HTTP/1.1 200 OK
Server: nginx
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Set-Cookie: PHPSESSID=c4f6sugb8srcpt0uih2a2769vu; path=/; secure; HttpOnly; SameSite=lax
Cache-Control: max-age=0, must-revalidate, private
Date: Thu, 12 Mar 2020 22:13:20 GMT
Link: </assets/legacy/below.css?a3ftwt4>; rel="preload"; as="style",</assets/legacy/scripts.js?a3ftwt4>; rel="preload"; as="script"
Content-Security-Policy: upgrade-insecure-requests; default-src 'none'; font-src 'self'; base-uri 'none'; media-src * blob 'self'; form-action 'self' https://r.girogate.de https://www.sandbox.paypal.com https://www.paypal.com https://hooks.stripe.com https://stripe.com; frame-ancestors 'self'; style-src 'self' 'nonce-507cb8fa3a1778023c453490d494053c' 'sha256-47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=' 'sha256-OTeu7NEHDo6qutIWo0F2TmYrDhsKWCzrUgGoxxHGJ8o='; script-src 'nonce-507cb8fa3a1778023c453490d494053c' 'strict-dynamic' 'unsafe-inline' https:; frame-src 'self' https://js.stripe.com https://hooks.stripe.com; connect-src 'self' https://stats.g.doubleclick.net https://www.google-analytics.com https://fonts.googleapis.com https://api.stripe.com https://capture.trackjs.com; img-src 'self' https://googleads.g.doubleclick.net https://www.google.com https://www.google.de https://www.google-analytics.com https://usage.trackjs.com https://stats.g.doubleclick.net; object-src 'none';
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Referrer-Policy: strict-origin
Feature-Policy: accelerometer 'none';ambient-light-sensor 'none';autoplay 'self';camera 'none';encrypted-media 'none';fullscreen 'none';geolocation 'none';gyroscope 'none';magnetometer 'none';microphone 'none';midi 'none';payment 'self';picture-in-picture 'none';speaker 'self';sync-xhr *;usb 'none';vr 'none'
Expires: Thu, 12 Mar 2020 22:13:20 GMT