Migros-promo.ch

server: nginx
date: Sat, 28 Oct 2023 19:39:02 GMT
content-type: text/html
content-length: 162
location: https://www.migros-promo.ch/

HTTP/2 302 
server: nginx
date: Sat, 28 Oct 2023 19:39:03 GMT
content-type: text/html; charset=UTF-8
location: https://www.migros.ch
cache-control: max-age=0
expires: Sat, 28 Oct 2023 19:39:03 GMT
access-control-allow-origin: *

HTTP/2 200 
date: Sat, 28 Oct 2023 19:39:03 GMT
content-type: text/html
last-modified: Fri, 27 Oct 2023 07:15:36 GMT
expires: Sat, 28 Oct 2023 19:39:02 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
strict-transport-security: max-age=31536000; includeSubDomains; preload
pragma: no-cache
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-security-policy: child-src 'self' *.migros.ch cdn.cookielaw.org geolocation.onetrust.com privacyportal-de.onetrust.com *.youtube.com *.facebook.com pay.sandbox.datatrans.com pay.datatrans.com 9229177.fls.doubleclick.net 9272754.fls.doubleclick.net 6841363.fls.doubleclick.net *.lacmp.net siteintercept.qualtrics.com *.siteintercept.qualtrics.com migroscx.qualtrics.com; connect-src 'self' *.migros.ch cdn.cookielaw.org geolocation.onetrust.com privacyportal-de.onetrust.com www-leshop-ch-cld-res.cloudinary.com res.cloudinary.com www.facebook.com stats.g.doubleclick.net *.lacmp.net analytics.google.com *.analytics.google.com *.google-analytics.com *.contentful.com firebaseinstallations.googleapis.com firebaseremoteconfig.googleapis.com siteintercept.qualtrics.com *.siteintercept.qualtrics.com s.qualtrics.com mo-da-serverside-tracking-sbx.ey.r.appspot.com *.a.run.app https://*.browser-intake-datadoghq.eu *.teads.tv https://cdn-eu.configcat.com; default-src 'self'; font-src 'self' *.migros.ch cdn.cookielaw.org geolocation.onetrust.com privacyportal-de.onetrust.com fonts.googleapis.com fonts.gstatic.com cdn.fonts.net; img-src 'self' data: *.migros.ch cdn.cookielaw.org geolocation.onetrust.com privacyportal-de.onetrust.com *.googleapis.com www.googleadservices.com *.googleusercontent.com *.googletagmanager.com *.gstatic.com tagmanager.google.com cct.connects.ch profity.ch *.profity.ch *.xcampaign.ch partners.webmasterplan.com tbs.tradedoubler.com image.migros.ch migros.rokka.io migros-test.rokka.io migros-coupons-test.rokka.io migros-filialen-test.rokka.io migros-filialen.rokka.io *.atdmt.com *.google.ch maps.gstatic.com *.facebook.com *.google.com *.g.doubleclick.net ad.doubleclick.net 6841363.fls.doubleclick.net *.google-analytics.com www-leshop-ch-cld-res.cloudinary.com res.cloudinary.com bat.bing.com *.ctfassets.net siteintercept.qualtrics.com *.teads.tv tagging-oy2uihcb2q-oa.a.run.app; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.youtube.com *.migros.ch cdn.cookielaw.org geolocation.onetrust.com privacyportal-de.onetrust.com www.googleadservices.com tc.connects.ch *.google-analytics.com maps.googleapis.com *.googletagmanager.com tagmanager.google.com www.google.com www.google.ch *.getback.ch connect.facebook.net googleads.g.doubleclick.net bat.bing.com static.profity.ch siteintercept.qualtrics.com *.siteintercept.qualtrics.com https://unpkg.com/web-vitals/dist/web-vitals.iife.js *.teads.tv; style-src 'self' 'unsafe-inline' *.migros.ch cdn.cookielaw.org geolocation.onetrust.com privacyportal-de.onetrust.com tagmanager.google.com fonts.googleapis.com cdn.fonts.net;
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 81d5a48289e51149-ORD
content-encoding: br
alt-svc: h3=":443"; ma=86400