Obosbanken.no

Date: Thu, 28 Sep 2023 17:48:41 GMT
Last-Modified: Thu, 28 Sep 2023 17:48:41 GMT
Accept-Ranges: none
Connection: close
Content-type: text/html
Location: https://bank.obos.no/

HTTP/1.1 302 Found
Content-Type: text/html; charset=utf-8
Location: https://www.obos.no/bank
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Content-Security-Policy: frame-ancestors 'self' obos.no *.obos.no obosbanken.no *.obosbanken.no blockwatne.no obosblockwatne.no stg.obosblockwatne.no www.blockwatne.no www.obosblockwatne.no www.stg.obosblockwatne.no;
X-OneAgent-JS-Injection: true
X-ruxit-JS-Agent: true
Server-Timing: dtSInfo;desc="0", dtRpid;desc="26764172"
Set-Cookie: dtCookie=v_4_srv_71_sn_16F80F49B3F600DE00DED8AFEB50465E_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1; Path=/
Date: Thu, 28 Sep 2023 17:48:37 GMT
Content-Length: 528

HTTP/2 200 
date: Thu, 28 Sep 2023 17:48:42 GMT
content-type: text/html; charset=utf-8
cache-control: s-maxage=60, stale-while-revalidate
content-encoding: gzip
etag: "xt5pfgn31r2o1a"
vary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Next-Url, Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
request-context: appId=cid-v1:
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' www.obos.no stm.obos.no https://optimize.google.com https://cdn.cookielaw.org/scripttemplates/ https://cdn.mookie1.com/ https://*.doubleclick.net https://cdn.cookielaw.org http://static.hotjar.com https://static.hotjar.com https://script.hotjar.com *.googletagmanager.com ssl.google-analytics.com https://*.episerver.net https://*.adnxs.com https://www.google-analytics.com https://siteimproveanalytics.com www.googletagmanager.com https://snap.licdn.com https://cdn.cookielaw.org/ https://www.googletagmanager.com/gtm.js https://cdn.cookielaw.org/scripttemplates/ *.youtube.com https://www.clarity.ms; frame-src 'self' https://optimize.google.com www.youtube.com *.doubleclick.net https://vars.hotjar.com; font-src 'self' http://script.hotjar.com https://script.hotjar.com https://fonts.gstatic.com; media-src 'self' res.cloudinary.com; style-src 'unsafe-inline' 'self' https://optimize.google.com https://fonts.googleapis.com; img-src 'self' data: stm.obos.no stm.obos.se https://optimize.google.com https://cdn.sanity.io/ https://script.hotjar.com https://*.linkedin.com http://script.hotjar.com res.cloudinary.com https://www.google.no www.googletagmanager.com cdn.cookielaw.org www.google-analytics.com ssl.google-analytics.com www.google.com analytics.google.com https://*.adnxs.com https://*.episerver.net https://i.ytimg.com https://*.mookie1.com *.doubleclick.net; connect-src 'self' stm.obos.no stm.obos.se https://www.google.com/ads/ga-audiences https://cdn.linkedin.oribi.io analytics.google.com *.analytics.google.com https://www.google.no www.google-analytics.com *.apicdn.sanity.io *.api.sanity.io bank.obos.no https://*.sentry.io cdn.cookielaw.org https://nye.obos.no/api/ https://www.obos.no/api/ *.doubleclick.net www.obos.no https://*.clarity.ms http://*.hotjar.com:* https://*.hotjar.com:* https://vc.hotjar.io:* https://surveystats.hotjar.io wss://*.hotjar.com ws: wss:; worker-src 'self' blob:;
x-nextjs-cache: STALE
x-powered-by: Next.js