SSL Report:
gscreenqa.secureexchange.net
(35.211.82.237)
Assessed on: Wed, 01 Oct 2025 13:11:37 UTC
| Clear cache
Summary
0
20
40
60
80
100
Certificate
Protocol Support
Key Exchange
Cipher Strength
Visit our documentation page
for more information, configuration guides, and books. Known issues are documented
here.
Server sent invalid/disabled HSTS policy. See below for further information. MORE INFO »
This server does not support TLS 1.3. MORE INFO »
Certificate #1: RSA 2048 bits (SHA256withRSA)

Server Key and Certificate #1
|
|
Subject |
gscreenqa.secureexchange.net
Fingerprint SHA256: 5df4dfe90f906a85b57f7eb8a377d471f6e057e875721f9982371cc6c719b04f Pin SHA256: SC7wfVe1y2DWQY8fXv7CfgCt1mLOjywTR1LmQjS0RDc= |
Common names | gscreenqa.secureexchange.net |
Alternative names | gscreenqa.secureexchange.net |
Serial Number | 73b2186f3c9520ef522403ae727c40d6 |
Valid from | Wed, 18 Sep 2024 13:17:04 UTC |
Valid until | Sat, 18 Oct 2025 13:17:03 UTC (expires in 16 days, 22 hours) |
Key | RSA 2048 bits (e 65537) |
Weak key (Debian) | No |
Issuer | Entrust Certification Authority - L1K
AIA: http://aia.entrust.net/l1k-chain256.cer |
Signature algorithm | SHA256withRSA |
Extended Validation | No |
Certificate Transparency | Yes (certificate) |
OCSP Must Staple | No |
Revocation information |
CRL, OCSP CRL: http://crl.entrust.net/level1k.crl OCSP: http://ocsp.entrust.net |
Revocation status | Good (not revoked) |
DNS CAA | No (more info) |
Trusted | Yes
Mozilla Apple Android Java Windows |


![]() ![]() |
Configuration

Protocols | |
TLS 1.3 | No |
TLS 1.2 | Yes |
TLS 1.1 | No |
TLS 1.0 | No |
SSL 3 | No |
SSL 2 | No |

Cipher Suites | ||
![]() ![]() # TLS 1.2 (suites in server-preferred order)
|
||
TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (0xc02f )
ECDH x25519 (eq. 3072 bits RSA) FS
|
128 | |
TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (0xc030 )
ECDH x25519 (eq. 3072 bits RSA) FS
|
256 | |
TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (0xcca8 )
ECDH x25519 (eq. 3072 bits RSA) FS
|
256 | |
TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 (0xc027 )
ECDH x25519 (eq. 3072 bits RSA) FS
WEAK
|
128 | |
TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 (0xc028 )
ECDH x25519 (eq. 3072 bits RSA) FS
WEAK
|
256 |

Handshake Simulation | |||
Android 4.4.2 | RSA 2048 (SHA256) | TLS 1.2 | TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 ECDH secp256r1 FS |
Android 5.0.0 | RSA 2048 (SHA256) | TLS 1.2 | TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 ECDH secp256r1 FS |
Android 6.0 | RSA 2048 (SHA256) | TLS 1.2 > http/1.1 | TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 ECDH secp256r1 FS |
Android 7.0 | RSA 2048 (SHA256) | TLS 1.2 > h2 | TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 ECDH x25519 FS |
Android 8.0 | RSA 2048 (SHA256) | TLS 1.2 > h2 | TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 ECDH x25519 FS |
Android 8.1 | RSA 2048 (SHA256) | TLS 1.2 > h2 | TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 ECDH x25519 FS |
Android 9.0 | RSA 2048 (SHA256) | TLS 1.2 > h2 | TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 ECDH x25519 FS |
