HTTP/1.1 200 OK
Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval' www.google-analytics.com secure.payzen.eu maps.googleapis.com *.paypal.com *.algolia.net *.algolianet.com *.bing.com *.facebook.net www.googletagmanager.com *.mgtmod01.com www.googleadservices.com www.gstatic.com googleads.g.doubleclick.net www.google.fr trk.adbutter.net pixel.mathtag.com mathid.mathtag.com static.criteo.net *.criteo.com; frame-src 'self' secure.payzen.eu www.youtube.com maps.googleapis.com *.paypal.com secure.ogone.com ogone.test.v-psp.com *.openstreetmap.org *.facebook.com *.youtube-nocookie.com tbs.tradedoubler.com pixel.mathtag.com dis.eu.criteo.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com; img-src 'self' data: www.google-analytics.com maps.googleapis.com *.gstatic.com placehold.it *.chainethermale.fr https://picsum.photos *.bing.com *.facebook.com www.magazinethermal.fr stats.g.doubleclick.net www.google.com www.google.fr *.youtube-nocookie.com *.ytimg.com googleads.g.doubleclick.net secure.adnxs.com pixel.mathtag.com; font-src 'self' fonts.gstatic.com data: cdn.linearicons.com; connect-src 'self' *.paypal.com *.algolia.net *.algolianet.com www.google-analytics.com *.mgtmod01.com noembed.com bat.bing.com stats.g.doubleclick.net *.criteo.com; base-uri 'self'
X-DNS-Prefetch-Control: off
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=15552000; includeSubDomains
X-Download-Options: noopen
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Access-Control-Allow-Origin: https://www.chainethermale.fr
Vary: Origin, Accept-Encoding
Access-Control-Allow-Credentials: true
X-UA-Compatible: IE=edge
Surrogate-Control: no-store
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate
Pragma: no-cache
Expires: 0
Content-Type: text/html; charset=utf-8
Content-Length: 157459
ETag: W/"26713-bkYFePv2Bc6Qh6ce/ufssuDLn00"
set-cookie: connect.sid=s%3AkdPI93SBnKLtDDTOCkgeheBUujVb5wQn.zlFfd1Mb0To%2Fg2%2F3nFlUejzmMvXjn3w8l0dtLWLp3%2Fc; Domain=www.chainethermale.fr; Path=/; Expires=Mon, 20 May 2019 09:53:28 GMT; HttpOnly; Secure
Date: Sun, 19 May 2019 09:53:28 GMT
Via: 1.1 alproxy