witt-weiden.at Review

 N/A

HTTP/1.1 301 Moved Permanently
Server: awselb/2.0
Date: Wed, 27 Aug 2025 17:33:21 GMT
Content-Type: text/html
Content-Length: 134
Connection: keep-alive
Location: https://www.witt-weiden.at:443/

HTTP/1.1 200 OK
Date: Wed, 27 Aug 2025 17:33:22 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Vary: Accept-Encoding
Set-Cookie: wcc-wwat=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VySWQiOiJEWTItVnd2WDhJS2Z1a3NFWWdtOV8iLCJiYXNrZXRLZXkiOiJEWTItVnd2WDhJS2Z1a3NFWWdtOV8iLCJ3aXNobGlzdEtleSI6IkRZMi1Wd3ZYOElLZnVrc0VZZ205XyIsImlhdCI6MTc1NjMxNjAwMn0.uBE1zrBNTxfAJAMmqotTCoK_zJgSZJT_7MRkhqkM7Q0; Max-Age=5184000; Domain=.witt-weiden.at; Path=/; Expires=Sun, 26 Oct 2025 17:33:22 GMT; Secure; SameSite=Lax
Set-Cookie: visitIdChanged=true; Max-Age=1800; Domain=.witt-weiden.at; Path=/; Expires=Wed, 27 Aug 2025 18:03:22 GMT; Secure; SameSite=Lax
Set-Cookie: visitId=i0AkNiU9Zofd5EAat1Pol; Max-Age=1800; Domain=.witt-weiden.at; Path=/; Expires=Wed, 27 Aug 2025 18:03:22 GMT; Secure; SameSite=Lax
Set-Cookie: ecc=801; Max-Age=2592000; Domain=.witt-weiden.at; Path=/; Expires=Fri, 26 Sep 2025 17:33:22 GMT; Secure; SameSite=Lax
Set-Cookie: eccCurrent=801; Max-Age=2592000; Domain=.witt-weiden.at; Path=/; Expires=Fri, 26 Sep 2025 17:33:22 GMT; Secure; SameSite=Lax
Set-Cookie: eccPaid=999; Max-Age=2592000; Domain=.witt-weiden.at; Path=/; Expires=Fri, 26 Sep 2025 17:33:22 GMT; Secure; SameSite=Lax
Set-Cookie: optimizelyId=4qk1xN-KCGE_GVJ0rZm9t; Max-Age=5184000; Domain=.witt-weiden.at; Path=/; Expires=Sun, 26 Oct 2025 17:33:22 GMT; Secure; SameSite=Lax
Set-Cookie: recoUserId=; Max-Age=0; Domain=.witt-weiden.at; Path=/; Expires=Wed, 27 Aug 2025 17:33:22 GMT; Secure; SameSite=Lax
Set-Cookie: recoSessionId=2kFg1-B55gidYmMApKLHI; Max-Age=604800; Domain=.witt-weiden.at; Path=/; Expires=Wed, 03 Sep 2025 17:33:22 GMT; Secure; SameSite=Lax
Content-Security-Policy: default-src 'self' cdn.wcc.witt-weiden.at https://cdn.wcc.witt-weiden.at/graphql;    base-uri 'self' widget.solvemate.com;    font-src 'self' cdn.wcc.witt-weiden.at https://fonts.gstatic.com data: widget.solvemate.com *.dixa.io https://*.userwerk.com;    img-src * data: https://*.userwerk.com;    connect-src 'self' https://cdn.wcc.witt-weiden.at/graphql cdn.wcc.witt-weiden.at cdn.witt.info/ https://images.ctfassets.net te.witt-weiden.at tp.witt-weiden.at wasp.witt-weiden.at wst.witt-weiden.at https://*.analytics.google.com https://*.facebook.com https://*.contentsquare.net https://*.my.onetrust.eu https://*.google-analytics.com https://bat.bing.com eu-witt-gruppe-prod1.mini.snplow.net https://www.google-analytics.com https://www.jsctool.com https://adservice.google.com/pagead/ https://graphql.contentful.com https://privacyportal-eu.onetrust.com https://stats.g.doubleclick.net https://geolocation.onetrust.com https://googleads.g.doubleclick.net/pagead/ https://*.googlesyndication.com https://*.optimizely.com ct.pinterest.com https://jsctool.com checkout-cdn.aboutyou.cloud checkout-cdn.scayle.cloud checkout-v3.wcc.witt-weiden.at https://*.ingest.sentry.io api.solvemate.com widget.solvemate.com relay.solvemate.com *.dixa.io wss://sockets.dixa.io https://*.userwerk.com https://maps.googleapis.com https://places.googleapis.com https://*.criteo.net https://*.criteo.com https://www.googleadservices.com https://www.google.com https://google.com;    object-src 'none';    child-src blob: ;    script-src * 'unsafe-inline' 'unsafe-eval' https://*.adyen.com https://*.paypal.com blob: *.dixa.io https://*.userwerk.com https://*.criteo.net https://*.criteo.