HTTP/1.1 200 OK
Server: nginx
Date: Sun, 30 Jun 2019 15:30:34 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 656214
Connection: keep-alive
Vary: Accept-Encoding
x-content-type-options: nosniff
X-UA-Compatible: X-UA-Compatible: IE=edge,chrome=1
Link: <https://moneypark.ch/en/>; rel="alternate"; hreflang="en", <https://moneypark.ch/>; rel="alternate"; hreflang="de-ch", <https://moneypark.ch/fr/>; rel="alternate"; hreflang="fr-ch", <https://moneypark.ch/it/>; rel="alternate"; hreflang="it-ch"
X-Frame-Options: SAMEORIGIN
Vary: Cookie, Accept-Language
Content-Language: de
X-Protected-By: Sqreen
Content-Security-Policy: child-src 'self' blob:; connect-src 'self' http://*.visualwebsiteoptimizer.com https://*.addthis.com https://*.g.doubleclick.net https://*.google-analytics.com https://*.google.at https://*.google.ch https://*.google.co.uk https://*.google.com https://*.google.com.ua https://*.google.de https://*.google.es https://*.google.fr https://*.hotjar.com https://*.hotjar.io https://*.moneypark.ch https://*.mouseflow.com https://*.olark.com https://*.upscope.io https://*.us5.list-manage.com https://*.visualwebsiteoptimizer.com https://*.vwo.com https://moneypark.ch https://mpcdn.ch wss://*.hotjar.com wss://*.upscope.io wss://moneypark.ch; default-src 'self' http://*.visualwebsiteoptimizer.com https://*.visualwebsiteoptimizer.com https://*.vwo.com https://mpcdn.ch; font-src 'self' data: https://*.gstatic.com https://*.vwo.com https://mpcdn.ch; frame-src 'self' data: http://*.visualwebsiteoptimizer.com https://*.addthis.com https://*.d-l.ch https://*.facebook.com https://*.g.doubleclick.net https://*.google.at https://*.google.ch https://*.google.co.uk https://*.google.com https://*.google.de https://*.google.fr https://*.google.it https://*.google.li https://*.googleadservices.com https://*.googlesyndication.com https://*.hotjar.com https://*.olark.com https://*.upscope.io https://*.us5.list-manage.com https://*.visualwebsiteoptimizer.com https://*.vwo.com https://*.youtube.com https://mpcdn.ch https://optimize.google.com wss://*.hotjar.com wss://*.upscope.io; img-src 'self' data: http://*.visualwebsiteoptimizer.com https://*.addthis.com https://*.apis.google.com https://*.facebook.com https://*.g.doubleclick.net https://*.ggpht.com https://*.google-analytics.com https://*.google.at https://*.google.ch https://*.google.co.uk https://*.google.com https://*.google.com.ua https://*.google.de https://*.google.es https://*.google.fr https://*.google.it https://*.google.li https://*.googleapis.com https://*.googlesyndication.com https://*.googletagmanager.com https://*.gstatic.com https://*.olark.com https://*.visualwebsiteoptimizer.com https://*.vwo.com https://moneypark.ch https://mpcdn.ch https://optimize.google.com wss://moneypark.ch; manifest-src 'self'; media-src 'self' data: https://*.olark.com https://mpcdn.ch; object-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' blob: data: http://*.visualwebsiteoptimizer.com https://*.addthis.com https://*.addthisedge.com https://*.adtech.de https://*.facebook.com https://*.g.doubleclick.net https://*.google-analytics.com https://*.google.com https://*.googleadservices.com https://*.googleapis.com https://*.googlesyndication.com https://*.googletagmanager.com https://*.gstatic.com https://*.hotjar.com https://*.linkedin.com https://*.mouseflow.com https://*.olark.com https://*.provenexpert.com https://*.upscope.io https://*.us5.list-manage.com https://*.visualwebsiteoptimizer.com https://*.vwo.com https://*.workable.com https://freegeoip.net https://moneypark.ch https://mpcdn.ch https://optimize.google.com wss://*.hotjar.com wss://*.upscope.io wss://moneypark.ch; style-src 'self' 'unsafe-inline' data: https://*.google.com https://*.googleapis.com https://*.olark.com https://*.provenexpert.com https://*.vwo.com https://fonts.googleapis.com https://mpcdn.ch https://optimize.google.com; worker-src 'self' blob:; prefetch-src 'self'; report-uri https://reports-api.sqreen.io/browser/v0/csp-violations/csp_5529131864464dcaa13450dc27252292
X-XSS-Protection: 1
Referrer-Policy: no-referrer-when-downgrade
Set-Cookie: referer_uid=2cf2f4c5b38c4fef8702f62d7451180a; expires=Mon, 29-Jun-2020 15:30:33 GMT; HttpOnly; Max-Age=31536000; Path=/; Secure
Set-Cookie: sessionid=tk147onlarruqazsj1yvsteirz6x88dm; expires=Sun, 14-Jul-2019 15:30:33 GMT; HttpOnly; Max-Age=1209600; Path=/; Secure
P3P: CP="NOI ADM DEV PSAi COM NAV OUR OTR STP IND DEM"
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload