HTTP/1.1 200 OK
Cache-Control: no-cache
Pragma: no-cache
Content-Type: text/html; charset=utf-8
Expires: -1
Referrer-Policy: strict-origin-when-cross-origin
X-XSS-Protection: 1; mode=block
Content-Security-Policy: default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: *.abtasty.com *.abtastylab.com *.adform.net *.bing.com *.contentpagina.nl *.doubleclick.net *.dwin1.com *.facebook.net *.google.com *.google.nl *.googleadservices.com *.google-analytics.com *.googleapis.com *.googletagmanager.com *.hotjar.com *.instagram.com *.nowgo.com *.nowgo.local *.pega.com *.reaal.local *.reaal.nl *.reaal.srg *.segment.com *.usefirefly.com *.vimeo.com *.youtube.com *.ytimg.com *.zwitserleven.local *.zwitserleven.nl az416426.vo.msecnd.net cdn.mxpnl.com dl.episerver.net embedsocial.com web.telemetric.dk snap.licdn.com tagmanager.google.com consent.cookiebot.com consentcdn.cookiebot.com content.jwplatform.com ssl.p.jwpcdn.com;style-src 'self' 'unsafe-inline' *.abtasty.com *.contentpagina.nl *.googleapis.com *.nowgo.com *.nowgo.local *.pega.com *.reaal.local *.reaal.nl *.reaal.srg *.usefirefly.com *.vimeo.com *.zwitserleven.local *.zwitserleven.nl dl.episerver.net embedsocial.com maxcdn.bootstrapcdn.com tagmanager.google.com;img-src 'self' data: *.abtasty.com *.abtastylab.com *.atdmt.com *.bing.com *.contentpagina.nl *.doubleclick.net *.facebook.com *.google.com *.google.nl *.google-analytics.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.hotjar.com *.kiyoh.nl *.linkedin.com *.nowgo.com *.nowgo.local *.pega.com *.reaal.local *.reaal.nl *.reaal.srg *.twitter.com *.vivat.nl *.ytimg.com *.zwitserleven.local *.zwitserleven.nl dl.episerver.net prd.jwpltx.com ping-meta-prd.jwpltx.com;media-src 'self' blob: *.vimeo.com *.vimeocdn.com www.youtube-nocookie.com storage.googleapis.com;frame-src 'self' blob: *.bnr.nl *.contentpagina.nl *.doubleclick.net *.hotjar.com *.instagram.com *.nowgo.com *.nowgo.local *.pega.com *.reaal.local *.reaal.nl *.reaal.srg *.usefirefly.com *.vimeo.com *.youtube.com *.zwitserleven.local *.zwitserleven.nl www.google.com tbs.tradedoubler.com sdk.companywebcast.com www.youtube-nocookie.com embedsocial.com consentcdn.cookiebot.com;font-src 'self' data: *.abtasty.com *.abtastylab.com *.hotjar.com *.googleapis.com *.gstatic.com *.zwitserleven.local *.zwitserleven.nl maxcdn.bootstrapcdn.com tagmanager.google.com;connect-src 'self' *.abtasty.com *.abtastylab.com *.azure-api.net *.contentpagina.nl *.doubleclick.net *.google-analytics.com *.googleapis.com *.hotjar.com *.nowgo.com *.nowgo.local *.pega.com *.reaal.local *.reaal.nl *.reaal.srg *.segment.io *.usefirefly.com *.zwitserleven.local *.zwitserleven.nl api.mixpanel.com api.zwitserleven.nl az416426.vo.msecnd.net bat.bing.com dc.services.visualstudio.com digitalapis.azure-api.net vc.hotjar.io wss://eu.usefirefly.com wss://euuat.usefirefly.com wss://*.hotjar.com www.facebook.com api.storyteq.com ssl.p.jwpcdn.com;frame-ancestors 'self';manifest-src 'self' *.zwitserleven.local *.zwitserleven.nl;worker-src 'self' *.zwitserleven.nl
X-Frame-Options: SameOrigin
X-Content-Type-Options: nosniff
Request-Context: appId=cid-v1:4da08b07-a88d-4fd3-8fd9-ab569bcecd4f
Access-Control-Expose-Headers: Request-Context
Access-Control-Allow-Origin: *
Feature-Policy: accelerometer 'none'; autoplay *; camera 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; usb 'none'; midi 'none'; picture-in-picture 'none'; sync-xhr *;
Date: Thu, 04 Feb 2021 02:14:13 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Transfer-Encoding: chunked
Proxy-Connection: Keep-Alive
Connection: Keep-Alive
Set-Cookie: ASP.NET_SessionId=gxhreyz2u3jyx0kqmwhze5hf; path=/; secure; HttpOnly; SameSite=Lax; SameSite=None; Secure
Set-Cookie: BC_HA_50eb6616124f9c89_7653344C=1B945CE; Domain=.zwitserleven.nl; expires=Thu, 04-Feb-21 03:14:13 GMT; Path=/