Ipt.ch

server: nginx
date: Sun, 22 Dec 2024 14:19:15 GMT
content-type: text/html; charset=utf-8
content-length: 0
location: /de/
vary: Accept-Language, Cookie
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
referrer-policy: same-origin
cross-origin-opener-policy: same-origin
content-security-policy: img-src 'self' *.linkedin.com *.facebook.com *.google.com *.google.ch *.kununu.com *.ytimg.com *.googletagmanager.com; frame-src 'self' *.google.com *.doubleclick.net *.youtube.com *.facebook.com *.genial.ly *.genially.com *.simplecast.com *.youtube-nocookie.com *.pipedrive.com; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; script-src-elem 'self' 'unsafe-inline' *.google.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.facebook.net *.licdn.com *.pardot.com *.ipt.ch *.pipedrive.com *.pipedriveassets.com; default-src 'self'; connect-src 'self' *.google.com *.google.ch *.linkedin.com *.doubleclick.net *.google-analytics.com sentry.io pypi.org
set-cookie: csrftoken=ncBlVljwWYwYjcwF78eYHQEkQod4GYCW; expires=Sun, 21 Dec 2025 14:19:15 GMT; Max-Age=31449600; Path=/; SameSite=Lax; Secure
set-cookie: sessionid=05ut52nh17mbfo9hvxe496rg2pt3bb4s; expires=Sun, 05 Jan 2025 14:19:15 GMT; HttpOnly; Max-Age=1209600; Path=/; SameSite=Lax; Secure
set-cookie: 126271d1936ad6135f6d1c344bbe2044=76725ff082ace0d03c07d178388115b9; path=/; HttpOnly; Secure; SameSite=None

HTTP/2 200 
server: nginx
date: Sun, 22 Dec 2024 14:19:16 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
expires: Sun, 22 Dec 2024 14:20:16 GMT
cache-control: max-age=60
vary: , Cookie
x-frame-options: SAMEORIGIN
permissions-policy: accelerometer=(), autoplay=(), camera=(), display-capture=(), encrypted-media=(), fullscreen=(), geolocation=(), gyroscope=(), interest-cohort=(), magnetometer=(), microphone=(), midi=(), payment=(), usb=()
content-language: de
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
referrer-policy: same-origin
cross-origin-opener-policy: same-origin
content-security-policy: frame-src 'self' *.google.com *.doubleclick.net *.youtube.com *.facebook.com *.genial.ly *.genially.com *.simplecast.com *.youtube-nocookie.com *.pipedrive.com; default-src 'self'; connect-src 'self' *.google.com *.google.ch *.linkedin.com *.doubleclick.net *.google-analytics.com sentry.io pypi.org; style-src 'self' 'unsafe-inline'; img-src 'self' *.linkedin.com *.facebook.com *.google.com *.google.ch *.kununu.com *.ytimg.com *.googletagmanager.com; script-src-elem 'self' 'unsafe-inline' *.google.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.facebook.net *.licdn.com *.pardot.com *.ipt.ch *.pipedrive.com *.pipedriveassets.com; script-src 'self' 'unsafe-inline' 'unsafe-eval'
set-cookie: django_language=de; expires=Mon, 22 Dec 2025 14:19:16 GMT; Max-Age=31536000; Path=/
set-cookie: csrftoken=eYnGIPsaMfILYpfiIOFyYUL1PXI3z25k; expires=Sun, 21 Dec 2025 14:19:16 GMT; Max-Age=31449600; Path=/; SameSite=Lax; Secure
set-cookie: sessionid=kbhqm5uhftq9etqy9nmt139mcqzs442x; expires=Sun, 05 Jan 2025 14:19:16 GMT; HttpOnly; Max-Age=1209600; Path=/; SameSite=Lax; Secure
content-encoding: gzip
set-cookie: 126271d1936ad6135f6d1c344bbe2044=76725ff082ace0d03c07d178388115b9; path=/; HttpOnly; Secure; SameSite=None
cache-control: private