HTTP/1.1 200 OK
Server: nginx
Date: Thu, 09 May 2019 13:28:37 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Vary: Accept-Encoding
Set-Cookie: prd_printdeal_nl=773834773746d2caad1bea14b4042ec5; path=/; HttpOnly
Cache-Control: max-age=0, must-revalidate, private, s-maxage=3600
Content-Security-Policy: font-src 'self' printdealcdn.s3.amazonaws.com weloveiconfonts.com fonts.gstatic.com data: fonts.googleapis.com fonts.documents.cimpress.io s3-eu-west-1.amazonaws.com http://*.hotjar.com:* https://*.hotjar.com:* https://static.zdassets.com https://ekr.zdassets.com *.zopim.com *.zendesk.com gstatic.mopinion.com; frame-src cdn.myclang.com www.googletagmanager.com www.youtube.com www.youtube-nocookie.com player.vimeo.com cloud.cobrowser.net e.drukwerkdeal.nl e.printdeal.be editor2.drukwerkdeal.nl tbs.tradedoubler.com solutions.tradedoubler.com 5452317.fls.doubleclick.net *.doubleclick.net roundme.com disqus.com *.vwo.com *.visualwebsiteoptimizer.com connect.facebook.net https://*.hotjar.com https://static.zdassets.com https://ekr.zdassets.com *.zendesk.com https://app.mopinion.com https://*.cookiebot.com/; img-src 'self' data: blob: *.drukwerkdeal.nl drukwerkdeal.nl d3rw17qf3t8223.cloudfront.net d4e119i9vv87s.cloudfront.net stats.g.doubleclick.net printdealcdn.s3.amazonaws.com printdeal.imgix.net printdealcdn.s3-eu-west-1.amazonaws.com s3-eu-west-1.amazonaws.com eonnas-aws.s3-eu-west-1.amazonaws.com tagmanager.google.com https://static.zdassets.com https://ekr.zdassets.com *.zopim.com *.zendesk.com *.zdusercontent.com rum-collector.pingdom.net cloud.cobrowser.net *.visualwebsiteoptimizer.com i.ytimg.com www.google-analytics.com www.googleadservices.com googleads.g.doubleclick.net www.google.com www.google.be www.google.de www.google.nl www.google.fr www.facebook.net www.facebook.com bat.r.msn.com bat.bing.com t.co log01.leadboxer.com ts.tradetracker.net filesystem *.documents.cimpress.io *.gstatic.com images.contentful.com images.ctfassets.net c.disquscdn.com referrer.disqus.com mcp-uploads-documents-eu-west-1.s3-eu-west-1.amazonaws.com mcp-uploads-documents-ap-northeast-1.s3-ap-northeast-1.amazonaws.com mcp-uploads-documents-us-east-1.s3-us-east-1.amazonaws.com mcp-uploads-documents-us-east-1.s3-external-1.amazonaws.com printdeal-printjobservice.s3.eu-west-1.amazonaws.com uploads-production-eu-west-1-720291080779.s3-eu-west-1.amazonaws.com t.powerreviews.com res.cloudinary.com http://*.hotjar.com https://*.hotjar.com *.optmnstr.com *.opmnstr.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' cloud.cobrowser.net www.googletagmanager.com www.google-analytics.com tagmanager.google.com rum-static.pingdom.net *.visualwebsiteoptimizer.com *.vwo.com www.googleadservices.com connect.facebook.net bat.bing.com platform.twitter.com d1fc8wv8zag5ca.cloudfront.net *.leadboxer.com static.ads-twitter.com tm.tradetracker.net static.designer.cimpress.io printdealcdn.s3.amazonaws.com analytics.twitter.com *.sociomantic.com c.disquscdn.com printdeal-nl.disqus.com disqus.com ui.powerreviews.com awsui.powerreviews.com static.powerreviews.com mpsnare.iesnare.com consent.cookiebot.com consentcdn.cookiebot.com *.doubleclick.net http://*.hotjar.com https://*.hotjar.com https://static.zdassets.com https://ekr.zdassets.com *.zopim.com *.zendesk.com https://deploy.mopinion.com https://collect.mopinion.com https://app.mopinion.com *.optmnstr.com *.opmnstr.com ajax.googleapis.com; style-src 'self' data: blob: 'unsafe-inline' fonts.googleapis.com tagmanager.google.com cloud.cobrowser.net d4e119i9vv87s.cloudfront.net s3-eu-west-1.amazonaws.com printdealcdn.s3.amazonaws.com static.designer.cimpress.io *.visualwebsiteoptimizer.com c.disquscdn.com *.vwo.com awsui.powerreviews.com ui.powerreviews.com https://static.zdassets.com https://ekr.zdassets.com *.zendesk.com https://app.mopinion.com fonts.mopinion.com; report-uri /csp-log
Strict-Transport-Security: max-age=31536000
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1;mode=block
X-Content-Type-Options: nosniff