Headers of https://www.naturalia.fr/

HTTP/1.1 200 OK
Content-Type
text/html; charset=UTF-8
Content-Length
399158
Connection
close
Date
Fri, 16 May 2025 13:25:37 GMT
cache-control
no-store, no-cache, must-revalidate, max-age=0
X-Magento-Tags
store,cms_b,cms_b_inside-menu-links,cms_b_home-buttons,cms_b_footer-second-block,cms_b_footer-third-block,cms_b_social-links,cms_b_footer-bottom,smile_store_locator_markers,smile_seller,cms_b_home-page-main-image,cms_b_home-page-block,cms_b_home-products,cms_p_2,cat_p_94505,cat_p,cat_p_60147,cat_p_53594,cat_p_47582,cat_p_100467,cat_p_94501,cat_p_58141,cat_p_43032,cat_p_43016,cat_p_43015,cat_p_42954,cat_p_102708,cat_p_43970,cat_p_56336,cat_p_43966,cat_p_55672,cat_p_55693,cat_p_55706,cat_p_46446,cat_p_50073,cat_p_42998,cat_p_43063
Content-Security-Policy-Report-Only
font-src *.fontawesome.com *.cloudflare.com ct.pinterest.com *.googleapis.com *.gstatic.com livechat.alc-crm.com maxcdn.bootstrapcdn.com *.naturalia.fr *.payline.com *.cdn.payline.com *.pinimg.com *.pinterest.com rct-livechat.alc-crm.com s.pinimg.com *.trustedshops.com *.twimg.com *.twitter.com *.typekit.net https://cdnjs.cloudflare.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.facebook.com *.gstatic.com maxcdn.bootstrapcdn.com *.payline.com *.cdn.payline.com *.twitter.com *.wlp-acs.com *.cic.fr *.monext.fr *.banque-accord.fr *.bpce.fr *.lcl.fr *.creditmutuel.fr *.bnpparibas.com *.e-cartebleue.com *.cardinalcommerce.com *.visa.com *.modirum.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com maxcdn.bootstrapcdn.com *.payline.com *.cdn.payline.com *.twitter.com https://td.doubleclick.net *.criteo.com *.wlp-acs.com *.cic.fr *.monext.fr *.banque-accord.fr *.bpce.fr *.lcl.fr *.creditmutuel.fr *.bnpparibas.com *.e-cartebleue.com *.cardinalcommerce.com *.visa.com *.modirum.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io ct.pinterest.com *.cloudflare.com cdn.cookielaw.org *.google-analytics.com *.googleadservices.com *.google.com *.google.fr *.googletagmanager.com *.klarna.com *.lightemporium.com *.linkedin.com maxcdn.bootstrapcdn.com *.naturalia.fr *.payline.com *.cdn.payline.com *.paypal.com *.pinimg.com *.pinterest.com s.pinimg.com *.twimg.com *.twitter.com *.usercentrics.eu *.ytimg.com *.facebook.com maps.googleapis.com maps.gstatic.com *.google.es data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.cloudflare.com cdn.cookielaw.org ct.pinterest.com *.doubleclick.net *.facebook.net *.fontawesome.com *.google.com *.google-analytics.com *.googletagmanager.com *.gstatic.com livechat.alc-crm.com maxcdn.bootstrapcdn.com *.naturalia.fr *.payline.com *.cdn.payline.com *.pinimg.com *.pinterest.com rct-livechat.alc-crm.com snap.licdn.com s.pinimg.com *.trustedshops.com *.twimg.com *.twitter.com *.usercentrics.eu https://bam.eu01.nr-data.net *.googleoptimize.com *.criteo.com *.actito.com *.aticdn.net https://2453.userly.net naturalia.local *.abtasty.com maps.googleapis.com https://cdnjs.cloudflare.com unpkg.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.fontawesome.com *.cloudflare.com *.googleapis.com *.gstatic.com livechat.alc-crm.com maxcdn.bootstrapcdn.com *.naturalia.fr *.payline.com *.cdn.payline.com rct-livechat.alc-crm.com *.trustedshops.com *.twimg.com *.twitter.com *.typekit.net *.usercentrics.eu https://fonts.googleapis.com https://cdnjs.cloudflare.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.payline.com *.cdn.payline.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.cloudflare.com cdn.cookielaw.org ct.pinterest.com *.doubleclick.net livechat.alc-crm.com maxcdn.bootstrapcdn.com *.naturalia.fr *.payline.com *.cdn.payline.com *.paypal.com *.pinimg.com *.pinterest.com rct-livechat.alc-crm.com s.pinimg.com *.twimg.com *.twitter.com https://bam.eu01.nr-data.net *.onetrust.com https://cdn.linkedin.oribi.io *.criteo.com https://region1.analytics.google.com *.xiti.com https://naturalia.local maps.googleapis.com *.google.com *.abtasty.com *.linkedin.com *.facebook.com *.reach5.co *.google-analytics.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';
X-Content-Type-Options
nosniff
X-XSS-Protection
1; mode=block
X-Frame-Options
SAMEORIGIN
Vary
Accept-Encoding
Access-Control-Allow-Origin
*
Accept-Ranges
bytes
Pragma
no-cache
Expires
-1
X-Cache
Miss from cloudfront
Via
1.1 126b287793d8e5c5a43d07a0428f8834.cloudfront.net (CloudFront)
X-Amz-Cf-Pop
LAX53-P1
X-Amz-Cf-Id
PpPhXOjpHqTYXMXXe4ygkK8cUMu6TNBjEK_ky2uHovIDehADO05bQQ==
Age
27457