Xeljanz.ca

date: Sat, 07 Sep 2024 21:47:33 GMT
content-type: text/html
content-length: 167
location: https://www.xeljanz.ca/
cache-control: max-age=3600
expires: Sat, 07 Sep 2024 22:47:33 GMT
set-cookie: __cf_bm=79gbA_scMX8AM.UnXLimoGe4zDv5oZANG0Knba3P5vM-1725745653-1.0.1.1-r9.tXwWxFWpl32LCRUVtI21ojDwhV9K8aJOZPpuTsVcPjOJGzsfF780jptdLFxhmM3O8fGontbXDfBVr9C3nEQ; path=/; expires=Sat, 07-Sep-24 22:17:33 GMT; domain=.xeljanz.ca; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
strict-transport-security: max-age=2592000; includeSubDomains; preload
set-cookie: _cfuvid=oTxOgjtxxvsW5N506bfGt4Oh3snUP2ySX177UT6kZF0-1725745653441-0.0.1.1-604800000; path=/; domain=.xeljanz.ca; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 8bf9e5ddba101247-ORD

HTTP/2 200 
date: Sat, 07 Sep 2024 21:47:33 GMT
content-type: text/html
cache-control: public, max-age=3600
strict-transport-security: max-age=2592000; includeSubDomains; preload
content-security-policy: style-src 'self' 'unsafe-inline' https: https://cdn.fonts.net/; font-src 'self' data: https: https://cdn.fonts.net/; connect-src 'self' *.addthis.com *.akafms.net *.akamaihd.net *.brightcove.com *.brightcove.net *.brightcovecdn.com *.contentsquare.net *.decibel.com *.decibelinsight.net *.demdex.net *.digitalpfizer.com *.digitalpfizer.com.cn *.evidon.com *.force.com *.hapyak.com *.hotjar.com *.hotjar.io *.kampyle.com *.llnw.net *.llnwd.net *.medallia.com *.medallia.eu *.pfizer.com *.pfizerstatic.io *.salesforce-sites.com *.thunderhead.com 1vrf04rusa.execute-api.eu-west-1.amazonaws.com 223i44638a.execute-api.eu-west-1.amazonaws.com 6q7zxrfi35.execute-api.eu-west-1.amazonaws.com acsbapp.com appsapi.veinteractive.com/api bam.nr-data.net blob: c.az.contentsquare.net/v2 cdn.acsbapp.com cdn.cookielaw.org cdn.linkedin.oribi.io code.jquery.com cookiee1.veinteractive.com/api d2qrdklrsxowl2.cloudfront.net dpm.demdex.net drs2.veinteractive.com edge.adobedc.net geoip-js.maxmind.com/geoip/v2.1/country geolocation.onetrust.com/ house-cloudfront.ap-northeast-1.prod.boltdns.net house-cloudfront.ap-southeast-1.prod.boltdns.net house-cloudfront.ap-southeast-2.prod.boltdns.net house-cloudfront.eu-west-1.prod.boltdns.net house-cloudfront.us-east-1.prod.boltdns.net https://ms-forms-service-production.digitalpfizer.com/api/v2/forms https://ms-forms-service-staging.digitalpfizer.com/api/v2/forms interactive.digitalpfizer.com js-agent.newrelic.com l.betrad.com loremflickr.com manifest.prod.boltdns.net maps.googleapis.com metrics.articulate.com newton-api.eu.cloudhub.io pfe-dse-dar-poc.auth.us-east-1.amazoncognito.com pfizer-privacy.my.onetrust.com/ pfizer.sc.omtrdc.net pfizer.tt.omtrdc.net/ sessionapi.veinteractive.com sitecatalyst.omniture.com/sc15/activitymap storybook.js.org tagmanager.google.com uploads.interactivity.brightcove.com uploads.intercomcdn.com vlswbkfag3.execute-api.eu-west-1.amazonaws.com web1.acsbapp.com wss: www.facebook.com www.google-analytics.com www.interactivemanager.pfizer; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.cloudflare.com/cdn-cgi/scripts *.cloudfront.net/js/hapyak.js *.cloudfront.net/js/partners/brightcovePlugin *.decibel.com *.decibelinsight.net *.digitalpfizer.com *.digitalpfizer.com.cn *.dotomi.com *.edison.sh *.force.com *.hotjar.com *.janrain.com *.janraincapture.com *.janrainsso.com *.kampyle.com *.medallia.com *.medallia.eu *.pfizer.com *.pfizer.com.cn *.pfizerstatic.io *.salesforce-sites.com *.salesforce.com *.salesforceliveagent.com *.thunderhead.com *.youtube.com a.volvelle.tech acsbapp.com activitymap.adobe.com/sc15/activitymap/ aim-tag.hcn.health/js/ ajax.cloudflare.com