bytes
*, https://b2c.obenda.orange.vm/
0
must-revalidate, no-cache, private
keep-alive
gzip
default-src 'self' *.orange.be *.google.es *.abtasty.com *.fontawesome.com *.typekit.net *.digitalchannels.technology cdn.jsdelivr.net *.cookielaw.org *.googletagmanager.com *.optimizegoogle.com *.optimize-google.com *.googleanalytics.com *.google-analytics.com *.newrelic.com *.onetrust.com *.hotjar.com *.adbutter.net *.adnxs.com *.doubleclick.net *.amazon-adsystem.com brand-messenger.app.khoros.com *.khoros.com wss://brandmessenger-ws.euw1.khoros.com ssl://brandmessenger-ws.euw1.khoros.com:8883 proactive-chat-server-eu.prod.aws.lcloud.com messaging-auth-eu-west-1.prod.aws.lcloud.com; script-src blob: 'self' 'unsafe-inline' 'unsafe-eval' * https://optimize.google.com https://www.googleanalytics.com https://www.google-analytics.com https://www.googleoptimize.com https://googleads.g.doubleclick.net https://script.hotjar.com https://connect.facebook.net https://www.googleadservices.com http//www.googleadservices.com https://static.hotjar.com https://trk.adbutter.net https://accounts.google.com https://www.googleanalytics.com https://www.googleoptimize.com *.customersaas.com t.contentsquare.net contentsquare.com *.emsecure.net *.customersaas.com *.orange.be *.netdna-ssl.com blob: *.abtasty.com *.googleapis.com https://assets.pinterest.com https://widgets.pinterest.com; object-src 'self' *.mobistar.be *.orange.be *.netdna-ssl.com; style-src 'unsafe-inline' 'self' https://optimize.google.com https://fonts.googleapis.com *.mobistar.be *.cloudfront.net *.customersaas.com *.orange.be *.netdna-ssl.com cdnjs.cloudflare.com *.gstatic.com *.abtasty.com *.googleapis.com messaging-khoros.app.khoros.com cdn.jsdelivr.net *.typekit.net *.googletagmanager.com; img-src * blob: https://optimize.google.com *.orange.be https://www.facebook.com https://www.google.com https://www.google.es https://static.hotjar.com *.fls.doubleclick.net https://brand-messenger.app.khoros.com *.adnxs.com https://p1.zemanta.com https://aax-eu.amazon-adsystem.com https://www.google-analytics.com *.googletagmanager.com data: *.abtasty.com *.amazonaws.com *.cloudfront.net *.contentsquare.net https://i.pinimg.com https://log.pinterest.com; media-src 'self' data: *.mobistar.be *.orange.be *.netdna-ssl.com https://v.pinimg.com; frame-src 'self' https://optimize.google.com * emsecure.net *.orange.be https://assets.pinterest.com; font-src 'self' https://fonts.gstatic.com *.mobistar.be *.customersaas.com *.orange.be cdn.livechatinc.com themes.googleusercontent.com *.netdna-ssl.com blob: data: *.googleapis.com *.gstatic.com *.abtasty.com brand-messenger.app.khoros.com messaging-khoros.app.khoros.com *.typekit.net *.fontawesome.com; connect-src 'self' *.googlesyndication.com *.gstatic.com https://uq5v1rcrhz-dsn.algolia.net *.algolianet.com *.cloudfront.net *.tealiumiq.com *.usabilla.com *.emsecure.net *.customersaas.com wss://*.khoros.com *.eshop.orange.be *.orange.be *.digitalchannels.technology *.mousestats.com secure.comparecycle.com *.abtasty.com *.contentsquare.net *.smooch.io *.slgnt.eu *.google-analytics.com *.prod.aws.lcloud.com *.typekit.net cdn.jsdelivr.net *.nr-data.net cdnjs.cloudflare.com *.google.com *.google.es *.google.be *.fontawesome.com *.cookielaw.org *.onetrust.com *.hotjar.com *.adbutter.net *.adnxs.com *.doubleclick.net *.newrelic.com wss://*.hotjar.com *.googletagmanager.com *.ipify.org *.zemanta.com *.googleadservices.com *.facebook.net *.facebook.com *.hotjar.io *.amazon-adsystem.com browser-update.org *.googleapis.com *.tiqcdn.com *.teads.tv *.pinterest.com *.taboola.com *.clarity.ms *.gsitrix.com *.adensemble.com *.cookieless-data.com bbd-tag.de admaxium.com *.perfectaudiencertg.com *.netdna-ssl.com *.twitter.com *.bing.com *.pinimg.com *.licdn.com https://static.ads-twitter.com https://js.adsrvr.org https://img.netaffiliation.com https://files.qualifio.com *.khoros.com; frame-ancestors 'self' https://mobile.kbc-group.com https://kbctouch.kbc.be https://cbctouch.cbc.be https://touch.kbcbrussels.be https://mobileyoungsterapp.kbc-group.com ;
text/html; charset=UTF-8
nl
Tue, 09 Jan 2024 17:29:48 GMT
Sun, 19 Nov 1978 05:00:00 GMT
strict-origin-when-cross-origin
nginx
language=nl; expires=Wed, 08-Jan-2025 17:29:45 GMT; Max-Age=31535997; path=/; domain=.orange.be; secure; samesite=lax, visid_incap_2191806=m4Y8pRnZR5eM30XxVbe+KISCnWUAAAAAQUIPAAAAAADIcpZDG5ruC6zv6rEoZ1Eh; expires=Wed, 08 Jan 2025 17:15:40 GMT; HttpOnly; path=/; Domain=.orange.be, nlbi_2191806=i/hSKgHOggM5tR+NrEmb5gAAAACjZP6tJt0/+rn+0rU5cp6j; path=/; Domain=.orange.be, incap_ses_128_2191806=ZTvkScnk+kyzrlxHH8DGAYuCnWUAAAAA53V8A1K4oReaZQ5FB6dwyQ==; path=/; Domain=.orange.be
max-age=31536000; includeSubDomains
no-store, content="BigPipe/1.0"
Accept-Encoding
varnish
prod
Imperva
MISS
nosniff
ALLOW-FROM *.mobistar.be *.orange.be *.optimizely.com mobile.kbc-group.com mobileyoungsterapp.kbc-group.com kbctouch.kbc.be cbctouch.cbc.be touch.kbcbrussels.be
14-147833-147853 NNNN CT(19 18 0) RT(1704821384794 101) q(0 0 1 0) r(31 31) U24
v-ae646024-af14-11ee-ac54-67c5f95f36da
IE=edge
1; mode=block
|