HTTP Headers Analysis for https://i-qa2.cvs.com

Detected Technologies from Headers

See all in URL Inspect 2

Akamai

Envoy

HTTP Security Headers

Status

Strict-Transport-Security

Good

max-age=31536000 ; includeSubDomains

Content-Security-Policy

Missing

Not configured Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Good

SAMEORIGIN

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Consider adding 'preload' to HSTS for maximum security
• Add Content-Security-Policy header to prevent XSS attacks
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

close

connection: close

Caching Headers

Cache-Control

Caching

max-age=0, no-cache, no-store

Etag

Caching

"11fku95upv61r0"

Expires

Caching

Sun, 06 Sep 2026 05:48:37 GMT

Pragma

Caching

no-cache

cache-control: max-age=0, no-cache, no-store
etag: "11fku95upv61r0"
expires: Sun, 06 Sep 2026 05:48:37 GMT
pragma: no-cache

Content Headers

Content-Length

Content

2891

Content-Type

Content

text/html; charset=utf-8

content-length: 2891
content-type: text/html; charset=utf-8

Server Headers

No server headers found

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

Cookies

set-cookie: aat2=on; expires=Thu, 05-Nov-2026 05:48:37 GMT; path=/
aat4=off-p0; expires=Thu, 05-Nov-2026 05:48:37 GMT; path=/
lsapg=on; path=/
acct_kt=on; path=/
acct_lkup=on; path=/
adh_ps_pickup=on; expires=Sat, 05-Dec-2026 05:48:37 GMT; path=/
adh_ps_refill=off; path=/
ahct_delivery=on; path=/
acct_cgsb=on; path=/
acc_ca_login=on; path=/
gki=on; path=/
bfp=on; path=/
acct_mfm=off; path=/
acc_ca_newreg=on; path=/
acct_untieRx=on; path=/
bashlf=on; expires=Thu, 05-Nov-2026 05:48:37 GMT; path=/
bcchpredsn=on; expires=Thu, 05-Nov-2026 05:48:37 GMT; path=/
buynow=off; path=/
cdt_mv=on; path=/
acc_xid_cr=on; path=/
circular_print=off-p0; expires=Thu, 05-Nov-2026 05:48:37 GMT; path=/
cp_new_dash=off; path=/
sab_displayads=on; expires=Thu, 05-Nov-2026 05:48:37 GMT; path=/
dashboard_v1=off; path=/
disable-app-dynamics=on; path=/
dic_exp=off; path=/
dpp_cdc=on; path=/
dpp_drug_dir=on; path=/
dpp_sft=on; path=/
fs_blocks=off; path=/
ecfl=off; path=/
ecpe=p1; path=/
easy_xfer=on; path=/
footer_new_V1=on; path=/
gbp_api_v2=off; path=/
v3redirecton=false; path=/
ltyrbr=off; path=/
mc_cloud_service=off; path=/
mc_hl7=on; path=/
mc_videovisit=on; expires=Thu, 05-Nov-2026 05:48:37 GMT; path=/
mfep1=off; path=/
newauthflow=off; path=/
newPDP=off; path=/
ohexp=off; path=/
otchs_fs_ui=on; path=/
pivotal_forgot_password=off-p0; expires=Thu, 05-Nov-2026 05:48:37 GMT; path=/
psf_ds=on; path=/
psf_fds=on; path=/
psf_lds=on; path=/
pmexp=on; path=/
plpui=off; path=/
ps_i=on; path=/
rxdanshownba=off; path=/
rxdfixie=off; path=/
rxd_bnr=on; path=/
rxd_dot_bnr=on; path=/
rxdpromo=off; path=/
rxduan=on; path=/
rxm_demo_hide_LN=off; path=/
rxtiemm=off; path=/; domain=.cvs.com
rxtiesb=off; path=/
rxuntiesb=off; path=/
rx-pref-i90=on; path=/
ngs=on; path=/
RxStatusSummary=on
s2c_slimhd=on; expires=Thu, 05-Nov-2026 05:48:37 GMT; path=/
s2c_plp=off; path=/
switchExpAPI=on; path=/
sft_mfr_new=on; path=/
sftg=on; expires=Thu, 05-Nov-2026 05:48:37 GMT; path=/
show_exception_status=on; expires=Thu, 05-Nov-2026 05:48:37 GMT; path=/
sl_v2=off; path=/
