| server: |
nginx |
| date: |
Wed, 02 Oct 2024 09:22:02 GMT |
| content-type: |
text/html; charset=utf-8 |
| content-length: |
63116 |
| connection: |
close |
| content-language: |
nl |
| expires: |
Wed, 02 Oct 2024 22:00:00 GMT |
| etag: |
"8bf6901340ee8607d8fcbc701acb8933" |
| cache-control: |
max-age=45478 |
| pragma: |
public |
| x-frame-options: |
SAMEORIGIN |
| x-xss-protection: |
1; mode=block |
| x-content-type-options: |
nosniff |
| referrer-policy: |
strict-origin-when-cross-origin |
| access-control-allow-origin: |
* |
| access-control-allow-methods: |
GET, POST, OPTIONS |
| access-control-expose-headers: |
* |
| content-security-policy: |
child-src 'self' blob: cdn.wagner-group.com www.googletagmanager.com www.youtube-nocookie.com www.youtube.com bid.g.doubleclick.net gsa://onpageload vars.hotjar.com *.hubspot.com f2150201.td-fn.net www.facebook.com www.google.com; connect-src 'self' wss://*.onlim.com wss://*.hotjar.com *.hscollectedforms.net *.hubspot.com *.hsforms.com *.elfsight.com sentry.21torr.com core.service.elfsight.com hubspot-forms-static-embed.s3.amazonaws.com prompts.api.production.neocomapp.com *.articulate.com *.flockler.app plugins.flockler.com api.pinpiaa.com *.typekit.net *.matomo.cloud *.onlim.com *.global.commerce-connector.com *.wagner-group.com *.cookiefirst.com *.g.doubleclick.net *.google.fr www.google.de *.google.com *.googleapis.com *.google-analytics.com vc.hotjar.io *.hotjar.com *.hsforms.com forms.hubspot.com api.hubapi.com ipinfo.io ct.pinterest.com www.facebook.com code.jquery.com gj.track.uc.cn plugin.ucads.ucweb.com gjtrack.ucweb.com www.googletagmanager.com; default-src 'self' data: *.cdn.flockler.com optimize.google.com *.global.commerce-connector.com app.onlim.com *.wagner-group.com www.googletagmanager.com img.youtube.com www.youtube-nocookie.com www.youtube.com 'unsafe-eval' 'unsafe-inline' 1637314617.rsc.cdn77.org api.cookiefirst.com bid.g.doubleclick.net consent.cookiefirst.com fonts.googleapis.com fonts.gstatic.com googleads.g.doubleclick.net maps.googleapis.com maps.gstatic.com p.typekit.net static.cookiefirst.com stats.g.doubleclick.net use.typekit.net www.google-analytics.com www.googleadservices.com www.gstatic.com vc.hotjar.io *.hotjar.com *.hsforms.com forms.hubspot.com *.hs-analytics.net *.hs-banner.com *.hs-scripts.com js.hsadspixel.net js.hsforms.net js.hsleadflows.net perf.hsforms.com track.hubspot.com api.hubapi.com ipinfo.io *.pinterest.com connect.facebook.net www.facebook.com www.google.de; frame-src my.mpskin.com *.hs-sites-eu1.com production.neocomapp.com www.convertcalculator.com plugin.experify.io *.cdn.flockler.com plugins.flockler.com optimize.google.com www.pinterest.de *.pinterest.com js.hsforms.net assets.pinterest.com tool.webbosaurus.de www.supersaas.de app.onlim.com ctool.webbosaurus.de *.wagner-group.com www.googletagmanager.com www.youtube-nocookie.com www.youtube.com bid.g.doubleclick.net *.hotjar.com *.hsforms.com forms.hubspot.com js.hsadspixel.net 'self' www.facebook.com www.google.com; img-src * data: 'self' www.google-analytics.com www.googletagmanager.com optimize.google.com; manifest-src cdn.wagner-group.com; script-src-elem *.hscollectedforms.net *.hubspot.com static.elfsight.com production.neocomapp.com *.convertcalculator.com *.cdn.flockler.com plugins.flockler.com *.matomo.cloud snap.licdn.com optimize.google.com assets.experify.io *.hs-banner.com app.onlim.com s.pinimg.com *.global.commerce-connector.com cdn.wagner-group.com www.googletagmanager.com www.youtube.com 'self' 'unsafe-inline' consent.cookiefirst.com googleads.g.doubleclick.net translate.google.com translate.googleapis.com use.typekit.net www.google-analytics.com www.google.com www.googleadservices.com www.gstatic.com script.hotjar.com static.hotjar.com forms.hsforms.com *.hs-analytics.net *.hs-banner.com *.hs-scripts.com js.hsadspixel.net js.hsforms.net js.hsleadflows.net assets.pinterest.com connect.facebook.net ucads-cdn.ucweb.com maps.googleapis.com, script-src blob: *.hscollectedforms.net *.hubspot.com *.hs-script.com static.elfsight.com production.neocomapp.com *.convertcalculator.com *.matomo.cloud plugins.flockler.com *.cdn.flockler.com optimize.google.com assets.experify.io snap.licdn.com app.onlim.com *.global.commerce-connector.com s.pinimg.com cdn.wagner-group.com www.googletagmanager.com www.youtube.com 'self' 'unsafe-eval' 'unsafe-inline' consent.cookiefirst.com googleads.g.doubleclick.net maps.googleapis.com use.typekit.net www.google-analytics.com www.googleanalytics.com www.googleoptimize.com www.google.com www.googleadservices.com www.gstatic.com *.hotjar.com *.hs-analytics.net *.hs-banner.com *.hs-scripts.com js.hsadspixel.net *.hsforms.net js.hsleadflows.net assets.pinterest.com connect.facebook.net; font-src 'self' data: app.onlim.com *.hotjar.com *.global.commerce-connector.com fonts.gstatic.com *.cookiefirst.com use.typekit.net; style-src-elem app.onlim.com *.cdn.flockler.com *.typekit.net optimize.google.com *.global.commerce-connector.com cdn.wagner-group.com 'self' 'unsafe-inline' consent.cookiefirst.com fonts.googleapis.com translate.googleapis.com; style-src app.onlim.com *.cdn.flockler.com *.typekit.net optimize.google.com *.global.commerce-connector.com cdn.wagner-group.com 'self' 'unsafe-eval' 'unsafe-inline' consent.cookiefirst.com fonts.googleapis.com translate.googleapis.com; worker-src 'self' blob:; style-src-attr 'unsafe-inline'; form-action *.hsforms.com forms.hubspot.com 'self' www.facebook.com; frame-ancestors 'self' one.wagner-group.com www.supersaas.de; object-src 'self' |
| strict-transport-security: |
max-age=63072000 |
