HTTP/1.0 302 Moved Temporarily
Location: https://accredoivig.com/
Server: BigIP
Connection: Keep-Alive
Content-Length: 0
HTTP/1.0 200 OK
Cache-Control: must-revalidate, no-cache, private
Content-Language: en
Content-Security-Policy-Report-Only: default-src 'self' data: *.express-scripts.com *.accredo.com *.s3.amazonaws.com *.amazonaws.com *.brightcove.com *.brightcove.net *.api.brightcove.com *.zencdn.net *.cloudfront.net *.qualtrics.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' assets.adobedtm.com *.everestjs.net *.cloudflare.com *.rawgit.com *.s3.amazonaws.com *.amazonaws.com *.brightcove.com *.brightcove.net *.api.brightcove.com *.zencdn.net *.s3.amazonaws.com *.dialogtech.com *.cloudfront.net *.marketo.net *.qualtrics.com *.googletagmanager.com *.googleadservices.com *.doubleclick.net; object-src 'self' *.s3.amazonaws.com *.amazonaws.com *.brightcove.net *.s3.amazonaws.com *.cloudfront.net; style-src 'self' data: 'unsafe-inline' fonts.googleapis.com *.express-scripts.com *.accredo.com *.cloudflare.com *.s3.amazonaws.com *.amazonaws.com; img-src 'self' data: *.accredo.com accredo.com expressscripts.sc.omtrdc.net *.s3.amazonaws.com *.amazonaws.com *.brightcove.com *.brightcove.net *.api.brightcove.com *.zencdn.net esi-drupal-cdn-prod.s3.amazonaws.com *.boltdns.net *.qualtrics.com *.express-scripts.com; media-src 'self' blob: *.s3.amazonaws.com *.amazonaws.com *.brightcove.net *.brightcove.com *.dotsub.com *.express-scripts.com *.accredo.com *.s3.amazonaws.com *.boltdns.net *.brightcovecdn.com *.qualtrics.com; frame-src 'self' abesiemsen.github.io *.s3.amazonaws.com *.amazonaws.com *.s3.amazonaws.com *.qualtrics.com; child-src 'self' blob: *.s3.amazonaws.com *.amazonaws.com *.brightcove.net *.express-scripts.com *.accredo.com; font-src * 'self' data: fonts.googleapis.com fonts.gstatic.com *.s3.amazonaws.com *.amazonaws.com *.accredo.com accredo.com; connect-src 'self' *.express-scripts.com expressscriptsholdin.tt.omtrdc.net dpm.demdex.net *.brightcove.com *.brightcove.net *.api.brightcove.com *.zencdn.net dotsub.com *.s3.amazonaws.com *.accredo.com *.boltdns.net *.brightcovecdn.com *.mktoresp.com *.qualtrics.com; report-uri /report-csp-violation
Content-Type: text/html; charset=UTF-8
Date: Thu, 22 Oct 2020 06:49:24 GMT
Expires: Sun, 19 Nov 1978 05:00:00 GMT
From-Origin: https://www.accredo.com, https://accredo.com, https://www.hemophilia.com
Link: <https://wwwaccredo-prod.apps.ps2pcf03.express-scripts.com/ig>; rel="canonical", <https://wwwaccredo-prod.apps.ps2pcf03.express-scripts.com/node/473>; rel="shortlink", <https://wwwaccredo-prod.apps.ps2pcf03.express-scripts.com/ig>; rel="revision"
Strict-Transport-Security: max-age=31536000; includeSubDomains
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Accept-Encoding
X-Content-Security-Policy-Report-Only: default-src 'self' data: *.express-scripts.com *.accredo.com *.s3.amazonaws.com *.amazonaws.com *.brightcove.com *.brightcove.net *.api.brightcove.com *.zencdn.net *.cloudfront.net *.qualtrics.