mycarecompass.org Review

 N/A

HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 14 Jul 2025 20:20:21 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://mycarecompass.org/
X-Cache: Redirect from cloudfront
Via: 1.1 9a4c760031a0dcc526cc9dcd0d0940ea.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: PHL50-C1
X-Amz-Cf-Id: f-ZM7xw5bgukahS2xk_cR4ELAXk_jfNc2Ut-YITsE0rc6qKZATj57A==

HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
Content-Length: 157
Connection: keep-alive
Location: https://mycarecompass.org/mychart/
Server: 
Referrer-Policy: same-origin
Referrer-Policy: strict-origin-when-cross-origin
Set-Cookie: MyChartPersistence=3292119050.47873.0000; path=/; httponly; secure
Set-Cookie: BIGipServerpool_prod_mychart=3292119050.47873.0000; path=/; Httponly; Secure; SameSite=none
Permissions-Policy: camera=(), fullscreen=(), geolocation=(self), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), sync-xhr=(self)
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Pics-Label: (PICS-1.1 "http://www.icra.org/pics/vocabularyv03/" l on "2010.05.31T16:34-0400" exp "2100.12.31T12:00-0400" r (n 0 s 0 v 0 l 0 oa 0 ob 0 oc 0 od 0 oe 0 of 0 og 0 oh 0 c 0))
X-ASPNETMVC-VERSION: 
Strict-Transport-Security: max-age=31536000
Date: Mon, 14 Jul 2025 20:20:21 GMT
X-Cache: Miss from cloudfront
Via: 1.1 8db0da5790a86a83533944290a7dab9a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: PHL50-C1
X-Amz-Cf-Id: ZREtmr7UvbFTnDrVT_X13OgnuIlJ_FF2UoDR0n-frC0gWAgDo2bGIg==

HTTP/1.1 302 Object moved
Content-Type: text/html
Content-Length: 144
Connection: keep-alive
Cache-Control: private
Location: ./Authentication/Login?
Server: 
Content-Security-Policy: default-src 'self';base-uri 'self';script-src 'self' 'unsafe-eval' 'unsafe-inline' https://*.geisinger.edu https://*.geisinger.org https://*.google.com https://*.googleapis.com https://*.gyantts.com https://*.jquery.com https://*.mycarecompass.org https://*.virtualearth.net https://ajax.microsoft.com https://mycarecompass.org https://twemoji.maxcdn.com https://unpkg.com https://www.gstatic.com;style-src 'self' 'unsafe-inline' https://*.geisinger.edu https://*.geisinger.org https://*.gyantts.com https://*.mycarecompass.org https://mycarecompass.org https://s3.amazonaws.com;frame-src 'self' epichttp: https://*.geisinger.edu https://*;img-src 'self' blob: data: https://*;media-src 'self' blob: https://*;frame-ancestors 'self' https://*.epic.com https://*.geisinger.edu https://*.geisinger.org https://*.mycarecompass.edu https://*.mycarecompass.org https://*.mygeisinger.org https://geisinger.org https://www.geisinger.org;connect-src 'self' https://*.amazonaws.com https://*.gyantts.com wss://web.production.gyantts.com wss://web2.dev.gyantts.com wss://web2.production.gyantts.com;worker-src 'self' blob:;child-src 'self' blob:;font-src 'self' https://*.gyantts.com https://s3.amazonaws.com;form-action 'self';upgrade-insecure-requests;
Content-Security-Policy-Report-Only: default-src 'self';base-uri 'self';script-src 'self' 'unsafe-eval' 'unsafe-inline' https://*.geisinger.edu https://*.geisinger.org https://*.google.com https://*.googleapis.com https://*.gyantts.com https://*.jquery.com https://*.mycarecompass.org https://*.virtualearth.net https://ajax.microsoft.com https://mycarecompass.org https://twemoji.maxcdn.com https://unpkg.com https://www.gstatic.com;style-src 'self' 'unsafe-inline' https://*.geisinger.edu https://*.geisinger.org https://*.gyantts.com https://*.mycarecompass.org https://mycarecompass.org https://s3.amazonaws.com;frame-src 'self' epichttp: https://*.geisinger.edu https://*;img-src 'self' blob: data: https://*;media-src 'self' blob: https://*;frame-ancestors 'self' https://*.epic.com https://*.geisinger.edu https://*.geisinger.org https://*.mycarecompass.edu https://*.mycarecompass.org https://*.mygeisinger.org https://geisinger.org https://www.geisinger.org;connect-src 'self' https://*.amazonaws.com https://*.gyantts.com wss://web.production.gyantts.com wss://web2.dev.gyantts.com wss://web2.production.gyantts.com;worker-src 'self' blob:;child-src 'self' blob:;font-src 'self' https://*.gyantts.com https://s3.amazonaws.com;form-action 'self';
Set-Cookie: ASPSESSIONIDCUTATADB=AHKFPAMCKEFABOLPELNHAFGM; secure; path=/; HttpOnly
Set-Cookie: MyChartPersistence=1547223050.47873.0000; path=/; httponly; secure
Set-Cookie: BIGipServerpool_prod_mychart=1547223050.47873.0000; path=/; Httponly; Secure; SameSite=none
Referrer-Policy: same-origin
Referrer-Policy: strict-origin-when-cross-origin
Permissions-Policy: camera=(), fullscreen=(), geolocation=(self), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), sync-xhr=(self)
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Pics-Label: (PICS-1.1 "http://www.icra.org/pics/vocabularyv03/" l on "2010.05.31T16:34-0400" exp "2100.12.31T12:00-0400" r (n 0 s 0 v 0 l 0 oa 0 ob 0 oc 0 od 0 oe 0 of 0 og 0 oh 0 c 0))
X-ASPNETMVC-VERSION: 
Strict-Transport-Security: max-age=31536000
Date: Mon, 14 Jul 2025 20:20:21 GMT
X-Cache: Miss from cloudfront
Via: 1.1 8db0da5790a86a83533944290a7dab9a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: PHL50-C1
X-Amz-Cf-Id: qq7dyUtHFGbxACeBC9dEaB5_auwWiqBK8U9vHQ-y8YDk0YgjuRJmVA==

HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: -1
Set-Cookie: MyChart_Session=12id41xd4hljpjtr3cjw0qqq; path=/; secure; HttpOnly
Set-Cookie: MyChart_Session=12id41xd4hljpjtr3cjw0qqq; path=/; secure; HttpOnly
Set-Cookie: __RequestVerificationToken_L215Y2hhcnQ1=J9j6DYwBnwpXA_36quiuo2AHwuKYX_DWDX49RXWNVPArY-Vf3xfommmKtfMsLLl_vbyDBL-yj9WaK-azk9X9HkNuVWc4490NLpL_NwAmtdM1; path=/; secure; HttpOnly
Set-Cookie: MyChartLocale=en-US; expires=Sun, 12-Oct-2025 20:20:22 GMT; path=/; secure; HttpOnly
Set-Cookie: MyChartPersistence=725205002.47873.0000; path=/; httponly; secure
Set-Cookie: BIGipServerpool_prod_mychart=725205002.47873.0000; path=/; Httponly; Secure; SameSite=none
Referrer-Policy: same-origin
Referrer-Policy: strict-origin-when-cross-origin
X-Frame-Options: SAMEORIGIN
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: default-src 'self';base-uri 'self';frame-ancestors 'self' https://*.epic.com https://*.geisinger.edu https://*.geisinger.org https://*.mycarecompass.edu https://*.mycarecompass.org https://*.mygeisinger.org https://geisinger.org https://www.geisinger.org;upgrade-insecure-requests;frame-src https://* 'self' epichttp: https://*.geisinger.edu;script-src https://mychart.mycarecompass.org 'self' 'unsafe-eval' 'unsafe-inline' https://*.geisinger.edu https://*.geisinger.org https://*.google.com https://*.googleapis.com https://*.gyantts.com https://*.jquery.com https://*.mycarecompass.org https://*.virtualearth.net https://ajax.microsoft.com https://mycarecompass.org https://twemoji.maxcdn.com https://unpkg.com https://www.gstatic.com;img-src https://* 'self' blob: data:;connect-src 'self' https://*.amazonaws.com https://*.gyantts.com wss://web.production.gyantts.com wss://web2.dev.gyantts.com wss://web2.production.gyantts.com;style-src https://mychart.mycarecompass.org 'self' 'unsafe-inline' https://*.geisinger.edu https://*.geisinger.org https://*.gyantts.com https://*.mycarecompass.org https://mycarecompass.org https://s3.amazonaws.com;worker-src 'self' blob:;child-src 'self' blob:;font-src 'self' https://*.gyantts.com https://s3.amazonaws.com;form-action 'self';media-src https://* 'self' blob:;
Content-Security-Policy-Report-Only: default-src 'self';base-uri 'self';frame-ancestors 'self' https://*.epic.com https://*.geisinger.edu https://*.geisinger.org https://*.mycarecompass.edu https://*.mycarecompass.org https://*.mygeisinger.org https://geisinger.org https://www.geisinger.org;frame-src https://* 'self' epichttp: https://*.geisinger.edu;script-src https://mychart.mycarecompass.org 'self' 'unsafe-eval' 'unsafe-inline' https://*.geisinger.edu https://*.geisinger.org https://*.google.com https://*.googleapis.com https://*.gyantts.com https://*.jquery.com https://*.mycarecompass.org https://*.virtualearth.net https://ajax.microsoft.com https://mycarecompass.org https://twemoji.maxcdn.com https://unpkg.com https://www.gstatic.com;img-src https://* 'self' blob: data:;connect-src 'self' https://*.amazonaws.com https://*.gyantts.com wss://web.production.gyantts.com wss://web2.dev.gyantts.com wss://web2.production.gyantts.com;style-src https://mychart.mycarecompass.org 'self' 'unsafe-inline' https://*.geisinger.edu https://*.geisinger.org https://*.gyantts.com https://*.mycarecompass.org https://mycarecompass.org https://s3.amazonaws.com;worker-src 'self' blob:;child-src 'self' blob:;font-src 'self' https://*.gyantts.com https://s3.amazonaws.com;form-action 'self';media-src https://* 'self' blob:;
Permissions-Policy: camera=(), fullscreen=(), geolocation=(self), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), sync-xhr=(self)
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Pics-Label: (PICS-1.1 "http://www.icra.org/pics/vocabularyv03/" l on "2010.05.31T16:34-0400" exp "2100.12.31T12:00-0400" r (n 0 s 0 v 0 l 0 oa 0 ob 0 oc 0 od 0 oe 0 of 0 og 0 oh 0 c 0))
SERVER: 
X-ASPNETMVC-VERSION: 
Strict-Transport-Security: max-age=31536000
Date: Mon, 14 Jul 2025 20:20:21 GMT
content-encoding: gzip
vary: accept-encoding
X-Cache: Miss from cloudfront
Via: 1.1 8db0da5790a86a83533944290a7dab9a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: PHL50-C1
X-Amz-Cf-Id: NI3c2HGlZeaTYkX2N-13jA5L3ApOzyJWY4t42pSmW5eslN7Svxxv-w==