tmf-group.com website report

HTTP/2 200
date: Thu, 22 Oct 2026 15:53:20 GMT
content-type: text/html; charset=utf-8
server: cloudflare
cache-control: no-cache, no-store, must-revalidate
expires: 0
pragma: no-cache
strict-transport-security: max-age=31536000; includeSubDomains
request-context: appId=cid-v1:e88d2448-b71e-4416-ae50-4a728b5d5f3f
reporting-endpoints: csp-endpoint="https://www.tmf-group.com/api/reporting/", default="https://www.tmf-group.com/api/reporting/"
report-to: { "group": "csp-endpoint","max_age": 10886400,"endpoints": [{ "url": "https://www.tmf-group.com/api/reporting/" }] }
content-security-policy: default-src 'self' 'strict-dynamic' 'nonce-154a359b-293e-4c85-abb6-92a8a18039bd' ; script-src 'self' 'unsafe-eval' 'strict-dynamic' 'nonce-154a359b-293e-4c85-abb6-92a8a18039bd' *.googletagmanager.com *.vimeocdn.com *.gstatis.com *.gstatic.com f.vimeocdn.com js.monitor.azure.com cdn-ukwest.onetrust.com https://*.optimizely.com https://optimizely.s3.amazonaws.com https://cdn-assets-prod.s3.amazonaws.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com https://*.optimizely.com; img-src 'self' *.doubleclick.net cdn-ukwest.onetrust.com *.teads.tv www.facebook.com *.linkedin.com *.bing.com www.googletagmanager.com *.svc.dynamics.com www.google.com ade.googlesyndication.com www.google.co.uk c.clarity.ms www.google.co.in www.google.nl mc.yandex.ru www.google.it www.google.se i.vimeocdn.com www.google.com.pe www.google.de www.google.pt www.google.de www.google.ae www.google.je www.google.dk www.google.com.tr c.clarity.ms www.google.com.tr www.google.co.jp b98.yahoo.co.jp https://cdn.optimizely.com www.googleadservices.com; connect-src 'self' wss: *.hotjar.com *.onetrust.com *.google-analytics.com *.visualstudio.com *.googlesyndication.com *.svc.dynamics.com *.google.com google.com *.linkedin.com *.doubleclick.net *.teads.tv *.clarity.ms *.zi-scripts.com *.mktoresp.com *.site24x7rum.eu *.zoominfo.com assets-eur.mkt.dynamics.com cxppusa1formui01cdnsa01-endpoint.azureedge.net public-eur.mkt.dynamics.com *.hotjar.io connect.facebook.net snap.licdn.com bat.bing.com www.google.com www.google.fr www.google.co.jp *.google.co.uk *.clickcease.com analytics.tmf-group.com www.googleadservices.com https://logx.optimizely.com https://*.optimizely.com; font-src 'self' fonts.gstatic.com at.alicdn.com; object-src 'none'; ; frame-src 'self' www.googletagmanager.com a78f1e16211141f6b069bb3c4b0c784d.svc.dynamics.com *.fls.doubleclick.net td.doubleclick.net fledge.teads.tv player.vimeo.com 575178d01fe9430c857340cf56c8cc1d.svc.dynamics.com block.opendns.com gbci.kraios.tmf-group.com www.youtube.com embed.acast.com vimeo.com https://a6184659353075712.cdn.optimizely.com https://a6184659353075712.cdn-pci.optimizely.com; child-src 'self' *.vimeo.com *.doubleclick.net a78f1e16211141f6b069bb3c4b0c784d.svc.dynamics.com *.teads.tv *.infogram.com; form-action 'self' ; frame-ancestors 'self' ; base-uri 'self' ;  report-uri https://www.tmf-group.com/api/reporting/;  report-to csp-endpoint;
x-frame-options: sameorigin
x-content-type-options: nosniff
x-permitted-cross-domain-policies: none
referrer-policy: same-origin
cf-cache-status: DYNAMIC
set-cookie: EPiStateMarker=true; path=/; secure, .AspNetCore.Mvc.CookieTempDataProvider=; expires=Thu, 01 Jan 1970 00:00:00 GMT; path=/; secure; samesite=lax; httponly, ARRAffinity=23b99266e1f9ed52628e4140c34efdec7944dc8611aaba0ed3650aa2ad84a56e;Path=/;HttpOnly;Secure;Domain=www.tmf-group.com, ARRAffinitySameSite=23b99266e1f9ed52628e4140c34efdec7944dc8611aaba0ed3650aa2ad84a56e;Path=/;HttpOnly;SameSite=None;Secure;Domain=www.tmf-group.com, _cfuvid=B22T6.0Rmgjx9_v0Say._sndEotBtApjTkdqv_NNv20-1792684400.8400679-1.0.1.1-rmnmTPA7bX40VaYGjD3amGjWFVYqomjUGXcq1HhD38U; HttpOnly; SameSite=None; Secure; Path=/; Domain=tmf-group.com
content-encoding: gzip
cf-ray: a4e9aca138a4d5a4-CDG
alt-svc: h3=":443"; ma=86400