Wijnvoordeel.nl

x-platform-server: i-076f79b972c682dca
x-content-type-options: nosniff
cache-control: max-age=0, must-revalidate, no-cache, no-store
x-debug-info: eyJyZXRyaWVzIjowfQ==
content-type: text/html; charset=UTF-8
accept-ranges: bytes
set-cookie: PHPSESSID=7fe836f9a4b1180072f11db51d9705e9; expires=Tue, 03 Feb 2026 01:16:51 GMT; Max-Age=7776000; path=/; domain=www.wijnvoordeel.nl; secure; HttpOnly; SameSite=Lax
expires: Tue, 05 Nov 2024 01:16:51 GMT
x-frame-options: ALLOWALL
x-timer: S1762305411.314237,VS0,VE122
traceresponse: 00-1874f76f3b68f0d9a277e7ba819bec83-61b2794a77919843-01
x-xss-protection: 1; mode=block
pragma: no-cache
content-security-policy-report-only: font-src fonts.gstatic.com use.typekit.net cash-f.squarecdn.com *.googleapis.com *.gstatic.com data: maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com player.vimeo.com www.googletagmanager.com * www.google.com 'self'; img-src widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io * *.gstatic.com *.googleapis.com https://api.mapbox.com data: 'self' 'unsafe-inline'; script-src geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com *.cash.app maxcdn.bootstrapcdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com *.adobe.io performance.typekit.net *.sentry.io * *.googleapis.com autocomplete2.postdirekt.de 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self'; base-uri 'self' 'unsafe-inline';
location: https://www.wijnvoordeel.nl/
date: Wed, 05 Nov 2025 01:16:51 GMT
x-served-by: cache-lcy-egml8630089-LCY, cache-lcy-egml8630048-LCY, cache-fra-etou8220086-FRA
x-cache: MISS, MISS, MISS
x-cache-hits: 0, 0, 0
strict-transport-security: max-age=31536000; includeSubDomains
vary: Accept-Encoding,Cookie
content-length: 0

HTTP/2 200 
x-timer: S1762266879.832927,VS0,VE1245
link: </static/version1762237420/_cache/merged/8f23e73c5b1d2969fac728e47a4fc967.min.css>; rel=preload; as=style
x-platform-server: i-0d17a80dd0a08c716
x-content-type-options: nosniff
traceresponse: 00-1874d463b0a22d8a9ab835abdd663da8-19722c7a5c0d3c39-01
pragma: cache
x-debug-info: eyJyZXRyaWVzIjowfQ==
x-frame-options: ALLOWALL
expires: Wed, 05 Nov 2025 14:34:39 GMT
content-type: text/html; charset=UTF-8
x-xss-protection: 1; mode=block
content-security-policy-report-only: font-src fonts.gstatic.com use.typekit.net cash-f.squarecdn.com *.googleapis.com *.gstatic.com data: maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com player.vimeo.com www.googletagmanager.com * www.google.com 'self'; img-src widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io * *.gstatic.com *.googleapis.com https://api.mapbox.com data: 'self' 'unsafe-inline'; script-src geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com *.cash.app maxcdn.bootstrapcdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com *.adobe.io performance.typekit.net *.sentry.io * *.googleapis.com autocomplete2.postdirekt.de 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self'; base-uri 'self' 'unsafe-inline';
content-encoding: br
accept-ranges: bytes
age: 38532
date: Wed, 05 Nov 2025 01:16:51 GMT
x-served-by: cache-lcy-egml8630074-LCY, cache-lcy-egml8630049-LCY, cache-fra-etou8220199-FRA
x-cache: MISS, HIT, HIT
x-cache-hits: 0, 9, 0
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: no-store, no-cache, must-revalidate, max-age=0
vary: Accept-Encoding,Cookie
content-length: 59066