Date: Wed, 09 Dec 2020 07:52:50 GMT
Server: Apache/2.4.38 (Debian)
Referrer-Policy: unsafe-url
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Link: ; rel=shortlink, ; rel=preload; as=style, ; rel=preload; as=style, ; rel=preload; as=script, ; rel=preload; as=script, ; rel=preload; as=script, ; rel=preload; as=script
Set-Cookie: pll_language=de; expires=Thu, 09-Dec-2021 07:52:50 GMT; Max-Age=31536000; path=/; secure; SameSite=Lax
Strict-Transport-Security: max-age=16070400; includeSubDomains
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Vary: Accept-Encoding
Timing-Allow-Origin: *
X-UA-Compatible: IE=edge
P3P: policyref="/w3c/p3p.xml", CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval' http://www.googletagmanager.com https://www.googletagmanager.com http://www.google-analytics.com https://www.google-analytics.com https://www.googleadservices.com/ https://bat.bing.com/ https://2-edge-chat.facebook.com https://connect.facebook.net/ https://dmp.theadex.com/ https://7.p.tdf.ringier.ch/ https://googleads.g.doubleclick.net/ https://www.youtube.com https://s.ytimg.com https://api.autoscout24.ch https://s0.2mdn.net; object-src 'self'
Cache-Control: no-transform
Keep-Alive: timeout=5, max=100
Content-Type: text/html; charset=UTF-8
x-encoded-content-encoding: gzip
x-encoded-content-length: 7278