koersvastpensioen.com

Http-Version: 1.1
Status-Code: 200
Status: 200 OK
Cache-Control: no-cache, no-store
Pragma: no-cache
Content-Type: text/html; charset=utf-8
Expires: -1
Content-Security-Policy: default-src 'self' *.relay42.com vars.hotjar.com cba.nmrc.nl 6162542.fls.doubleclick.net;script-src 'self' 'unsafe-inline' 'unsafe-eval' cdn.ampproject.org static.cloud.coveo.com *.doubleclick.net *.r42tag.com *.centraalbeheer.nl www.google-analytics.com *.facebook.net *.usabilla.com www.googleadservices.com googleads.g.doubleclick.net imp2.nowinteract.com api.usabilla.com cba-acct.svc.onmarc.nl static.hotjar.com script.hotjar.com d6tizftlrpuof.cloudfront.net ajax.googleapis.com bat.bing.com *.google.com *.svtrd.com onmarc.nl tags.nmrc.nl snap.licdn.com *.linkedin.com js.hs-scripts.com js.hs-analytics.net js.hsadspixel.net *.relay42.com js.hsleadflows.net js.usemessages.com surfly.com az416426.vo.msecnd.net *.klue.nl www.dwin1.com www.zenaps.com *.onmarc.nl centraalbeheer.speed-trap.nl;style-src 'self' 'unsafe-inline' fonts.googleapis.com d6tizftlrpuof.cloudfront.net www.google.com optimize.google.com static.cloud.coveo.com unpkg.com;img-src data: 'self' img.youtube.com *.svtrd.com www.google-analytics.com www.facebook.com *.doubleclick.net www.google.nl www.google.com d6tizftlrpuof.cloudfront.net centraalbeheer.speed-trap.nl *.usabilla.com *.svtrd.com n01d05.cumulus-cloud.com *.relay42.com bat.bing.com www.googleapis.com clients1.google.com track.hubspot.com cba.imgix.net *.onmarc.nl *.r42tag.com www.googletagmanager.com forms.hubspot.com optimize.google.com imp2.nowinteract.com www.awin1.com www.zenaps.com *.onmarc.nl server.arcgisonline.com *.centraalbeheer.nl www.independer.nl;font-src 'self' fonts.gstatic.com;connect-src 'self' *.hotjar.com *.doubleclick.net *.facebook.net *.centraalbeheer.nl *.hubapi.com *.achmea.nl www.google-analytics.com dc.services.visualstudio.com surfly.com sentry.io api.hubspot.com forms.hubspot.com cba.imgix.net vc.hotjar.io api.usabilla.com geocode.arcgis.com formulier.centraalbeheer.nl atosi.nl;media-src 'self' ;object-src 'self' ;child-src 'self' youtube.com *.doubleclick.net t.svtrd.com *.hotjar.com cba.nmrc.nl www.youtube-nocookie.com youtube-nocookie.com surfly.com optimize.google.com imp2.nowinteract.com d6tizftlrpuof.cloudfront.net redirect.surfly.com centraalbeheer-nl-p.surfly.com surfly.com surfly-com-p.surfly.com *.centraalbeheer.nl;frame-ancestors 'self' youtube.com www.youtube-nocookie.com youtube-nocookie.com;form-action * 'self' t.svtrd.com embeddedsts.dev.local *.achmea.nl;block-all-mixed-content;report-uri https://c0918c210d42424be54e906e71357ca7.report-uri.io/r/default/csp/enforce;
X-Content-Security-Policy: default-src 'self' *.relay42.com vars.hotjar.com cba.nmrc.nl 6162542.fls.doubleclick.net;script-src 'self' 'unsafe-inline' 'unsafe-eval' cdn.ampproject.org static.cloud.coveo.com *.doubleclick.net *.r42tag.com *.centraalbeheer.nl www.google-analytics.com *.facebook.net *.usabilla.com www.googleadservices.com googleads.g.doubleclick.net imp2.nowinteract.com api.usabilla.com cba-acct.svc.onmarc.nl static.hotjar.com script.hotjar.com d6tizftlrpuof.cloudfront.net ajax.googleapis.com bat.bing.com *.google.com *.svtrd.com onmarc.nl tags.nmrc.nl snap.licdn.com *.linkedin.com js.hs-scripts.com js.hs-analytics.net js.hsadspixel.net *.relay42.com js.hsleadflows.net js.usemessages.com surfly.com az416426.vo.msecnd.net *.klue.nl www.dwin1.com www.zenaps.com *.onmarc.nl centraalbeheer.speed-trap.nl;style-src 