Mobiliare.ch

server: nginx
date: Tue, 05 Sep 2023 23:29:03 GMT
content-type: text/html; charset=iso-8859-1
content-length: 233
location: https://www.mobiliare.ch/
vary: X-Forwarded-Proto
x-varnish: 229209040
age: 0
via: 1.1 varnish (Varnish/6.6)
x-varnish-cache: MISS

HTTP/2 200 
server: nginx
date: Tue, 05 Sep 2023 23:29:04 GMT
content-type: text/html; charset=UTF-8
content-length: 16013
cache-control: must-revalidate, no-cache, private
x-drupal-dynamic-cache: UNCACHEABLE
x-ua-compatible: IE=edge
content-language: it
x-content-type-options: nosniff
x-frame-options: ALLOW-FROM https://mobiliere-int.ch
expires: Sun, 19 Nov 1978 05:00:00 GMT
content-security-policy: default-src 'self' 'unsafe-inline' 'unsafe-eval' data: jquery.com *.jquery.com *.cloudflare.com mobiliar.rokka.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: *.jquery.com cdn.jsdelivr.net www.google.com *.googleapis.com www.googletagmanager.com www.google-analytics.com *.google-analytics.com www.gstatic.com ajax.aspnetcdn.com *.google.com *.facebook.net *.googleadservices.com *.googletagmanager.com *.doubleclick.net *.g.doubleclick.net *.cloudflare.com cdn.rawgit.com *.youtube.com *.tiqcdn.com *.tealiumiq.com visitor-service-eu-central-1.tealiumiq.com *.jacando.jobs *.evenito.com evenito.com *.ytimg.com rtclauncher.luware.com *.googleoptimize.com *.hotjar.com *.newrelic.com bam.eu01.nr-data.net https://googleads.g.doubleclick.net *.google.ch unpkg.com jquery.com code.jquery.com *.googleadservices.com mobiliar.ch mobiliere.ch mobiliare.ch protekta.ch mobi24.ch *.mobiliar.ch *.mobiliere.ch *.mobiliare.ch *.protekta.ch *.mobi24.ch *.facebook.com *.facebook.net *.googleanalytics.com www.googleanalytics.com js-cdn.dynatrace.com *.bf.dynatrace.com die-mobiliar.stg.tools.factsheetslive.com die-mobiliar.tools.factsheetslive.com *.linkedin.com *.licdn.com *.anchor.fm https://podcasters.spotify.com *.evenito.site *.event-anmeldung.com; object-src 'none'; style-src 'self' 'unsafe-inline' 'unsafe-eval' data: *.cloudflare.com *.googleapis.com *.jsdelivr.net *.evenito.com fonts.googleapis.com *.google.com *.event-anmeldung.com; img-src 'self' 'unsafe-inline' 'unsafe-eval' data: www.google-analytics.com *.google-analytics.com *.linkedin.com *.gstatic.com *.googleusercontent.com *.facebook.com *.googleapis.com www.google.com *.google.com www.google.ch *.google.ch *.googletagmanager.com *.doubleclick.net cdn.rawgit.com raw.githubusercontent.com *.rokka.io *.jsdelivr.net *.doubleclick.net *.tdbtrk.com *.tiqcdn.com *.tealiumiq.com mobiliar-pub.ch *.googleapis.com *.google.de *.google.mk *.google.ml i.ytimg.com cm.g.doubleclick.net translate.google.com mobiliar.ch mobiliare.ch mobiliere.ch google.gr *.google.it *.google.com.mx *.google.com.pk *.google.co.kr *.google.ae *.facebook.com *.facebook.net *.linkedin.com *.licdn.com; frame-src 'self' 'unsafe-inline' 'unsafe-eval' data: *.doubleclick.net *.youtube.com *.jacando.jobs *.helloeko.com *.eko.com anchor.fm *.hotjar.com zswpmanager.wip.mmc.com *.essd.ch *.3w-group.ch *.simplex.tv *.fls.doubleclick.net gateway.zscloud.net mobiliar.ch mobiliere.ch mobiliare.ch protekta.ch mobi24.ch *.mobiliar.ch *.mobiliere.ch *.mobiliare.ch *.protekta.ch *.mobi24.ch *.facebook.com *.google.com die-mobiliar.stg.tools.factsheetslive.com die-mobiliar.tools.factsheetslive.com mobi-check-hochwasserschutz.whatwedo.io giphy.com *.vimeo.com *.linkedin.com *.licdn.com *.anchor.fm *.spotify.com podcasters.spotify.com *.evenito.site *.event-anmeldung.com; font-src 'self' 'unsafe-inline' 'unsafe-eval' data: *.googleusercontent.com fonts.gstatic.com github.com; connect-src 'self' 'unsafe-inline' 'unsafe-eval' data: www.google-analytics.com *.google.com *.google.ch analytics.google.com *.doubleclick.net *.tealiumiq.com *.tiqcdn.com *.tdbtrk.com rtclauncherapi.luware.com wss://rtclauncherapi.luware.com *.googleapis.com *.databridge.tdbtrk.com *.akamai.tiqcdn.com wss://*.hotjar.com *.hotjar.com *.hotjar.io bam.eu01.nr-data.net jquery.com code.jquery.com rdtds.net js-cdn.dynatrace.com *.bf.dynatrace.com cdn.linkedin.oribi.io; report-uri /report-csp-violation
strict-transport-security: max-age=31536000; includeSubDomains
x-drupal-cache: HIT
content-encoding: gzip
vary: Accept-Encoding, X-Forwarded-Proto
x-varnish: 231029340
age: 0
via: 1.1 varnish (Varnish/6.6)
x-varnish-cache: MISS
accept-ranges: bytes