HTTP/1.1 200 OK
Server: nginx
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=0, private, must-revalidate
Set-Cookie: eteleon=j2uueopmtlljk3dioccut7kjj5; path=/; samesite=lax; secure; HttpOnly
Cache-Control: no-cache, private
Date: Sat, 13 Jun 2020 15:47:27 GMT
ETag: "0977906283efdc8c31d0f79254f8d46c"
Content-Security-Policy: default-src 'self'; object-src 'self'; base-uri 'self'; img-src https: data:; font-src https:; form-action 'self' https://www.facebook.com/tr/ https://connect.facebook.net/log/error https://chat.eteleon.de; connect-src 'self' https://widgets.trustedshops.com https://gw1.api.trustedshops.com https://cdn1.api.trustedshops.com https://cdn2.spatialbuzz.com https://tags.tiqcdn.com https://collect.tealiumiq.com/event https://collect-eu-central-1.tealiumiq.com https://www.google.com https://www.googleadservices.com https://cts.communicationads.net https://bat.bing.com https://connect.facebook.net https://www.facebook.com https://trck.spoteffects.net https://tracking.drillisch.de https://www.dwin1.com https://www.awin1.com https://www7.smartadserver.com https://dpm.demdex.net https://the.sciencebehindecommerce.com https://chat.eteleon.de https://stats.eteleon.de https://api.trustedshops.com https://trustbadge.api.etrusted.com/shop/X37852C187578EB2357B3937AF0ABF16A/memberservice https://shops-si.trustedshops.com/shops/X37852C187578EB2357B3937AF0ABF16A https://imagepool.eteleon.de; script-src 'strict-dynamic' 'nonce-10f6194adc71aff1f237f87c4cd0b5ed' 'nonce-df62274ede7501c016fa6ae0d0cf7c6a' 'nonce-1a33ed572016b203023c0e8e973d7361' 'nonce-236a6b70b1ad68314fa5f97179305dd0' 'nonce-c818c61278b69527aa56bb434c555a9a' 'nonce-cc8937d5b5307b0d3040f2032f3b48d0' 'self' https: 'report-sample'; style-src 'self' 'unsafe-inline' https: data:; frame-ancestors 'self' https://paketshop.myhermes.de; frame-src https://1and1internetag.demdex.net https://www.facebook.com https://tags.tiqcdn.com https://cdn2.spatialbuzz.com https://bid.g.doubleclick.net https://tpc.googlesyndication.com https://www.youtube-nocookie.com https://www.awin1.com https://paketshop.myhermes.de; child-src https://www.youtube.com https://cdn2.spatialbuzz.com https://trck.spoteffects.net https://www.googleadservices.com https://www.facebook.com https://tags.tiqcdn.com https://ad13.adfarm1.adition.com; upgrade-insecure-requests; block-all-mixed-content; report-uri /csp-reports
Content-Encoding: gzip
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Access-Control-Allow-Origin: *