bls.ch Review

 N/A

HTTP/1.1 301 Moved Permanently
Server: Microsoft-Azure-Application-Gateway/v2
Date: Sun, 24 Aug 2025 05:35:44 GMT
Content-Type: text/html
Content-Length: 195
Connection: keep-alive
Location: https://bls.ch/

HTTP/1.1 301 Moved Permanently
Date: Sun, 24 Aug 2025 05:35:44 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 142
Connection: keep-alive
Set-Cookie: ApplicationGatewayAffinityCORS=ff89fee0d8c625b83e475c59391b14ef; Path=/; SameSite=None; Secure
Set-Cookie: ApplicationGatewayAffinity=ff89fee0d8c625b83e475c59391b14ef; Path=/
Location: https://www.bls.ch/
Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Bitness
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=31536000
x-Content-Type-Options: nosniff

HTTP/1.1 302 Found
Date: Sun, 24 Aug 2025 05:35:46 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 120
Connection: keep-alive
Set-Cookie: ApplicationGatewayAffinityCORS=0d808f0251327adbd5bdc113a23e11be; Path=/; SameSite=None; Secure
Set-Cookie: ApplicationGatewayAffinity=0d808f0251327adbd5bdc113a23e11be; Path=/
Cache-Control: private
Location: /en
Set-Cookie: internet-bls#lang=en; path=/; secure; SameSite=None
Request-Context: appId=cid-v1:d44c4231-a5b0-452e-bcd1-8fd8472f7506
Access-Control-Expose-Headers: Request-Context
Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Bitness
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=31536000
x-Content-Type-Options: nosniff

HTTP/1.1 200 OK
Date: Sun, 24 Aug 2025 05:35:46 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 27957
Connection: keep-alive
Set-Cookie: ApplicationGatewayAffinityCORS=ff89fee0d8c625b83e475c59391b14ef; Path=/; SameSite=None; Secure
Set-Cookie: ApplicationGatewayAffinity=ff89fee0d8c625b83e475c59391b14ef; Path=/
Cache-Control: private, max-age=1800
Content-Encoding: gzip
Expires: Sun, 24 Aug 2025 06:05:46 GMT
Vary: Accept-Encoding
Content-Security-Policy: base-uri 'self'; default-src 'self' shop.bls.ch shop.int.bls.ch stats.g.doubleclick.net *.curator.io curator-assets.b-cdn.net cfg.moin.ai api.moin.ai wss://bot.moin.ai *.maptiler.com pagead2.googlesyndication.com googleads.g.doubleclick.net cdn.cookielaw.org bls-privacy.my.onetrust.com cookies-data.onetrust.io wss://io.fusedeck.net/ https://sdk.frontnow.app api.bls.ch api-test.bls.ch https://journey-maps-tiles.geocdn-int.sbb.ch/ https://journey-maps-tiles.geocdn.sbb.ch/ https://www.google.com/ https://fahrplan.bls.ch; font-src 'self' data: *.fonts.net *.curator.io widget.moin.ai fonts.gstatic.com; form-action 'self'; frame-ancestors 'self'; child-src 'self' blob: bid.g.doubleclick.net booking.sunnycars.ch bls.hafas.de bls-int.hafas.de *.fls.doubleclick.net maps.trafimage.ch https://bls.frontnow.app https://bls.frontnow.site/ https://www.googletagmanager.com/; img-src 'self' blob: data: cdn.cookielaw.org curator-assets.b-cdn.net media.moin.ai media.bls.ch ucarecdn.com https://io.fusedeck.net/ https://cdn.frontnow.cloud https://www.googletagmanager.com/ https://www.google.com/ https://www.google.ch/ https://storage.roundshot.com/ https://www.bls.ch/; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleapis.com *.googletagmanager.com *.googleadservices.com googleads.g.doubleclick.net bls.hafas.de bls-int.hafas.de *.curator.io widget.moin.ai cdn.cookielaw.org *.fusedeck.net https://sdk.frontnow.app https://fahrplan.bls.ch; style-src 'self' 'unsafe-inline' *.googleapis.com *.fonts.net *.curator.io widget.moin.ai unpkg.com pagead2.googlesyndication.com https://fahrplan.bls.ch
Set-Cookie: internet-bls#lang=en; path=/; secure; SameSite=None
Set-Cookie: shell#lang=en; path=/; secure; SameSite=None
Request-Context: appId=cid-v1:d44c4231-a5b0-452e-bcd1-8fd8472f7506
Access-Control-Expose-Headers: Request-Context
Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Bitness
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=31536000
x-Content-Type-Options: nosniff