lommelleeft.be Review

 N/A

HTTP/1.1 308 Permanent Redirect
Date: Tue, 26 Aug 2025 20:35:07 GMT
Content-Type: text/html
Content-Length: 164
Connection: keep-alive
Location: https://lommelleeft.be

HTTP/1.1 302 Found
Date: Tue, 26 Aug 2025 20:35:09 GMT
Content-Length: 0
Connection: keep-alive
Location: https://www.lommelleeft.be/
Strict-Transport-Security: max-age=31536000; includeSubDomains

HTTP/1.1 302 Found
Date: Tue, 26 Aug 2025 20:35:10 GMT
Content-Length: 0
Connection: keep-alive
Location: https://www.visitlommel.be/activiteiten/detail/1714/bal-final-2025
Strict-Transport-Security: max-age=31536000; includeSubDomains

HTTP/1.1 200 OK
Date: Tue, 26 Aug 2025 20:35:11 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 49790
Connection: keep-alive
Cache-Control: no-cache, no-store
Pragma: no-cache
Set-Cookie: .AspNetCore.Antiforgery.qoo-dYBtBeg=CfDJ8P5U5HiLqiFBsh3eatrc2p1a-ko0l6IKNklZaCp9euujENJkiwuH6OWwZwoLf7QaR3J4G3IaE8J_dV3U9d-iP7AGL1kqAPiD6gwE5HjQ4C4RbH5OMmqp7YfMbqOBKN5ahkydXYwzc18AJSxvsNVr368; path=/; secure; samesite=strict; httponly
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Download-Options: noopen
Referrer-Policy: strict-origin-when-cross-origin
X-Permitted-Cross-Domain-Policies: none
Permissions-Policy: accelerometer=*, autoplay=*, camera=*, cross-origin-isolated=*, encrypted-media=*, fullscreen=*, geolocation=*, gyroscope=*, magnetometer=*, microphone=*, midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=*, screen-wake-lock=(), sync-xhr=*, usb=(),  xr-spatial-tracking=self, clipboard-read=*, clipboard-write=*
Content-Security-Policy: connect-src 'self' https://visitlommel.icordis.be geoserver.gis.cloud.mow.vlaanderen.be api.gipod.vlaanderen.be geo.api.vlaanderen.be *.toerismevlaanderen.be fonts.googleapis.com *.gstatic.com *.facebook.com *.facebook.net yastatic.net *.timeblockr.com *.api.timeblockr.cloud *.js.arcgis.com https://performance.typekit.net *.giveaday.be https://hcaptcha.com https://*.hcaptcha.com *.matomo.cloud https://geoserver.gis.cloud.mow.vlaanderen.be *.ecwid.com https://ecomm.events/register *.cloudfront.net https://testuwsite.icordis.be https://stats.lcp.be https://icons.icordis.be https://streetmapapi.icordis.be https://fonts.icordis.be; font-src 'self' https://visitlommel.icordis.be https://* data:; frame-src 'self' https://www.visitlommel.be https://visitlommel.icordis.be  https://www.openstreetmap.org https://umap.openstreetmap.fr *.youtube.com youtu.be www.youtube.com www.youtube-nocookie.com *.soundcloud.com *.vimeo.com *.facebook.com *.facebook.net *.gift2give.be *.issuu.com maps.geopunt.be *.maps.geopunt.be *.api.vlaanderen.be *.vlaanderen.be *.geopunt.be *.bizlocator.be *.spotto.be *.jobsolutions.be *.3p.eu *.timeblockr.com *.api.timeblockr.cloud *.arcg.is https://arcg.is *.maps.arcgis.com *.arcgis.com *.google.com cdn.lightwidget.com https://calendar.google.com https://accounts.google.com plugin.routeyou.com www3.sport.vlaanderen https://www.recycleapp.be *.route2school.be *.instagram.com https://hcaptcha.com https://*.hcaptcha.com https://indd.adobe.com https://docs.google.com https://www.fietsrouteplanner.org https://stats.lcp.be https://notfound-static.fwebservices.be; img-src 'self' https://visitlommel.icordis.be data: *.osm.be *.informatievlaanderen.be *.geopunt.be *.tile.openstreetmap.org https://geo.api.vlaanderen.be geoserver.gis.cloud.mow.vlaanderen.be api.gipod.vlaanderen.be *.tile.openstreetmap.fr *.toerismevlaanderen.be tile.osm.be fonts.googleapis.com *.gstatic.com *.ytimg.com *.google.com *.soundcloud.com *.vimeo.com *.vimeocdn.com https://scontent-iad3-1.xx.fbcdn.net *.fbsbx.com *.facebook.com *.facebook.net *.gift2give.be *.issuu.com *.jobsolutions.be yastatic.net *.3p.eu *.timeblockr.com *.api.timeblockr.cloud *.js.arcgis.com *.uitdatabank.be udb-media.imgix.net udb2-media.imgix.net images-prod-uitdatabank.imgix.net *.westtoer.be *.west-vlaanderen.be *.cdninstagram.com https://p.typekit.net *.routeyou.com *.cloudfront.net *.giveaday.be openfed.github.io *.instagram.com https://squizlabs.github.io testuwsite.icordis.be *.matomo.cloud https://geoserver.gis.cloud.mow.vlaanderen.be https://stats.lcp.be https://fonts.icordis.be https://icons.icordis.be https://streetmapapi.icordis.be; script-src 'self' https://visitlommel.icordis.be *.geopunt.be *.facebook.com *.facebook.net *.vlaanderen.be *.jobsolutions.be *.3p.eu 'unsafe-eval' *.timeblockr.com *.api.timeblockr.cloud *.arcg.is https://arcg.is *.maps.arcgis.com *.arcgis.com https://geo.api.vlaanderen.be cdn.lightwidget.com https://use.typekit.net *.giveaday.be openfed.github.io *.instagram.com https://hcaptcha.com https://*.hcaptcha.com https://squizlabs.github.io cdn.matomo.cloud *.matomo.cloud *.ecwid.com *.cloudfront.net https://ecomm.events/i.js https://stats.lcp.be https://fonts.icordis.be https://icons.icordis.be https://streetmapapi.icordis.be https://testuwsite.icordis.be https://lcpgem.icordis.be 'unsafe-inline'; worker-src 'self' https://visitlommel.icordis.be *.soundcloud.com *.api.timeblockr.cloud; frame-ancestors https://stats.lcp.be 'self' https://www.visitlommel.be; style-src 'self' 'unsafe-inline' https://visitlommel.icordis.be fonts.googleapis.com *.gstatic.com *.timeblockr.com *.api.timeblockr.cloud https://use.typekit.net https://p.typekit.net *.typekit.net *.giveaday.be *.googleapis.com https://kit-pro.fontawesome.com openfed.github.io https://hcaptcha.com https://*.hcaptcha.com https://squizlabs.github.io *.cloudfront.net https://fonts.icordis.be https://stats.lcp.be https://streetmapapi.icordis.be https://testuwsite.icordis.be https://icons.icordis.be; base-uri 'self'; object-src *.api.timeblockr.cloud 'self'; form-action *.custom-ecom.app https://mollie-pg.custom-ecom.app *.mollie.com 'self'; report-uri /report-csp-violation; report-to main-endpoint;
Reporting-Endpoints: main-endpoint="https://www.visitlommel.be/report-csp-to"