Headers of http://platform.helloflex.com

HTTP/1.1 301 Moved Permanently
Date
Sat, 28 Feb 2026 09:35:22 GMT
Content-Type
text/html; charset=UTF-8
Transfer-Encoding
chunked
Connection
close
Set-Cookie
ApplicationGatewayAffinity=ab718a5823c8c652f2147bfa8c148f30; Path=/
Set-Cookie
.ASPXAUTH=; expires=Mon, 11-Oct-1999 22:00:00 GMT; path=/; secure; HttpOnly; SameSite=Lax
Set-Cookie
login-with-adfs=; domain=platform.helloflex.com; expires=Mon, 11-Oct-1999 22:00:00 GMT; path=/; secure; HttpOnly; SameSite=Lax
Set-Cookie
login-with-azuread=; domain=platform.helloflex.com; expires=Mon, 11-Oct-1999 22:00:00 GMT; path=/; secure; HttpOnly; SameSite=Lax
Cache-Control
private
Location
https://platform.helloflex.com/
Vary
Origin
Content-Security-Policy
default-src 'self'; frame-ancestors 'self' *.idcheck.io *.ariadnext.io; script-src 'self' 'unsafe-eval' https://nextwidgetlive.blob.core.windows.net www.google-analytics.com www.googletagmanager.com *.cloudflare.com static.cloudflareinsights.com cdn.mouseflow.com platform.helloflex.com www.google.com maps.google.com apis.google.com www.gstatic.com maps.googleapis.com www.googleapis.com www.dropbox.com cdn.jsdelivr.net *.tinymce.com *.tiny.cloud 'nonce-wgkFrSNCszCT' blob:; style-src 'report-sample' 'self' 'unsafe-inline' fonts.googleapis.com www.googletagmanager.com platform.helloflex.com *.tinymce.com *.tiny.cloud platform.helloflex.com; style-src-elem 'report-sample' 'self' 'unsafe-inline' fonts.googleapis.com www.googletagmanager.com platform.helloflex.com *.tinymce.com *.tiny.cloud platform.helloflex.com; img-src 'self' http://content.helloflex.com https://content.helloflex.com www.google.com.ua www.google.nl www.google.md www.google.com.eg www.google.com.br www.google.com.au www.google.co.za www.google.be https://fav.farm www.google.co.th www.google.co.uk www.google.ca www.google.com.tr fonts.gstatic.com content.helloflex.com tile.openstreetmap.org i.ytimg.com www.google-analytics.com www.googletagmanager.com www.gstatic.com maps.gstatic.com maps.googleapis.com *.tinymce.com *.tiny.cloud data: blob:; base-uri 'self'; object-src 'none'; form-action 'self' *.officeapps.live.com; connect-src 'self' content.helloflex.com https://next-controller-live.jollycliff-9361dfb8.westeurope.azurecontainerapps.io *.monitor.azure.com *.livediagnostics.monitor.azure.com *.applicationinsights.azure.com stats.g.doubleclick.net region1.analytics.google.com cloudflareinsights.com platform.helloflex.com analytics.google.com maps.googleapis.com www.google-analytics.com *.officeapps.live.com dc.services.visualstudio.com www.google.com.ua www.googletagmanager.com *.tinymce.com *.tiny.cloud blob: ; font-src 'self' fonts.gstatic.com *.tinymce.com *.tiny.cloud; frame-src 'self' *.officeapps.live.com td.doubleclick.net *.idcheck.io *.ariadnext.io api.office-integrator.eu www.google.com https://www.youtube.com www.googletagmanager.com www.deltascope.nl;
Access-Control-Allow-Origin
*
X-Content-Type-Options
nosniff
X-Xss-Protection
1; mode=block
X-Permitted-Cross-Domain-Policies
none
Referrer-Policy
strict-origin-when-cross-origin
Strict-Transport-Security
max-age=31536000; includeSubDomains
cf-cache-status
DYNAMIC
Server
cloudflare
CF-RAY
9d4eee726ce71c6b-EWR
HTTP/1.1 200 OK
Date
Sat, 28 Feb 2026 09:35:23 GMT
Content-Type
text/html; charset=utf-8
Transfer-Encoding
chunked
Connection
close
Set-Cookie
ApplicationGatewayAffinityCORS=cd5dccd7a188729875cfb55e48037aa7; Path=/; SameSite=None; Secure
Set-Cookie
