aegon.nl | Analytics by SecurityHeaders

HTTP Headers report for aegon.nl

Header Name Header Data
HTTP status code 200
Last-Modified Tue, 06 May 2025 13:27:29 GMT
Access-Control-Allow-Origin https://adviseur.aegon.nl
Access-Control-Allow-Headers x-csrf-token, authorization, content-type, accept, origin, x-requested-with, access-control-allow-origin, x-allowed-header, iv-jwt
X-Content-Type-Options nosniff
Cache-Control max-age=31536000, public
Referrer-Policy same-origin
X-Amz-Cf-Id 3hkU_JZxXAyx5UXhgFA-r4K8l-l4calBvsZTtm0PONcxXpe3pROhLQ==
Vary Accept-Encoding
X-Amz-Cf-Pop FRA60-P6, BRU50-P1
Content-Language nl
Content-Type text/html; charset=UTF-8
Via 1.1 b4f72de8ce5f3b4b4240eccfbd3d12a6.cloudfront.net (CloudFront), 1.1 6670d9f343a3e0a96c4d7c936f139a06.cloudfront.net (CloudFront)
Access-Control-Allow-Methods POST, GET, OPTIONS, DELETE, PUT, PATCH
Access-Control-Expose-Headers session-timeout, x-aegon-op-response
Nel {"report_to":"network-errors","max_age":10886400}
Age 50463
Report-To {"group":"csp-endpoint","max_age":10886400,"endpoints":[{"url": "/beacon/csp"}]},{"group":"network-errors","max_age":10886400,"endpoints":[{"url":"/beacon/nel"}]}
X-Ua-Compatible IE=edge
Accept-Ranges bytes
X-Amzn-Requestid 8bbbb202-76be-4139-989c-3ac5aa68feb5
Strict-Transport-Security max-age=31536000 ; includeSubDomains
Session-Timeout 0
Date Wed, 07 May 2025 06:10:57 GMT
P3p CP="NON CUR OTPi OUR NOR UNI"
Alt-Svc h3=":443"; ma=86400
Content-Security-Policy default-src 'self' https://dmbqekwh0sti7.cloudfront.net/; base-uri 'self' https://d6tizftlrpuof.cloudfront.net/live/; object-src 'self' https://www.youtube-nocookie.com/ blob:; child-src 'self' https://*.aegon.nl/ https://aegon.24sessions.com/ https://d6tizftlrpuof.cloudfront.net/ https://platform.twitter.com/ https://syndication.twitter.com/ https://apis.google.com/ https://accounts.google.com/ https://optimize.google.com/ https://static.licdn.com/ https://www.youtube-nocookie.com/ https://funnels.aegon.nl/ https://player.quadia.net/ https://www.youtube.com/ https://www.googletagmanager.com/; img-src 'self' data: stats.g.doubleclick.net www.google-analytics.com https://*.aegon.nl/ https://*.nl.aegon.io/ https://log.firedesk.nl/aegon/ https://ssl.gstatic.com/analytics-suite/header/suite/v2/ic_tag_manager.svg https://www.gstatic.com/images/icons/material/system/1x/ https://www.googletagmanager.com/ https://*.google-analytics.com/ https://www.google.nl/pagead/ https://d6tizftlrpuof.cloudfront.net/ https://static.licdn.com/ https://bat.bing.com/ https://www.google.com/pagead/ https://www.google.co.uk/pagead/ https://googleads.g.doubleclick.net/pagead/ https://maps.gstatic.com/ https://maps.googleapis.com/ https://www.awin1.com/sread.img https://www.awin1.com/sread.php https://s3.amazonaws.com/glancecdn/ https://s3-eu-west-1.amazonaws.com/anl-ma-staticcontent/ https://s3-eu-west-1.amazonaws.com/anl-ma-static-content/ https://www.facebook.com/ https://stats.g.doubleclick.net/ https://prd.jwpltx.com/ https://rid.webtvframework.com/ https://ad.doubleclick.net/ https://adservice.google.com/ https://www.googleadservices.com/pagead/conversion/ https://optimize.google.com/ https://apmeum.aegon.com/ https://*.novusoft.nl/static/img/ https://www.google.com/ads/ https://www.google.nl/ads/ https://secure.adnxs.com/px https://secure.adnxs.com/seg https://assets.secumail.nl/img/aegon/ https://assets.secumail.nl/img/default/ https://storage.glancecdn.net/cobrowse/ https://content.solera.nl/isa-vfoto/autotelex https://www.nl.aegon.com/ https://*.gstatic.com https://www.google.com/images/cleardot.gif https://dev.visualwebsiteoptimizer.com blob:; frame-src 'self' https://optimize.google.com https://www.youtube.com https://particulier.aegon.nl https://*.aegon.nl/ https://d6tizftlrpuof.cloudfront.net/; frame-ancestors 'self'; font-src 'self' data: aeon-cdn-prod.axlops.nl.aegon.io https://*.aegon.nl/ https://*.nl.aegon.io/ https://*.openinsuranceplatform.ibm.com/ https://aegon.24sessions.com/ https://themes.googleusercontent.com/static/fonts/opensans/ https://d6tizftlrpuof.cloudfront.net/live/resources/fonts/ https://fonts.gstatic.com/ https://*.novusoft.nl/static/fonts/ https://*.novusoft.nl/static/css/fonts/ https://player.quadia.net/ https://storage.glancecdn.net/cobrowse/ https://d6tizftlrpuof.cloudfront.net/themes/production/nlaegon-aegon-2022-font-file-url-db64c51123ddff1174f975e859558a7c.woff https://optimize.google.com https://*.mopinion.com https://fonts.mopinion.com/; form-action 'self' https://*.intra.aegon.nl https://www.verzuimsignaal2.nl/pub/request_handler.php; manifest-src 'self' https://aeon-cdn-prod.axlops.nl.aegon.io/assets/latest/favicon/aegonnl/site.webmanifest; style-src 'unsafe-inline' 'self' aeon-cdn-prod.axlops.nl.aegon.io www.googletagmanager.com tagmanager.google.com https://*.aegon.nl/ https://*.nl.aegon.io/ https://*.openinsuranceplatform.ibm.com/ https://aegon.24sessions.com/ https://styles.24sessions.com/ui-theme.css https://d6tizftlrpuof.cloudfront.net/ https://www.glancecdn.net/cobrowse/ https://s3.amazonaws.com/glancecdn/ https://tagmanager.google.com/debug/css.css https://fonts.googleapis.com/ https://optimize.google.com/ https://*.novusoft.nl/ https://player.quadia.net/ https://storage.glancecdn.net/cobrowse/ https://*.glancecdn.net/ https://fonts.mopinion.com/ cdn.jsdelivr.net https://aeon-cdn-prod.axlops.nl.aegon.io https://cdnjs.cloudflare.com; style-src-elem 'unsafe-inline' 'self' aeon-cdn-prod.axlops.nl.aegon.io www.googletagmanager.com tagmanager.google.com https://*.aegon.nl/ https://*.nl.aegon.io/ https://aegon-nonlife-api-flexfunnel.novusoft.nl/static/css/themes/wvtp.min.css https://d6tizftlrpuof.cloudfront.net/live/ https://d6tizftlrpuof.cloudfront.net/ https://fonts.googleapis.com https://optimize.google.com https://*.glancecdn.net/cobrowse/styles/Cobrowse_5.4.3.css https://*.glancecdn.net/cobrowse/customstyles/CustomSkin_19459_P.css https://translate.googleapis.com/translate_static/css/translateelement.css https://www.gstatic.com https://*.glancecdn.net/ https://fonts.mopinion.com/css cdn.jsdelivr.net https://aeon-cdn-prod.axlops.nl.aegon.io https://cdnjs.cloudflare.com; worker-src 'self' blob:; script-src 'unsafe-inline' 'self' aeon-cdn-prod.axlops.nl.aegon.io stats.g.doubleclick.net www.google-analytics.com www.googletagmanager.com tagmanager.google.com 'unsafe-eval' https://*.aegon.nl/ https://*.nl.aegon.io/ https://*.openinsuranceplatform.ibm.com/ https://eu-de.appid.cloud.ibm.com/ https://cdn.botframework.com/ https://aegon.24sessions.com/ https://s.ytimg.com/yts/jsbin/ https://ajax.aspnetcdn.com/ajax/jquery.validate/1.11.1/ https://glancecdn.net/cobrowse/ https://www.glancecdn.net/cobrowse/ https://s3.amazonaws.com/glancecdn/cobrowse/ https://code.highcharts.com/9.1.0/highcharts.js https://code.highcharts.com/9.1.0/highcharts-more.js https://code.highcharts.com/9.1.0/modules/accessibility.js https://cdn.appdynamics.com/ https://platform.linkedin.com/ https://platform.twitter.com/ https://www.youtube.com/s/player/ https://www.youtube.com/iframe_api https://tagmanager.google.com/ https://googleads.g.doubleclick.net/ https://apis.google.com/ https://maps.googleapis.com/ https://code.jquery.com/ https://connect.facebook.net/ https://d6tizftlrpuof.cloudfront.net/ https://*.google-analytics.com/ https://www.google-analytics.com https://optimize.google.com/ https://*.salesforceliveagent.com/ https://*.novusoft.nl/ https://az416426.vo.msecnd.net/scripts/ https://bat.bing.com/ https://www.googletagmanager.com/ https://www.googleoptimize.com/optimize.js https://player.quadia.net/ https://ssl.p.jwpcdn.com/player/ https://www.googleadservices.com/pagead/ https://portal.secumail.nl/v5/assets/js/ https://www.google.com/ads/ https://www.google.nl/ads/ https://www.google.com/js/bg/ https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/releases/ https://storage.glancecdn.net/cobrowse/ https://js-agent.newrelic.com/nr-rum-1.246.1.min.js https://js-agent.newrelic.com/nr-1216.min.js https://translate-pa.googleapis.com/v1/supportedLanguages https://*.glancecdn.net/ https://*.mopinion.com https://dev.visualwebsiteoptimizer.com/j.php https://dev.visualwebsiteoptimizer.com https://js-agent.newrelic.com https://portal.secumail.nl/v6/assets/js/portal-jquery.min.js https://www.aegon.nl/ data: cdn.jsdelivr.net cdnjs.cloudflare.com https://aeon-cdn-prod.axlops.nl.aegon.io https://cdnjs.cloudflare.com maps.googleapis.com; script-src-elem 'unsafe-inline' 'self' aeon-cdn-prod.axlops.nl.aegon.io stats.g.doubleclick.net www.google-analytics.com www.googletagmanager.com tagmanager.google.com https://*.aegon.nl/ https://*.nl.aegon.io/ https://www.googletagmanager.com/gtm.js https://www.googletagmanager.com/debug/bootstrap https://*.google-analytics.com/ https://aegon-nonlife-api-flexfunnel.novusoft.nl/ https://code.jquery.com/ https://az416426.vo.msecnd.net/scripts/ https://portal.secumail.nl/v5/assets/js/ https://aegon.24sessions.com/ https://d6tizftlrpuof.cloudfront.net/ https://www.youtube.com/iframe_api https://www.youtube.com/s/player/ https://code.highcharts.com/ https://js-agent.newrelic.com/nr-1215.min.js https://js-agent.newrelic.com/nr-rum-1.246.1.min.js https://bam.nr-data.net/1/NRJS-a680a937ef6e365bd3c https://cdn.botframework.com/botframework-webchat/4.13.0/webchat.js https://js-agent.newrelic.com/nr-1216.min.js https://bat.bing.com/bat.js https://bat.bing.com/p/action/4012566.js https://glancecdn.net/cobrowse/ https://www.glancecdn.net/cobrowse/ https://s3.amazonaws.com/glancecdn/cobrowse/ https://storage.glancecdn.net/cobrowse/ https://optimize.google.com/ https://www.googleoptimize.com/optimize.js https://www.googleadservices.com/pagead/ https://cdn.botframework.com/botframework-webchat/4.13.0/webchat-minimal.js https://translate.google.com/translate_a/element.js https://translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.nl.vdhk0GhArrQ.O/d=1/exm=el_conf/ed=1/rs=AN8SPfosN9kI5IWqIj6K48tfhRK64wmPDA/m=el_main https://translate-pa.googleapis.com/v1/supportedLanguages https://js-agent.newrelic.com/* https://js-agent.newrelic.com/552.2d6a2503-1220.js https://js-agent.newrelic.com/290.2d6a2503-1220.js https://js-agent.newrelic.com/368.2d6a2503-1220.js https://js-agent.newrelic.com/768.2d6a2503-1220.js https://js-agent.newrelic.com/775.2d6a2503-1220.js https://translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.en_GB.I_n1hHNKRQg.O/d=1/exm=el_conf/ed=1/rs=AN8SPfq1BaON9PeD_0qd-QgiiAO9yry5vg/m=el_main https://translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.en_US.tvzdIv5D-Fk.O/d=1/exm=el_conf/ed=1/rs=AN8SPfq0reXC1mmnnZ1UyCZOCXrnJUuBeA/m=el_main https://translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.nl.JTyN52BySEs.O/d=1/exm=el_conf/ed=1/rs=AN8SPfpzThVPOJaHoq9wj-dvUsLWTH3i5w/m=el_main https://translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.nl.eyrOBZP0LRM.O/am=Cg/d=1/exm=el_conf/ed=1/rs=AN8SPfoNTgPl7r65db7DhKqDHEC07ZqHpw/m=el_main https://translate.googleapis.com/_/translate_http/_/js/ https://*.glancecdn.net/ https://*.mopinion.com https://dev.visualwebsiteoptimizer.com/j.php https://dev.visualwebsiteoptimizer.com https://js-agent.newrelic.com https://googleads.g.doubleclick.net/ https://portal.secumail.nl/v6/assets/js/portal-jquery.min.js https://www.aegon.nl/ cdn.jsdelivr.net cdnjs.cloudflare.com https://aeon-cdn-prod.axlops.nl.aegon.io https://cdnjs.cloudflare.com maps.googleapis.com; connect-src 'self' aeon-cdn-prod.axlops.nl.aegon.io stats.g.doubleclick.net www.google-analytics.com www.googletagmanager.com tagmanager.google.com https://*.aegon.nl/ https://*.nl.aegon.io/ https://*.openinsuranceplatform.ibm.com/ https://eu-de.appid.cloud.ibm.com/ https://*.aegon.com/ https://keeper.24sessions.com/api/v1/instance/timeslots/available/ https://directline.botframework.com/ wss://directline.botframework.com/ https://*.s3-accelerate.amazonaws.com/ https://s3.eu-west-1.amazonaws.com/secumail.cloud.processed/ https://*.google-analytics.com/ https://log.firedesk.nl/aegon/ https://bat.bing.com/actionp/ https://www.linkedin.com/analytics/ https://*.novusoft.nl/ https://dc.services.visualstudio.com/ https://*.glance.net/ wss://*.glance.net/ https://www.glancecdn.net/cobrowse/ https://s3.amazonaws.com/glancecdn/ https://www.googleapis.com/youtube/ https://fra-col.eum-appdynamics.com/ https://stats.g.doubleclick.net/ https://quadia.webtvframework.com/ https://api.secumail.nl/ https://storage.glancecdn.net/cobrowse/ https://maps.googleapis.com/ https://bam.nr-data.net/1/NRJS-a680a937ef6e365bd3c https://bam.nr-data.net/events/1/NRJS-a680a937ef6e365bd3c https://translate.googleapis.com/element/log https://translate.googleapis.com/translate_a/t https://cacheorcheck.mopinion.com/ https://survey.mopinion.com https://*.mopinion.com https://www.google.com/pagead/landing https://googleads.g.doubleclick.net/pagead/landing https://*.googleapis.com/v1/translateHtml blob:; report-to csp-endpoint; report-uri /beacon/deprecated/csp https://www.aegon.nl/report-uri/enforce; style-src-attr 'unsafe-inline'; script-src-attr 'unsafe-inline';
X-Iinfo 14-67868863-67868864 NNNY CT(18 21 0) RT(1746598257356 3) q(0 0 0 -1) r(4 4) U24
Etag "1746538049"
X-Frame-Options SAMEORIGIN
X-Cdn Imperva
X-Xss-Protection 1; mode=block
X-Cache Miss from cloudfront

About the tool

By using SecurityHeaders.info, you can quickly identify missing or misconfigured headers and take steps to secure your website, improving both security and user confidence.

This tool is widely used by developers, security professionals, and organizations to ensure their websites adhere to best practices in web security.

We also have another analytic tool that is used for identifying popularity metrics, general information about the business, finding similar products and competitors, and much more.

Watch it now at TrustRadar