HTTP/1.1 200 OK
Date: Tue, 18 Jun 2019 10:57:00 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 130990
Connection: keep-alive
Server: nginx/1.14.0 (Ubuntu)
Vary: Accept-Encoding
Vary: Accept-Encoding
Content-Language: nl
ETag: W/"f6036aa5b24efe107b5018b425e7c0f1"
Cache-Control: max-age=0, private, must-revalidate
Set-Cookie: _camaloon_cookies_accept=true; path=/; expires=Sat, 18 Jun 2039 11:57:00 -0000; secure; HttpOnly; SameSite=Lax
Set-Cookie: first_visit_mkt_code=%7B%22code%22%3A%22bfizR0zHLDVFbuJDLWNOVngYUSiBtNVq94HL1bopQSnSjs6ciBu9uabN8oyx2Khri2pfm1rb5U-x2bkmao9Ezc7Yl0qyGoGUCssOjRWnYHBtySBMH0rA7pRa9qeVBNKZKWuqAXqjTdPGRbr8UD_TbbOzdB92NdQj7HOapIj2eqty-w3OrkkMgRWa0I6Zy5TzqM2jJv2LAsf7sxy7ZlPN9w%3D%3D%22%2C%22created_at%22%3A%222019-06-18T10%3A57%3A00Z%22%7D; path=/; expires=Thu, 18 Jun 2020 10:57:00 -0000; secure; HttpOnly; SameSite=Lax
Set-Cookie: last_visit_mkt_code=%7B%22code%22%3A%22bfizR0zHLDVFbuJDLWNOVngYUSiBtNVq94HL1bopQSnSjs6ciBu9uabN8oyx2Khri2pfm1rb5U-x2bkmao9Ezc7Yl0qyGoGUCssOjRWnYHBtySBMH0rA7pRa9qeVBNKZKWuqAXqjTdPGRbr8UD_TbbOzdB92NdQj7HOapIj2eqty-w3OrkkMgRWa0I6Zy5TzqM2jJv2LAsf7sxy7ZlPN9w%3D%3D%22%2C%22created_at%22%3A%222019-06-18T10%3A57%3A00Z%22%2C%22expires_at%22%3A%222019-06-18T13%3A57%3A00Z%22%7D; path=/; expires=Thu, 18 Jun 2020 10:57:00 -0000; secure; HttpOnly; SameSite=Lax
Set-Cookie: last_period_visit_mkt_code=%7B%22code%22%3A%22bfizR0zHLDVFbuJDLWNOVngYUSiBtNVq94HL1bopQSnSjs6ciBu9uabN8oyx2Khri2pfm1rb5U-x2bkmao9Ezc7Yl0qyGoGUCssOjRWnYHBtySBMH0rA7pRa9qeVBNKZKWuqAXqjTdPGRbr8UD_TbbOzdB92NdQj7HOapIj2eqty-w3OrkkMgRWa0I6Zy5TzqM2jJv2LAsf7sxy7ZlPN9w%3D%3D%22%2C%22created_at%22%3A%222019-06-18T10%3A57%3A00Z%22%2C%22expires_at%22%3A%222019-07-02T10%3A57%3A00Z%22%7D; path=/; expires=Thu, 18 Jun 2020 10:57:00 -0000; secure; HttpOnly; SameSite=Lax
Set-Cookie: _camaloon_session=SSRIXdatOpBQrUQP7HHvvk55Wc2rwiSMQFrOua%2FBiUftQhdHsaPoUnmv0YlNnD%2BALla0EvwgPdx8%2F6iUnJxEXvDMVXatUIkG2SqZHu1cpXJ5E%2FIx2WjVoRHyLmil69ksmei89VTq5Vjkw2OIbIpr4Fos7gIDIqIgi7h5KYw9DkeKVuq6phLVbSVJ3W5X1MpiEbwp8Vg8UWKUMp%2BLK%2BNWUaz5hh4Hn1u%2FTMdjFUH7Q%2FiEPY1lHiC0NQqb7WSfW3xUmtgJcDDEsXt22A918lPKhKlhyrVSPg%2FIvUiCSmbYqv34MyHRC9fN8FsEMlhUjQ0HZxXonHkCIhi8bC9nGGeEUBfOG%2Bz%2BaClcr5bxrW0Ky3QGK7siTS5bqVfb4w3uz3icrpeGybMvaPCktDxSL6qq3ZbMNI8OelfU7K%2FBHsuZhVNz3mU0OVYGL8J4vOu3%2B8IpCq9bQPWoKkK%2FO9cj24wukC2tuSwFIKROElPIVQdeqUGzlbws--gpFv%2BPJ3iFT7EQJY--Gcm0AS2lNYzc%2B29oWj14bQ%3D%3D; path=/; HttpOnly; secure; SameSite=Lax
X-Request-Id: 0ea04fe0-5b7d-4fb6-863d-f81b72eaff98
X-Runtime: 0.142036
Strict-Transport-Security: max-age=631138519
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Download-Options: noopen
X-Permitted-Cross-Domain-Policies: none
Referrer-Policy: origin-when-cross-origin
Content-Security-Policy: default-src https: 'self'; base-uri 'self' optimize.google.com; block-all-mixed-content; connect-src 'self' *.braintreegateway.com camaloon-web.s3-eu-west-1.amazonaws.com *.camaloon.media *.cloudfront.net *.doubleclick.net www.facebook.com *.fullstory.com *.google-analytics.com *.hotjar.com *.mstrlytcs.com *.opmnstr.com *.optmstr.com *.optmnstr.com sentry.io *.braintree-api.com wss://*.hotjar.com; font-src 'self' data: *.fontawesome.com *.gstatic.com *.hotjar.com; form-action 'self' connect.facebook.net www.facebook.com *.salesforceliveagent.com; frame-ancestors 'none'; frame-src 'self' *.braintreegateway.com *.criteo.com *.facebook.com *.hotjar.com *.kaptcha.com *.livechatinc.com optimize.google.com *.reviews.io *.stripe.com *.youtube.com; img-src data: blob: *; media-src 'self'; object-src 'self'; plugin-types application/pdf; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.ads-twitter.com *.bing.com *.cloudflare.com *.criteo.net *.criteo.com *.emsecure.net *.facebook.net fullstory.com *.googleadservices.com *.google-analytics.com *.gstatic.com *.googletagmanager.com *.google.com *.googleapis.com *.hotjar.com *.livechatinc.com *.newrelic.com *.nr-data.net *.reviews.io *.salesforceliveagent.com *.stripe.com *.sentry-cdn.com *.opmnstr.com *.optnmnstr.com *.optmstr.com 1191.xg4ken.com; style-src 'unsafe-inline' 'self' *.fontawesome.com *.google.com *.googleapis.com *.gstatic.com; upgrade-insecure-requests