mitacs.ca website report

HTTP/2 200
date: Fri, 23 Oct 2026 13:33:44 GMT
content-type: text/html; charset=UTF-8
server: cloudflare
vary: Accept-Encoding, accept, content-type
x-hacker: If you're reading this, you should visit https://join.a8c.com/viphacker and apply to join the fun, mention this header.
host-header: a9130478a60e5f9135f765b23f26593b
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
strict-transport-security: max-age=15552000; includeSubDomains
permissions-policy: geolocation=*
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-security-policy: default-src 'self';worker-src blob: 'self' ;child-src blob: *.hsforms.com;script-src 'unsafe-inline' 'unsafe-eval' 'self' blob: *.fontawesome.com *.hs-analytics.net *.hs-banner.com *.hs-scripts.com *.hsadspixel.net *.hscollectedforms.net *.hsforms.com *.hsforms.net *.hsleadflows.net *.hubspot.com *.hubspot.net *.hubspotfeedback.com *.hubspotusercontent00.net *.unpkg.com *.usemessages.com api.weglot.com *.wp.com cdn.weglot.com feedback-eu1.hubapi.com feedback.hubapi.com https://code.jquery.com/ https://connect.facebook.net/ https://d9hhrg4mnvzow.cloudfront.net https://js-na1.hs-scripts.com/ https://js.hs-scripts.com https://js.hsforms.net/ https://kit.fontawesome.com/ https://s0.wp.com/ https://script.hotjar.com/ https://snap.licdn.com/ https://static.addtoany.com/ https://static.hotjar.com/ js-eu1.hs-scripts.com js-eu1.hscta.net js-eu1.hsforms.net js.hscta.net static.hsappstatic.net stats.wp.com unpkg.com www.bugherd.com www.clickcease.com www.google-analytics.com www.google.ca www.googletagmanager.com js-eu1.hubspot.com https://www.google.com/recaptcha/ https://cdnjs.cloudflare.com/ajax/libs/fancybox/ https://cdnjs.cloudflare.com/ajax/libs/slick-carousel/ https://cdn.amcharts.com/ https://googleads.g.doubleclick.net/ https://www.googleadservices.com/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/iframe_api https://www.youtube.com/s/player/ https://static.cloudflareinsights.com/beacon.min.js;object-src 'none';style-src 'unsafe-inline' 'self' cdn.weglot.com s0.wp.com unpkg.com p.typekit.net use.typekit.net use.fontawesome.com fonts.googleapis.com hello.myfonts.net *.go-vip.net *.hubspotusercontent00.net cdn2.hubspot.net https://cdnjs.cloudflare.com/ajax/libs/fancybox/ https://cdnjs.cloudflare.com/ajax/libs/slick-carousel/ https://js-eu1.hscta.com/;img-src 'self' data: https://secure.gravatar.com https://d9hhrg4mnvzow.cloudfront.net *.hubspot.com/ https://www.google.com https://www.linkedin.com https://www.google.ca/ https://pixel.wp.com/ https://secure.gravatar.com/ https://googleads.g.doubleclick.net/ https://www.google.ca https://www.facebook.com/ www.google-analytics.com *.mitacs.ca https://maps.gstatic.com https://maps.googleapis.com https://i.vimeocdn.com/ js.hscta.net js-eu1.hscta.net no-cache.hubspot.com *.hubspotusercontent00.net *.hubspot.net cdn2.hubspot.net *.hsforms.net *.hsforms.com https://hubspot-no-cache-eu1-prod.s3.amazonaws.com/ https://px.ads.linkedin.com https://www.googletagmanager.com/;media-src 'self';frame-src 'self' www.google.com www.googletagmanager.com widgets.wp.com static.addtoany.com www.gstatic.com https://www.youtube.com/ https://w.soundcloud.com/ https://player.vimeo.com/ https://www.cbc.ca/ https://eventbrite.ca/ https://www.eventbrite.ca/ https://www.facebook.com/ https://td.doubleclick.net/ https://js.hsforms.net/ wordpress.com/ *.hubspot.com *.hs-sites.com *.hs-sites-eu1.com *.hubspot.net play.hubspotvideo.com play-eu1.hubspotvideo.com *.hsforms.net *.hsforms.com *.go-vip.net;font-src 'self' data: *.google.com s0.wp.com ka-p.fontawesome.com kit.fontawesome.com use.typekit.net use.fontawesome.com cdn.jsdelivr.net www.mitacs.ca fonts.gstatic.com hello.myfonts.net;connect-src 'self' google.com api.hubapi.com www.google.com www.bugherd.com www.linkedin.com www.google.ca www.facebook.com monitor.clickcease.com kit.fontawesome.com https://ka-p.fontawesome.com/ https://www.google-analytics.com/ https://stats.g.doubleclick.net/ https://cdn.linkedin.oribi.io/ https://www.gstatic.com/ https://www.youtube.com/ https://in.hotjar.com/ wss://ws.hotjar.com content.hotjar.io maps.googleapis.com analytics.google.com api.weglot.com *.hubapi.com js.hscta.net js-eu1.hscta.net *.hubspot.com *.hs-banner.com *.hscollectedforms.net *.hsforms.com *.go-vip.net https://px.ads.linkedin.com https://static.hsappstatic.net https://cdn.weglot.com https://cdn-api-weglot.com https://cdnjs.cloudflare.com/ajax/libs/slick-carousel/* https://cdnjs.cloudflare.com/ajax/libs/slick-carousel/1.9.0/slick.min.css.map;base-uri 'self';form-action 'self' forms-eu1.hsforms.com;frame-ancestors 'self';
link: <https://www.mitacs.ca/wp-json/>; rel="https://api.w.org/", <https://www.mitacs.ca/wp-json/wp/v2/pages/60122>; rel="alternate"; title="JSON"; type="application/json", <https://www.mitacs.ca/>; rel=shortlink
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=0v2z80BXoEp5TD4WQa80u%2FPLeEZJ8vfJfZ7yAuZ1Q0xHFbsjFpO3MJCiDtuc3ShrtUWE%2Bv2%2Fiw5i6M6Zp20KkqXjGkSUbUes4z5P6mVmKviungBq4vePrBf%2FJ%2B3dh58%3D"}]}
x-rq: cdg2 0 20 9980
cache-control: max-age=300, must-revalidate
server-timing: cfCacheStatus;desc="DYNAMIC", cfEdge;dur=22,cfOrigin;dur=9
x-cache: HIT
x-remembering: Eric Binnion <https://friendsofericbinnion.wordpress.com/>
cf-cache-status: DYNAMIC
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
content-encoding: br
cf-ray: a4f11d825bdf88c5-CDG