ApplicationGatewayAffinity=cd5dccd7a188729875cfb55e48037aa7; Path=/
Set-Cookie
is-browser-supported=True; domain=platform.helloflex.com; expires=Sat, 07-Mar-2026 09:35:22 GMT; path=/; secure; HttpOnly; SameSite=Lax
Set-Cookie
.ASPXAUTH=; expires=Mon, 11-Oct-1999 22:00:00 GMT; path=/; secure; HttpOnly; SameSite=Lax
Set-Cookie
login-with-adfs=; domain=platform.helloflex.com; expires=Mon, 11-Oct-1999 22:00:00 GMT; path=/; secure; HttpOnly; SameSite=Lax
Set-Cookie
login-with-azuread=; domain=platform.helloflex.com; expires=Mon, 11-Oct-1999 22:00:00 GMT; path=/; secure; HttpOnly; SameSite=Lax
Set-Cookie
language=en; domain=platform.helloflex.com; expires=Fri, 31-Dec-9999 23:59:59 GMT; path=/; secure; SameSite=Lax
Set-Cookie
culture=nl-NL; domain=platform.helloflex.com; expires=Fri, 31-Dec-9999 23:59:59 GMT; path=/; secure; SameSite=Lax
Set-Cookie
f=NFOwitEgzadtZJEgz2uzo_RhFXkX7vzcsWNEfSrcdvqG1ER7Jo_rrBm8kFiWFFqBKvVKljSPsZTsoNShHuAOxZ6rcSHbCuRsffKay0I4tAI1; path=/; secure; HttpOnly
Cache-Control
private
vary
Origin,Accept-Encoding
content-security-policy
default-src 'self'; frame-ancestors 'self' *.idcheck.io *.ariadnext.io; script-src 'self' 'unsafe-eval' https://nextwidgetlive.blob.core.windows.net www.google-analytics.com www.googletagmanager.com *.cloudflare.com static.cloudflareinsights.com cdn.mouseflow.com platform.helloflex.com www.google.com maps.google.com apis.google.com www.gstatic.com maps.googleapis.com www.googleapis.com www.dropbox.com cdn.jsdelivr.net *.tinymce.com *.tiny.cloud 'nonce-UFvYRxvs45Rq' blob:; style-src 'report-sample' 'self' 'unsafe-inline' fonts.googleapis.com www.googletagmanager.com platform.helloflex.com *.tinymce.com *.tiny.cloud platform.helloflex.com; style-src-elem 'report-sample' 'self' 'unsafe-inline' fonts.googleapis.com www.googletagmanager.com platform.helloflex.com *.tinymce.com *.tiny.cloud platform.helloflex.com; img-src 'self' http://content.helloflex.com https://content.helloflex.com www.google.com.ua www.google.nl www.google.md www.google.com.eg www.google.com.br www.google.com.au www.google.co.za www.google.be https://fav.farm www.google.co.th www.google.co.uk www.google.ca www.google.com.tr fonts.gstatic.com content.helloflex.com tile.openstreetmap.org i.ytimg.com www.google-analytics.com www.googletagmanager.com www.gstatic.com maps.gstatic.com maps.googleapis.com *.tinymce.com *.tiny.cloud data: blob:; base-uri 'self'; object-src 'none'; form-action 'self' *.officeapps.live.com; connect-src 'self' content.helloflex.com https://next-controller-live.jollycliff-9361dfb8.westeurope.azurecontainerapps.io *.monitor.azure.com *.livediagnostics.monitor.azure.com *.applicationinsights.azure.com stats.g.doubleclick.net region1.analytics.google.com cloudflareinsights.com platform.helloflex.com analytics.google.com maps.googleapis.com www.google-analytics.com *.officeapps.live.com dc.services.visualstudio.com www.google.com.ua www.googletagmanager.com *.tinymce.com *.tiny.cloud blob: ; font-src 'self' fonts.gstatic.com *.tinymce.com *.tiny.cloud; frame-src 'self' *.officeapps.live.com td.doubleclick.net *.idcheck.io *.ariadnext.io api.office-integrator.eu www.google.com https://www.youtube.com www.googletagmanager.com www.deltascope.nl;
access-control-allow-origin
*
x-content-type-options
nosniff
x-xss-protection
1; mode=block
x-permitted-cross-domain-policies
none
referrer-policy
strict-origin-when-cross-origin
strict-transport-security
max-age=31536000; includeSubDomains
cf-cache-status
DYNAMIC
Server
cloudflare
CF-RAY
9d4eee75aedf7095-EWR