Chiesi.uk.com

strict-transport-security: max-age=15552000; includeSubDomains
x-frame-options: SAMEORIGIN
referrer-policy: same-origin
x-content-type-options: nosniff
location: https://www.chiesi.uk.com/
cache-control: max-age=2592000
expires: Thu, 15 Jan 2026 08:58:42 GMT
content-length: 234
content-type: text/html; charset=iso-8859-1
date: Tue, 16 Dec 2025 08:58:42 GMT
server: Apache

HTTP/2 200 
strict-transport-security: max-age=15552000; includeSubDomains
content-security-policy: script-src  'self' 'nonce-08b68d2d60fa091bc8eb869f131261c3d17609f0509181d2e775e2b8853bebfc' *.n1ed.com cdn.cookielaw.org cookie-cdn.cookiepro.com *.googletagmanager.com *.google-analytics.com *.google.com; style-src  'self' 'unsafe-inline' *.n1ed.com; img-src  'self' data: *.n1ed.com cdn.cookielaw.org cookie-cdn.cookiepro.com *.googletagmanager.com *.google-analytics.com *.google.com; connect-src  'self' data: *.n1ed.com cdn.plyr.io *.googletagmanager.com *.google-analytics.com *.google.com cdn.cookielaw.org cookie-cdn.cookiepro.com; object-src  'none'; base-uri  'self'; report-uri  /API/csp-report/;
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
set-cookie: PHPSESSID=vvon1lai7q039g65pe00nbvhbl; path=/; secure; HttpOnly; SameSite=Strict
x-frame-options: SAMEORIGIN
referrer-policy: same-origin
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
x-xss-protection: 1; mode=block
permissions-policy: geolocation=self
x-permitted-cross-domain-policies: none
access-control-allow-origin: *
content-length: 38011
content-type: text/html; charset=UTF-8
date: Tue, 16 Dec 2025 08:58:42 GMT
server: Apache