Dekra.nl

server: nginx
date: Mon, 26 Feb 2024 00:22:03 GMT
content-type: text/html
content-length: 195
location: https://www.dekra.nl/

HTTP/2 301 
date: Mon, 26 Feb 2024 00:22:03 GMT
content-length: 0
cache-control: no-cache
location: https://www.dekra.nl/nl/home/
strict-transport-security: max-age=31536000; includeSubDomains
request-context: appId=cid-v1:
cross-origin-resource-policy: cross-origin
x-dns-prefetch-control: off
expect-ct: max-age=0
x-frame-options: SAMEORIGIN
x-download-options: noopen
x-content-type-options: nosniff
x-permitted-cross-domain-policies: none
referrer-policy: no-referrer
x-xss-protection: 0

HTTP/2 200 
date: Mon, 26 Feb 2024 00:22:04 GMT
content-type: text/html; charset=utf-8
accept-ranges: none
cache-control: no-cache
content-encoding: gzip
etag: "b9f9d-6SPd/rdbP1+4ktrJf05KPjyr/pI"
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains
request-context: appId=cid-v1:
cross-origin-resource-policy: cross-origin
x-dns-prefetch-control: off
expect-ct: max-age=0
x-frame-options: SAMEORIGIN
x-download-options: noopen
x-content-type-options: nosniff
x-permitted-cross-domain-policies: none
referrer-policy: no-referrer
x-xss-protection: 0
content-security-policy: base-uri 'self'; connect-src 'self' data: https://*.applicationinsights.azure.com https://matomo.dekra.bawue.com https://*.clarity.ms https://*.g.doubleclick.net https://dekra-dev-search-api.e-spirit.cloud https://dekra-search-api.e-spirit.cloud https://*.google.at https://*.google.be https://*.google.cl https://*.google.co.jp https://*.google.co.uk https://*.google.com https://*.google.com.br https://*.google.com.tw https://*.google.com.ua https://*.google.co.cr https://*.google.cz https://*.google.de https://*.google.es https://*.google.fi https://*.google.fr https://*.google.hr https://*.google.hu https://*.google.co.in https://*.google.it https://*.google.co.kr https://*.google.lu https://*.google.co.ma https://*.google.com.mx https://*.google.nl https://*.google.pl https://*.google.pt https://*.google.ro https://*.google.rs https://*.google.se https://*.google.sk https://*.google-analytics.com https://maps.googleapis.com https://*.googletagmanager.com https://*.hotjar.com wss://*.hotjar.com https://*.hotjar.io https://cdn.linkedin.oribi.io https://dc.services.visualstudio.com https://*.linkedin.com https://api.newsletter2go.com https://*.snapengage.com; default-src 'none'; manifest-src 'self'; font-src 'self' data: https://fonts.gstatic.com https://script.hotjar.com; form-action 'self'; frame-ancestors 'self' https://dekra.e-spirit.hosting https://dekradev.e-spirit.hosting https://dekraqa.e-spirit.hosting; frame-src 'self' https://*.doubleclick.net https://vars.hotjar.com https://player.vimeo.com https://www.youtube.com; img-src 'self' data: https://*.baidu.com https://*.bing.com https://*.clarity.ms https://media.dekra.com https://media-test.dekra.com https://*.g.doubleclick.net https://dekra-media.e-spirit.cloud https://dekradev-media.e-spirit.cloud https://dekraqa-media.e-spirit.cloud https://dekraprod-media.e-spirit.cloud https://connect.facebook.net https://www.facebook.com/tr/ https://www.facebook.com/privacy_sandbox/ https://*.google.at https://*.google.be https://*.google.cl https://*.google.co.jp https://*.google.co.uk https://*.google.com https://*.google.com.br https://*.google.com.tw https://*.google.com.ua https://*.google.co.cr https://*.google.cz https://*.google.de https://*.google.es https://*.google.fi https://*.google.fr https://*.google.hr https://*.google.hu https://*.google.co.in https://*.google.it https://*.google.co.kr https://*.google.lu https://*.google.co.ma https://*.google.com.mx https://*.google.nl https://*.google.pl https://*.google.pt https://*.google.ro https://*.google.rs https://*.google.se https://*.google.sk https://*.google-analytics.com https://*.googleapis.com https://*.googletagmanager.com https://maps.gstatic.com https://*.hotjar.com https://px.ads.linkedin.com https://*.snapengage.com https://i.ytimg.com; media-src https://dekra-media.e-spirit.cloud https://dekradev-media.e-spirit.cloud https://dekraqa-media.e-spirit.cloud https://dekraprod-media.e-spirit.cloud; object-src 'none'; script-src 'self' 'self' 'unsafe-inline' 'unsafe-eval' https://hm.baidu.com https://matomo.dekra.bawue.com https://www.clarity.ms https://googleads.g.doubleclick.net https://dekra.e-spirit.hosting https://dekradev.e-spirit.hosting https://dekraqa.e-spirit.hosting https://connect.facebook.net https://www.google.com https://www.googleadservices.com https://*.googleapis.com https://*.googletagmanager.com https://*.hotjar.com https://*.hs-scripts.com https://snap.licdn.com https://*.snapengage.com https://webforms-live.dekra.com/static/webforms.js; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://*.hotjar.com; upgrade-insecure-requests