'self' 'unsafe-inline' fonts.googleapis.com d6tizftlrpuof.cloudfront.net www.google.com optimize.google.com static.cloud.coveo.com unpkg.com;img-src data: 'self' img.youtube.com *.svtrd.com www.google-analytics.com www.facebook.com *.doubleclick.net www.google.nl www.google.com d6tizftlrpuof.cloudfront.net centraalbeheer.speed-trap.nl *.usabilla.com *.svtrd.com n01d05.cumulus-cloud.com *.relay42.com bat.bing.com www.googleapis.com clients1.google.com track.hubspot.com cba.imgix.net *.onmarc.nl *.r42tag.com www.googletagmanager.com forms.hubspot.com optimize.google.com imp2.nowinteract.com www.awin1.com www.zenaps.com *.onmarc.nl server.arcgisonline.com *.centraalbeheer.nl www.independer.nl;font-src 'self' fonts.gstatic.com;connect-src 'self' *.hotjar.com *.doubleclick.net *.facebook.net *.centraalbeheer.nl *.hubapi.com *.achmea.nl www.google-analytics.com dc.services.visualstudio.com surfly.com sentry.io api.hubspot.com forms.hubspot.com cba.imgix.net vc.hotjar.io api.usabilla.com geocode.arcgis.com formulier.centraalbeheer.nl atosi.nl;media-src 'self' ;object-src 'self' ;child-src 'self' youtube.com *.doubleclick.net t.svtrd.com *.hotjar.com cba.nmrc.nl www.youtube-nocookie.com youtube-nocookie.com surfly.com optimize.google.com imp2.nowinteract.com d6tizftlrpuof.cloudfront.net redirect.surfly.com centraalbeheer-nl-p.surfly.com surfly.com surfly-com-p.surfly.com *.centraalbeheer.nl;frame-ancestors 'self' youtube.com www.youtube-nocookie.com youtube-nocookie.com;form-action * 'self' t.svtrd.com embeddedsts.dev.local *.achmea.nl;block-all-mixed-content;report-uri https://c0918c210d42424be54e906e71357ca7.report-uri.io/r/default/csp/enforce;
Content-Security-Policy-Report-Only: default-src 'self' *.relay42.com vars.hotjar.com cba.nmrc.nl 6162542.fls.doubleclick.net;script-src 'self' 'unsafe-inline' 'unsafe-eval' cdn.ampproject.org static.cloud.coveo.com *.doubleclick.net *.r42tag.com *.centraalbeheer.nl www.google-analytics.com *.facebook.net *.usabilla.com www.googleadservices.com googleads.g.doubleclick.net imp2.nowinteract.com api.usabilla.com cba-acct.svc.onmarc.nl static.hotjar.com script.hotjar.com d6tizftlrpuof.cloudfront.net ajax.googleapis.com bat.bing.com *.google.com *.svtrd.com onmarc.nl tags.nmrc.nl snap.licdn.com *.linkedin.com js.hs-scripts.com js.hs-analytics.net js.hsadspixel.net *.relay42.com js.hsleadflows.net js.usemessages.com surfly.com az416426.vo.msecnd.net *.klue.nl www.dwin1.com www.zenaps.com *.onmarc.nl centraalbeheer.speed-trap.nl;style-src 'self' 'unsafe-inline' fonts.googleapis.com d6tizftlrpuof.cloudfront.net www.google.com optimize.google.com static.cloud.coveo.com unpkg.com;img-src data: 'self' img.youtube.com *.svtrd.com www.google-analytics.com www.facebook.com *.doubleclick.net www.google.nl www.google.com d6tizftlrpuof.cloudfront.net centraalbeheer.speed-trap.nl *.usabilla.com *.svtrd.com n01d05.cumulus-cloud.com *.relay42.com bat.bing.com www.googleapis.com clients1.google.com track.hubspot.com cba.imgix.net *.onmarc.nl *.r42tag.com www.googletagmanager.com forms.hubspot.com optimize.google.com imp2.nowinteract.com www.awin1.com www.zenaps.com *.onmarc.nl server.arcgisonline.com *.centraalbeheer.nl www.independer.nl;font-src 'self' fonts.gstatic.com;connect-src 'self' *.hotjar.com *.doubleclick.net *.facebook.net *.centraalbeheer.nl *.hubapi.com *.achmea.nl www.google-analytics.com dc.services.visualstudio.com surfly.com sentry.io api.hubspot.com forms.hubspot.com cba.imgix.net vc.hotjar.io