HTTP/1.1 200 OK
Content-Security-Policy: default-src 'self' prod.services.carglass.de *.prod.services.carglass.de 'unsafe-eval' 'unsafe-inline' data: blob: *.carglass.de *.clicktale.com *.clicktale.net *.cloudfront.net *.doubleclick.net *.gstatic.com *.optimizely.com optimizely.s3.amazonaws.com cdn-assets-prod.s3.amazonaws.com *.qualaroo.com bat.bing.com *.clicktale.com *.clicktale.net fonts.googleapis.com maps.googleapis.com optimizely.github.io optimizely.s3.amazonaws.com tagmanager.google.com www.google-analytics.com www.google.com www.google.de www.googleadservices.com www.googletagmanager.com www.youtube.com;
Content-Type: text/html; charset=utf-8
Date: Sat, 18 May 2019 23:57:33 GMT
ETag: W/"ed1a1-fadcTLRRUE469b1BjRS6qp7T/58"
Referrer-Policy: same-origin
Server: nginx
Set-Cookie: tncSession=6401874a-4aab-49c6-804d-0a02374a4ab2; Max-Age=86400; Path=/; Expires=Sun, 19 May 2019 23:57:31 GMT; Secure
Strict-Transport-Security: max-age=31536000
Vary: Accept-Encoding
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 971169
Connection: keep-alive