HTTP/1.1 200 OK
Server: nginx
Content-Type: text/html; charset=UTF-8
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Security-Policy: default-src 'self' *.edge-cdn.net; object-src www.youtube.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.analytics.edgekey.net *.edge-cdn.net s.ytimg.com *.multichannelacd.de lidl.media01.eu form.lidl.com *.lidl.com *.ccmp.eu *.lidl *.lidl.net d.adroll.mgr.consensu.org www.googleadservices.com lidlqform.omax.cz track.adform.net *.lidl-flyer.com *.google-analytics.com *.bing.com *.virtualearth.net *.googletagmanager.com tagmanager.google.com assets.zendesk.com connect.facebook.net *.cookiebot.com *.secrz.de *.google-analytics.com connect.facebook.net c.imedia.cz www.dwin1.com www.youtube.com ads.yahoo.com advdl.ammadv.it cm.g.doubleclick.net d.adroll.com s.adroll.com us-u.openx.net lidlplus-prod-api.azurewebsites.net; img-src 'self' data: lidlplusprod.blob.core.windows.net *.edge-cdn.net *.lidl *.lidl.net *.ccmp.eu *.lidl.com *.lidl-flyer.com *.google-analytics.com *.bing.com *.virtualearth.net *.osm.org *.openstreetmap.org track.adform.net www.googletagmanager.com *.doubleclick.net s-static.ak.facebook.com assets.zendesk.com *.secrz.de *.google-analytics.com www.facebook.com c.imedia.cz x.bidswitch.net advdl.ammadv.it d.adroll.com idsync.rlcdn.com ib.adnxs.com stats.g.doubleclick.net lidlplusstoragestaging.blob.core.windows.net lidlplusstaticcontentpro.blob.core.windows.net; style-src 'self' 'unsafe-inline' form.lidl.com fonts.googleapis.com *.bing.com assets.zendesk.com *.secrz.de; font-src 'self' 'unsafe-inline' form.lidl.com data: themes.googleusercontent.com fonts.gstatic.com; frame-src 'self' https: 'unsafe-inline'; connect-src 'self' content.lidlplus.com *.video-cdn.net *.analytics.edgekey.net *.edge-cdn.net *.multichannelacd.de lidl.media01.eu form.lidl.com *.lidl *.test *.lidl.net *.lidl.com *.bing.com *.ccmp.eu *.virtualearth.net *.osm.org *.openstreetmap.org *.secrz.de *.google-analytics.com lidlplus-uat-api.azurewebsites.net lidlplus-prod-api.azurewebsites.net; frame-ancestors 'self' *.lidl *.ccmp.eu *.lidl.com *.test *.lidl.net *.bing.com *.googletagmanager.com *.secrz.de *.google-analytics.com *.poi-service.de *.lidl.ch website-lidl-account-dev.azurewebsites.net accounts-stg.lidl.com accounts-qa.lidl.com accounts-uat.lidl.com accounts.lidl.com;
Content-Encoding: gzip
X-Varnish: 42993559 42346842
X-Served-By: wsv-09
Accept-Ranges: bytes
Expires: Wed, 24 Jun 2020 03:28:03 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Wed, 24 Jun 2020 03:28:03 GMT
Content-Length: 25339
Connection: keep-alive
Vary: Accept-Encoding
Strict-Transport-Security: max-age=15768000