heine.de Review

 N/A

HTTP/1.1 301 Moved Permanently
Server: awselb/2.0
Date: Sat, 23 Aug 2025 11:20:37 GMT
Content-Type: text/html
Content-Length: 134
Connection: keep-alive
Location: https://www.heine.de:443/

HTTP/1.1 200 OK
Date: Sat, 23 Aug 2025 11:20:39 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Vary: Accept-Encoding
Set-Cookie: wcc-hede=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VySWQiOiJwS0V6UFBVUG00V3dHSVg4anpUVlciLCJiYXNrZXRLZXkiOiJwS0V6UFBVUG00V3dHSVg4anpUVlciLCJ3aXNobGlzdEtleSI6InBLRXpQUFVQbTRXd0dJWDhqelRWVyIsImlhdCI6MTc1NTk0ODAzOH0.UQotx_49BFLHKQf1Bdeg0-qspsogWK8AkoEzBho3qbk; Max-Age=5184000; Domain=.heine.de; Path=/; Expires=Wed, 22 Oct 2025 11:20:38 GMT; Secure; SameSite=Lax
Set-Cookie: visitIdChanged=true; Max-Age=1800; Domain=.heine.de; Path=/; Expires=Sat, 23 Aug 2025 11:50:38 GMT; Secure; SameSite=Lax
Set-Cookie: visitId=NDpm3vheE2yZdxJgS2aey; Max-Age=1800; Domain=.heine.de; Path=/; Expires=Sat, 23 Aug 2025 11:50:38 GMT; Secure; SameSite=Lax
Set-Cookie: ecc=801; Max-Age=2592000; Domain=.heine.de; Path=/; Expires=Mon, 22 Sep 2025 11:20:38 GMT; Secure; SameSite=Lax
Set-Cookie: eccCurrent=801; Max-Age=2592000; Domain=.heine.de; Path=/; Expires=Mon, 22 Sep 2025 11:20:38 GMT; Secure; SameSite=Lax
Set-Cookie: eccPaid=999; Max-Age=2592000; Domain=.heine.de; Path=/; Expires=Mon, 22 Sep 2025 11:20:38 GMT; Secure; SameSite=Lax
Set-Cookie: optimizelyId=pQ2MXtlZjGMaGFD1kgJS6; Max-Age=5184000; Domain=.heine.de; Path=/; Expires=Wed, 22 Oct 2025 11:20:38 GMT; Secure; SameSite=Lax
Set-Cookie: recoUserId=; Max-Age=0; Domain=.heine.de; Path=/; Expires=Sat, 23 Aug 2025 11:20:38 GMT; Secure; SameSite=Lax
Set-Cookie: recoSessionId=p8aTgg35kZPyDZ62GpZt3; Max-Age=604800; Domain=.heine.de; Path=/; Expires=Sat, 30 Aug 2025 11:20:38 GMT; Secure; SameSite=Lax
Content-Security-Policy: default-src 'self' cdn.wcc.heine.de https://cdn.wcc.heine.de/graphql;    base-uri 'self';    font-src 'self' cdn.wcc.heine.de https://fonts.gstatic.com data: https://d3dc1lgancj6l0.cloudfront.net https://dq4irj27fs462.cloudfront.net https://*.userwerk.com;    img-src * data: https://*.userwerk.com;    connect-src 'self' https://cdn.wcc.heine.de/graphql cdn.wcc.heine.de cdn.witt.info/ https://images.ctfassets.net te.heine.de tp.heine.de wasp.heine.de wst.heine.de https://*.analytics.google.com https://*.facebook.com https://*.contentsquare.net https://*.my.onetrust.eu https://*.google-analytics.com https://bat.bing.com eu-witt-gruppe-prod1.mini.snplow.net https://www.google-analytics.com https://www.jsctool.com https://adservice.google.com/pagead/ https://graphql.contentful.com https://privacyportal-eu.onetrust.com https://stats.g.doubleclick.net https://geolocation.onetrust.com https://googleads.g.doubleclick.net/pagead/ https://*.creativecdn.com https://*.googlesyndication.com https://*.optimizely.com ct.pinterest.com https://jsctool.com checkout-cdn.aboutyou.cloud checkout-cdn.scayle.cloud checkout-v3.wcc.heine.de https://*.ingest.sentry.io wss://chat.userlike.com chat.userlike.com api.userlike.com www.userlike.com https://userlike-cdn-widgets.s3-eu-west-1.amazonaws.com