Security Analysis Results

max-age=3600, s-maxage=3600, stale-while-revalidate=600, stale-if-error=86400

28ba50bcd0000112f99a84f400000001

FR

gzip

28822

report-uri https://csp-report.opl-prd.mgnlsw.com/reports; upgrade-insecure-requests; default-src 'self' 'unsafe-eval' 'unsafe-inline' blob: data: ws: bat.bing.net alb.reddit.com allegra-pitstop-game-0046fd43d9e4.herokuapp.com nasacort.jebbit.com crescendoc.wufoo.com r3.dotdigital-email.com r3.dotdigital-pages.com engage.telfast.com.au askyourliver.s3.eu-central-1.amazonaws.com ws.hotjar.com beacon.deepintent.com *.crazyegg.com www.enterogermina.com a.clarity.ms ad.doubleclick.net ade.googlesyndication.com ads-engagement.presage.io adservice.google.com allegra.mycheckstatus.com allegra.pmcprograms.com an.yandex.ru analytics-static.ugc.bazaarvoice.com analytics.google.com analytics.tiktok.com analytics.twitter.com api-data-connector.abtasty.com api-js.mixpanel.com api.abtasty.com api.amcreativemedia.com api.bazaarvoice.com api.global-data-lab.com api.highdataanalytics.com api.lapis-analytics.com api.mapbox.com api.mkmediaworks.com api.permutive.com api.retargetly.com api.solaranalyticscorp.com api.tiles.mapbox.com api.typeform.com api2.abtasty.com apis.google.com app.abtasty.com apps.bazaarvoice.com ara.paa-reporting-advertising.amazon ariane.abtasty.com assets-tracking.crazyegg.com auth.iws-hybrid.trendmicro.com b.clarity.ms bat.bing.com www.buscopanmoneyback.com.au c.bing.com c.clarity.ms c1.ugc.bazaarvoice.com cdn-eidpp.nitrocdn.com cdn-uicons.flaticon.com cdn.cookielaw.org cdn.flowcode.com cdn.jsdelivr.net cdn.krxd.net cdn.mouseflow.com cdn.pricespider.com cdn.tailwindcss.com cdn.trustpilot.net cdnjs.cloudflare.com cds.taboola.com ch-trc-events.taboola.com clientstream.launchdarkly.com cloudjs.netlify.com code.jquery.com common-fonts.abtasty.com connect.facebook.net content.hotjar.io contentorigin.bazaarvoice.com cookieless-campaign.prd-00.retargetly.com cr-input.mxpnl.net crtrgt.bumlam.com cs.frontend.weborama.fr ct.pinterest.com d.clarity.ms data1.calicluo.com datenschutz.sanofi.de dcinfos-cache.abtasty.com deo.shopeemobile.com dev.visualwebsiteoptimizer.com diffuser-cdn.app-us1.com display.ugc.bazaarvoice.com dulcolax-prod-server-side-tagging-ox3fbruzaa-od.a.run.app e.clarity.ms edge.fullstory.com editor-assets.abtasty.com embed.2b.uy embed.typeform.com embeddedcloud.pricespider.com encrypted-tbn0.gstatic.com encrypted-tbn1.gstatic.com encrypted-tbn2.gstatic.com encrypted-tbn3.gstatic.com euw-omni.pricespider.com euw-wtbng.pricespider.com events.mapbox.com f.clarity.ms fonts.cdnfonts.com fonts.googleapis.com fonts.gstatic.com form.typeform.com gdehu.hit.gemius.pl geolocation.onetrust.com goldbond.mycheckstatus.com goldbond.pmcprograms.com googleads.g.doubleclick.net grmtech.net h.clarity.ms hu-gmtdmp.mookie1.com hugde.adocean.pl i.clarity.ms i.ytimg.com ib.adnxs.com images.simplycodes.com images.typeform.com insight.adsrvr.org irxcm.com j.clarity.ms js.adsrvr.org k.clarity.ms kraken.rambler.ru l.clarity.ms l.facebook.com lett.2buycdn.com lh3.google.com lh3.googleusercontent.com locate.pricespider.com log-papago.naver.com log.pinterest.com login.microsoftonline.com m.clarity.ms m.youtube.com maps.googleapis.com maps.gstatic.com mc.yandex.com mc.yandex.ru metrics.hotjar.io mon16-normal-useast5.tiktokv.us n.clarity.ms nasacort.pmcprograms.com network-a.bazaarvoice.com network.bazaarvoice.com o.clarity.ms o132438.ingest.sentry.io omni.pricespider.com p.clarity.ms p.typekit.net pagead2.googlesyndication.com