Vistek.ca

server: Microsoft-Azure-Application-Gateway/v2
date: Sun, 19 Oct 2025 16:07:40 GMT
content-type: text/html
content-length: 195
location: https://www.vistek.ca/

HTTP/2 200 
date: Sun, 19 Oct 2025 16:07:40 GMT
content-type: text/html; charset=utf-8
set-cookie: wwwVistekCaApplicationGatewayProdAffinityCORS=10410c8e1c1d7e0e1682e06f11f21478; Path=/; SameSite=None; Secure
set-cookie: wwwVistekCaApplicationGatewayProdAffinity=10410c8e1c1d7e0e1682e06f11f21478; Path=/
server: Microsoft-IIS/10.0
cache-control: no-cache, no-store
content-encoding: gzip
pragma: no-cache
set-cookie: TiPMix=13.26278698371709; path=/; HttpOnly; Domain=www.vistek.ca; Max-Age=3600; Secure; SameSite=None
set-cookie: x-ms-routing-name=self; path=/; HttpOnly; Domain=www.vistek.ca; Max-Age=3600; Secure; SameSite=None
set-cookie: Vistek.User=194bfd78-3406-4a6a-bd98-e6efd5d2e2ea%7C2027-10-19; expires=Tue, 19 Oct 2027 16:07:40 GMT; domain=.vistek.ca; path=/; secure; samesite=lax; httponly
set-cookie: Vistek.User=82ccb771-6025-4d3a-8e53-c12c1b5f1c51%7C2027-10-19; expires=Tue, 19 Oct 2027 16:07:40 GMT; domain=.vistek.ca; path=/; secure; samesite=lax; httponly
set-cookie: .AspNetCore.Antiforgery.Jj34l4Nzv_A=CfDJ8BlYSWLzr1lKkymC8MuiPiz6DS7yJstEJAkLipNrBGAi7_FtKUwogSV3FsSFawE_dxbtR3gA6QaFc2LWBqAz4RLh5S0DwopapIg1WAzdPtfqGHg5MrI37x1YGC8VLw1wWUl-01l8T0U_QCQDF5xDiEQ; domain=.vistek.ca; path=/; secure; samesite=lax; httponly
set-cookie: VistekID=344c1ce1-b785-4381-b357-4e50e63438e3%7C2025-11-18; expires=Tue, 18 Nov 2025 17:07:40 GMT; domain=.vistek.ca; path=/; secure; samesite=lax; httponly
set-cookie: ARRAffinity=bc463f83d87a18f82609296ac26da8656c6e8bc307da3774c0d67af08fd6228a;Path=/;HttpOnly;Secure;Domain=www.vistek.ca
set-cookie: ARRAffinitySameSite=bc463f83d87a18f82609296ac26da8656c6e8bc307da3774c0d67af08fd6228a;Path=/;HttpOnly;SameSite=None;Secure;Domain=www.vistek.ca
vary: Accept-Encoding
strict-transport-security: max-age=2592000
request-context: appId=cid-v1:064a895f-66bb-4d06-acc9-26d3b8a26409
content-security-policy-report-only: block-all-mixed-content;script-src 'self' https://*.vistek.ca https://*.klaviyo.com https://*.criteo.com https://*.doubleclick.net https://*.google.com https://*.googleadbuilder.Services.com https://*.googlesyndication.com https://*.googletagbuilder.Services.com https://*.yahoo.com https://*.klarnaservices.com https://acsbapp.com https://ajax.aspnetcdn.com https://apis.google.com https://cdn.browsiprod.com https://connect.facebook.net https://cdn.jsdelivr.net https://content.linkedin.com https://cdn.logrocket.io https://cdn.lr-ingest.io https://forms.hsforms.com https://googleads.g.doubleclick.net https://graph.facebook.com https://google-analytics.com https://googletagmanager.com https://js.facebook.com https://js.hs-analytics.net https://js.hs-banner.com https://js-na1.hs-scripts.com https://js.hs-scripts.com https://js.hsadspixel.net https://js.hscollectedforms.net https://js.hsforms.net https://js.hsleadflows.net https://js.hubspotfeedback.com https://js.usemessages.com https://js.hubspot.com https://osm.klarnabuilder.Services.com https://platform.linkedin.com https://query.yahooapis.com https://sslwidget.criteo.com https://static.criteo.net https://ssl.google-analytics.com https://snap.licdn.com https://static-exp1.licdn.com https://s.yimg.com https://tagmanager.google.com https://www.google-analytics.com https://www.googleadbuilder.Services.com https://www.googletagmanager.com https://static.www.turnto.com https://vistek.bamboohr.com/ https://www.gstatic.com https://s3.amazonaws.com https://www.paypalobjects.com https://x.klarnacdn.net https://js.klarna.com https://cdn.equalweb.com https://www.googleadservices.com https://www.paypal.com https://maps.googleapis.com https://code.jquery.com 'unsafe-eval' 'unsafe-inline';style-src 'self' *.licdn.com *.google.com cdn.jsdelivr.net fonts.googleapis.com www.googletagmanager.com static.www.turnto.com x.klarnacdn.net vistek.bamboohr.com static.klaviyo.com static-tracking.klaviyo.com 'unsafe-inline';child-src 'self' blob: *.googlesyndication.com *.google.com *.facebook.com *.doubleclick.net *.criteo.net *.criteo.com app.hubspot.com connect.facebook.net forms.hsforms.com js.hsadspixel.net js.hscollectedforms.net js.usemessages.com www.googletagmanager.com;form-action 'self' *.google.com *.facebook.com connect.facebook.net forms.hsforms.com forms.hubspot.com https://*.cardinalcommerce.com;object-src *.googlesyndication.com;frame-ancestors 'self';frame-src 'self' https://www.youtube.com https://gum.criteo.com https://fledge.us.criteo.com/ https://accounts.google.com https://www.turnto.com https://static.www.turnto.com https://forms.hsforms.com https://www.google.com https://www.google.ca https://www.googletagmanager.com https://www.sandbox.paypal.com https://www.paypal.com https://js.playground.klarna.com https://js.klarna.com https://*.cardinalcommerce.com https://googleads.g.doubleclick.net https://app.hubspot.com https://td.doubleclick.net https://bid.g.doubleclick.net;worker-src 'self' blob: www.google.com;base-uri 'self' *.yahoo.com;report-uri /error/csp
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-powered-by: ASP.NET