Thomy.ch Summary

Date: Thu, 10 Dec 2020 00:05:23 GMT
Server: Apache
X-Content-Type-Options: nosniff
X-Content-Type-Options: nosniff
Cache-Control: max-age=43200, public
Link: ; rel="shortlink", ; rel="canonical"
Link: ; rel="alternate"; hreflang="de"
Link: ; rel="alternate"; hreflang="fr"
Link: ; rel="revision"
X-UA-Compatible: IE=edge
Content-language: de
X-Frame-Options: SAMEORIGIN
Expires: Sun, 19 Nov 1978 05:00:00 GMT
Last-Modified: Wed, 09 Dec 2020 09:51:57 GMT
ETag: "1607507517"
Vary: Cookie
Content-Security-Policy: default-src 'self' https://*.sessioncam.com https://d2oh4tlt9mrke9.cloudfront.net ws://*.sessioncam.com wss://*.sessioncam.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleapis.com *.googletagmanager.com *.google-analytics.com *.google.com *.google.co.uk *.newrelic.com *.betrad.com bam.nr-data.net static.addtoany.com https://cdnjs.cloudflare.com brand-ecommerce-assets.fusepump.com *.youtube.com s.ytimg.com *.evidon.com code.jquery.com d22xmn10vbouk4.cloudfront.net *.serving-sys.com 7225833.collect.igodigital.com connect.facebook.net stats.g.doubleclick.net *.hypemarks.com *.krxd.net *.gigya.com https://*.sessioncam.com https://d2oh4tlt9mrke9.cloudfront.net ws://*.sessioncam.com wss://*.sessioncam.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com fonts.gstatic.com https://cdnjs.cloudflare.com brand-ecommerce-assets.fusepump.com *.youtube.com cloud.typography.com *.google.com; img-src 'self' data: *.googleapis.com *.gstatic.com *.cloudflare.com *.google-analytics.com https://stats.g.doubleclick.net www.google.com www.google.co.uk *.doubleclick.net *.betrad.com *.amazonaws.com px.pump.to brand-ecommerce-assets.fusepump.com *.evidon.com https://nova.collect.igodigital.com https://www.facebook.com *.krxd.net *.google.de *.gigya.com *.openstreetmap.org *.sessioncam.com *.googletagmanager.com; media-src 'self'; frame-src 'self' static.addtoany.com *.youtube.com *.youtu.be youtu.be info.evidon.com *.fls.doubleclick.net *.hypemarks.com *.krxd.net *.gigya.com *.facebook.com *.fusepump.com; frame-ancestors 'self'; child-src 'self' static.addtoany.com *.youtube.com *.youtu.be youtu.be info.evidon.com https://2275258.fls.doubleclick.net http://2275258.fls.doubleclick.net; font-src 'self' data: fonts.gstatic.com fonts.googleapis.com https://cdnjs.cloudflare.com; connect-src 'self' brand-ecommerce-api.fusepump.com *.google-analytics.com https://collect.analyze.ly https://secure-ds.serving-sys.com https://*.sessioncam.com https://d2oh4tlt9mrke9.cloudfront.net ws://*.sessioncam.com wss://*.sessioncam.com *.doubleclick.net; report-uri /report-csp-violation
X-Content-Security-Policy: default-src 'self' https://*.sessioncam.com https://d2oh4tlt9mrke9.cloudfront.net ws://*.sessioncam.com wss://*.sessioncam.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleapis.com *.googletagmanager.com *.google-analytics.com *.google.com *.google.co.uk *.newrelic.com *.betrad.com bam.nr-data.net static.addtoany.com https://cdnjs.cloudflare.com brand-ecommerce-assets.fusepump.com *.youtube.com s.ytimg.com *.evidon.com code.jquery.com d22xmn10vbouk4.cloudfront.net *.serving-sys.com 7225833.collect.igodigital.com connect.facebook.net stats.g.doubleclick.net *.hypemarks.com *.krxd.net *.gigya.com https://*.sessioncam.com https://d2oh4tlt9mrke9.cloudfront.net ws://*.sessioncam.com wss://*.sessioncam.