Oferlo.ch

server: nginx
date: Mon, 13 Nov 2023 16:52:32 GMT
content-type: text/html
content-length: 162
location: https://www.oferlo.ch/
x-content-type-options: nosniff

HTTP/2 200 
server: nginx
date: Mon, 13 Nov 2023 16:52:33 GMT
content-type: text/html; charset=UTF-8
x-powered-by: Hyperia
set-cookie: PHPSESSID=bo90qlpus0ugk36cshmdussmpr; path=/; secure; HttpOnly
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
set-cookie: SrvCch=0; expires=Tue, 12-Nov-2024 16:41:05 GMT; Max-Age=31536000; path=/
x-frame-options: DENY
x-content-type-options: nosniff
strict-transport-security: max-age=10; includeSubDomains
feature-policy: accelerometer 'self'; ambient-light-sensor 'self'; autoplay 'self'; battery 'self'; camera 'self'; display-capture 'self'; document-domain 'self'; encrypted-media 'self'; fullscreen 'self'; geolocation 'self'; gyroscope 'self'; layout-animations 'self'; magnetometer 'self'; microphone 'self'; midi 'self'; oversized-images 'self'; payment 'self'; picture-in-picture *; publickey-credentials-get 'self'; sync-xhr 'self'; usb 'self'; wake-lock 'self'; xr-spatial-tracking 'self'
permissions-policy: accelerometer=(self), ambient-light-sensor=(self), autoplay=(self), battery=(self), camera=(self), display-capture=(self), document-domain=(self), encrypted-media=(self), fullscreen=(self), geolocation=(self), gyroscope=(self), layout-animations=(self), magnetometer=(self), microphone=(self), midi=(self), oversized-images=(self), payment=(self), picture-in-picture=(*), publickey-credentials-get=(self), sync-xhr=(self), usb=(self), wake-lock=(self), xr-spatial-tracking=(self)
referrer-policy: strict-origin-when-cross-origin
x-xss-protection: 1; mode=block; report=https://hyperia.report-uri.com
report-to: []
content-security-policy: default-src 'self' 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' *; connect-src 'self' 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' *; font-src 'self' 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' *; frame-src 'self' 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' *; img-src 'self' 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' * data:; manifest-src 'self' 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' *; object-src 'self' 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' *; prefetch-src 'self' 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' *; script-src 'self' 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' *; style-src 'self' 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' *; media-src 'self' 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' *; form-action 'self' 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' *; worker-src 'self' 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' * blob:; report-uri https://hyperia.report-uri.com; block-all-mixed-content; upgrade-insecure-requests
access-control-allow-credentials: true
set-cookie: _csrf=98b27da6bd4a16e2d5629278df722984b16f57d5fd8c5dcae7988577c28198baa%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22y9M73VpRM8vgmHrcHPNUSlQ8F80wjnl8%22%3B%7D; path=/; secure; HttpOnly; SameSite=Lax
vary: Accept-Encoding
x-upstream-server: letakomat-frontend-all-67b6df5f8c-mqfxm
x-proxy-cache: HIT
x-proxy-date: Mon, 13 Nov 2023 16:41:05 GMT
x-proxy-date-now: Monday, 13-Nov-2023 16:52:33 GMT
x-proxy-cache-type: nl30m
x-proxy-cache-ua: ibt-1-ibr-0-imb-0
content-encoding: br