HTTP/1.1 200 OK
Date: Sat, 20 Jul 2019 14:39:33 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 53536
Connection: keep-alive
Vary: Accept-Encoding
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Expect-CT: max-age=0
X-Frame-Options: SAMEORIGIN
Referrer-Policy: strict-origin-when-cross-origin
X-Permitted-Cross-Domain-Policies: none
Content-Security-Policy: default-src 'none'; script-src 'unsafe-inline' 'unsafe-eval' 'self' https://www.google-analytics.com https://www.google.com https://*.hci-is24.ch https://www.gstatic.com https://flatfox.ch; font-src 'self' https://fonts.gstatic.com https://fast.fonts.net https://fonts.googleapis.com; connect-src 'self'; object-src 'self'; style-src 'unsafe-inline' 'self' https://fast.fonts.net https://fonts.googleapis.com; img-src 'self' data: https://www.google-analytics.com https://stats.g.doubleclick.net; manifest-src 'self'; frame-src 'self' https://www.youtube.com https://*.hci-is24.ch https://www.google.com https://spectando.com/ https://flatfox.ch; media-src 'self'
Strict-Transport-Security: max-age=31536000; includeSubDomains
Set-Cookie: s_72=4d52247bc0480a05627ec05c7040cc637395382d; path=/; HttpOnly; Secure; SameSite=Lax
Set-Cookie: __sv_language=0%2C0; path=/; secure
X-Powered-By: Intersim Sitevision 4.0
X-XSS-Protection: 1; mode=block