HTTP/1.1 200 OK
Cache-Control: no-cache, no-store
Pragma: no-cache
Content-Type: text/html; charset=utf-8
Expires: -1
Content-Security-Policy: default-src 'self' *.plyr.io *.youtube.com *.capturemedia.io  http://*.hotjar.com:* https://*.hotjar.com:* http://*.hotjar.io https://*.hotjar.io wss://*.hotjar.com  shop.bls.ch https://bot.bls.paixon.ch wss://bot.bls.paixon.ch ; font-src 'self' data: *.gstatic.com *.fonts.net https://script.hotjar.com;; child-src 'self' blob: https://www.youtube.com 81.hci-is24.ch www.blsag.ch https://bls-newsletter.mxm.ch api.capturemedia.io https://bid.g.doubleclick.net https://www.facebook.com https://vars.hotjar.com https://loetschberger.ch *.google.com https://partner.sunnycars.ch/ https://bls.hafas.de/ https://fahrplan.bls.ch https://datawrapper.dwcdn.net/ https://cdnapisec.kaltura.com/ ; img-src 'self' blob: data: *;; report-to csp; report-uri https://unic.report-uri.com/r/d/csp/enforce; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.youtube.com *.ytimg.com analytics-eu.clickdimensions.com *.googleapis.com *.googletagmanager.com *.google-analytics.com *.googleadservices.com *.capturemedia.io https://connect.facebook.net https://static.hotjar.com https://script.hotjar.com https://googleads.g.doubleclick.net https://www.google.com https://www.google.ch *.gstatic.com *.google.com bls.hafas.de; style-src 'self' 'unsafe-inline' *.googleapis.com *.fonts.net
Set-Cookie: internet-bls#lang=de; path=/; secure
Set-Cookie: ASP.NET_SessionId=t2amcbvpayzfyko4eld2hbvb; path=/; secure; HttpOnly; SameSite=Lax
Set-Cookie: SC_ANALYTICS_GLOBAL_COOKIE=00da2d234714467ba29b5a8b48ba7715|False; expires=Sat, 16-Nov-2030 08:52:38 GMT; path=/; secure; HttpOnly
Strict-Transport-Security: max-age=31536000
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Date: Wed, 18 Nov 2020 08:52:37 GMT
Connection: close
Content-Length: 108459
Set-Cookie: cip=!NFx0jL5w7FJ3EtVOqKHPS2IYkKSMG50P5iYi6z4XxDA194AO5c569nb7i2wSQed11JeK3y75OLQE41k=; path=/; Httponly; Secure
Set-Cookie: TS016fce5a=018594dc954e2c13a3c40c6ce49f36c99ca902ad60bf9021cf3499c63c749dc3eeabdb5b931b63289fe8f98154352188b22b29bd0215ee8778ec049e474d6e7c7dac913fc33eb8ca615d6642510fb10787363e66bf6fe9c77eafcded0f264d95d256b340e708bc20d5896da96f312a7488e13d92b6; Path=/; Secure; HTTPOnly
Vary: Accept-Encoding