Hemophilia.com

Location: https://www.hemophilia.com/
Server: BigIP
Connection: Keep-Alive
Content-Length: 0

HTTP/2 200 
content-type: text/html; charset=UTF-8
content-length: 10544
server: nginx
date: Wed, 18 Sep 2024 20:07:48 GMT
cache-control: max-age=600, public
x-drupal-dynamic-cache: HIT
content-language: en
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
expires: Sun, 19 Nov 1978 05:00:00 GMT
x-generator: Drupal 10 (https://www.drupal.org)
content-security-policy: default-src 'self' 'unsafe-inline' 'unsafe-eval' data: *.express-scripts.com *.accredo.com *.brightcove.com *.brightcove.net *.api.brightcove.com *.zencdn.net *.qualtrics.com *.cigna.com cdn.cookielaw.org *.onetrust.com; child-src 'self' blob: *.brightcove.net *.express-scripts.com *.accredo.com; connect-src 'self' *.express-scripts.com expressscriptsholdin.tt.omtrdc.net dpm.demdex.net *.brightcove.com *.brightcove.net *.api.brightcove.com *.zencdn.net dotsub.com *.accredo.com *.boltdns.net *.brightcovecdn.com *.mktoresp.com *.qualtrics.com *.akamaihd.net expressscripts.sc.omtrdc.net *.cigna.com cdn.cookielaw.org *.onetrust.com *.branch.io app.link bam.nr-data.net *.verint-cdn.com *.wevalueyourfeedback.com; font-src 'self' data: fonts.googleapis.com fonts.gstatic.com *.accredo.com *.express-scripts.com *.verint-cdn.com *.wevalueyourfeedback.com; frame-src 'self' abesiemsen.github.io *.qualtrics.com expressscriptsholdingcompany.demdex.net *.accredo.com *.express-scripts.com tpidev7.com bcove.video players.brightcove.net *.doubleclick.net *.google.com *.youtube.com; img-src 'self' data: *.accredo.com expressscripts.sc.omtrdc.net *.brightcove.com *.brightcove.net *.api.brightcove.com *.zencdn.net *.boltdns.net *.qualtrics.com *.express-scripts.com dpm.demdex.net cm.everesttech.net *.googletagmanager.com *.doubleclick.net cdn.jsdelivr.net cdn.cookielaw.org *.onetrust.com *.branch.io app.link *.adsrvr.org *.google.com *.verint-cdn.com *.wevalueyourfeedback.com *.ytimg.com *.youtube.com; media-src 'self' blob: *.brightcove.net *.brightcove.com *.dotsub.com *.express-scripts.com *.accredo.com *.boltdns.net *.brightcovecdn.com *.qualtrics.com *.akamaihd.net dotsub.com; object-src 'self' *.accredo.com *.express-scripts.com *.brightcove.net; script-src 'self' 'unsafe-inline' 'unsafe-eval' assets.adobedtm.com *.everestjs.net *.cloudflare.com *.rawgit.com *.brightcove.com *.brightcove.net *.api.brightcove.com *.zencdn.net *.dialogtech.com *.marketo.net *.qualtrics.com *.googletagmanager.com *.googleadservices.com *.doubleclick.net *.ads-twitter.com *.twitter.com *.accredo.com *.express-scripts.com *.cigna.com cdn.jsdelivr.net unpkg.com cdn.cookielaw.org *.onetrust.com snap.licdn.com *.facebook.net *.facebook.com *.branch.io app.link *.adsrvr.org *.google.com *.gstatic.com *.newrelic.com *.marketo.com *.verint-cdn.com *.wevalueyourfeedback.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com https://www.google.com; style-src 'self' 'unsafe-inline' data: fonts.googleapis.com *.express-scripts.com *.accredo.com *.cloudflare.com cdn.jsdelivr.net *.verint-cdn.com *.wevalueyourfeedback.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com; frame-ancestors 'self' *.express-scripts.com *.accredo.com
x-xss-protection: 1; mode=block
strict-transport-security: max-age=31536000; includeSubDomains; preload
from-origin: same
referrer-policy: no-referrer-when-downgrade
last-modified: Wed, 18 Sep 2024 20:07:04 GMT
etag: "1726690024-gzip"
content-encoding: gzip
x-request-id: v-93265860-75f9-11ef-9fa3-5fdde82d31e2
x-ah-environment: prod
via: varnish, 1.1 b471d3775e81a9be536b52b99f39452a.cloudfront.net (CloudFront)
x-cache-hits: 1
accept-ranges: bytes
vary: Cookie,Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: IAD89-C3
x-amz-cf-id: XoyWQ-eOjt4MAWtmNBG21HG0l5kuOuj80UBNIKE9UXFEElp8zwi6gQ==
age: 146