Cartouche.com

server: nginx/1.18.0 (Ubuntu)
date: Tue, 28 Oct 2025 21:55:18 GMT
content-type: text/html
content-length: 178
location: https://www.cartouche.com/

HTTP/2 200 
server: nginx/1.18.0 (Ubuntu)
date: Tue, 28 Oct 2025 21:55:18 GMT
content-type: text/html; charset=UTF-8
content-length: 83457
x-built-with: Hyva Themes
content-security-policy-report-only: font-src fonts.gstatic.com use.typekit.net https://fonts.googleapis.com/ https://fonts.gstatic.com/ *.livechatinc.com/ fonts.googleapis.com *.fontawesome.com https://applepay.cdn-apple.com *.gstatic.com 'self' data: data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.monetico-services.com 'self' 'unsafe-inline'; frame-ancestors *.trustpilot.com/ 'self'; frame-src bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.monetico-services.com *.avis-verifies.com/ *.google.com *.googleapis.com/ *.googletagmanager.com/ *.gstatic.com/ *.livechatinc.com/ https://secure-magenta.dalenys.com *.trustpilot.com/ www.xtento.com *.payplug.com *.dalenys.com https://applepay.cdn-apple.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io https://images.unsplash.com https://bat.bing.net/ *.avis-verifies.com/ *.google.com/ *.google.fr/ *.googleapis.com/ *.ggpht.com/ *.gstatic.com/ https://securelinkdigitalks.fr/ a.tile.openstreetmap.org b.tile.openstreetmap.org c.tile.openstreetmap.org *.openstreetmap.org maps.googleapis.com maps.gstatic.com www.xtento.com cdn.xtento.com https://secure-magenta.dalenys.com *.hsforms.net *.hsforms.com 'self' data: data: 'self' 'unsafe-inline'; script-src www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net https://maps.googleapis.com https://cdn.jsdelivr.net/npm/@ryangjchandler/spruce@2.x.x/dist/spruce.umd.js *.app-us1.com/ https://bat.bing.com/ https://www.clickcease.com/ https://www.dwin1.com/ *.google.com *.googleapis.com/ *.gstatic.com/ *.livechatinc.com/ https://cdn.payplug.com/ https://lantern.roeyecdn.com/ https://trackcmp.net/ maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.axept.io/ *.skeepers.io/ *.trustpilot.com/ www.xtento.com cdn.xtento.com https://secure-magenta.dalenys.com https://applepay.cdn-apple.com api-qa.payplug.com cdn-qa.payplug.com api.payplug.com cdn.payplug.com *.hsforms.net *.hsforms.com *.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com *.google.com/ *.googleapis.com/ *.gstatic.com/ *.fontawesome.com cdn.jsdelivr.net https://secure-magenta.dalenys.com *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io https://maps.googleapis.com https://player.vimeo.com *.monetico-services.com https://bat.bing.net/ *.colissimo.fr/ *.doubleclick.net/ *.google.com/ *.googleapis.com/ *.googlesyndication.com/ *.gstatic.com/ *.livechatinc.com/ *.mapbox.com/ *.onyourmap.com/ maps.googleapis.com *.axept.io/ *.skeepers.io/ *.trustpilot.com/ t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
vary: Accept-Encoding
x-ua-compatible: IE=edge
x-frame-options: SAMEORIGIN
content-encoding: gzip
x-magento-cache-debug: HIT
grace: none
pragma: no-cache
expires: -1
cache-control: no-store, no-cache, must-revalidate, max-age=0
accept-ranges: bytes