| x-powered-by: |
NN |
| p3p: |
CP="CAO DSP COR CURa ADMa CONa OUR SAMa OTRa LEG STA" |
| pragma: |
no-cache |
| cache-control: |
no-cache,no-store,max-age=0,must-revalidate |
| expires: |
0 |
| x-frame-options: |
SAMEORIGIN |
| x-xss-protection: |
1; mode=block; |
| x-content-type-options: |
nosniff |
| strict-transport-security: |
max-age=35000000 |
| last-modified: |
Tue, 08 Oct 2024 19:41:32 GMT |
| content-type: |
text/html;charset=utf-8 |
| content-language: |
en-US |
| date: |
Tue, 08 Oct 2024 19:41:32 GMT |
| content-length: |
25737 |
| connection: |
close |
| set-cookie: |
0779abb0ed2b874c82038d5484422b60=0001n80jsXfbQBUz630Yv8q4tRq:-1; Path=/; Secure; HttpOnly,X-CSRF-Token=cb8ba04a860416e887ac841cacf88c9ffe9f3b383e13b3082ff6adbc464f5743; Path=/; Secure; HttpOnly,portalslb=!g1vAtyI/Nuihu4o2hEkNXSSjpJk3Fn7x1g/PlvYESfUxNC5v41iRpFdUe8qKA6/rhsXiG5C1aOTv6oB7uU0q+SSD6nyozCbF2VnO0M86; path=/; Httponly; Secure |
| server-timing: |
cdn-cache; desc=MISS, edge; dur=10, origin; dur=71, ak_p; desc="1728416492830_1490884687_130896905_8251_8137_3_18_-";dur=1 |
| referrer-policy: |
same-origin |
| content-security-policy: |
default-src 'self'; img-src * 'self' data: https:; media-src 'self' https: *.glance.net *.glancecdn.net; style-src 'self' 'unsafe-inline' https: *.glance.net *.glancecdn.net; frame-ancestors 'self'; font-src 'self' data: https: *.glance.net *.glancecdn.net; connect-src 'self' wss://*.glance.net wss://*.hotjar.com wss://*.nn-acc.nl wss://*.nn-group.com wss://auvious.video wss://streaming.mypurecloud.de *.2o7.net *.akstat.io *.glance.net *.glancecdn.net *.hotjar.com *.hotjar.io *.mypurecloud.de *.onetrust.com *.rsc.cdn77.org *.demdex.net *.doubleclick.net *.omtrdc.net *.insim.biz *.nn-group.com *.nn-acc.nl *.nn.nl 69o4c7fld0.execute-api.eu-west-1.amazonaws.com el7z2lljh7.execute-api.eu-west-1.amazonaws.com fevgku35a5.execute-api.eu-west-1.amazonaws.com havdit7pd8.execute-api.eu-west-1.amazonaws.com nn-nl-mortgages-upload-service-prd.s3.eu-west-1.amazonaws.com prd-mrdb-api-data-storage.s3.eu-west-1.amazonaws.com ycov3pi8aj.execute-api.eu-west-1.amazonaws.com api-appsee.service-now.com api.ciuvo.com api.ext-sandbox.fourthline.com api.fourthline.com api.linktexting.com api.nibud.nl api.presspage.com api.trongrid.io bat.bing.com c.go-mpulse.net cdn.cookielaw.org/ cdn.linkedin.oribi.io cdn.optimizely.com cke4.ckeditor.com cm.everesttech.net code.jquery.com dcs.adobedc.net edge.adobedc.net eventsingest-demo.cidemo.sas.com fasttrack.sb.blueconic.net fonts.googleapis.com maps.googleapis.com infragrid.v.network logx.optimizely.com md-scp.kampyle.com meetlookup.com metrics.articulate.com nn-group.bbvms.com nn-nn.digitalcx.com overbridgenet.com pagead2.googlesyndication.com plugins.blueconic.net px.ads.linkedin.com raw.githubusercontent.com region1.analytics.google.com resources.digital-cloud.medallia.eu rum.optimizely.com sandbox.api.fourthline.com sandbox.v.fourthline.com sentry.auvious.com sun.tronex.io translate.googleapis.com *.akamaihd.net udc-neb.kampyle.com v.fourthline.com www.facebook.com/tr/ www.google.com/pagead/ www.gstatic.com; frame-src 'self' schermdelen.nl nn-group.bbvms.com *.demdex.net *.doubleclick.net *.glance.net accounts.google.com cdn.engageone.video cdncache-a.akamaihd.net cdnjs.cloudflare.com content.lp.nn.nl dev-life-outsys.insim.biz eu-west-1-mt-preprod2.engageone.video eu-west-1-mt-prod2.engageone.video fonts.engageone.video gateway.zscloud.net informatie.cz.nl lpcdn.lpsnmedia.net maps.google.nl open.spotify.com platform.twitter.com player.vimeo.com presspage-production-content.s3.amazonaws.com resources.digital-cloud.medallia.eu tpc.googlesyndication.com tst-life-outsys.insim.biz w.soundcloud.com wiarekentool.nntools.nl www.finly.nl www.quintrics.nl www.youtube-nocookie.com www.youtube.com; object-src 'self' *.newstat.net/ab/ *.glancecdn.net *.linkedin.com ad.doubleclick.net googleads.g.doubleclick.net 6005723.global.siteimproveanalytics.io chatbot.api.nn-group.com l845.nn.nl www.nn-acc.nl www.nn.nl content.presspage.com fonts.googleapis.com fonts.gstatic.com nn-group.bbvms.com nn.d3.sc.omtrdc.net script.hotjar.com static.hotjar.com translate.googleapis.com udc-neb.kampyle.com www.hypotheekbond.nl; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: blob: *.demdex.net *.glance.net *.glancecdn.net *.googletagmanager.com *.liveperson.net *.pardot.com *.presspage.com *.nn.nl *.nn-acc.nl *.nn-group.com ads-api.twitter.com ads-twitter.com analytics.twitter.com platform.twitter.com platform.linkedin.com googleads.g.doubleclick.net assets.adobedtm.com assets.giocdn.com bat.bing.com c.go-mpulse.net cdn.bluebillywig.com cdn.blueconic.net cdn.cookielaw.org/scripttemplates/ cdn.optimizely.com cdn.tt.omtrdc.net cdn.walkme.com cm.everesttech.net code.jquery.com connect.facebook.net fidoapi.com kayemi.punctures-sakani.com liznumgv.songbooq.com lpcdn.lpsnmedia.net maps.googleapis.com md-scp.kampyle.com mstat.acestream.net nn-group.bbvms.com plugins.blueconic.net presspage-production-content.s3.amazonaws.com protectsurf-a.akamaihd.net qdatasales.com resources.digital-cloud.medallia.eu s3.amazonaws.com sandbox.v.fourthline.com sc-static.net script.hotjar.com siteimproveanalytics.com sjs.bizographics.com snap.licdn.com ssl.google-analytics.com static.ads-twitter.com static.hotjar.com tdn.r42tag.com tpc.googlesyndication.com translate-pa.googleapis.com translate.googleapis.com unpkg.com v.fourthline.com vwvwvwvw.b-cdn.net wurfl.io www.google.com/jsapi www.googleadservices.com www.gstatic.com www.pagespeed-mod.com www.printfriendly.com www.youtube.com; worker-src 'self' blob: nn.nl www.nn.nl |
