Vitalchek.com - Davewv.vitalchek.com

Server: nginx
Date: Wed, 15 Oct 2025 12:59:22 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://davewv.vitalchek.com//Web/
Strict-Transport-Security: max-age=31536000; includeSubdomains; preload
Content-Security-Policy: default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval'; img-src 'self' data: blob:
Public-Key-Pins: pin-sha256="base64+primary=="; pin-sha256="base64+backup=="; max-age=5184000; includeSubDomains
X-Frame-Options: ALLOWALL
X-Xss-Protection: 1; mode=block
X-Permitted-Cross-Domain-Policies: none
X-Content-Type-Options: nosniff

HTTP/1.1 302 Found
Server: nginx
Date: Wed, 15 Oct 2025 12:59:22 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 152
Connection: keep-alive
cache-control: private
location: /web/Logon.aspx?ReturnUrl=%2fWeb%2f
x-aspnet-version: 4.0.30319
x-powered-by: ASP.NET
set-cookie: proddavewv=davewv02; path=/; HttpOnly; Secure
Strict-Transport-Security: max-age=31536000; includeSubdomains; preload
Content-Security-Policy: default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval'; img-src 'self' data: blob:
Public-Key-Pins: pin-sha256="base64+primary=="; pin-sha256="base64+backup=="; max-age=5184000; includeSubDomains
X-Frame-Options: ALLOWALL
X-Xss-Protection: 1; mode=block
X-Permitted-Cross-Domain-Policies: none
X-Content-Type-Options: nosniff

HTTP/1.1 302 Found
Server: nginx
Date: Wed, 15 Oct 2025 12:59:23 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 132
Connection: keep-alive
cache-control: private
location: /web/Logon.aspx
set-cookie: ASP.NET_SessionId=0gjwx0rqfop42hng1z2ohsdr; path=/; HttpOnly; SameSite=Lax; Secure
x-aspnet-version: 4.0.30319
set-cookie: ASP.NET_SessionId=0gjwx0rqfop42hng1z2ohsdr; path=/; HttpOnly; SameSite=Lax; Secure
set-cookie: __AntiXsrfToken=8777018d230d43999c160ea05123f898; path=/; secure; HttpOnly
x-powered-by: ASP.NET
set-cookie: proddavewv=davewv01; path=/; HttpOnly; Secure
Strict-Transport-Security: max-age=31536000; includeSubdomains; preload
Content-Security-Policy: default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval'; img-src 'self' data: blob:
Public-Key-Pins: pin-sha256="base64+primary=="; pin-sha256="base64+backup=="; max-age=5184000; includeSubDomains
X-Frame-Options: ALLOWALL
X-Xss-Protection: 1; mode=block
X-Permitted-Cross-Domain-Policies: none
X-Content-Type-Options: nosniff

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 15 Oct 2025 12:59:23 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
cache-control: private, no-store, no-cache
expires: Wed, 15 Oct 2025 12:59:23 GMT
set-cookie: ASP.NET_SessionId=ugky02nc3n24kcgeaeqq4nqo; path=/; HttpOnly; SameSite=Lax; Secure
x-aspnet-version: 4.0.30319
set-cookie: ASP.NET_SessionId=ugky02nc3n24kcgeaeqq4nqo; path=/; HttpOnly; SameSite=Lax; Secure
set-cookie: __AntiXsrfToken=15ac3d97f018465d994b7186b02acd32; path=/; secure; HttpOnly
x-powered-by: ASP.NET
set-cookie: proddavewv=davewv02; path=/; HttpOnly; Secure
Strict-Transport-Security: max-age=31536000; includeSubdomains; preload
Content-Security-Policy: default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval'; img-src 'self' data: blob:
Public-Key-Pins: pin-sha256="base64+primary=="; pin-sha256="base64+backup=="; max-age=5184000; includeSubDomains
X-Frame-Options: ALLOWALL
X-Xss-Protection: 1; mode=block
X-Permitted-Cross-Domain-Policies: none
X-Content-Type-Options: nosniff
Content-Encoding: gzip