HTTP/1.1 200 OK
Date: Wed, 09 Sep 2020 12:24:41 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __cfduid=db9f7a94e1da24f462664f018a34a8c5f1599654281; expires=Fri, 09-Oct-20 12:24:41 GMT; path=/; domain=.radbag.be; HttpOnly; SameSite=Lax; Secure
Content-Security-Policy: font-src data: *.klaviyo.com *.gstatic.com *.trustedshops.com *.hotjar.com 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.amazon.com *.amazon.de *.kmail-lists.com 'self' 'unsafe-inline'; frame-ancestors *.amazon.com 'self' 'unsafe-inline'; frame-src secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com *.youtube.com *.klaviyo.com *.jsctool.com *.stripe.com *.radbag.de *.radbag.at *.radbag.ch *.radbag.nl *.radbag.be *.radbag.dk *.cadeauxfolies.fr *.cadeauxfolies.ch *.cadeauxfolies.be *.troppotogo.it *.google.com *.maxcluster.net *.payments-amazon.com *.amazon.de *.amazon.com *.hotjar.com *.mhdirekt.ladesk.com *.ladesk.com js.stripe.com m.stripe.com x.klarnacdn.net klarna.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com www.googleadservices.com www.google-analytics.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com s.ytimg.com *.pinterest.com *.radbag.de *.radbag.at *.radbag.ch *.radbag.nl *.radbag.be *.radbag.dk *.cadeauxfolies.fr *.cadeauxfolies.ch *.cadeauxfolies.be *.troppotogo.it *.google.com *.google.at *.doubleclick.net *.googletagmanager.com *.trustedshops.com data: blob: *.klaviyo.com *.cloudfront.net *.lgw.io *.amazon.com *.ssl-images-amazon.com *.media-amazon.com *.facebook.com *.gstatic.com 'self' 'unsafe-inline'; script-src assets.adobedtm.com secure.authorize.net test.authorize.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com js.authorize.net jstest.authorize.net www.googleadservices.com www.google-analytics.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com js.braintreegateway.com s.ytimg.com video.google.com vimeo.com www.vimeo.com cdn-scripts.signifyd.com www.youtube.com https://static.klaviyo.com https://fast.a.klaviyo.com *.pinimg.com *.googletagmanager.com *.klaviyo.com *.pinterest.com polyfill.io *.a.klaviyo.com *.payments-amazon.com *.ratepay.com *.stripe.com *.google.com *.trustedshops.com *.newrelic.com *.nr-data.net *.facebook.net *.hotjar.com *.doubleclick.net *.cloudflareinsights.com *.googleapis.com *.ladesk.com *.algolianet.com *.algolia.net js.stripe.com m.stripe.com x.klarnacdn.net klarna.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src getfirebug.com *.klaviyo.com *.googleapis.com *.ratepay.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.klaviyo.com *.pinterest.com *.amazon.com *.amazon.de *.amazon.fr *.amazon.it *.ratepay.com *.cookie-script.com *.google-analytics.com *.g.doubleclick.net *.trustedshops.com *.etrusted.com *.radbag.de *.radbag.at *.radbag.ch *.radbag.nl *.radbag.be *.radbag.dk *.cadeauxfolies.fr *.cadeauxfolies.ch *.cadeauxfolies.be *.troppotogo.it *.hotjar.io *.nr-data.net *.facebook.com *.algolia.net *.algolianet.com js.stripe.com m.stripe.com x.klarnacdn.net klarna.com 'self' 'unsafe-inline'; child-src *.radbag.de *.radbag.at *.radbag.ch *.radbag.nl *.radbag.be *.radbag.dk *.cadeauxfolies.fr *.cadeauxfolies.ch *.cadeauxfolies.be *.troppotogo.it blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: origin, x-requested-with, content-type
Access-Control-Allow-Methods: PUT, GET, POST, DELETE, OPTIONS
X-UA-Compatible: IE=edge
Pragma: no-cache
Expires: -1
Cache-Control: no-store, no-cache, must-revalidate, max-age=0
CF-Cache-Status: DYNAMIC
cf-request-id: 05146c582e00004941120ff200000001
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Server: cloudflare
CF-RAY: 5d00e339ea3e4941-STL