Bcb-online.nl

Cache-Control: private
Transfer-Encoding: chunked
Content-Type: text/html; charset=utf-8
Content-Encoding: gzip
Vary: Accept-Encoding
Server: Microsoft-IIS/8.5
Set-Cookie: ASP.NET_SessionId=sb2gsvpfdpq3uvgmnhhth531; path=/; HttpOnly; SameSite=Lax
X-AspNetMvc-Version: 4.0
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Access-Control-Allow-Headers: Content-Type
Access-Control-Allow-Methods: GET
Strict-Transport-Security: max-age=15552001
X-Xss-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Permitted-Cross-Domain-Policies : none
Referrer-Policy: strict-origin-when-cross-origin
Content-Security-Policy: default-src 'self'; 
     style-src 'self' 'unsafe-inline' maxcdn.bootstrapcdn.com fonts.googleapis.com;
     font-src 'self' 'unsafe-inline' maxcdn.bootstrapcdn.com fonts.gstatic.com;
     script-src 'self' 'unsafe-inline' 'unsafe-eval' ajax.googleapis.com maxcdn.bootstrapcdn.com www.google.com *.google-analytics.com www.googletagmanager.com www.gstatic.com consent.cookiebot.com consentcdn.cookiebot.com cdn.leadexpress.nl api.leadexpress.nl cdn.leadinfo.net;
     connect-src 'self' www.google-analytics.com consentcdn.cookiebot.com api.leadinfo.com collector.leadinfo.net;
     frame-src 'self' 'unsafe-inline' 'unsafe-eval' www.google.com consentcdn.cookiebot.com;
     img-src 'self' 'unsafe-inline' 'unsafe-eval' www.google-analytics.com data:;
Feature-Policy: camera 'none'; geolocation 'none'; microphone 'none';
Date: Mon, 03 Oct 2022 23:11:02 GMT
Set-Cookie: BIGipServerPOOL-DeTweeSnoeken-03=2366313482.20480.0000; expires=Tue, 04-Oct-2022 00:11:03 GMT; path=/; Httponly; Secure