Checking results for: unboundxr.co.uk
-
unboundxr.co.uk is ONLINE
Additional info for https://unboundxr.co.uk
Technical Information
| HTTP Status Code | 200 |
|---|---|
| HTTP Version | HTTP/1.1 |
| HTTPS | ✔ Available |
| IP Address | 94.76.240.71 |
| Server Software | nginx |
| Compression | gzip |
| ℹ 🔵 Missing HSTS | HTTP Strict Transport Security is not configured. Recommended for HTTPS sites. |
| ℹ 🔵 Missing Content Security Policy | CSP is not configured. It helps prevent XSS attacks and content injection. |
HTTP Status Code 200
HTTP Version HTTP/1.1
HTTPS ✔ Available
IP Address 94.76.240.71
Server Software nginx
Compression gzip
ℹ 🔵 Missing HSTS HTTP Strict Transport Security is not configured. Recommended for HTTPS sites.
ℹ 🔵 Missing Content Security Policy CSP is not configured. It helps prevent XSS attacks and content injection.
HTTP Version HTTP/1.1
HTTPS ✔ Available
IP Address 94.76.240.71
Server Software nginx
Compression gzip
ℹ 🔵 Missing HSTS HTTP Strict Transport Security is not configured. Recommended for HTTPS sites.
ℹ 🔵 Missing Content Security Policy CSP is not configured. It helps prevent XSS attacks and content injection.
Performance
| DNS Lookup | 9.4 ms |
|---|---|
| TCP Connect | 28 ms |
| TLS Handshake | 25 ms |
| Time To First Byte (TTFB) | 494.6 ms |
| Content Download | 58.1 ms |
| Total Response Time | 552.7 ms |
DNS Lookup 9.4 ms
TCP Connect 28 ms
TLS Handshake 25 ms
Time To First Byte (TTFB) 494.6 ms
Content Download 58.1 ms
Total Response Time 552.7 ms
TCP Connect 28 ms
TLS Handshake 25 ms
Time To First Byte (TTFB) 494.6 ms
Content Download 58.1 ms
Total Response Time 552.7 ms
Security
| HTTPS | ✔ Enabled |
|---|---|
| HSTS | ✘ Not configured |
| CSP | ⚠ Not configured |
| X-Frame-Options | ✔ SAMEORIGIN |
| X-Content-Type-Options | ✔ nosniff |
| HTTP/2 | ⚠ HTTP/1.1 |
HTTPS ✔ Enabled
HSTS ✘ Not configured
CSP ⚠ Not configured
X-Frame-Options ✔ SAMEORIGIN
X-Content-Type-Options ✔ nosniff
HTTP/2 ⚠ HTTP/1.1
HSTS ✘ Not configured
CSP ⚠ Not configured
X-Frame-Options ✔ SAMEORIGIN
X-Content-Type-Options ✔ nosniff
HTTP/2 ⚠ HTTP/1.1
SEO Quick Check
| Title | Unbound XR - The Virtual & Augmented Reality Expert |
|---|---|
| Robots Meta | INDEX,FOLLOW |
| Open Graph Image | https://unboundxr.co.uk/static/v... |
Title Unbound XR - The Virtual & Augmented Reality Expert
Robots Meta INDEX,FOLLOW
Open Graph Image https://unboundxr.co.uk/static/v...
Robots Meta INDEX,FOLLOW
Open Graph Image https://unboundxr.co.uk/static/v...
Detected Technologies
| Technology | jQuery Google Analytics Google Tag Manager Cloudflare Nginx PHP Node.js |
|---|
Technology jQuery Google Analytics Google Tag Manager Cloudflare Nginx PHP Node.js
HTTP Headers
| Server | nginx |
|---|---|
| Date | Tue, 28 Jul 2026 01:35:06 GMT |
| Content-type | text/html; charset=UTF-8 |
| Content-length | 159259 |
| X-built-with | Hyva Themes |
| Report-to | {"group":"report-endpoint","max_age":10886400,"endpoints":[{"url":"http:\/\/localhost\/paynl\/csp\/report"}]} |
| Content-security-policy-report-only | font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com fonts.googleapis.com *.googleapis.com data: 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.fontawesome.com *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com *.webwinkelkeur.nl https://fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com *.googlesyndication.com *.twitter.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com consentcdn.cookiebot.eu td.doubleclick.net www.youtube-nocookie.com https://*.dpdconnect.nl *.twitter.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src 'self' data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com www.google-analytics.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io widgets.automizely.com widgets.automizely.io https://images.unsplash.com maps.googleapis.com maps.gstatic.com *.googleapis.com *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.roeye.com *.pay.nl *.calendly.com *.hsforms.net *.hsforms.com www.google.com www.google.nl www.facebook.com bat.bing.com px.ads.linkedin.com img.sct.eu1.usercentrics.eu *.cloudflare.com *.klarna.com *.google-analytics.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.webwinkelkeur.nl ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com https://maps.gstatic.com https://maps.googleapis.com www.googletagmanager.com blob: https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com ajax.googleapis.com fonts.googleapis.com widgets.automizely.com widgets.automizely.io https://maps.googleapis.com maps.googleapis.com maps.gstatic.com *.googleapis.com *.gstatic.com https://cdn.jsdelivr.net/npm/@ryangjchandler/spruce@2.x.x/dist/spruce.umd.js www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.googlesyndication.com *.calendly.com *.hsforms.net *.hsforms.com chimpstatic.com api.dpdconnect.nl www.googletagmanager.com consent.cookiebot.eu snap.licdn.com connect.facebook.net bat.bing.com googleads.g.doubleclick.net consentcdn.cookiebot.eu www.google.com www.gstatic.com https://*.dpdconnect.nl *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.webwinkelkeur.nl downloads.mailchimp.com *.list-manage.com https://maps.googleapis.com/maps/api/ https://places.googleapis.com/ https://examplecdn.com https://maps.googleapis.com/maps-api-v3/ https://places.googleapis.com js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com widgets.automizely.com widgets.automizely.io *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.calendly.com *.hsforms.net *.hsforms.com www.youtube-nocookie.com www.gstatic.com *.fontawesome.com *.cloudflare.com *.google.com *.twitter.com *.twimg.