HTTP/1.1 200 OK
Access-Control-Allow-Headers: X-API-Key, Authorization, Content-Type
Access-Control-Allow-Methods: GET, PUT, POST, DELETE, OPTIONS
Access-Control-Allow-Origin: *
Content-Security-Policy: default-src 'self'; block-all-mixed-content; font-src 'self' *.gstatic.com; connect-src 'self' *.gstatic.com *.mixpanel.com; img-src * data:; frame-ancestors 'self' *.nicms.nl *.newestindustry.nl *.myadviser.nl *.digido.nl homeinvest.nl; frame-src 'self' *.filepicker.io *.facebook.com *.google.com *.doubleclick.net tjip.webpush.freshchat.com wchat.freshchat.com; script-src 'self' 'unsafe-inline' *.creative-serving.com www.googletagservices.com connect.facebook.net tagmanager.google.com www.googletagmanager.com www.google-analytics.com www.google.com *.mxpnl.com adservice.google.nl adservice.google.com *.googlesyndication.com *.gstatic.com wchat.freshchat.com; style-src 'self' 'unsafe-inline' *.googleapis.com wchat.freshchat.com; object-src 'none';
Content-Type: text/html; charset=UTF-8
Referrer-Policy: strict-origin, strict-origin-when-cross-origin
Set-Cookie: __sid=MTU2MDczNDIyM3xEdi1CQkFFQ180SUFBUkFCRUFBQUl2LUNBQUVHYzNSeWFXNW5EQXdBQ21GdWIyNTViVzkxYzJVRVltOXZiQUlDQUFFPXyMNrCkuijqsAcy-G1zHEJKSp5OApl_zqMaSCgFrs_p7A==; Path=/; Expires=Mon, 17 Jun 2019 07:17:03 GMT; Max-Age=21600; HttpOnly
Set-Cookie: __sig=fjcnOz_wKJ5ya4BWRvIbF_UEgUU=; Path=/; HttpOnly
Set-Cookie: jmb_cpth=/; Path=/; Expires=Mon, 17 Jun 2019 02:17:03 GMT
X-Xss-Protection: 1
Date: Mon, 17 Jun 2019 01:17:03 GMT
Transfer-Encoding: chunked
Via: 1.1 google
Alt-Svc: clear