reaal.nl Review

 N/A

HTTP/1.1 301 Moved Permanently
Location: https://reaal.nl/
Cache-Control: no-cache
X-XSS-Protection: 1
Connection: close
Content-Type: text/html; charset=utf-8
Content-Length: 682
Pragma: no-cache

HTTP/1.1 301 Moved Permanently
Strict-Transport-Security: max-age=63072000; includeSubDomains
Location: https://www.reaal.nl/
Cache-Control: no-cache
X-XSS-Protection: 1
Connection: close
Content-Type: text/html; charset=utf-8
Content-Length: 686
Pragma: no-cache

HTTP/1.1 200 OK
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Content-Type: text/html; charset=utf-8
Expires: -1
Referrer-Policy: strict-origin-when-cross-origin
X-Content-Type-Options: nosniff
Content-Security-Policy: default-src 'self';script-src 'self' 'unsafe-inline' 'nonce-ageQ//By1lmmG0tGVouhir1N' 'unsafe-eval' 'strict-dynamic' https: blob: https://www.googleapis.com https://www.pega.com https://widget.euw1.chat.pega.digital https://www.reaal.nl https://www.reaal.local https://static.hotjar.com https://script.hotjar.com https://az416426.vo.msecnd.net https://consent.cookiebot.com https://consentcdn.cookiebot.com https://dl.episerver.net https://googleads.g.doubleclick.net https://ssl.google-analytics.com https://tagmanager.google.com https://use.typekit.net https://www.google.com https://www.googleadservices.com https://www.google-analytics.com https://www.googletagmanager.com https://eu.cobrowse.pega.com https://eu.usefirefly.com https://sdk.onfido.com https://js.monitor.azure.com https://funnel.reaal.nl;object-src 'none';style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://www.gstatic.com https://euuatassets.cobrowse.pega.com https://euassets.cobrowse.pega.com https://widget.euw1.chat.pega.digital https://www.reaal.nl https://static.hotjar.com https://www.cookiebot.com https://p.typekit.net https://tagmanager.google.com https://www.googletagmanager.com https://use.typekit.net https://sdk.onfido.com https://funnel.reaal.nl;img-src 'self' data: blob: https://fonts.googleapis.com https://www.pega.com https://www.reaal.nl https://widget.euw1.chat.pega.digital https://www.cookiebot.com https://fonts.gstatic.com https://imgsct.cookiebot.com https://maps.gstatic.com https://p.typekit.net https://region1.analytics.google.com https://region1.google-analytics.com https://ssl.gstatic.com https://www.google.com https://www.google-analytics.com https://www.googletagmanager.com https://www.gstatic.com https://api.onfido.com https://eu.usefirefly.com https://euprod.rtcvid.net https://maps.googleapis.com;media-src 'self' blob: https://storage.googleapis.com https://www.reaal.nl;frame-src 'self' blob: https://www.pega.com https://www.googletagmanager.com https://clone-chatbot.reaal.local https://consentcdn.cookiebot.com https://eu.cobrowse.pega.com https://eu.usefirefly.com https://sdk.onfido.com https://euprod.rtcvid.net https://www.youtube-nocookie.com https://www.youtube.com https://www.reaal.nl;font-src 'self' data: https://fonts.googleapis.com https://fonts.gstatic.com https://static.hotjar.com https://use.typekit.net https://widget.euw1.chat.pega.digital https://script.hotjar.com https://www.reaal.nl;connect-src 'self' wss://euassets.cobrowse.pega.com wss://sync.onfido.com wss://eu.usefirefly.com wss://engine.euw1.chat.pega.digital wss://euuat.cobrowse.pega.com https://www.googleapis.com https://static.hotjar.io https://static.hotjar.com https://script.hotjar.com https://euassets.cobrowse.pega.com https://euuat.cobrowse.pega.com https://eu.cobrowse.pega.com https://eu.usefirefly.com https://widget.euw1.chat.pega.digital https://www.reaal.nl https://js.monitor.azure.com https://westeurope-0.in.applicationinsights.azure.com https://www.clarity.ms https://api.onfido.com https://consentcdn.cookiebot.com https://dc.services.visualstudio.com https://region1.analytics.google.com https://region1.google-analytics.com https://www.google.com https://www.google-analytics.com https://www.youtube-nocookie.com https://funnel.reaal.nl https://api.reaal.nl https://maps.googleapis.com;base-uri 'self';form-action 'self';frame-ancestors 'self' https://eu.cobrowse.pega.com https://www.youtube-nocookie.com https://euprod.rtcvid.net https://www.reaal.nl;manifest-src 'self' https://www.reaal.nl;worker-src 'self' blob: https://www.reaal.nl
X-Frame-Options: Deny
Request-Context: appId=cid-v1:96e9749a-327f-45a1-b964-fce925a6e4a8
Access-Control-Expose-Headers: Request-Context
Access-Control-Allow-Origin: *
Permissions-Policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(self "https://sdk.onfido.com"), cross-origin-isolated=(), display-capture=(), document-domain=(), encrypted-media=(), execution-while-not-rendered=(), execution-while-out-of-viewport=(), fullscreen=(), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), navigation-override=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(self), usb=(), web-share=(), xr-spatial-tracking=(), clipboard-read=(), clipboard-write=(), gamepad=(), speaker-selection=(), conversion-measurement=(), focus-without-user-activation=(), hid=(), idle-detection=(), interest-cohort=(), serial=(), sync-script=(), trust-token-redemption=(), unload=(self), window-placement=(), vertical-scroll=()
Date: Fri, 22 Aug 2025 23:52:49 GMT
Strict-Transport-Security: max-age=63072000; includeSubDomains
Connection: close
Content-Encoding: deflate
Set-Cookie: ASP.NET_SessionId=vxwcwa0yjjc4hqmhgbd2ojh5; path=/; secure; HttpOnly; SameSite=Lax
Set-Cookie: BC_HA_6a62ae699cc57c40_7809183e=3714e9d; Domain=.reaal.nl; expires=Sat, 23-Aug-25 00:52:49 GMT; Path=/; Secure; SameSite=None; HttpOnly