| date: |
Mon, 07 Oct 2024 11:18:21 GMT |
| content-type: |
text/html; charset=utf-8 |
| transfer-encoding: |
chunked |
| connection: |
close |
| link: |
<https://contents.mediadecathlon.com>; rel=preconnect, </client/style/vtmn-tailwind.4e164b547f575aa3ce77.css>; rel=preload; as=style, </client/style/vtmn-style.88921bae214f13da8115.css>; rel=preload; as=style, </client/style/vtmn-new-visual-identity.baf19d8b0ed007285903.css>; rel=preload; as=style, </client/style/style.4426e08bda8c0207ea2f.css>; rel=preload; as=style, </client/app/client.bc9db0bb8122f9b068d2.js>; rel=preload; as=script |
| vary: |
Accept-Encoding |
| referrer-policy: |
no-referrer-when-downgrade |
| x-frame-options: |
SAMEORIGIN |
| x-xss-protection: |
1; mode=block |
| x-content-type-options: |
nosniff |
| x-permitted-cross-domain-policies: |
master-only |
| set-cookie: |
NFS_USER_ID=4a881ee1-6ad4-478c-8372-1174eb614d1e; Max-Age=15724800; Expires=Mon, 07 Apr 2025 11:18:21 GMT; Path=/; Secure,PLAY_LANG=ro; Path=/,ACTIVE_USER=y;Max-Age=900;HttpOnly;Secure;Path=/,__cf_bm=0d8sw7t4O6WtMAyTqvBYepEGGPXiPYIqACkjXrR9fSk-1728299901-1.0.1.1-9QBTVkmlamxDsf4XrBKzQWv0DMlnvINu2BkdSDqB7HgUiBvxt5rRLlbGs5sNmBqkwRGR8qz6fB0YeRQn9d0D1w; path=/; expires=Mon, 07-Oct-24 11:48:21 GMT; domain=.www.decathlon.ro; HttpOnly; Secure; SameSite=None,_cfuvid=jBlDksUI9RdPKLi9jCZm.PUtKyLK6uo.5LvZNfOE8zs-1728299901242-0.0.1.1-604800000; path=/; domain=.www.decathlon.ro; HttpOnly; Secure; SameSite=None |
| content-security-policy: |
block-all-mixed-content ;upgrade-insecure-requests ;default-src 'self' *.criteo.com *.criteo.net adventori.com checkoutshopper-live.adyen.com checkoutshopper-test.adyen.com *.klarnaevt.com *.klarna.com *.klarnacdn.com *.abtasty.com;script-src 'self' 'unsafe-inline' 'unsafe-eval' *.abtasty.com *.y-track.com *.google-analytics.com *.googletagmanager.com www.googletagmanager.com vjs.zencdn.net www.google.com/recaptcha/ www.gstatic.com/recaptcha/ ui.onepay.decathlon.net *.paypal.com *.braintreegateway.com *.brightcove.net *.trylive.com *.googleapis.com sdk.privacy-center.org sdk.woosmap.com www.booxi.eu appmobile-bridge-js.s3-eu-west-1.amazonaws.com *.woosmap.com ui.onepay-qualification.decathlon.io cdn.tagcommander.com *.facebook.net *.dynatrace.com platform.commandersact.com *.commander1.com *.criteo.com *.criteo.net *.adnxs.com adventori.com www.googleadservices.com bat.bing.com *.salecycle.com *.doubleclick.net *.hotjar.com redirect3536.tagcommander.com *.oppwa.com oppwa.com checkoutshopper-live.adyen.com checkoutshopper-test.adyen.com *.klarnaevt.com *.klarna.com *.klarnacdn.com *.klarnacdn.net qanda.decathlon.com wurfl.io *.commandersact.com translate.google.com nxtck.com onepay-ui.decathlon.net *.contentsquare.net *.contentsquare.com www.youtube.com wss://*.hotjar.com *.loadbee.com *.decathlon.net via.batch.com *.dynamicyield.com *.klarnaservices.com *.onepay-v2-commons-prod-0ywm.decathlon.io screencapture.kampyle.com screencapture-cdn.kampyle.com resources.digital-cloud.medallia.eu sbt-prod.kampyle.com nebula-cdn.kampyle.com udc-neb.kampyle.com md-scp.kampyle.com resources.digital-cloud-west.medallia.com pay.google.com/gp/p/js/pay.js applepay.cdn-apple.com rum.browser-intake-datadoghq.eu session-replay.browser-intake-datadoghq.eu logs.browser-intake-datadoghq.eu logs.browser-intake-datadoghq.com browser-intake-datadoghq.eu safesizepublic.ucscentral.com google.com/pay creativecdn.com *.creativecdn.com second-life-xps.secondlifebff-prod-bkpr.decathlon.io *.dotomi.com cdn.amplitude.com api.amplitude.com api2.amplitude.com pay.datatrans.com view.publitas.com scripts.publitas.com js.stripe.com *.js.stripe.com