Informations Techniques
| Code de Statut HTTP | 403 |
| Version HTTP | HTTP/1.1 |
| HTTPS | ✔ Disponible |
| Adresse IP | 104.18.28.249 |
| Logiciel Serveur | cloudflare |
| CDN | Cloudflare |
| Compression | gzip |
|
🚫 🟡 Erreur HTTP 403 | Le serveur a retourné une erreur 403. Vérifiez la configuration d'accès. |
Code de Statut HTTP 403
Version HTTP HTTP/1.1
HTTPS ✔ Disponible
Adresse IP 104.18.28.249
Logiciel Serveur cloudflare
CDN Cloudflare
Compression gzip
🚫 🟡 Erreur HTTP 403 Le serveur a retourné une erreur 403. Vérifiez la configuration d'accès.
Performance
| Résolution DNS | 39 ms |
| Connexion TCP | 40.7 ms |
| Négociation TLS | 8.1 ms |
| Temps Jusqu'au Premier Octet (TTFB) | 58.3 ms |
| Téléchargement du Contenu | 0.1 ms |
| Temps de Réponse Total | 58.4 ms |
Résolution DNS 39 ms
Connexion TCP 40.7 ms
Négociation TLS 8.1 ms
Temps Jusqu'au Premier Octet (TTFB) 58.3 ms
Téléchargement du Contenu 0.1 ms
Temps de Réponse Total 58.4 ms
Sécurité
| HTTPS | ✔ Activé |
| HSTS | ✔ max-age=31536000 |
| CSP | ✔ Configuré |
| X-Frame-Options | ✔ SAMEORIGIN |
| X-Content-Type-Options | ✔ nosniff |
| Politique de Référent | strict-origin-when-cross-origin |
| Politique de Permissions | ✔ Configuré |
| HTTP/2 | ⚠ HTTP/1.1 |
HTTPS ✔ Activé
HSTS ✔ max-age=31536000
CSP ✔ Configuré
X-Frame-Options ✔ SAMEORIGIN
X-Content-Type-Options ✔ nosniff
Politique de Référent strict-origin-when-cross-origin
Politique de Permissions ✔ Configuré
HTTP/2 ⚠ HTTP/1.1
Vérification SEO Rapide
| Titre | Attention Required! | Cloudflare |
| Robots Meta | noindex, nofollow |
Titre Attention Required! | Cloudflare
Robots Meta noindex, nofollow
Technologies Détectées
| Technologie | Google Analytics Google Tag Manager Cloudflare Hotjar |
Technologie Google Analytics Google Tag Manager Cloudflare Hotjar
En-têtes HTTP
| Date | Tue, 28 Jul 2026 15:45:49 GMT |
| Content-type | text/html; charset=UTF-8 |
| Cache-control | private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 |
| Expires | Thu, 01 Jan 1970 00:00:01 GMT |
| Referrer-policy | strict-origin-when-cross-origin |
| Server-timing | cfEdge;dur=5,cfOrigin;dur=0 |
| X-frame-options | SAMEORIGIN |
| Strict-transport-security | max-age=31536000 |
| X-content-type-options | nosniff |
| Content-security-policy | default-src 'self' https://*.global-exchange.com https://fonts.gstatic.com; connect-src 'self' https://api.payments.global-exchange.com data: https://*.google-analytics.com https://*.google.com https://*.google.es https://*.googleadservices.com https://*.doubleclick.net https://pagead2.googlesyndication.com https://bat.bing.com https://brainagency360tagmanager.com https://aax-eu.amazon-adsystem.com https://ara.paa-reporting-advertising.amazon https://*.tiktok.com https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://static.hotjar.com https://script.hotjar.com; style-src-elem 'self' 'unsafe-inline' https://fonts.googleapis.com; script-src 'unsafe-eval' *.tradedoubler.com https://static.hotjar.com https://static.hotjar.com https://script.hotjar.com; script-src-elem 'self' 'unsafe-inline' https://static.cloudflareinsights.com https://www.googletagmanager.com https://www.gstatic.com https://www.google.com https://unpkg.com https://cdn.jsdelivr.net https://connect.facebook.net https://googleads.g.doubleclick.net https://bat.bing.com *.tradedoubler.com https://brainagency360tagmanager.com https://*.rfihub.net https://*.rfihub.com https://c.amazon-adsystem.com https://aax-eu.amazon-adsystem.com https://cdn01.basis.net https://*.adform.net https://*.tiktok.com https://static.hotjar.com https://script.hotjar.com; worker-src blob:; img-src 'self' data: https://*.global-exchange.com https://www.google.es https://*.google-analytics.com https://*.google.com https://www.googletagmanager.com https://www.facebook.com https://ade.googlesyndication.com https://ad.doubleclick.net https://bat.bing.com https://connect.facebook.net https://pixel.sitescout.com https://static.hotjar.com https://script.hotjar.com https://survey-images.hotjar.com; frame-src 'self' https://www.google.com https://*.doubleclick.net *.tradedoubler.com https://*.googletagmanager.com https://brainagency360tagmanager.com https://*.rfihub.com https://aax-eu.amazon-adsystem.com; object-src 'self'; font-src 'self' https://script.hotjar.com |
