Date: Mon, 30 Nov 2020 06:26:02 GMT
Server: ******
Set-Cookie: FSSLB=1; path=/; domain=.financescout24.ch; expires=Wed, 30-Nov-2022 06:31:04 GMT; HttpOnly
Set-Cookie: FSSID=CAAmBh1GAAAAAAB8kMRfGRSAAnyQxF8BAAAAAACo-IZjfJDEXwDQr3kBAAEyGAAAfJDEXwEAhQEAA-YZAAB8kMRfAQB3AQABLRgAAHyQxF8BABwBAAMIDgAAfJDEXwEAtQEAAa8hAAB8kMRfAQA; path=/; domain=.financescout24.ch; expires=Tue, 30-Nov-2021 06:26:04 GMT; HttpOnly
Set-Cookie: FSSSC=15.G6900799391330735129.1|284.3592:375.6189:377.6194:389.6630:437.8623; path=/; domain=.financescout24.ch; HttpOnly
Set-Cookie: FSSRT=fJDEXwABAA; path=/; domain=.financescout24.ch; expires=Tue, 30-Nov-2021 06:26:04 GMT; HttpOnly
Set-Cookie: fs24.userOrigin=external; expires=Mon, 07-Dec-2020 06:26:02 GMT; Max-Age=604800; path=/; domain=financescout24.ch; secure; samesite=strict
Set-Cookie: BIGipServerpool_financescout-rancher2docker-prod_http=218114058.20480.0000; path=/; Httponly
Set-Cookie: .Stackify.Rum=42c21376-bcc5-4cbe-b3cb-e499c44d95ab
Set-Cookie: BIGipServerpool_financescout_live_sitespect=1627460618.19999.0000; path=/; Httponly; Secure
RTSS: 1-100-10
Content-Type: text/html; charset=UTF-8
Vary: Accept-Encoding
X-StackifyID: V1|42c21376-bcc5-4cbe-b3cb-e499c44d95ab|C63382|CD81|
Cache-Control: private, max-age=0, proxy-revalidate, no-store, no-cache, must-revalidate
Link: ; rel="shortlink", ; rel="canonical"
Link: ; rel="alternate"; hreflang="de"
Link: ; rel="alternate"; hreflang="fr"
Link: ; rel="alternate"; hreflang="it"
Link: ; rel="revision"
X-UA-Compatible: IE=edge
Content-language: de
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
Expires: Sun, 31 May 2020 02:06:41 GMT
Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.financescout24.ch https://cdnjs.cloudflare.com https://www.googletagmanager.com https://www.google-analytics.com https://ajax.googleapis.com http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io http://www.googleadservices.com http://*.krxd.net http://connect.facebook.net https://secure.adnxs.com https://*.doubleclick.net https://*.crossengage.io https://www.facebook.com https://tagmanager.google.com https://bat.bing.com https://*.intercom.io https://*.intercomcdn.com https://*.dwin1.com https://insitez.blob.core.windows.net https://*.matelso.de https://*.criteo.net https://*.criteo.com; object-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com https://tagmanager.google.com; img-src 'self' 'unsafe-inline' *.immoscout24.ch *.autoscout24.ch data: https://www.google-analytics.com https://www.facebook.com https://*.krxd.net https://www.google.com https://*.doubleclick.net https://www.google.ch https://*.admeira.ch https://ssl.gstatic.com/ https://www.gstatic.com/ http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io https://bat.bing.com https://*.intercomcdn.com https://*.intercomassets.com https://*.criteo.com https://*.yahoo.com https://*.taboola.com https://*.pubmatic.com https://*.e-planning.net https://*.media.net https://*.sharethrough.com https://*.omnitagjs.com https://*.bidswitch.net https://*.yieldlab.net https://*.adform.net https://*.teads.tv https://*.adscale.de https://*.openx.net https://*.3lift.com https://*.advertising.com https://*.360yield.com https://*.casalemedia.com https://*.smartadserver.com https://*.adnxs.com https://*.rubiconproject.com https://*.smaato.net https://*.outbrain.com https://*.google.de https://*.twiago.com https://*.ivitrack.com https://*.yandex.ru https://*.cdglb.com https://*.addthis.com https://*.yieldmo.com https://*.tapad.com https://*.postrelease.com https://*.liadm.com https://*.tremorhub.com https://*.stickyadstv.com https://*.bluekai.com https://*.thebrighttag.com https://*.smartclip.net https://*.bnmla.com; media-src 'self' https://*.intercomcdn.com; frame-src 'self' https://www.youtube.com *.financescout24.ch *.fs24docker.ch https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io https://cdn.krxd.net https://www.facebook.com https://*.g.doubleclick.net https://*.awin1.com https://*.criteo.com; frame-ancestors 'self'; child-src 'self' https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io https://*.intercomcdn.com; font-src 'self' data: https://themes.googleusercontent.com https://fonts.gstatic.com http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io https://js.intercomcdn.com; connect-src 'self' *.financescout24.ch *.fs24docker.ch http://*.hotjar.com:* https://*.hotjar.com:* http://*.hotjar.io https://*.hotjar.io wss://*.hotjar.com https://*.crossengage.io https://*.facebook.net https://*.facebook.com https://*.google-analytics.com https://*.doubleclick.net https://*.intercom.io wss://*.intercom.io https://*.intercomcdn.com https://*.informizely.com https://*.matelso.de https://www.google.com https://adservice.google.com https://*.criteo.com https://criteo-sync.teads.tv
