Ernaehrungsstudio.de

retry-after: 0
server: Pantheon
location: https://www.ernaehrungsstudio.de/
x-pantheon-redirect: primary-domain-policy-doc
date: Fri, 14 Nov 2025 04:03:01 GMT
x-served-by: cache-par-lfpg1960054-PAR
x-cache: HIT
x-cache-hits: 0
x-timer: S1763092981.429302,VS0,VE4
age: 0
accept-ranges: bytes
via: 1.1 varnish
content-length: 0

HTTP/2 200 
cache-control: max-age=900, public
content-encoding: gzip
content-language: de
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.gbqofs.io *.gbqofs.com *.googleapis.com *.gigya.com *.sessioncam.com *.rewe-static.de *.rewe.de *.krxd.net *.bkrtx.com *.iesnare.com *.googletagmanager.com *.google-analytics.com *.google.com *.google.co.uk *.google.es *.google.de *.google.com.tr *.newrelic.com *.betrad.com bam.nr-data.net static.addtoany.com *.cloudflare.com *.fusepump.com *.youtube.com *.ytimg.com *.evidon.com *.jquery.com *.serving-sys.com *.igodigital.com *.facebook.net *.g.doubleclick.net cdn.hypemarks.com cdn.adimo.co google-analytics.com *.nestle.co.uk *.nestle.de *.gstatic.com *.cloudfront.net *.usabilla.com usabilla.com www.googleadservices.com  cdn.cookielaw.org cookie-cdn.cookiepro.com *.onetrust.com data-eu.ernaehrungsstudio.de; style-src 'self' 'unsafe-inline' *.googleapis.com fonts.gstatic.com https://cdnjs.cloudflare.com brand-ecommerce-assets.fusepump.com *.youtube.com *.google.com www.google.com www.google.co.uk *.google.es *.google.de *.google.com.tr cdn.adimo.co *.nestle.de *.cloudfront.net *.usabilla.com usabilla.com cloud.typography.com https://use.fontawesome.com *.rewe-static.de *.adimo.co fast.fonts.net; img-src 'self' data: *.google.com *.googletagmanager.com *.acsitefactory.com *.cloudfront.net *.rewe-static.de *.sessioncam.com *.google.co.in *.adimo.co *.googleapis.com *.gstatic.com *.cloudflare.com *.google-analytics.com *.doubleclick.net www.google.com www.google.co.uk *.google.es *.google.de *.google.com.tr *.betrad.com *.pump.to *.amazonaws.com *.fusepump.com *.evidon.com *.igodigital.com *.facebook.com *.nestle.de bam.nr-data.net *.usabilla.com usabilla.com *.wikimedia.org *.aws.nestle.recipes cdn.cookielaw.org cookie-cdn.cookiepro.com *.onetrust.com; media-src 'self'; frame-src 'self' static.addtoany.com *.youtube.com *.youtu.be youtu.be *.evidon.com *.doubleclick.net *.fusepump.com *.hypemarks.com *.youtube-nocookie.com *.adimo.co *.nestle.de *.nestle.co.uk *.bluekai.com *.shop.rewe-static.de *.google.com www.google.com www.google.co.uk *.google.es *.google.de *.google.com.tr *.cloudfront.net *.usabilla.com usabilla.com *.gigya.com *.sessioncam.com *.bazaarvoice.com *.sitepreview.ws *.krxd.net *.nestle-brands.co.uk *.shopmium.com www.googletagmanager.com www.facebook.com; frame-ancestors 'self' www.facebook.com; child-src 'self' blob: https://www.ernaehrungsstudio.destatic.addtoany.com *.youtube.com *.youtu.be youtu.be *.evidon.com https://2275258.fls.doubleclick.net http://2275258.fls.doubleclick.net *.nestle.de http://www.youtube-nocookie.com https://www.youtube-nocookie.com https://cdn.hypemarks.com http://cdn.hypemarks.com; font-src 'self' data: *.acsitefactory.com *.gbqofs.io *.gbqofs.com  *.rewe-static.de https://cdnjs.cloudflare.com *.nestle.de *.cloudfront.net *.usabilla.com usabilla.com https://use.fontawesome.com cdn.cookielaw.org cookie-cdn.cookiepro.com *.onetrust.com; connect-src  'self' *.facebook.com *.krxd.net *.nr-data.net *.acsitefactory.com *.rewe.de *.rewe-static.de *.sessioncam.com *.fusepump.com *.google-analytics.com https://collect.analyze.ly https://secure-ds.serving-sys.com *.amazonaws.com *.adimo.co *.nestle.de bam.nr-data.net *.evidon.com stats.g.doubleclick.net *.cloudfront.net *.usabilla.com usabilla.com www.google.com googleads.g.doubleclick.net *.bazaarvoice.com  cdn.cookielaw.org cookie-cdn.cookiepro.com *.onetrust.com report.nestle.gbqofs.io region1.analytics.google.com data-eu.ernaehrungsstudio.de www.google.de; report-uri /report-csp-violation
content-type: text/html; charset=UTF-8
etag: W/"1763092651"
expires: Sun, 19 Nov 1978 05:00:00 GMT
last-modified: Fri, 14 Nov 2025 03:57:31 GMT
server: nginx
strict-transport-security: max-age=31622400; includeSubDomains; preload
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-pantheon-styx-hostname: styx-fe3fe4-c-7bcbb84c99-g9tz5
x-styx-req-id: 0b3afc5b-c10e-11f0-9c77-f2dbb89b8d6d
x-xss-protection: 1; mode=block
age: 330
accept-ranges: bytes
via: 1.1 varnish, 1.1 varnish, 1.1 varnish, 1.1 varnish
access-control-allow-origin: *
date: Fri, 14 Nov 2025 04:03:01 GMT
x-served-by: cache-ams21033-AMS, cache-par-lfpb1150055-PAR, cache-par-lfpg1960093-PAR, cache-par-lfpg1960093-PAR
x-cache: HIT, HIT, MISS, MISS
x-cache-hits: 5, 4, 0, 0
x-timer: S1763092981.489034,VS0,VE12
vary: Accept-Encoding, Cookie, Cookie, Cookie
content-length: 24391