Migros-ostschweiz.ch

server: nginx
date: Sat, 18 Nov 2023 19:42:01 GMT
content-type: text/html; charset=UTF-8
content-length: 0
location: https://ostschweiz.migros.ch/
x-powered-by: PleskLin

HTTP/2 301 
date: Sat, 18 Nov 2023 19:42:02 GMT
content-length: 0
location: https://ostschweiz.migros.ch/de.html
set-cookie: INGRESSCOOKIE=e2c162fbcaaa8000b466b3442dff4fd5|8fda387a2ffed4e68534088920c87342; Path=/; Secure; HttpOnly
x-varnish: 387329345
strict-transport-security: max-age=15724800; includeSubDomains

HTTP/2 200 
date: Sat, 18 Nov 2023 19:42:05 GMT
content-type: text/html;charset=UTF-8
set-cookie: INGRESSCOOKIE=e2c162fbcaaa8000b466b3442dff4fd5|8fda387a2ffed4e68534088920c87342; Path=/; Secure; HttpOnly
vary: Origin, Accept-Encoding
set-cookie: JSESSIONID=B3DE789B816F4D2D9DD44592DE1705FF; Path=/; Secure; HttpOnly
cache-control: no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
last-modified: Sat, 18 Nov 2023 19:42:02 GMT
content-language: de
x-cache-ttl: 0.000
content-encoding: gzip
age: 0
via: 1.1 varnish (Varnish/6.0)
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
content-security-policy: report-to csp-violations-endpoint ; report-uri https://reports.migros.ch/spaces/koe31g/violations ; default-src 'self' ; frame-src 'self' https://*.migros.ch https://chat140.realperson.de https://*.doubleclick.net https://vars.hotjar.com https://www.facebook.com https://www.youtube.com https://www.google.com https://player.captivate.fm https://static-raetsel.ateleris.com https://chat140.realperson.de https://e.issuu.com https://issuu.com https://www.googletagmanager.com https://oxovision.ch https://my.3dsixty.ch https://plex.maps.arcgis.com https://webapp.migrosvaud.ch https://www.immoscout24.ch https://kunz.lnk.to https://*.sibforms.com https://my.matterport.com https://mtube.migros.net https://datawrapper.dwcdn.net ; frame-ancestors 'self' https://*.migros.ch ; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.cookielaw.org https://*.migros.ch https://chat140.realperson.de https://www.google-analytics.com https://www.googletagmanager.com https://maps.googleapis.com https://static.hotjar.com https://script.hotjar.com https://connect.facebook.net https://*.doubleclick.net https://bat.bing.com https://code.jquery.com https://www.youtube.com https://www.google.com https://www.gstatic.com https://*.qualtrics.com https://www.cincopa.com https://rtcdn.cincopa.com https://static-raetsel.ateleris.com https://restaurant.migrosaare.ch https://plugins.flockler.com https://cdn.jsdelivr.net https://mtube.migros.net ; base-uri 'self' ; style-src 'self' 'unsafe-inline' https://chat140.realperson.de https://fast.fonts.net https://rtcdn.cincopa.com https://fonts.googleapis.com https://static-raetsel.ateleris.com https://restaurant.migrosaare.ch https://sibforms.com https://cdn.jsdelivr.net ; connect-src 'self' https://cdn.cookielaw.org https://geolocation.onetrust.com https://*.migros.ch https://chat140.realperson.de https://*.doubleclick.net https://europe-west6-viseca-cumulus-karte.cloudfunctions.net https://www.google.ch https://www.google.com https://www.google.fr https://www.google.de https://www.google.it https://www.google.at https://www.google.li https://*.analytics.google.com https://analytics.google.com https://*.google-analytics.com https://adservice.google.com https://in.hotjar.com https://viseca-cumulus-karte.oa.r.appspot.com https://bat.bing.com https://*.run.app https://www.facebook.com https://*.qualtrics.com https://rtcdn.cincopa.com https://analytics.cincopa.com https://maps.googleapis.com https://chat.viseca.ch https://api.raetsel.ateleris.com https://static-raetsel.ateleris.com https://restaurant.migrosaare.ch https://cdn.cookielaw.org https://translate.googleapis.com wss://chat140.realperson.de https://csi.gstatic.com https://api.flockler.app https://stats-api.flockler.app ; object-src 'self' ; font-src 'self' data: https://cdn.migros.ch https://fonts.gstatic.com https://rtcdn.cincopa.com https://chat140.realperson.de https://static-raetsel.ateleris.com https://assets.sendinblue.com ; img-src 'self' 'unsafe-eval' data: https://*.doubleclick.net https://cdn.cookielaw.org https://*.migros.ch https://*.rokka.io https://chat140.realperson.de https://www.google-analytics.com https://www.googletagmanager.com https://www.facebook.com https://www.google.ch https://www.google.fr https://www.google.de https://www.google.it https://www.google.at https://www.google.li https://bat.bing.com https://www.google.com https://i.ytimg.com https://img.youtube.com https://play.google.com https://*.apple.com https://mediacdn.cincopa.com https://rtcdn.cincopa.com https://maps.googleapis.com https://maps.gstatic.com https://play-lh.googleusercontent.com https://fra1.qualtrics.com https://static-raetsel.ateleris.com https://restaurant.migrosaare.ch https://region1.google-analytics.com https://www.kununu.com https://cdn-icons-png.flaticon.com https://tools.applemediaservices.com https://img.mailinblue.com https://*.cdn.flockler.com https://apple-resources.s3.amazonaws.com https://media-api.flockler.com https://*.cdninstagram.com ; manifest-src 'self' ; media-src 'self' ; worker-src 'self' blob: https://chat140.realperson.de ; child-src https://chat140.realperson.de ;
report-to: { "group":"csp-reporting-endpoint", "max_age":604800, "endpoints": [ { "url": "https://reports.migros.ch/spaces/koe31g/reports" } ] } ,{ "group":"csp-violations-endpoint", "max_age":604800, "endpoints": [ { "url": "https://reports.migros.ch/spaces/koe31g/violations" } ] }
reporting-endpoints: csp-reporting-endpoint="https://reports.migros.ch/spaces/koe31g/reports", csp-violations-endpoint="https://reports.migros.ch/spaces/koe31g/violations"
x-cache: MISS
x-node: migros-ch-public01-prod
strict-transport-security: max-age=15724800; includeSubDomains
accept-ranges: bytes