| Server | Apache |
| X-Content-Type-Options | nosniff |
| X-Xss-Protection | 1; mode=block |
| Strict-Transport-Security | max-age=2592000; includeSubDomains; preload |
| Expires | Thu, 19 Nov 1981 08:52:00 GMT |
| Cache-Control | no-store, no-cache, must-revalidate, post-check=0, pre-check=0 |
| Pragma | no-cache |
| Content-Encoding | gzip |
| Vary | Accept-Encoding,User-Agent |
| Referrer-Policy | origin-when-cross-origin |
| Content-Security-Policy | child-src *.vimeo.com cby.also.com *.saferpay.com *.vimeocdn.com *.addthis.com masteradmin2.es-shops.de *.webtrends.com *.dailymotion.com *.hotjar.com *.ytimg.com *.webtrendslive.com www.google.com 'self' 'unsafe-inline' *.youtube.com *.skrill.com *.facebook.net *.commerzfinanz.com; connect-src https://graylog.hotjar.com:12443 *.addthis.com *.hotjar.com wss://*.hotjar.com *.pingdom.net 'self' *.trustedshops.com; default-src 'self'; font-src fonts.gstatic.com *.trustedshops.com 'self'; form-action https://www.paypal.com 'self'; img-src https://gzhls.at *.webtrends.com *.pingdom.net *.copmedia.de http://*.electronicsales.de *.geizkragen.de *.actebis-images.com img.idealo.com actebis-images.com *.electronicsales-mediaserver.de *.gzhls.at img.billiger.de *.cnetcontent.com *.electronicsales.de https://cdn.cnetcontent.com medien.shopwelt.de *.paypalobjects.com images.ep-es.com http://content.copmedia.de *.webtrendslive.com data: 'self' 'unsafe-inline' *.google-analytics.com *.facebook.com stats.g.doubleclick.net https://cdn.cnetcontent.com; media-src 'self'; script-src *.addthisedge.com *.webtrendslive.com rum-static.pingdom.net *.saferpay.com *.cnetcontent.com https://code.jquery.com *.hotjar.com https://cdnjs.cloudflare.com https://maxcdn.bootstrapcdn.com *.addthis.com https://code.highcharts.com https://cdn.cnetcontent.com *.webtrends.com 'self' 'unsafe-inline' 'unsafe-eval' *.googletagmanager.com *.google-analytics.com *.trustedshops.com *.skrill.com *.facebook.net *.commerzfinanz.com; style-src *.googleapis.com https://cdn.cnetcontent.com *.cnetcontent.com 'self' 'unsafe-inline' *.trustedshops.com https://cdn.cnetcontent.com |
| X-Content-Security-Policy | child-src *.hotjar.com *.webtrends.com www.google.com cby.also.com *.saferpay.com *.webtrendslive.com *.addthis.com masteradmin2.es-shops.de 'self' 'unsafe-inline' *.youtube.com *.skrill.com *.facebook.net *.commerzfinanz.com; connect-src *.hotjar.com *.pingdom.net wss://*.hotjar.com https://graylog.hotjar.com:12443 *.addthis.com 'self' *.trustedshops.com; default-src 'self' 'unsafe-inline'; font-src fonts.gstatic.com *.trustedshops.com 'self'; form-action https://www.paypal.com 'self'; img-src *.electronicsales.de img.billiger.de *.cnetcontent.com medien.shopwelt.de images.ep-es.com http://content.copmedia.de *.webtrendslive.com https://gzhls.at *.webtrends.com *.pingdom.net *.copmedia.de *.geizkragen.de http://*.electronicsales.de *.actebis-images.com img.idealo.com actebis-images.com *.gzhls.at data: 'self' 'unsafe-inline' *.google-analytics.com *.facebook.com stats.g.doubleclick.net; media-src 'self'; script-src https://cdnjs.cloudflare.com *.webtrends.com https://maxcdn.bootstrapcdn.com *.addthis.com https://code.highcharts.com *.webtrendslive.com *.addthisedge.com rum-static.pingdom.net *.saferpay.com *.cnetcontent.com https://code.jquery.com *.hotjar.com 'self' 'unsafe-inline' 'unsafe-eval' *.googletagmanager.com *.google-analytics.com *.trustedshops.com *.skrill.com *.facebook.net *.commerzfinanz.com; style-src *.googleapis.com *.cnetcontent.com 'self' 'unsafe-inline' *.trustedshops.com |
| Keep-Alive | timeout=5, max=100 |
| Connection | Keep-Alive |
| Transfer-Encoding | chunked |
| Content-Type | text/html; charset=UTF-8 |