Security Analysis Results

bytes

h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

public, max-age=0, s-maxage=86400

br

default-src 'self' 'unsafe-eval' 'strict-dynamic' *.gigya.com *.gskinternet.com *.tiqcdn.com *.gskstatic.com *.qualtrics.com https://collect.tealiumiq.com/ https://maps.googleapis.com/ *.tealiumiq.com/ *.inbenta.io/ *.typekit.net https://fonts.googleapis.com *.easyvax.org https://www.google.com https://www.gstatic.com https://players.brightcove.net *.dotomi.com https://gsk.demdex.net/ https://www.googletagmanager.com/ static.ads-twitter.com cdn.decibelinsight.net bat.bing.com *.quantummetric.com connect.facebook.net sb.scorecardresearch.com aim-tag.hcn.health cdn.di-capt.com glaxosmithklinebeech.tt.omtrdc.net https://mboxedge35.tt.omtrdc.net *.clarity.ms; connect-src 'self' https://collect.tealiumiq.com *.gskstatic.com *.qualtrics.com *.gigya.com https://dpm.demdex.net *.tealiumiq.com https://maps.googleapis.com *.inbenta.io *.inbenta.services https://gskusp.sc.omtrdc.net https://api.sm2finder.com/graphql *.easyvax.org *.tiqcdn.com glaxosmithklinebeech.tt.omtrdc.net collection.decibelinsight.net *.quantummetric.com mboxedge35.tt.omtrdc.net *.tt.omtrdc.net px.ads.linkedin.com analytics.tiktok.com *.clarity.ms wss://collection.decibelinsight.net *.lhmos.com *.facebook.com *.google.com rxussacproddata.blob.core.windows.net/; style-src 'self' 'unsafe-inline' https://*.typekit.net/ https://*.googleapis.com/ assets.gskstatic.com a-cf65.gskstatic.com p.typekit.net *.gskinternet.com *.inbenta.io; script-src-elem 'self' 'unsafe-inline' *.inbenta.io *.gskinternet.com unpkg.com *.dotomi.com cdns.gigya.com *.gskstatic.com *.tiqcdn.com maps.googleapis.com googletagmanager.com *.tealiumiq.com *.qualtrics.com *.googletagmanager.com *.gigya.com aim-tag.hcn.health cdn.quantummetric.com bat.bing.com cdn.decibelinsight.net snap.licdn.com analytics.tiktok.com bh.contextweb.com *.clarity.ms trc.lhmos.com match.deepintent.com *.adnxs.com *.facebook.net res.lassomarketing.io 'sha256-UbkCwvvyncGxuayTZ8/BG8JLsQLyJOGrSUR5eMfsTOY=' 'sha256-L+kEESJO4mWGjCvN3jchf6+sABzaPoH4qDUMqB61w18='; img-src 'self' https://gskusp.sc.omtrdc.net *.gskinternet.com data: https://maps.gstatic.com *.gigya.com https://cm.everesttech.net *.gskstatic.com *.inbenta.io *.inbenta.com *.easyvax.org beacon.deepintent.com *.doctor.com https://dpm.demdex.net https://i-preprod-cf65.gskstatic.com https://sb.scorecardresearch.com https://bat.bing.com https://di.rlcdn.com https://trc.lhmos.com https://match.deepintent.com *.qualtrics.com x.bidswitch.net id5-sync.com match.sharethrough.com ads.yieldmo.com dsum-sec.casalemedia.com facebook.com datacloud.tealiumiq.com match.adsrvr.org px.ads.linkedin.com *.adnxs.com *.contextweb.com thrtle.com *.lijit.com *.liadm.com *.smartadserver.com *.streamtheworld.com *.clarity.ms *.thisisdax.com *.bing.com *.facebook.com *.doubleclick.net https://adservice.google.com *.linkedin.com *.postrelease.com *.google.com; frame-src 'self' gsk.demdex.net cdns.us1.gigya.com *.brightcove.net medtargetsystem.com aim-tag.hcn.health *.qualtrics.com 8224864.fls.doubleclick.net *.medtargetsystem.com; script-src 'self' 'strict-dynamic' 'unsafe-eval' *.ads-twitter.com *.quantummetric.com *.facebook.net https://aim-tag.hcn.health https://cdn.di-capt.com *.scorecardresearch.com https://bat.bing.com https://trc.lhmos.com *.decibelinsight.net *.clarity.ms 'sha256-UbkCwvvyncGxuayTZ8/BG8JLsQLyJOGrSUR5eMfsTOY=' 'sha256-L+kEESJO4mWGjCvN3jchf6+sABzaPoH4qDUMqB61w18='; font-src 'self' https://fonts.gstatic.com/ *.typekit.net *.inbenta.io/ https://fonts.googleapis.com *.doctor.com; frame-ancestors 'self'; upgrade-insecure-requests; script-src-attr 'self' 'unsafe-inline' 'unsafe-hashes';

text/html; charset=UTF-8

Wed, 30 Jul 2025 15:44:42 GMT

<https://a-cf65.gskstatic.com>; rel=preconnect; crossorigin, <https://a-cf65.gskstatic.com>; rel=dns-prefetch; crossorigin

Apache

max-age=63072000;

chunked

Accept-Encoding

1.1 google

nosniff

SAMEORIGIN

cf65-prd-aem-publish-1