a.mgid.com *.iadvize.com dsp.adfarm1.adition.com cdn.omniconvert.com deploy.mopinion.com static.iadvize.com delivery.clickonometrics.pl decathlon-ro.fra1.digitaloceanspaces.com collect.mopinion.com data: act-eu.rd.linksynergy.com act-eu.rd.linksynergy.co s.pageclip.co analytics.tiktok.com app.omniconvert.com *.2performant.com attr-2p.com *.clarity.ms;connect-src 'self' *.google-analytics.com *.analytics.google.com *.abtasty.com *.y-track.com *.woosmap.com *.brightcove.com *.brightcovecdn.com *.paypal.com *.braintree-api.com *.braintreegateway.com *.decathlon.net *.decathlon.com *.booxi.eu api.privacy-center.org www.facebook.com *.doubleclick.net bat.bing.com api.booxi.eu bf97725pbp.bf.dynatrace.com *.hotjar.com *.hotjar.io *.oppwa.com oppwa.com *.brightcove.net checkoutshopper-live.adyen.com checkoutshopper-test.adyen.com *.klarnaevt.com *.klarna.com *.klarnacdn.com *.klarnacdn.net qanda.decathlon.com booxi-api-be.appspot.com booxi-api.appspot.com sync.commander1.com *.boltdns.net *.akamaihd.net *.contentsquare.net tracking-api-4lasu2nlcq-ew.a.run.app *.googleapis.com wss://*.hotjar.com www.googletagmanager.com via.batch.com ws.batch.com *.dynamicyield.com *.dynamicyield.eu *.klarnaservices.com *.onepay-v2-commons-prod-0ywm.decathlon.io resources.digital-cloud.medallia.eu ubt-lb.digital-cloud.medallia.eu sbt-prod.kampyle.com nebula-cdn.kampyle.com udc-neb.kampyle.com md-scp.kampyle.com resources.digital-cloud-west.medallia.com www.google.com/pay signin.easyence.tech google.com/pay pay.google.com *.creativecdn.com rum.browser-intake-datadoghq.eu session-replay.browser-intake-datadoghq.eu logs.browser-intake-datadoghq.eu logs.browser-intake-datadoghq.com browser-intake-datadoghq.eu second-life-xps.secondlifebff-prod-bkpr.decathlon.io cdn.amplitude.com api.amplitude.com api2.amplitude.com api.stripe.com site.booxi.eu app.omniconvert.com *.iadvize.com *.mopinion.com ro-vouchers.herokuapp.com cardcadou.decathlon.ro secure.payu.ro fra1.digitaloceanspaces.com docs.google.com wss://*.iadvize.com cacheorcheck.mopinion.com send.pageclip.co analytics.tiktok.com dla-api-prod.azurewebsites.net s3-eu-central-1.amazonaws.com *.2performant.com fpc.decathlon.ro www.clarity.ms *.clarity.ms;img-src 'self' data: blob: *.decathlon.com *.cube-net.org *.cube-net.pub contents.mediadecathlon.com *.google-analytics.com *.googletagmanager.com *.brightcove.com *.brightcove.net *.brightcovecdn.com *.paypal.com prod-wt.aws.y-track.com manager.tagcommander.com *.googleapis.com *.abtasty.com *.woosmap.com www.facebook.com www.google.com www.google.es www.google.fr www.google.it www.google.nl www.google.be www.google.pl *.doubleclick.net bat.bing.com *.gstatic.com sync.commander1.com *.atdmt.com tag.goldenbees.fr *.crm4d.com *.adsrvr.org *.adnxs.com sdk.privacy-center.org checkoutshopper-live.adyen.com checkoutshopper-test.adyen.com *.klarnaevt.com *.klarna.com *.klarnacdn.com *.klarnacdn.net voucher.decathlon.net apigift.decathlon.com site.booxi.com www.mediadecathlon.com *.boltdns.net *.mediadecathlon.com *.contentsquare.net *.googleadservices.com adservice.google.com wss://*.hotjar.com via.batch.com ws.batch.com icons.batch.com *.onepay-v2-commons-prod-0ywm.decathlon.io screencaptue-cdn.kampyle.com resources.digital-cloud.medallia.eu udc-neb.kampyle.com nebula-cdn.kampyle.com resources.digital-cloud-west.medallia.com cdn-workshop-pop.decathlon.net *.dotomi.com pay.datatrans.com onepay-widget.decathlon.net *.dynamicyield.com *.klarnaservices.com bcboltbde696aa-a.akamaihd.net *.media.brightcove.com gum.criteo.com sync.outbrain.com pixel.rubiconproject.com x.bidswitch.net eb2.3lift.com sync-t1.taboola.com