HTTP/1.1 200 OK
Date: Tue, 11 Aug 2020 17:03:16 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 162340
Connection: close
x-nc-product-lim: 1
x-frame-options: SAMEORIGIN
content-security-policy: default-src 'none' ; manifest-src 'self'; base-uri 'self'; form-action 'self' https://*.migros.ch https://*.sandbox.datatrans.com https://*.facebook.com; style-src 'self' 'unsafe-inline' https://*.getback.ch https://*.cloudflare.com https://*.googleapis.com ; style-src-elem 'self' 'unsafe-inline' https://*.googleapis.com https://*.getback.ch https://*.cloudflare.com https://*.googleadservices.com https://www.google.com https://*.fitanalytics.com https://tagmanager.google.com https://gateway.zscalertwo.net; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://*.google-analytics.com https://*.googletagmanager.com https://*.context.cloud.sap https://h.online-metrix.net https://www.google.com https://*.googleapis.com https://*.datatrans.com https://*.smartassistant.com https://*.youtube.com https://*.ytimg.com https://*.facebook.net https://*.hotjar.com https://*.getback.ch https://*.dwin1.com https://*.beratungshero.ch https://*.gstatic.com https://*.googleadservices.com https://*.doubleclick.net https://*.profity.ch https://*.bing.com https://tagmanager.google.com https://gateway.zscaler.net https://*.googlesyndication.com; frame-ancestors 'self' ; script-src-elem 'self' 'unsafe-inline' https://*.google-analytics.com https://*.googletagmanager.com https://*.context.cloud.sap https://h.online-metrix.net https://www.google.com https://*.googleapis.com https://*.datatrans.com https://*.smartassistant.com https://*.youtube.com https://*.ytimg.com https://*.facebook.net https://*.hotjar.com https://*.getback.ch https://*.dwin1.com https://*.beratungshero.ch https://*.gstatic.com https://*.googleadservices.com https://*.doubleclick.net https://*.fitanalytics.com https://*.connects.ch https://*.bing.com https://tagmanager.google.com https://gateway.zscloud.net https://gateway.zscalertwo.net ; img-src 'self' data: https://*.amazonaws.com https://*.migros.ch https://*.rokka.io https://*.online-metrix.net https://*.gstatic.com https://*.googleapis.com https://*.youtube.com https://*.ytimg.com https://*.google-analytics.com https://*.doubleclick.net https://*.google.com https://www.google.at & https://www.google.se & https://www.google.de https://www.google.it https://www.google.fr https://www.google.sr https://www.google.ch https://www.google.co.uk https://*.facebook.com https://*.googletagmanager.com https://*.googleusercontent.com https://*.smartassistant.com https://*.cloudfront.net https://*.getback.ch https://*.bs.serving-sy.com https://*.beratungshero.ch https://*.fitanalytics.com https://*.bing.com https://profity.ch ; font-src data: https://*.migros.ch https://*.gstatic.com https://*.cloudflare.com https://*.cloudfront.net https://*.fitanalytics.com https://*.hotjar.com https://*.avast.com; frame-src 'self' https://*.migros.ch https://h.online-metrix.net https://*.datatrans.com https://*.youtube.com https://*.vimeo.com https://*.doubleclick.net https://*.hotjar.com https://*.facebook.com https://*.atbit-konfigurator.de https://www.google.com https://*.lacmp.net https://*.postfinance.ch https://my.matterport.com https://*.wufoo.com https://widget-prod.beratungshero.ch https://*.admin.ch; connect-src 'self' https://*.context.cloud.sap https://*.migros.ch https://h.online-metrix.net https://*.richrelevance.com https://vimeo.com https://www.google.com https://www.google.at https://www.google.ch https://www.google.it https://www.google.fr https://*.beratungshero.ch https://*.getback.ch https://*.hotjar.com https://*.hotjar.io https://*.nonstoppartner.net https://*.doubleclick.net https://*.google-analytics.com https://*.facebook.com https://*.smartassistant.com https://*.amazonaws.com https://*.lacmp.net https://*.bing.com https://*.google-analytics.com https://*.google.com https://api.amplitude.com; report-uri https://www.bikeworld.ch/jsapi/v1/de/log/csp
x-nc-product: ,b463355300000,463365300000,463365200000,463353700000,464816000000,464815900000,464810500000,464822800000,464822900000,463358000000,463365400000,463365500000,464828700000,464828600000,463353400000,463348900000,463359200000,464803800000,464810600000,463358100000,463365700000,465020000000,493213400000,b462977700000,462980200000,b465033500000,493217900000,465031600000,b465033200000,b462979800000,466007100000,465009900000,493219500000,b465003400000,463505500000,461346500000,460263600000,464822400000,464822300000,b462907900000,b462908100000,b470285500000,b462905800000,b470285600000,b462917500000,b470288200000,b462900400000,b462917600000,b462900100000,b462906700000,b462903000000,b462917700000,b470288900000,b462916700000,b462933000000,b470263900000,b462916100000,463366200000,463366500000,463366100000,463366400000,463366700000,463365600000,463365900000,463364800000,463367500000,b463364400000,b463364300000,b463364200000,b463364100000,463366900000,463367000000,b462909800000,b470227700000,b462961100000,b462910100000,b490286400000,b470269700000,b462941900000,b462941800000,
content-encoding: gzip
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubdomains
x-xss-protection: 1;mode=block
accept-ranges: bytes
x-device-type-id: d
x-nc-age: 141
cache-control: no-store
