Netatmo.com - Shop.netatmo.com

content-type: text/html
content-length: 134
location: https://www.netatmo.com:443/
server: awselb/2.0
date: Tue, 16 Dec 2025 10:29:23 GMT
content-security-policy: base-uri 'self'; connect-src 'self' pebed.dm-event.net api.smartrecruiters.com distributions.crowdin.net acs.netatmo.com bat.bing.com nawebstaticprod.azureedge.net *.contentsquare.net *.google.com wss://*.zopim.com *.zopim.com *.getalma.eu *.paypal.com *.braintree-api.com *.braintreegateway.com *.icanhazip.com *.ipify.org *.google.fr *.netatmo.com *.zdassets.com *.zendesk.com *.google-analytics.com *.doubleclick.net *.optimonk.com wss://*.smooch.io *.tiktok.com *.bing.com *.axept.io *.axeptio.eu  https://cl-pbr.cxr.skeepers.io bat.bing.net wss://*.zendesk.com wss://widget-mediator.zopim.com api.ipify.org https://bat.bing.net; default-src *.zdassets.com *.zendesk.com *.zopim.com 'self' wss://*.zendesk.com wss://*.zopim.com; form-action *.facebook.com; img-src 'self' nawebstaticprod.azureedge.net *.tile.osm.org *.contentsquare.net *.zdassets.com *.zopim.io data: *.blob.core.windows.net *.google-analytics.com *.doubleclick.net *.cloudinary.com *.google.fr *.google.com *.netatmo.com *.gstatic.com *.googleusercontent.com *.facebook.com *.optimonk.com *.bing.com www.googletagmanager.com *.paypal.com axeptio.imgix.net *.axept.io bat.bing.net netatmosupport.zendesk.com static.zdassets.com v2assets.zopim.io *.googlesyndication.com https://bat.bing.net https://s1.dmcdn.net https://gravatar.com; object-src *.netatmo.com; script-src 'self' geo2.dailymotion.com geo.dailymotion.com *.mondialrelay.com *.contentsquare.com *.contentsquare.net *.tiktok.com 'unsafe-inline' 'unsafe-eval' cdn.jsdelivr.net js.stripe.com *.paypal.com *.google-analytics.com *.googletagmanager.com *.google.fr *.netatmo.com *.google.com *.facebook.net *.googleadservices.com *.doubleclick.net *.zdassets.com *.zopim.com *.optimonk.com *.bing.com *.smooch.io widgets.rr.skeepers.io www.paypalobjects.com svht.tradedoubler.com  swrap.tradedoubler.com *.axept.io *.zendesk.com t.contentsquare.net app.contentsquare.com https://js.stripe.com; style-src 'self' 'unsafe-inline' nawebstaticprod.azureedge.net *.googleapis.com *.netatmo.com *.google.com *.optimonk.com *.googletagmanager.com cdn.jsdelivr.net https://fonts.googleapis.com; font-src 'self' nawebstaticprod.azureedge.net cdn.jsdelivr.net *.gstatic.com *.netatmo.com *.optimonk.com; frame-src 'self' geo.dailymotion.com geo2.dailymotion.com nawebstaticprod.azureedge.net csxd.netatmo.com js.stripe.com *.paypal.com *.youtube.com *.netatmo.com *.doubleclick.net *.facebook.com *.paypalobjects.com a.imgstatics.com tbs.tradedoubler.com www.googletagmanager.com https://www.googletagmanager.com https://netatmosupport.zendesk.com https://widget.espace-ambassadeur.fr; frame-ancestors 'self' *.netatmo.com; media-src 'self' *.zdassets.com; child-src blob:; worker-src blob: 'self';
x-cf-version: 2
x-cache: Miss from cloudfront
via: 1.1 262e9bd80864e82dd3bf98eedc41b28e.cloudfront.net (CloudFront)
x-amz-cf-pop: FRA56-P15
x-amz-cf-id: TAxfw70KMQn2BwyB4ufsgKQcMq8hwM81tdytKNggcot42qZeyuA60g==
x-frame-options: DENY
x-content-type-options: nosniff
strict-transport-security: max-age=60; includeSubDomains

HTTP/2 200 
content-type: text/html;charset=utf-8
server: CloudFront
date: Tue, 16 Dec 2025 10:29:23 GMT
access-control-allow-origin: https://www.netatmo.com
referrer-policy: no-referrer
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
x-download-options: noopen
x-permitted-cross-domain-policies: none
x-xss-protection: 1; mode=block
vary: Accept-Encoding