rtb-csync.smartadserver.com ads.yahoo.com ups.analytics.yahoo.com simage2.pubmatic.com ad.360yield.com r.casalemedia.com criteo-sync.teads.tv contextual.media.net visitor.omnitagjs.com match.sharethrough.com cm.adform.net pixel.advertising.com ads.stickyadstv.com c.bing.com criteo-partners.tremorhub.com s.ad.smaato.net us-u.openx.net i.liadm.com dis.criteo.com a.mgid.com sync.e-planning.net sync-criteo.ads.yieldmo.com cm.mgid.com sp.analytics.yahoo.com cdn.stickyadstv.com ih.adscale.de jadserve.postrelease.com pixel.tapad.com www.google.ch sync.adotmob.com www.google.at fra1.digitaloceanspaces.com *.iadvize.com www.google.ro analytics.tiktok.com *.amazonaws.com cdn-x.omniconvert.com *.facebook.com c.clarity.ms;style-src 'self' 'unsafe-inline' www.booxi.eu fonts.googleapis.com *.decathlon.com *.oppwa.com oppwa.com checkoutshopper-live.adyen.com checkoutshopper-test.adyen.com *.klarnaevt.com *.klarna.com *.klarnacdn.com *.abtasty.com *.googletagmanager.com *.googleapis.com *.gstatic.com *.mediadecathlon.com wss://*.hotjar.com scripts.publitas.com *.klarnacdn.net *.onepay-v2-commons-prod-0ywm.decathlon.io resources.digital-cloud.medallia.eu screencaptue-cdn.kampyle.com nebula-cdn.kampyle.com md-scp.kampyle.com resources.digital-cloud-west.medallia.com second-life-xps.secondlifebff-prod-bkpr.decathlon.io storage.googleapis.com/sl-front-xp-bucket-4v-tmoq/account/ storage.googleapis.com/sphere-assets-prod-71-hbfe/ onepay-widget.decathlon.net pay.datatrans.com *.dynamicyield.com *.dynamicyield.eu use.fontawesome.com decathlon-ro.fra1.digitaloceanspaces.com cdn.jsdelivr.net fonts.mopinion.com *.iadvize.com;font-src 'self' data: *.decathlon.com fonts.gstatic.com *.oppwa.com oppwa.com *.abtasty.com qanda.decathlon.com *.googleapis.com *.gstatic.com *.klarnacdn.net *.onepay-v2-commons-prod-0ywm.decathlon.io resources.digital-cloud.medallia.eu nebula-cdn.kampyle.com resources.digital-cloud-west.medallia.com cdn-workshop-pop.decathlon.net second-life-xps.secondlifebff-prod-bkpr.decathlon.io *.dynamicyield.com *.dynamicyield.eu use.fontawesome.com gstatic.mopinion.com *.iadvize.com;object-src view.publitas.com;base-uri 'self';worker-src 'self' blob: via.batch.com;media-src 'self' blob: secure.brightcove.com *.brightcove.com *.brightcove.net *.boltdns.net *.mediadecathlon.com *.criteo.com bcboltbde696aa-a.akamaihd.net *.media.brightcove.com fra1.digitaloceanspaces.com/decathlon-ro/B2B *.akamaihd.net;frame-src 'self' *.youtube.com www.google.com/recaptcha/ saas.trylive.com/ site.booxi.eu/ reviews.decathlon.com www.facebook.com *.doubleclick.net *.atdmt.com c.paypal.com checkout.paypal.com www.paypal.com *.hotjar.com *.oppwa.com oppwa.com *.brightcove.net checkoutshopper-live.adyen.com checkoutshopper-test.adyen.com *.klarnaevt.com *.klarna.com *.klarnacdn.com qanda.decathlon.com reviews-collect-eu.satisphere.decathlon.net *.mediadecathlon.com view.publitas.com www.pinterest.com *.abtasty.com *.decathlon.net wss://*.hotjar.com screencapture.kampyle.com nebula-cdn.kampyle.com resources.digital-cloud.medallia.eu resources.digital-cloud-west.medallia.com pay.google.com safesizepublic.ucscentral.com *.klarnaservices.com creativecdn.com *.creativecdn.com pay.datatrans.com js.stripe.com *.js.stripe.com hooks.stripe.com gum.criteo.com event.2performant.com help.decathlon.ro/ *.iadvize.com help.decathlon.ro player.ausha.co;frame-ancestors 'self'; |
| cache-control: |
max-age=0, reload, no-cache, no-store, must-revalidate |
| strict-transport-security: |
max-age=15768000; includeSubDomains; preload |
| cf-cache-status: |
DYNAMIC |
| server: |
cloudflare |
| cf-ray: |
8ced7d6d6d01d5a5-AMS |
