Nescafe.com

server: Varnish
retry-after: 0
location: https://nescafe.com/de/
accept-ranges: bytes
date: Thu, 07 Aug 2025 15:28:54 GMT
via: 1.1 varnish
x-served-by: cache-fra-etou8220107-FRA
x-cache: HIT
x-cache-hits: 0
x-timer: S1754580534.061896,VS0,VE1
strict-transport-security: max-age=300
content-length: 0

HTTP/2 301 
server: Varnish
retry-after: 0
location: https://www.nescafe.com/de/
accept-ranges: bytes
date: Thu, 07 Aug 2025 15:28:54 GMT
via: 1.1 varnish
x-served-by: cache-fra-etou8220107-FRA
x-cache: HIT
x-cache-hits: 0
x-timer: S1754580534.069476,VS0,VE0
strict-transport-security: max-age=300
content-length: 0

HTTP/2 200 
cache-control: max-age=86400, public
content-encoding: gzip
content-language: de-de
content-security-policy: default-src self *.sessioncam.com *.cloudfront.net  services.nestle.de *.digital.promo; script-src *.digital.promo *.adsrvr.org *.gbqofs.com *.gbqofs.io *.cloudfront.net *.sessioncam.com *.adimo.co *.usabilla.com *.googleoptimize.com 'self' 'unsafe-inline' 'unsafe-eval' *.googleapis.com *.googletagmanager.com *.google-analytics.com *.google.com *.google.co.uk *.newrelic.com *.cloudflare.com brand-ecommerce-assets.fusepump.com *.youtube.com s.ytimg.com *.evidon.com code.jquery.com *.doubleclick.net https://www.gstatic.com *.gigya.com https://bv.js *.bazaarvoice.com *.adimo.co *.nescafe.com *.nestle.com *.google.com *.jsdelivr.net/npm/fraction.js@4.2.0/fraction.min.js *.tintup.com https://tintup.com/app/dist/embedded.js *.facebook.net *.nr-data.net *.hypemarks.com *.jsdelivr.net unpkg.com *.nestle.co.uk  *.windows.net *.iesnare.com *.nestle.de services.nestle.de https://repo.nestle.de/iframeResizer/iframeResizer.min.js *.cdn.cookielaw.org *.cookie-cdn.cookiepro.com *.onetrust.com *.segment.com https://cdn.cookielaw.org/ *.qualifioapp.com *.qualifio.com qualtrics.com *.qualtrics.com zntjwxhnqvlqjufk1-nestleglobalmktg.siteintercept.qualtrics.com/ *.segment.com *.events.segmentapis.com *.cdn.dev.az.ciam.nestle.com/ *.segmentapis.com *.ownid.com https://tintup.com/dist/tintAnalyticsClient-bundle.js https://tintup.com/dist/env-config.js https://ad.doubleclick.net https://www.facebook.com https://connect.facebook.net https://pagead2.googlesyndication.com; style-src unpkg.com 'self' 'unsafe-inline' fonts.googleapis.com fonts.gstatic.com *.adimo.co *.cloudfront.net *.cloudflare.com brand-ecommerce-assets.fusepump.com *.youtube.com *.google.com *.bazaarvoice.com  *.adimo.co *.jsdelivr.net *.nestle.co.uk *.nestle.de  use.fontawesome.com *.cdn.cookielaw.org *.cookie-cdn.cookiepro.com *.onetrust.com https://cdn.cookielaw.org/ https://unpkg.com/tippy.js@6.3.7/dist/tippy.css; img-src *.digital.promo *.nestle.de *.cloudfront.net *.sessioncam.com *.google.co.in *.amazonaws.com *.usabilla.com *.adimo.co *.google.com.au *.googletagmanager.com https://nescafefarmersorigins.com/au/*. *.nescafefarmersorigins.com *.nestle.co.uk *.google.com 'self' data: *.googleapis.com *.gstatic.com *.cloudflare.com *.google-analytics.com https://stats.g.doubleclick.net www.google.com www.google.co.uk *.doubleclick.net *.amazonaws.com px.pump.to brand-ecommerce-assets.fusepump.com *.evidon.com *.nestlebeverages.acsitefactory.com be.factory.nescafe.com www.nescafe.com *.ytimg.com *.bazaarvoice.com *.gigya.com *.nescafe.com