HTTP Headers Analysis for https://backend.mayocliniclabs.com

Detected Technologies from Headers

See all in URL Inspect 21

YouTube

Akamai

AppNexus (Xandr)

AzureFrontDoor

Cloudflare CDNJS

Oracle Eloqua

Google Fonts

Google Hosted Libraries

Google reCAPTCHA

Google Search

Google Static File Front End

jQuery

jQuery UI

jsDelivr

Microsoft Power BI

Siteimprove

Tealium

The Trade Desk

Visual Website Optimizer

Google Cloud

Microsoft Azure

HTTP Security Headers

Status

Strict-Transport-Security

Present

max-age=86400 ; includeSubDomains

Content-Security-Policy

Weak

base-uri; script-src-elem; connect-src; +4 more Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Good

sameorigin

X-Content-Type-Options

Missing

Not configured

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Increase HSTS max-age to at least 1 year and add includeSubDomains
• Significantly strengthen CSP directives
• Add X-Content-Type-Options: nosniff
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

close, Transfer-Encoding

Transfer-Encoding

Performance

chunked

connection: close, Transfer-Encoding
transfer-encoding: chunked

Caching Headers

Cache-Control

Caching

max-age=0, no-cache, no-store

Expires

Caching

Sat, 01 Aug 2026 20:07:05 GMT

Pragma

Caching

no-cache

cache-control: max-age=0, no-cache, no-store
expires: Sat, 01 Aug 2026 20:07:05 GMT
pragma: no-cache

Content Headers

Content-Type

Content

text/html; charset=UTF-8

content-type: text/html; charset=UTF-8

Server Headers

No server headers found

CORS Headers

Access-Control-Allow-Headers

Cors

*

Access-Control-Allow-Methods

Cors

GET

Access-Control-Allow-Origin

Cors

*

Access-Control-Max-Age

Cors

1000

access-control-allow-headers: *
access-control-allow-methods: GET
access-control-allow-origin: *
access-control-max-age: 1000

Cookies Headers

Set-Cookie

Cookies

set-cookie: TLS_SESSID=m90ljeno23sg2i7rbatrjf627b; path=/;SameSite=Lax; domain=backend.mayocliniclabs.com; HttpOnly
BIGipServermayocliniclabs_prod_pool=!K6rbYFLlGFizfgoH5FZSKwZWTjPvvDuhEQ5BQX4ATSaPfFyU7Spbod1gKe+kNm3Qn8jEFDJ+chk3toU=; path=/; Httponly; Secure
TS0155aa7c=0102ffcdb90cec9abfc3030debef9871cb5514f6c4311a2aaa7cd5be07e50bdda3b4d2181ca8c1f2c20da31b351aaf44cb22a2d95dd2d3d1ea11356da92115920ae4863e331f40c01aafe9c4a814950d09b5d46421; Path=/; Domain=.mayocliniclabs.com; Secure; HttpOnly

Other Headers

Date

Other

Sat, 01 Aug 2026 20:07:05 GMT

Server-Timing

Other

edge; dur=2, origin; dur=167, cdn-cache; desc=MISS, ak_p; desc="1785614825603_386075789_709251168_16971_7791_52_94_-";dur=1

X-Akamai-Transformed

Other

9 10873 0 pmb=mRUM,2

X-Ua-Compatible

Other

IE=EmulateIE7

date: Sat, 01 Aug 2026 20:07:05 GMT
server-timing: edge; dur=2, origin; dur=167, cdn-cache; desc=MISS, ak_p; desc="1785614825603_386075789_709251168_16971_7791_52_94_-";dur=1
x-akamai-transformed: 9 10873 0 pmb=mRUM,2
x-ua-compatible: IE=EmulateIE7

Recommendations

Enable compression (gzip/brotli) to improve performance