HTTP/1.1 200 OK
Server: nginx/1.15.10
Date: Fri, 19 Jul 2019 21:36:33 GMT
Content-Type: text/html;charset=utf-8
Content-Length: 88864
Connection: keep-alive
Vary: Accept-Encoding
Status: 200 OK
Vary: Origin
P3P: CP="Potato"
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: default-src 'self' https://www.az.nl/  https://assets.bettyblocks.com/; script-src 'self' 'nonce-EDNnf03nceIOfn39fn3rrv434sf2' 'nonce-EDNnf03nceIOfn39fn3rryy45vs' 'nonce-EDNnf03nceIOfn39fnhj8558utyb' 'nonce-ednnf03nceiofn39fn3rryy45vs' 'sha256-TMjildBygRLgzRoCdgno6yXlwCnoDNjlC0z7AZxq3cQ=' 'sha256-v9T+xpWSU/YAQ+qN9D3+paJ8IpuAG2rBgGpYTsLfJig=' 'unsafe-eval' https://www.stanza.co/ https://dff2h0hbfv6w4.cloudfront.net/ https://tagmanager.google.com/ https://www.jscache.com/ https://r1.surveysandforms.com/8e4i9o12-09352689 https://px.ads.linkedin.com/ https://www.tripadvisor.com/ https://www.tripadvisor.nl/ https://static.tacdn.com/ https://vars.hotjar.com/ https://script.hotjar.com/ https://static.hotjar.com/ https://www.googletagmanager.com/ https://www.google-analytics.com/  https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.6/umd/popper.min.js https://www.googleadservices.com/ https://connect.facebook.net/ https://www.google.com https://www.google.nl https://assets.bettyblocks.com/ https://www.google.com/recaptcha/ https://a-az.ttf.zicht.nl/api/v3/ https://tickets.az.nl/  https://ajax.aspnetcdn.com/ajax/jquery.validate/1.11.1/jquery.validate.js https://code.jquery.com/ui/1.12.1/jquery-ui.js https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js  https://cdnjs.cloudflare.com/ajax/libs/jquery-validate/1.18.0/jquery.validate.js https://code.jquery.com/ui/1.12.1/jquery-ui.min.js https://cdnjs.cloudflare.com/ajax/libs/lightbox2/2.10.0/js/lightbox.js https://www.gstatic.com/recaptcha/ https://code.jquery.com/jquery-3.3.1.min.js https://r1.surveysandforms.com https://maxcdn.bootstrapcdn.com/ https://ajax.googleapis.com/ajax/libs/jquery/ https://platform.twitter.com/ https://cdn.syndication.twimg.com/ www.instagram.com/embed.js; style-src  'self' data: https://static.tacdn.com/ https://tagmanager.google.com/ https://assets.bettyblocks.com/ https://maxcdn.bootstrapcdn.com/ https://fonts.googleapis.com/ https://pro.fontawesome.com/ https://code.jquery.com/ui/1.12.1/themes/base/jquery-ui.css https://cdnjs.cloudflare.com/ajax/libs/lightbox2/2.10.0/css/lightbox.min.css https://platform.twitter.com/ 'unsafe-inline';  font-src 'self' https://maxcdn.bootstrapcdn.com/ https://fonts.gstatic.com/ https://static.tacdn.com/ https://pro.fontawesome.com/ https://platform.twitter.com/; img-src 'self' data: https://ssl.gstatic.com/ https://googleads.g.doubleclick.net/ https://www.gstatic.com/ https://www.tripadvisor.nl/img/ https://static.tacdn.com/  https://www.facebook.com/ https://pixel.sojern.com/ https://p.travelsmarter.net/ https://tag.yieldoptimizer.com/ https://ib.adnxs.com/ https://assets.bettyblocks.com/ https://www.google-analytics.com/ https://www.google.com/ https://www.google.nl/ https://stats.g.doubleclick.net/  https://az-development.bettywebblocks.com/ https://az-testing.bettywebblocks.com/ https://az-acceptance.bettywebblocks.com/ https://az.bettywebblocks.com/ https://cdnjs.cloudflare.com/ajax/libs/lightbox2/ https://syndication.twitter.com/ https://pbs.twimg.com/ https://abs.twimg.com/ https://platform.twitter.com/ https://r1.surveysandforms.com/; frame-src 'self' https://stanza.co/ https://twitter.com/ https://vars.hotjar.com/ https://www.instagram.com/ https://www.facebook.com/ https://assets.bettyblocks.com/ https://r1.surveysandforms.com/ https://docs.google.com/  https://www.youtube-nocookie.com/ https://www.youtube.com/ https://www.google.com/ https://platform.twitter.com/ https://syndication.twitter.com/; connect-src 'self' wss://ws4.hotjar.com/api/v1/client/ws https://in.hotjar.com/ https://api.postcodeapi.nu/ https://www.google-analytics.com/ https://api.mixpanel.com/ https://www.stanza.co/ https://ppquj5g26c.execute-api.us-west-2.amazonaws.com/ https://a-az.ttf.zicht.nl/api/v3/ https://tickets.az.nl/  https://az-development.bettywebblocks.com/ https://az-testing.bettywebblocks.com/ https://az-acceptance.bettywebblocks.com/ https://az.bettywebblocks.com/ https://www.az.nl/;
Set-Cookie: rack.session.bb=BAh7B0kiD3Nlc3Npb25faWQGOgZFVEkiRTdkZWEwNzYyNGY3ZGZjZmJlNjA3%0AZmE3ZmVmMDk4NWNjYjliZmFmNTVmYzkwZjEyMTcyNDJhNjFlNmZjNWJmMGUG%0AOwBGSSIPY3NyZi50b2tlbgY7AFRJIjFsNFBlTEJKQmdpcVFwQTlNNUkrTlhY%0AcWNHWVBidjQ5ek84Ym9KM2tyVnZJPQY7AEY%3D%0A--6210774d79e70c0430a530a833d240816ad58251; path=/; secure; HttpOnly
X-Powered-By: Phusion Passenger 5.3.7
Strict-Transport-Security: max-age=15724800; includeSubDomains