BingPreview Jan 2015 | RSA 2048 (SHA256) | TLS 1.2 | TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 ECDH secp256r1 FS |
Chrome 49 / XP SP3 | RSA 2048 (SHA256) | TLS 1.2 > h2 | TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 ECDH secp256r1 FS |
Chrome 69 / Win 7 R | RSA 2048 (SHA256) | TLS 1.2 > h2 | TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 ECDH x25519 FS |
Chrome 70 / Win 10 | RSA 2048 (SHA256) | TLS 1.2 > h2 | TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 ECDH x25519 FS |
Chrome 80 / Win 10 R | RSA 2048 (SHA256) | TLS 1.2 > h2 | TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 ECDH x25519 FS |
Firefox 31.3.0 ESR / Win 7 | RSA 2048 (SHA256) | TLS 1.2 | TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 ECDH secp256r1 FS |
Firefox 47 / Win 7 R | RSA 2048 (SHA256) | TLS 1.2 > h2 | TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 ECDH secp256r1 FS |
Firefox 49 / XP SP3 | RSA 2048 (SHA256) | TLS 1.2 > h2 | TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 ECDH secp256r1 FS |
Firefox 62 / Win 7 R | RSA 2048 (SHA256) | TLS 1.2 > h2 | TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 ECDH x25519 FS |
Firefox 73 / Win 10 R | RSA 2048 (SHA256) | TLS 1.2 > h2 | TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 ECDH x25519 FS |
Googlebot Feb 2018 | RSA 2048 (SHA256) | TLS 1.2 | TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 ECDH x25519 FS |
IE 11 / Win 7 R | RSA 2048 (SHA256) | TLS 1.2 | TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 ECDH secp256r1 FS |
IE 11 / Win 8.1 R | RSA 2048 (SHA256) | TLS 1.2 > http/1.1 | TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 ECDH secp256r1 FS |
IE 11 / Win Phone 8.1 R | RSA 2048 (SHA256) | TLS 1.2 > http/1.1 | TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 ECDH secp256r1 FS |
IE 11 / Win Phone 8.1 Update R | RSA 2048 (SHA256) | TLS 1.2 > http/1.1 | TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 ECDH secp256r1 FS |
IE 11 / Win 10 R | RSA 2048 (SHA256) | TLS 1.2 > h2 | TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 ECDH secp256r1 FS |
Edge 15 / Win 10 R | RSA 2048 (SHA256) | TLS 1.2 > h2 | TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 ECDH x25519 FS |
Edge 16 / Win 10 R | RSA 2048 (SHA256) | TLS 1.2 > h2 | TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 ECDH x25519 FS |
Edge 18 / Win 10 R | RSA 2048 (SHA256) | TLS 1.2 > h2 | TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 ECDH x25519 FS |
Edge 13 / Win Phone 10 R | RSA 2048 (SHA256) | TLS 1.2 > h2 | TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 ECDH secp256r1 FS |
Java 8u161 | RSA 2048 (SHA256) | TLS 1.2 | TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 ECDH secp256r1 FS |
Java 11.0.3 | RSA 2048 (SHA256) | TLS 1.2 | TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 ECDH secp256r1 FS |
Java 12.0.1 | RSA 2048 (SHA256) | TLS 1.2 | TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 ECDH secp256r1 FS |
OpenSSL 1.0.1l R | RSA 2048 (SHA256) | TLS 1.2 | TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 ECDH secp256r1 FS |
