sheba.co.il Review

 N/A

HTTP/1.1 301 Moved Permanently
Server: rhino-core-shield
Date: Thu, 28 Aug 2025 16:16:30 GMT
Content-Type: text/html
Content-Length: 174
Location: https://sheba.co.il/
Via: 1.1 google
Set-Cookie: GCLB=CImN1NmCi47t7AEQAw; path=/; HttpOnly

HTTP/1.1 301 Moved Permanently
Server: rhino-core-shield
Date: Thu, 28 Aug 2025 16:16:30 GMT
Content-Type: text/html
Content-Length: 174
Location: https://www.sheba.co.il/
Via: 1.1 google
Set-Cookie: GCLB=CPrJ153-upSjJhAD; path=/; HttpOnly
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

HTTP/1.1 303 See Other
Server: rhino-core-shield
Date: Thu, 28 Aug 2025 16:16:31 GMT
Content-Type: text/html
Content-Length: 158
Location: https://www.sheba.co.il/geo-block-page
Via: 1.1 google
Set-Cookie: GCLB=CIrYocP12OnK-AEQAw; path=/; HttpOnly
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

HTTP/1.1 200 OK
Server: rhino-core-shield
Date: Thu, 28 Aug 2025 16:16:32 GMT
Content-Type: text/html
Vary: Accept-Encoding
cache-control: max-age=3600, s-maxage=3600, public
Strict-Transport-Security: max-age=31536000; includesubdomains
X-Frame-options: SAMEORIGIN
X-Xss-Protection: 1; mode=block
X-Content-Type-Options: nosniff
permissions-policy: camera=(), microphone=(), geolocation=()
Content-Security-Policy: upgrade-insecure-requests;  default-src 'self' *.sheba.co.il googlesyndication.com;     style-src 'self' *.sheba.co.il 'unsafe-inline' fonts.googleapis.com www.gstatic.com cdn.popt.in cdn.landbot.io www.google.com   fonts.popt.in cdnjs.cloudflare.com cloudfront.spreo.co;     frame-ancestors 'self' *.sheba.co.il;   font-src 'self' *.sheba.co.il script.hotjar.com fonts.googleapis.com www.gstatic.com fonts.gstatic.com static.landbot.io cdn.landbot.io;    img-src 'self' *.sheba.co.il blob:  analytics.maskyoo.net   https://powercatexternal.blob.core.windows.net/     ssl.gstatic.com googleads.g.doubleclick.net encrypted-tbn0.gstatic.com encrypted-tbn1.gstatic.com encrypted-tbn2.gstatic.com encrypted-tbn3.gstatic.com www.google.com  clients1.google.com data: https://ep1.adtrafficquality.google i.ytimg.com www.googleapis.com www.gstatic.com www.google-analytics.com pagead2.googlesyndication.com     www.facebook.com www.google.co.il mpcheck.co.il www.googletagmanager.com butterfly-button.web.app 6a759f9aeb784cd58af5e28b21945d17.svc.dynamics.com;    script-src https://cdn.botframework.com/botframework-webchat/latest/webchat.js  https://cdn.taboola.com https://trc.taboola.com     s4.eu-central-1.amazonaws.com/maskyoo-cdn/  vd.trinitymedia.ai trinitymedia.ai www.googleadservices.com partner.googleadservices.com cse.google.com 'self' *.sheba.co.il 'unsafe-eval' fonts.googleapis.com 'unsafe-inline' https://v1.addthisedge.com https://z.moatads.com    s3.eu-central-1.amazonaws.com https://ep2.adtrafficquality.google/sodar/sodar2.js cloudfront.spreo.co d2wy8f7a9ursnm.cloudfront.net script.crazyegg.com googleads.g.doubleclick.net https://m.addthis.com https://s7.addthis.com https://cdnjs.cloudflare.com/ajax/libs/jquery/2.2.4/jquery.min.js https://www.google-analytics.com/analytics.js    https://tpc.googlesyndication.com/sodar/sodar2.js connect.facebook.net cdn.popt.in static.hotjar.com script.hotjar.com  securepubads.g.doubleclick.net www.google.com www.gstatic.com www.googletagservices.com www.googletagmanager.com    ws.callindex.co.il cdn.landbot.io cdnjs.cloudflare.com www.youtube.com player.vimeo.com cdn2.gbqofs.com butterfly-button.web.app    blob: mktdplp102cdn.azureedge.net 6a759f9aeb784cd58af5e28b21945d17.svc.dynamics.com;    connect-src 'self'  https://psb.taboola.com https://cds.taboola.com pips.taboola.com https://trc.taboola.com https://trc-events.taboola.com     https://api.dynamic-number.com/stage33/     https://www.googleadservices.com/   https://c90d67dcc8d743b0bb1c9b55bd06ae.1e.environment.api.powerplatform.com/powervirtualagents/ https://europe.directline.botframework.com/ wss://europe.directline.botframework.com/   https://c90d67dcc8d743b0bb1c9b55bd06ae.1e.environment.api.powerplatform.com/copilotstudio/dataverse-backed/authenticated/bots/cr593_r26zfgiVnmcJbsTzuS1nA/conversations     https://ep1.adtrafficquality.google/ ask.hotjar.io vc.hotjar.io in.hotjar.com surveystats.hotjar.io tracking.crazyegg.com depart.trinitymedia.ai script.crazyegg.com www.google.com www.google.co.il *.sheba.co.il stats.g.doubleclick.net wss://ws.hotjar.com metrics.hotjar.io content.hotjar.io securepubads.g.doubleclick.net   report.sheba.gbqofs.io facebook.com www.hotjar.com https://s7.addthis.com www.hotjar.io display.popt.in www.google-analytics.com    cdn.popt.in fonts.popt.in cdnjs.cloudflare.com https://stats.g.doubleclick.net/j/collect https://securepubads.g.doubleclick.net/gampad/ads  pagead2.googlesyndication.com gstatic.com https://d3lopmpcew67el.cloudfront.net vimeo.com adservice.google.co.il 6a759f9aeb784cd58af5e28b21945d17.svc.dynamics.com analytics.google.com;    frame-src 'self' *.sheba.co.il https://ep2.adtrafficquality.google www.googletagmanager.com trinitymedia.ai td.doubleclick.net www.adsensecustomsearchads.com vimeo.com player.vimeo.com https://maps.spreo.co https://s7.addthis.com   youtu.be www.youtube.com cse.google.com www.google.com www.hotjar.com w.soundcloud.com www.facebook.com *.safeframe.googlesyndication.com tpc.googlesyndication.com securepubads.g.doubleclick.net  soundcloud.com butterfly-button.web.app i-risk.co.il 6a759f9aeb784cd58af5e28b21945d17.svc.dynamics.com;     object-src 'self' *.sheba.co.il;
Content-Encoding: gzip
Via: 1.1 google
Set-Cookie: GCLB=CNeSvo6CqO-F1wEQAw; path=/; HttpOnly
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
Transfer-Encoding: chunked