https://optimize.google.com *.pantheonsite.io google.ca *.facebook.com *.jsdelivr.net *.windows.net *.cdn.cookielaw.org *.cookie-cdn.cookiepro.com *.onetrust.com https://cdn.cookielaw.org/ *.static-swaven.com siteintercept.qualtrics.com google.com.au *.siteintercept.qualtrics.com *.fra1.qualtrics.com/WRQualtricsSiteIntercept/ fra1.qualtrics.com/WRQualtricsSiteIntercept/; media-src 'self'; frame-src *.digital.promo *.adsrvr.org *.cloudfront.net *.sessioncam.com *.doubleclick.net *.adimo.co 'self' *.youtube.com info.evidon.com https://2275258.fls.doubleclick.net http://2275258.fls.doubleclick.net http://www.youtube-nocookie.com https://www.youtube-nocookie.com *.fusepump.com www.google.com https://l3.evidon.com/ *.gigya.com *.adimo.co *.bazaarvoice.com *.nestle-brands.co.uk https://login-au.nescafe.com/ *.nescafe.com *.google.com *.facebook.com *.hypemarks.com *.nestlepromotions.com.au services.nestle.de staging.services.nestle.de *.nestle.de https://services.nestle.de/contactform/nbnc/ *.qualifioapp.com *.qualifioapp.com qualtrics.com googletagmanager.com/ *.googletagmanager.com/ *.qualtrics.com https://app.tintup.com/; frame-ancestors 'self'; child-src *.digital.promo 'self' static.addtoany.com *.youtube.com *.youtu.be *.adimo.co info.evidon.com *.fls.doubleclick.net http://www.youtube-nocookie.com https://www.youtube-nocookie.com *.hypemarks.com blob:; font-src unpkg.com *.nestle.de 'self' data: fonts.gstatic.com fonts.googleapis.com *.cloudfront.net *.cloudflare.com *.fontawesome.com promotheus.nestle.de; connect-src *.digital.promo *.googleapis.com *.nestle.de 'self' brand-ecommerce-api.fusepump.com *.sessioncam.com *.amazonaws.com *.adimo.co *.google.com *.cloudfront.net *.google-analytics.com *.amazonaws.com *.bazaarvoice.com *.evidon.com *.g.doubleclick.net *.nestle-brands.co.uk *.nr-data.net *.nescafe.com *.gigya.com *.googletagmanager.com *.usabilla.com *.fusepump.com *.gbqofs.io *.gbqofs.com *.growthbook.io *.nestle.co.uk promotheus.nestle.de *.cdn.cookielaw.org *.cookie-cdn.cookiepro.com *.onetrust.com *.segment.com cdn.cookielaw.org/ qualtrics.com *.qualtrics.com *.segment.com *.events.segmentapis.com events.eu1.segmentapis.com/ *.segmentapis.com *.ownid.com https://ad.doubleclick.net https://www.facebook.com https://connect.facebook.net https://pagead2.googlesyndication.com; report-uri /de/report-csp-violation
content-type: text/html; charset=UTF-8
etag: W/"1754557776"
expires: Sun, 19 Nov 1978 05:00:00 GMT
last-modified: Thu, 07 Aug 2025 09:09:36 GMT
permissions-policy: camera=self, geolocation=self
server: nginx
strict-transport-security: max-age=31622400; includeSubDomains; preload
x-content-type-options: nosniff
x-drupal-cache: MISS
x-drupal-dynamic-cache: MISS
x-frame-options: ALLOW-FROM '*.tintup.com'
x-pantheon-styx-hostname: styx-fe3fe4-c-586965dff9-kkdmw
x-styx-req-id: 3db69163-736e-11f0-9b7e-face16e37c5c
x-xss-protection: 1; mode=block
age: 22756
accept-ranges: bytes
via: 1.1 varnish, 1.1 varnish, 1.1 varnish
date: Thu, 07 Aug 2025 15:28:54 GMT
x-served-by: cache-ams21076-AMS, cache-fra-eddf8230045-FRA, cache-fra-etou8220157-FRA
x-cache: HIT, HIT, MISS
x-cache-hits: 1, 588, 0
x-timer: S1754580534.102447,VS0,VE46
vary: Accept-Encoding, adv-cdn-origin, Cookie, Cookie, Cookie
content-length: 32456