OpenSSL 1.0.2s R | RSA 2048 (SHA256) | TLS 1.2 | TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 ECDH secp256r1 FS |
OpenSSL 1.1.0k R | RSA 2048 (SHA256) | TLS 1.2 | TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 ECDH x25519 FS |
OpenSSL 1.1.1c R | RSA 2048 (SHA256) | TLS 1.2 | TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 ECDH x25519 FS |
Safari 6 / iOS 6.0.1 | RSA 2048 (SHA256) | TLS 1.2 | TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 ECDH secp256r1 FS |
Safari 7 / iOS 7.1 R | RSA 2048 (SHA256) | TLS 1.2 | TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 ECDH secp256r1 FS |
Safari 7 / OS X 10.9 R | RSA 2048 (SHA256) | TLS 1.2 | TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 ECDH secp256r1 FS |
Safari 8 / iOS 8.4 R | RSA 2048 (SHA256) | TLS 1.2 | TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 ECDH secp256r1 FS |
Safari 8 / OS X 10.10 R | RSA 2048 (SHA256) | TLS 1.2 | TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 ECDH secp256r1 FS |
Safari 9 / iOS 9 R | RSA 2048 (SHA256) | TLS 1.2 > h2 | TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 ECDH secp256r1 FS |
Safari 9 / OS X 10.11 R | RSA 2048 (SHA256) | TLS 1.2 > h2 | TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 ECDH secp256r1 FS |
Safari 10 / iOS 10 R | RSA 2048 (SHA256) | TLS 1.2 > h2 | TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 ECDH secp256r1 FS |
Safari 10 / OS X 10.12 R | RSA 2048 (SHA256) | TLS 1.2 > h2 | TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 ECDH secp256r1 FS |
Safari 12.1.2 / MacOS 10.14.6 Beta R | RSA 2048 (SHA256) | TLS 1.2 > h2 | TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 ECDH x25519 FS |
Safari 12.1.1 / iOS 12.3.1 R | RSA 2048 (SHA256) | TLS 1.2 > h2 | TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 ECDH x25519 FS |
Apple ATS 9 / iOS 9 R | RSA 2048 (SHA256) | TLS 1.2 > h2 | TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 ECDH secp256r1 FS |
Yahoo Slurp Jan 2015 | RSA 2048 (SHA256) | TLS 1.2 | TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 ECDH secp256r1 FS |
YandexBot Jan 2015 | RSA 2048 (SHA256) | TLS 1.2 | TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 ECDH secp256r1 FS |
![]() ![]() # Not simulated clients (Protocol mismatch)
|
|||
Android 2.3.7 No SNI 2 |
Protocol mismatch (not simulated) |
||
Android 4.0.4 |
Protocol mismatch (not simulated) |
||
Android 4.1.1 |
Protocol mismatch (not simulated) |
||
Android 4.2.2 |
Protocol mismatch (not simulated) |
||
Android 4.3 |
Protocol mismatch (not simulated) |
||
Baidu Jan 2015 |
Protocol mismatch (not simulated) |
||
IE 6 / XP No FS 1 No SNI 2 |
Protocol mismatch (not simulated) |
||
IE 7 / Vista |
Protocol mismatch (not simulated) |
||
IE 8 / XP No FS 1 No SNI 2 |
Protocol mismatch (not simulated) |
||
IE 8-10 / Win 7 R |
Protocol mismatch (not simulated) |
||
IE 10 / Win Phone 8.0 |
Protocol mismatch (not simulated) |
||
Java 6u45 No SNI 2 |
Protocol mismatch (not simulated) |
||
Java 7u25 |
Protocol mismatch (not simulated) |
||
OpenSSL 0.9.8y |
Protocol mismatch (not simulated) |
||
Safari 5.1.9 / OS X 10.6.8 |
Protocol mismatch (not simulated) |
||
Safari 6.0.4 / OS X 10.8.4 R |
