Résultats de la vérification pour : unboundxr.co.uk
-
unboundxr.co.uk est EN LIGNE
Info supplémentaires pour https://unboundxr.co.uk
Informations Techniques
| Code de Statut HTTP | 200 |
|---|---|
| Version HTTP | HTTP/1.1 |
| HTTPS | ✔ Disponible |
| Adresse IP | 94.76.240.71 |
| Logiciel Serveur | nginx |
| Compression | gzip |
| ℹ 🔵 HSTS Manquant | HTTP Strict Transport Security n'est pas configuré. Recommandé pour les sites HTTPS. |
| ℹ 🔵 Content Security Policy Manquante | CSP n'est pas configuré. Cela aide à prévenir les attaques XSS et l'injection de contenu. |
Code de Statut HTTP 200
Version HTTP HTTP/1.1
HTTPS ✔ Disponible
Adresse IP 94.76.240.71
Logiciel Serveur nginx
Compression gzip
ℹ 🔵 HSTS Manquant HTTP Strict Transport Security n'est pas configuré. Recommandé pour les sites HTTPS.
ℹ 🔵 Content Security Policy Manquante CSP n'est pas configuré. Cela aide à prévenir les attaques XSS et l'injection de contenu.
Version HTTP HTTP/1.1
HTTPS ✔ Disponible
Adresse IP 94.76.240.71
Logiciel Serveur nginx
Compression gzip
ℹ 🔵 HSTS Manquant HTTP Strict Transport Security n'est pas configuré. Recommandé pour les sites HTTPS.
ℹ 🔵 Content Security Policy Manquante CSP n'est pas configuré. Cela aide à prévenir les attaques XSS et l'injection de contenu.
Performance
| Résolution DNS | 13.8 ms |
|---|---|
| Connexion TCP | 32.4 ms |
| Négociation TLS | 25.3 ms |
| Temps Jusqu'au Premier Octet (TTFB) | 518 ms |
| Téléchargement du Contenu | 76.5 ms |
| Temps de Réponse Total | 594.5 ms |
Résolution DNS 13.8 ms
Connexion TCP 32.4 ms
Négociation TLS 25.3 ms
Temps Jusqu'au Premier Octet (TTFB) 518 ms
Téléchargement du Contenu 76.5 ms
Temps de Réponse Total 594.5 ms
Connexion TCP 32.4 ms
Négociation TLS 25.3 ms
Temps Jusqu'au Premier Octet (TTFB) 518 ms
Téléchargement du Contenu 76.5 ms
Temps de Réponse Total 594.5 ms
Sécurité
| HTTPS | ✔ Activé |
|---|---|
| HSTS | ✘ Non configuré |
| CSP | ⚠ Non configuré |
| X-Frame-Options | ✔ SAMEORIGIN |
| X-Content-Type-Options | ✔ nosniff |
| HTTP/2 | ⚠ HTTP/1.1 |
HTTPS ✔ Activé
HSTS ✘ Non configuré
CSP ⚠ Non configuré
X-Frame-Options ✔ SAMEORIGIN
X-Content-Type-Options ✔ nosniff
HTTP/2 ⚠ HTTP/1.1
HSTS ✘ Non configuré
CSP ⚠ Non configuré
X-Frame-Options ✔ SAMEORIGIN
X-Content-Type-Options ✔ nosniff
HTTP/2 ⚠ HTTP/1.1
Vérification SEO Rapide
| Titre | Unbound XR - The Virtual & Augmented Reality Expert |
|---|---|
| Robots Meta | INDEX,FOLLOW |
| Image Open Graph | https://unboundxr.co.uk/static/v... |
Titre Unbound XR - The Virtual & Augmented Reality Expert
Robots Meta INDEX,FOLLOW
Image Open Graph https://unboundxr.co.uk/static/v...
Robots Meta INDEX,FOLLOW
Image Open Graph https://unboundxr.co.uk/static/v...