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.webwinkelkeur.nl downloads.mailchimp.com https://fonts.googleapis.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.automizely.com api.automizely.io https://maps.googleapis.com https://player.vimeo.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com *.google-analytics.com *.facebook.com *.facebook.net *.doubleclick.net *.googlesyndication.com *.calendly.com *.hsforms.net *.hsforms.com region1.analytics.google.com px.ads.linkedin.com consentcdn.cookiebot.eu www.youtube-nocookie.com play.google.com jnn-pa.googleapis.com *.cloudflare.com *.twitter.com *.twimg.com *.webwinkelkeur.nl https://places.googleapis.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.pay.nl 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src bat.bing.com googleads.g.doubleclick.net pagead2.googlesyndication.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri http://localhost/paynl/csp/report; report-to report-endpoint; |
| X-content-type-options | nosniff |
| X-xss-protection | 1; mode=block |
| X-frame-options | SAMEORIGIN |
| Content-encoding | gzip |
| Vary | Accept-Encoding |
| X-magento-cache-debug | MISS |
| Pragma | no-cache |
| Expires | -1 |
| Cache-control | no-store, no-cache, must-revalidate, max-age=0 |
| Accept-ranges | bytes |
Meta Tags
| Title | Unbound XR - The Virtual & Augmented Reality Expert |
|---|---|
| Robots | INDEX,FOLLOW |
| Viewport | width=device-width, initial-scale=1 |
Server nginx
Date Tue, 28 Jul 2026 01:35:06 GMT
Content-type text/html; charset=UTF-8
Content-length 159259
X-built-with Hyva Themes
Report-to {"group":"report-endpoint","max_age":10886400,"endpoints":[{"url":"http:\/\/localhost\/paynl\/csp\/report"}]}
Content-security-policy-report-only font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com fonts.googleapis.com *.googleapis.com data: 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.fontawesome.com *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com *.webwinkelkeur.nl https://fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com *.googlesyndication.com *.twitter.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com consentcdn.cookiebot.eu td.doubleclick.net www.youtube-nocookie.com https://*.dpdconnect.nl *.twitter.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src 'self' data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com www.google-analytics.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io widgets.automizely.com widgets.automizely.io https://images.unsplash.com maps.googleapis.com maps.gstatic.com *.googleapis.com *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.roeye.com *.pay.nl *.calendly.com *.hsforms.net *.hsforms.com www.google.com www.google.nl www.facebook.com bat.bing.com px.ads.linkedin.com img.sct.eu1.usercentrics.eu *.cloudflare.com *.klarna.com *.google-analytics.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.webwinkelkeur.nl ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com https://maps.gstatic.com https://maps.googleapis.com www.googletagmanager.com blob: https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com ajax.googleapis.com fonts.googleapis.com widgets.automizely.com widgets.automizely.io https://maps.googleapis.com maps.googleapis.com maps.gstatic.com *.googleapis.com *.gstatic.com https://cdn.jsdelivr.net/npm/@ryangjchandler/spruce@2.x.x/dist/spruce.umd.js www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.googlesyndication.com *.calendly.com *.hsforms.net *.hsforms.com chimpstatic.com api.dpdconnect.nl www.googletagmanager.com consent.cookiebot.eu snap.licdn.com connect.facebook.net bat.bing.com googleads.g.doubleclick.net consentcdn.cookiebot.eu www.google.com www.gstatic.com https://*.dpdconnect.nl *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.webwinkelkeur.nl downloads.mailchimp.com *.list-manage.com https://maps.googleapis.com/maps/api/ https://places.googleapis.com/ https://examplecdn.com https://maps.googleapis.com/maps-api-v3/ https://places.googleapis.com js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com widgets.automizely.com widgets.automizely.io *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.calendly.com *.hsforms.net *.hsforms.com www.youtube-nocookie.com www.gstatic.com *.fontawesome.com *.cloudflare.com *.google.com *.twitter.com *.twimg.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.webwinkelkeur.nl downloads.mailchimp.com https://fonts.googleapis.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.automizely.com api.automizely.io https://maps.googleapis.com https://player.vimeo.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com *.google-analytics.com *.facebook.com *.facebook.net *.doubleclick.net *.googlesyndication.com *.calendly.com *.hsforms.net *.hsforms.com region1.analytics.google.com px.ads.linkedin.com consentcdn.cookiebot.eu www.youtube-nocookie.com play.google.com jnn-pa.googleapis.com *.cloudflare.com *.twitter.com *.twimg.com *.webwinkelkeur.nl https://places.googleapis.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.pay.nl 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src bat.bing.com googleads.g.doubleclick.net pagead2.googlesyndication.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri http://localhost/paynl/csp/report; report-to report-endpoint;