Protocol mismatch (not simulated) |
||
(1) Clients that do not support Forward Secrecy (FS) are excluded when determining support for it. | |||
(2) No support for virtual SSL hosting (SNI). Connects to the default site if the server uses SNI. | |||
(3) Only first connection attempt simulated. Browsers sometimes retry with a lower protocol version. | |||
(R) Denotes a reference browser or client, with which we expect better effective security. | |||
(All) We use defaults, but some platforms do not use their best protocols and features (e.g., Java 6 & 7, older IE). | |||
(All) Certificate trust is not checked in handshake simulation, we only perform TLS handshake. |

Protocol Details | |
Secure Renegotiation | Supported |
Secure Client-Initiated Renegotiation | No |
Insecure Client-Initiated Renegotiation | No |
BEAST attack | Mitigated server-side (more info) |
POODLE (SSLv3) | No, SSL 3 not supported (more info) |
POODLE (TLS) | No (more info) |
Zombie POODLE | No (more info)
TLS 1.2 : 0xc027
|
GOLDENDOODLE | No (more info)
TLS 1.2 : 0xc027
|
OpenSSL 0-Length | No (more info)
TLS 1.2 : 0xc027
|
Sleeping POODLE | No (more info)
TLS 1.2 : 0xc027
|
Downgrade attack prevention | Unknown (requires support for at least two protocols, excl. SSL2) |
SSL/TLS compression | No |
RC4 | No |
Heartbeat (extension) | No |
Heartbleed (vulnerability) | No (more info) |
Ticketbleed (vulnerability) | No (more info) |
OpenSSL CCS vuln. (CVE-2014-0224) | No (more info) |
OpenSSL Padding Oracle vuln. (CVE-2016-2107) |
No (more info) |
ROBOT (vulnerability) | No (more info) |
Forward Secrecy | Yes (with most browsers) ROBUST (more info) |
ALPN | Yes h2 http/1.1 |
NPN | Yes h2 http/1.1 |
Session resumption (caching) | No (IDs assigned but not accepted) |
Session resumption (tickets) | Yes |
OCSP stapling | No |
Strict Transport Security (HSTS) | Invalid
Server provided more than one HSTS header
max-age=31536000; includeSubDomains; preload |
HSTS Preloading | Not in: Chrome Edge Firefox IE |
Public Key Pinning (HPKP) | No (more info) |
Public Key Pinning Report-Only | No |
Public Key Pinning (Static) | No (more info) |
Long handshake intolerance | No |
TLS extension intolerance | No |
TLS version intolerance | No |
Incorrect SNI alerts | No |
Uses common DH primes | No, DHE suites not supported |
DH public server param (Ys) reuse | No, DHE suites not supported |
ECDH public server param reuse | No |
Supported Named Groups | x25519, secp256r1, x448, secp521r1, secp384r1 (server preferred order) |
SSL 2 handshake compatibility | No |

![]() ![]() |
1 https://gscreenqa.secureexchange.net/
(HTTP/1.1 302 Found)
| 1 | |
Server | nginx | |
Date | Wed, 01 Oct 2025 13:10:57 GMT | |
Content-Type | text/plain; charset=utf-8 | |
Content-Length | 5 | |
Connection | close | |
Location | https://gscreenqa.secureexchange.net/webclient/ | |
Strict-Transport-Security | max-age=31536000; includeSubDomains; preload | |
X-Content-Type-Options | nosniff | |
cache-control | no-cache, no-store, must-revalidate, max-age=0 | |
x-frame-options | SAMEORIGIN | |
Access-Control-Allow-Origin | * | |
Access-Control-Allow-Methods | GET, POST, OPTIONS | |
