Content-Security-Policy: default-src 'self'; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.dortex.de https://piwik.uscreen.net https://www.youtube.com https://s.ytimg.com https://www.snapengage.com https://commondatastorage.googleapis.com https://storage.googleapis.com https://translate.googleapis.com https://translate.google.com https://widgets.trustedshops.com https://www.google-analytics.com https://www.googleadservices.com https://*.wa.marketingsolutions.yahoo.com; style-src 'self' 'unsafe-inline' data: https://sandbox.upgplc.com https://translate.googleapis.com https://cdn.jsdelivr.net https://widgets.trustedshops.com https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com https://widgets.trustedshops.com data:; connect-src 'self' wss://www.dortex.de https://www.dortex.de https://translate.googleapis.com https://api.trustedshops.com; child-src 'self' https://www.pay-co.net https://www.youtube.com https://www.snapengage.com; object-src 'self'; media-src 'self' https://www.snapengage.com; form-action 'self' data: https://www.paypal.com https://www.sofortueberweisung.de https://www.sofort.com https://www.trustedshops.com https://betalen.rabobank.nl; frame-ancestors 'self'; frame-src 'self' https://widgets.trustedshops.com https://www.snapengage.com https://www.youtube.com https://www.pay-co.net https://sandbox.upgplc.com https://ctpe.net https://documents.sofort.com; Vary: Accept-Encoding Cache-Control: max-age=0, no-cache Connection: keep-alive X-XSS-Protection: 1; mode=block Vary: Accept-Encoding Content-Type: text/html Set-Cookie: sid=845ai666kibvoftger1378lnn6tj3b71; path=/; secure HTTP/1.1 200 OK P3P: CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM" X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Date: Tue, 15 Aug 2017 23:10:49 GMT X-Download-Options: noopen Transfer-Encoding: chunked X-Page-Speed: Powered by ngx_pagespeed