HTTP Headers Analysis for https://mmlaccess.com

HTTP Security Headers

Status

Strict-Transport-Security

Present

max-age=15768000 ; includeSubDomains

Content-Security-Policy

Missing

Not configured Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Good

SAMEORIGIN

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Increase HSTS max-age to at least 1 year and add includeSubDomains
• Add Content-Security-Policy header to prevent XSS attacks
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

close

connection: close

Caching Headers

Cache-Control

Caching

max-age=0, no-cache, no-store

Expires

Caching

Thu, 06 Aug 2026 15:06:30 GMT

Pragma

Caching

no-cache

cache-control: max-age=0, no-cache, no-store
expires: Thu, 06 Aug 2026 15:06:30 GMT
pragma: no-cache

Content Headers

Content-Length

Content

0

content-length: 0

Server Headers

No server headers found

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

Cookies

set-cookie: .AspNetCore.OpenIdConnect.Nonce.CfDJ8E8LrZW37DFGtvwGw8FMtyLGCQxASOVmqiIubZLFhZJoftBccMpcvF8FyOp8VxShAvuJVjureTZkwV9GDz0Tuihr6r1LeyTNiULFc33yX_hKPCoiHMNe9erQvEM7Kt7GPdr5_luKoXM2S6VvDgdmvp1mZj7VVy_oyMKREn6By7wlXWvHq6tjiwh_iq4MrfMABkBBLjemTAyYElpxZHis-JrwrytvvFm_UpFHLU_oylhGqpNlozYBSxRTHSrPQ_HArl2ucKRpdPPYQMXgldjRWgE=N; expires=Thu, 06 Aug 2026 15:21:30 GMT; path=/signin-oidc-b2c; secure; samesite=none; httponly
.AspNetCore.Correlation.azureb2c.OrCpAD5k_vXY3RWzj8H4iNByKIxME_CEDd9li7Iq1yE=N; expires=Thu, 06 Aug 2026 15:21:30 GMT; path=/signin-oidc-b2c; secure; samesite=none; httponly
TS010eb645=0102ffcdb9406bcd724d883e77931b8067571574d0b058195c66cce85a03fe3ad4c424e4e0b412646166df1568af7bf1fcf41fa5b6; Path=/; Domain=.mmlaccess.com; Secure; HttpOnly
TS014e596b=0102ffcdb91499eb73186b39da1ed1baa04624bb71b058195c66cce85a03fe3ad4c424e4e0bf878d64d27e2a8397005756211ead308b71d499520799abb004a651d14cce84db07c90e3b6b667b504263fffec08aaa; path=/signin-oidc-b2c; HttpOnly; Secure

Other Headers

Date

Other

Thu, 06 Aug 2026 15:06:30 GMT

Location

Other

https://account.mayoclinic.org/account.mayoclinic.org/b2c_1a_mcl_signup_signin/oauth2/v2.0/authorize?client_id=aa020caf-f465-453a-bd5b-ab313a170ba9&redirect_uri=https%3A%2F%2Fic.mmlaccess.com%2Fsignin-oidc-b2c&response_type=id_token&scope=openid%20profile&response_mode=form_post&nonce=639216255904609644.ZTRlN2M3YTItZjRkMC00ZDI0LWEzMGQtMTJjODU0NTA3NzZiOTc1ZDE0MGQtYjg4Yi00ZDIwLWI1M2EtYTIwN2Q5Y2E1ZTE4&state=CfDJ8E8LrZW37DFGtvwGw8FMtyI79RWYVbsP1O9x5nRPX_o10lriwD9ddH-RQmH11-rOxChmfzp3XTc-5vU6Ex9d1UPz8Xv8DraYb-BW_Ay9WbmApZm4hdXLnJB-ijwoOJjusZoJuWHdKxoTkRjmPShgmaSj0s2fQ-OwvFTh6skTFmz6&x-client-SKU=ID_NETSTANDARD2_0&x-client-ver=5.6.0.0

date: Thu, 06 Aug 2026 15:06:30 GMT
location: https://account.mayoclinic.org/account.mayoclinic.org/b2c_1a_mcl_signup_signin/oauth2/v2.0/authorize?client_id=aa020caf-f465-453a-bd5b-ab313a170ba9&redirect_uri=https%3A%2F%2Fic.mmlaccess.com%2Fsignin-oidc-b2c&response_type=id_token&scope=openid%20profile&response_mode=form_post&nonce=639216255904609644.ZTRlN2M3YTItZjRkMC00ZDI0LWEzMGQtMTJjODU0NTA3NzZiOTc1ZDE0MGQtYjg4Yi00ZDIwLWI1M2EtYTIwN2Q5Y2E1ZTE4&state=CfDJ8E8LrZW37DFGtvwGw8FMtyI79RWYVbsP1O9x5nRPX_o10lriwD9ddH-RQmH11-rOxChmfzp3XTc-5vU6Ex9d1UPz8Xv8DraYb-BW_Ay9WbmApZm4hdXLnJB-ijwoOJjusZoJuWHdKxoTkRjmPShgmaSj0s2fQ-OwvFTh6skTFmz6&x-client-SKU=ID_NETSTANDARD2_0&x-client-ver=5.6.0.0

Recommendations

Enable compression (gzip/brotli) to improve performance