Migrosaare.ch

Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Content-Language: en-US
Content-Length: 0
Date: Sat, 15 Jun 2024 04:20:04 GMT
Expires: 0
Location: https://aare.migros.ch/de.html
Pragma: no-cache
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Vcap-Request-Id: 7e0567f2-46e1-4708-52d5-f8b7ab7bb97f
X-Xss-Protection: 0
Set-Cookie: BIGipServerpool_redirect.migros.ch=!d94+YyM+NT9utWGELHMECmoacXQwSPHd97GCwS8d4qDJZ4UE666VIomck247L8X+tjmugDMLRkNWrQ==; path=/; Secure
X-Pool: /Common/pool_redirect.migros.ch

HTTP/2 200 
date: Sat, 15 Jun 2024 04:20:06 GMT
content-type: text/html;charset=UTF-8
content-length: 21714
set-cookie: INGRESSCOOKIE=e2c162fbcaaa8000b466b3442dff4fd5|8fda387a2ffed4e68534088920c87342; Path=/; Secure; HttpOnly
vary: Origin, Accept-Encoding
set-cookie: JSESSIONID=0A9D5D73BB54CF3EC03CA15F4CAFB8D3; Path=/; Secure; HttpOnly
cache-control: max-age=1800, public
expires: Sat, 15 Jun 2024 04:50:04 GMT
last-modified: Sat, 15 Jun 2024 04:20:04 GMT
content-language: de
x-cache-ttl: 1800.000
content-encoding: gzip
age: 0
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
content-security-policy: report-to csp-violations-endpoint ; report-uri https://reports.migros.ch/spaces/koe31g/violations ; default-src 'self' ; frame-src 'self' https://*.migros.ch https://chat140.realperson.de https://*.doubleclick.net https://vars.hotjar.com https://www.facebook.com https://www.youtube.com https://www.google.com https://player.captivate.fm https://static-raetsel.ateleris.com https://comhouse.ch https://chat140.realperson.de https://e.issuu.com https://issuu.com https://www.googletagmanager.com https://oxovision.ch https://my.3dsixty.ch https://plex.maps.arcgis.com https://webapp.migrosvaud.ch https://www.immoscout24.ch https://kunz.lnk.to https://*.sibforms.com https://my.matterport.com https://mtube.migros.net https://datawrapper.dwcdn.net https://bea.eventorg.ch ; frame-ancestors 'self' https://*.migros.ch ; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.cookielaw.org https://*.migros.ch https://chat140.realperson.de https://www.google-analytics.com https://www.googletagmanager.com https://maps.googleapis.com https://static.hotjar.com https://script.hotjar.com https://connect.facebook.net https://*.doubleclick.net https://bat.bing.com https://code.jquery.com https://www.youtube.com https://www.google.com https://www.gstatic.com https://*.qualtrics.com https://www.cincopa.com https://rtcdn.cincopa.com https://static-raetsel.ateleris.com https://comhouse.ch https://restaurant.migrosaare.ch https://plugins.flockler.com https://cdn.jsdelivr.net https://mtube.migros.net ; base-uri 'self' ; style-src 'self' 'unsafe-inline' https://chat140.realperson.de https://fast.fonts.net https://rtcdn.cincopa.com https://fonts.googleapis.com https://static-raetsel.ateleris.com https://comhouse.ch https://restaurant.migrosaare.ch https://sibforms.com https://cdn.jsdelivr.net ; connect-src 'self' https://cdn.cookielaw.org https://geolocation.onetrust.com https://*.migros.ch https://chat140.realperson.de https://*.doubleclick.net https://europe-west6-viseca-cumulus-karte.cloudfunctions.net https://www.google.ch https://www.google.com https://www.google.fr https://www.google.de https://www.google.it https://www.google.at https://www.google.li https://*.analytics.google.com https://analytics.google.com https://*.google-analytics.com https://adservice.google.com https://in.hotjar.com https://viseca-cumulus-karte.oa.r.appspot.com https://bat.bing.com https://*.run.app https://www.facebook.com https://*.qualtrics.com https://rtcdn.cincopa.com https://analytics.cincopa.com https://maps.googleapis.com https://chat.viseca.ch https://api.raetsel.ateleris.com https://static-raetsel.ateleris.com https://comhouse.ch https://restaurant.migrosaare.ch https://cdn.cookielaw.org https://translate.googleapis.com wss://chat140.realperson.de https://csi.gstatic.com https://api.flockler.app https://stats-api.flockler.app ; object-src 'self' ; font-src 'self' data: https://cdn.migros.ch https://fonts.gstatic.com https://rtcdn.cincopa.com https://chat140.realperson.de https://static-raetsel.ateleris.com https://assets.sendinblue.com ; img-src 'self' 'unsafe-eval' data: https://*.doubleclick.net https://cdn.cookielaw.org https://*.migros.ch https://*.rokka.io https://chat140.realperson.de https://www.google-analytics.com https://www.googletagmanager.com https://www.facebook.com https://www.google.ch https://www.google.fr https://www.google.de https://www.google.it https://www.google.at https://www.google.li https://bat.bing.com https://www.google.com https://i.ytimg.com https://img.youtube.com https://play.google.com https://*.apple.com https://mediacdn.cincopa.com https://rtcdn.cincopa.com https://maps.googleapis.com https://maps.gstatic.com https://play-lh.googleusercontent.com https://fra1.qualtrics.com https://static-raetsel.ateleris.com https://comhouse.ch https://restaurant.migrosaare.ch https://region1.google-analytics.com https://www.kununu.com https://cdn-icons-png.flaticon.com https://tools.applemediaservices.com https://img.mailinblue.com https://*.cdn.flockler.com https://apple-resources.s3.amazonaws.com https://media-api.flockler.com https://*.cdninstagram.com ; manifest-src 'self' ; media-src 'self' ; worker-src 'self' blob: https://chat140.realperson.de ; child-src https://chat140.realperson.de ;
report-to: { "group":"csp-reporting-endpoint", "max_age":604800, "endpoints": [ { "url": "https://reports.migros.ch/spaces/koe31g/reports" } ] } ,{ "group":"csp-violations-endpoint", "max_age":604800, "endpoints": [ { "url": "https://reports.migros.ch/spaces/koe31g/violations" } ] }
reporting-endpoints: csp-reporting-endpoint="https://reports.migros.ch/spaces/koe31g/reports", csp-violations-endpoint="https://reports.migros.ch/spaces/koe31g/violations"
x-cache: MISS
x-node: migros-ch-public01-prod
strict-transport-security: max-age=15724800; includeSubDomains
accept-ranges: bytes