| date: |
Sun, 06 Oct 2024 19:11:31 GMT |
| content-type: |
text/html; charset=utf-8 |
| content-length: |
138778 |
| connection: |
close |
| vary: |
Accept-Encoding |
| set-cookie: |
wcc-henl=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VySWQiOiJMckROanNzREU1TzFsRXRNM1NWY2YiLCJiYXNrZXRLZXkiOiJMckROanNzREU1TzFsRXRNM1NWY2YiLCJ3aXNobGlzdEtleSI6IkxyRE5qc3NERTVPMWxFdE0zU1ZjZiIsImlhdCI6MTcyODI0MTg5MX0.fnSx3G7vfH2SriHwzAC8PbnrOU43rp0UV0klp2-2uHo; Max-Age=5184000; Domain=.heine-shop.nl; Path=/; Expires=Thu, 05 Dec 2024 19:11:31 GMT; Secure; SameSite=Lax,visitIdChanged=true; Max-Age=1800; Domain=.heine-shop.nl; Path=/; Expires=Sun, 06 Oct 2024 19:41:31 GMT; Secure; SameSite=Lax,visitId=XJN78dC6ltfzF6t1kHU6I; Max-Age=1800; Domain=.heine-shop.nl; Path=/; Expires=Sun, 06 Oct 2024 19:41:31 GMT; Secure; SameSite=Lax,ecc=803; Max-Age=2592000; Domain=.heine-shop.nl; Path=/; Expires=Tue, 05 Nov 2024 19:11:31 GMT; Secure; SameSite=Lax,eccCurrent=803; Max-Age=2592000; Domain=.heine-shop.nl; Path=/; Expires=Tue, 05 Nov 2024 19:11:31 GMT; Secure; SameSite=Lax,eccPaid=803; Max-Age=2592000; Domain=.heine-shop.nl; Path=/; Expires=Tue, 05 Nov 2024 19:11:31 GMT; Secure; SameSite=Lax,trigger=wenz; Max-Age=1800; Domain=.heine-shop.nl; Path=/; Expires=Sun, 06 Oct 2024 19:41:31 GMT; Secure; SameSite=Lax,optimizelyId=bNDbqpfmqyYMrM8Mtfh-p; Max-Age=5184000; Domain=.heine-shop.nl; Path=/; Expires=Thu, 05 Dec 2024 19:11:31 GMT; Secure; SameSite=Lax,recoUserId=; Max-Age=0; Domain=.heine-shop.nl; Path=/; Expires=Sun, 06 Oct 2024 19:11:31 GMT; Secure; SameSite=Lax,recoSessionId=3-m02gdfV72vTW0FFwl2e; Max-Age=604800; Domain=.heine-shop.nl; Path=/; Expires=Sun, 13 Oct 2024 19:11:31 GMT; Secure; SameSite=Lax |
| content-security-policy: |
default-src 'self' cdn.wcc.heine-shop.nl https://cdn.wcc.heine-shop.nl/graphql; base-uri 'self' widget.solvemate.com; font-src 'self' cdn.wcc.heine-shop.nl https://fonts.gstatic.com data: widget.solvemate.com *.dixa.io https://*.userwerk.com; img-src * data: https://*.userwerk.com; connect-src 'self' https://cdn.wcc.heine-shop.nl/graphql cdn.wcc.heine-shop.nl cdn.witt.info/ https://images.ctfassets.net te.heine-shop.nl tp.heine-shop.nl wasp.heine-shop.nl wst.heine-shop.nl https://*.analytics.google.com https://*.facebook.com https://*.contentsquare.net https://*.my.onetrust.eu https://*.google-analytics.com https://bat.bing.com eu-witt-gruppe-prod1.mini.snplow.net https://www.google-analytics.com https://www.jsctool.com https://adservice.google.com/pagead/ https://graphql.contentful.com https://privacyportal-eu.onetrust.com https://stats.g.doubleclick.net https://geolocation.onetrust.com https://www.google.com/pagead/ https://googleads.g.doubleclick.net/pagead/ https://*.creativecdn.com https://*.googlesyndication.com https://*.optimizely.com ct.pinterest.com https://jsctool.com checkout-cdn.aboutyou.cloud checkout-v3.wcc.heine-shop.nl https://*.ingest.sentry.io api.solvemate.com widget.solvemate.com relay.solvemate.com *.dixa.io wss://sockets.dixa.io https://*.userwerk.com https://maps.googleapis.com; object-src 'none'; child-src blob: ; script-src * 'unsafe-inline' 'unsafe-eval' https://*.adyen.com https://*.paypal.com blob: *.dixa.io https://*.userwerk.com; style-src 'self' cdn.wcc.heine-shop.nl https://www.googletagmanager.com https://fonts.googleapis.com 'unsafe-inline' d.heine-shop.nl checkout-cdn.aboutyou.cloud https://*.adyen.com https://*.paypal.com blob: widget.solvemate.com *.dixa.io; frame-src 'self' checkout-v3.wcc.heine-shop.nl https://*.awin1.com https://*.criteo.net https://*.criteo.com https://*.adrtx.net https://*.contentsquare.net https://www.googletagmanager.com https://www.facebook.com https://www.youtube.com https://dmp.theadex.com https://5127363.fls.doubleclick.net https://12769738.fls.doubleclick.net https://www.jsctool.com https://creativecdn.com/ https://fledge-eu.creativecdn.com/ https://tbs.tradedoubler.com/ https://survey2.quantilope.com/ https://*.adyen.com https://*.paypal.com https://*.computop-paygate.com blob: *.dixa.io https://*.userwerk.com https://preview.brame-gamification.com/ https://live.brame-gamification.com/; media-src 'self' cdn.wcc.heine-shop.nl cdn.witt.info/ https://images.ctfassets.net https://videos.ctfassets.net https://www.youtube.com https://witt-gruppe-res.cloudinary.com https://res.cloudinary.com *.dixa.io; manifest-src 'self' cdn.wcc.heine-shop.nl *.dixa.io; worker-src 'self' cdn.wcc.heine-shop.nl blob:; form-action 'self' www.facebook.com https://*.userwerk.com; block-all-mixed-content; frame-ancestors 'self' https://app.contentful.com; sandbox allow-scripts allow-forms allow-same-origin allow-top-navigation allow-popups allow-popups-to-escape-sandbox allow-modals; |
| x-dns-prefetch-control: |
off |
| x-frame-options: |
SAMEORIGIN |
| strict-transport-security: |
max-age=15724800; includeSubDomains |
| x-content-type-options: |
nosniff |
| referrer-policy: |
strict-origin-when-cross-origin |
| x-permitted-cross-domain-policies: |
none |
| permissions-policy: |
camera=(), microphone=(), geolocation=() |
| x-webapp-version: |
cc1bfaef2e76e493a156d4205e78e478d05d7202 |
| cache-control: |
private, no-cache, no-store, max-age=0, must-revalidate |
| etag: |
"z95hoopfe72z23" |
| server-timing: |
total; dur=238.881723; desc="Total Response Time" |
|
