HTTP Headers Analysis for https://c.cvs.com

Detected Technologies from Headers

See all in URL Inspect 2

Akamai

Envoy

HTTP Security Headers

Status

Strict-Transport-Security

Good

max-age=31536000 ; includeSubDomains

Content-Security-Policy

Missing

Not configured Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Good

SAMEORIGIN

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Consider adding 'preload' to HSTS for maximum security
• Add Content-Security-Policy header to prevent XSS attacks
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

close

connection: close

Caching Headers

Cache-Control

Caching

max-age=0, no-cache, no-store

Etag

Caching

W/"681a557e-5d3"

Expires

Caching

Wed, 19 Aug 2026 11:52:43 GMT

Pragma

Caching

no-cache

cache-control: max-age=0, no-cache, no-store
etag: W/"681a557e-5d3"
expires: Wed, 19 Aug 2026 11:52:43 GMT
pragma: no-cache

Content Headers

Content-Length

Content

6280

Content-Type

Content

text/html

content-length: 6280
content-type: text/html

Server Headers

No server headers found

CORS Headers

Access-Control-Allow-Credentials

Cors

true

Access-Control-Allow-Methods

Cors

GET, POST, PUT, HEAD, DELETE, OPTIONS, PATCH

access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, HEAD, DELETE, OPTIONS, PATCH

Cookies Headers

Set-Cookie

Cookies

set-cookie: akavpau_www_cvs_com_general=1787140783~id=ce79b7d93565c0350783b984bbc621dc; Domain=www.cvs.com; Path=/; HttpOnly; Secure; SameSite=None
acct_pe=p1; path=/; priority=high
pe=p1; path=/; domain=.cvs.com; priority=high
ccse=p1; path=/; priority=high
mdpe=gr; path=/; priority=high
mcpe=gr; path=/; priority=high
mvpe=gr; path=/; priority=high
rxe=i1; path=/; priority=high
kcpe=e; path=/; priority=high
aat1=off-p0; expires=Fri, 14-Jul-2026 23:59:59 GMT; path=/; priority=high
fspe=p1; path=/; priority=high
hdnew=on; path=/; domain=.cvs.com; priority=high
newPDP=on; priority=high; path=/;
mca1=on; path=/; priority=high
_abck=C3CD66FDAF57D1A2FEA06EC0F731DE5B~-1~YAAQxsgwF9RrPvyfAQAAH9bdGRAQTdt/CPpTV1VQku/6lTAveSJ77470HOpcJbP8BIAUMMh2aqeMFuIrq5V07KNud8eOqYzYui+VJ7whh0pWC1XW4FUBEZKnq1e+HDAvpwyFuIZrNewPm/9DMLoOQdjTqAVeMWXCGAgovAeLaD55cAPFhYto527iWD3EWGeVxIRNT3eGOLtGy5npIPDBK0TVDl0XH2Z7r0ckrEdv1Sr2ENQXd3P2ORjld2dskGuh5yh45t8Il55m7Ai1FrbMsEZJ3YQ6tIh4UiPYEN9JV1h60iKySEZOMwMojYkhsKUdBsgzQaDAGKF7UiPIf6BEf9MN34yWVpMDDVwi0GIzB7mHZbugB23wFhxtlgmiWcdLxu+qdkqP5FIpd2HKIy9B5kx0Y+oq5udcPG389E3eAkAiJ9mMz2sTSL4gnMDIekrG3qE=~-1~-1~-1~-1~-1; Domain=.cvs.com; Path=/; Expires=Thu, 19 Aug 2027 11:52:43 GMT; Max-Age=31536000; Secure
bm_sz=16B725B3B26883538635EB4FEF0C4C37~YAAQxsgwF9VrPvyfAQAAH9bdGQCpOWScF0LVf3+dqXVOyiHLCJayg3ZM89OJoGcpv85JVpu/6XTVKz/iNCR9K6ZbDu/j+n/F8w/IFAGcq36WOYciPQdQ8ym1NTz5QPiln5LP/I5KXonFE8fnlj0Sv2Ha01/8UtvHgr4uyP9+0f+v4m4z0o2FBGpaMhgsmuADmph/qZ0aXo3wkXWkvaKAioxJQ40FkOMIYh/qzt4lUi11TOBeLI8auelEpRBl4f5XywjWptRyguDJYzR43N4ztKq8mU/S2EkzDAYTC9SkeqIXRG0Qm0V68yOub3EL2BwqYaQpN0uKRg3zOfke215I3do9awDHf4FOOQw=~4539458~3748408; Domain=.cvs.com; Path=/; Expires=Wed, 19 Aug 2026 15:52:43 GMT; Max-Age=14400

Other Headers

Allow

Other

GET, POST, PUT, HEAD, DELETE, OPTIONS, PATCH, GET, POST, PUT, HEAD, DELETE, OPTIONS, PATCH

Date

Other

Wed, 19 Aug 2026 11:52:43 GMT

Server-Timing

Other

origin; dur=17, edge; dur=12, cdn-cache; desc=MISS, ak_p; desc="1787140363638_389073094_2273080110_2854_18669_15_109_-";dur=1

X-Akamai-Transformed

Other

9l 1491 0 pmb=mRUM,1

X-Envoy-Upstream-Service-Time

Other

4

X-Req

Other

a=a;c=none;d=desktop;g=0.c6c83017.1787140363.877c732e;h=www.cvs.com;i=23.48.200.198;l=use;t=ut;u=brw

allow: GET, POST, PUT, HEAD, DELETE, OPTIONS, PATCH, GET, POST, PUT, HEAD, DELETE, OPTIONS, PATCH
date: Wed, 19 Aug 2026 11:52:43 GMT
server-timing: origin; dur=17, edge; dur=12, cdn-cache; desc=MISS, ak_p; desc="1787140363638_389073094_2273080110_2854_18669_15_109_-";dur=1
x-akamai-transformed: 9l 1491 0 pmb=mRUM,1
x-envoy-upstream-service-time: 4
x-req: a=a;c=none;d=desktop;g=0.c6c83017.1787140363.877c732e;h=www.cvs.com;i=23.48.200.198;l=use;t=ut;u=brw

Recommendations

Enable compression (gzip/brotli) to improve performance