cmhc-schl.gc.ca Review

 N/A

HTTP/1.1 301 Moved Permanently
Server: Microsoft-Azure-Application-Gateway/v2
Date: Tue, 26 Aug 2025 10:05:07 GMT
Content-Type: text/html
Content-Length: 195
Connection: keep-alive
Location: https://www.cmhc-schl.gc.ca/

HTTP/1.1 200 OK
Date: Tue, 26 Aug 2025 10:05:08 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 39111
Connection: keep-alive
Set-Cookie: ApplicationGatewayAffinityCORS=6c0b7b5d2a2a0940958b32e3d8a25403; Path=/; SameSite=None; Secure
Set-Cookie: ApplicationGatewayAffinity=6c0b7b5d2a2a0940958b32e3d8a25403; Path=/
Cache-Control: no-cache, no-store
Pragma: no-cache
Content-Encoding: gzip
Expires: -1
Vary: Accept-Encoding
Server: 
X-Frame-Options: SAMEORIGIN
Set-Cookie: shell#lang=en; path=/; secure
Set-Cookie: ASP.NET_SessionId=ocupcdrtthbongnaiql1pwuw; path=/; secure; HttpOnly; SameSite=Lax
Set-Cookie: shell#lang=en; path=/; secure
Set-Cookie: ASP.NET_SessionId=ocupcdrtthbongnaiql1pwuw; path=/; secure; HttpOnly; SameSite=Lax
Set-Cookie: SC_ANALYTICS_GLOBAL_COOKIE=6b47a9b0518441cbb2ebb83d064f20ec|False; expires=Fri, 24-Aug-2035 10:05:07 GMT; path=/; secure; HttpOnly
Set-Cookie: __RequestVerificationToken=iPGikksMNewtLp0u1h6nfoH6DtrVRVQAUy90W7yZ768A6XL22KzjltAtsolrGUM7LRnJExUazsA6-JcwujdbwJlTSmdpjJqnlOZWdGVMF-c1; path=/; secure; HttpOnly
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=31536000; includeSubDomains preload
X-Content-Type-Options: nosniff
Content-Security-Policy: img-src 'self' 'unsafe-inline'  https://*.cmhc-schl.gc.ca/ https://*.azureedge.net/ https://www.google.com https://*.linkedin.com https://*.facebook.com https://*.youtube.com https://*.reddit.com https://*.twitter.com https://*.google-analytics.com https://www.google.ca https://*.blob.core.windows.net/ https://cdn.cookielaw.org https://*.onetrust.com https://*.siteimproveanalytics.io https://www.googletagmanager.com https://t.co https://googleads.g.doubleclick.net https://*.googleadservices.com https://*.google.co.in https://*.curator.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.youtube.com https://*.googleadservices.com https://*.cmhc-schl.gc.ca/ https://*.facebook.net https://*.msecnd.net https://*.google-analytics.com https://*.googleadservices.com https://googleads.g.doubleclick.net https://*.azureedge.net/ https://*.cloud.coveo.com/ https://siteimproveanalytics.com/ https://*.redditstatic.com https://*.ads-twitter.com https://*.licdn.com https://*.hotjar.com/ https://*.googleapis.com https://*.cloudflare.com https://cdn.jsdelivr.net https://*.b2clogin.com https://www.googletagmanager.com/ https://*.linkedin.com/ https://*.twitter.com/ https://www.google.com https://ajax.googleapis.com/ https://www.gstatic.com https://cdn.cookielaw.org https://*.onetrust.com https://analytics-ca.clickdimensions.com https://*.cloudfront.net https://pixel.byspotify.com https://*.curator.io; style-src 'self' 'unsafe-inline' https://*.youtube.com https://*.cmhc-schl.gc.ca/ https://*.azureedge.net/ https://*.typekit.net https://*.cloud.coveo.com/ https://*.googleapis.com https://*.jquery.com https://use.typekit.net https://*.blob.core.windows.net/ https://cdn.cookielaw.org https://*.onetrust.com; font-src 'self' 'unsafe-inline' https://fonts.gstatic.com https://*.youtube.com https://*.cmhc-schl.gc.ca/ https://*.typekit.net https://*.azureedge.net/ https://*.cloud.coveo.com/ https://*.blob.core.windows.net/ https://cdn.cookielaw.org https://*.onetrust.com https://*.hotjar.com; upgrade-insecure-requests; block-all-mixed-content; object-src 'none';
CD: CD02-10
Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Bitness