X-Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.financescout24.ch https://cdnjs.cloudflare.com https://www.googletagmanager.com https://www.google-analytics.com https://ajax.googleapis.com http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io http://www.googleadservices.com http://*.krxd.net http://connect.facebook.net https://secure.adnxs.com https://*.doubleclick.net https://*.crossengage.io https://www.facebook.com https://tagmanager.google.com https://bat.bing.com https://*.intercom.io https://*.intercomcdn.com https://*.dwin1.com https://insitez.blob.core.windows.net https://*.matelso.de https://*.criteo.net https://*.criteo.com; object-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com https://tagmanager.google.com; img-src 'self' 'unsafe-inline' *.immoscout24.ch *.autoscout24.ch data: https://www.google-analytics.com https://www.facebook.com https://*.krxd.net https://www.google.com https://*.doubleclick.net https://www.google.ch https://*.admeira.ch https://ssl.gstatic.com/ https://www.gstatic.com/ http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io https://bat.bing.com https://*.intercomcdn.com https://*.intercomassets.com https://*.criteo.com https://*.yahoo.com https://*.taboola.com https://*.pubmatic.com https://*.e-planning.net https://*.media.net https://*.sharethrough.com https://*.omnitagjs.com https://*.bidswitch.net https://*.yieldlab.net https://*.adform.net https://*.teads.tv https://*.adscale.de https://*.openx.net https://*.3lift.com https://*.advertising.com https://*.360yield.com https://*.casalemedia.com https://*.smartadserver.com https://*.adnxs.com https://*.rubiconproject.com https://*.smaato.net https://*.outbrain.com https://*.google.de https://*.twiago.com https://*.ivitrack.com https://*.yandex.ru https://*.cdglb.com https://*.addthis.com https://*.yieldmo.com https://*.tapad.com https://*.postrelease.com https://*.liadm.com https://*.tremorhub.com https://*.stickyadstv.com https://*.bluekai.com https://*.thebrighttag.com https://*.smartclip.net https://*.bnmla.com; media-src 'self' https://*.intercomcdn.com; frame-src 'self' https://www.youtube.com *.financescout24.ch *.fs24docker.ch https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io https://cdn.krxd.net https://www.facebook.com https://*.g.doubleclick.net https://*.awin1.com https://*.criteo.com; frame-ancestors 'self'; child-src 'self' https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io https://*.intercomcdn.com; font-src 'self' data: https://themes.googleusercontent.com https://fonts.gstatic.com http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io https://js.intercomcdn.com; connect-src 'self' *.financescout24.ch *.fs24docker.ch http://*.hotjar.com:* https://*.hotjar.com:* http://*.hotjar.io https://*.hotjar.io wss://*.hotjar.com https://*.crossengage.io https://*.facebook.net https://*.facebook.com https://*.google-analytics.com https://*.doubleclick.net https://*.intercom.io wss://*.intercom.io https://*.intercomcdn.com https://*.informizely.com https://*.matelso.de https://www.google.com https://adservice.google.com https://*.criteo.com https://criteo-sync.teads.tv
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=31536000
Referrer-Policy: strict-origin-when-cross-origin
Feature-Policy: accelerometer 'none';autoplay 'none';camera 'none';document-domain 'none';encrypted-media 'none';fullscreen 'none';gyroscope 'none';magnetometer 'none';microphone 'none';midi 'none';payment 'none';picture-in-picture 'none';publickey-credentials-get 'none';usb 'none';xr-spatial-tracking 'none';geolocation 'none';sync-xhr 'self';
Pragma: no-cache
Keep-Alive: timeout=5, max=250
Connection: Keep-Alive
Transfer-Encoding: chunked
x-encoded-content-encoding: gzip