HTTP/1.1 200 OK
Date: Tue, 16 Apr 2019 01:26:52 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 38194
Connection: keep-alive
Vary: Accept-Encoding
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Expect-CT: max-age=0
X-Frame-Options: SAMEORIGIN
Referrer-Policy: strict-origin-when-cross-origin
X-Permitted-Cross-Domain-Policies: none
Content-Security-Policy: default-src 'none'; script-src 'unsafe-inline' 'unsafe-eval' 'self' https://www.google-analytics.com https://www.googletagmanager.com; font-src 'self' https://fonts.gstatic.com https://fast.fonts.net https://fonts.googleapis.com http://fast.fonts.net; connect-src 'self'; object-src 'self'; style-src 'unsafe-inline' 'self' https://fast.fonts.net https://fonts.googleapis.com; img-src 'self' data: https://www.google-analytics.com http://placehold.it https://placehold.it; manifest-src 'self'; frame-src 'self' https://www.youtube.com https://newsletter.kadi.ch https://newsletter.f.kadi.ch *.youtube-nocookie.com *.publisherconnect.ch https://live.solique.ch; media-src 'self'
Strict-Transport-Security: max-age=31536000; includeSubDomains
Set-Cookie: s_66=3fd48beaefaa01fda651c8383efb68392989216b; path=/; HttpOnly; Secure; SameSite=Lax
Set-Cookie: __sv_language=0%2C0; path=/; secure
X-XSS-Protection: 1; mode=block