawesome.com *.fonts.googleapis.com data: *.cloudflare.com fonts.googleapis.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.paypal.com vulcano.vn *.cardinalcommerce.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.addthis.com *.pinterest.com https://www.google.com vulcano.vn *.facebook.com *.doubleclick.net *.cardinalcommerce.com *.vimeo.com *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com p.typekit.net validator.swagger.io magefan.com cm.magefan.com blob: *.cloudflare.com *.cdn.klarna.com *.s.ytimg.com *.widgets.magentocommerce.com *.fpdbs.paypal.com *.t.paypal.com *.fpdbs.sandbox.paypal.com *.googleapis.com *.addthis.com *.pinterest.com *.cdninstagram.com *.google.com.vn *.google.com *.doubleclick.net *.googlesyndication.com *.googleadservices.com *.facebook.com *.fbcdn.net *.instagram.com *.newrelic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com s.ytimg.com www.googleapis.com https://www.vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.commerce-payment-services.com *.typekit.net google.com *.google.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.gstatic.com https://www.googleadservices.com https://www.google-analytics.com https://www.googletagmanager.com *.googleapis.com *.googleadservices.com *.avada.io player.vimeo.com *.addthis.com *.moatads.com *.addthisedge.com *.facebook.com *.pinterest.com *.instagram.com connect.facebook.net *.facebook.net *.googletagmanager.com *.google.com.vn *.googlesyndication.com *.doubleclick.net *.adobe.io performance.typekit.net *.sentry.io *.cardinalcommerce.com *.paypal.com *.cloudflare.com *.vimeo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com *.googleapis.com *.googletagmanager.com fonts.gstatic.com *.typekit.net *.adobe.io *.cloudflare.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com vulcano.vn *.vimeo.com *.vimeocdn.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.paypal.com google.com *.google.com *.adobe.io performance.typekit.net *.sentry.io https://get.geojs.io *.avada.io *.cloudflare.com *.googleapis.com *.addthis.com *.cardinalcommerce.com *.graph.instagram.com *.google-analytics.com vulcano.vn *.facebook.com *.facebook.net *.analytics.google.com *.googletagmanager.com *.doubleclick.net *.googleadservices.com *.demdex.net *.omtrdc.net graph.instagram.com *.vimeo.com *.vimeocdn.com *.run.app *.us-east-1.on.aws *.us-central1.run.app 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=h7059Ixic2HweRs3%2BtM%2F5w5Gg2awfIBCXClgeuYqiRu0a0a%2F107Jv64Wy5%2B4WHrur33KTWHQ1qQznwx113VHjZTFbV0SyvnfcTe2xe46af9DMmDpcBzOu9peWWkXhOLhWdb7nGqZj1g%3D"}]}
vary: Accept-Encoding
cf-cache-status: DYNAMIC
content-encoding: br
cf-ray: a09c950dbf672eec-FRA
alt-svc: h3=":443"; ma=86400