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' assets.adobedtm.com *.everestjs.net *.cloudflare.com *.rawgit.com *.s3.amazonaws.com *.amazonaws.com *.brightcove.com *.brightcove.net *.api.brightcove.com *.zencdn.net *.s3.amazonaws.com *.dialogtech.com *.cloudfront.net *.marketo.net *.qualtrics.com *.googletagmanager.com *.googleadservices.com *.doubleclick.net; object-src 'self' *.s3.amazonaws.com *.amazonaws.com *.brightcove.net *.s3.amazonaws.com *.cloudfront.net; style-src 'self' data: 'unsafe-inline' fonts.googleapis.com *.express-scripts.com *.accredo.com *.cloudflare.com *.s3.amazonaws.com *.amazonaws.com; img-src 'self' data: *.accredo.com accredo.com expressscripts.sc.omtrdc.net *.s3.amazonaws.com *.amazonaws.com *.brightcove.com *.brightcove.net *.api.brightcove.com *.zencdn.net esi-drupal-cdn-prod.s3.amazonaws.com *.boltdns.net *.qualtrics.com *.express-scripts.com; media-src 'self' blob: *.s3.amazonaws.com *.amazonaws.com *.brightcove.net *.brightcove.com *.dotsub.com *.express-scripts.com *.accredo.com *.s3.amazonaws.com *.boltdns.net *.brightcovecdn.com *.qualtrics.com; frame-src 'self' abesiemsen.github.io *.s3.amazonaws.com *.amazonaws.com *.s3.amazonaws.com *.qualtrics.com; child-src 'self' blob: *.s3.amazonaws.com *.amazonaws.com *.brightcove.net *.express-scripts.com *.accredo.com; font-src * 'self' data: fonts.googleapis.com fonts.gstatic.com *.s3.amazonaws.com *.amazonaws.com *.accredo.com accredo.com; connect-src 'self' *.express-scripts.com expressscriptsholdin.tt.omtrdc.net dpm.demdex.net *.brightcove.com *.brightcove.net *.api.brightcove.com *.zencdn.net dotsub.com *.s3.amazonaws.com *.accredo.com *.boltdns.net *.brightcovecdn.com *.mktoresp.com *.qualtrics.com; report-uri /report-csp-violation
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Ua-Compatible: IE=edge
X-Vcap-Request-Id: 0b677a4f-172f-4eae-601b-1683e4ee27eb
X-Webkit-Csp-Report-Only: default-src 'self' data: *.express-scripts.com *.accredo.com *.s3.amazonaws.com *.amazonaws.com *.brightcove.com *.brightcove.net *.api.brightcove.com *.zencdn.net *.cloudfront.net *.qualtrics.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' assets.adobedtm.com *.everestjs.net *.cloudflare.com *.rawgit.com *.s3.amazonaws.com *.amazonaws.com *.brightcove.com *.brightcove.net *.api.brightcove.com *.zencdn.net *.s3.amazonaws.com *.dialogtech.com *.cloudfront.net *.marketo.net *.qualtrics.com *.googletagmanager.com *.googleadservices.com *.doubleclick.net; object-src 'self' *.s3.amazonaws.com *.amazonaws.com *.brightcove.net *.s3.amazonaws.com *.cloudfront.net; style-src 'self' data: 'unsafe-inline' fonts.googleapis.com *.express-scripts.com *.accredo.com *.cloudflare.com *.s3.amazonaws.com *.amazonaws.com; img-src 'self' data: *.accredo.com accredo.com expressscripts.sc.omtrdc.net *.s3.amazonaws.com *.amazonaws.com *.brightcove.com *.brightcove.net *.api.brightcove.com *.zencdn.net esi-drupal-cdn-prod.s3.amazonaws.com *.boltdns.net *.qualtrics.com *.express-scripts.com; media-src 'self' blob: *.s3.amazonaws.com *.amazonaws.com *.brightcove.net *.brightcove.com *.dotsub.com *.express-scripts.com *.accredo.com *.s3.amazonaws.com *.boltdns.net *.brightcovecdn.com *.qualtrics.com; frame-src 'self' abesiemsen.github.io *.s3.amazonaws.com *.amazonaws.com *.s3.amazonaws.com *.qualtrics.com; child-src 'self' blob: *.s3.amazonaws.com *.amazonaws.com *.brightcove.net *.express-scripts.com *.accredo.com; font-src * 'self' data: fonts.googleapis.com fonts.gstatic.com *.s3.amazonaws.com *.amazonaws.com *.accredo.com accredo.com; connect-src 'self' *.express-scripts.com expressscriptsholdin.tt.omtrdc.net dpm.demdex.net *.brightcove.com *.brightcove.net *.api.brightcove.com *.zencdn.net dotsub.com *.s3.amazonaws.com *.accredo.com *.boltdns.net *.brightcovecdn.com *.mktoresp.com *.qualtrics.com; report-uri /report-csp-violation
X-Xss-Protection: 1; mode=block
Connection: close
|