Technologies Détectées
| Technologie | jQuery Google Analytics Google Tag Manager Cloudflare Nginx PHP Node.js |
|---|
Technologie jQuery Google Analytics Google Tag Manager Cloudflare Nginx PHP Node.js
En-têtes HTTP
| Server | nginx |
|---|---|
| Date | Tue, 28 Jul 2026 19:21:21 GMT |
| Content-type | text/html; charset=UTF-8 |
| Content-length | 159385 |
| X-built-with | Hyva Themes |
| Report-to | {"group":"report-endpoint","max_age":10886400,"endpoints":[{"url":"https:\/\/unboundxr.nl\/paynl\/csp\/report"}]} |
| Content-security-policy-report-only | font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com fonts.googleapis.com *.googleapis.com data: 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.fontawesome.com *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com *.webwinkelkeur.nl https://fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com *.googlesyndication.com *.twitter.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com consentcdn.cookiebot.eu td.doubleclick.net www.youtube-nocookie.com https://*.dpdconnect.nl *.twitter.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src 'self' data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com www.google-analytics.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io widgets.automizely.com widgets.automizely.io https://images.unsplash.com maps.googleapis.com maps.gstatic.com *.googleapis.com *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.roeye.com *.pay.nl *.calendly.com *.hsforms.net *.hsforms.com www.google.com www.google.nl www.facebook.com bat.bing.com px.ads.linkedin.com img.sct.eu1.usercentrics.eu *.cloudflare.com *.klarna.com *.google-analytics.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.webwinkelkeur.nl ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com https://maps.gstatic.com https://maps.googleapis.com www.googletagmanager.com blob: https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com ajax.googleapis.com fonts.googleapis.com widgets.automizely.com widgets.automizely.io https://maps.googleapis.com maps.googleapis.com maps.gstatic.com *.googleapis.com *.gstatic.com https://cdn.jsdelivr.net/npm/@ryangjchandler/spruce@2.x.x/dist/spruce.umd.js www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.googlesyndication.com *.calendly.com *.hsforms.net *.hsforms.com chimpstatic.com api.dpdconnect.nl www.googletagmanager.com consent.cookiebot.eu snap.licdn.com connect.facebook.net bat.bing.com googleads.g.doubleclick.net consentcdn.cookiebot.eu www.google.com www.gstatic.com https://*.dpdconnect.nl *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.webwinkelkeur.nl downloads.mailchimp.com *.list-manage.com https://maps.googleapis.com/maps/api/ https://places.googleapis.com/ https://examplecdn.com https://maps.googleapis.com/maps-api-v3/ https://places.googleapis.com js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com widgets.automizely.com widgets.automizely.io *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.calendly.com *.hsforms.net *.hsforms.com www.youtube-nocookie.com www.gstatic.com *.fontawesome.com *.cloudflare.com *.google.com *.twitter.com *.twimg.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.webwinkelkeur.nl downloads.mailchimp.com https://fonts.googleapis.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.automizely.com api.automizely.io https://maps.googleapis.com https://player.vimeo.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com *.google-analytics.com *.facebook.com *.facebook.net *.doubleclick.net *.googlesyndication.com *.calendly.com *.hsforms.net *.hsforms.com region1.analytics.google.com px.ads.linkedin.com consentcdn.cookiebot.eu www.youtube-nocookie.com play.google.com jnn-pa.googleapis.com *.cloudflare.com *.twitter.com *.twimg.com *.webwinkelkeur.nl https://places.googleapis.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.pay.nl 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src bat.bing.com googleads.g.doubleclick.net pagead2.googlesyndication.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://unboundxr.nl/paynl/csp/report; report-to report-endpoint; |
| X-content-type-options | nosniff |
| X-xss-protection | 1; mode=block |
| X-frame-options | SAMEORIGIN |
| Content-encoding | gzip |
| Vary | Accept-Encoding |
| X-magento-cache-debug | MISS |
| Pragma | no-cache |
| Expires | -1 |
| Cache-control | no-store, no-cache, must-revalidate, max-age=0 |
