| age: |
3922 |
| alt-svc: |
h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 |
| cache-control: |
no-store, no-cache, must-revalidate, max-age=0 |
| content-security-policy-report-only: |
font-src *.typekit.net *.gstatic.com fonts.gstatic.com use.typekit.net use.fontawesome.com payment.payline.com payment-2.payline.com homologation-payment.payline.com homologation-payment-2.payline.com https://cdnjs.cloudflare.com https://cdn.segment.com https://api.segment.io https://*.hokodo.co www.googleservices.com *.google.com *.googleapis.com https://static.lyra.com/static/ *.fontawesome.com fonts.googleapis.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com https://connect-v2.fintecture.com https://connect-v2-sbx.fintecture.com *.facebook.com https://secure.lyra.com/vads-payment/ https://api.lyra.com/api-payment/ https://static.lyra.com/static/ 'self' 'unsafe-inline'; frame-ancestors group-label.my.salesforce.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com www.youtube.com vars.hotjar.com cdn.krxd.net *.criteo.com *.criteo.net *.googlesyndication.com *.avis-verifies.com *.force.com *.facebook.com *.facebook.net *.salesforce.com *.eturnity.io secure-gateway.hipay-tpp.com *.hipay.com payment.payline.com payment-2.payline.com homologation-payment.payline.com homologation-payment-2.payline.com https://*.hokodo.co https://secure.lyra.com/vads-payment/ https://static.lyra.com/static/ *.addthis.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com p.typekit.net *.swagger.io https://assets.fintecture.com *.bing.com www.google.fr beacon.krxd.net maps.gstatic.com *.yahoo.com *.advertising.com *.liadm.com *.yieldmo.com *.smaato.net *.rubiconproject.com *.ad-stir.com *.addthis.com *.doubleclick.net *.outbrain.com *.smartadserver.com *.adnxs.com *.casalemedia.com *.360yield.com *.pubmatic.com *.adform.net *.demdex.net *.openx.net *.yieldlab.net *.omnitagjs.com *.taboola.com *.adscale.de *.teads.tv *.media.net *.3lift.com *.bidswitch.net *.criteo.com *.sharethrough.com *.ivitrack.com *.rlcdn.com *.stickyadstv.com *.fwmrm.net *.tribalfusion.com *.e-planning.net ea.coffrefortplus.com *.facebook.com *.postrelease.com *.thebrighttag.com *.bluekai.com *.tapad.com *.mgid.com *.tremorhub.com *.kargo.com *.adsrvr.org *.clmbtech.com *.smartclip.net maps.google.com *.googletagmanager.com *.openstreetmap.org maps.googleapis.com *.clarity.ms easyshare.group-label.com *.quanta.io *.d-bi.fr *.privacy-center.org https://maps.googleapis.com payment.payline.com payment-2.payline.com homologation-payment.payline.com homologation-payment-2.payline.com https://secure.lyra.com/static/latest/images/type-carte/ https://static.lyra.com/static/ https://secure.lyra.com/vads-payment/ https://img.youtube.com *.hsforms.net *.hsforms.com 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.commerce-payment-services.com *.typekit.net google.com *.google.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net bat.bing.com static.zdassets.com ea.coffrefortplus.com t.contentsquare.net *.krxd.net *.hotjar.com az693360.vo.msecnd.net front.activation.beyable.com api.ipify.org secure-gateway.hipay-tpp.com mpsnare.iesnare.com *.hipay.com polyfill.io *.googleapis.com *.cartsguru.io *.criteo.net *.criteo.com *.googlesyndication.com *.addthis.com *.radiateurplus.com *.snapcall.io *.privacy-center.org *.clarity.ms *.quanta.io *.d-bi.fr *.salesforceliveagent.com service.force.com group-label.my.salesforce.com *.googleoptimize.com *.facebook.com *.facebook.net *.localranker.fr payment.payline.com payment-2.payline.com homologation-payment.payline.com homologation-payment-2.payline.com https://cdnjs.cloudflare.com https://cdn.segment.com https://*.hokodo.co https://api.lyra.com/api-payment/ https://static.lyra.com/static/ s7.addthis.com *.moatads.com *.addthisedge.com *.pinterest.com *.avada.io maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.hsforms.net *.hsforms.com *.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com use.fontawesome.com *.force.com *.localranker.fr *.hipay.com payment.payline.com payment-2.payline.com homologation-payment.payline.com homologation-payment-2.payline.com https://fonts.googleapis.com https://cdnjs.cloudflare.com *.googleapis.com https://static.lyra.com/static/ *.fontawesome.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com static.zdassets.com data: mpsnare.iesnare.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.paypal.com google.com *.google.com *.adobe.io performance.typekit.net *.sentry.io bat.bing.com in.hotjar.com ekr.zdassets.com coffrefortplus.zendesk.com wss://widget-mediator.zopim.com geoip.animabri.com *.carts.guru *.hotjar.io *.googlesyndication.com *.doubleclick.net *.zendesk.com *.snapcall.io *.googleadservices.com *.google.fr maps.googleapis.com *.clarity.ms *.axept.io *.force.com *.muscula.com *.caast.tv *.privacy-center.org *.localranker.fr *.openstreetmap.org https://maps.googleapis.com *.hipay.com wss://mpsnare.iesnare.com payment.payline.com payment-2.payline.com homologation-payment.payline.com homologation-payment-2.payline.com https://cdn.segment.com https://api.segment.io https://*.hokodo.co https://secure.lyra.com/vads-payment/ https://api.lyra.com/api-payment/ ekr.zdassets.com/ *.addthis.com https://get.geojs.io *.avada.io t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src https://secure.lyra.com/vads-payment/ https://api.lyra.com/api-payment/ https://static.lyra.com/static/ *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; |
| content-type: |
text/html; charset=UTF-8 |
| date: |
Thu, 03 Oct 2024 04:21:52 GMT |
| expires: |
Thu, 03 Oct 2024 17:14:02 GMT |
| last-modified: |
Thu, 03 Oct 2024 03:06:18 GMT |
| pragma: |
cache |
| server: |
ECAcc (amb/6B53) |
| strict-transport-security: |
max-age=31536000 |
| traceresponse: |
00-17faadfce27d47f23141a37325e3fe4d-bc83908b5868a0cd-01 |
| vary: |
Accept-Encoding |
| x-cache: |
HIT |
| x-cache-hits: |
0, 0 |
| x-content-type-options: |
nosniff |
| x-debug-info: |
eyJyZXRyaWVzIjowfQ== |
| x-frame-options: |
SAMEORIGIN |
| x-ocdn-html: |
force_cache |
| x-ocdn-not-static: |
not static |
| x-ocdn-rp: |
HTTP/1.1 |
| x-platform-server: |
i-04bf53c066bdc7615, i-04bf53c066bdc7615 |
| x-served-by: |
cache-fra-etou8220096-FRA, cache-lin1730066-LIN |
| x-xss-protection: |
1; mode=block |
| content-length: |
447171 |
| connection: |
close |