wss://umd.userlike.com/umd/ https://*.userwerk.com https://maps.googleapis.com https://places.googleapis.com https://*.criteo.net https://*.criteo.com https://www.googleadservices.com https://www.google.com https://google.com *.parcellab.com;    object-src 'none';    child-src blob: userlike-cdn-widgets.userlike.com;    script-src * 'unsafe-inline' 'unsafe-eval' https://*.adyen.com https://*.paypal.com userlike-cdn-widgets.userlike.com https://*.userwerk.com https://*.criteo.net https://*.criteo.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://www.google.com *.parcellab.com;    style-src 'self' cdn.wcc.heine.de https://www.googletagmanager.com https://fonts.googleapis.com 'unsafe-inline' d.heine.de checkout-cdn.aboutyou.cloud checkout-cdn.scayle.cloud https://*.adyen.com https://*.paypal.com *.parcellab.com;    frame-src 'self' checkout-v3.wcc.heine.de https://*.awin1.com https://*.criteo.net https://*.criteo.com https://*.adrtx.net https://*.contentsquare.net https://www.googletagmanager.com https://www.facebook.com https://www.youtube.com https://dmp.theadex.com https://5127363.fls.doubleclick.net https://12769738.fls.doubleclick.net https://www.jsctool.com https://creativecdn.com/ https://fledge-eu.creativecdn.com/ https://ams.creativecdn.com/ https://tags.creativecdn.com/ https://tbs.tradedoubler.com/ https://survey2.quantilope.com/ https://*.adyen.com https://*.paypal.com https://*.computop-paygate.com userlike-cdn-widgets.userlike.com https://*.userwerk.com https://preview.brame-gamification.com/ https://live.brame-gamification.com/ https://campaigns.brame.io/;    media-src 'self' cdn.wcc.heine.de cdn.witt.info/ https://images.ctfassets.net https://videos.ctfassets.net https://www.youtube.com https://witt-gruppe-res.cloudinary.com https://res.cloudinary.com;    manifest-src 'self' cdn.wcc.heine.de;    worker-src 'self' cdn.wcc.heine.de blob:;    form-action 'self' www.facebook.com https://*.userwerk.com;    block-all-mixed-content;    frame-ancestors 'self' https://app.contentful.com;    sandbox allow-scripts allow-forms allow-same-origin allow-top-navigation allow-popups allow-popups-to-escape-sandbox allow-modals allow-downloads;
X-DNS-Prefetch-Control: off
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-Content-Type-Options: nosniff
Referrer-Policy: strict-origin-when-cross-origin
X-Permitted-Cross-Domain-Policies: none
Permissions-Policy: camera=(), microphone=(), geolocation=()
X-Webapp-Version: 78a9dbc753f445dd7a61f162b7d3acf946fdb7ce
Vary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch
link: ; rel=preload; as="font"; crossorigin=""; type="font/woff2", ; rel=preload; as="font"; crossorigin=""; type="font/woff", ; rel=preload; as="font"; crossorigin=""; type="font/woff2", ; rel=preload; as="font"; crossorigin=""; type="font/woff", ; rel=preload; as="style"; crossorigin="anonymous", ; rel=preload; as="style"; crossorigin="anonymous", ; rel=preload; as="style"; crossorigin="anonymous"
Cache-Control: private, no-cache, no-store, max-age=0, must-revalidate
Server-Timing: total; dur=301.045171; desc="Total Response Time"
Content-Encoding: br