HTTP Headers Analysis for https://mastercardconnect.com

HTTP Security Headers

Status

Strict-Transport-Security

Good

max-age=31536000; includeSubDomains

Content-Security-Policy

Missing

Not configured Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Good

SAMEORIGIN

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Consider adding 'preload' to HSTS for maximum security
• Add Content-Security-Policy header to prevent XSS attacks
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

close

Transfer-Encoding

Performance

chunked

Vary

Performance

Origin, Access-Control-Request-Method, Access-Control-Request-Headers

connection: close
transfer-encoding: chunked
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers

Caching Headers

Cache-Control

Caching

no-cache, no-store, max-age=0, must-revalidate

Expires

Caching

0

Pragma

Caching

no-cache

cache-control: no-cache, no-store, max-age=0, must-revalidate
expires: 0
pragma: no-cache

Content Headers

Content-Type

Content

application/json

content-type: application/json

Server Headers

No server headers found

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

Cookies

set-cookie: BIGipServermastercardconnect.com-https-pool=!1YdUNo48qPuVGqY/CRTDTjtva9/DBQrC/cIu6U5JxEGU2IrZwXxn2+A1c0WdT4ExNRkHd18TDUl+hxk=; path=/; Httponly; Secure
TS013b3cfc=01772feb4b6a1b1770c032f6dfed392d8c79c872ee12262f5c17df43f85de5f17a38c231397ef4fa3ff81aee2de4fe90f37c395d64; Path=/; Secure; HttpOnly
ILBSESSION=!o9OmIV/u6xD2kdbNM47aagVbqMYB5Lg8Y3PpiCz3H29xsDBPoyRqL6bsdRVnXmHqvA35cKlMYK8oIgg=; expires=Tue, 13-Oct-2026 10:25:17 GMT; path=/; Httponly; Secure

Other Headers

Date

Other

Tue, 13 Oct 2026 09:55:17 GMT

Traceresponse

Other

00-64c8a61a42e78369f542c6046333755b-241bc56b6355e60e-01

X-Dt-Tracestate

Other

5c24aa51-2c374e65@dt

X-Mc-Correlation-Id

Other

697920a1db42a897a4944c93b6db3f2d

X-Vcap-Request-Id

Other

4f8ffe03-5e54-4f88-7067-72dcf44a90f8

date: Tue, 13 Oct 2026 09:55:17 GMT
traceresponse: 00-64c8a61a42e78369f542c6046333755b-241bc56b6355e60e-01
x-dt-tracestate: 5c24aa51-2c374e65@dt
x-mc-correlation-id: 697920a1db42a897a4944c93b6db3f2d
x-vcap-request-id: 4f8ffe03-5e54-4f88-7067-72dcf44a90f8

Recommendations

Enable compression (gzip/brotli) to improve performance