| Permissions-policy | camera=(self) |
| Cross-origin-embedder-policy | require-corp; report-to="default"; |
| Cross-origin-opener-policy | same-site; report-to="default"; |
| Cross-origin-resource-policy | same-site |
| X-xss-protection | 1; mode=block |
| Content-encoding | gzip |
| Server | cloudflare |
| Cf-ray | a225035f58b8d476-CDG |
| Alt-svc | h3=":443"; ma=86400 |
Balises Meta
| Content-Type | text/html; charset=UTF-8 |
| X-UA-Compatible | IE=Edge |
| Robots | noindex, nofollow |
| Viewport | width=device-width,initial-scale=1 |
Date Tue, 28 Jul 2026 15:45:49 GMT
Content-type text/html; charset=UTF-8
Cache-control private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires Thu, 01 Jan 1970 00:00:01 GMT
Referrer-policy strict-origin-when-cross-origin
Server-timing cfEdge;dur=5,cfOrigin;dur=0
X-frame-options SAMEORIGIN
Strict-transport-security max-age=31536000
X-content-type-options nosniff
Content-security-policy default-src 'self' https://*.global-exchange.com https://fonts.gstatic.com; connect-src 'self' https://api.payments.global-exchange.com data: https://*.google-analytics.com https://*.google.com https://*.google.es https://*.googleadservices.com https://*.doubleclick.net https://pagead2.googlesyndication.com https://bat.bing.com https://brainagency360tagmanager.com https://aax-eu.amazon-adsystem.com https://ara.paa-reporting-advertising.amazon https://*.tiktok.com https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://static.hotjar.com https://script.hotjar.com; style-src-elem 'self' 'unsafe-inline' https://fonts.googleapis.com; script-src 'unsafe-eval' *.tradedoubler.com https://static.hotjar.com https://static.hotjar.com https://script.hotjar.com; script-src-elem 'self' 'unsafe-inline' https://static.cloudflareinsights.com https://www.googletagmanager.com https://www.gstatic.com https://www.google.com https://unpkg.com https://cdn.jsdelivr.net https://connect.facebook.net https://googleads.g.doubleclick.net https://bat.bing.com *.tradedoubler.com https://brainagency360tagmanager.com https://*.rfihub.net https://*.rfihub.com https://c.amazon-adsystem.com https://aax-eu.amazon-adsystem.com https://cdn01.basis.net https://*.adform.net https://*.tiktok.com https://static.hotjar.com https://script.hotjar.com; worker-src blob:; img-src 'self' data: https://*.global-exchange.com https://www.google.es https://*.google-analytics.com https://*.google.com https://www.googletagmanager.com https://www.facebook.com https://ade.googlesyndication.com https://ad.doubleclick.net https://bat.bing.com https://connect.facebook.net https://pixel.sitescout.com https://static.hotjar.com https://script.hotjar.com https://survey-images.hotjar.com; frame-src 'self' https://www.google.com https://*.doubleclick.net *.tradedoubler.com https://*.googletagmanager.com https://brainagency360tagmanager.com https://*.rfihub.com https://aax-eu.amazon-adsystem.com; object-src 'self'; font-src 'self' https://script.hotjar.com
Permissions-policy camera=(self)
Cross-origin-embedder-policy require-corp; report-to="default";
Cross-origin-opener-policy same-site; report-to="default";
Cross-origin-resource-policy same-site
X-xss-protection 1; mode=block
Content-encoding gzip
Server cloudflare
Cf-ray a225035f58b8d476-CDG
Alt-svc h3=":443"; ma=86400
