HTTP/1.1 200 OK
Cache-Control: no-cache, no-store
Pragma: no-cache
Content-Type: text/html; charset=utf-8
Expires: -1
Vary: User-Agent, Accept-Encoding
Strict-Transport-Security: max-age = 31536000; includeSubDomains; preload
Content-Security-Policy: frame-ancestors 'self' 
Set-Cookie: headandshoulders_de#lang=de-DE; path=/; secure; HttpOnly
Set-Cookie: ASP.NET_SessionId=ooxq2vjgtnk2mxoko4m5xzvw; path=/; secure; HttpOnly
X-Frame-Options: SAMEORIGIN
Set-Cookie: __CSRFCOOKIE=nAQbPTSbuD5QHNGtIU2RbJcA9gHgeD71gMYVbXgbmEy1uIg6nitrcwZQx9EPavfyDqz9RCBnmZoJ; path=/; secure; HttpOnly
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Origin: *
X-Frames-Options: SAMEORIGIN
X-UA-Compatible: IE=edge
X-Server: SCCDH1
X-Xss-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Date: Fri, 07 Jun 2019 17:20:02 GMT
Set-Cookie: session-id=rd10o00000000000000000000ffff0a680815o8645; path=/; Httponly; Secure
Set-Cookie: TS0112e387=019208dba6fd4b59df54cc7d58d34b052f293139a1453a851c9b0b0275984a811985bd681c44b40f4c26103770ffc33e49fbbf51b0698367347bbcc9acf8f0aa087a222e3be560d5a5dfa7877dc7f2dd7fc7cff004af9a3169f7193928586d6e2c4900510429dcc212fa9a550d1353d4813368396f; Path=/; Secure; HTTPOnly
Transfer-Encoding: chunked