lumc.nl Review

 N/A

HTTP/1.0 302 Moved Temporarily
Location: https://lumc.nl/
Server: BigIP
Connection: Keep-Alive
Content-Length: 0

HTTP/1.0 301 Moved Permanently
Location: https://www.lumc.nl/
Connection: Keep-Alive
Content-Length: 0

HTTP/1.1 200 OK
Date: Fri, 29 Aug 2025 00:52:01 GMT
Content-Type: text/html; charset=utf-8
Connection: close
Content-Encoding: gzip
Cache-Control: no-cache,no-store
Expires: -1
Pragma: no-cache
Set-Cookie: EPiStateMarker=true; path=/; secure
Set-Cookie: .AspNetCore.Session=CfDJ8DcW3aFG8VVLmUobrD9zWV3%2Bg%2BRl%2BLeeX8eLhB%2FAF%2F9eDXIk6Ws7GtpAZkU%2BBOg%2BMvy0RywClsrP%2FcwRMwBMyEr2vmnxcNYzHiq7A3pdF8PxfFO2a11chA6znuBhKnN4ChknYeEEbgcWze8p5PDrn6H5%2F56jBw8uboFeJQMj3RGA; path=/; secure; samesite=lax; httponly
Set-Cookie: ARRAffinity=a62682eee826b85150d4d7dd4330920e423dcd72852738834b80876ce34f8647;Path=/;HttpOnly;Secure;Domain=www.lumc.nl
Strict-Transport-Security: max-age=31536000; includeSubDomains
Request-Context: appId=cid-v1:1c97ea1d-ec04-4a7c-bea8-1ead0867ecac
Reporting-Endpoints: csp-endpoint="https://www.lumc.nl/api/reporting/", default="https://www.lumc.nl/api/reporting/"
Report-To: { "group": "csp-endpoint","max_age": 10886400,"endpoints": [{ "url": "https://www.lumc.nl/api/reporting/" }] }
Content-Security-Policy: default-src 'self' blob: federatie.lumc.nl topdesk.lumc.nl; script-src 'self' 'unsafe-eval' 'unsafe-inline' unpkg.com cdn.jsdelivr.net *.vo.msecnd.net *.vev.page *.vev.design *.cookiebot.com giftforms.nl fundfactory.nl *.visualwebsiteoptimizer.com app.vwo.com blob: *.lumc.nl *.ytimg.com *.gstatic.com *.hotjar.com dl.episerver.net *.google.com *.googletagmanager.com www.google-analytics.com *.mailplus.nl *.azure.com cdnjs.cloudflare.com code.jquery.com maxcdn.bootstrapcdn.com snap.licdn.com connect.facebook.net; style-src 'self' 'unsafe-inline' *.lumc.nl cdn.jsdelivr.net *.visualwebsiteoptimizer.com giftforms.nl app.vwo.com s3.amazonaws.com *.cloudflare.com *.googletagmanager.com tagmanager.google.com fonts.googleapis.com dl.episerver.net static.mailplus.nl; img-src 'self' *.ytimg.com blob: data: *.lumc.nl *.visualwebsiteoptimizer.com *.vev.design *.cookiebot.com giftforms.nl fundfactory.nl chart.googleapis.com wingify-assets.s3.amazonaws.com app.vwo.com *.gstatic.com *.hotjar.com www.google-analytics.com stats.g.doubleclick.net dl.episerver.net img.youtube.com www.googletagmanager.com www.google.nl *.cdninstagram.com www.facebook.com px.ads.linkedin.com; connect-src * ; font-src 'self' data: *.cloudflare.com *.gstatic.com dl.episerver.net cdn.jsdelivr.net; media-src 'self' *.vev.design; frame-src 'self' forms.office.com *.adobe.com *.cookiebot.com giftforms.nl *.mollie.com *.visualwebsiteoptimizer.com app.vwo.com www.googletagmanager.com www.google.com *.onlineafspraken.nl *.powerbi.com *.lumc.nl *.youtube.com *.youtube-nocookie.com *.hotjar.com td.doubleclick.net; frame-ancestors 'self' giftforms.nl *.mollie.com *.albinusnet.nl *.lumc.nl;  report-uri https://www.lumc.nl/api/reporting/;  report-to csp-endpoint;
X-Frame-Options: sameorigin
X-Content-Type-Options: nosniff
X-Permitted-Cross-Domain-Policies: none
Referrer-Policy: strict-origin-when-cross-origin
Cross-Origin-Embedder-Policy: unsafe-none
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-site
X-XSS-Protection: 1; mode=block
Permissions-Policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()
cf-cache-status: DYNAMIC
Server: cloudflare
CF-RAY: 9768102c788ffcca-NRT
alt-svc: h3=":443"; ma=86400