Bluecross.ca - Sk.bluecross.ca

server: nginx
date: Sat, 26 Apr 2025 01:28:41 GMT
content-type: text/html; charset=iso-8859-1
content-length: 413
location: https://www.sk.bluecross.ca/
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=15552000; includeSubdomains;
referrer-policy: strict-origin-when-cross-origin
feature-policy: geolocation 'self'; sync-xhr 'self'
permissions-policy: geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()
x-permitted-cross-domain-policies: none
expect-ct: enforce, max-age=300
cache-control: max-age=2592000
expires: Mon, 26 May 2025 01:28:41 GMT

HTTP/2 200 
server: nginx
date: Sat, 26 Apr 2025 01:28:41 GMT
content-type: text/html; charset=UTF-8
content-length: 21293
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=15552000; includeSubdomains;
referrer-policy: strict-origin-when-cross-origin
feature-policy: geolocation 'self'; sync-xhr 'self'
permissions-policy: geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()
x-permitted-cross-domain-policies: none
expect-ct: enforce, max-age=300
vary: X-Forwarded-Proto,Accept-Encoding
last-modified: Fri, 25 Apr 2025 14:55:40 GMT
cache-control: max-age=2592000
expires: Mon, 26 May 2025 01:28:41 GMT
content-encoding: gzip
content-security-policy: default-src 'self' 'unsafe-eval' data: *.gstatic.com *.visualwebsiteoptimizer.com *.google-analytics.com *.hotjar.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: www.googleadservices.com *.googletagmanager.com *.doubleclick.net *.visualwebsiteoptimizer.com www.gstatic.com bat.bing.com; style-src 'self' 'unsafe-inline' https: hello.myfonts.net *.googleapis.com; img-src 'self' data: https: *.gravatar.com *.visualwebsiteoptimizer.com bat.bing.com; font-src 'self' data: https:; connect-src 'self' *.clarity.ms https://px.ads.linkedin.com *.google-analytics.com *.google.com sentry.io *.sentry.io *.stackadapt.com *.pinterest.com *.pinterest.ca https://cdn.linkedin.oribi.io https://yoast.com https://stats.g.doubleclick.net https://cdnjs.cloudflare.com *.visualwebsiteoptimizer.com *.hotjar.com; media-src 'self' https:; object-src 'self'; frame-src 'self' blob: https://td.doubleclick.net *.adsrvr.org https://www.youtube.com *.pinterest.com *.pinterest.ca https://www.google.com https://www.eventbrite.ca https://www.eventbrite.com https://www.googletagmanager.com https://www.pinterest.com/ https://connect.facebook.net https://www.facebook.com https://bid.g.doubleclick.net https://*.visualwebsiteoptimizer.com *.hotjar.com; form-action 'self' https:;
referrer-policy: no-referrer-when-downgrade