| Header Name | Header Data |
|---|---|
| HTTP status code | 200 |
| Date | Mon, 21 Apr 2025 14:55:36 GMT |
| Referrer-Policy | strict-origin-when-cross-origin |
| Expires | -1 |
| Pragma | no-cache |
| Content-Security-Policy-Report-Only | default-src 'self' blob:;script-src 'self' 'unsafe-eval' 'unsafe-inline' blob: data: https://acc.cdn.dgv.aov.achmea.nl https://cdn.dgv.aov.achmea.nl https://snap.licdn.com/li.lms-analytics/insight.min.js https://www.google.com/gmp/conversion/* https://www.google.com/pagead/1p-conversion/ https://google.com/pagead/1p-conversion/* https://d35vb5cccm4xzp.cloudfront.net/web-flow-libs/d6825fa30c83898df7774658d746d10c/web-version.min.js d35vb5cccm4xzp.cloudfront.net https://d1mj578wat5n4o.cloudfront.net/sitecore-engage-v.1.4.2.min.js https://api-engage-eu.sitecorecloud.io/v1.2/browser/create.json* https://d1mj578wat5n4o.cloudfront.net/sitecore-engage-v.1.4.2.min.js https://google.nl/pagead/1p-conversion/* *.r42tag.com https://admin.relay42.com analytics.interpolis.nl *.mopinion.com *.interpolis.nl az416426.vo.msecnd.net analytics.twitter.com www.google-analytics.com static.ads-twitter.com www.googleoptimize.com www.googletagmanager.com *.doubleclick.net *.googleadservices.com https://googleads.g.doubleclick.net opzeggen.nl www.opzeggen.nl cdn.harvest.graindata.com widget.greenonline.nl http://*.hotjar.com https://*.hotjar.com https://js.arcgis.com https://*.hotjar.io http://*.hotjar.io *.pingvp.com tpc.googlesyndication.com *.visualwebsiteoptimizer.com *.youtube.com;style-src 'self' 'unsafe-inline' fonts.googleapis.com fast.fonts.net js.arcgis.com widget.greenonline.nl *.pingvp.com *.visualwebsiteoptimizer.com s3.amazonaws.com;img-src 'self' data: https://px.ads.linkedin.com/ *.openstreetmap.org/ *.pingvp.com *.google-analytics.com www.google.com https://t.co/i/adsct www.googletagmanager.com https://i.ytimg.com/ img.youtube.com services.arcgisonline.com server.arcgisonline.com www.google.nl interpolis.imgix.com js.arcgis.com fls.doubleclick.net interpolis.imgix.net https://script.hotjar.com https://analytics.twitter.com https://ad.doubleclick.net https://googleads.g.doubleclick.net *.visualwebsiteoptimizer.com chart.googleapis.com ;font-src 'self' data: *.pingvp.com fonts.gstatic.com js.arcgis.com widget.greenonline.nl https://script.hotjar.com;connect-src 'self' https://px.ads.linkedin.com/ https://www.google.com/gmp/conversion/* https://www.google.com/ccm/ https://google.com/ccm/ https://google.com/pagead/ https://api-engage-eu.sitecorecloud.io/v1.2/browser/create.json.* https://pagead2.googlesyndication.com/pagead/landing https://google.nl/pagead/1p-conversion/* *.pingvp.com *.mopinion.com *.interpolis.nl dc.services.visualstudio.com *.google-analytics.com https://www.opzeggen.nl interpolis.imgix.net controle.achmea.consentmonitor.nl https://*.hotjar.io wss://*.hotjar.com services.arcgisonline.com adservice.google.com geocode.arcgis.com https://ad.doubleclick.net *.visualwebsiteoptimizer.com https://www.google.com/pagead/landing https://googleads.g.doubleclick.net/pagead/landing *.coveo.com;media-src 'self' *.pingvp.com *.interpolis.nl;object-src 'self' *.pingvp.com;child-src 'self' https://www.googletagmanager.com/ blob: t.svtrd.com youtube-nocookie.com www.youtube-nocookie.com *.doubleclick.net *.hotjar.com e.interpolis.nl widgets.bnr.nl www.youtube.com art19.com tpc.googlesyndication.com formulier.interpolis.nl;frame-ancestors 'self' www.youtube-nocookie.com youtube-nocookie.com *.doubleclick.net e.interpolis.nl https://vars.hotjar.com tpc.googlesyndication.com *.visualwebsiteoptimizer.com;form-action 'self' t.svtrd.com https://transaction.acceptemail.com *.openstreetmap.org/;manifest-src 'self' t.svtrd.com *.interpolis.nl broker.nxtid.nl;report-uri https://interpolis.ams.report-uri.com/r/t/csp/reportOnly;report-to endpoint-csp-violation-report-only; |
| X-Content-Type-Options | nosniff |
| Accept-Ch | Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Bitness |
| Content-Type | text/html; charset=utf-8 |
| Access-Control-Expose-Headers | Request-Context |
| Cache-Control | no-cache, no-store |
| X-Frame-Options | SAMEORIGIN |
