HTTP/1.1 200 OK
Date: Fri, 15 Jan 2021 05:56:54 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 97961
Connection: keep-alive
Cache-Control: max-age=900, public
Content-Language: en
Expires: Sun, 19 Nov 1978 05:00:00 GMT
Last-Modified: Fri, 15 Jan 2021 05:00:07 GMT
ETag: "1610686807"
Vary: Cookie
Server: Microsoft-IIS/10.0
X-Powered-By: PHP/7.3.20
Link: <https://www.uvmhealth.org/>; rel="canonical", <https://www.uvmhealth.org/>; rel="shortlink"
Link: <https://www.uvmhealth.org/home>; rel="revision"
X-UA-Compatible: IE=edge
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: default-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.authorize.net *.google.com static.addtoany.com cdnjs.cloudflare.com cdn.rawgit.com *.googleapis.com rw1.marchex.io connect.facebook.net googleads.g.doubleclick.net *.googletagmanager.com *.google-analytics.com *.googleadservices.com *.gstatic.com cdn.jsdelivr.net code.jquery.com translate.googleapis.com *.healthwise.net platform.twitter.com www.youtube.com cdn.syndication.twimg.com s.ytimg.com script.crazyegg.com lcp360.cachefly.net snap.licdn.com cdn.taboola.com cdn.callrail.com bat.bing.com trc.taboola.com gateway.answerscloud.com platform.linkedin.com app-ab30.marketo.com gateway.us-east-1.elasticbeanstalk.com a.adtpix.com *.wayin.com ib.adnxs.com cdn.datatables.net js.callrail.com radiomd.com; object-src 'self'; style-src 'self' 'unsafe-inline' cdnjs.cloudflare.com fonts.googleapis.com tagmanager.google.com *.typekit.net cdn.cookielaw.org optanon.blob.core.windows.net *.gstatic.com translate.googleapis.com *.healthwise.net uvmhn.s3.amazonaws.com www.wvmtradio.com gateway.answerscloud.com platform.twitter.com ton.twimg.com app-ab30.marketo.com; img-src 'self' 'unsafe-inline' data: maps.googleapis.com px.marchex.io *.facebook.com *.google.com *.gstatic.com cdn.rawgit.com raw.githubusercontent.com *.g.doubleclick.net *.google-analytics.com *.googletagmanager.com *.healthwise.net *.twitter.com *.twimg.com uvmhn.s3.amazonaws.com translate.googleapis.com px.ads.linkedin.com bat.bing.com cds.taboola.com gateway.answerscloud.com feedback-logo.foresee.com gateway.us-east-1.elasticbeanstalk.com p.adsymptotic.com www.linkedin.com lh3.googleusercontent.com infomc.uvmhealth.org; frame-src 'self' 'unsafe-inline' static.addtoany.com *.doubleclick.net *.google.com players.brightcove.net *.youtube.com *.googletagmanager.com *.zensource.cloud public.fletcherallen.org media.healthwise.net platform.twitter.com player.vimeo.com w.soundcloud.com www.wvmtradio.com www.linkedin.com gateway.answerscloud.com app-ab30.marketo.com syndication.twitter.com www.facebook.com xd.wayin.com public.uvmmedcenter.org client.doctorpodcasting.com radiomd.com viewer.panoskin.com; font-src data: 'self' 'unsafe-inline' fonts.googleapis.com fonts.gstatic.com use.typekit.net *.healthwise.net uvmhn.s3.amazonaws.com gateway.answerscloud.com gateway.us-east-1.elasticbeanstalk.com; connect-src 'self' 'unsafe-inline' *.authorize.net *.facebook.com stats.addtoany.com *.google-analytics.com *.doubleclick.net *.googleapis.com *.taboola.com *.crazyegg.com uvmhn.s3.amazonaws.com analytics.foresee.com survey.foreseeresults.com bat.bing.com device.4seeresults.com js.callrail.com; report-uri /report-csp-violation
X-XSS-Protection: 1; mode=block
X-Powered-By: ASP.NET