matthys.net website report

HTTP/2 200
server: nginx
date: Tue, 27 Oct 2026 19:29:57 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding, Accept-Encoding
x-built-with: Hyva Themes
report-to: {"group":"report-endpoint","max_age":10886400,"endpoints":[{"url":"https:\/\/eeb5ff6a-297d-4ded-b00f-5a95f1c081a7.sansec.watch\/"}]}
content-security-policy-report-only: font-src https://static.payzen.eu/static/ i.icomoon.io fonts.gstatic.com *.typekit.net *.gstatic.com 'self' data: data: 'self' 'unsafe-inline'; form-action *.facebook.com *.list-manage.com *.payzen.eu https://secure.payzen.eu/vads-payment/ https://api.payzen.eu/api-payment/ https://static.payzen.eu/static/ 'self' 'unsafe-inline'; frame-ancestors *.multisafepay.com https://pay.google.com 'self'; frame-src *.youtube.com *.youtube-nocookie.com player.vimeo.com https://www.google.com/recaptcha/ bid.g.doubleclick.net *.facebook.com *.jotform.com *.matterport.com *.multisafepay.com https://pay.google.com https://secure.payzen.eu/vads-payment/ https://static.payzen.eu/static/ www.googletagmanager.com https://*.dpdconnect.nl *.googletagmanager.com 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com www.google-analytics.com *.vimeocdn.com i.ytimg.com *.youtube.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.analytics.google.com www.googletagmanager.com https://images.unsplash.com *.clarity.ms *.doubleclick.net *.facebook.com *.facebook.net *.getsitecontrol.com *.google.com *.smartsuppcdn.com maps.gstatic.com maps.googleapis.com *.multisafepay.com https://secure.payzen.eu/static/latest/images/type-carte/ https://static.payzen.eu/static/ https://secure.payzen.eu/vads-payment/ ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com https://redchamps.com *.hsforms.net *.hsforms.com 'self' data: *.googletagmanager.com *.google-analytics.com ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline'; script-src www.google-analytics.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ googleads.g.doubleclick.net www.googleadservices.com analytics.google.com www.googletagmanager.com https://maps.googleapis.com https://player.vimeo.com *.clarity.ms *.facebook.net *.getsitecontrol.com *.smartsuppcdn.com *.smartsuppchat.com *.tiktok.com plausible.io maps.googleapis.com *.multisafepay.com https://pay.google.com https://api.payzen.eu/api-payment/ https://static.payzen.eu/static/ https://*.dpdconnect.nl https://sibautomation.com chimpstatic.com mcjs.prd.a.intuit.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com *.hsforms.net *.hsforms.com *.google.com *.gstatic.com *.googletagmanager.com tagmanager.google.com https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.smartsuppcdn.com *.multisafepay.com https://static.payzen.eu/static/ i.icomoon.io fonts.googleapis.com *.typekit.net downloads.mailchimp.com *.googleapis.com *.gstatic.com tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src *.google-analytics.com vimeo.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com https://maps.googleapis.com https://player.vimeo.com *.googleapis.com *.clarity.ms *.facebook.com *.getsitecontrol.com *.getsitectrl.com *.google.com *.googlesyndication.com *.smartsuppcdn.com *.smartsuppchat.com *.tiktok.com *.tiktokw.us plausible.io wss://*.smartsupp.com maps.googleapis.com *.multisafepay.com https://secure.payzen.eu/vads-payment/ https://api.payzen.eu/api-payment/ stats.g.doubleclick.net https://www.google.com/recaptcha/ https://in-automate.brevo.com form-assets.mailchimp.com *.intuit.com *.a.intuit.com mcjs.prd.a.intuit.com chimpstatic.com *.amazonaws.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.googletagmanager.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src https://secure.payzen.eu/vads-payment/ https://api.payzen.eu/api-payment/ https://static.payzen.eu/static/ *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://eeb5ff6a-297d-4ded-b00f-5a95f1c081a7.sansec.watch/; report-to report-endpoint;
x-content-type-options: nosniff
x-xss-protection: 1; mode=block, 1; mode=block
x-frame-options: SAMEORIGIN, SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-ua-compatible: IE=Edge
x-magento-cache-debug: HIT
grace: none
pragma: no-cache
expires: -1
cache-control: no-store, no-cache, must-revalidate, max-age=0
x-cache-ttl: 68049.411
x-cache-age: 18350.589
x-cache-grace: 172800.000
strict-transport-security: max-age=31536000; preload
content-encoding: br