slistview=on; expires=Thu, 05-Nov-2026 05:48:37 GMT; path=/
sub_cp_fmf=off; path=/
sub_cp_mmf=off; path=/
ssexp=on; path=/
usso=off; path=/
user_geo_loc=41.8858/-87.6229/CHICAGO/IL/; path=/
sso=off; path=/
druginfo_new=on; path=/
mcvc2=on; path=/; priority=high
uh=off; expires=Mon, 01-Jan-2024 23:59:59 GMT; path=/; priority=high
ngs=on; path=/; priority=high
mcpr=off; path=/; priority=high
imzfe=v1; path=/; priority=high
imzn=on; path=/; priority=high
gr=g1; expires=Sun, 25-Jun-2026 23:59:59 GMT; path=/; priority=high
gc=g1; expires=Sun, 25-Jun-2026 23:59:59 GMT; path=/; priority=high
rxp=off; path=/
gb=g2; expires=Sun, 25-Jun-2026 23:59:59 GMT; path=/; priority=high
ga=g2; expires=Sun, 25-Jun-2026 23:59:59 GMT; path=/; priority=high
ecpe=p1; path=/; priority=high; max-age=3000000
arfrsh=off; path=/; priority=high
bfp=on; path=/; priority=high; max-age=13140000
gki=on; path=/; priority=high; max-age=3000
hdnew=on; path=/; domain=.cvs.com; priority=high
hdnew=on; path=/; domain=.cvs.com; priority=high
fspe=p1; path=/; priority=high
aat3=on; expires=Sun, 25-Jun-2026 23:59:59 GMT; path=/; priority=high
aat1=on; expires=Sun, 25-Jun-2026 23:59:59 GMT; path=/; priority=high
kcpe=e; path=/; priority=high
rxe=i1; path=/; priority=high
agpe=gr; path=/; priority=high
mvpe=gr; path=/; priority=high
mcpe=gr; path=/; priority=high
mdpe=gr; path=/; priority=high
ccse=p1; path=/; priority=high
pe=p1; path=/; domain=.cvs.com; priority=high
acct_pe=p1; path=/; priority=high
_abck=7D854854EE89809F47ED61448E43D82E~-1~YAAQRMgwFySNETagAQAAkPRCdRCxexi9yxD9swHMw0U8+QNeOJYIrncox6CnpltxG0rwayECiSpWkeG2Hqg2X5REVSKYY1c7zetRrJrdk6G/T/SJYZU2dxKEQaeRtJuMb3U3RFuHcNywajuQcwVCkGmlP/FZ5njkYu/iAS1Sx7v9/CnHJaDNoO3MGUhk5g18Y9zUgqxbUDPuWObz7u4DJUZUUUTZHaD29vYS8cQkXK8iO9QHeEwTVDZ50RFXLr0spJbkng9VJyU32RD/IRNAn5BXYoYjK0B+sb+tfj6J1S9f1FgJC5SIYGypUJoyXEpfItXwsp71pOF8NDwLk5HHrJI1nr4TeG3CXj/3SzmwLpOXc3I55+RseNctoHFgjIuX46CpOCnVnfr4dMlaU2Qf/u3shoZs9Cq845V9/hR8WIIDrmNlMeWSrF2S6dGsNGPIIvs=~-1~-1~-1~-1~-1; Domain=.cvs.com; Path=/; Expires=Mon, 06 Sep 2027 05:48:37 GMT; Max-Age=31536000; Secure
bm_sz=96F0B12212878871DA3D4A6C2BBD3404~YAAQRMgwFyWNETagAQAAkPRCdQFNeUaHVmO4QgxxwNJBtVuQsoaAbg6BZ7todEDLxwIyV1Fdpk8RT+aP3Z8RINNSfTgmS9YVDZfCbdyg/Vy+gYfM04eHneyn9qrUorJfMFxsyX7ShqzXwW7ZXZljozLJ2Etfmsp/o+tCa+LDvuAqBYMz6ED9uOZ5lcpJ7adS01TeJjX7RleNqlWZ6SYfUqSyV1eLSJ2qpkzjNveQ4453+r+6fBJbN5y7OJ8H2Q/IORNWQmIeh6LBDiyVHJnKWp7A7lzVgTy6hoBRXXDsgrx0TsHOh/2FK/G648/0eKvheQxHvdIMZxqRumjmz/6ID0j7A6eZkWXpWtk=~4277810~3290934; Domain=.cvs.com; Path=/; Expires=Sun, 06 Sep 2026 09:48:37 GMT; Max-Age=14400

Other Headers

Date

Other

Sun, 06 Sep 2026 05:48:37 GMT

X-Akamai-Transformed

Other

l - 0 -

X-Envoy-Upstream-Service-Time

Other

4

X-Permitted-Cross-Domain-Policies

Other

none

X-Req

Other

a=a;c=none;d=desktop;g=0.44c83017.1788673717.5e2ab680;h=www-qa2.cvs.com;i=23.48.200.68;l=use;t=ut;u=brw

date: Sun, 06 Sep 2026 05:48:37 GMT
x-akamai-transformed: l - 0 -
x-envoy-upstream-service-time: 4
x-permitted-cross-domain-policies: none
x-req: a=a;c=none;d=desktop;g=0.44c83017.1788673717.5e2ab680;h=www-qa2.cvs.com;i=23.48.200.68;l=use;t=ut;u=brw

Recommendations

Enable compression (gzip/brotli) to improve performance