HTTP/1.1 200 OK
date: Fri, 15 Jan 2021 21:09:06 GMT
server: Apache/2.4.18 (Ubuntu)
vary: Accept-Encoding,Cookie,X-Forwarded-Proto
cache-control: max-age=3, must-revalidate
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-security-policy: default-src 'self' www.google-analytics.com www.googletagmanager.com *.formitable.com www.w3.org connect.facebook.net *.facebook.com secure-hotel-tracker.com player.vimeo.com www.youtube.com js-agent.newrelic.com bam.nr-data.net *.cookiebot.com  https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com 'unsafe-inline' https://optimize.google.com https://*.loyaltyinabox.com https://iframeshop.chipta.com 'unsafe-eval' data:; font-src 'self' https://fonts.gstatic.com data:; img-src 'self' www.facebook.com www.google-analytics.com www.googletagmanager.com https://optimize.google.com https://bam.nr-data.net https://www.gstatic.com https://secure.gravatar.com https://translate.google.com data:; style-src 'self' https://optimize.google.com https://fonts.googleapis.com *.formitable.com https://secure.gravatar.com https://translate.googleapis.com 'unsafe-inline' data:; connect-src 'self' https://www.facebook.com https://*.formitable.com https://*.hotjar.com wss://*.hotjar.com https://*.hotjar.io https://bam.nr-data.net https://www.google-analytics.com; frame-src 'self' www.google-analytics.com www.googletagmanager.com *.formitable.com https://*.youtube.com www.w3.org connect.facebook.net *.facebook.com secure-hotel-tracker.com player.vimeo.com www.youtube.com js-agent.newrelic.com bam.nr-data.net *.cookiebot.com https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com https://optimize.google.com https://*.loyaltyinabox.com https://iframeshop.chipta.com https://w.soundcloud.com https://www.mixcloud.com/ 'unsafe-inline' 'unsafe-eval' data:;
content-security-policy-report-only: default-src 'self' www.google-analytics.com www.googletagmanager.com *.formitable.com www.w3.org connect.facebook.net *.facebook.com secure-hotel-tracker.com player.vimeo.com www.youtube.com js-agent.newrelic.com bam.nr-data.net *.cookiebot.com  https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com 'unsafe-inline' https://optimize.google.com https://*.loyaltyinabox.com https://iframeshop.chipta.com 'unsafe-eval' data:; font-src 'self' https://fonts.gstatic.com data:; img-src 'self' www.facebook.com www.google-analytics.com www.googletagmanager.com https://optimize.google.com https://bam.nr-data.net https://www.gstatic.com https://secure.gravatar.com https://translate.google.com data:; style-src 'self' https://optimize.google.com https://fonts.googleapis.com *.formitable.com https://secure.gravatar.com/ https://translate.googleapis.com 'unsafe-inline' data:; connect-src 'self' https://www.facebook.com *.formitable.com https://*.hotjar.com wss://*.hotjar.com https://*.hotjar.io https://bam.nr-data.net www.google-analytics.com; frame-src 'self' www.google-analytics.com www.googletagmanager.com *.formitable.com https://*.youtube.com www.w3.org connect.facebook.net *.facebook.com secure-hotel-tracker.com player.vimeo.com www.youtube.com js-agent.newrelic.com bam.nr-data.net *.cookiebot.com https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com https://optimize.google.com https://*.loyaltyinabox.com https://iframeshop.chipta.com https://w.soundcloud.com https://www.mixcloud.com/ 'unsafe-inline' 'unsafe-eval' data:; frame-ancestors: self https://*.volkshotel.nl; base-uri: 'self'; form-action: 'self'; report-uri https://volkshotel0.report-uri.com/r/d/csp/reportOnly;
report-to: {"group":"default","max_age":31536000,"endpoints":[{"url":"https://volkshotel0.report-uri.com/a/d/g"}],"include_subdomains":true}
nel: {"report_to":"default","max_age":31536000,"include_subdomains":true}
strict-transport-security: max-age=31536000; includeSubDomains
transfer-encoding: chunked
content-type: text/html; charset=UTF-8