Afnor.org - Bivi.afnor.org

Location: https://www.boutique.afnor.org/fr-fr/services/service-cobaz
Connection: close
Cache-Control: no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=31536000

HTTP/1.1 200 OK
Date: Sat, 17 Jan 2026 21:34:52 GMT
Server: Kestrel
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Type: text/html; charset=utf-8
Cache-Control: no-cache, no-store
Pragma: no-cache
Request-Context: appId=
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
X-XSS-Protection: 1
Referrer-Policy: strict-origin
Content-Security-Policy: default-src 'self'; script-src https://crm-api.afnor.org/ https://code.jquery.com/ https://cdnjs.cloudflare.com/ https://corporama.com/js/ https://sdk.privacy-center.org/ https://matomo.wp.afnor.cloud-ed.fr/ https://www.googletagmanager.com/ https://googletagmanager.com/ https://tagmanager.google.com/ https://www.google.com/ https://fonts.googleapis.com/ https://www.gstatic.com/ https://static.hotjar.com/ https://script.hotjar.com/ https://bat.bing.com/ https://bat.bing.net/ https://googleads.g.doubleclick.net/ https://track.effiliation.com/ https://js-eu1.hs-scripts.com/ https://js-eu1.hscollectedforms.net/ https://js-eu1.hs-banner.com/ https://js-eu1.usemessages.com/ https://api.usemessages.com/ https://js-eu1.hubspot.com/ https://js-eu1.hs-analytics.net/ https://r.ad6media.fr/ https://p.gsitrix.com/ https://o.gsitrix.com/ https://analytics.optimalpeople.fr/ https://notifpush.com/ https://api.payplug.com/ 'unsafe-inline' 'unsafe-eval' 'self'; object-src 'none'; base-uri 'self'; worker-src blob: 'self'; manifest-src 'self'; style-src https://info.promotion-afnor.org/ https://crm-api.afnor.org/ https://corporama.com/css/ https://fonts.googleapis.com/ https://googletagmanager.com/ https://tagmanager.google.com/ https://static.hotjar.com/ https://script.hotjar.com/ https://sdk.privacy-center.org/ 'unsafe-inline' 'self'; img-src https://info.promotion-afnor.org/ https://www.googletagmanager.com/ https://googletagmanager.com/ https://ssl.gstatic.com/ https://www.gstatic.com/ https://www.google.com/ https://www.google.fr/ https://www.googleadservices.com/ https://googleads.g.doubleclick.net/ https://pagead2.googlesyndication.com/ https://bat.bing.com/ https://bat.bing.net/ https://perf-eu1.hsforms.com/ https://forms-eu1.hsforms.com/ https://track-eu1.hubspot.com/ https://track.hubspot.com/ https://cdn.afnor.org/standardstore/ https://www.afnor.org/ https://matomo.wp.afnor.cloud-ed.fr/ https://static.hotjar.com/ https://script.hotjar.com/ https://survey-images.hotjar.com/ data: 'self'; font-src https://fonts.gstatic.com/ https://script.hotjar.com/ data: 'self'; media-src 'self'; frame-src https://www.google.com/ https://www.googletagmanager.com/ https://app-eu1.hubspot.com/ https://boutiqueadm.intern.afnor.org/ https://viewerbdc.afnor.org/ https://afnorpass.afnor.org/ https://www.boutique.afnor.org/ https://secure.payplug.com/ https://www.youtube.com/ https://www.youtube-nocookie.com/ 'self'; form-action https://api.payplug.com/ https://secure.payplug.com/ https://secure.payplug.com/pay/ 'self'; connect-src https://cdnjs.cloudflare.com/ https://crm-api.afnor.org/ https://wbapi.prod.beamy.io/ https://www.google.com/ https://www.google.fr/ https://www.googletagmanager.com/ https://www.googleadservices.com/ https://pagead2.googlesyndication.com/ https://googleads.g.doubleclick.net/ https://www.gstatic.com/ https://*.hotjar.com/ https://*.hotjar.io/ wss://*.hotjar.com/ https://bat.bing.com/ https://bat.bing.net/ https://track.effiliation.com/ https://js-eu1.hs-scripts.com/ https://js-eu1.hscollectedforms.net/ https://js-eu1.hs-banner.com/ https://js-eu1.usemessages.com/ https://api.usemessages.com/ https://js-eu1.hubspot.com/ https://js-eu1.hs-analytics.net/ https://cta-eu1.hubspot.com/ https://api-eu1.hubspot.com/ https://forms-eu1.hscollectedforms.net/ https://static.hsappstatic.net/ https://r.ad6media.fr/ https://p.gsitrix.com/ https://o.gsitrix.com/ https://analytics.optimalpeople.fr/ https://notifpush.com/ https://matomo.wp.afnor.cloud-ed.fr/ https://api.payplug.com/ https://secure.payplug.com/ https://secure.payplug.com/pay/ https://sdk.privacy-center.org/ https://api.privacy-center.org/ https://intern.afnor.org/ 'self'; frame-ancestors https://www.afnor.org/ https://*.afnor.org/ 'self';
Set-Cookie: .AspNetCore.Antiforgery.oKtHO6jOPW4=CfDJ8M6leAfhwdBCoT2PqlWCW4-dRuBy6Sv-VUg2AR63TnipTK1bCFkrLcB4_Apzrw92sSKQ8GDnxRIERBmgQApkygyE1LH9POCF8_9DPy70vN0zC4krwlKJi2qkxB5D0k6pdMGyUIRv7yE10aK_hs-3AIQ; path=/; secure; samesite=strict; httponly
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip
Transfer-Encoding: chunked