HTTP/1.1 200 OK
Date: Tue, 08 Dec 2020 10:49:30 GMT
Server: Apache
Feature-Policy: accelerometer 'none'; camera 'none'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; payment 'none'; usb 'none'
Strict-Transport-Security: max-age=31536000; includeSubDomains
Expect-CT: max-age=0
Referrer-Policy: no-referrer-when-downgrade
Content-Security-Policy: default-src 'self' *.facebook.com *.googleapis.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.youtube.com *.doubleclick.net *.googletagmanager.com *.facebook.net *.facebook.com *.googleadservices.com *.google-analytics.com *.paypal.com *.paypalobjects.com *.google.com *.googleapis.com *.gstatic.com; style-src 'self' 'unsafe-inline' *.paypalobjects.com *.google.com *.googleapis.com *.gstatic.com; img-src 'self' data: *.paypal.com *.google-analytics.com *.google.com *.googleapis.com *.gstatic.com *.google.de *.googletagmanager.com *.facebook.com *.doubleclick.net; frame-src https:
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1
X-Content-Type-Options: nosniff
Set-Cookie: cookie_test=please_accept_for_session; expires=Thu, 07-Jan-2021 10:49:30 GMT; Max-Age=2592000; path=/; domain=www.bachflohkrebse.de
Upgrade: h2,h2c
Connection: Upgrade
Cache-Control: max-age=1, private, must-revalidate
Expires: Tue, 08 Dec 2020 10:49:31 GMT
Vary: Accept-Encoding
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-15