| Content-Security-Policy | default-src 'self' blob:;script-src 'self' 'unsafe-eval' 'unsafe-inline' blob: data: https://acc.cdn.dgv.aov.achmea.nl https://cdn.dgv.aov.achmea.nl https://snap.licdn.com/li.lms-analytics/insight.min.js https://www.google.com/gmp/conversion/* https://www.google.com/pagead/1p-conversion/ https://google.com/pagead/1p-conversion/* https://d35vb5cccm4xzp.cloudfront.net/web-flow-libs/d6825fa30c83898df7774658d746d10c/web-version.min.js https://api-engage-eu.sitecorecloud.io/v1.2/browser/create.json* d35vb5cccm4xzp.cloudfront.net https://d1mj578wat5n4o.cloudfront.net/sitecore-engage-v.1.4.2.min.js https://google.nl/pagead/1p-conversion/* https://admin.relay42.com *.r42tag.com *.visualwebsiteoptimizer.com *.pingvp.com analytics.interpolis.nl *.mopinion.com *.interpolis.nl az416426.vo.msecnd.net analytics.twitter.com www.google-analytics.com static.ads-twitter.com www.googleoptimize.com www.googletagmanager.com *.doubleclick.net *.googleadservices.com opzeggen.nl www.opzeggen.nl cdn.harvest.graindata.com widget.greenonline.nl https://static.hotjar.com https://script.hotjar.com https://js.arcgis.com *.googleanalytics.com https://optimize.google.com https://*.hotjar.io:* googleads.g.doubleclick.net tpc.googlesyndication.com *.youtube.com;style-src 'self' 'unsafe-inline' *.pingvp.com fonts.googleapis.com fast.fonts.net js.arcgis.com widget.greenonline.nl optimize.google.com *.visualwebsiteoptimizer.com s3.amazonaws.com;img-src 'self' data: https://px.ads.linkedin.com/ *.mopinion.com *.openstreetmap.org/ *.pingvp.com *.google-analytics.com www.google.com https://t.co/i/adsct www.googletagmanager.com https://i.ytimg.com/ img.youtube.com services.arcgisonline.com server.arcgisonline.com www.google.nl interpolis.imgix.com js.arcgis.com fls.doubleclick.net interpolis.imgix.net https://script.hotjar.com optimize.google.com www.gstatic.com https://analytics.twitter.com https://ad.doubleclick.net https://googleads.g.doubleclick.net *.visualwebsiteoptimizer.com chart.googleapis.com;font-src 'self' data: *.pingvp.com fonts.gstatic.com js.arcgis.com widget.greenonline.nl https://script.hotjar.com;connect-src 'self' https://px.ads.linkedin.com/ https://www.google.com/gmp/conversion/* https://www.google.com/ccm/ https://google.com/ccm/ *.openstreetmap.org/ https://api-engage-eu.sitecorecloud.io/v1.2/events api-engage-eu.sitecorecloud.io https://google.com/ccm/ https://google.com/pagead/ https://api-engage-eu.sitecorecloud.io/v1.2/browser/create.json.* https://pagead2.googlesyndication.com/pagead/landing https://google.nl/pagead/1p-conversion/* *.pingvp.com *.mopinion.com *.interpolis.nl dc.services.visualstudio.com *.google-analytics.com https://www.opzeggen.nl interpolis.imgix.net controle.achmea.consentmonitor.nl https://*.hotjar.com:* https://*.hotjar.io:* https://surveystats.hotjar.io wss://*.hotjar.com services.arcgisonline.com adservice.google.com geocode.arcgis.com https://ad.doubleclick.net *.visualwebsiteoptimizer.com https://www.google.com/pagead/landing https://googleads.g.doubleclick.net/pagead/landing *.coveo.com;media-src 'self' *.pingvp.com *.interpolis.nl *.openstreetmap.org/;object-src 'self' *.pingvp.com;child-src 'self' https://www.googletagmanager.com/ blob: t.svtrd.com youtube-nocookie.com www.youtube-nocookie.com *.doubleclick.net *.hotjar.com *.hotjar.io e.interpolis.nl widgets.bnr.nl www.youtube.com art19.com optimize.google.com *.pingvp.com tpc.googlesyndication.com formulier.interpolis.nl www.google-analytics.com;frame-ancestors 'self' www.youtube-nocookie.com youtube-nocookie.com *.doubleclick.net e.interpolis.nl https://vars.hotjar.com optimize.google.com tpc.googlesyndication.com *.visualwebsiteoptimizer.com *.youtube.com;form-action 'self' t.svtrd.com https://transaction.acceptemail.com;manifest-src 'self' data: t.svtrd.com *.interpolis.nl broker.nxtid.nl;upgrade-insecure-requests;report-uri https://interpolis.ams.report-uri.com/r/t/csp/enforce;report-to endpoint-csp-violation; |
| X-Xss-Protection | 1; mode=block |
| Vary | Accept-Encoding |
| Set-Cookie | shell#lang=en; path=/; secure; SameSite=None |
| Reporting-Endpoints | endpoint-csp-violation="https://interpolis.ams.report-uri.com/a/t/g", endpoint-csp-violation-report-only="https://interpolis.ams.report-uri.com/a/t/g" |
| Request-Context | appId=cid-v1:4c7146a9-8e45-4eca-8524-bf923c2c2d8d |
| Strict-Transport-Security | max-age=31536000 |
By using SecurityHeaders.info, you can quickly identify missing or misconfigured headers and take steps to secure your website, improving both security and user confidence.
This tool is widely used by developers, security professionals, and organizations to ensure their websites adhere to best practices in web security.
We also have another analytic tool that is used for identifying popularity metrics, general information about the business, finding similar products and competitors, and much more.
Watch it now at TrustRadar