Traffic Report and Web Analysis for Heiloo - heiloo.nl

0 :HTTP/1.1 301 Moved Permanently
Server :nginx
Date :Mon, 05 Jan 2026 14:03:22 GMT
Content-Type :text/html
Content-Length :162
Connection :close
Location :https://heiloo.nl/
X-Hosted-By :Cobytes
1 :HTTP/1.1 301 Moved Permanently
Strict-Transport-Security :max-age=31536000
2 :HTTP/1.1 200 OK
Vary :Accept-Encoding
Content-Language :nl-NL
Report-To :{"group":"csp","max_age":3600,"endpoints":[{"url":"https://monitoring.opengemeenten.nl/api/2/securit
y/?glitchtip_key=387bc829842a4c888d0976cabbbea586"}]}
Content-Security-Policy :default-src 'self'; script-src 'self' https://tagmanager.google.com https://*.googletagmanager.com h
ttps://www.google-analytics.com https://ssl.google-analytics.com https://stats.pusher.com/timeline/ 
https://js.pusher.com/4.1/ https://cloudstatic.obi4wan.com https://chatapi.obi4wan.com/api/ https://
youtu.be https://youtube.com https://www.youtube.com https://player.vimeo.com/api/player.js https://
cdn-eu.readspeaker.com https://vtdnntts-eu.readspeaker.com https://siteimproveanalytics.com https://
include.timeblockr.com https://shared.api.timeblockr.com https://*.api.timeblockr.cloud https://shar
ed.signalr.timeblockr.com https://*.signalr.timeblockr.cloud wss://shared.signalr.timeblockr.com 'un
safe-eval' 'report-sample'; img-src 'self' data: https://*.googletagmanager.com https://*.google-ana
lytics.com https://ssl.gstatic.com https://www.gstatic.com https://www.toegankelijkheidsverklaring.n
l https://cloudstatic.obi4wan.com https://s3-eu-west-1.amazonaws.com/obipub/ https://youtube.com htt
ps://www.youtube.com https://youtu.be https://i.ytimg.com https://cdn-eu.readspeaker.com https://*.g
lobal.siteimproveanalytics.io https://siteimproveanalytics.com https://eu2.siteimprove.com https://s
zsurvey.siteimprove.com https://ssl.siteimprove.com https://include.timeblockr.com; base-uri 'self';
 frame-src 'self' https://youtu.be https://youtube.com https://www.youtube-nocookie.com https://www.
youtube.com https://player.vimeo.com https://app-eu.readspeaker.com https://cdn-eu.readspeaker.com h
ttps://vttts-eu.readspeaker.com; connect-src 'self' https://*.analytics.google.com https://*.googlet
agmanager.com https://*.google-analytics.com https://app.obi4wan.ai/api/ https://cloudstatic.obi4wan
.com https://chatapi.obi4wan.com/api/ https://*.pusher.com/pusher/ https://sockjs-eu.pusher.com/push
er/ wss://ws-eu.pusher.com/app/ https://obipubvideo.s3.eu-central-1.amazonaws.com https://youtu.be h
ttps://youtube.com https://www.youtube.com https://app-eu.readspeaker.com https://cdn-eu.readspeaker
.com https://media-eu.readspeaker.com https://vttts-eu.readspeaker.com https://vtdnntts-eu.readspeak
er.com https://wrapi-eu.readspeaker.com https://*.global.siteimproveanalytics.io https://siteimprove
analytics.com https://include.timeblockr.com https://*.api.timeblockr.com https://*.api.timeblockr.c
loud https://shared.signalr.timeblockr.com wss://shared.signalr.timeblockr.com; font-src 'self' http
s://fonts.gstatic.com https://include.timeblockr.com data:; style-src 'self' https://tagmanager.goog
le.com https://fonts.googleapis.com https://youtube.com https://www.youtube.com https://cdn-eu.reads
peaker.com https://include.timeblockr.com 'unsafe-inline' 'report-sample'; media-src 'self' https://
youtu.be https://youtube.com https://www.youtube.com https://vimeo.com https://player.vimeo.com http
s://cdn-eu.readspeaker.com; object-src 'self' https://youtube.com https://www.youtube.com; form-acti
on https://app-eu.readspeaker.com https://cdn-eu.readspeaker.com https://*.global.siteimproveanalyti
cs.io https://id.opengemeenten.nl https://users.opengemeenten.nl https://login.microsoftonline.com '
self'; report-to csp; child-src 'self' blob:; frame-ancestors 'self' https://www.bergen-nh.nl https:
//www.castricum.nl https://www.heiloo.nl https://producten.buch.nl https://www.uitgeest.nl; worker-s
rc 'self' blob:; report-uri https://monitoring.opengemeenten.nl/api/2/security/?glitchtip_key=387bc8
29842a4c888d0976cabbbea586
Link :; rel=prelo
ad; as=script, ; rel=preload; as=script, ; rel=preload; as=script, ; rel=preload; as
=script, ; rel=preload; as=script, ; rel=preload; as=script, ; rel=preload; as=script, ; rel=preload; as=script, ; rel=preload;
 as=script, ; rel=preload; as=script, ; rel=preload; as=script, ; rel=preload; as=script, ; rel=preload; as=script, 
; rel=prel
oad; as=script, ; rel=preload; 
as=script, ; rel=preload; as=sc
ript, ; rel=preload; as=script,
 ; rel=preload; as=script, ; rel=preload; as=s
tyle, ; rel=pre
load; as=style, ; rel=preload; as=style, ; rel=preload; as=style, ; rel=preload; as=style, ; rel=preload; as=style, ; rel=preload; as=style, ; rel=preload; as=style, ; rel=preload; as=style, ; rel=preload; as=style, ; rel=preload; as=s
tyle, ; rel=pre
load; as=style, ; rel=preload; as=style, ; rel=preload; as=style, ; rel=preload; as=style, ; rel=preload; as=style, ; rel=preload; as=style, ; rel=preload; as=style, ; rel=preload; as=style, ; rel=preload; as=style, ; rel=preload; as=s
tyle, ; rel=pre
load; as=style, ; rel=preload; as=style, ; rel=preload; as=style, ; rel=preload; as=style, ; rel=preload; as=style, ; rel=preload; as=style, ; rel=preload; as=style, ; rel=preload; as=style, ; rel=preload; as=style, ; rel=preload; as=s
tyle, ; rel=pre
load; as=style, ; rel=preload; as=style, ; rel=preload; as=style, ; rel=preload; as=style, ; rel=preload; as=style, ; rel=preload; as=style, ; rel=preload; as=style, ; rel=preload; as=style
cache-control :no-cache
ETag :"22574fb57658d375bdbbbf61dfcdaf31"
Permissions-Policy :accelerometer=(), ambient-light-sensor=(), battery=(), camera=(), cross-origin-isolated=(), display-
capture=(), document-domain=(), encrypted-media=(), execution-while-not-rendered=(), execution-while
-out-of-viewport=(), fullscreen=*, geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), m
icrophone=(), midi=(), navigation-override=*, payment=(), picture-in-picture=(), publickey-credentia
ls-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), web-share=(), xr-spatial-tracking=()
Feature-Policy :sync-xhr 'self'
Referrer-Policy :same-origin
X-Content-Type-Options :nosniff
X-Frame-Options :SAMEORIGIN
X-XSS-Protection :1; mode=block