HTTP Headers Analysis for https://client85.caremark.com

Detected Technologies from Headers

See all in URL Inspect 1

Akamai Active incidents

HTTP Security Headers

Status

Strict-Transport-Security

Missing

Not configured

Content-Security-Policy

Missing

Not configured Analyze

Content-Security-Policy-Report-Only

Basic

object-src; script-src; base-uri Analyze

X-Frame-Options

Good

SAMEORIGIN

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Missing

Not configured

Permissions-Policy

Present

interest-cohort=()

Recommendations

• Add Strict-Transport-Security header with max-age of at least 1 year
• Add Content-Security-Policy header to prevent XSS attacks
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)

Performance Headers

Connection

Performance

close

connection: close

Caching Headers

Cache-Control

Caching

no-cache="set-cookie, set-cookie2"

Expires

Caching

Thu, 01 Dec 1994 16:00:00 GMT

cache-control: no-cache="set-cookie, set-cookie2"
expires: Thu, 01 Dec 1994 16:00:00 GMT

Content Headers

Content-Language

Content

en-US

Content-Length

Content

6640

Content-Type

Content

text/html;charset=ISO-8859-1

content-language: en-US
content-length: 6640
content-type: text/html;charset=ISO-8859-1

Server Headers

X-Powered-By

Server

Servlet/3.1

x-powered-by: Servlet/3.1

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

Cookies

set-cookie: DINOISSESJ=0000XIe_mGhLN6guIUm0FhL-1nZ:1iu5nhbra; Path=/; Secure; HttpOnly;HttpOnly;Secure
_abck=24AE4D71E8EACBEB0722BA09866F3894~-1~YAAQ5sgwF+UX8PafAQAA5EOjLxBBevFjoVrt91+x2KcZYHw/eQ5EZS1bPFNGG4tf39tM3y7g5o//3CBvolRWBmcfnXjDPWA0ZY730lwwqr32Z0xoq6RKy/vtvyxy4kpNTe2YUifg8buXGTp/vxJx/8v06fDE1rahsyhiphOcYQzEkj9q3x0bQ1cnu0q4U0JklFp1c7iKA007vZ3pzBgSx57onT3gpxqLlBpvMOsskqnzWnGPqfDI/3AKbPwnhRqICym6WmBfywfBHpE7ASOpRtsaokXGzW43QoHpQMIZDCT/ZIxGGhnHFU4gIyLe8vovZZMyZD2cfP9dJylzBTCmRj2hDdEQiXBMx6uSGASALqfhe8T4AL9YLCGM8vcv5Oi6LP97oWlcqO3e9nFX+OKVW/GM1UhEKTHAUqcKkcn+/VeI0sveT368rswxN3c0cHJb09sWZkpV0A==~-1~-1~-1~-1~-1; Domain=.caremark.com; Path=/; Expires=Mon, 23 Aug 2027 17:20:24 GMT; Max-Age=31536000; Secure
bm_sz=38FC641249246A6D02635403F254AF2E~YAAQ5sgwF+YX8PafAQAA5EOjLwDcF+rAYZA7cgtkW8deEYVucIx30oHZ1T9ec6eSp6KhXqGRfBgLIC0t77GXFzbc5HypNZo9tLXO5GsTYmcbOpVPN+ijcwfV4OZ/3zUVS4JpIFPk1NWcrik9brvaxQf+9oaar+iCQQC0aWKMPMSACu8T1Rulx5pUp4h98vJT+KvEKG8DlrA3OZwgM/SmmgA8sk05c1acqUaLWaBk/Yl4PyDDa2EYTnIL7DW3nGNcYLetz7Juj06iX1DoaSfK7kw7TVH/J2Y5PrqD1aqvbhagKMlobsCxqq9/2lgP9w69VAtirB6t+UFqHccRWegD29xNrfQZcM20Bmxc8G1Ezg==~3491379~4600373; Domain=.caremark.com; Path=/; Expires=Sun, 23 Aug 2026 21:20:23 GMT; Max-Age=14399

Other Headers

Cross-Origin-Embedder-Policy-Report-Only

Other

require-corp

Date

Other

Sun, 23 Aug 2026 17:20:24 GMT

P3p

Other

CP='CAO ADMo DEVo OUR IND PHY ONL PUR FIN COM NAV STA HEA GOV'

X-Akamai-Transformed

Other

l - 0 -

X-Req

Other

23.48.200.230:725bb84f

cross-origin-embedder-policy-report-only: require-corp
date: Sun, 23 Aug 2026 17:20:24 GMT
p3p: CP='CAO ADMo DEVo OUR IND PHY ONL PUR FIN COM NAV STA HEA GOV'
x-akamai-transformed: l - 0 -
x-req: 23.48.200.230:725bb84f

Recommendations

Enable compression (gzip/brotli) to improve performance

Consider removing X-Powered-By header to hide server technology