Ubs.com

pragma: no-cache
strict-transport-security: max-age=31536000;
location: https://www.ubs.com/
cache-control: no-cache
content-length: 293
content-type: text/html; charset=utf-8
date: Fri, 01 Aug 2025 07:39:56 GMT
server: Apache

HTTP/2 302 
content-length: 0
location: https://www.ubs.com/de/en.html
expires: Fri, 01 Aug 2025 07:39:56 GMT
cache-control: max-age=0, no-cache, private
pragma: no-cache
date: Fri, 01 Aug 2025 07:39:56 GMT
set-cookie: country=de; expires=Sat, 01-Aug-2026 07:39:56 GMT; path=/; domain=.ubs.com; secure; HttpOnly; SameSite=Lax
set-cookie: geo-country=DE; path=/; domain=.ubs.com; secure; HttpOnly; SameSite=None
alt-svc: h3=":443"; ma=93600
strict-transport-security: max-age=31536000; preload
content-security-policy: default-src 'none'

HTTP/2 200 
content-type: text/html;charset=utf-8
set-cookie: geo-country=DE; path=/; domain=.ubs.com; secure; HttpOnly; SameSite=None
x-ubs-correlation-id: Rp0Pl8nUHL6tF5su
strict-transport-security: max-age=31536000; preload
alt-svc: h3=":443"; ma=93600
vary: Accept-Encoding
content-security-policy: script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: *.ubs.com *.ubs.net *.adobedtm.com *.demdex.net *.decibelinsight.net *.decibel.com *.adform.net *.everesttech.net *.googleapis.com *.brightcove.net *.2o7.net *.omtrdc.net *.tt.omtrdc.net *.zencdn.net *.akamaihd.net *.facebook.net *.googleadservices.com *.googletagmanager.com *.google.com *.doubleclick.net *.cloudflare.com *.zmags.com *.raisenow.com *.adobe.com fuse.ubs.com *.mkt.dynamics.com *.azureedge.net *.adnxs.com *.ipify.org *.google-analytics.com *.tiktok.com *.datatrans.com *.paypal.com snap.licdn.com *.teads.tv *.yimg.jp *.yahoo.co.jp *.bing.com *.bing.net *.adsrvr.org ; style-src 'self' 'unsafe-inline' *.ubs.com *.ubs.net *.googleapis.com *.raisenow.com *.raisenow.io players.brightcove.net  ; font-src 'self' data: https://fonts.gstatic.com *.raisenow.io players.brightcove.net; upgrade-insecure-requests; object-src *.ubs.com *.ubs.net https://players.brightcove.net; form-action *.ubs.com *.ubs.net; frame-ancestors *.ubs.com *.ubs.net *.homegate.ch *.financescout24.ch *.immoscout24.ch *.acheter-louer.ch *.buy-rent.ch *.kaufen-mieten.ch *.pwj.com *.credit-suisse.com *.csintra.net *.houzy.ch; frame-src *.ubs.com *.ubs.net https://ubs.demdex.net https://outlook.office365.com *.omniture.com *.adobe.com *.datatrans.com *.paypal.com *.mkt.dynamics.com players.brightcove.net www.linkedin.com *.ads.linkedin.com *.googletagmanager.com td.doubleclick.net p.teads.tv fledge.teads.tv 14081957.fls.doubleclick.net *.adsrvr.org; connect-src *.ubs.com *.ubs.net data: wss://collection.decibelinsight.net *.decibelinsight.net *.decibel.com *.demdex.net *.brightcove.com *.brightcove.services *.boltdns.net *.brightcovecdn.com *.googleapis.com *.akamaihd.net fuseapi.ubs.com fuseconsole.ubs.com fuse.ubs.com wss://fuse.ubs.com *.mkt.dynamics.com *.azureedge.net *.google-analytics.com tt.ubs.com *.raisenow.io *.raisenow.com *.googletagmanager.com analytics.google.com *.analytics.google.com snap.licdn.com *.ads.linkedin.com *.google.com *.google.ch *.googleadservices.com t.teads.tv cm.teads.tv wss://nl.sfu.unblu.app nl.sfu.unblu.app pagead2.googlesyndication.com ad.doubleclick.net *.yimg.jp *.yahoo.co.jp *.bing.com *.bing.net *.adsrvr.org  wss://*.ubs.com; default-src *.ubs.com *.ubs.net *.teads.tv; img-src *.ubs.com *.ubs.net data: fuseapi.ubs.com fuseconsole.ubs.com fuse.ubs.com *.brightcove.com *.boltdns.net *.brightcovecdn.com *.gstatic.com *.googleapis.com *.twitter.com t.co *.facebook.com *.linkedin.com *.google.com *.google.ch *.doubleclick.net *.googleadservices.com *.googletagmanager.com *.yahoo.co.jp *.adform.net *.akamaihd.net *.adnxs.com *.ipify.org *.google-analytics.com *.tiktok.com *.raisenow.com *.ads.linkedin.com googleads.g.doubleclick.net google.com *.analytics.google.com *.teads.tv ad.doubleclick.net ade.googlesyndication.com adservice.google.com *.bing.com *.bing.net  *.google.com.au *.google.com.br *.google.ca *.google.cn *.google.fr *.google.de *.google.com.hk *.google.co.in *.google.co.id *.google.co.il *.google.it *.google.co.jp *.google.com.mx *.google.com.sa *.google.com.sg *.google.com.tw *.google.ae *.google.co.uk; media-src blob: *.ubs.com *.ubs.net *.brightcovecdn.com *.boltdns.net *.media.brightcove.com *.akamaihd.net *.cf.brightcove.com ; worker-src blob:;
x-wss: wss://*.ubs.com
x-frame-options: SAMEORIGIN
x-cors-domain: *.ubs.com *.ubs.net
feature-policy: camera 'self'; microphone 'self'
referrer-policy: no-referrer-when-downgrade
access-control-allow-origin: https://secure.ubs.com
x-varnish-cache: HIT
x-nodeid: inter-prod-p-4 - t=1754032340663646 D=35585
x-content-type-options: nosniff
x-ua-compatible: IE=edge
x-xss-protection: 1; mode=block
x-age: 2083
origin-agent-cluster: ?0
access-control-allow-methods: GET,HEAD,POST,OPTIONS
permissions-policy: microphone=(self), camera=(self)
x-frame-ancestors: *.homegate.ch *.financescout24.ch *.immoscout24.ch *.acheter-louer.ch *.buy-rent.ch *.kaufen-mieten.ch *.pwj.com *.credit-suisse.com *.csintra.net *.houzy.ch
access-control-allow-headers: Access-Control-Allow-Headers, Origin,Accept, X-Requested-With, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers,Accept,Accept-Language,Cache-Control,CSRF-Token
content-encoding: gzip
cache-control: private, max-age=300
date: Fri, 01 Aug 2025 07:39:56 GMT
content-length: 16421