cem.com website report

HTTP/2 200
date: Thu, 22 Oct 2026 15:23:54 GMT
content-type: text/html; charset=UTF-8
content-length: 20342
server: Apache
pragma: no-cache
cache-control: max-age=0, must-revalidate, no-cache, no-store
expires: Wed, 22 Oct 2025 13:14:57 GMT
report-to: {"group":"report-endpoint","max_age":10886400,"endpoints":[{"url":"https:\/\/www.cem.com\/"}]}
content-security-policy-report-only: font-src *.googleapis.com *.gstatic.com *.fontawesome.com https://fonts.bunny.net https://cdnjs.cloudflare.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com player.vimeo.com https://www.google.com/recaptcha/ science.cem.com www.google.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.googleapis.com *.gstatic.com 'self' *.amazonaws.com *.svc.dynamics.com *.clarity.ms *.bing.com cem.com *.cem.com 'unsafe-inline' https://firebasestorage.googleapis.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.googleapis.com *.gstatic.com 'self' *.clarity.ms www.clarity.ms *.marketo.net bid.g.doubleclick.net www.google.com *.avada.io *.shopify.com mktdplp102cdn.azureedge.net 'unsafe-eval' 'unsafe-hashes' code.jquery.com cdnjs.cloudflare.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com cdnjs.cloudflare.com https://fonts.bunny.net maxcdn.bootstrapcdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.amazonaws.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com *.googleapis.com 'self' *.mktoresp.com *.google.com googleads.g.doubleclick.net *.googlesyndication.com *.avada.io *.shopify.com mktdplp102cdn.azureedge.net https://get.geojs.io 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://www.cem.com/; report-to report-endpoint;
strict-transport-security: max-age=31536000
content-security-policy: upgrade-insecure-requests;
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN, SAMEORIGIN
set-cookie: PHPSESSID=1f7ehl2ll8piirok39sii4f8n3; expires=Fri, 23-Oct-2026 09:43:54 GMT; Max-Age=66000; path=/; domain=cem.com; secure; HttpOnly; SameSite=Lax
vary: Accept-Encoding
content-encoding: gzip
x-ua-compatible: IE=edge