pagestates-tracking.crazyegg.com pdp-service-v2.prd-00.retargetly.com pdp-service.retargetly.com photos-eu.bazaarvoice.com photos-us.bazaarvoice.com pips.taboola.com pixel.rubiconproject.com pollen.services.myilume.de pollenapps.com privacy-cs.mail.ru privacyportal-de.onetrust.com privacyportal-eu.onetrust.com psb.taboola.com px.adhigh.net px.ads.linkedin.com q.clarity.ms qa-assistant.abtasty.com r.clarity.ms r3.mail.ru rbtds.net readaloud.googleapis.com region1.analytics.google.com region1.google-analytics.com retcode-us-west-1.arms.aliyuncs.com rs.mail.ru rules.quantcount.com s.adroll.com s.amazon-adsystem.com s.clarity.ms s.pinimg.com s.yimg.com s3.amazonaws.com sanofi-privacy.my.onetrust.com sanofi-uat-privacy.my.onetrust.com sanofi.solution.weborama.fr sc-static.net script.hotjar.com secure.adnxs.com secure.quantserve.com securepubads.g.doubleclick.net security-us.mimecast.com selsunblue.pmcprograms.com service.gstatic-cache.com services.global.commerce-connector.com shop.pricespider.com shoppable-assets.global.commerce-connector.com shoppable-configs.global.commerce-connector.com shoppable.commerce-connector.com snap.licdn.com sp.analytics.yahoo.com spoppe-b.azureedge.net ssl.google-analytics.com ssl.gstatic.com st.top100.ru static.ads-twitter.com static.bumlam.com static.hotjar.com static.terratraf.io static2.sharepointonline.com stats.g.doubleclick.net storage.googleapis.com sync.bumlam.com sync.crwdcntrl.net sync.dmp.otm-r.com sync.upravel.com t-azmaps.azurelbs.com t.clarity.ms t.co td.doubleclick.net teddytor.abtasty.com testyourliver.abi.ai top-fwz1.mail.ru tr.snapchat.com tracking.adsafety.net tracking.crazyegg.com translate-pa.googleapis.com translate.google.com translate.googleapis.com trc-events.taboola.com try.abtasty.com u.clarity.ms unisom.mycheckstatus.com unisom.pmcprograms.com unpkg.com use.fontawesome.com use.typekit.net usw-omni.pricespider.com usw-wtbng.pricespider.com v.clarity.ms vc.hotjar.io vk.com w.clarity.ms widgets.abtasty.com ws.miqcommerce.com wtbevents.pricespider.com wtbng.pricespider.com www.algopyrin.hu www.allegra.com www.bing.com www.buscapina.com www.clarity.ms www.crazyegg.com www.dulcolax.ca www.essentiale.hk www.facebook.com www.gammedulco.fr www.google-analytics.com www.google.com www.googleadservices.com www.googleapis.com www.googleoptimize.com www.googletagmanager.com www.gstatic.com www.icyhot.com www.instagram.com www.mucosolvan.com www.rappi.com.co www.researchsolutions.com www.sanofi.us www.terracycle.com www.youtube-nocookie.com www.youtube.com script.crazyegg.com wwwassets.pricespider.com xyzal.mycheckstatus.com xyzal.pmcprograms.com y.clarity.ms yandex.ru tr6.snapchat.com apiv2.popupsmart.com cdn.taboola.com yt3.ggpht.com z.clarity.ms zantac360.pmcprograms.com wtbstream.pricespider.com vimeo.com 9509754.fls.doubleclick.net fls.doubleclick.net *.fls.doubleclick.net edge.curalate.com opella-privacy.my.onetrust.com www.telfastcashback.com.au telfast-widget.ambeedata.com selsunblue.mycheckstatus.com telfast-movie-ticket.kostaging.com.au telfast-movie-ticket.kopromos.com.au player.vimeo.com xyzalus.jebbit.com icyhotus.jebbit.com;

text/html;charset=UTF-8

Thu, 17 Jul 2025 14:09:11 GMT

nginx/1.28.0

cfReqDur;dur=7096.712

max-age=31536000; includeSubDomains; preload

Accept-Encoding Origin

1.1 a2a26177ae1d38fefee4b190990fff6a.cloudfront.net (CloudFront)

vJOvODxU9D7nV-Kvy3CcuNy6wPS1B6hfOzXhj-6kJI-FON21kQVerQ==

MRS52-C2

Miss from cloudfront

SAMEORIGIN

opl-prd-01-Public-0

Registered