x-robots-tag: index, follow, max-image-preview:large, max-snippet:-1, max-video-preview:-1
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin
cross-origin-embedder-policy: unsafe-none
content-security-policy: base-uri 'self'; font-src 'self' https://fonts.gstatic.com https://nawebstaticprod.azureedge.net; form-action 'self' https://*.facebook.com/tr; frame-ancestors 'self' *.netatmo.com https://pay.google.com; img-src 'self' https://widget.mondialrelay.com https://*.tile.openstreetmap.org data: https://www.mondialrelay.com https://*.googletagmanager.com https://*.googlesyndication.com https://*.bing.com https://*.bing.net https://axeptio.imgix.net https://*.facebook.com https://*.google.com https://*.google.fr https://*.doubleclick.net https://tbs.tradedoubler.com https://cdn.crowdin.com https://production-enterprise-static.cf-downloads.crowdin.com https://fonts.gstatic.com https://*.zendesk.com https://*.axept.io https://*.contentsquare.net https://*.googleadservices.com; object-src 'self' *.netatmo.com; script-src-attr 'unsafe-inline' nonce-jquery nonce-leaflet nonce-mondialrelay; style-src 'self' 'unsafe-inline' https://unpkg.com https://widget.mondialrelay.com https://fonts.googleapis.com https://*.googletagmanager.com https://*.commercetools.com https://cdn.crowdin.com https://nawebstaticprod.azureedge.net; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.netatmo.com https://*.googletagmanager.com https://unpkg.com https://widget.mondialrelay.com https://*.commercetools.app https://*.commercetools.com https://js.stripe.com https://api.jawg.io https://*.contentsquare.net https://*.axept.io https://*.zdassets.com https://*.zendesk.com https://*.bing.com https://*.doubleclick.net https://*.skeepers.io https://*.tradedoubler.com https://connect.facebook.net https://*.tiktok.com https://cdn.crowdin.com https://*.imagino.com https://ad.avtm.fr https://cdn.portal-backend.prod.qualibooth.com; upgrade-insecure-requests; default-src 'self'; connect-src 'self' https://*.netatmo.com https://*.crowdin.net https://widget.mondialrelay.com https://api.jawg.io https://*.commercetools.com https://*.commercetools.app https://*.contentsquare.net https://*.bing.com https://*.bing.net https://*.googlesyndication.com https://*.google-analytics.com https://*.doubleclick.net https://*.google.com https://google.com https://*.googletagmanager.com https://*.zdassets.com https://*.zendesk.com https://*.skeepers.io https://*.axept.io https://*.zendesk.com wss://*.zendesk.com https://*.tiktok.com https://*.imagino.com https://www.googleadservices.com https://www.google.fr https://*.imgstatics.com https://*.contentsquare.com https://api.smartrecruiters.com https://unpkg.com/leaflet/dist/leaflet.js.map https://page-metrics.prod.qualibooth.com https://pipelinein.prod.qualibooth.com https://acs.netatmo.com; frame-src 'self' https://lottie.host https://js.stripe.com https://*.googletagmanager.com https://*.doubleclick.net https://netatmo.crowdin.com https://tbs.tradedoubler.com https://*.imgstatics.com https://csxd.www.netatmo.com https://csxd.shop.netatmo.com https://csxd.www2.netatmo.com https://weathermap.netatmo.com https://*.facebook.com; media-src 'self'; worker-src 'self' blob:;
origin-agent-cluster: ?1
x-dns-prefetch-control: off
permissions-policy: camera=(), display-capture=(), fullscreen=(), geolocation=(self), microphone=()
x-cf-v: 1
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 d32e6b607499bf1bc577abd1d3ae9984.cloudfront.net (CloudFront)
x-amz-cf-pop: FRA56-P15
x-amz-cf-id: F4j6hh8s4SzZ3SHj2mDpS2_eVUDWV-SzouaZ9tLYAEgrYA7zhDXXxA==