eldi.be Review

 N/A

HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 22 Aug 2025 08:50:15 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://www.eldi.be/
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Permitted-Cross-Domain-Policies: master-only
Referrer-Policy: same-origin

HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 22 Aug 2025 08:50:16 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: PHPSESSID=84fkds2sf6gt0m7tqfvu5m98gk; expires=Fri, 22 Aug 2025 16:50:16 GMT; Max-Age=28800; path=/; domain=www.eldi.be; secure; HttpOnly; SameSite=Lax
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Location: https://www.eldi.be/nl/
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Permitted-Cross-Domain-Policies: master-only
Referrer-Policy: same-origin

HTTP/1.1 200 OK
Server: nginx
Date: Fri, 22 Aug 2025 08:50:16 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Set-Cookie: PHPSESSID=b8jvhpdne3v1j0kd2af2kutumf; expires=Fri, 22 Aug 2025 16:50:16 GMT; Max-Age=28800; path=/; domain=www.eldi.be; secure; HttpOnly; SameSite=Lax
Pragma: no-cache
Cache-Control: max-age=0, must-revalidate, no-cache, no-store
Expires: Thu, 22 Aug 2024 08:49:42 GMT
Content-Security-Policy: font-src *.googleapis.com *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com *.google.be *.google.bf *.google.com *.google.fr *.google.lu *.google.nl media.flixcar.com media.flixfacts.com use.typekit.net *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.facebook.com *.googlesyndication.com *.tiktok.com 'self' 'unsafe-inline'; frame-ancestors *.multisafepay.com https://pay.google.com 'self'; frame-src bid.g.doubleclick.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.youtube-nocookie.com *.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com *.google.be *.google.bf *.google.fr *.google.lu *.google.nl consentcdn.cookiebot.com media.flixcar.com www.googletagmanager.com view.publitas.com *.multisafepay.com https://pay.google.com www.youtube.com www.xtento.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.googleapis.com *.gstatic.com 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.roeye.com *.tiktok.com *.google.be *.google.bf *.google.fr *.google.lu *.google.nl www.eldi.be imgsct.cookiebot.com rt.flix360.com media.flixcar.com media.flixfacts.com assets-jpcust.jwpsrv.com eprel.ec.europa.eu logo.flix360.io bat.bing.net magefan.com cm.magefan.com *.multisafepay.com *.adobedtm.com *.adobe.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.googleapis.com *.gstatic.com *.google.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.googlesyndication.com *.jsdelivr.net *.tiktok.com *.google.be *.google.bf *.google.fr *.google.lu *.google.nl bat.bing.com cdnjs.cloudflare.com consent.cookiebot.com media.flixcar.com media.flixfacts.com pagead2.googlesyndication.com cdn.loadbee.com prod.flixgvid.flix360.io *.avada.io *.multisafepay.com https://pay.google.com www.youtube.com player.vimeo.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.tiktok.com *.google.be *.google.bf *.google.com *.google.fr *.google.lu *.google.nl cdnjs.cloudflare.com media.flixcar.com p.typekit.net use.typekit.net *.fontawesome.com *.multisafepay.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src media.flixcar.com *.amazonaws.com *.googleapis.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com vimeo.com *.googleapis.com *.google-analytics.com *.facebook.com *.facebook.net *.google.com *.doubleclick.net *.googlesyndication.com *.tiktok.com *.google.be *.google.bf *.google.fr *.google.lu *.google.nl sgtm.eldi.be rt.flix360.com media.flixcar.com pagead2.googlesyndication.com availability.loadbee.com bat.bing.net https://get.geojs.io *.avada.io *.multisafepay.com cdn.plyr.io noembed.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Permitted-Cross-Domain-Policies: master-only
Referrer-Policy: same-origin
Content-Encoding: br