| Accept-ranges | bytes |
Balises Meta
| Title | Unbound XR - The Virtual & Augmented Reality Expert |
|---|---|
| Robots | INDEX,FOLLOW |
| Viewport | width=device-width, initial-scale=1 |
Server nginx
Date Tue, 28 Jul 2026 19:21:21 GMT
Content-type text/html; charset=UTF-8
Content-length 159385
X-built-with Hyva Themes
Report-to {"group":"report-endpoint","max_age":10886400,"endpoints":[{"url":"https:\/\/unboundxr.nl\/paynl\/csp\/report"}]}
Content-security-policy-report-only font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com fonts.googleapis.com *.googleapis.com data: 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.fontawesome.com *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com *.webwinkelkeur.nl https://fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com *.googlesyndication.com *.twitter.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com consentcdn.cookiebot.eu td.doubleclick.net www.youtube-nocookie.com https://*.dpdconnect.nl *.twitter.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src 'self' data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com www.google-analytics.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io widgets.automizely.com widgets.automizely.io https://images.unsplash.com maps.googleapis.com maps.gstatic.com *.googleapis.com *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.roeye.com *.pay.nl *.calendly.com *.hsforms.net *.hsforms.com www.google.com www.google.nl www.facebook.com bat.bing.com px.ads.linkedin.com img.sct.eu1.usercentrics.eu *.cloudflare.com *.klarna.com *.google-analytics.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.webwinkelkeur.nl ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com https://maps.gstatic.com https://maps.googleapis.com www.googletagmanager.com blob: https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com ajax.googleapis.com fonts.googleapis.com widgets.automizely.com widgets.automizely.io https://maps.googleapis.com maps.googleapis.com maps.gstatic.com *.googleapis.com *.gstatic.com https://cdn.jsdelivr.net/npm/@ryangjchandler/spruce@2.x.x/dist/spruce.umd.js www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.googlesyndication.com *.calendly.com *.hsforms.net *.hsforms.com chimpstatic.com api.dpdconnect.nl www.googletagmanager.com consent.cookiebot.eu snap.licdn.com connect.facebook.net bat.bing.com googleads.g.doubleclick.net consentcdn.cookiebot.eu www.google.com www.gstatic.com https://*.dpdconnect.nl *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.webwinkelkeur.nl downloads.mailchimp.com *.list-manage.com https://maps.googleapis.com/maps/api/ https://places.googleapis.com/ https://examplecdn.com https://maps.googleapis.com/maps-api-v3/ https://places.googleapis.com js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com widgets.automizely.com widgets.automizely.io *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.calendly.com *.hsforms.net *.hsforms.com www.youtube-nocookie.com www.gstatic.com *.fontawesome.com *.cloudflare.com *.google.com *.twitter.com *.twimg.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.webwinkelkeur.nl downloads.mailchimp.com https://fonts.googleapis.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.automizely.com api.automizely.io https://maps.googleapis.com https://player.vimeo.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com *.google-analytics.com *.facebook.com *.facebook.net *.doubleclick.net *.googlesyndication.com *.calendly.com *.hsforms.net *.hsforms.com region1.analytics.google.com px.ads.linkedin.com consentcdn.cookiebot.eu www.youtube-nocookie.com play.google.com jnn-pa.googleapis.com *.cloudflare.com *.twitter.com *.twimg.com *.webwinkelkeur.nl https://places.googleapis.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.pay.nl 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src bat.bing.com googleads.g.doubleclick.net pagead2.googlesyndication.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://unboundxr.nl/paynl/csp/report; report-to report-endpoint;
X-content-type-options nosniff
X-xss-protection 1; mode=block
X-frame-options SAMEORIGIN
Content-encoding gzip
Vary Accept-Encoding
X-magento-cache-debug MISS
Pragma no-cache
Expires -1
Cache-control no-store, no-cache, must-revalidate, max-age=0
Accept-ranges bytes
Date Tue, 28 Jul 2026 19:21:21 GMT
Content-type text/html; charset=UTF-8