Access-Control-Allow-Headers | Origin, Content-Type, Accept, Authorization |
2 https://gscreenqa.secureexchange.net/webclient/
(HTTP/1.1 302 Found)
| 2 | |
Server | nginx | |
Date | Wed, 01 Oct 2025 13:10:58 GMT | |
Content-Length | 0 | |
Connection | close | |
Access-Control-Allow-Credentials | true | |
Access-Control-Allow-Origin | * | |
Cache-Control | no-cache | |
Cache-Control | no-store | |
Cache-Control | max-age=0 | |
Cache-Control | must-revalidate | |
Content-Security-Policy | object-src 'none'; script-src 'self' 'unsafe-eval' 'sha256-jN+fva5OYTf9RaRgNJfKMHWdq8nwlHHn5gA29418E7Y=' 'sha256-H14NTTTdT2gXazKUGa6qXXiJxGcngJIxPRxdlhxUcek=' 'sha256-ni7Hlu5zoI8Mqe8iXRg9v/P94Qowj8XEMWRnZnaHRo0=' 'sha256-qXXPsfuF+33uFy9CMt/8xtFYG+V4YEfwYy0oED+v5tk=' 'sha256-RMe4KGmIMS90n3lTzJrJYEkJBJMfxq0r6bQfaKbSgLY=' 'sha256-/8wPdzX9q0NNJXyA5lzsLojXFpkeaXVxhbfkUOQaWy8=' | |
Expires | Thu, 01 Jan 1970 00:00:00 GMT | |
Expires | 0 | |
Location | https://gscreenqa.secureexchange.net/webclient/oauth2/authorization/hc | |
Pragma | no-cache | |
Set-Cookie | session-server-lb=86b6c799cc5444e8; Path=/; HttpOnly; Secure; SameSite=Lax | |
Set-Cookie | JSESSIONID=node0imsu0ew2t7p51vy1p44j0xbs285397.node0; Path=/webclient; Secure; HttpOnly; Secure; SameSite=Lax | |
Strict-Transport-Security | max-age=31536000 ; includeSubDomains | |
X-Content-Type-Options | nosniff | |
X-Xss-Protection | 1; mode=block | |
Strict-Transport-Security | max-age=31536000; includeSubDomains; preload | |
X-Content-Type-Options | nosniff | |
cache-control | no-cache, no-store, must-revalidate, max-age=0 | |
x-frame-options | SAMEORIGIN | |
Access-Control-Allow-Origin | * | |
Access-Control-Allow-Methods | GET, POST, OPTIONS | |
Access-Control-Allow-Headers | Origin, Content-Type, Accept, Authorization |
3 https://gscreenqa.secureexchange.net/webclient/oauth2/authorization/hc
(HTTP/1.1 302 Found)
| 3 | |
Server | nginx | |
Date | Wed, 01 Oct 2025 13:10:58 GMT | |
Content-Length | 0 | |
Connection | close | |
Access-Control-Allow-Credentials | true | |
Access-Control-Allow-Origin | * | |
Cache-Control | no-cache | |
Cache-Control | no-store | |
Cache-Control | max-age=0 | |
Cache-Control | must-revalidate | |
Content-Security-Policy | object-src 'none'; script-src 'self' 'unsafe-eval' 'sha256-jN+fva5OYTf9RaRgNJfKMHWdq8nwlHHn5gA29418E7Y=' 'sha256-H14NTTTdT2gXazKUGa6qXXiJxGcngJIxPRxdlhxUcek=' 'sha256-ni7Hlu5zoI8Mqe8iXRg9v/P94Qowj8XEMWRnZnaHRo0=' 'sha256-qXXPsfuF+33uFy9CMt/8xtFYG+V4YEfwYy0oED+v5tk=' 'sha256-RMe4KGmIMS90n3lTzJrJYEkJBJMfxq0r6bQfaKbSgLY=' 'sha256-/8wPdzX9q0NNJXyA5lzsLojXFpkeaXVxhbfkUOQaWy8=' | |
Expires | 0 | |
Location | https://gscreenqa.secureexchange.net/oauth/a/hc/auth/oauth2/auth?response_type=code&client_id=hc-client&state=2RZofWlAxrytUZwl5c6VYHJ8xbcu-D9I05Li2NCxf3U%3D&redirect_uri=https://gscreenqa.secureexchange.net/webclient/login/oauth2/code/hc | |
Pragma | no-cache | |
Strict-Transport-Security | max-age=31536000 ; includeSubDomains | |
X-Content-Type-Options | nosniff | |
X-Xss-Protection | 1; mode=block | |
Strict-Transport-Security | max-age=31536000; includeSubDomains; preload | |
X-Content-Type-Options | nosniff | |
