HTTP/1.1 200 OK
Server: nginx
Date: Mon, 09 Dec 2019 17:46:20 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Set-Cookie: wingzz_session_ssl=59e9d9e681ae27dddd6351733a8ff906; path=/; secure; HttpOnly
Expires: 0
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Content-Security-Policy: default-src 'self' 'unsafe-inline'  https://api.wingzz.nl  ; script-src 'self'  https://api.wingzz.nl 'unsafe-inline'  https://use.typekit.net  https://maps.googleapis.com  https://www.google.com  https://www.google-analytics.com  https://ssl.google-analytics.com  ; style-src 'self' 'unsafe-inline'  https://api.wingzz.nl  https://ajax.googleapis.com  https://fonts.googleapis.com  https://www.google.com  ; img-src 'self' data:  https://api.wingzz.nl  https://p.typekit.net  https://stats.g.doubleclick.net  https://www.google-analytics.com  https://maps.gstatic.com  https://maps.googleapis.com  https://img.youtube.com  https://www.gravatar.com  https://i0.wp.com  https://i.vimeocdn.com  https://ssl.google-analytics.com  ; font-src 'self'  https://api.wingzz.nl  https://use.typekit.net  https://fonts.gstatic.com  ; media-src 'self'  https://api.wingzz.nl  https://www.youtube.com  ; frame-src 'self'  https://api.wingzz.nl  https://www.youtube.com  https://www.google.com  https://player.vimeo.com  https://nfk.mediquest.nl  ; frame-ancestors 'self' ;
Referrer-Policy: same-origin
Feature-Policy: sync-xhr 'self'
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=63072000; includeSubDomains
Vary: Accept-Encoding,User-Agent