Chevillard.com

date: Fri, 19 Jun 2026 07:01:02 GMT
server: Apache
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
referrer-policy: strict-origin-when-cross-origin
location: https://www.lissac.fr/opticiens-lissac-la-reunion
content-length: 297
content-type: text/html; charset=iso-8859-1
content-security-policy: default-src 'self'; base-uri 'self'; object-src 'none'; script-src 'self'; style-src 'self'; frame-src 'none'; frame-ancestors 'none'; form-action 'none'
cache-control: public, max-age=43200
permissions-policy: microphone=(), accelerometer=(), battery=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), payment=(), usb=(), vr=(), wake-lock=()

HTTP/2 301 
cache-control: no-store, no-cache, must-revalidate, max-age=0
content-security-policy: worker-src blob:; font-src https://api-sogecommerce.societegenerale.eu/static/ *.fontawesome.com *.societegenerale.eu *.gstatic.com *.booxi.eu *.facil-iti.app *.facil-iti.com *.oney.io 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com https://sogecommerce.societegenerale.eu/vads-payment/ https://api-sogecommerce.societegenerale.eu/api-payment/ https://api-sogecommerce.societegenerale.eu/static/ *.cardinalcommerce.com *.societegenerale.eu clicandpay.groupecdn.fr 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com https://www.google.com/recaptcha/ www.googletagmanager.com https://sogecommerce.societegenerale.eu/vads-payment/ https://api-sogecommerce.societegenerale.eu/static/ *.cardinalcommerce.com *.societegenerale.eu *.doubleclick.net *.google.com challenges.cloudflare.com *.googletagmanager.com api-clicandpay.groupecdn.fr *.goodays.co *.booxi.eu *.cookiebot.com *.criteo.com *.appspot.com *.facil-iti.app *.facil-iti.com *.creativecdn.com *.transitions.com *.clarity.ms *.adsrvr.org 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' blob: data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.swagger.io https://sogecommerce.societegenerale.eu/static/latest/images/type-carte/ https://api-sogecommerce.societegenerale.eu/static/ https://sogecommerce.societegenerale.eu/vads-payment/ data: *.openstreetmap.org https://maps.googleapis.com *.magentocommerce.com *.googleadservices.com *.google-analytics.com *.doubleclick.net *.google.com *.googletagmanager.com *.societegenerale.eu maps.googleapis.com *.optic2000.com *.amazonaws.com api-clicandpay.groupecdn.fr *.gstatic.com *.googlesyndication.com *.google.fr *.invibes.com *.mapbox.com *.criteo.com beyable.twic.pics *.beyable.com *.facil-iti.app *.facil-iti.com *.facebook.com *.oney.io *.googleusercontent.com *.prismic.io *.contentsquare.net *.hsforms.net *.hsforms.com *.neostore.cloud 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://api-sogecommerce.societegenerale.eu/api-payment/ https://api-sogecommerce.societegenerale.eu/static/ *.cardinalcommerce.com *.googleadservices.com *.google-analytics.com *.doubleclick.net *.googletagmanager.com *.gstatic.com *.google.com *.societegenerale.eu challenges.cloudflare.com *.oney.io api-clicandpay.groupecdn.fr *.critizr.com *.booxi.eu *.facil-iti.app *.facil-iti.com *.cookiebot.com *.mapbox.com *.affilae.com *.mouseflow.com *.hotjar.com *.facebook.net *.criteo.com *.beyable.com *.creativecdn.com *.tiktok.com *.taboola.com *.abtasty.com *.windows.net maps.googleapis.com *.clarity.ms *.adsrvr.org *.contentsquare.net *.contentsquare.com *.privacy-center.org *.didomi.io *.hsforms.net *.hsforms.com *.neostore.cloud wallet.optic2000.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com https://api-sogecommerce.societegenerale.eu/static/ *.fontawesome.com *.societegenerale.eu *.gstatic.com *.googleapis.com *.goodays.co api-clicandpay.groupecdn.fr *.booxi.eu *.beyable.com 'self' 'unsafe-inline'; object-src *.adobe.com 'self' 'unsafe-inline'; media-src *.adobe.com *.optic2000.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com https://sogecommerce.societegenerale.eu/vads-payment/ https://api-sogecommerce.societegenerale.eu/api-payment/ *.openstreetmap.org https://maps.googleapis.com tryon.cosium.com *.cardinalcommerce.com *.google-analytics.com *.googleadservices.com *.googletagmanager.com *.societegenerale.eu t.elasticsuite.io maps.googleapis.com *.googlesyndication.com *.vtlicensing.com *.google.com *.doubleclick.net *.cookiebot.com *.mapbox.com *.hotjar.com *.hotjar.io *.creativecdn.com *.criteo.com *.taboola.com *.tiktok.com *.abtasty.com *.appspot.com *.windows.net *.facil-iti.app *.facil-iti.com *.oney.io *.clarity.ms *.adsrvr.org *.beyable.com *.contentsquare.net *.contentsquare.com *.hsforms.net *.hsforms.com *.neostore.cloud wallet.optic2000.com 'self' 'unsafe-inline'; child-src blob: http: https: blob: 'self' 'unsafe-inline'; default-src https://sogecommerce.societegenerale.eu/vads-payment/ https://api-sogecommerce.societegenerale.eu/api-payment/ https://api-sogecommerce.societegenerale.eu/static/ *.societegenerale.eu *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';
content-type: text/html; charset=UTF-8
date: Fri, 19 Jun 2026 07:01:03 GMT
expires: -1
location: https://opticien.lissac.fr/saint-denis
pragma: no-cache
server: nginx
set-cookie: PHPSESSID=fk1u146pcbfrktsqpltdne6653; expires=Fri, 19-Jun-2026 08:01:02 GMT; Max-Age=3600; path=/; domain=www.lissac.fr; secure; HttpOnly; SameSite=Lax
set-cookie: X-Magento-Vary=200347cfac96fc8fd9e8f378190fad6320c6b360f9386f9394b70524355ef627; expires=Fri, 19-Jun-2026 08:01:03 GMT; Max-Age=3600; path=/; secure; HttpOnly; SameSite=Lax
strict-transport-security: max-age=31536000
x-cache: miss uncacheable
x-content-type-options: nosniff
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-frame-options: SAMEORIGIN
x-ua-compatible: IE=edge
x-xss-protection: 1; mode=block
x-xss-protection: 1; mode=block
content-length: 0

HTTP/2 200 
content-type: text/html; charset=utf-8
date: Fri, 19 Jun 2026 07:01:03 GMT
content-encoding: gzip
server: Apache
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-frame-options: DENY
cache-control: no-cache, private
content-security-policy: frame-ancestors 'none';
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 c20b1585cc14f7313af71d342a8c81a4.cloudfront.net (CloudFront)
x-amz-cf-pop: FRA60-P14
x-amz-cf-id: kgtHDEEiCr8YOJuJiWf3htvL_lb1hcR-TEs8EbBF-N4QGs4UDpT3ZQ==