northwell.edu Review

 N/A

HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 08 Aug 2025 09:42:38 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 230
X-Content-Type-Options: nosniff
Location: https://northwell.edu/
Cache-Control: max-age=1209600
Expires: Fri, 22 Aug 2025 09:42:38 GMT
X-Request-ID: v-05a126ae-743c-11f0-966a-5bd4f96c3e1f
Age: 996595
Via: varnish
X-Cache: HIT
X-Cache-Hits: 32458
Connection: keep-alive

HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Tue, 19 Aug 2025 22:32:35 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 234
Connection: keep-alive
X-Content-Type-Options: nosniff
Location: https://www.northwell.edu/
Cache-Control: max-age=1209600
Expires: Fri, 22 Aug 2025 09:42:01 GMT
X-Request-ID: v-ef2aae0e-743b-11f0-9423-f3e77ec95e5f
Age: 996634
Via: varnish
X-Cache: HIT
X-Cache-Hits: 252222

HTTP/1.1 200 OK
Date: Tue, 19 Aug 2025 22:32:36 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: br
Cache-Control: public, max-age=2764800
x-drupal-dynamic-cache: MISS
content-language: en
x-content-type-options: nosniff
x-frame-options: ALLOW-FROM https://*.healthgrades.com
expires: Sat, 20 Sep 2025 22:32:36 GMT
last-modified: Tue, 12 Aug 2025 15:42:20 GMT
vary: Cookie,Accept-Encoding
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: *.facebook.net *.google-analytics.com *.marketo.com *.googletagmanager.com *.mookie1.com *.serving-sys.com *.marketo.net *.calltrk.com *.tiqcdn.com *.jwpcdn.com *.youtube.com s.ytimg.com *.facebook.com *.pinterest.com *.googleapis.com *.typekit.net *.northwell.edu *.limelight.com *.delvenetworks.com *.addtoany.com *.github.io *.aspnetcdn.com s.gravatar.com *.wp.com *.amazonaws.com *.googleadservices.com *.microsoft.com *.jquery.com *.html5media.info *.cloudfront.net *.jwpcdn.com *.newrelic.com *.nr-data.net tagmanager.google.com *.surveymonkey.com *.brightwhistle.com *.callrail.com *.healthwise.net *.merklesearch.com *.rkdms.com *.rawgit.com *.cloudflare.com ethn.io e.infogram.com *.gigya.com *.influencehealth.com *.bing.com *.visto1.net *.linkedin.com *.hotjar.com *.doubleclick.net *.creative-serving.com *.invocacdn.com *.invoca.net *.adsrvr.org *.acquia.com *.segment.com *.rdcdn.com *.msecnd.net *.mymarketingreports.com *.optimizely.com *.syllable.ai *.conveythis.com *.force.com *.salesforce.com *.salesforceliveagent.com *.sanzone.io api.dpx.northwell.io *.yimg.com *.yahoo.com tags.srv.stackadapt.com pagecdn.io *.alpixtrack.com *.basis.net *.tctm.co *.pixel.ad *.adobedtm.com *.112.2o7.net *.presage.io *.evgnet.com *.azure.com cloud.email.northwellhealth.com *.lassomarketing.io *.lhmos.com *.appspot.com ciqtracking.com *.google.com/recaptcha/ *.gstatic.com/recaptcha/ *.mapbox.com formativ--sllivechat.sandbox.my.site.com formativ--devint.sandbox.my.site.com formativ--devint2.sandbox.my.site.com formativ--sit.sandbox.my.site.com formativ--entuat.sandbox.my.site.com formativ.my.site.com *.salesforce-sites.com *.evergage.com *.icanbwell.com api-js.mixpanel.com bwell-prod-gda-static.s3.amazonaws.com cdn.inpwrd.net content.inpwrd.net cdn.hxplatform.pressganey.com kit.fontawesome.com www.gstatic.com cdn.localizejs.com global.localizecdn.com; object-src 'self' video.limelight.com assets.delvenetworks.com *.gigya.com; style-src 'self' 'unsafe-inline' rtp-static.marketo.com *.googleapis.com *.vm *.bootstrapcdn.com *.northwell.edu malihu.github.io static.addtoany.com s.gravatar.com code.jquery.com  *.cloudfront.net *.surveymonkey.com *.marketo.com *.rkdms.com tagmanager.google.com *.acquia.com *.syllable.ai *.force.com *.salesforce.com api.dpx.northwell.io *.yimg.com *.srv.stackadapt.com *.googletagmanager.com *.mapbox.com formativ--sllivechat.sandbox.my.site.com formativ--devint.sandbox.my.site.com formativ--devint2.sandbox.my.site.com formativ--sit.sandbox.my.site.com formativ--entuat.sandbox.my.site.com formativ.my.site.com *.salesforce-sites.com *.evergage.com *.icanbwell.com api-js.mixpanel.com bwell-prod-gda-static.s3.amazonaws.com fonts.cdnfonts.com cdn.hxplatform.pressganey.com *.fontawesome.com; img-src 'self' data: *.google-analytics.com *.g.doubleclick.net *.facebook.com *.google.com jwpltx.com api.nslijweb.com csi.gstatic.com *.googleapis.com maps.gstatic.com img.delvenetworks.com *.llnw.net *.northwell.edu northwellhealt.wpengine.com *.gravatar.com *.wp.com *.cloudfront.net *.amazonaws.com www.bugherd.com *.surveymonkey.com img.youtube.com *.googleadservices.com maps.googleapis.com *.mxptint.net dpm.demdex.net ad.yieldmanager.com ad.afy11.net d.agkn.com idsync.rlcdn.com *.bluekai.com *.openx.net *.rubiconproject.com *.adnxs.com sync.adaptv.advertising.com *.rkdms.com i.ytimg.com *.gigya.com *.bing.com *.googletagmanager.com *.doubleclick.net *.google.com *.gstatic.com *.tilehosting.com *.hotjar.com *.maptiler.com *.rdcdn.com https://rdcdn.com clickserv.pixel.ad *.syllablecdn.com *.syllable.ai *.conveythis.com *.force.com *.salesforce.com *.northwell.io api.dpx.northwell.io *.yimg.com *.googleusercontent.com *.marketo.com alpixtrack.com *.ipredictive.com *.bidr.io *.sitescout.com *.presage.io *.locationiq.com *.linkedin.com *.adsymptotic.com *.postrelease.com *.stackadapt.com *.optimizely.com sp.analytics.yahoo.com content.inpwrd.net *.icanbwell.com api-js.mixpanel.com bwell-prod-gda-static.s3.amazonaws.com us-east1-p-d-mato-001.cloudfunctions.net global.localizecdn.com; media-src 'self' blob: *.llnw.net *.delvenetworks.com *.llnw.com dam.northwell.edu; frame-src 'self' blob: cdn-akamai.mookie1.com tags.tiqcdn.com www.youtube.com www.youtube-nocookie.com static.addtoany.com *.doubleclick.net www.google.com *.understand.com *.marketo.com *.sli.do ethn.io e.infogram.com *.gigya.com w.soundcloud.com view.knowledgevision.com 8065684-gigya.northwell.edu intakeforms.sequencehealth.com mednews.hofstra.edu app.stitcher.com vars.hotjar.com *.googletagmanager.com www.facebook.com insight.adsrvr.org *.acquia.com *.segment.com *.optimizely.com *.force.com *.salesforce.com *.pledgeling.com *.adsrvr.org *.healthgrades.com *.podbean.com *.libsyn.com *.simplecast.com *.sitescout.com *.youvisit.com *.demdex.net content.inpwrd.net hxplatform.pressganey.com redcap.northwell.edu *.epichosted.com *.northwell.edu formativ--devint.sandbox.my.site.com formativ--devint2.sandbox.my.site.com formativ--sit.sandbox.my.site.com formativ--entuat.sandbox.my.site.com formativ.my.site.com app.myidev.northwell.edu app.myqa.northwell.edu app.my.northwell.edu rgaziet1dpxmynorthwell.azurewebsites.net rgazqet1dpxmynorthwell.azurewebsites.net rgazpet1dpxmynorthwell.azurewebsites.net; frame-ancestors 'self' *.northwell.edu app.optimizely.com; child-src 'self' blob:; font-src 'self' data: themes.googleusercontent.com fonts.gstatic.com *.bootstrapcdn.com www.bugherd.com static.hotjar.com api.dpx.northwell.io *.hotjar.com *.cloudfront.net *.icanbwell.com api-js.mixpanel.com bwell-prod-gda-static.s3.amazonaws.com hxplatform.pressganey.com *.northwell.edu ka-p.fontawesome.com; connect-src 'self' 'unsafe-inline' 309-lvl-470.mktoresp.com sjrtp4.marketo.com *.pusherapp.com *.pusher.com www.bugherd.com *.google-analytics.com *.northwell.edu content.healthwise.net *.cloudflare.com *.rkdms.com *.callrail.com *.serving-sys.com api.dpx.northwell.io *.gigya.com *.llnw.net *.hotjar.com wss://*.hotjar.com *.doubleclick.net *.hotjar.io www.facebook.com *.cloudfront.net *.acquia.com *.segment.com *.visualstudio.com *.bugsnag.com *.mktoresp.com *.nr-data.net *.optimizely.com *.syllable.ai *.locationiq.com *.conveythis.com *.force.com *.sanzone.io *.northwell.io *.yimg.com *.srv.stackadapt.com sentry.io *.reachnorthwell.com analytics.google.com *.facebook.net *.demdex.net cloud.email.northwellhealth.com *.taylorhealthcare.io *.googleapis.com *.invoca.net *.evergage.com *.bynder.cloud formativ--sllivechat.sandbox.my.site.com formativ--devint.sandbox.my.site.com formativ--devint2.sandbox.my.site.com formativ--devint.sandbox.my.salesforce-scrt.com formativ--devint2.sandbox.my.salesforce-scrt.com formativ--sit.sandbox.my.site.com formativ--sit.sandbox.my.salesforce-scrt.com formativ--entuat.sandbox.my.site.com formativ--entuat.sandbox.my.salesforce-scrt.com formativ.my.site.com formativ.my.salesforce-scrt.com *.salesforce-sites.com *.icanbwell.com api-js.mixpanel.com bwell-prod-gda-static.s3.amazonaws.com api-js.mixpanel.com *.unpkg.com cdn.hxplatform.pressganey.com gtm-test.northwell.edu gtm.northwell.edu ka-p.fontawesome.com global.localizecdn.com
x-xss-protection: 1; mode=block
strict-transport-security: max-age=31536000; includeSubDomains
referrer-policy: no-referrer-when-downgrade
x-drupal-cache: MISS
x-request-id: v-eeb82064-7792-11f0-a7c8-1335ec377a07
x-ah-environment: prod
via: varnish
x-cache: MISS
CF-Cache-Status: HIT
Age: 594658
Server: cloudflare
CF-RAY: 971d1b9a39b9ebfd-NRT
alt-svc: h3=":443"; ma=86400