ajax.googleapis.com/ajax/libs/webfont/* analytics.twitter.com app.contentsquare.com assets.adobedtm.com bam.nr-data.net blob: c.betrad.com c.evidon.com cdn.cookielaw.org cdn.di-capt.com/ cdnjs.cloudflare.com code.jquery.com config1.veinteractive.com connect.facebook.net d1v9u0bgi1uimx.cloudfront.net/static/sso_lite.js d2qrdklrsxowl2.cloudfront.net fast.fonts.net/jsapi geolocation.onetrust.com/ googleads.g.doubleclick.net https://ajax.cloudflare.com/ https://analytics.digitalpfizer.com https://pfizer.demdex.net https://s3.amazonaws.com/ https://www.youtube.com/ interactive.digitalpfizer.com js-agent.newrelic.com js.adsrvr.org/ js.maxmind.com/js/apis/geoip2/v2.1 l.evidon.com maps.googleapis.com/maps-api-v3/api/js/ maps.googleapis.com/maps/api/js maxcdn.bootstrapcdn.com pfcopayoffers-stage.pfizersite.io platform.twitter.com player.interactivity.brightcove.com/ player.vimeo.com players.brightcove.net px.ads.linkedin.com px.veinteractive.com s.ytimg.com/yts/jsbin s3-eu-west-1.amazonaws.com s3.amazonaws.com/docs.gcs.digitalpfizer.com s3.amazonaws.com/pfe_im/ sadmin.brightcove.com/js snap.licdn.com ssl.google-analytics.com static.ads-twitter.com t.contentsquare.net tagmanager.google.com tpc.googlesyndication.com/sodar vjs.zencdn.net www.geoplugin.net www.google-analytics.com www.googleadservices.com/pagead www.googletagmanager.com www.gstatic.com/charts www.interactivemanager.pfizer; default-src 'none'; child-src 'self' blob:; frame-ancestors 'self' *.hapyak.com; frame-src 'self' *.digitalpfizer.com *.fls.doubleclick.net *.force.com *.hapyak-hosted.com *.hapyak.com *.kampyle.com *.medallia.com *.medallia.eu *.pfizer.com *.pfizerstatic.io *.salesforce-sites.com *.salesforce.com *.salesforceliveagent.com *.youtube.com activitymap.adobe.com/sc15/activitymap/ aim-tag.hcn.health/ bid.g.doubleclick.net blob: config1.veinteractive.com d2qrdklrsxowl2.cloudfront.net hapyak-assets.s3.amazonaws.com insight.adsrvr.org interactive.digitalpfizer.com interactivity-uploads.s3.us-east-1.amazonaws.com/ intercom-sheets.com l3.evidon.com pfizer-grv.janrainsso.com pfizer.demdex.net pfizergrv-qa.janrainsso.com platform.twitter.com player.interactivity.brightcove.com player.vimeo.com players.brightcove.net resources.interactivity.brightcove.com sketchfab.com staticxx.facebook.com syndication.twitter.com td.doubleclick.net/ uploads.interactivity.brightcove.com v5.organimi.com vars.hotjar.com where-to-buy.co www.facebook.com www.google.com/maps www.interactivemanager.pfizer www.medtargetsystem.com/; img-src 'self' blob: data: https:; manifest-src 'self'; media-src 'self' *.akafms.net *.akamaihd.net *.boltdns.net *.brightcovecdn.com *.llnw.net *.llnwd.net *.media.brightcove.com *.secure.brightcove.com blob: data: js.intercomcdn.com manifest.prod.boltdns.net; object-src 'self' players.brightcove.net; worker-src 'self' blob:; report-uri https://pfeprod.report-uri.com/r/t/csp/enforce
x-edison-type: Lite
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
set-cookie: __cf_bm=6opcAdsdPVkZWuMsWie0J3vEOt8ggOGDj5Q2hldIiE4-1725745653-1.0.1.1-khafm3n7vyfeZiDbd7S9OLiUMg0.IZMXiZ6CdpxLb8DC0OgrQo9DcLDDZ04_N1JBa1eRhWo51c1FG7GGUksZog; path=/; expires=Sat, 07-Sep-24 22:17:33 GMT; domain=.xeljanz.ca; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
set-cookie: __cfruid=b9398af038abe2be97dcbf4dc8260772762a5e09-1725745653; path=/; domain=.xeljanz.ca; HttpOnly; Secure; SameSite=None
set-cookie: _cfuvid=bDOPG_iehNVZXciWKQSOVWRfZOhnA7sCkzmGMTlgzIA-1725745653936-0.0.1.1-604800000; path=/; domain=.xeljanz.ca; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 8bf9e5de298f8720-ORD
content-encoding: gzip