Open
Cached
·
just now
25
Headers
Detected Technologies from Headers
Adobe Target
PayPal
YouTube
Adobe Audience Manager
Adobe Dynamic Tag Management
Adobe Experience Cloud
Adobe Fonts (Typekit)
Adobe Helix RUM
Braintree
Font Awesome
Google Analytics
Google API JS Client
Google Conversion Tracking
Google DoubleClick
Google Fonts
Google reCAPTCHA
Google Search
Google Static File Front End
Google Tag Manager
jsDelivr
Microsoft Clarity
New Relic
PHP
Sentry
ShareThis
Vimeo
Google Cloud
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31557600
X-Frame-Options
Good
SAMEORIGIN
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
Performance Headers
Accept-Ranges
bytes
Connection
close
Transfer-Encoding
chunked
Vary
Accept-Encoding,Cookie
accept-ranges: bytes connection: close transfer-encoding: chunked vary: Accept-Encoding,Cookie
Caching Headers
Cache-Control
no-store, no-cache, must-revalidate, max-age=0
Expires
Fri, 08 Aug 2025 12:02:14 GMT
Pragma
no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0 expires: Fri, 08 Aug 2025 12:02:14 GMT pragma: no-cache
Content Headers
Content-Type
text/html; charset=UTF-8
content-type: text/html; charset=UTF-8
Server Headers
No server headers found
CORS Headers
No CORS headers found
Cookies Headers
Set-Cookie
PHPSESSID
9c26a27bfa51ea2ca37c185eafa8b8dc
9c26a27bfa51ea2ca37c185eafa8b8dc
path=/
domain=store.mayoclinic.com
SameSite=Lax
secure
HttpOnly
Max-Age=1h
expires=59m
X-Magento-Vary
8f4f79641cea85546e6c751300f4456c019dbf02dba0f923d69e47da55bf5e0b
8f4f79641cea85546e6c751300f4456c019dbf02dba0f923d69e47da55bf5e0b
path=/
SameSite=Lax
secure
HttpOnly
Max-Age=1h
expires=59m
Other Headers
Client-Geo-Country
US
Date
Sat, 08 Aug 2026 12:02:15 GMT
Traceresponse
00-18c9d2d3ce85b38912e4c181fb00261d-822e6fd0f8fa637a-01
X-Cache
MISS, MISS, MISS
X-Cache-Hits
0, 0, 0
X-Debug-Info
eyJyZXRyaWVzIjowfQ==
X-Esi
1
X-Is-Hipaa
1
X-Platform-Server
i-0c3936fb99b7275e1, i-0c3936fb99b7275e1
X-Served-By
cache-chi-kmdw8640028-CHI, cache-chi-kmdw8640028-CHI, cache-chi-kmdw8640022-CHI, cache-iad-kcgs7200140-IAD
X-Timer
S1786190534.342253,VS0,VE614
client-geo-country: US date: Sat, 08 Aug 2026 12:02:15 GMT traceresponse: 00-18c9d2d3ce85b38912e4c181fb00261d-822e6fd0f8fa637a-01 x-cache: MISS, MISS, MISS x-cache-hits: 0, 0, 0 x-debug-info: eyJyZXRyaWVzIjowfQ== x-esi: 1 x-is-hipaa: 1 x-platform-server: i-0c3936fb99b7275e1, i-0c3936fb99b7275e1 x-served-by: cache-chi-kmdw8640028-CHI, cache-chi-kmdw8640028-CHI, cache-chi-kmdw8640022-CHI, cache-iad-kcgs7200140-IAD x-timer: S1786190534.342253,VS0,VE614
Recommendations
Enable compression (gzip/brotli) to improve performance