HTTP/2 302 server: CloudFront date: Tue, 30 Dec 2025 18:06:03 GMT content-length: 0 location: https://www.gene.com/spark x-cache: FunctionGeneratedResponse from cloudfront via: 1.1 db8e720c1e186c4a9d38db72ecaa0492.cloudfront.net (CloudFront) x-amz-cf-pop: BOM78-P2 x-amz-cf-id: jlqSpnyWGkZjCtPicfcnjHjZhmd_iln_Xwj3m2_BSa-QQQeOw0cfWw== referrer-policy: strict-origin-when-cross-origin vary: Origin HTTP/1.1 200 OK Date: Tue, 30 Dec 2025 18:06:03 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Content-Encoding: gzip CF-Ray: 9b637806ea3d8cf1-BLR CF-Cache-Status: MISS Cache-Control: no-cache, private Expires: Tue, 30 Dec 2025 19:06:03 GMT Last-Modified: Tue, 30 Dec 2025 18:06:03 GMT Strict-Transport-Security: max-age=86400; Vary: X-Language, Accept-Encoding Content-Security-Policy: object-src 'self'; report-uri https://ayba8dhs.uriports.com/reports/report; report-to default Content-Security-Policy-Report-Only: default-src 'self' *.roche.com *.roche.net *.gene.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.roche.com *.roche.net *.gene.com snap.licdn.com cdn.walkme.com apis.google.com tpc.googlesyndication.com api.html5media.info workdevapp.com cdn-js.net gdata.youtube.com twitter.com geolocation.onetrust.com api.flickr.com graph.facebook.com sharecdn.social9.com maps.googleapis.com use.typekit.com use.typekit.net munchkin.marketo.net img.en25.com w.likebtn.com cdn.mathjax.org sadmin.brightcove.com cdnjs.cloudflare.com releases.flowplayer.org script.crazyegg.com wi.likebtn.com pepperglobal.com analytics.twitter.com cdn.blueconic.net connect.facebook.net fullstory.com script.hotjar.com gnntch.blueconic.net rules.quantcount.com secure.quantserve.com static.hotjar.com www.youtube.com www.googletagmanager.com www.google-analytics.com google-analytics.com *.gstatic.com static.ads-twitter.com sjs.bizographics.com *.linkedin.com www.google.com w.soundcloud.com s.ytimg.com *.cloudflareaccess.com *.salesforceliveagent.com https://*.roche.com:8080 https://cdnjs.org https://service.force.com/* cdn.cookielaw.org static.cloudflareinsights.com googleads.g.doubleclick.net 7232514.collect.igodigital.com; style-src * 'self' 'unsafe-inline'; img-src * 'self' data:; font-src * 'self' data:; connect-src * 'self'; media-src * 'self' data:; object-src 'self'; child-src 'self' *.roche.com *.roche.net *.gene.com *.facebook.net qpcr.probefinder.com *.force.com *.hotjar.com www.facebook.com www.google.com www.googletagmanager.com www.youtube.com; frame-src 'self' *.roche.com *.roche.net *.gene.com www.youtube.com sites.google.com *.googleapis.com *.cloudfront.net *.facebook.net *.arcot.com live.sagepay.com player.vimeo.com tpc.googlesyndication.com players.brightcove.net qpcr.probefinder.com *.eloqua.com *.hotjar.com *.soundcloud.com *.facebook.com *.google.com *.googletagmanager.com *.youtube-nocookie.com *.youtube.com *.mendeley.com *.force.com https://cdn.walkme.com/*; worker-src 'self' *.roche.com *.roche.net *.gene.com; frame-ancestors 'self' *.roche.com *.roche.net *.gene.com datastudio.google.com sites.google.com content.bioclinicien.fr connect.facebook.net www.facebook.com s1691.t.eloqua.com *.cloudflareworkers.com; form-action 'self' *.roche.com *.roche.net *.gene.com content.bioclinicien.fr connect.facebook.net www.facebook.com s1691.t.eloqua.com; base-uri 'self' *.roche.com *.roche.net *.gene.com *.secure.roche.com Expect-Staple: max-age=86400; includeSubDomains Feature-Policy-Report-Only: geolocation 'none'; camera 'none'; fullscreen *; payment 'self' NEL: {"report_to":"default","max_age":86400,"include_subdomains":true,"failure_fraction": 0.01} Referrer-Policy: strict-origin-when-cross-origin Report-To: {"group":"default","max_age":86400,"endpoints":[{"url":"https://ayba8dhs.uriports.com/reports"}],"include_subdomains":true} X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block x-frame-options: SAMEORIGIN x-ua-compatible: IE=Edge,chrome=1 Set-Cookie: __cf_bm=veQz8EJIgixZxtcvEcDR1D2Swl3LoCkoYYQ8ujfykwk-1767117963-1.0.1.1-BsJCmxD6cWbI.0tqI67EazPc8sWJkWB_mKYqWCDLC4r.ZiRTFHjjuQuTmRWmdZJXWL2I6pcZ0HhRum11sKRonuXOrnIiWC2.HOITsMq8jXM; path=/; expires=Tue, 30-Dec-25 18:36:03 GMT; domain=.gene.com; HttpOnly; Secure; SameSite=None Set-Cookie: __cfruid=a3c315cb964e0b4b03463b4b62e2c1c2d317cc63-1767117963; path=/; domain=.gene.com; HttpOnly; Secure; SameSite=None Set-Cookie: _cfuvid=xGkjI5zR5lSh7Ypl5CNf0M4.WeW7Oy7skPFpkpUdfdM-1767117963850-0.0.1.1-604800000; path=/; domain=.gene.com; HttpOnly; Secure; SameSite=None Server: cloudflare