Propulsion-sailing.com

date: Sun, 10 Nov 2024 19:46:03 GMT
content-security-policy-report-only: font-src *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com fonts.googleapis.com fonts.gstatic.com https://api.systempay.fr/static/ *.fontawesome.com https://fonts.bunny.net *.alothemes.com *.magepow.com applepay.cdn-apple.com *.fonts.googleapis.com data: *.cloudflare.com data: 'self' 'unsafe-inline'; form-action *.facebook.com *.googlesyndication.com https://paiement.systempay.fr/vads-payment/ https://api.systempay.fr/api-payment/ https://api.systempay.fr/static/ 'self' 'unsafe-inline'; frame-ancestors 'self'; style-src *.adobe.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com fonts.googleapis.com https://api.systempay.fr/static/ *.fontawesome.com https://fonts.bunny.net *.alothemes.com *.magepow.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src https://paiement.systempay.fr/vads-payment/ https://api.systempay.fr/api-payment/ https://api.systempay.fr/static/ 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; media-src data: *.adobe.com 'self' 'unsafe-inline'; img-src data: www.google.fr assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.gstatic.com *.googlesyndication.com *.openstreetmap.org maps.googleapis.com maps.gstatic.com https://paiement.systempay.fr/static/latest/images/type-carte/ https://api.systempay.fr/static/ https://paiement.systempay.fr/vads-payment/ *.disqus.com https://firebasestorage.googleapis.com *.alothemes.com *.magepow.com https://www.magezon.com *.cloudflare.com *.cdn.klarna.com *.s.ytimg.com *.widgets.magentocommerce.com *.fpdbs.paypal.com *.t.paypal.com *.paypal.com *.fpdbs.sandbox.paypal.com *.googleapis.com *.addthis.com *.pinterest.com *.cdninstagram.com data: 'self' 'unsafe-inline'; object-src www.youtube.com 'self' 'unsafe-inline'; connect-src in-automate.sendinblue.com in.hotjar.com dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com *.google-analytics.com *.facebook.com *.facebook.net *.google.com *.doubleclick.net *.googlesyndication.com maps.googleapis.com https://paiement.systempay.fr/vads-payment/ https://api.systempay.fr/api-payment/ https://get.geojs.io *.avada.io *.alothemes.com *.magepow.com *.cloudflare.com *.paypal.com *.googleapis.com *.addthis.com *.cardinalcommerce.com *.graph.instagram.com 'self' 'unsafe-inline'; frame-src vars.hotjar.com sibautomation.com my.sendinblue.com fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net https://www.youtube.com *.youtube-nocookie.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com https://paiement.systempay.fr/vads-payment/ https://api.systempay.fr/static/ api.payplug.com secure.payplug.com *.addthis.com *.pinterest.com 'self' 'unsafe-inline'; script-src sibautomation.com static.hotjar.com script.hotjar.com www.gstatic.com assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.google.com/ *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com https://api.systempay.fr/api-payment/ https://api.systempay.fr/static/ *.disqus.com *.avada.io *.alothemes.com *.magepow.com api.payplug.com applepay.cdn-apple.com https://cdn.payplug.com/js/integrated-payment/ *.googleapis.com *.addthis.com *.moatads.com *.addthisedge.com *.pinterest.com *.instagram.com 'self' 'unsafe-inline' 'unsafe-eval';
strict-transport-security: max-age=31536000
content-security-policy: upgrade-insecure-requests;
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
set-cookie: PHPSESSID=hharrg23okii6q7eanfm5ocjvo; expires=Mon, 11-Nov-2024 19:46:03 GMT; Max-Age=86400; path=/; domain=www.propulsion-sailing.com; secure; HttpOnly; SameSite=Lax
location: https://www.propulsion-sailing.com/
x-ua-compatible: IE=edge
x-frame-options: SAMEORIGIN
content-length: 0
content-type: text/html; charset=UTF-8
x-cache: MISS
pragma: no-cache
expires: -1
cache-control: no-store, no-cache, must-revalidate, max-age=0