cache-control | no-cache, no-store, must-revalidate, max-age=0 | |
x-frame-options | SAMEORIGIN | |
Access-Control-Allow-Origin | * | |
Access-Control-Allow-Methods | GET, POST, OPTIONS | |
Access-Control-Allow-Headers | Origin, Content-Type, Accept, Authorization |
4 https://gscreenqa.secureexchange.net/oauth/a/hc/auth/oauth2/auth?response_type=code&client_id=hc-client&state=2RZofWlAxrytUZwl5c6VYHJ8xbcu-D9I05Li2NCxf3U%3D&redirect_uri=https://gscreenqa.secureexchange.net/webclient/login/oauth2/code/hc
(HTTP/1.1 303 See Other)
| 4 | |
Server | nginx | |
Date | Wed, 01 Oct 2025 13:10:58 GMT | |
Content-Length | 0 | |
Connection | close | |
Cache-Control | private, no-store, no-cache, max_age=0 | |
Location | https://gpcustomerdev.b2clogin.com/23496e72-a96a-4b19-b4c7-72a805160515/b2c_1a_reflection/oauth2/v2.0/authorize?response_type=code&client_id=9c140064-82cb-43ee-8487-91af6fbcd5dd&response_mode=form_post&scope=openid+email&redirect_uri=https%3A%2F%2Fgscreenqa%2Esecureexchange%2Enet%2Fosp%2Fa%2Fhc%2Fauth%2Foauth2%2Flandingpad&state=c3A9TUF%24fiZuYz1NbWhTUkV4RFluSkVOVkJqV1dNdFgwZ3haMk51UzNVNVRXeDROR05QWVZkRGIzSjJjR041WlZKdU5Bfn4mcmVkaXJlY3RfdXJpPWFIUjBjSE02THk5bmMyTnlaV1Z1Y1dFdWMyVmpkWEpsWlhoamFHRnVaMlV1Ym1WMEwyOXpjQzloTDJoakwyRjFkR2d2WVhCd0wyTnZiblJ5WVdOMFkyOXVkR2x1ZFdVL1lXTkJkWFJvUTJGeVpFbGtQVzlwWkdNdFkyOXVkSEpoWTNRdEpUSTBaR1ZtWVhWc2RDMWpZWEprSlRJMEptVjRhV1E5TUNabWIzSmpaVUYxZEdnOWJHOWpZV3dtYzJsa1BUQX4%7E&nonce=O9uCoE-o_YpGttECZpqZ-BnCEJdxrxJT7kDDQHQg9JM#_ | |
Pragma | no-cache | |
Referrer-Policy | strict-origin-when-cross-origin | |
Set-Cookie | x-oidp-oauth2-1759324258688-5frtnZjGStO6_xktLsxCgg=dY2@hPI1n3/Kt2hwwB3vsbul0Vc0ULIgzOzrWT6gT1VrJ3dlS3/Z6eUg2yDrMs2LUOnfhR97Sp4g5PJNZ1SJsRynalwFR0XJR7cw58NWsWyJwA1XW6e6gkgHp9TNJOl5Vd50fxDDDyjE3/J0Wn2MeHwfeeSH2YrUoGSdRD9TqkQ1uO@k7ysfU3sN3nxrhpcrrQolFclw1ovbPyjBSI1cgdY/9D44YQA3vSI9bolls@5UYNBW1k3ahB9qEUXh3oVg96QViGeBp2rOSZtlzXoREDbyq7K65ZKn1T6rHXCqA081ClVw21sp8MVGFnO3vmn16o0RSyG8JoQNDYNJBbiLDVsGB/GxejUuXgO8WUWDYbSYO0r477JcIBAUUjrjUeBDkA9pPmZMsEus7Yenrw3gFC0ySKzJEdI2DArQgX7MA@xjAjQ0uREHGpCL8IC3YVW6wDFHfKL38ue8ztV0W7opFqdfCe@A9hbwz1jLfByXWWEwR/Q5h8WBBHX4RY7XFavI; Path=/; Domain=gscreenqa.secureexchange.net; Secure; HttpOnly; SameSite=None | |
Set-Cookie | x-oidp-session59313a382c2d310=200-PRQSNSL9LAH8X+CZ/QUIF2YNIO35Z7CTTQODPOEB-A2B3F15C-E54A!1!E54A!120!127!mo9bXTFQSxdTSp/CiqFECXomuVIIy4X27rsUMJ5B1Ew~!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; Path=/; Domain=gscreenqa.secureexchange.net; Secure; HttpOnly; SameSite=None | |
Strict-Transport-Security | max-age=31536000; includeSubDomains; preload | |
X-Content-Type-Options | nosniff | |
cache-control | no-cache, no-store, must-revalidate, max-age=0 | |
x-frame-options | SAMEORIGIN | |
Access-Control-Allow-Origin | * | |
Access-Control-Allow-Methods | GET, POST, OPTIONS | |
Access-Control-Allow-Headers | Origin, Content-Type, Accept, Authorization |

Miscellaneous | |
Test date | Wed, 01 Oct 2025 13:10:47 UTC |
Test duration | 50.249 seconds |
HTTP status code | 303 |
HTTP forwarding | https://gpcustomerdev.b2clogin.com |
HTTP server signature | nginx |
Server hostname | 237.82.211.35.bc.googleusercontent.com |
SSL Report v2.4.1