aok-on.de website report

HTTP/2 200
date: Thu, 22 Oct 2026 16:01:43 GMT
server: Apache
strict-transport-security: max-age=15552000
reporting-endpoints: csp-endpoint="https://www.aok.de/csp-header/"
content-security-policy: default-src *.aok.de aok.de data: blob: 'self' 'unsafe-inline' 'unsafe-eval' *.reddit.com cdn.melibo.de www.redditstatic.com *.kameleoon.io *.kameleoon.com *.kameleoon.eu *.kameleoon.net *.experimentation.dev wss://*.kameleoon.com *.googleapis.com fonts.gstatic.com *.doubleclick.net www.youtube-nocookie.com www.youtube.com easy-feedback.de cdnjs.cloudflare.com/ajax/libs/ cdn.melibo.de picsum.photos *.infogram.com unpkg.com s.pinimg.com www.googletagmanager.com connect.facebook.net maps.gstatic.com ct.pinterest.com www.facebook.com www.googleadservices.com app.easy-feedback.com code.jquery.com/jquery-latest.js www.googleadservices.com challenges.cloudflare.com *.openstreetmap.org *.clarity.ms *.gkvi.de challenges.cloudflare.com dakotaram.com player.vimeo.com api.melibo.de *.lumessetalentlink.com *.recruitmentplatform.com picsum.photos gstatic.com player.podigee-cdn.net hosting.mission-one.de *.google.com *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat *.ytimg.com *.google-analytics.com app.flipbase.com *.nicecxone-sov1.eu wss://*.nicecxone-sov1.eu mediathek.aok.de:8443 sentry.chemmedia.de c.bing.com *.ecs.us-east-1.on.aws mpc-prod-23-s6uit34pua-ue.a.run.app tt-0zbp5-webapp.azurewebsites.net; frame-ancestors 'self' app.kameleoon.com graphical-editor.kameleoon.com; base-uri 'self'; form-action 'self' *.aok.de; report-to csp-endpoint, frame-ancestors 'self' https://app.kameleoon.com https://graphical-editor.kameleoon.com;
set-cookie: viela=4b288844bd4bc609df9ca688c5302deb; Path=/; Max-Age=3600, localisation-v2=%7B%22client%22%3A%7B%22id%22%3A11%2C%22title%22%3A%22AOK%20Bayern%22%7D%2C%22isPermanent%22%3Afalse%7D; Path=/; SameSite=None; Secure, aok-rewrite-cookie=1; Path=/; SameSite=None; Secure, cookiesession1=678B28BC65B8ADC95A0A65E3DA04C910;Expires=Fri, 22 Oct 2027 16:01:43 GMT;Path=/;HttpOnly
last-modified: Thu, 22 Oct 2026 14:54:00 GMT
etag: "7b8e9-65e6f08b47d82-gzip"
accept-ranges: bytes
content-encoding: gzip
permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=*, camera=*, cross-origin-isolated=*, display-capture=(), document-domain=*, encrypted-media=*, fullscreen=*, geolocation=*, gyroscope=(), magnetometer=(), microphone=*, midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), usb=(), web-share=*, xr-spatial-tracking=(), hid=(), idle-detection=(), serial=(), attribution-reporting=*, bluetooth=(), browsing-topics=(), compute-pressure=(), identity-credentials-get=(), local-fonts=(), otp-credentials=(), publickey-credentials-create=(), storage-access=*, window-management=()
access-control-allow-methods: GET, OPTIONS
access-control-allow-headers: Content-Type,X-Requested-With
access-control-allow-credentials: true
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
cache-control: max-age=0, no-cache, no-store, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
content-length: 133368