HTTP/1.1 200 OK
Server: nginx
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=0, private, must-revalidate
Set-Cookie: deutschlandsim=j0gn1gn2aq88bi2mmn5928dmk7; path=/; samesite=lax; secure; HttpOnly
Cache-Control: no-cache, private
Date: Thu, 25 Jun 2020 02:32:48 GMT
ETag: "2290ebec527c363dfcc0cf0dcb35d83f"
Content-Security-Policy: default-src https: data: 'unsafe-inline' 'unsafe-eval' always; upgrade-insecure-requests
Content-Security-Policy-Report-Only: default-src 'self'; object-src 'self'; base-uri 'self'; img-src https: data:; font-src https:; form-action 'self' https://www.facebook.com/tr/ https://connect.facebook.net/log/error https://chat.deutschlandsim.de; connect-src 'self' https://widgets.trustedshops.com https://gw1.api.trustedshops.com https://cdn1.api.trustedshops.com https://cdn2.spatialbuzz.com https://tags.tiqcdn.com https://collect.tealiumiq.com/event https://collect-eu-central-1.tealiumiq.com https://www.google.com https://www.googleadservices.com https://cts.communicationads.net https://bat.bing.com https://connect.facebook.net https://www.facebook.com https://trck.spoteffects.net https://tracking.drillisch.de https://www.dwin1.com https://www.awin1.com https://www7.smartadserver.com https://dpm.demdex.net https://the.sciencebehindecommerce.com https://chat.deutschlandsim.de https://stats.deutschlandsim.de https://imagepool.deutschlandsim.de; script-src 'strict-dynamic' 'nonce-779e77a0150c0d67a31d58b51fd5b5f1' 'nonce-21e5e8bbc0c23638d4a2fd5ba9e38ee4' 'nonce-1d158efba1119e8ba0abdc136b8dec15' 'nonce-f7896c38802c02b0c7332ce6b66bb7a9' 'self' https: 'report-sample'; style-src 'self' 'unsafe-inline' https: data:; frame-ancestors 'self' https://paketshop.myhermes.de; frame-src https://1and1internetag.demdex.net https://www.facebook.com https://tags.tiqcdn.com https://cdn2.spatialbuzz.com https://bid.g.doubleclick.net https://tpc.googlesyndication.com https://www.youtube-nocookie.com https://www.awin1.com https://paketshop.myhermes.de; child-src https://www.youtube.com https://cdn2.spatialbuzz.com https://trck.spoteffects.net https://www.googleadservices.com https://www.facebook.com https://tags.tiqcdn.com https://ad13.adfarm1.adition.com; upgrade-insecure-requests; block-all-mixed-content; report-uri /csp-reports
Content-Encoding: gzip
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Access-Control-Allow-Origin: *