bank-avera.ch Review

 N/A

HTTP/1.1 301 Moved Permanently
Server: Microsoft-Azure-Application-Gateway/v2
Date: Fri, 22 Aug 2025 02:38:46 GMT
Content-Type: text/html
Content-Length: 195
Connection: keep-alive
Location: https://bank-avera.ch/

HTTP/1.1 200 OK
Date: Fri, 22 Aug 2025 02:38:47 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 22684
Connection: keep-alive
Server: Apache
Cache-Control: max-age=300, s-maxage=300
Pragma: public
Expires: Fri, 22 Aug 2025 02:40:40 GMT
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-Content-Type-Options: nosniff
Referrer-Policy: no-referrer
Permissions-Policy: geolocation=(self), microphone=(), camera=()
X-XSS-Protection: 1; mode=block
Expect-CT: max-age=2592000
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Security-Policy: default-src 'self' www.google-analytics.com 'unsafe-inline'; base-uri 'self'; connect-src 'self' blob: wss://io.fusedeck.net *.clarity.ms analytics.google.com graph.facebook.com region1.analytics.google.com region1.google-analytics.com api.mapbox.com events.mapbox.com my.tikee.io www.google-analytics.com www.google-analytics.com www.google-analytics.com stats.g.doubleclick.net; frame-src 'self' www.homegate.ch msip-service-zrnc.xaas.swissic.ch www.youtube.com services.logismata.ch www.google.com my.tikee.io intranet.eventag.ch; form-action 'self'; img-src 'self' data: https: blob: www.google-analytics.com www.google-analytics.com stats.g.doubleclick.net; script-src 'self' data: *.fusedeck.net www.clarity.ms www.facebook.com connect.facebook.net www.googletagmanager.com cdn.jsdelivr.net www.google.com www.gstatic.com www.google-analytics.com blob: 'unsafe-inline' 'unsafe-eval'; style-src 'self' data: www.gstatic.com fonts.googleapis.com www.gstatic.com 'unsafe-inline'; frame-ancestors 'self' services.logismata.ch www.jobs.ch; font-src 'self' fonts.googleapis.com fonts.gstatic.com; object-src 'self'; child-src blob:;
X-Content-Security-Policy: default-src 'self' www.google-analytics.com 'unsafe-inline'; base-uri 'self'; connect-src 'self' blob: wss://io.fusedeck.net *.clarity.ms analytics.google.com graph.facebook.com region1.analytics.google.com region1.google-analytics.com api.mapbox.com events.mapbox.com my.tikee.io www.google-analytics.com www.google-analytics.com www.google-analytics.com stats.g.doubleclick.net; frame-src 'self' www.homegate.ch msip-service-zrnc.xaas.swissic.ch www.youtube.com services.logismata.ch www.google.com my.tikee.io intranet.eventag.ch; form-action 'self'; img-src 'self' data: https: blob: www.google-analytics.com www.google-analytics.com stats.g.doubleclick.net; script-src 'self' data: *.fusedeck.net www.clarity.ms www.facebook.com connect.facebook.net www.googletagmanager.com cdn.jsdelivr.net www.google.com www.gstatic.com www.google-analytics.com blob: 'unsafe-inline' 'unsafe-eval'; style-src 'self' data: www.gstatic.com fonts.googleapis.com www.gstatic.com 'unsafe-inline'; frame-ancestors 'self' services.logismata.ch www.jobs.ch; font-src 'self' fonts.googleapis.com fonts.gstatic.com; object-src 'self'; child-src blob:;
X-WebKit-CSP: default-src 'self' www.google-analytics.com 'unsafe-inline'; base-uri 'self'; connect-src 'self' blob: wss://io.fusedeck.net *.clarity.ms analytics.google.com graph.facebook.com region1.analytics.google.com region1.google-analytics.com api.mapbox.com events.mapbox.com my.tikee.io www.google-analytics.com www.google-analytics.com www.google-analytics.com stats.g.doubleclick.net; frame-src 'self' www.homegate.ch msip-service-zrnc.xaas.swissic.ch www.youtube.com services.logismata.ch www.google.com my.tikee.io intranet.eventag.ch; form-action 'self'; img-src 'self' data: https: blob: www.google-analytics.com www.google-analytics.com stats.g.doubleclick.net; script-src 'self' data: *.fusedeck.net www.clarity.ms www.facebook.com connect.facebook.net www.googletagmanager.com cdn.jsdelivr.net www.google.com www.gstatic.com www.google-analytics.com blob: 'unsafe-inline' 'unsafe-eval'; style-src 'self' data: www.gstatic.com fonts.googleapis.com www.gstatic.com 'unsafe-inline'; frame-ancestors 'self' services.logismata.ch www.jobs.ch; font-src 'self' fonts.googleapis.com fonts.gstatic.com; object-src 'self'; child-src blob:;
Cache-Control: private, must-revalidate