mycarecompass.org Review

 N/A

HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Fri, 16 May 2025 11:54:07 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://mycarecompass.org/
X-Cache: Redirect from cloudfront
Via: 1.1 3084f1c1c69db00ea38650e768b2b25c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: PHL51-P1
X-Amz-Cf-Id: QqN6uiHDQoPjBtwjGTfRoh01SrhB-wH5HaYmxSV220-otbnc51UdcQ==

HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
Content-Length: 157
Connection: keep-alive
Location: https://mycarecompass.org/mychart/
Server: 
Referrer-Policy: same-origin
Referrer-Policy: strict-origin-when-cross-origin
Set-Cookie: MyChartPersistence=1547223050.47873.0000; path=/; httponly; secure
Set-Cookie: BIGipServerpool_prod_mychart=1547223050.47873.0000; path=/; Httponly; Secure; SameSite=none
Permissions-Policy: camera=(), fullscreen=(), geolocation=(self), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), sync-xhr=(self)
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Pics-Label: (PICS-1.1 "http://www.icra.org/pics/vocabularyv03/" l on "2010.05.31T16:34-0400" exp "2100.12.31T12:00-0400" r (n 0 s 0 v 0 l 0 oa 0 ob 0 oc 0 od 0 oe 0 of 0 og 0 oh 0 c 0))
X-ASPNETMVC-VERSION: 
Strict-Transport-Security: max-age=31536000
Date: Fri, 16 May 2025 11:54:07 GMT
X-Cache: Miss from cloudfront
Via: 1.1 f300b5f0c0ff51593fb31953294424c0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: PHL51-P1
X-Amz-Cf-Id: JPSMTYTHELEIJKAdlwYkVQL05lXNm1jcL0INGfgabxYYe600TO9ZMQ==

HTTP/1.1 302 Object moved
Content-Type: text/html
Content-Length: 144
Connection: keep-alive
Cache-Control: private
Location: ./Authentication/Login?
Server: 
Content-Security-Policy: default-src 'self';base-uri 'self';script-src 'self' 'unsafe-eval' 'unsafe-inline' https://*.geisinger.edu https://*.geisinger.org https://*.google.com https://*.googleapis.com https://*.gyantts.com https://*.jquery.com https://*.mycarecompass.org https://*.virtualearth.net https://ajax.microsoft.com https://mycarecompass.org https://twemoji.maxcdn.com https://unpkg.com https://www.gstatic.com;style-src 'self' 'unsafe-inline' https://*.geisinger.edu https://*.geisinger.org https://*.gyantts.com https://*.mycarecompass.org https://mycarecompass.org https://s3.amazonaws.com;frame-src 'self' epichttp: https://*.geisinger.edu https://*;img-src 'self' blob: data: https://*;media-src 'self' blob: https://*;frame-ancestors 'self' https://*.epic.com https://*.geisinger.edu https://*.geisinger.org https://*.mycarecompass.edu https://*.mycarecompass.org https://*.mygeisinger.org https://geisinger.org https://www.geisinger.org;connect-src 'self' https://*.amazonaws.com https://*.gyantts.com wss://web.production.gyantts.com wss://web2.dev.gyantts.com wss://web2.production.gyantts.com;worker-src 'self' blob:;child-src 'self' blob:;font-src 'self' https://*.gyantts.com https://s3.amazonaws.com;form-action 'self';upgrade-insecure-requests;
Content-Security-Policy-Report-Only: default-src 'self';base-uri 'self';script-src 'self' 'unsafe-eval' 'unsafe-inline' https://*.geisinger.edu https://*.geisinger.org https://*.google.com https://*.googleapis.com https://*.gyantts.com https://*.jquery.com https://*.mycarecompass.org https://*.virtualearth.net https://ajax.microsoft.com https://mycarecompass.org https://twemoji.maxcdn.com https://unpkg.com https://www.gstatic.com;style-src 'self' 'unsafe-inline' https://*.geisinger.edu https://*.geisinger.org https://*.gyantts.com https://*.mycarecompass.org https://mycarecompass.org https://s3.amazonaws.com;frame-src 'self' epichttp: https://*.geisinger.edu https://*;img-src 'self' blob: data: https://*;media-src 'self' blob: https://*;frame-ancestors 'self' https://*.epic.com https://*.geisinger.edu https://*.geisinger.org https://*.mycarecompass.edu https://*.mycarecompass.org https://*.mygeisinger.org https://geisinger.org https://www.geisinger.org;connect-src 'self' https://*.amazonaws.com https://*.gyantts.com wss://web.production.gyantts.com wss://web2.dev.gyantts.com wss://web2.production.gyantts.com;worker-src 'self' blob:;child-src 'self' blob:;font-src 'self' https://*.gyantts.com https://s3.amazonaws.com;form-action 'self';
Set-Cookie: ASPSESSIONIDSEDDBQAC=IAPEHKHDKGAKPCLDOAGBGKBJ; secure; path=/; HttpOnly
Set-Cookie: MyChartPersistence=1983496202.47873.0000; path=/; httponly; secure
Set-Cookie: BIGipServerpool_prod_mychart=1983496202.47873.0000; path=/; Httponly; Secure; SameSite=none
Referrer-Policy: same-origin
Referrer-Policy: strict-origin-when-cross-origin
Permissions-Policy: camera=(), fullscreen=(), geolocation=(self), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), sync-xhr=(self)
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Pics-Label: (PICS-1.1 "http://www.icra.org/pics/vocabularyv03/" l on "2010.05.31T16:34-0400" exp "2100.12.31T12:00-0400" r (n 0 s 0 v 0 l 0 oa 0 ob 0 oc 0 od 0 oe 0 of 0 og 0 oh 0 c 0))
X-ASPNETMVC-VERSION: 
Strict-Transport-Security: max-age=31536000
Date: Fri, 16 May 2025 11:54:08 GMT
X-Cache: Miss from cloudfront
Via: 1.1 f300b5f0c0ff51593fb31953294424c0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: PHL51-P1
X-Amz-Cf-Id: nv8KBPxo6hGmrK3AxYGG3LT8SazUHxf3K8ajK9yVlvfJoi0Ir9TiXw==

HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: -1
Set-Cookie: MyChart_Session=anmynqz02ejm5zv3ccy2lsxt; path=/; secure; HttpOnly
Set-Cookie: MyChart_Session=anmynqz02ejm5zv3ccy2lsxt; path=/; secure; HttpOnly
Set-Cookie: __RequestVerificationToken_L215Y2hhcnQ1=VcWGUuQh0N-y7JDQsPh4fUgX3baXl80qj6gdPXk_MSpGzKhhlWAXt3n_gKaTUMoPosg_N4E1038CYTL9d9kVjDOLkOFzmR1zDZzXduXyrXE1; path=/; secure; HttpOnly
Set-Cookie: MyChartLocale=en-US; expires=Thu, 14-Aug-2025 11:54:08 GMT; path=/; secure; HttpOnly
Set-Cookie: MyChartPersistence=1983496202.47873.0000; path=/; httponly; secure
Set-Cookie: BIGipServerpool_prod_mychart=1983496202.47873.0000; path=/; Httponly; Secure; SameSite=none
Referrer-Policy: same-origin
Referrer-Policy: strict-origin-when-cross-origin
X-Frame-Options: SAMEORIGIN
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: default-src 'self';base-uri 'self';frame-ancestors 'self' https://*.epic.com https://*.geisinger.edu https://*.geisinger.org https://*.mycarecompass.edu https://*.mycarecompass.org https://*.mygeisinger.org https://geisinger.org https://www.geisinger.org;upgrade-insecure-requests;frame-src https://* 'self' epichttp: https://*.geisinger.edu;script-src https://mychart.mycarecompass.org 'self' 'unsafe-eval' 'unsafe-inline' https://*.geisinger.edu https://*.geisinger.org https://*.google.com https://*.googleapis.com https://*.gyantts.com https://*.jquery.com https://*.mycarecompass.org https://*.virtualearth.net https://ajax.microsoft.com https://mycarecompass.org https://twemoji.maxcdn.com https://unpkg.com https://www.gstatic.com;img-src https://* 'self' blob: data:;connect-src 'self' https://*.amazonaws.com https://*.gyantts.com wss://web.production.gyantts.com wss://web2.dev.gyantts.com wss://web2.production.gyantts.com;style-src https://mychart.mycarecompass.org 'self' 'unsafe-inline' https://*.geisinger.edu https://*.geisinger.org https://*.gyantts.com https://*.mycarecompass.org https://mycarecompass.org https://s3.amazonaws.com;worker-src 'self' blob:;child-src 'self' blob:;font-src 'self' https://*.gyantts.com https://s3.amazonaws.com;form-action 'self';media-src https://* 'self' blob:;
Content-Security-Policy-Report-Only: default-src 'self';base-uri 'self';frame-ancestors 'self' https://*.epic.com https://*.geisinger.edu https://*.geisinger.org https://*.mycarecompass.edu https://*.mycarecompass.org https://*.mygeisinger.org https://geisinger.org https://www.geisinger.org;frame-src https://* 'self' epichttp: https://*.geisinger.edu;script-src https://mychart.mycarecompass.org 'self' 'unsafe-eval' 'unsafe-inline' https://*.geisinger.edu https://*.geisinger.org https://*.google.com https://*.googleapis.com https://*.gyantts.com https://*.jquery.com https://*.mycarecompass.org https://*.virtualearth.net https://ajax.microsoft.com https://mycarecompass.org https://twemoji.maxcdn.com https://unpkg.com https://www.gstatic.com;img-src https://* 'self' blob: data:;connect-src 'self' https://*.amazonaws.com https://*.gyantts.com wss://web.production.gyantts.com wss://web2.dev.gyantts.com wss://web2.production.gyantts.com;style-src https://mychart.mycarecompass.org 'self' 'unsafe-inline' https://*.geisinger.edu https://*.geisinger.org https://*.gyantts.com https://*.mycarecompass.org https://mycarecompass.org https://s3.amazonaws.com;worker-src 'self' blob:;child-src 'self' blob:;font-src 'self' https://*.gyantts.com https://s3.amazonaws.com;form-action 'self';media-src https://* 'self' blob:;
Permissions-Policy: camera=(), fullscreen=(), geolocation=(self), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), sync-xhr=(self)
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Pics-Label: (PICS-1.1 "http://www.icra.org/pics/vocabularyv03/" l on "2010.05.31T16:34-0400" exp "2100.12.31T12:00-0400" r (n 0 s 0 v 0 l 0 oa 0 ob 0 oc 0 od 0 oe 0 of 0 og 0 oh 0 c 0))
SERVER: 
X-ASPNETMVC-VERSION: 
Strict-Transport-Security: max-age=31536000
Date: Fri, 16 May 2025 11:54:08 GMT
content-encoding: gzip
vary: accept-encoding
X-Cache: Miss from cloudfront
Via: 1.1 f300b5f0c0ff51593fb31953294424c0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: PHL51-P1
X-Amz-Cf-Id: qT2riHCZTbRxxHm98dpXUyDfvrJub8xyG8ME9GYoDafMp_UAEsK5TQ==