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com fonts.gstatic.com https://cdnjs.cloudflare.com brand-ecommerce-assets.fusepump.com *.youtube.com cloud.typography.com *.google.com; img-src 'self' data: *.googleapis.com *.gstatic.com *.cloudflare.com *.google-analytics.com https://stats.g.doubleclick.net www.google.com www.google.co.uk *.doubleclick.net *.betrad.com *.amazonaws.com px.pump.to brand-ecommerce-assets.fusepump.com *.evidon.com https://nova.collect.igodigital.com https://www.facebook.com *.krxd.net *.google.de *.gigya.com *.openstreetmap.org *.sessioncam.com *.googletagmanager.com; media-src 'self'; frame-src 'self' static.addtoany.com *.youtube.com *.youtu.be youtu.be info.evidon.com *.fls.doubleclick.net *.hypemarks.com *.krxd.net *.gigya.com *.facebook.com *.fusepump.com; frame-ancestors 'self'; child-src 'self' static.addtoany.com *.youtube.com *.youtu.be youtu.be info.evidon.com https://2275258.fls.doubleclick.net http://2275258.fls.doubleclick.net; font-src 'self' data: fonts.gstatic.com fonts.googleapis.com https://cdnjs.cloudflare.com; connect-src 'self' brand-ecommerce-api.fusepump.com *.google-analytics.com https://collect.analyze.ly https://secure-ds.serving-sys.com https://*.sessioncam.com https://d2oh4tlt9mrke9.cloudfront.net ws://*.sessioncam.com wss://*.sessioncam.com *.doubleclick.net; report-uri /report-csp-violation
X-WebKit-CSP: default-src 'self' https://*.sessioncam.com https://d2oh4tlt9mrke9.cloudfront.net ws://*.sessioncam.com wss://*.sessioncam.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleapis.com *.googletagmanager.com *.google-analytics.com *.google.com *.google.co.uk *.newrelic.com *.betrad.com bam.nr-data.net static.addtoany.com https://cdnjs.cloudflare.com brand-ecommerce-assets.fusepump.com *.youtube.com s.ytimg.com *.evidon.com code.jquery.com d22xmn10vbouk4.cloudfront.net *.serving-sys.com 7225833.collect.igodigital.com connect.facebook.net stats.g.doubleclick.net *.hypemarks.com *.krxd.net *.gigya.com https://*.sessioncam.com https://d2oh4tlt9mrke9.cloudfront.net ws://*.sessioncam.com wss://*.sessioncam.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com fonts.gstatic.com https://cdnjs.cloudflare.com brand-ecommerce-assets.fusepump.com *.youtube.com cloud.typography.com *.google.com; img-src 'self' data: *.googleapis.com *.gstatic.com *.cloudflare.com *.google-analytics.com https://stats.g.doubleclick.net www.google.com www.google.co.uk *.doubleclick.net *.betrad.com *.amazonaws.com px.pump.to brand-ecommerce-assets.fusepump.com *.evidon.com https://nova.collect.igodigital.com https://www.facebook.com *.krxd.net *.google.de *.gigya.com *.openstreetmap.org *.sessioncam.com *.googletagmanager.com; media-src 'self'; frame-src 'self' static.addtoany.com *.youtube.com *.youtu.be youtu.be info.evidon.com *.fls.doubleclick.net *.hypemarks.com *.krxd.net *.gigya.com *.facebook.com *.fusepump.com; frame-ancestors 'self'; child-src 'self' static.addtoany.com *.youtube.com *.youtu.be youtu.be info.evidon.com https://2275258.fls.doubleclick.net http://2275258.fls.doubleclick.net; font-src 'self' data: fonts.gstatic.com fonts.googleapis.com https://cdnjs.cloudflare.com; connect-src 'self' brand-ecommerce-api.fusepump.com *.google-analytics.com https://collect.analyze.ly https://secure-ds.serving-sys.com https://*.sessioncam.com https://d2oh4tlt9mrke9.cloudfront.net ws://*.sessioncam.com wss://*.sessioncam.com *.doubleclick.net; report-uri /report-csp-violation
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=1000
X-Drupal-Cache: HIT
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
Set-Cookie: visid_incap_118835=pAph0pO7Tv2r8h+MDDlAj0Nm0V8AAAAAQUIPAAAAAAD0OXC0nFXxKUCNz1YyWqns; expires=Thu, 09 Dec 2021 09:41:07 GMT; HttpOnly; path=/; Domain=.thomy.ch
Set-Cookie: incap_ses_1170_118835=tut/JbTiBQl3lIhOAK08EENm0V8AAAAAzchh5sxn9bMX6rfmsaVQqA==; path=/; Domain=.thomy.ch
Set-Cookie: ___utmvmsFBuiBic=dxxTvHiPHqd; path=/; Max-Age=900
Set-Cookie: ___utmvasFBuiBic=TEY
koAa; path=/; Max-Age=900
Set-Cookie: ___utmvbsFBuiBic=TZw
XFaOBalR: rtD; path=/; Max-Age=900
X-CDN: Incapsula
X-Iinfo: 12-18042926-18042938 NNYN CT(71 153 0) RT(1607558723053 50) q(0 0 2 1) r(4 4) U5
x-encoded-content-encoding: gzip