| date | Wed, 21 Oct 2026 09:04:31 GMT |
| content-type | text/html |
| cache-control | no-cache, no-store, must-revalidate |
| content-encoding | br |
| last-modified | Wed, 14 Oct 2026 08:21:37 GMT |
| vary | Accept-Encoding |
| strict-transport-security | max-age=31536000; includeSubdomain |
| referrer-policy | origin |
| x-content-type-options | nosniff |
| x-xss-protection | 1; mode=block; report=https://cssversicherung.report-uri.com/r/d/xss/enforce |
| x-dns-prefetch-control | off |
| expect-ct | max-age=21600, enforce, report-uri=https://cssversicherung.report-uri.com/r/d/ct/enforce |
| feature-policy | accelerometer 'none'; ambient-light-sensor 'none'; autoplay 'self'; camera 'none'; encrypted-media 'none'; fullscreen 'self'; geolocation 'self' https://maps.googleapis.com; gyroscope 'none'; magnetometer 'none'; microphone 'none'; midi 'none'; payment 'none'; picture-in-picture *; speaker 'none'; sync-xhr 'self'; usb 'none'; vr 'none' |
| nel | {report_to:default,max_age:31536000,include_subdomains:true, failure_fraction: 0.5} |
| permissions-policy | fullscreen=(self), geolocation=(self), sync-xhr=(self), accelerometer=(), ambient-light-sensor=(), autoplay=(), camera=(), encrypted-media=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), speaker=(), usb=(), vr=() |
| report-to | report-to: {group:default,max_age:31536000,endpoints:[{url:https://cssversicherung.report-uri.com/a/d/g}],include_subdomains:true} |
| x-frame-options | SAMEORIGIN |
| content-security-policy | default-src 'self'; style-src 'self' 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline' fonts.googleapis.com unpkg.com; img-src 'self' data: blob: *.css.ch maps.gstatic.com maps.googleapis.com cssversicherung.scene7.com mapsresources-pa.googleapis.com *.doubleclick.net ct.pinterest.com www.facebook.com www.google.ch www.google.com www.google.de www.google.at www.google.it www.google.fr www.google.li; font-src 'self' data: fonts.gstatic.com; media-src 'self' data: blob: cssversicherung.scene7.com; script-src 'self' 'unsafe-inline' assets.adobedtm.com; script-src-elem 'self' blob: assets.adobedtm.com maps.googleapis.com consent.cookiebot.com consentcdn.cookiebot.com *.googletagmanager.com *.facebook.net analytics.tiktok.com *.doubleclick.net www.googleadservices.com www.google.ch www.google.com www.google.de www.google.at www.google.it www.google.fr www.google.li www.gstatic.com; connect-src 'self' *.css.ch maps.googleapis.com consentcdn.cookiebot.com *.applicationinsights.azure.com cssversicherung.scene7.com assets.adobedtm.com edge.api.flagsmith.com js.monitor.azure.com www.google.com analytics.tiktok.com *.doubleclick.net www.google.com endpoint-css.cognigy.cloud wss://endpoint-css.cognigy.cloud; frame-src 'self' *.css.ch css-production-messaging-webchat.patty-awseuc1.swops.cloud consentcdn.cookiebot.com *.doubleclick.net www.googletagmanager.com www.google.com; object-src 'none';upgrade-insecure-requests;block-all-mixed-content;report-uri https://cssversicherung.report-uri.com/r/d/csp/enforce;report-to default; |
| pragma | no-cache |
| expires | 0 |
| statuscode | 200 |
| http_version | HTTP/2 |
(Nice to have)