HTTP/1.1 200 OK
Date: Sat, 16 May 2020 07:47:37 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000
Vary: Referer,User-Agent,Accept-Encoding
Set-Cookie: language=de; Path=/; Expires=Sun, 16-May-2021 07:47:37 GMT; Secure
Set-Cookie: ZX_2020AFX-S=Ad5K0iGf!S!WrfJVeQxqRExYt4fMB3iz6M5zybWZvPAF3JgbI0KZlyf!ArRlahjawfHF; Path=/; Secure; HttpOnly
Content-Length: 97012
Pragma: no-cache
Cache-Control: no-cache, no-store, must-revalidate, max-age=0
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Last-Modified: Sat, 16 May 2020 07:46:42 GMT
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: frame-src 'self' blob: https://*.migrosbank.ch/ https://www.youtube.com/ https://optimize.google.com/ https://cdn.migros.ch/ https://services.logismata.ch/ https://www.googleadservices.com/ https://googleads.g.doubleclick.net/ https://stats.g.doubleclick.net/ https://tpc.googlesyndication.com/ https://8050383.fls.doubleclick.net/ https://payment.datatrans.biz/ https://edge.capturemedia.network/; object-src 'none'; frame-ancestors 'self' https://*.ti8m.ch;
Access-Control-Allow-Origin: https://blog.migrosbank.ch
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Referrer-Policy: strict-origin-when-cross-origin
Content-Type: text/html;charset=UTF-8