Royalposthumus.nl

server: nginx
date: Thu, 17 Oct 2024 18:58:02 GMT
content-type: text/html
content-length: 162
location: https://www.royalposthumus.nl/

HTTP/2 200 
server: nginx
date: Thu, 17 Oct 2024 18:58:03 GMT
content-type: text/html; charset=UTF-8
set-cookie: PHPSESSID=jteqcjijc5bf7gjtc37n6i2tri; expires=Thu, 17-Oct-2024 19:58:03 GMT; Max-Age=3600; path=/; domain=www.royalposthumus.nl; secure; HttpOnly; SameSite=Lax
set-cookie: X-Magento-Vary=a4f478bb456d684f88a18ac66ca8d57a4e9e47f0; expires=Thu, 17-Oct-2024 19:58:03 GMT; Max-Age=3600; path=/; secure; HttpOnly; SameSite=Lax
pragma: cache
cache-control: max-age=86400, public, s-maxage=86400
expires: Fri, 18 Oct 2024 18:58:03 GMT
x-magento-tags: store,cms_b,experius_contentpage_page_3
link: </static/version1729128192/_cache/merged/c2545bfc7f9ef59e977fa322d07378bb.min.js>; rel=preload; as=script, </static/version1729128192/_cache/merged/144bb2853903d2ed6750810be4256fc0.min.css>; rel=preload; as=style, </static/version1729128192/frontend/RoyalPostHumus/default/nl_NL/Anowave_Ec/css/ec.min.css>; rel=preload; as=style, </static/version1729128192/_cache/merged/fonts_144bb2853903d2ed6750810be4256fc0.min.css>; rel=preload; as=style
content-security-policy-report-only: font-src *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.feedbackcompany.com *.googleapis.com https://www.gstatic.com fonts.googleapis.com fonts.gstatic.com *.hotjar.com *.zopim.com *.fontawesome.com https://fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action www.facebook.com *.feedbackcompany.com 'self' connect.facebook.net graph.facebook.com business.facebook.com https://plumrocket.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.sharethis.com https://www.google.com *.doubleclick.net www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com js.mollie.com https://plumrocket.com cdn.dnky.co youtube.com www.youtube.com *.hotjar.com *.trustpilot.com *.mollie.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com *.royalposthumus.* www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.sharethis.com data: 'self' data: *.google.com *.google.bg www.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.gstatic.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com *.feedbackcompany.com connect.facebook.net graph.facebook.com business.facebook.com https://www.mollie.com www.google.nl connect.onlinesucces.nl px.ads.linkedin.com stats.g.doubleclick.net *.googleapis.com www.linkedin.com linkedin.com googletagmanager.com *.trustedshops.com *.zopim.com cdn.jsdelivr.net *.clarity.ms data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.sharethis.com https://www.google.com *.google.bg *.googletagmanager.com www.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com chimpstatic.com downloads.mailchimp.com *.list-manage.com *.feedbackcompany.com connect.facebook.net graph.facebook.com business.facebook.com js.mollie.com *.mollie.com google.com www.google.com gstatic.com www.gstatic.com *.googleapis.com cdn.dnky.co api.comapi.com *.trackedlink.net snap.licdn.com checkout.buckaroo.nl *.adyen.com *.zopim.com *.hotjar.com *.zdassets.com *.sendcloud.sc *.mailchimp.com *.trustedshops.com *.fontawesome.com www.feedbackcompany.com *.trustpilot.com *.newrelic.com *.nr-data.net cdn.jsdelivr.net www.googleoptimize.com *.clarity.ms bat.bing.com https://www.gstatic.com https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.sharethis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com downloads.mailchimp.com cdn.dnky.co checkout.buckaroo.nl *.fontawesome.com *.mailchimp.com *.trustpilot.com cdn.jsdelivr.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.zopim.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.sharethis.com *.google-analytics.com www.facebook.com *.facebook.net *.google.com *.feedbackcompany.com connect.facebook.net graph.facebook.com business.facebook.com commerce.adobedc.net api.comapi.com www.google-analytics.com stats.g.doubleclick.net *.zdassets.com *.hotjar.com *.hotjar.io *.zopim.com wss://*.zopim.com www.feedbackcompany.com *.zendesk.com *.nr-data.net *.clarity.ms 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
content-encoding: br