X-content-type-options nosniff
X-xss-protection 1; mode=block
X-frame-options SAMEORIGIN
Content-encoding gzip
Vary Accept-Encoding
X-magento-cache-debug MISS
Pragma no-cache
Expires -1
Cache-control no-store, no-cache, must-revalidate, max-age=0
Accept-ranges bytes
Date Tue, 28 Jul 2026 01:35:06 GMT
Content-type text/html; charset=UTF-8
Content-length 159259
X-built-with Hyva Themes
Report-to {"group":"report-endpoint","max_age":10886400,"endpoints":[{"url":"http:\/\/localhost\/paynl\/csp\/report"}]}
Content-security-policy-report-only font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com fonts.googleapis.com *.googleapis.com data: 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.fontawesome.com *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com *.webwinkelkeur.nl https://fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com *.googlesyndication.com *.twitter.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com consentcdn.cookiebot.eu td.doubleclick.net www.youtube-nocookie.com https://*.dpdconnect.nl *.twitter.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src 'self' data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com www.google-analytics.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io widgets.automizely.com widgets.automizely.io https://images.unsplash.com maps.googleapis.com maps.gstatic.com *.googleapis.com *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.roeye.com *.pay.nl *.calendly.com *.hsforms.net *.hsforms.com www.google.com www.google.nl www.facebook.com bat.bing.com px.ads.linkedin.com img.sct.eu1.usercentrics.eu *.cloudflare.com *.klarna.com *.google-analytics.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.webwinkelkeur.nl ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com https://maps.gstatic.com https://maps.googleapis.com www.googletagmanager.com blob: https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com ajax.googleapis.com fonts.googleapis.com widgets.automizely.com widgets.automizely.io https://maps.googleapis.com maps.googleapis.com maps.gstatic.com *.googleapis.com *.gstatic.com https://cdn.jsdelivr.net/npm/@ryangjchandler/spruce@2.x.x/dist/spruce.umd.js www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.googlesyndication.com *.calendly.com *.hsforms.net *.hsforms.com chimpstatic.com api.dpdconnect.nl www.googletagmanager.com consent.cookiebot.eu snap.licdn.com connect.facebook.net bat.bing.com googleads.g.doubleclick.net consentcdn.cookiebot.eu www.google.com www.gstatic.com https://*.dpdconnect.nl *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.webwinkelkeur.nl downloads.mailchimp.com *.list-manage.com https://maps.googleapis.com/maps/api/ https://places.googleapis.com/ https://examplecdn.com https://maps.googleapis.com/maps-api-v3/ https://places.googleapis.com js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com widgets.automizely.com widgets.automizely.io *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.calendly.com *.hsforms.net *.hsforms.com www.youtube-nocookie.com www.gstatic.com *.fontawesome.com *.cloudflare.com *.google.com *.twitter.com *.twimg.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.webwinkelkeur.nl downloads.mailchimp.com https://fonts.googleapis.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.automizely.com api.automizely.io https://maps.googleapis.com https://player.vimeo.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com *.google-analytics.com *.facebook.com *.facebook.net *.doubleclick.net *.googlesyndication.com *.calendly.com *.hsforms.net *.hsforms.com region1.analytics.google.com px.ads.linkedin.com consentcdn.cookiebot.eu www.youtube-nocookie.com play.google.com jnn-pa.googleapis.com *.cloudflare.com *.twitter.com *.twimg.com *.webwinkelkeur.nl https://places.googleapis.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.pay.nl 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src bat.bing.com googleads.g.doubleclick.net pagead2.googlesyndication.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri http://localhost/paynl/csp/report; report-to report-endpoint;
X-content-type-options nosniff
X-xss-protection 1; mode=block
X-frame-options SAMEORIGIN
Content-encoding gzip
Vary Accept-Encoding
X-magento-cache-debug MISS
Pragma no-cache
Expires -1
Cache-control no-store, no-cache, must-revalidate, max-age=0
Accept-ranges bytes
Title Unbound XR - The Virtual & Augmented Reality Expert
Robots INDEX,FOLLOW
Viewport width=device-width, initial-scale=1
Og:image
Robots INDEX,FOLLOW
Viewport width=device-width, initial-scale=1
Og:image
Non-stop browsing
& internet stability
Best VPN in AdBlocking & Malware detection
& internet stability
Best VPN in AdBlocking & Malware detection
Offer ends in:
