decathlon.es

Http-Version: 1.1
Status-Code: 200
Status: 200 OK
Date: Sat, 28 Sep 2019 23:13:58 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding,User-Agent
X-Frame-Options: SAMEORIGIN
Content-Encoding: gzip
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Permitted-Cross-Domain-Policies: master-only
X-dynaTrace: PT=744922444;PA=-1;SP=Prod_Cube_Front_Apache;PS=-1144698143
Content-Security-Policy: block-all-mixed-content; upgrade-insecure-requests; base-uri 'self' *.decathlon.es *.dynamicyield.com *.dynamicyield.eu; default-src 'self' 'unsafe-eval' 'unsafe-inline' *.abtasty.com *.braintree-api.com *.braintreegateway.com *.brightcove.com *.commander1.com *.commandersact.com *.cube-net.org *.cube-net.pub *.custhelp.com *.decathlon.com *.decathlon.es *.decathlon.net *.doubleclick.net *.dynamicyield.com *.dynamicyield.eu *.fitanalytics.com *.googleusercontent.com *.iadvize.com *.mopinion.com *.mydecathlon.com *.paypal.com *.s3.eu-west-1.amazonaws.com *.tagcommander.com *.tiendeo.com/ *.woosmap.com *.y-track.com *.youtube.com abtastylab.com adserving.ancoraplatform.com api.oney.io app.beampulse.com blob: bp-1c51.kxcdn.com browser-update.org bs.serving-sys.com cdnjs.cloudflare.com code.jquery.com/ui/1.12.1/jquery-ui.js code.jquery.com/ui/1.12.1/themes/base/jquery-ui.css comunidad.decathlon.es connect.facebook.net contents.mediadecathlon.com ct.pinterest.com data: decathlon-prod.pertimm.net decathlon-v2-preprod.pertimm.net decathlon-v2-prod.pertimm.net dis.eu.criteo.com fonts.googleapis.com fonts.gstatic.com google-maps-utility-library-v3.googlecode.com gum.criteo.com https://ssl.google-analytics.com ib.adnxs.com keepyeyes.cube-net.org localhost maps.google.com maps.googleapis.com maps.gstatic.com maxcdn.bootstrapcdn.com onepay-ui.decathlon.net oney-staging.azure-api.net operacionesdecathlon.es players.brightcove.net pre-comunidad.decathlon.es preprod-keepyeyes.cube-net.org pro-decathloneventostienda.s3.amazonaws.com recommendation-js.woosmap.com s.pinimg.com s.ytimg.com s3.eu-west-1.amazonaws.com secure-ds.serving-sys.com secure.adnxs.com sslwidget.criteo.com static-cdn.mydecathlon.com static.criteo.net staticxx.faceboook.com vjs.zencdn.net ws: wss://*.iadvize.com www.decathlon.fr www.facebook.com www.google-analytics.com www.google.com www.google.es www.google.fr www.googleadservices.com www.googletagmanager.com www.gstatic.com; font-src 'self' *.brightcove.com *.decathlon.es *.dynamicyield.com *.dynamicyield.eu *.iadvize.com blob: cdnjs.cloudflare.com customizations.fitanalytics.com data: fonts.gstatic.com keepyeyes.cube-net.org localhost maxcdn.bootstrapcdn.com players.brightcove.net preprod-keepyeyes.cube-net.org static-cdn.mydecathlon.com vjs.zencdn.net; media-src 'self' *.brightcove.com *.decathlon.es blob: brightcove.hs.llnwd.net players.brightcove.net; worker-src 'self' 'unsafe-eval' 'unsafe-inline' *.decathlon.es blob:;
Cache-Control: max-age=0, reload, no-cache, no-store, must-revalidate
Strict-Transport-Security: max-age=157680000
X-Iinfo: 14-85321710-85315763 PNNN RT(1569712438056 6) q(0 0 0 0) r(1 1) U5
X-CDN: Incapsula