tmhs.org Review

 N/A

HTTP/1.0 302 Moved Temporarily
Location: https://tmhs.org/
Server: BigIP
Connection: Keep-Alive
Content-Length: 0

HTTP/1.0 301 Moved Permanently
Location: https://www.houstonmethodist.org
Strict-Transport-Security: max-age=31536000; includeSubdomains; preload
Server: BigIP
Connection: Keep-Alive
Content-Length: 0

HTTP/1.1 200 OK
Date: Sun, 24 Aug 2025 22:51:36 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 41653
Connection: keep-alive
Cache-Control: no-cache, no-store
Pragma: no-cache
Content-Encoding: gzip
Expires: -1
Vary: Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Referrer-Policy: strict-origin-when-cross-origin
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Content-Security-Policy: default-src 'self' *.houstonmethodist.org *.epichosted.com; connect-src 'self' ws: https: *.houstonmethodist.org *.epichosted.com *.blockitnow.com *.schemaapp.com *.mktoresp.com *.amazonaws.com *.ceros.com *.onetrust.com *.demdex.net *.druidplatform.com *.mktoutil.com *.google.com *.invoca.net *.invocacdn.com open.spotify.com edge.adobedc.net fonts.googleapis.com translate.googleapis.com fonts.gstatic.com maps.googleapis.com cdnjs.cloudflare.com cdn.cookielaw.org directline.botframework.com prod-druid-api.azurewebsites.net; object-src 'self' localist-images.azureedge.net; font-src 'self' data: *.houstonmethodist.org fonts.googleapis.com fonts.gstatic.com fonts.googleapis.com cdnjs.cloudflare.com maxst.icons8.com cdn.fontshare.com static.zip.co; frame-ancestors 'self' *.houstonmethodist.org *.houstonmethodistcareers.org *.epichosted.com *.blockitnow.com *.service-now.com; frame-src 'self' *.houstonmethodist.org *.houstonmethodistcareers.org *.epichosted.com *.blockitnow.com *.service-now.com *.ceros.com *.twitter.com *.issuu.com *.vimeo.com *.kaltura.com *.youtube.com *.youtube-nocookie.com snazzymaps.com open.spotify.com www.google.com www.facebook.com www.cervistech.com hmri.smugmug.com gateway.zscloud.net; img-src 'self' data: blob: *.houstonmethodist.org *.kyruus.com *.gstatic.com *.google.com *.googleapis.com *.vimeocdn.com *.invoca.net *.invocacdn.com *.ytimg.com *.elsevierpure.com cdn.honey.io cdn.cookielaw.org tracking.skyword.com localist-images.azureedge.net www.hraradiology.com le-cdn.hibuwebsites.com; media-src 'self' blob: *.houstonmethodist.org *.vimeo.com *.vimeocdn.com *.youtube.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.houstonmethodist.org *.epichosted.com *.adobedtm.com *.ceros.com *.invoca.net *.invocacdn.com cdn.jsdelivr.net cdnjs.cloudflare.com maps.googleapis.com ajax.googleapis.com cdn.cookielaw.org cdn.schemaapp.com munchkin.marketo.net connect.facebook.net platform.twitter.com tracking.skyword.com maps.googleapis.com www.google.com www.gstatic.com portal.gsight.net sc-static.net prod-druid-apc.azureedge.net surveycompass.binaryfountain.com surveycompass-tools.consumerism.pressganey.com; style-src 'self' 'unsafe-inline' *.houstonmethodist.org *.epichosted.com *.ceros.com cdn.honey.io www.gstatic.com ajax.googleapis.com fonts.googleapis.com cdnjs.cloudflare.com maxst.icons8.com prod-druid-apc.azureedge.net; report-uri https://csp-reporting.houstonmethodist.org/api/csp/violation/sitecore; upgrade-insecure-requests
Permissions-Policy: accelerometer=(), autoplay=*, bluetooth=(), camera=(), compute-pressure=(), cross-origin-isolated=(), display-capture=(), encrypted-media=*, fullscreen=*, geolocation=*, gyroscope=(), hid=(), idle-detection=(), local-fonts=(self), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), publickey-credentials-create=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), storage-access=*, usb=(), web-share=(), window-management=(), xr-spatial-tracking=()
Reporting-Endpoints: csp-reporter="https://csp-reporting.houstonmethodist.org/api/csp/violation/sitecore"
Set-Cookie: shell#lang=en; path=/; secure
Set-Cookie: ASP.NET_SessionId=jhxctkkwshgr0fmg14dplydq; path=/; secure; HttpOnly; SameSite=Lax
Set-Cookie: SC_ANALYTICS_GLOBAL_COOKIE=422dc98ff64a4bf882f469b9d9f5003e|False; expires=Wed, 22-Aug-2035 22:51:36 GMT; path=/; secure; HttpOnly
Set-Cookie: __RequestVerificationToken=UWnMt6-s0aY6KTTyrxvglWTOAu8tvv8RR_Eovfi9v5k1x3n3NbmkjNs4Dk_0Miqzu4iiOML9WqEI4FO_dtzbNCczoew1; path=/; secure; HttpOnly
host: Prod CD02