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://www.google.com;    style-src 'self' cdn.wcc.witt-weiden.at https://www.googletagmanager.com https://fonts.googleapis.com 'unsafe-inline' d.witt-weiden.at checkout-cdn.aboutyou.cloud checkout-cdn.scayle.cloud https://*.adyen.com https://*.paypal.com blob: widget.solvemate.com *.dixa.io;    frame-src 'self' checkout-v3.wcc.witt-weiden.at https://*.awin1.com https://*.criteo.net https://*.criteo.com https://*.adrtx.net https://*.contentsquare.net https://www.googletagmanager.com https://www.facebook.com https://www.youtube.com https://dmp.theadex.com https://5127363.fls.doubleclick.net https://12769738.fls.doubleclick.net https://www.jsctool.com https://tbs.tradedoubler.com/ https://survey2.quantilope.com/ https://*.adyen.com https://*.paypal.com https://*.computop-paygate.com blob: *.dixa.io https://*.userwerk.com https://preview.brame-gamification.com/ https://live.brame-gamification.com/ https://campaigns.brame.io/;    media-src 'self' cdn.wcc.witt-weiden.at cdn.witt.info/ https://images.ctfassets.net https://videos.ctfassets.net https://www.youtube.com https://witt-gruppe-res.cloudinary.com https://res.cloudinary.com *.dixa.io;    manifest-src 'self' cdn.wcc.witt-weiden.at *.dixa.io;    worker-src 'self' cdn.wcc.witt-weiden.at blob:;    form-action 'self' www.facebook.com https://*.userwerk.com;    block-all-mixed-content;    frame-ancestors 'self' https://app.contentful.com;    sandbox allow-scripts allow-forms allow-same-origin allow-top-navigation allow-popups allow-popups-to-escape-sandbox allow-modals allow-downloads;
X-DNS-Prefetch-Control: off
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-Content-Type-Options: nosniff
Referrer-Policy: strict-origin-when-cross-origin
X-Permitted-Cross-Domain-Policies: none
Permissions-Policy: camera=(), microphone=(), geolocation=()
X-Webapp-Version: e4511dc7927831bacea84d168bf4346c6869cdc6
Vary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch
link: ; rel=preload; as="font"; crossorigin=""; type="font/woff", ; rel=preload; as="font"; crossorigin=""; type="font/woff2", ; rel=preload; as="font"; crossorigin=""; type="font/woff2", ; rel=preload; as="font"; crossorigin=""; type="font/woff", ; rel=preload; as="font"; crossorigin=""; type="font/woff", ; rel=preload; as="font"; crossorigin=""; type="font/woff2", ; rel=preload; as="font"; crossorigin=""; type="font/woff", ; rel=preload; as="font"; crossorigin=""; type="font/woff2", ; rel=preload; as="style"; crossorigin="anonymous", ; rel=preload; as="style"; crossorigin="anonymous", ; rel=preload; as="style"; crossorigin="anonymous", ; rel=preload; as="style"; crossorigin="anonymous"
Cache-Control: private, no-cache, no-store, max-age=0, must-revalidate
Server-Timing: total; dur=177.33641899999998; desc="Total Response Time"
Content-Encoding: br