elca.ch website report

HTTP/1.1 200 OK
date: Fri, 23 Oct 2026 22:57:41 GMT
server: NA
x-frame-options: DENY
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
x-permitted-cross-domain-policies: none
strict-transport-security: max-age= 63072000; includeSubDomains; preload
vary: rsc,next-router-state-tree,next-router-prefetch,next-router-segment-prefetch,Accept-Encoding
permissions-policy: fullscreen=*,  microphone=(), geolocation=(), camera=(), bluetooth=(), attribution-reporting=(), unload=(self)
cross-origin-embedder-policy: unsafe-none
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
access-control-allow-origin: https://www.elca.ch
content-security-policy: default-src 'self' elca.ch *.elca.ch *.crazyegg.com; script-src 'self' 'nonce-N2FiM2E5NmMtZjQ2OS00MDM1LTkyMzMtM2M2NTY1YTMyZTg3' 'strict-dynamic' 'unsafe-inline' blob: elca.ch *.elca.ch https://www.youtube.com https://www.youtube-nocookie.com https://elcamarketing-dev.azurewebsites.net https://elca-marketing-dev.azurewebsites.net https://rdrect-eur1.mkt.dynamics.com *.crazyegg.com http: https: https://googletagmanager.com https://www.googletagmanager.com https://*.googletagmanager.com https://px.ads.linkedin.com https://fonts.googleapis.com https://*.googleapis.com https://*.googleadservices.com https://www.googleadservices.com https://*.google.ch https://*.google.com https://*.google.fr https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://pagead2.googlesyndication.com https://*.googlesyndication.com https://*.gstatic.com https://www.gstatic.com; style-src 'self' *.crazyegg.com 'unsafe-inline' https://fonts.googleapis.com fonts.googleapis.com https://*.googleapis.com https://*.google-analytics.com https://*.google.com https://*.googletagmanager.com https://*.hcaptcha.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://web.cmp.usercentrics.eu https://privacy-proxy.usercentrics.eu; img-src 'self' elca.ch *.elca.ch *.crazyegg.com user-images.crazyeggcdn.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.google.com https://*.google.* https://*.doubleclick.net https://*.google.com blob: data: https://cdn.addevent.com https://fonts.gstatic.com https://*.gstatic.com https://pagead2.googlesyndication.com https://*.googlesyndication.com https://*.google.ch https://*.google.de https://*.google.fr https://*.google.mu https://*.googleadservices https://tile.openstreetmap.org https://cxppusa1formui01cdnsa01-endpoint.azureedge.net https://assets-eur.mkt.dynamics.com https://public-eur.mkt.dynamics.com https://img.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://c.ba.contentsquare.net https://px.ads.linkedin.com https://t.contentsquare.net https://privacy-proxy.usercentrics.eu https://app.usercentrics.eu https://uct.service.usercentrics.eu https://www.googleadservices.com https://*.googleadservices.com https://www.linkedin.com; connect-src 'self' elca.ch *.elca.ch *.crazyegg.com https://script.crazyegg.com https://vimeo.com https://elcawebsites.matomo.cloud https://*.google-analytics.com https://*.analytics.google.com https://elcamarketing.azurewebsites.net https://elcamarketing-dev.azurewebsites.net https://elca-marketing-prod.azurewebsites.net https://elca-marketing-dev.azurewebsites.net https://*.googletagmanager.com https://*.googleadservices.com https://*.googleapis.com https://*.google.ch https://*.google.mu https://*.google.fr https://*.googlesyndication.com https://*.g.doubleclick.net https://*.doubleclick.net https://*.google.com https://cxppusa1formui01cdnsa01-endpoint.azureedge.net https://assets-eur.mkt.dynamics.com https://public-eur.mkt.dynamics.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/api/siteverify http://httpproxy:3128 https://www.youtube.com https://k.ba.contentsquare.net https://c.ba.contentsquare.net https://t.contentsquare.net https://pagead2.googlesyndication.com https://px.ads.linkedin.com https://v1.api.service.cmp.usercentrics.eu https://api.usercentrics.eu https://privacy-proxy.usercentrics.eu https://graphql.usercentrics.com https://aggregator.service.usercentrics.eu https://consent-api.service.consent.usercentrics.eu https://ad.doubleclick.net https://www.googleadservices.com https://mobile.events.data.microsoft.com; frame-src 'self' elca.ch *.elca.ch *.crazyegg.com https://player.vimeo.com https://www.google.com https://cxppusa1formui01cdnsa01-endpoint.azureedge.net https://assets-eur.mkt.dynamics.com https://public-eur.mkt.dynamics.com https://www.google.com/recaptcha/ https://*.doubleclick.net https://*.googletagmanager.com https://*.google.ch https://*.google.com https://*.google.fr https://*.youtube.com https://www.youtube.com https://www.youtube-nocookie.com https://www.googletagmanager.com; media-src 'self' https://public-eur.mkt.dynamics.com https://assets-eur.mkt.dynamics.com https://www.soundhelix.com; font-src 'self' data: https://fonts.gstatic.com fonts.gstatic.com https://web.cmp.usercentrics.eu; worker-src 'self' blob:; child-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self' elca.ch *.elca.ch; frame-ancestors 'none'; block-all-mixed-content;
x-nonce: N2FiM2E5NmMtZjQ2OS00MDM1LTkyMzMtM2M2NTY1YTMyZTg3
x-middleware-rewrite: /en
link: </_next/static/media/Montserrat_Variable-s.p.0s216eisv2o7-.woff2>; rel=preload; as="font"; crossorigin=""; nonce="N2FiM2E5NmMtZjQ2OS00MDM1LTkyMzMtM2M2NTY1YTMyZTg3"; type="font/woff2", <https://img.youtube.com/vi/gFmxudvnW2c/maxresdefault.jpg>; rel=preload; as="image"
cache-control: private, no-cache, no-store, max-age=0, must-revalidate
content-type: text/html; charset=utf-8
content-encoding: gzip
set-cookie: pref_lang=en; Path=/; Secure; SameSite=none, url_alias=%7B%22en%22%3A%22%2F%22%2C%22fr%22%3A%22%2F%22%2C%22de%22%3A%22%2F%22%7D; Path=/; Secure; SameSite=none, dc39f147ef70e1d67feea6bcaed4f338=cc2ab570454d40d8a9625f087aebc8ef; path=/; HttpOnly; Secure; SameSite=None
transfer-encoding: chunked