HTTP/1.1 200 OK
Connection: keep-alive
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Permitted-Cross-Domain-Policies: master-only
Content-Type: text/html; charset=utf-8
Set-Cookie: PLAY_LANG=es; Max-Age=64000; Expires=Tue, 23 Mar 2021 03:53:55 GMT; Path=/; HTTPOnly
Set-Cookie: PLAY_SESSION=3b14765ae08ffe4eddf8986dde2f45db91e853d2-csrfToken=88672e9f84121d6b2963a0764c3d69792265a8ce-1616407635066-b409e53e3c52ed5ed60b351f; Path=/; Secure; HTTPOnly
Set-Cookie: NSC_WJQ_fvftqsqmbz-80=ffffffffc3a0283345525d5f4f58455e445a4a421518;expires=Mon, 22-Mar-2021 10:09:15 GMT;path=/;httponly
Content-Security-Policy: block-all-mixed-content; upgrade-insecure-requests; base-uri 'self' *.decathlon.es *.dynamicyield.com *.dynamicyield.eu cdn.jsdelivr.net; default-src 'self' 'unsafe-eval' 'unsafe-inline' *.abtasty.com *.akafms.net *.akamaihd.net *.akstat.io/ *.algolianet.com *.bing.com *.boltdns.net *.braintree-api.com *.braintreegateway.com *.brightcove.com *.cloudfront.net *.commander1.com *.commandersact.com *.cube-net.org *.cube-net.pub *.custhelp.com *.datadoghq.eu *.decathlon.com *.decathlon.es *.decathlon.net *.demdex.net *.doubleclick.net *.dynamicyield.com *.dynamicyield.eu *.fitanalytics.com *.go-mpulse.net *.google.es *.googleapis.com *.googleusercontent.com *.iadvize.com *.ingest.sentry.io *.mopinion.com *.mydecathlon.com *.oppwa.com *.paypal.com *.s3.eu-west-1.amazonaws.com *.sc-static.net *.tagcommander.com *.tiendeo.com/ *.tradetracker.net *.woosmap.com *.y-track.com *.youtube.com abtastylab.com adserving.ancoraplatform.com api.oney.io apis.google.com app.beampulse.com appmobile-bridge-js.s3-eu-west-1.amazonaws.com blob: bp-1c51.kxcdn.com browser-update.org bs.serving-sys.com cdn.jsdelivr.net cdnjs.cloudflare.com code.jquery.com code.jquery.com/ui/1.12.1/jquery-ui.js code.jquery.com/ui/1.12.1/themes/base/jquery-ui.css comunidad.decathlon.es connect.facebook.net contents.mediadecathlon.com ct.pinterest.com cx.atdmt.com data: dis.eu.criteo.com fonts.gstatic.com google-maps-utility-library-v3.googlecode.com gum.criteo.com https://*.algolia.net https://*.decathlon.io https://*.mformedia.es https://*.numerized.com https://*.numerized.fr https://*.privacy-center.org https://*.tiktok.com https://*.trackjs.com https://*.trylive.com https://*.zenloop.com https://adservice.google.com https://api.booxi.eu  https://bf97725pbp.bf.dynatrace.com https://booxi-api-be.appspot.com https://brightcove.hs.llnwd.net https://brightcove.vo.llnwd.net https://cdn.trustcommander.net https://emersya.com https://gateway.zscaler.net https://js-cdn.dynatrace.com https://js.squareup.com https://js.stripe.com https://lh3.ggpht.com https://m.stripe.com https://m.stripe.network https://media.alltricks.com https://media.alltricks.com https://quechua.v-cult.com https://s.yimg.com/ https://site.booxi.com https://site.booxi.eu https://smart-engine-dot-booxi-api-be.appspot.com https://ssl.google-analytics.com https://tradetrakerscript-dot-spain-platform-preprod.appspot.com