HTTP/1.1 200 OK
Date: Wed, 31 Jul 2019 13:37:09 GMT
Server: Apache
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: PHPSESSID=nlpsl496jm7kv1vmfe6to0asot; path=/
Set-Cookie: language=0; path=/; secure; HttpOnly
Set-Cookie: sid=nlpsl496jm7kv1vmfe6to0asot; path=/; secure; HttpOnly
Set-Cookie: sid_key=oxid; path=/; secure; HttpOnly
Content-Security-Policy:  default-src 'self'; connect-src 'self' https://www.sandbox.paypal.com/ https://www.paypal.com/ https://stats.g.doubleclick.net/; font-src 'self' data: https://fonts.gstatic.com/ https://tagmanager.google.com/; frame-src 'self' https://www.sandbox.paypal.com/ https://www.paypal.com/ https://www.google.com/ https://accounts.google.com/ https://e.issuu.com/; img-src 'self' data: https://img.sportschrank.de/ https://www.google.com/ https://www.google.de/ https://www.google-analytics.com/ https://csi.gstatic.com/ https://ssl.gstatic.com/ https://www.gstatic.com/ https://stats.g.doubleclick.net/ https://sportschrankcms.eleven2.de/ https://www.mollie.com/ https://media.giphy.com/ https://www.paypalobjects.com/; object-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.sandbox.paypal.com/ https://www.paypalobjects.com/ https://www.googletagmanager.com/ https://tagmanager.google.com/ https://www.google-analytics.com/ https://apis.google.com/ https://ajax.googleapis.com/ https://sportschrankcms.eleven2.de/ https://cdnjs.cloudflare.com/; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com/ https://sportschrankcms.eleven2.de/ https://tagmanager.google.com/; 
Strict-Transport-Security: max-age=15768000
X-Content-Type-Options: nosniff
X-Frame-Options: sameorigin
X-XSS-Protection: 1; mode=block
Upgrade: h2
Connection: Upgrade
Vary: Accept-Encoding
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8