Content-length 159385
X-built-with Hyva Themes
Report-to {"group":"report-endpoint","max_age":10886400,"endpoints":[{"url":"https:\/\/unboundxr.nl\/paynl\/csp\/report"}]}
Content-security-policy-report-only font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com fonts.googleapis.com *.googleapis.com data: 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.fontawesome.com *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com *.webwinkelkeur.nl https://fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com *.googlesyndication.com *.twitter.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com consentcdn.cookiebot.eu td.doubleclick.net www.youtube-nocookie.com https://*.dpdconnect.nl *.twitter.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src 'self' data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com www.google-analytics.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io widgets.automizely.com widgets.automizely.io https://images.unsplash.com maps.googleapis.com maps.gstatic.com *.googleapis.com *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.roeye.com *.pay.nl *.calendly.com *.hsforms.net *.hsforms.com www.google.com www.google.nl www.facebook.com bat.bing.com px.ads.linkedin.com img.sct.eu1.usercentrics.eu *.cloudflare.com *.klarna.com *.google-analytics.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.webwinkelkeur.nl ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com https://maps.gstatic.com https://maps.googleapis.com www.googletagmanager.com blob: https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com ajax.googleapis.com fonts.googleapis.com widgets.automizely.com widgets.automizely.io https://maps.googleapis.com maps.googleapis.com maps.gstatic.com *.googleapis.com *.gstatic.com https://cdn.jsdelivr.net/npm/@ryangjchandler/spruce@2.x.x/dist/spruce.umd.js www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.googlesyndication.com *.calendly.com *.hsforms.net *.hsforms.com chimpstatic.com api.dpdconnect.nl www.googletagmanager.com consent.cookiebot.eu snap.licdn.com connect.facebook.net bat.bing.com googleads.g.doubleclick.net consentcdn.cookiebot.eu www.google.com www.gstatic.com https://*.dpdconnect.nl *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.webwinkelkeur.nl downloads.mailchimp.com *.list-manage.com https://maps.googleapis.com/maps/api/ https://places.googleapis.com/ https://examplecdn.com https://maps.googleapis.com/maps-api-v3/ https://places.googleapis.com js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com widgets.automizely.com widgets.automizely.io *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.calendly.com *.hsforms.net *.hsforms.com www.youtube-nocookie.com www.gstatic.com *.fontawesome.com *.cloudflare.com *.google.com *.twitter.com *.twimg.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.webwinkelkeur.nl downloads.mailchimp.com https://fonts.googleapis.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.automizely.com api.automizely.io https://maps.googleapis.com https://player.vimeo.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com *.google-analytics.com *.facebook.com *.facebook.net *.doubleclick.net *.googlesyndication.com *.calendly.com *.hsforms.net *.hsforms.com region1.analytics.google.com px.ads.linkedin.com consentcdn.cookiebot.eu www.youtube-nocookie.com play.google.com jnn-pa.googleapis.com *.cloudflare.com *.twitter.com *.twimg.com *.webwinkelkeur.nl https://places.googleapis.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.pay.nl 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src bat.bing.com googleads.g.doubleclick.net pagead2.googlesyndication.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://unboundxr.nl/paynl/csp/report; report-to report-endpoint;
X-content-type-options nosniff
X-xss-protection 1; mode=block
X-frame-options SAMEORIGIN
Content-encoding gzip
Vary Accept-Encoding
X-magento-cache-debug MISS
Pragma no-cache
Expires -1
Cache-control no-store, no-cache, must-revalidate, max-age=0
Accept-ranges bytes
Title Unbound XR - The Virtual & Augmented Reality Expert
Robots INDEX,FOLLOW
Viewport width=device-width, initial-scale=1
Og:image
Robots INDEX,FOLLOW
Viewport width=device-width, initial-scale=1
Og:image
Non-stop browsing
& internet stability
Best VPN in AdBlocking & Malware detection
& internet stability
Best VPN in AdBlocking & Malware detection
Offre limitée, ne tardez pas !:

