mcl.de Review

 N/A

HTTP/1.1 301 Moved Permanently
Cache-Control: private
Location: https://mcl.de:443/
Content-Length: 0
Date: Sun, 24 Aug 2025 20:07:50 GMT
Content-Type: text/html; charset=UTF-8

HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sun, 24 Aug 2025 20:07:51 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Sat, 26 Jul 1997 05:00:00 GMT
Location: https://enthus.de/
Strict-Transport-Security: max-age=31536000; includeSubdomains; preload
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Referrer-Policy: no-referrer-when-downgrade
Content-Security-Policy: default-src 'self' https://*.mcl.de https://mcl.de; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google-analytics.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://connect.facebook.net https://*.doofinder.com/ https://diffuser-cdn.app-us1.com/diffuser/diffuser.js https://static.dvinci-easy.com/files/job-widget-v1/dvinci-job-widget-full-1.0.0.min.js https://cdn.jsdelivr.net/npm/slick-carousel@1.8.1/slick/slick.min.js https://*.mcl.de https://mcl.de https://trackcmp.net/ https://prism.app-us1.com https://www.gstatic.com https://www.google.com/recaptcha/api.js https://cdn.cs.1worldsync.com/ https://www.google.com/pagead/ https://pushcrew.com/ https://*.pushcrew.com/ https://*.usercentrics.eu/ https://snap.licdn.com/ https://bat.bing.com/ https://c.leadlab.click/ https://ws.cnetcontent.com/ https://cdn.cnetcontent.com/ https://code.jquery.com/jquery-1.11.0.min.js https://mclgmbh.activehosted.com https://w.promofeatures.com/ https://*.googletagmanager.com blob:; style-src 'self' 'unsafe-inline' https://*.googleapis.com/ https://cdn.jsdelivr.net/npm/slick-carousel@1.8.1/slick/slick.css https://*.mcl.de https://mcl.de https://cdn.pushcrew.com/css/ https://static.dvinci-easy.com/ https://cdn.cnetcontent.com/ https://cdn.cs.1worldsync.com/ https://*.googletagmanager.com; img-src 'self' https://www.google-analytics.com https://stats.g.doubleclick.net https://www.facebook.com https://www.google.com https://www.google.de https://www.google.rs https://www.google.au https://www.google.hr https://*.doofinder.com https://*.mcl.de https://mcl.de https://pushcrew.com/ https://cdn.pushcrew.com/ https://*.usercentrics.eu https://*.linkedin.com/ https://bat.bing.com/ https://p.adsymptotic.com/ https://www.kununu.com/ https://api.edudip-next.com/ https://cdn.cnetcontent.com/ https://googleads.g.doubleclick.net/ https://*.usercentrics.eu/ https://m.promofeatures.com https://cdn.cs.1worldsync.com/ https://www.gstatic.com/ https://i.ytimg.com/ https://connect.facebook.net https://*.amazonaws.com/ https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.google.com https://*.google.de https://*.google.rs data:; connect-src 'self' https://www.google-analytics.com https://pubsub.googleapis.com https://*.doofinder.com https://*.mcl.de https://mcl.de https://www.facebook.com/tr/ https://api.usercentrics.eu/ https://www.google.com/ https://googleads.g.doubleclick.net/ https://stats.g.doubleclick.net/ https://t.leadlab.click/ https://static.dvinci-easy.com/ https://mcl.dvinci-hr.com/ https://*.usercentrics.eu https://bat.bing.com https://adservice.google.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.google.com https://*.google.de https://*.google.rs https://cdn.linkedin.oribi.io wss:; font-src 'self' https://fonts.gstatic.com https://*.googletagmanager.com data:; object-src 'self'; media-src 'self' https://*.mcl.de https://storage.de.cloud.ovh.net/ data:; frame-src 'self' https://www.facebook.com https://bid.g.doubleclick.net/ https://www.youtube-nocookie.com/ https://www.google.com/ https://www.youtube.com/; form-action 'self' https://www.facebook.com; report-uri /csp/report.php;
Via: 1.1 google
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

HTTP/1.1 200 OK
Server: nginx
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Vary: Accept-Encoding
Date: Sun, 24 Aug 2025 20:07:52 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Frame-Options: deny
X-Content-Type-Options: nosniff
Referrer-Policy: strict-origin-when-cross-origin
Expires: Sun, 24 Aug 2025 20:07:52 GMT
Cache-Control: no-cache, private
Set-Cookie: session-=tcut6sl59ebjntm13aj2qn2j7c; path=/; secure; httponly; samesite=lax
Strict-Transport-Security: max-age=31536000; includeSubdomains; preload
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Referrer-Policy: no-referrer-when-downgrade
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: default-src 'self' enthus.de *.enthus.de 'unsafe-inline' 'unsafe-eval' ; script-src 'self' enthus.de *.enthus.de 'unsafe-inline' 'unsafe-eval' https://www.google-analytics.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://connect.facebook.net https://*.doofinder.com/ https://diffuser-cdn.app-us1.com/diffuser/diffuser.js https://static.dvinci-easy.com/files/job-widget-v1/dvinci-job-widget-full-1.0.0.min.js https://cdn.jsdelivr.net/npm/slick-carousel@1.8.1/slick/slick.min.js https://trackcmp.net/ https://prism.app-us1.com https://www.gstatic.com https://www.google.com/recaptcha/api.js https://cdn.cs.1worldsync.com/ https://www.google.com/pagead/ https://pushcrew.com/ https://*.pushcrew.com/ https://*.usercentrics.eu/ https://snap.licdn.com/ https://bat.bing.com/ https://c.leadlab.click/ https://ws.cnetcontent.com/ https://cdn.cnetcontent.com/ https://code.jquery.com/jquery-1.11.0.min.js https://mclgmbh.activehosted.com https://w.promofeatures.com/ https://*.googletagmanager.com https://api.userlike.com https://userlike-cdn-widgets.s3-eu-west-1.amazonaws.com https://userlike-cdn-umm.b-cdn.net https://static.hotjar.com https://script.hotjar.com https://ws.cs.1worldsync.com blob: ; style-src 'self' enthus.de *.enthus.de 'unsafe-inline' 'unsafe-eval' https://*.googleapis.com/ https://cdn.jsdelivr.net/npm/slick-carousel@1.8.1/slick/slick.css https://cdn.pushcrew.com/css/ https://static.dvinci-easy.com/ https://cdn.cnetcontent.com/ https://cdn.cs.1worldsync.com/ https://*.googletagmanager.com https://static.hotjar.com https://script.hotjar.com 'unsafe-hashes' ; img-src 'self' *.mcl.de mcl.de enthus.de *.enthus.de 'unsafe-inline' 'unsafe-eval' data: https://www.google-analytics.com https://stats.g.doubleclick.net https://www.facebook.com https://www.google.com https://www.google.de https://www.google.rs https://www.google.au https://www.google.hr https://*.doofinder.com https://pushcrew.com/ https://cdn.pushcrew.com/ https://*.usercentrics.eu *.linkedin.com *.ads.linkedin.com https://bat.bing.com/ https://p.adsymptotic.com/ https://www.kununu.com/ https://api.edudip-next.com/ https://cdn.cnetcontent.com/ https://googleads.g.doubleclick.net/ https://*.usercentrics.eu/ https://m.promofeatures.com https://cdn.cs.1worldsync.com/ https://www.gstatic.com/ https://i.ytimg.com/ https://connect.facebook.net https://*.amazonaws.com/ https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.google.com https://*.google.de https://*.google.rs userlike-cdn-operators.userlike.com userlike-cdn-operators.s3-eu-west-1.amazonaws.com userlike-cdn-web.b-cdn.net www.userlike.com userlike-store-media-files.s3.amazonaws.com i.ytimg.com https://static.hotjar.com https://script.hotjar.com ; connect-src 'self' enthus.de *.enthus.de 'unsafe-inline' 'unsafe-eval' https://www.google-analytics.com https://pubsub.googleapis.com https://*.doofinder.com https://www.facebook.com/tr/ https://api.usercentrics.eu/ https://www.google.com/ https://googleads.g.doubleclick.net/ https://stats.g.doubleclick.net/ https://t.leadlab.click/ https://static.dvinci-easy.com/ https://mcl.dvinci-hr.com/ *.linkedin.com *.ads.linkedin.com https://*.usercentrics.eu https://bat.bing.com https://adservice.google.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.google.com https://*.google.de https://*.google.rs https://cdn.linkedin.oribi.io wss://umd.userlike.com umd.userlike.com api.userlike.com userlike-cdn-web.b-cdn.net userlike-cdn-widgets.s3-eu-west-1.amazonaws.com www.userlike.com https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com blob: wss: ; font-src 'self' data: enthus.de *.enthus.de 'unsafe-inline' 'unsafe-eval' https://fonts.gstatic.com https://*.googletagmanager.com https://userlike-cdn-umm.b-cdn.net https://fonts.gstatic.com https://script.hotjar.com ; media-src 'self' enthus.de *.enthus.de 'unsafe-inline' 'unsafe-eval' https://storage.de.cloud.ovh.net/ https://userlike-cdn-umm.b-cdn.net https://userlike-store-media-files.s3.amazonaws.com https://www.userlike.com blob: data: ; frame-src 'self' enthus.de *.enthus.de 'unsafe-inline' 'unsafe-eval' https://www.facebook.com https://bid.g.doubleclick.net/ https://td.doubleclick.net https://www.youtube-nocookie.com/ https://www.google.com/ https://www.youtube.com/ https://api.userlike.com https://userlike-cdn-widgets.s3-eu-west-1.amazonaws.com https://userlike-cdn-umm.b-cdn.net www.youtube.com https://player.vimeo.com ; object-src 'none' ; child-src 'self' enthus.de *.enthus.de 'unsafe-inline' 'unsafe-eval' https://api.userlike.com https://userlike-cdn-widgets.s3-eu-west-1.amazonaws.com https://userlike-cdn-umm.b-cdn.net blob: ; form-action https://www.facebook.com ; report-uri /csp/report.php
Content-Encoding: br
Via: 1.1 google
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000