xoom.fr

Http-Version: 1.1
Status-Code: 200
Status: 200 OK
Date: Fri, 24 Jan 2020 02:21:48 GMT
Content-Type: text/html;charset=UTF-8
Connection: keep-alive
x-ua-compatible: IE=edge
x-xoom-requestid: 7a479b40-b0bb-4f93-8ef5-f72b5a1852d8
server-timing: intid;desc=95ca62d3902ca382
etag: "081fc8d3a928e92b87541117bca9e43a3"
content-language: en-US
Content-Security-Policy-Report-Only: font-src https://assets-cdn.s-xoom.com/ 'self'; media-src 'none'; base-uri 'self'; plugin-types application/x-shockwave-flash; worker-src 'self'; object-src https://h.online-metrix.net/; style-src 'unsafe-inline' https://assets-cdn.s-xoom.com/ 'self' https://ctfassets.net/ https://google.com/; connect-src https://connect.facebook.net/ https://assets-cdn.s-xoom.com/ https://*.xoom.com/ 'self' https://stats.g.doubleclick.net/ https://s3-us-west-2.amazonaws.com/ https://braintreegateway.com/ https://braintree-api.com/ https://api.segment.io/ https://www.paypal.com/ https://h.online-metrix.net/ https://mixpanel.com/ https://paypalobjects.com/; form-action https://connect.facebook.net/ https://doubleclick.net/ https://www.paypal.com/ 'self' https://help.xoom.com/; img-src 'self' https:; frame-src https://c.paypal.com/ https://connect.facebook.net/ 'self' https://*.google.com/ https://braintreegateway.com/ https://*.facebook.com/ https://jobvite.com/ https://bid.g.doubleclick.net/ https://promotions.xoom.com/ https://h.online-metrix.net/ https://cardinalcommerce.com/ https://youtube.com/ https://paypalobjects.com/; script-src https://www.paypalobjects.com/ https://connect.facebook.net/ https://altfarm.mediaplex.com/ https://mxpnl.com/ 'unsafe-inline' https://assets-cdn.s-xoom.com/ 'self' https://nexus.ensighten.com/ https://*.google.com/ https://bat.bing.com/ https://iesnare.com/ https://braintreegateway.com/ https://googleads.g.doubleclick.net/ https://www.google-analytics.com/ https://googleapis.com/ https://www.googleadservices.com/ https://h.online-metrix.net/ https://cdn.segment.com/ https://www.googletagmanager.com/ https://refer.xoom.com/ https://gstatic.com/ https://google.com/ https://ctfassets.net/ 'unsafe-eval'; frame-ancestors 'self'; report-uri https://csp.tsrs.cloud/r/8a7227530ae85d673555f8b96b268ff6c31ee7f0;
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=1317020400; includeSubDomains
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
Transfer-Encoding: chunked