Kleber.pl

x-powered-by: Express
location: https://www.kleber.pl/
vary: Accept
content-type: text/plain; charset=utf-8
content-length: 56
date: Thu, 12 Feb 2026 17:43:21 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
alt-svc: h3=":8443";ma=60;

HTTP/2 302 
date: Thu, 12 Feb 2026 17:43:22 GMT
content-type: text/plain; charset=utf-8
content-length: 28
x-powered-by: Express
set-cookie: kleber-tc.csrf=csrf-fallback; Path=/; Secure
location: /auto/
vary: Accept
strict-transport-security: max-age=31536000; includeSubDomains; preload
alt-svc: h3=":8443";ma=60;
x-azure-ref: 20260212T174321Z-17555644bffwqhq2hC1FRAzd4n0000001qzg00000000kgwk
x-fd-int-roxy-purgeid: 0
x-cache: TCP_MISS
cache-control: max-age=3600

HTTP/2 200 
date: Thu, 12 Feb 2026 17:43:22 GMT
content-type: text/html; charset=utf-8
x-frame-options: SAMEORIGIN
referrer-policy: same-origin
permissions-policy: geolocation=(self)
x-content-type-options: nosniff
content-security-policy: default-src kleber-tc.prod-we-dcadcx.michelin.fr 'self'; style-src 'unsafe-inline' kleber-tc.prod-we-dcadcx.michelin.fr 'self' cxf-prod.azureedge.net *.windows.net *.googleapis.com blob:; script-src 'unsafe-inline' 'unsafe-eval' kleber-tc.prod-we-dcadcx.michelin.fr 'self' *.windows.net *.hotjar.com *.kameleoon.eu assets.pixlee.com assets.pxlecdn.com connect.facebook.net cxf-prod.azureedge.net developers.google.com *.googleapis.com pixel.mathtag.com sdk.privacy-center.org *.batch.com *.google-analytics.com *.google.com/recaptcha/ *.googletagmanager.com *.gstatic.com *.youtube.com https://cdnjs.cloudflare.com/ https://unpkg.com *.mouseflow.com *.server-side-tagging-np4i3rqoca-uc.a.run.app; font-src kleber-tc.prod-we-dcadcx.michelin.fr 'self' *.windows.net fonts.gstatic.com cxf-prod.azureedge.net *.mouseflow.com; frame-src 'self' *.kameleoon.eu pixel.mathtag.com *.hotjar.com *.google.com photos.pixlee.co *.youtube.com *.facebook.com *.kameleoon.com *.mouseflow.com https://*.googletagmanager.com https://server-side-tagging-np4i3rqoca-uc.a.run.app https://unpkg.com https://dotityd.kleber.fr https://dotityd.kleber.it https://dotityd.kleber.pl https://dotityd.kleber-tyres.com https://dotityd.kleber.nl https://dotityd.kleber.hu https://dotityd.kleber.es https://dotityd.kleber-reifen.de ; connect-src 'self' *.michelin.fr *.windows.net *.kameleoon.eu *.hotjar.com *.hotjar.io *.batch.com *.google-analytics.com *.googleapis.com api.privacy-center.org *.doubleclick.net *.azureedge.net *.kameleoon.com ws: *.mouseflow.com https://server-side-tagging-np4i3rqoca-uc.a.run.app https://*.google.com https://*.kameleoon.io https://www.facebook.com https://dotityd.kleber.fr https://dotityd.kleber.it https://dotityd.kleber.pl https://dotityd.kleber-tyres.com https://dotityd.kleber.nl https://dotityd.kleber.hu https://dotityd.kleber.es https://dotityd.kleber-reifen.de ; img-src 'self' *.azureedge.net *.windows.net *.cloudimg.io *.ytimg.com cxf-prod.azureedge.net *.facebook.com *.google-analytics.com *.googletagmanager.com *.gstatic.com *.googleapis.com api.privacy-center.org data: *.mouseflow.com https://*.google.com ; object-src 'none'; worker-src 'self'; manifest-src 'self' *.windows.net; media-src 'self'
content-language: pl-pl
cache-control: max-age=3600
x-dns-prefetch-control: off
x-download-options: noopen
x-xss-protection: 1; mode=block
etag: W/"d5068-OojJrcoUnDpsmFj5uF5/sY1cnfc"
strict-transport-security: max-age=31536000; includeSubDomains; preload
alt-svc: h3=":8443";ma=60;
vary: Accept-Encoding
content-encoding: gzip
x-azure-ref: 20260212T174322Z-17555644bffwqhq2hC1FRAzd4n0000001qzg00000000kgws
x-fd-int-roxy-purgeid: 0
x-cache: TCP_HIT
x-cache-info: L1_T2