Roche.com - Gmail.roche.com

Location: https://mail.google.com/a/roche.com
Date: Tue, 01 Aug 2023 11:58:02 GMT
Content-Type: text/html; charset=UTF-8
Server: ghs
Content-Length: 232
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

HTTP/2 302 
content-type: text/html; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Tue, 01 Aug 2023 11:58:03 GMT
location: https://www.google.com/a/roche.com/ServiceLogin?service=mail&passive=true&rm=false&continue=https://mail.google.com/mail/&ss=1&ltmpl=default&ltmplcache=2&emr=1&osid=1#
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 265
server: GSE
alt-svc: clear

HTTP/2 302 
content-security-policy: script-src 'nonce-YKb1RXVvcTv02gnS_KZ0aQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /cspreport
content-type: text/html; charset=UTF-8
x-frame-options: DENY
cache-control: no-cache, no-store
pragma: no-cache
expires: Mon, 01-Jan-1990 00:00:00 GMT
location: https://wam.roche.com/idp/SSO.saml2?SAMLRequest=fVJLT8MwDL4j8R%2Bq3PvahDRFa6cBmpjEo2KFA7eQeWtoEpc43eDf03VDDAl2i5zP38P2ePJhdLABRwptxtIoYQFYiUtl1xl7KmfhiE3y87MxCaMbPm19ZR%2FhvQXyQddpifcfGWud5ShIEbfCAHEv%2BWJ6d8sHUcIbhx4lahbMrzOmmlWlay2wquv6tRZG6TVaoxUIoXWDb8bWIGDJgudvW4OdrTlRC3NLXljflZLBMExGYZKWacovRjwZvrCgOChdKrtPcMrW6x5E%2FKYsi7B4WJQ9wUYtwd136IytEdcaIolmJ18IIrXpyiuhCVgwJQLnO4NXaKk14BbgNkrC0%2BNtxirvG%2BJxvN1uox%2BaWMQOZXV4S2J5P1jeZ3NHEz3tXHwrs%2Fxv7nF8RJsflrfLNL8uUCv5GUy1xu2VA%2BG7QN61XZ4ZOiP8%2F8pplPYVtQxXPZS3lhqQaqV224rzvervK%2Blu5ws%3D&RelayState=https%3A%2F%2Fwww.google.com%2Fa%2Froche.com%2FServiceLogin%3Fservice%3Dmail%26passive%3Dtrue%26rm%3Dfalse%26continue%3Dhttps%253A%252F%252Fmail.google.com%252Fmail%252F%26ss%3D1%26ltmpl%3Ddefault%26ltmplcache%3D2%26emr%3D1%26osid%3D1
content-encoding: gzip
date: Tue, 01 Aug 2023 11:58:03 GMT
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 726
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

