HTTP/1.1 200 OK
Date: Sat, 18 Apr 2020 23:45:40 GMT
Server: Apache
Vary: Referer,User-Agent,Accept-Encoding
Set-Cookie: SES_SESS-S=AVMprjePt_!XubdMpKcqrqf__i7q_Fd0Q!DeL5oESNnMpnyjZLaLAXJafvWyiA3E0gBS; Path=/; Secure; HttpOnly
Content-Length: 141068
Content-Language: de
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Cache-Control: max-age=0
Expires: Sat, 18 Apr 2020 23:45:40 GMT
Content-Security-Policy: default-src 'self' *.dynamics.com *.google-analytics.com; style-src 'self' 'unsafe-inline'  *.typekit.net *.googleapis.com *.google.com *.ytimg.com *.aculo.us; img-src 'self' data: *.dynamics.com *.google.de *.google.com *.linkedin.com *.doubleclick.net *.googletagmanager.com *.google-analytics.com *.typekit.net *.gstatic.com yt3.ggpht.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.azureedge.net *.dynamics.com *.google.de *.gstatic.com *.google-analytics.com *.youtube.com *.ytimg.com *.google.com snap.licdn.com optimize.google.com *.googletagmanager.com *.aculo.us; font-src 'self' tagmanager.google.com *.typekit.net *.gstatic.com; frame-src 'self' *.dynamics.com *.youtube-nocookie.com *.vimeo.com *.google.com
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-UA-Compatible: IE=edge
Referrer-Policy: same-origin
Feature-Policy: autoplay 'self'; camera 'self'; display-capture 'self'; document-domain 'self'; encrypted-media 'self'; fullscreen 'self'; geolocation 'self'; microphone 'self'; midi 'self'; payment 'self'; vr 'self'; xr 'self'
Content-Type: text/html; charset=utf-8