Sightful.nl

server: nginx
date: Wed, 13 Sep 2023 15:30:03 GMT
content-type: text/html; charset=UTF-8
content-length: 20
location: https://www.visiondirect.nl/sightful-is-nu-vision-direct
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-environment: Hipex/3 main
content-encoding: gzip
vary: Accept-Encoding
x-varnish: 94459902
via: 1.1 varnish-v4
pragma: no-cache
expires: -1
cache-control: no-store, no-cache, must-revalidate, max-age=0
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-environment: Hipex/3 general

HTTP/2 200 
date: Wed, 13 Sep 2023 15:30:03 GMT
content-type: text/html; charset=UTF-8
access-control-allow-headers: Authorization, Origin, X-Requested-With, Content-Type, Accept
access-control-allow-methods: GET, POST, OPTIONS, HEAD
access-control-allow-origin: *
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
p3p: CP="CAO PSA OUR"
pragma: no-cache
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-made-cache-ttl: 12h
x-xss-protection: 1; mode=block
content-encoding: gzip
vary: Accept-Encoding
age: 5566
origin-trial: 
accept-ch: Sec-CH-UA-Full
critical-ch: Sec-CH-UA-Full
x-varnish-ip: 10.0.10.165
content-security-policy-report-only: default-src 'self' data: blob: *.visiondirect.co.uk https://*.visiondirect.info https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.gstatic.com https://www.google-analytics.com https://www.googletagmanager.com https://*.cloudfront.net https://*.salesforce.com https://*.klarnaevt.com https://*.klarnacdn.net https://*.klarna.com https://widget.trustpilot.com https://*.optimizely.com https://*.dycdn.net https://*.facebook.net https://static.zdassets.com https://www.zenaps.com https://*.contentsquare.net https://*.google.co.uk wss://*.freshrelevance.com https://*.freshrelevance.com https://*.doubleclick.net https://*.facebook.com https://*.tiktok.com https://bat.bing.com https://*.wistia.com https://*.litix.io https://*.awin1.com https://*.akamaihd.net;script-src 'unsafe-inline' 'unsafe-eval' blob: *;style-src 'unsafe-inline' *;font-src * data:;worker-src 'self' data: blob:;frame-src 'self' https://*.google.com https://*.youtube.com https://*.facebook.com https://*.optimizely.com https://*.salesforce.com https://*.klarna.com https://*.trustpilot.com https://*.davidclulow.com https://analytics.tiktok.com;report-uri /content/csp_report;frame-ancestors 'self';
x-cache: HIT
x-cache-hits: 17
accept-ranges: bytes