• H1 0
• H2 0
• H3 0
• H4 0
• STRONG 0
• A 0
• IMG 0

HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 07 Jun 2019 21:13:09 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://herocentral.de/
Set-Cookie: csrftoken=bar;Path=/;Max-Age=0;Domain=.herocentral.de;Expires=Thu, 01-Jan-1970 00:00:00 GMT;

HTTP/1.1 302 Found
Server: nginx
Date: Fri, 07 Jun 2019 21:13:09 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
Content-Language: en
strict-transport-security: max-age=63072000; includeSubDomains; preload
Vary: Accept-Language, Cookie
Location: /user/auth/login/google-oauth2/
Set-Cookie: csrftoken=bar;Path=/;Max-Age=0;Domain=.herocentral.de;Expires=Thu, 01-Jan-1970 00:00:00 GMT;

HTTP/1.1 302 Found
Server: nginx
Date: Fri, 07 Jun 2019 21:13:10 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-content-type-options: nosniff
Content-Language: en
Expires: Fri, 07 Jun 2019 21:13:10 GMT
Vary: Accept-Language, Cookie
x-xss-protection: 1; mode=block
Location: https://accounts.google.com/o/oauth2/auth?scope=https://www.googleapis.com/auth/userinfo.email+https://www.googleapis.com/auth/userinfo.profile+openid+email+profile&state=PTIHRiQgGeWCV6LCubhDTX9KvddUNswl&redirect_uri=https://herocentral.de/user/auth/complete/google-oauth2/&response_type=code&client_id=396519560792-6efl5n8nlev5sf9abcf6nike1e1ge04k.apps.googleusercontent.com
Cache-Control: no-cache, no-store, must-revalidate, max-age=0
Set-Cookie: sessionid=w3lghshf4ve2uohs1frl6vnh48u8c188; httponly; Path=/
Set-Cookie: csrftoken=bar;Path=/;Max-Age=0;Domain=.herocentral.de;Expires=Thu, 01-Jan-1970 00:00:00 GMT;

HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Fri, 07 Jun 2019 21:13:10 GMT
Content-Language: en-US
Content-Security-Policy: script-src 'unsafe-inline' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /o/cspreport
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"
Accept-Ranges: none
Vary: Accept-Encoding
Transfer-Encoding: chunked