neckermann.com website report

HTTP/2 200
date: Thu, 22 Oct 2026 21:53:31 GMT
content-type: text/html;charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: 0
x-frame-options: DENY
referrer-policy: strict-origin-when-cross-origin
traceresponse: 00-807a5e2f8d574275b7b3d237a4a3f986-4660291588904eab-00
content-encoding: gzip
vary: X-App, Accept-Encoding
age: 0
accept-ranges: bytes
set-cookie: visitorId=e474b1f7-ec65-4715-a615-9b5a107c9ab7.v1; Path=/; Domain=.otto.de; max-age=63072000; Expires=Sat, 21 Oct 2028 21:53:31 GMT; Secure, BrowserId=bcc55e1d-046f-4f0a-91d5-d3ba3e3649fd.v1; Path=/; Domain=.otto.de; max-age=63072000; Expires=Sat, 21 Oct 2028 21:53:31 GMT; Secure, csp=true; Path=/; Max-Age=60; Expires=Thu, 22 Oct 2026 21:54:31 GMT; SameSite=Lax; Secure
x-recruiting: Seems you like http headers. To write ours, apply at www.otto.de/jobs/ and mention this header.
server: Edge Proxy
via: 1.1 www-nondach-live-edge-proxy-f5c6f68cc-5k8nx.www.otto.de (Edge Proxy)
x-cache: MISS
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
timing-allow-origin: *
accept-ch: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Bitness
content-security-policy: frame-ancestors 'self' https://*.otto.de https://*.ottogroup.com https://og2gether.sharepoint.com https://otto.mpp360.cloud https://internal.otto.market; report-to csp-endpoint;
content-security-policy-report-only: frame-ancestors 'self' https://*.otto.de https://*.ottogroup.com https://og2gether.sharepoint.com https://otto.mpp360.cloud https://internal.otto.market; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: https://tp.otto.de https://static.otto.de https://assets.live.coco.cloud.otto.de https://otto.my.onetrust.eu https://cs.oghub.io https://jsctool.com https://gui.display.prod.app.funnelplus.com https://otto.de https://www.otto.de https://www.google-analytics.com https://*.adsrvr.org https://cdn.elbwalker.com https://connect.facebook.net https://googletagmanager.com https://*.adition.com https://accounts.google.com https://apis.google.com https://www.google.com https://s.pinimg.com https://static.cleverpush.com https://stats.wp.com https://*.revjet.com https://*.mycliplister.com; frame-src 'self' https://pxc.otto.de https://gui.display.prod.app.funnelplus.com https://service.loadbee.com https://syndication.flix360.com https://*.adsrvr.org https://vfr-v3-production-eu.sizebay.technology https://www.computop-paygate.com https://content.google.com https://docs.google.com https://www.google.com https://www.facebook.com https://ct.pinterest.com http://pxc.otto.de https://*.userwerk.com https://sda.delivery.orbidder.de; media-src 'self' https://*.mycliplister.com https://cdn.static.amplience.net; img-src 'self' https://static.otto.de https://i.otto.de https://otto.my.onetrust.eu data: https://cs.oghub.io https://googletagmanager.com https://*.adition.com https://faircado-cdn.s3.eu-central-1.amazonaws.com https://www.google.com https://www.facebook.com https://edit.otto-partnerprogramm.de https://www.glassdoor.de https://www.kununu.com https://survey.efmfeedback.com https://*.userwerk.com https://play-lh.googleusercontent.com https://*.mycliplister.com; style-src 'self' 'unsafe-inline' https://static.otto.de https://assets.live.coco.cloud.otto.de https://media1.otto.de https://otto.de https://www.gstatic.com; object-src 'self'; report-to csp-endpoint;
reporting-endpoints: csp-endpoint="https://api.otto.de/csp-reports"