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=31536000; includeSubDomains; preload

HTTP/2 200 
date: Sun, 10 Nov 2024 04:02:45 GMT
content-security-policy-report-only: font-src *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com fonts.googleapis.com fonts.gstatic.com https://api.systempay.fr/static/ *.fontawesome.com https://fonts.bunny.net *.alothemes.com *.magepow.com applepay.cdn-apple.com *.fonts.googleapis.com data: *.cloudflare.com data: 'self' 'unsafe-inline'; form-action *.facebook.com *.googlesyndication.com https://paiement.systempay.fr/vads-payment/ https://api.systempay.fr/api-payment/ https://api.systempay.fr/static/ 'self' 'unsafe-inline'; frame-ancestors 'self'; style-src *.adobe.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com fonts.googleapis.com https://api.systempay.fr/static/ *.fontawesome.com https://fonts.bunny.net *.alothemes.com *.magepow.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src https://paiement.systempay.fr/vads-payment/ https://api.systempay.fr/api-payment/ https://api.systempay.fr/static/ 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; media-src data: *.adobe.com 'self' 'unsafe-inline'; img-src data: www.google.fr assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.gstatic.com *.googlesyndication.com *.openstreetmap.org maps.googleapis.com maps.gstatic.com https://paiement.systempay.fr/static/latest/images/type-carte/ https://api.systempay.fr/static/ https://paiement.systempay.fr/vads-payment/ *.disqus.com https://firebasestorage.googleapis.com *.alothemes.com *.magepow.com https://www.magezon.com *.cloudflare.com *.cdn.klarna.com *.s.ytimg.com *.widgets.magentocommerce.com *.fpdbs.paypal.com *.t.paypal.com *.paypal.com *.fpdbs.sandbox.paypal.com *.googleapis.com *.addthis.com *.pinterest.com *.cdninstagram.com data: 'self' 'unsafe-inline'; object-src www.youtube.com 'self' 'unsafe-inline'; connect-src in-automate.sendinblue.com in.hotjar.com dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com *.google-analytics.com *.facebook.com *.facebook.net *.google.com *.doubleclick.net *.googlesyndication.com maps.googleapis.com https://paiement.systempay.fr/vads-payment/ https://api.systempay.fr/api-payment/ https://get.geojs.io *.avada.io *.alothemes.com *.magepow.com *.cloudflare.com *.paypal.com *.googleapis.com *.addthis.com *.cardinalcommerce.com *.graph.instagram.com 'self' 'unsafe-inline'; frame-src vars.hotjar.com sibautomation.com my.sendinblue.com fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net https://www.youtube.com *.youtube-nocookie.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com https://paiement.systempay.fr/vads-payment/ https://api.systempay.fr/static/ api.payplug.com secure.payplug.com *.addthis.com *.pinterest.com 'self' 'unsafe-inline'; script-src sibautomation.com static.hotjar.com script.hotjar.com www.gstatic.com assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.google.com/ *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com https://api.systempay.fr/api-payment/ https://api.systempay.fr/static/ *.disqus.com *.avada.io *.alothemes.com *.magepow.com api.payplug.com applepay.cdn-apple.com https://cdn.payplug.com/js/integrated-payment/ *.googleapis.com *.addthis.com *.moatads.com *.addthisedge.com *.pinterest.com *.instagram.com 'self' 'unsafe-inline' 'unsafe-eval';
strict-transport-security: max-age=31536000
content-security-policy: upgrade-insecure-requests;
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
vary: Accept-Encoding
x-ua-compatible: IE=edge
x-frame-options: SAMEORIGIN
content-type: text/html; charset=UTF-8
content-encoding: gzip
x-cache: HIT
pragma: no-cache
expires: -1
cache-control: no-store, no-cache, must-revalidate, max-age=0
accept-ranges: bytes
content-length: 28155
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=31536000; includeSubDomains; preload