HTTP/1.1 302 Moved Temporarily
Location: /mvc.do/rootRedirect
Content-Length: 0
X-Varnish: 13291989 884773
Cache-Control: public, max-age=111
Date: Mon, 02 Sep 2019 18:36:57 GMT
Connection: keep-alive

HTTP/1.1 302 Moved Temporarily
Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval' *.adnxs.com *.adobedtm.com *.ads-twitter.com cdn.ampproject.org *.anychart.com *.credit-suisse.com *.credit-suisse.cspta.ch *.credit-suisse-stg.cspta.ch *.credit-suisse.wesit.rowini.net *.everesttech.net *.facebook.net *.forms.credit-suisse.com *.google.ch *.google-analytics.com *.googleapis.com *.googletagmanager.com *.inbenta.com *.inbenta.io *.jquery.com *.knowledgevision.com *.licdn.com *.linkedin.com *.qualtrics.com *.twitter.com *.youtube.com *.ytimg.com maps.google.com tagmanager.google.com sc-static.net *.googleadservices.com googleads.g.doubleclick.net
Referrer-Policy: no-referrer-when-downgrade
Content-Security-Policy: connect-src 'self' data: *.credit-suisse.com *.credit-suisse.cspta.ch *.credit-suisse.wesit.rowini.net *.credit-suisse-stg.cspta.ch *.decibelinsight.net *.demdex.net *.doubleclick.net *.inbenta.com *.inbenta.io *.knowledgevision.com *.omtrdc.net *.qualtrics.com www.google-analytics.com wss://cdn.decibelinsight.net
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000
X-XSS-Protection: 1; mode=block
Content-Security-Policy: img-src 'self' data: *.credit-suisse.cspta.ch *.credit-suisse.com *.credit-suisse-stg.cspta.ch *.google-analytics.com *.doubleclick.net *.google.com *.google.ch t.co *.quantserve.com *.everesttech.net *.demdex.net *.youtube.com *.facebook.com *.facebook.net *.inbenta.com maps.gstatic.com maps.googleapis.com *.linkedin.com *.qualtrics.com *.gstatic.com *.inbenta.io *.credit-suisse.wesit.rowini.net
Content-Security-Policy: frame-ancestors 'self' *.students.ch *.rowini.net *.ch.hedani.net content-uat.csintra.net content.csintra.net
Content-Security-Policy: font-src 'self' 'unsafe-inline' data: *.credit-suisse.com *.credit-suisse.cspta.ch *.credit-suisse-stg.cspta.ch *.inbenta.com fonts.gstatic.com *.anychart.com *.inbenta.io
Content-Security-Policy: frame-src 'self' blob: *.adobedtm.com *.credit-suisse.com *.credit-suisse-stg.cspta.ch *.credit-suisse.cspta.ch *.doubleclick.net *.facebook.com *.facebook.net *.knowledgevision.com *.omtrdc.net *.qq.com *.youtube.com creditsuisse.demdex.net maps.gstatic.com wl.fundsquare.net
Content-Security-Policy: style-src 'self' 'unsafe-inline' *.credit-suisse.com *.credit-suisse.cspta.ch *.credit-suisse-stg.cspta.ch *.inbenta.com fonts.googleapis.com tagmanager.google.com *.anychart.com *.inbenta.io
Content-Security-Policy: object-src 'self' blob:
Access-Control-Allow-Origin: *
Location: https://www.credit-suisse.com/us/en.html
Content-Length: 0
X-Varnish: 2998970
Expires: Mon, 02 Sep 2019 18:36:57 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Mon, 02 Sep 2019 18:36:57 GMT
Connection: keep-alive
Set-Cookie: CsgBasePath=/us/;Path=/;Expires=Tue, 01-Sep-2020 18:36:57 GMT

HTTP/1.1 200 OK
Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval' *.adnxs.com *.adobedtm.com *.ads-twitter.com cdn.ampproject.org *.anychart.com *.credit-suisse.com *.credit-suisse.cspta.ch *.credit-suisse-stg.cspta.ch *.credit-suisse.wesit.rowini.net *.everesttech.net *.facebook.net *.forms.credit-suisse.com *.google.ch *.google-analytics.com *.googleapis.com *.googletagmanager.com *.inbenta.com *.inbenta.io *.jquery.com *.knowledgevision.com *.licdn.com *.linkedin.com *.qualtrics.com *.twitter.com *.youtube.com *.ytimg.com maps.google.com tagmanager.google.com sc-static.net *.googleadservices.com googleads.g.doubleclick.net
Referrer-Policy: no-referrer-when-downgrade
Content-Security-Policy: connect-src 'self' data: *.credit-suisse.com *.credit-suisse.cspta.ch *.credit-suisse.wesit.rowini.net *.credit-suisse-stg.cspta.ch *.decibelinsight.net *.demdex.net *.doubleclick.net *.inbenta.com *.inbenta.io *.knowledgevision.com *.omtrdc.net *.qualtrics.com www.google-analytics.com wss://cdn.decibelinsight.net
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000
X-XSS-Protection: 1; mode=block
Content-Security-Policy: img-src 'self' data: *.credit-suisse.cspta.ch *.credit-suisse.com *.credit-suisse-stg.cspta.ch *.google-analytics.com *.doubleclick.net *.google.com *.google.ch t.co *.quantserve.com *.everesttech.net *.demdex.net *.youtube.com *.facebook.com *.facebook.net *.inbenta.com maps.gstatic.com maps.googleapis.com *.linkedin.com *.qualtrics.com *.gstatic.com *.inbenta.io *.credit-suisse.wesit.rowini.net
Content-Security-Policy: frame-ancestors 'self' *.students.ch *.rowini.net *.ch.hedani.net content-uat.csintra.net content.csintra.net
Content-Security-Policy: font-src 'self' 'unsafe-inline' data: *.credit-suisse.com *.credit-suisse.cspta.ch *.credit-suisse-stg.cspta.ch *.inbenta.com fonts.gstatic.com *.anychart.com *.inbenta.io
Content-Security-Policy: frame-src 'self' blob: *.adobedtm.com *.credit-suisse.com *.credit-suisse-stg.cspta.ch *.credit-suisse.cspta.ch *.doubleclick.net *.facebook.com *.facebook.net *.knowledgevision.com *.omtrdc.net *.qq.com *.youtube.com creditsuisse.demdex.net maps.gstatic.com wl.fundsquare.net
Content-Security-Policy: style-src 'self' 'unsafe-inline' *.credit-suisse.com *.credit-suisse.cspta.ch *.credit-suisse-stg.cspta.ch *.inbenta.com fonts.googleapis.com tagmanager.google.com *.anychart.com *.inbenta.io
Content-Security-Policy: object-src 'self' blob:
Access-Control-Allow-Origin: *
Content-Type: text/html;charset=utf-8
ETag: W/"1413e7d0459180dc70ce755b930be80b"
Content-Encoding: gzip
Vary: Accept-Encoding
X-Varnish: 20496961 20494828
Accept-Ranges: bytes
Content-Length: 21552
Cache-Control: public, max-age=940
Expires: Mon, 02 Sep 2019 18:52:37 GMT
Date: Mon, 02 Sep 2019 18:36:57 GMT
Connection: keep-alive