ofri.ch website report

HTTP/2 200
date: Thu, 22 Oct 2026 11:33:49 GMT
content-type: text/html; charset=utf-8
cache-control: max-age=0, private, must-revalidate
content-security-policy: default-src 'self'; base-uri 'self'; child-src 'self'; connect-src wss: ws: vimeo.com rebound.postmarkapp.com *.ofri.ch wss://*.ofri.ch ofri.matomo.cloud gist-queue-consumer-api.cloud.gist.build *.posthog.com sentry.ofri.dev consumer.cloud.gist.build translate.googleapis.com static.zdassets.com ekr.zdassets.com *.zdassets.com *.zendesk.com; font-src 'self' data: *.ofri.ch fonts.gstatic.com fonts.googleapis.com; form-action 'self' accounts.google.com ofri.us1.list-manage.com ofri-forms.typeform.com; frame-ancestors 'none'; frame-src 'self' player.vimeo.com ofri.payrexx.com *.zdassets.com *.zendesk.com renderer.gist.build code.gist.build dispatcher.payrexx.com *.postfinance.ch www.youtube.com www.youtube-nocookie.com; img-src 'self' blob: data: *.vimeocdn.com *.cloudinary.com *.openstreetmap.org *.ofri.ch ofri.matomo.cloud track-eu.customer.io *.zdassets.com *.zendesk.com ofri-files-production.s3.eu-central-1.amazonaws.com ff5bba730b61081842de7ee4956493d4.eu.r2.cloudflarestorage.com s3-eu-central-1.amazonaws.com/ofri-files-production/ s3-eu-west-1.amazonaws.com/file-bucket-prod/ i.ytimg.com translate.google.com fonts.gstatic.com cdn.jsdelivr.net; manifest-src 'self' ofri.cloudflareaccess.com *.ofri.ch; media-src 'self' data: ofri-files-production.s3.eu-central-1.amazonaws.com ff5bba730b61081842de7ee4956493d4.eu.r2.cloudflarestorage.com *.ofri.ch; object-src 'self'; script-src 'self' 'unsafe-eval' ajax.cloudflare.com assets.ofri.ch translate.googleapis.com; script-src-attr 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline' blob: *.ofri.ch assets.ofri.ch translate.googleapis.com ofri.cloudflareaccess.com *.smooch.io code.gist.build *.cloudflare.com static.zdassets.com ekr.zdassets.com *.zdassets.com *.zendesk.com *.customer.io *.matomo.cloud *.posthog.com *.postmarkapp.com www.youtube.com; style-src 'self' 'unsafe-inline' *.ofri.ch assets.ofri.ch fonts.googleapis.com www.gstatic.com cdn.jsdelivr.net; style-src-attr 'self' 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline' *.ofri.ch assets.ofri.ch ofri.cloudflareaccess.com fonts.googleapis.com www.gstatic.com cdn.jsdelivr.net; worker-src 'self' blob:; report-uri /csp/violation
document-policy: js-profiling
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=eItt%2Fp1euQL6xLYjE2qGLlWR3mar3Y2g6HKUgyOAvFfi8BNKKWHK03IVCwSIsLTWHp8VZkjTi3IgPSIfNau8JgmKNge99tbEzawe%2FSyEhoCqDyvks0M5TTPCoPr8"}]}
link: <https://assets.ofri.ch/packs/css/application-dff768c1.css>; rel=preload; as=style; nopush
referrer-policy: origin-when-cross-origin, strict-origin-when-cross-origin
set-cookie: _ofri_session=XL6Vl8wdMzz%2Bf6uaWPXV7imsxIO0v7w3b4L6wVerrm9KCmgtTz7OIy924S5pOVp0qrAQLYBp4pmDwHBRDUi3K0KzAO2%2F9Vfk8wjEChl%2B%2FxHU21GI5Dlij2Q8fd5%2ByEriR985Oz%2Foc3CzKSRlXKG0YYsqAPPnw%2FwtvMs%2BvinIoNMyyDAWRYJYFbR5iOLCNaciuXSixuANEB3uxAj5N4WdDOAmJPGwUojDzjctrnnzhmsCxcHP6U%2B9P7gNavAynXHqlo8SemIbRN1vPxGSn%2BS%2BSZ%2FAw%2FI2x5342LvRtMtZ%2Fq1k%2FE3KhX27N4AWow%3D%3D--nOFz0T04tmKjYpHF--gH5sSmTy0zDtWuTTjpjPLg%3D%3D; path=/; expires=Mon, 21 Dec 2026 11:33:49 GMT; secure; httponly; samesite=lax
strict-transport-security: max-age=604800
vary: Origin
x-content-type-options: nosniff
x-download-options: noopen
x-frame-options: DENY
x-permitted-cross-domain-policies: none
x-request-id: 2011f07c-ece9-4f87-9c96-89b9659be209
x-runtime: 0.088036
x-xss-protection: 1; mode=block
cf-cache-status: DYNAMIC
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
content-encoding: br
server: cloudflare
cf-ray: a4e83076f8a9d10c-CDG
alt-svc: h3=":443"; ma=86400