HTTP/1.1 200 OK
Date: Fri, 17 May 2019 23:42:40 GMT
Server: Apache/2.4.25 (Debian)
Content-Security-Policy: default-src 'self' aax-eu.amazon-adsystem.com *.google-analytics.com *.doubleclick.net; style-src 'self' 'unsafe-inline' https://cloud.webtype.com https://fonts.googleapis.com vjs.zencdn.net; font-src 'self' https://cloud.webtype.com https://fonts.gstatic.com data:; img-src 'self' shoplogos.commerce-connector.de maps.gstatic.com maps.googleapis.com pls.webtype.com *.google-analytics.com data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' connect.facebook.net maps.googleapis.com secure.pay1.de *.google-analytics.com vjs.zencdn.net; frame-src 'self' 'unsafe-inline' 'unsafe-eval'  aax-eu.amazon-adsystem.com secure.pay1.de *.youtube.com player.vimeo.com;
Strict-Transport-Security: max-age=15768000;includeSubDomains
X-DNS-Prefetch-Control: off
X-Content-Type-Options: nosniff
X-Frame-Options: sameorigin
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: skin=website; path=/
Set-Cookie: lang[website]=de; path=/
Set-Cookie: lang[checkout]=de; path=/
Set-Cookie: lang[mobile]=de; path=/
Set-Cookie: lang[mobile_checkout]=de; path=/
Set-Cookie: country=de; path=/
Set-Cookie: session_bren=4q1m1rnjcpe22n9limc6rp26r1; expires=Mon, 01-Oct-2068 01:25:20 GMT; Max-Age=1558143760; path=/
Vary: Accept-Encoding
X-UA-Compatible: IE=edge
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: frame-ancestors 'self'
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: no-transform
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8