HTTP/2 200 strict-transport-security: max-age=31536000; includeSubdomains; preloaddate: Wed, 20 May 2026 23:36:36 GMTserver: Apachertss: 1und1prod-*-1cache-control: no-cache, no-store, must-revalidatecontent-encoding: gzipcontent-security-policy: connect-src web.de *.web.de *.adition.com *.mam.dev *.netid.de *.server.lan *.ui-portal.de *.uicdn.com *.uimserv.net united-infos.net; style-src 'unsafe-inline' *.ui-portal.de *.uicdn.com *.web.de; script-src 'unsafe-inline' 'unsafe-eval' web.de *.web.de *.ui-portal.de *.uicdn.com *.uimserv.net united-infos.net; object-src 'none'; form-action web.de *.web.de; frame-src web.de *.web.de *.ergebnis-dienst.de *.ui-portal.de *.uimserv.net united-infos.net; sandbox allow-forms allow-popups allow-popups-to-escape-sandbox allow-same-origin allow-scripts; frame-ancestors 'self' www.united-internet-media.de adimg.uimserv.net advideo.uimserv.net; img-src * data:; default-src 'self'; font-src data: *.ui-portal.decontent-type: text/html;charset=UTF-8expires: 0feature-policy: microphone 'none'; camera 'none'; geolocation 'none'; usb 'none'permissions-policy: microphone=(), camera=(), geolocation=(), usb=()pragma: no-cachereferrer-policy: strict-origin-when-cross-originvary: accept-encodingx-content-type-options: nosniffx-frame-options: DENYx-xss-protection: 0set-cookie: SSLB=.1; path=/; domain=.web.deset-cookie: ui_cid=OPTOUT; Expires=Thu, 20 May 2027 23:36:36 GMT; Max-Age=31536000; Path=/; Secure; HttpOnlyset-cookie: allin_segment=2; Expires=Tue, 18 Aug 2026 23:36:36 GMT; Max-Age=7776000; Domain=web.de; Path=/; Secure; SameSite=Laxset-cookie: SSLB=.1; domain=.web.de ;path=/set-cookie: SSLB=.1; domain=.web.de ;path=/