api.usabilla.com geocode.arcgis.com formulier.centraalbeheer.nl atosi.nl;media-src 'self' ;object-src 'self' ;child-src 'self' youtube.com *.doubleclick.net t.svtrd.com *.hotjar.com cba.nmrc.nl www.youtube-nocookie.com youtube-nocookie.com surfly.com optimize.google.com imp2.nowinteract.com d6tizftlrpuof.cloudfront.net redirect.surfly.com centraalbeheer-nl-p.surfly.com surfly.com surfly-com-p.surfly.com *.centraalbeheer.nl;frame-ancestors 'self' youtube.com www.youtube-nocookie.com youtube-nocookie.com;form-action * 'self' t.svtrd.com embeddedsts.dev.local *.achmea.nl;block-all-mixed-content;report-uri https://c0918c210d42424be54e906e71357ca7.report-uri.io/r/default/csp/enforce;
X-Content-Security-Policy-Report-Only: default-src 'self' *.relay42.com vars.hotjar.com cba.nmrc.nl 6162542.fls.doubleclick.net;script-src 'self' 'unsafe-inline' 'unsafe-eval' cdn.ampproject.org static.cloud.coveo.com *.doubleclick.net *.r42tag.com *.centraalbeheer.nl www.google-analytics.com *.facebook.net *.usabilla.com www.googleadservices.com googleads.g.doubleclick.net imp2.nowinteract.com api.usabilla.com cba-acct.svc.onmarc.nl static.hotjar.com script.hotjar.com d6tizftlrpuof.cloudfront.net ajax.googleapis.com bat.bing.com *.google.com *.svtrd.com onmarc.nl tags.nmrc.nl snap.licdn.com *.linkedin.com js.hs-scripts.com js.hs-analytics.net js.hsadspixel.net *.relay42.com js.hsleadflows.net js.usemessages.com surfly.com az416426.vo.msecnd.net *.klue.nl www.dwin1.com www.zenaps.com *.onmarc.nl centraalbeheer.speed-trap.nl;style-src 'self' 'unsafe-inline' fonts.googleapis.com d6tizftlrpuof.cloudfront.net www.google.com optimize.google.com static.cloud.coveo.com unpkg.com;img-src data: 'self' img.youtube.com *.svtrd.com www.google-analytics.com www.facebook.com *.doubleclick.net www.google.nl www.google.com d6tizftlrpuof.cloudfront.net centraalbeheer.speed-trap.nl *.usabilla.com *.svtrd.com n01d05.cumulus-cloud.com *.relay42.com bat.bing.com www.googleapis.com clients1.google.com track.hubspot.com cba.imgix.net *.onmarc.nl *.r42tag.com www.googletagmanager.com forms.hubspot.com optimize.google.com imp2.nowinteract.com www.awin1.com www.zenaps.com *.onmarc.nl server.arcgisonline.com *.centraalbeheer.nl www.independer.nl;font-src 'self' fonts.gstatic.com;connect-src 'self' *.hotjar.com *.doubleclick.net *.facebook.net *.centraalbeheer.nl *.hubapi.com *.achmea.nl www.google-analytics.com dc.services.visualstudio.com surfly.com sentry.io api.hubspot.com forms.hubspot.com cba.imgix.net vc.hotjar.io api.usabilla.com geocode.arcgis.com formulier.centraalbeheer.nl atosi.nl;media-src 'self' ;object-src 'self' ;child-src 'self' youtube.com *.doubleclick.net t.svtrd.com *.hotjar.com cba.nmrc.nl www.youtube-nocookie.com youtube-nocookie.com surfly.com optimize.google.com imp2.nowinteract.com d6tizftlrpuof.cloudfront.net redirect.surfly.com centraalbeheer-nl-p.surfly.com surfly.com surfly-com-p.surfly.com *.centraalbeheer.nl;frame-ancestors 'self' youtube.com www.youtube-nocookie.com youtube-nocookie.com;form-action * 'self' t.svtrd.com embeddedsts.dev.local *.achmea.nl;block-all-mixed-content;report-uri https://c0918c210d42424be54e906e71357ca7.report-uri.io/r/default/csp/enforce;
X-Frame-Options: SAMEORIGIN
Request-Context: appId=cid-v1:9f336a5e-6631-454e-8cf8-fd07f4dd7f40
Access-Control-Expose-Headers: Request-Context
Date: Wed, 23 Oct 2019 22:44:04 GMT
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Accept-Encoding
Content-Encoding: gzip
Transfer-Encoding: chunked