HTTP/1.1 200 OK
Cache-Control: no-cache
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=utf-8
Expires: -1
Set-Cookie: TiPMix=32.0573375243961; path=/; HttpOnly; Domain=www.yello.de; Max-Age=3600
Set-Cookie: x-ms-routing-name=self; path=/; HttpOnly; Domain=www.yello.de; Max-Age=3600
Set-Cookie: yace=W10%3D; max-age=31536000; path=/; secure; samesite=none
Set-Cookie: partner.id=1%7CYELLO%7C%7C%7C%7Conline; expires=Thu, 08 Oct 2020 14:37:06 GMT; path=/
Set-Cookie: yzvp.Yello=YELLO%7Conline%7C; path=/
Set-Cookie: yabt=; max-age=5184000; path=/; samesite=lax
Set-Cookie: bmslng=%7B%22StartseiteKampagne%22%3A%22Referenz%22%2C%22AddonDetail2%22%3A%22Detail2%22%2C%22AddonStoerer%22%3A%22stoerer%22%2C%22WiederkehrerWarenkorb%22%3A%22reference%22%7D; max-age=5184000; path=/; samesite=lax
Set-Cookie: yww=; expires=Thu, 01 Jan 1970 00:00:00 GMT; path=/
Set-Cookie: ywza=1; path=/
Set-Cookie: .AspNetCore.Session=CfDJ8OoqkvbnCy9DqlNHMfEJQjf2653BiBVZhKBotQBk9UUpBGD3leD%2FHLkIZq5WPP8D5uOxSWuL53V6PNdw168d4zV482KBMkC4Do3Fhfqpa6HdgaOtJd6gO6lK8SwFfaVb3FYSimWkvNgEn4y0P062IXRmmui1tNOrQVI5yrbRIxYW; path=/; samesite=lax; httponly
Request-Context: appId=cid-v1:4b58b285-0af2-470c-9d6e-056959298160
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: track.yello.de *.usabilla.com *.cloudfront.net *.mouseflow.com *.ekomi.com *.wt-safetag.com *.doubleclick.net *.googleadservices.com *.google.com *.google.de *.googletagmanager.com *.google-analytics.com *.tagmanager.google.com *.adform.net *.adjust.com *.dwin1.com *.awin1.com *.zenaps.com ad4m.at ad4m.de ad4mat.de *.yieldlab.net *.ad4m.at *.ad4mat.net *.ad4mat.de r.adserver01.de r.adc-serv.net r.df-srv.de *.adfarm1.adition.com *.adscale.de *.twiago.com ads.creative-serving.com imagesrv.adition.com secure.adnxs.com *.intelliad.de *.thunderhead.com *.kameleoon.com *.kameleoon.eu *.intercom.io *.intercomcdn.com t.nativendo.de *.youtube.com *.ytimg.com *.instagram.com *.twitter.com *.twimg.com *.ytimg.com *.twitch.tv *.mapbox.com *.mapbox localhost r.df-srv.de bat.bing.com analytics-udg.netdna-ssl.com connect.facebook.net amplify.outbrain.com *.taboola.com;style-src 'self' 'unsafe-inline' *.google.com *.googleapis.com *.thunderhead.com *.twitter.com *.twimg.com *.mapbox.com *.mapbox localhost;img-src 'self' data: blob: track.yello.de *.contentful.com *.ctfassets.net *.usabilla.com *.cloudfront.net *.mouseflow.com *.wcfbc.net *.google-analytics.com *.doubleclick.net *.google.com *.google.de *.gstatic.com *.googletagmanager.com *.tagmanager.google.com *.googleusercontent.com *.ytimg.com *.youtube-nocookie.com *.awin1.com *.intelliad.de *.tradedoubler.com *.thunderhead.com *.kameleoon.com *.kameleoon.eu *.intercom.io *.intercomcdn.com *.communicationads.net *.twitter.com *.twimg.com track.adform.net *.twimg.com ad4m.at *.yieldlab.net *.ad4m.at *.ad4mat.net r.adserver01.de r.adc-serv.net r.df-srv.de *.adfarm1.adition.com *.adscale.de *.twiago.com ads.creative-serving.com imagesrv.adition.com secure.adnxs.com *.adform.net d.adup-tech.com insight.adsrvr.org *.taboola.com bat.bing.com dsum-sec.casalemedia.com www.facebook.com tr.outbrain.com amplifypixel.outbrain.com;frame-src *.usabilla.com *.cloudfront.net *.ekomi.com *.youtube.com *.youtube-nocookie.com *.doubleclick.net *.adform.net *.awin1.com ad4m.at *.intelliad.de *.rfihub.com *.kameleoon.com *.kameleoon.eu *.intercom.io *.intercomcdn.com yello.mitgedacht.nrw *.twitch.tv *.instagram.com *.twitter.com *.taboola.com www.facebook.com;connect-src 'self' track.yello.de dc.services.visualstudio.com localhost:* *.mouseflow.com *.ekomi.com *.zenaps.com *.thunderhead.com *.kameleoon.com *.kameleoon.eu *.intercom.io *.intercomcdn.com *.nexcheck.de wss://*.nexcheck.de *.mapbox.com *.google-analytics.com *.taboola.com;frame-ancestors 'self' *.yello.de localhost:*
X-Frame-Options: Deny
Date: Fri, 07 Aug 2020 12:37:06 GMT