Sieh-an.at

server: awselb/2.0
date: Sat, 30 Sep 2023 12:17:32 GMT
content-type: text/html
content-length: 134
location: https://www.sieh-an.at:443/

HTTP/2 200 
date: Sat, 30 Sep 2023 12:17:32 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
set-cookie: wcc-saat=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VySWQiOiJjZTV6UlE3R3ViNXdCTVB2ZEV3MnQiLCJiYXNrZXRLZXkiOiJjZTV6UlE3R3ViNXdCTVB2ZEV3MnQiLCJ3aXNobGlzdEtleSI6ImNlNXpSUTdHdWI1d0JNUHZkRXcydCIsImlhdCI6MTY5NjA3NjI1Mn0.CSnaQ64mOVUu0FeH_ErdLHmTDo99WRBrhke1TCKTjYo; Max-Age=5184000; Domain=.sieh-an.at; Path=/; Expires=Wed, 29 Nov 2023 12:17:32 GMT; Secure; SameSite=Lax
set-cookie: visitIdChanged=true; Max-Age=1800; Domain=.sieh-an.at; Path=/; Expires=Sat, 30 Sep 2023 12:47:32 GMT; Secure; SameSite=Lax
set-cookie: visitId=r9AmreSHf25AyBzD8YXs2; Max-Age=1800; Domain=.sieh-an.at; Path=/; Expires=Sat, 30 Sep 2023 12:47:32 GMT; Secure; SameSite=Lax
set-cookie: ecc=801; Max-Age=2592000; Domain=.sieh-an.at; Path=/; Expires=Mon, 30 Oct 2023 12:17:32 GMT; Secure; SameSite=Lax
set-cookie: eccCurrent=801; Max-Age=2592000; Domain=.sieh-an.at; Path=/; Expires=Mon, 30 Oct 2023 12:17:32 GMT; Secure; SameSite=Lax
set-cookie: optimizelyId=E0na4pUWWfsmtmH_nAU9o; Max-Age=5184000; Domain=.sieh-an.at; Path=/; Expires=Wed, 29 Nov 2023 12:17:32 GMT; Secure; SameSite=Lax
content-security-policy: default-src 'self' cdn.wcc.sieh-an.at https://cdn.wcc.sieh-an.at/graphql;    base-uri 'self' widget.solvemate.com;    font-src 'self' cdn.wcc.sieh-an.at fonts.gstatic.com data: widget.solvemate.com *.dixa.io;    img-src * data:;    connect-src 'self' https://cdn.wcc.sieh-an.at/graphql cdn.wcc.sieh-an.at cdn.witt.info/ images.ctfassets.net te.sieh-an.at tp.sieh-an.at wasp.sieh-an.at wst.sieh-an.at *.analytics.google.com  *.facebook.com *.contentsquare.net *.my.onetrust.eu *.google-analytics.com bat.bing.com eu-witt-gruppe-prod1.mini.snplow.net www.google-analytics.com www.jsctool.com https://adservice.google.com/pagead/ https://graphql.contentful.com https://privacyportal-eu.onetrust.com https://stats.g.doubleclick.net https://geolocation.onetrust.com https://www.google.com/pagead/ https://googleads.g.doubleclick.net/pagead/ *.creativecdn.com *.googlesyndication.com *.optimizely.com https://ct.pinterest.com http://jsctool.com checkout-cdn.aboutyou.cloud checkout-v3.wcc.sieh-an.at https://*.ingest.sentry.io api.solvemate.com widget.solvemate.com relay.solvemate.com *.dixa.io wss://sockets.dixa.io api.sovendus.com benefits.sovendus.com identification-api.sovendus.com integration-api.sovendus.com press-tracking-api.sovendus.com;    object-src 'none';    child-src blob: ;    script-src * 'unsafe-inline' 'unsafe-eval' https://*.adyen.com https://*.paypal.com blob: *.dixa.io;    style-src 'self' cdn.wcc.sieh-an.at www.googletagmanager.com fonts.googleapis.com 'unsafe-inline' d.sieh-an.at checkout-cdn.aboutyou.cloud https://*.adyen.com https://*.paypal.com blob: widget.solvemate.com *.dixa.io;    frame-src 'self' checkout-v3.wcc.sieh-an.at *.awin1.com *.criteo.net *.criteo.com *.adrtx.net *.contentsquare.net www.googletagmanager.com www.facebook.com www.youtube.com dmp.theadex.com 5127363.fls.doubleclick.net 12769738.fls.doubleclick.net www.jsctool.com https://creativecdn.com/ https://fledge-eu.creativecdn.com/ https://tbs.tradedoubler.com/ https://survey2.quantilope.com/ https://*.adyen.com https://*.paypal.com https://*.computop-paygate.com blob: *.dixa.io https://api.sovendus.com https://www.sovendus-connect.com https://www.sovendus-benefits.com https://gui.display.prod.app.funnelplus.com/;    media-src 'self' cdn.wcc.sieh-an.at cdn.witt.info/ images.ctfassets.net videos.ctfassets.net www.youtube.com witt-gruppe-res.cloudinary.com *.dixa.io;    manifest-src 'self' cdn.wcc.sieh-an.at *.dixa.io;    worker-src 'self' cdn.wcc.sieh-an.at blob:;    form-action 'self' www.facebook.com;    block-all-mixed-content;    frame-ancestors 'self' https://app.contentful.com;    sandbox allow-scripts allow-forms allow-same-origin allow-top-navigation allow-popups allow-popups-to-escape-sandbox allow-modals;
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15724800; includeSubDomains
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
x-permitted-cross-domain-policies: none
permissions-policy: camera=(), microphone=(), geolocation=()
x-webapp-version: bd71c894247abfb69ccca09fe3b13c3fc7f3f428
cache-control: private, no-cache, no-store, max-age=0, must-revalidate
server-timing: _app; dur=274.512111; desc="getInitialProps"
server-timing: total; dur=355.784363; desc="Total Response Time"
content-encoding: br