Xmas-advent.ch

server: nginx
date: Sat, 12 Apr 2025 04:17:42 GMT
content-type: text/html
content-length: 138
location: http://www.xmas-advent.ch
x-iplb-request-id: 6CB200EA:D944_D5BA2105:0050_67F9E966_88027967:280E
x-iplb-instance: 52217
set-cookie: SERVERID77446=200179|Z/npa|Z/npa; path=/; HttpOnly

HTTP/1.1 302 Found
Cache-Control: private
Location: https://www.xmas-advent.ch:443/
Content-Length: 0
Date: Sat, 12 Apr 2025 04:17:42 GMT
Content-Type: text/html; charset=UTF-8

HTTP/2 302 
server: nginx
content-type: text/html; charset=UTF-8
cache-control: max-age=0, private, must-revalidate,max-age=0, must-revalidate, private
set-cookie: adzSession=b637ba9874d10b189e2c8e222c0e7869; path=/; secure; HttpOnly; SameSite=None
date: Sat, 12 Apr 2025 04:17:43 GMT
location: /advent-calendar/0/r2xeW/
expires: Sat, 12 Apr 2025 04:17:43 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

HTTP/2 200 
server: nginx
content-type: text/html; charset=UTF-8
cache-control: max-age=0, private, must-revalidate,max-age=0, must-revalidate, no-cache, no-store, private
set-cookie: adzSession=73f4028777deb93fdbbc811caca2cca4; path=/; secure; HttpOnly; SameSite=None
date: Sat, 12 Apr 2025 04:17:43 GMT
reporting-endpoints: csp-endpoint="/api/csp-report"
content-security-policy-report-only: default-src 'self' *.a-fs.me gs://f.a-fs.me/ cdnjs.cloudflare.com/ajax/libs/ unpkg.com/@zxing/library@ cdn.jsdelivr.net/phaser/ google-analytics.com *.googletagmanager.com *.googleapis.com *.google.com *.gstatic.com plus.codes/api trackjs.com *.g.doubleclick.net *.doubleclick.net *.privacy-center.org www.wysistat.com *.ouest-france.fr *.pa-cd.com *.merci-app.com *.scite.ai *.capitalkoala.com www.capitalkoala.com capitalkoala.com toolsmagick.com f.a-fs.me564f240e030f4b8a258b4567. f.a-fs.me55c0728a7400eb22248b4567 f.a-fs.me55c0728a7400eb22248b4567.woff https://dataplus.adbx.io; script-src 'self' connect.facebook.net *.a-fs.me gs://f.a-fs.me/ google-analytics.com *.googletagmanager.com *.googleapis.com *.google.com *.gstatic.com plus.codes/api *.ouest-france.fr *.pa-cd.com *.privacy-center.org www.wysistat.com platform.twitter.com connect.facebook.net 'unsafe-inline' 'unsafe-eval'; style-src  'self' *.googleapis.com *.gstatic.com *.a-fs.me gs://f.a-fs.me/ 'unsafe-inline'; img-src 'self' *.trackjs.com www.google.fr *.a-fs.me gs://f.a-fs.me/ google-analytics.com *.googletagmanager.com *.googleapis.com *.google.com *.gstatic.com plus.codes/api www.wysistat.com *.capitalkoala.com www.capitalkoala.com capitalkoala.com toolsmagick.com *.ouest-france.fr *.facebook.com *.fbcdn.net data: blob:;  font-src 'self' *.gstatic.com *.a-fs.me gs://f.a-fs.me/ *.merci-app.com *.scite.ai f.a-fs.me564f240e030f4b8a258b4567. f.a-fs.me55c0728a7400eb22248b4567 f.a-fs.me55c0728a7400eb22248b4567.woff  data:; connect-src  'self' *.google-analytics.com *.googleapis.com trackjs.com *.trackjs.com *.analytics.google.com www.google.com *.a-fs.me gs://f.a-fs.me/ *.privacy-center.org *.pa-cd.com *.g.doubleclick.net *.doubleclick.net https://dataplus.adbx.io; object-src 'none'; frame-src  'self' *.google.com *.googletagmanager.com platform.twitter.com www.facebook.com; frame-ancestors 'none'; base-uri 'self'
samesite: lax
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
strict-transport-security: max-age=63072000; includeSubDomains
expires: Sat, 12 Apr 2025 04:17:43 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000