HTTP Headers Analysis for https://myamerigroup.com

SSL Verification Bypassed

The server's SSL certificate could not be verified. The analysis was completed using insecure mode. Data may be less reliable.

Reason:

Unknown Certificate Authority - the server's certificate is not trusted

Open Cached · just now

17 Headers

HTTP Security Headers

Status

Strict-Transport-Security

Present

max-age=63072000; includeSubdomains;

Content-Security-Policy

Weak

frame-ancestors

X-Frame-Options

Good

SAMEORIGIN

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Increase HSTS max-age to at least 1 year and add includeSubDomains
• Significantly strengthen CSP directives
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

Performance Headers

2 headers

Connection

Performance

Transfer-Encoding

Performance

chunked

Caching Headers

4 headers

Cache-Control

Caching

public, max-age=0

Etag

Caching

"335d1-6413aef6d85ba-gzip"

Expires

Caching

Thu, 01 Jan 2026 20:25:02 GMT

Last-Modified

Caching

Wed, 15 Oct 2025 23:34:01 GMT

Content Headers

1 headers

Content-Type

Content

text/html;charset=utf-8

Server Headers

1 headers

Server

Apache

CORS Headers

0 headers

No CORS headers found

Cookies Headers

1 headers

Set-Cookie

bm_sz=F927FDD2826BCC4C576D2734A319D8F1~YAAQ2mjcF0UEYG6bAQAA1DU8ex6YiIYzbz/Bt7Cs/e3MYwfe791ZtzGscK6l2Oc0tW84ea0Py+VwHNRU/GMH9392AYvALaXGn/QYjfRoNSiH/XyQYo2skNylUqPplZYMDBtDw3SQNbStw6jdEQJH1Q+fm3DxcZztIXk6ihRccc0Ul/nZQVO+/8H1fPMadu55r3zt2P1F/svcOb3+CGJGZJSh2otq7b/jEwCB0F78o+BXUJI967+OmoPxQWYGWSgarw8Y1+iGto9o6gIbkA8O03vmSm4Z/r1KHNigw3LmecD683kY3hP948K9sEvgONuQmkauSqanj+M9DpQ7YZ+R9eq8FDd+263YRA0JUQ5huBGBiw==~3228486~4273731; Domain=.amerigroup.com; Path=/; Expires=Fri, 02 Jan 2026 00:25:02 GMT; Max-Age=14400