helmonline.nl website report

HTTP/2 200 
date: Sun, 30 Aug 2026 20:37:52 GMT
content-type: text/html; charset=UTF-8
server: cloudflare
content-security-policy-report-only: worker-src https://helmonline-hyva.dev.localhost helmonline.nl; font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com https://www.googletagmanager.com *.googleapis.com https://www.gstatic.com https://fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.paypal.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com player.vimeo.com *.braintreegateway.com *.paypal.com google.com *.google.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.google.com consentcdn.cookiebot.com td.doubleclick.net www.googletagmanager.com *.criteo.com/ www.xtento.com https://*.google.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com js.mollie.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io *.paypal.com *.typekit.net *.gstatic.com https://images.unsplash.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.pon.bike images.pondigital.solutions *.google.nl *.google.com *.google.fr *.mailplus.nl imgsct.cookiebot.com *.bing.net *.bing.com pagead2.googlesyndication.com www.xtento.com cdn.xtento.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.googleusercontent.com magefan.com cm.magefan.com *.disqus.com https://img.youtube.com https://www.mollie.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://player.vimeo.com connect.facebook.net graph.facebook.com business.facebook.com tagmanager.google.com https://www.googletagmanager.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ www.facebook.com chimpstatic.com rum-static.pingdom.net rum-collector-2.pingdom.net consentcdn.cookiebot.com consent.cookiebot.com widget.thuiswinkel.org widget.thuiswinkel-cdn.org *.clarity.ms restapi.mailplus.nl www.googleoptimize.com googletagmanager.com *.googletagmanager.com *.bing.com *.criteo.com static.criteo.net *.mouseflow.com *.tiktok.com *.hotjar.com *.beslist.nl static.cloudflareinsights.com cdn.debugbear.com pagead2.googlesyndication.com static.widget.trengo.eu www.xtento.com cdn.xtento.com mcjs.prd.a.intuit.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com *.disqus.com js.mollie.com pay.google.com applepay.cdn-apple.com https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com *.typekit.net downloads.mailchimp.com https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.widget.trengo.eu 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com devdocs.magento.com rum-collector-2.pingdom.net widgetcontent.thuiswinkel-cdn.org www.google.com *.clarity.ms consent.cookiebot.com consentcdn.cookiebot.com doubleclick.net *.bing.com *.criteo.com *.tiktok.com *.hotjar.com *.hotjar.io *.beslist.nl data.debugbear.com pagead2.googlesyndication.com api.widget.trengo.eu form-assets.mailchimp.com *.intuit.com *.a.intuit.com mcjs.prd.a.intuit.com chimpstatic.com *.amazonaws.com https://ipinfo.io https://*.google.com https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
vary: Accept-Encoding
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
x-magento-cache-debug: HIT
grace: none
pragma: no-cache
expires: -1
cache-control: no-store, no-cache, must-revalidate, max-age=0
cf-cache-status: DYNAMIC
strict-transport-security: max-age=31536000; includeSubDomains; preload
speculation-rules: "/cdn-cgi/speculation"
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=nB309H9mhCUOTZY323izIVA4ur%2FWpYjlfz7BoTHtCEd19iOm7RHqIZW7tTE3ITk%2BQ86uNEZQIcy0XvrLUYWL%2FBwNL%2F1Camokrd4IBB286zjArKq9aLShS38%2B5N9Jtmll6jqSDg%3D%3D"}]}
cf-ray: a336988b7f2a0155-CDG
alt-svc: h3=":443"; ma=86400