Migusto.ch

Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Content-Language: en-US
Content-Length: 0
Date: Sat, 21 Oct 2023 03:40:01 GMT
Expires: 0
Location: https://migusto.migros.ch/
Pragma: no-cache
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Vcap-Request-Id: d8b331e0-9116-46bf-5317-d0ae6ccc1800
X-Xss-Protection: 0
Set-Cookie: BIGipServerpool_redirect.migros.ch=!6MBcvLThMD6g3Uy6qQsDi9kA8FqJTdaJTrYRCgXATygU+6wEYctwQXe6fcyp6aSvIIquKi9+9I3YDw==; path=/; Secure
X-Pool: /Common/pool_redirect.migros.ch

HTTP/2 301 
date: Sat, 21 Oct 2023 03:40:02 GMT
content-length: 0
location: https://migusto.migros.ch/de.html
set-cookie: INGRESSCOOKIE=0b8bfb0c983888e6678094e7da195a65|a639397fb78c6720588e926a5be7b4d6; Path=/; Secure; HttpOnly
x-varnish: 51695051
strict-transport-security: max-age=15724800; includeSubDomains

HTTP/2 200 
date: Sat, 21 Oct 2023 03:40:02 GMT
content-type: text/html;charset=UTF-8
content-length: 41069
set-cookie: INGRESSCOOKIE=0b8bfb0c983888e6678094e7da195a65|a639397fb78c6720588e926a5be7b4d6; Path=/; Secure; HttpOnly
cache-control: no-cache, no-store, must-revalidate, max-age=0
vary: Accept-Encoding
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
last-modified: Thu, 19 Oct 2023 10:20:51 GMT
x-cache-ttl: 0.000
content-encoding: gzip
age: 0
via: 1.1 varnish (Varnish/6.0)
strict-transport-security: max-age=15724800; includeSubDomains
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
content-security-policy: report-to csp-violations-endpoint ; report-uri https://reports.migros.ch/spaces/wrf2tz/violations ; default-src * 'unsafe-inline' 'unsafe-eval' ; connect-src * 'unsafe-inline' ; font-src * data: ; frame-src * ; img-src * data: blob: 'unsafe-inline' ; object-src 'self' ; style-src * 'unsafe-inline' ; worker-src 'self' blob: ;
content-security-policy-report-only: report-to csp-reporting-endpoint ; report-uri https://reports.migros.ch/spaces/wrf2tz/reports ; default-src 'self' ; base-uri 'self' ; connect-src 'self' *.migros.ch *.doubleclick.net www.facebook.com *.analytics.google.com *.analytics.google.com *.google-analytics.com *.googlesyndication.com in.hotjar.com vc.hotjar.io ct.pinterest.com siteintercept.qualtrics.com api.uhuu.io ; font-src 'self' 'unsafe-inline' *.migros.ch ; form-action 'self' www.facebook.com migroscx.qualtrics.com ; frame-src 'self' login.migros.ch player.captivate.fm *.doubleclick.net www.facebook.com *.googlesyndication.com www.google.com/recaptcha/ vars.hotjar.com ct.pinterest.com www.youtube.com ; img-src 'self' data: *.migros.ch *.doubleclick.net www.facebook.com www.google.ch/ads/ www.google.com/ads/ www.google-analytics.com *.googlesyndication.com www.googletagmanager.com end.mpod.ch ct.pinterest.com *.qualtrics.com migipedia-test.rokka.io migros-test.rokka.io migusto-qual.rokka.io migusto-artikel-qual.rokka.io sb.scorecardresearch.com img.youtube.com i.ytimg.com ; media-src 'self' *.migros.ch ; object-src 'self' 'unsafe-eval' ; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.migros.ch *.doubleclick.net connect.facebook.net platform.getbring.com adservice.google.ch adservice.google.com www.google-analytics.com *.googlesyndication.com www.googleoptimize.com www.googletagmanager.com www.googletagservices.com script.hotjar.com static.hotjar.com s.pinimg.com *.qualtrics.com sb.scorecardresearch.com unpkg.com/web-vitals/ www.youtube.com ; style-src 'self' 'unsafe-inline' *.migros.ch ; worker-src 'self' blob: ;
report-to: {"group":"csp-reporting-endpoint","max_age":604800,"endpoints":[{"url":"https://reports.migros.ch/spaces/wrf2tz/reports"}]},{"group":"csp-violations-endpoint","max_age":604800,"endpoints":[{"url":"https://reports.migros.ch/spaces/wrf2tz/violations"}]}
reporting-endpoints: csp-reporting-endpoint="https://reports.migros.ch/spaces/wrf2tz/reports", csp-violations-endpoint="https://reports.migros.ch/spaces/wrf2tz/violations"
x-cache: MISS
x-node: migusto-public01-prod
accept-ranges: bytes