HTTP/1.1 200 OK
Date: Tue, 01 Aug 2023 11:58:03 GMT
Content-Type: text/html;charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
CF-Ray: 7efde837ac352222-ORD
CF-Cache-Status: DYNAMIC
Cache-Control: no-cache, no-store
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Set-Cookie: PF=jFU2zDzNMkZKbtIqlEVkGu; Path=/; Domain=.roche.com; Secure; HttpOnly; SameSite=None
Strict-Transport-Security: max-age=31536000
Content-Security-Policy: object-src 'self'; report-uri https://ayba8dhs.uriports.com/reports/report; report-to default
Content-Security-Policy-Report-Only: default-src 'self' *.roche.com *.roche.net *.gene.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.roche.com *.roche.net *.gene.com snap.licdn.com cdn.walkme.com apis.google.com tpc.googlesyndication.com api.html5media.info workdevapp.com cdn-js.net gdata.youtube.com twitter.com geolocation.onetrust.com api.flickr.com graph.facebook.com sharecdn.social9.com maps.googleapis.com use.typekit.com use.typekit.net munchkin.marketo.net img.en25.com w.likebtn.com cdn.mathjax.org sadmin.brightcove.com cdnjs.cloudflare.com releases.flowplayer.org script.crazyegg.com wi.likebtn.com pepperglobal.com analytics.twitter.com cdn.blueconic.net connect.facebook.net fullstory.com script.hotjar.com gnntch.blueconic.net rules.quantcount.com secure.quantserve.com static.hotjar.com www.youtube.com www.googletagmanager.com www.google-analytics.com google-analytics.com *.gstatic.com static.ads-twitter.com sjs.bizographics.com *.linkedin.com www.google.com w.soundcloud.com s.ytimg.com *.cloudflareaccess.com *.salesforceliveagent.com https://*.roche.com:8080 https://cdnjs.org https://service.force.com/* cdn.cookielaw.org static.cloudflareinsights.com googleads.g.doubleclick.net 7232514.collect.igodigital.com; style-src * 'self' 'unsafe-inline'; img-src * 'self' data:; font-src * 'self' data:; connect-src * 'self'; media-src * 'self' data:; object-src 'self'; child-src 'self' *.roche.com *.roche.net *.gene.com *.facebook.net qpcr.probefinder.com *.force.com *.hotjar.com www.facebook.com www.google.com www.googletagmanager.com www.youtube.com; frame-src 'self' *.roche.com *.roche.net *.gene.com www.youtube.com sites.google.com *.googleapis.com *.cloudfront.net *.facebook.net *.arcot.com live.sagepay.com player.vimeo.com tpc.googlesyndication.com players.brightcove.net qpcr.probefinder.com *.eloqua.com *.hotjar.com *.soundcloud.com *.facebook.com *.google.com *.googletagmanager.com *.youtube-nocookie.com *.youtube.com *.mendeley.com *.force.com https://cdn.walkme.com/*; worker-src 'self' *.roche.com *.roche.net *.gene.com; frame-ancestors 'self' *.roche.com *.roche.net *.gene.com datastudio.google.com sites.google.com content.bioclinicien.fr connect.facebook.net www.facebook.com s1691.t.eloqua.com *.cloudflareworkers.com; form-action 'self' *.roche.com *.roche.net *.gene.com content.bioclinicien.fr connect.facebook.net www.facebook.com s1691.t.eloqua.com; base-uri 'self' *.roche.com *.roche.net *.gene.com *.secure.roche.com
Expect-Staple: max-age=86400; includeSubDomains
Feature-Policy-Report-Only: geolocation 'none'; camera 'none'; fullscreen *; payment 'self'
NEL: {"report_to":"default","max_age":86400,"include_subdomains":true,"failure_fraction": 0.01}
Pragma: no-cache
Referrer-Policy: origin
Report-To: {"group":"default","max_age":86400,"endpoints":[{"url":"https://ayba8dhs.uriports.com/reports"}],"include_subdomains":true}
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
Vary: Accept-Encoding
Set-Cookie: __cflb=0H28vhgEgxcp2Cqsg8JA8V6s5UPD4xPRKuvxgUvFLk5; SameSite=Lax; path=/; expires=Tue, 01-Aug-23 12:28:03 GMT; HttpOnly
Set-Cookie: __cf_bm=BdbMPfwum0A2vwSy9rpGbNckiIfMcR7Fb_a2q5HLkg8-1690891083-0-AUdujqGpTAArOKkHcw4alTsPor8P+Sf+UUv7LkK27GXgwNlbx5WEuCMGGyYACVrT0c7Oz0cuVE28f2r0qzE8ORs=; path=/; expires=Tue, 01-Aug-23 12:28:03 GMT; domain=.roche.com; HttpOnly; Secure; SameSite=None
Set-Cookie: __cfruid=2764069322c1c1bb481dcebb955c78156db1990c-1690891083; path=/; domain=.roche.com; HttpOnly; Secure; SameSite=None
Server: cloudflare
Content-Encoding: br