https://tradetrakerscript-dot-spain-platform.appspot.com https://ui.onepay.decathlon.io/main.js https://wurfl.io https://www.booxi.eu https://zenloop-website-overlay-production.s3.amazonaws.com ib.adnxs.com keepyeyes.cube-net.org localhost maps.google.com maps.gstatic.com maxcdn.bootstrapcdn.com onepay-ui.decathlon.net oney-staging.azure-api.net operacionesdecathlon.es oppwa.com p.teads.tv pixel.efike.co platform.twitter.com players.brightcove.net pre-comunidad.decathlon.es preprod-keepyeyes.cube-net.org privacy.trustcommander.net pro-decathloneventostienda.s3.amazonaws.com px.sunmedia.tv recommendation-js.woosmap.com s.go-mpulse.net s.pinimg.com s.ytimg.com s3.eu-west-1.amazonaws.com secure-ds.serving-sys.com secure.adnxs.com smc.demdex.net sslwidget.criteo.com static-cdn.mydecathlon.com static.criteo.net staticxx.faceboook.com tm.tradetracker.net tr.outbrain.com track.adform.net vjs.zencdn.net ws: wss://*.iadvize.com www.decathlon.fr www.facebook.com www.google-analytics.com www.google.com www.google.es www.google.fr www.googleadservices.com www.googletagmanager.com www.gstatic.com; font-src 'self' *.brightcove.com *.decathlon.es *.dynamicyield.com *.dynamicyield.eu *.iadvize.com blob: cdn.jsdelivr.net cdnjs.cloudflare.com customizations.fitanalytics.com data: fonts.gstatic.com keepyeyes.cube-net.org localhost maxcdn.bootstrapcdn.com players.brightcove.net preprod-keepyeyes.cube-net.org static-cdn.mydecathlon.com vjs.zencdn.net widget.fitanalytics.com; media-src 'self' *.akafms.net *.akamaihd.net *.boltdns.net *.brightcove.com *.decathlon.es blob: brightcove.hs.llnwd.net https://brightcove.hs.llnwd.net https://brightcove.vo.llnwd.net https://media.alltricks.com https://media.alltricks.com pixel.efike.co players.brightcove.net; worker-src 'self' 'unsafe-eval' 'unsafe-inline' *.decathlon.es blob:;
Set-Cookie: ACTIVE_USER=y;Max-Age=900;HttpOnly;Secure
Cache-Control: max-age=0, reload, no-cache, no-store, must-revalidate
Server-Timing: dtRpid;desc="-242320739"
Set-Cookie: dtCookie=v_4_srv_2_sn_3F857DE9656B8D37B72BE95200DC465D_perc_34142_ol_1; Path=/; Domain=.decathlon.es
Set-Cookie: NSC_WJQ_gspouft-443=ffffffffc3a0251545525d5f4f58455e445a4a42378b;expires=Mon, 22-Mar-2021 10:09:15 GMT;path=/;secure;httponly
Set-Cookie: visid_incap_989893=9+bC7gy+RVaEuZSMqu1EGVJsWGAAAAAAQUIPAAAAAADzos6dTh2Qxgce2V3r8f29; expires=Tue, 22 Mar 2022 08:07:11 GMT; HttpOnly; path=/; Domain=.decathlon.es
Set-Cookie: nlbi_989893=Ncp+bEpy31ltSxDwp0paWgAAAADef0AZLVTpPsvBh6g80bLM; path=/; Domain=.decathlon.es
Set-Cookie: incap_ses_979_989893=yAGSDS4ZLiU2DCYKnRuWDVJsWGAAAAAAH59RjhC1IEbMdR9Qo2ZZWQ==; path=/; Domain=.decathlon.es
X-CDN: Imperva
X-Iinfo: 9-79187389-79187392 NNNN CT(109 111 0) RT(1616407634027 24) q(0 0 2 0) r(4 4) U5
Accept-Ranges: bytes
Date: Mon, 22 Mar 2021 10:07:15 GMT
Via: 1.1 varnish
X-Served-By: cache-mci5923-MCI
X-Cache: MISS
X-Cache-Hits: 0
Vary: Accept-Encoding
Strict-Transport-Security: max-age=300
transfer-encoding: chunked