HTTP Headers Analysis for https://pbmservices.caremark.com

HTTP Security Headers

Status

Strict-Transport-Security

Present

max-age=31104000 ; includeSubDomains

Content-Security-Policy

Missing

Not configured Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Missing

Not configured

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Increase HSTS max-age to at least 1 year and add includeSubDomains
• Add Content-Security-Policy header to prevent XSS attacks
• Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

close

connection: close

Caching Headers

Cache-Control

Caching

max-age=0, no-cache, no-store

Expires

Caching

Sun, 13 Sep 2026 05:03:58 GMT

Pragma

Caching

no-cache

cache-control: max-age=0, no-cache, no-store
expires: Sun, 13 Sep 2026 05:03:58 GMT
pragma: no-cache

Content Headers

Content-Length

Content

0

content-length: 0

Server Headers

No server headers found

CORS Headers

Access-Control-Allow-Credentials

Cors

true

Access-Control-Allow-Methods

Cors

Get,Post,Put,Head,Delete,Options

access-control-allow-credentials: true
access-control-allow-methods: Get,Post,Put,Head,Delete,Options

Cookies Headers

Set-Cookie

Cookies

set-cookie: os=off; path=/
_abck=B1CC5871C90A8ED300646E99E0FD4AC5~-1~YAAQWGrcF44DeZGgAQAA3JgmmRCuQMSuZ1KfgDKwKf2+TtEl/xqJC9+lQifxZ1vDkdgpkHIX1UdIjKyInpKFboDhHYD1pZU94hxB2iiRfE/4XSISBSYGmj3RHEHWvIzeiTfQl7w2ADEHdRlCMbK7WZDVfiqgK6o6RUlq/oKKVuptTPP2Oh8ad23Urd1mfht0FDD1ambKT84lR0WeV9+Weje3MPUMCG4RSBMqEpIVrfa8ZqqiU9djK3JiTLGTnsTsk5A3NBdDE3oXwQnsU2IArzTmXeTwQehouiiNQet4djRipnWriRyZ0i9CyzyvtTJStxNzkaN+2TAwPx7jRZ5ZN+ctmEcYJ27TkjIWfcfGz/77dYa3hSIElT8ouTZbQtx8bnmUzqNsfYJ39MC+mukUYksjiPv1MMqJIoCQAvnqbCTZI81CM9eM06DmoQ6mBDpl+VJ+Dv+LGA==~-1~-1~-1~-1~-1; Domain=.caremark.com; Path=/; Expires=Mon, 13 Sep 2027 05:03:58 GMT; Max-Age=31536000; Secure
bm_sz=4C86942C30B299012B7E5427356F48E4~YAAQWGrcF48DeZGgAQAA3JgmmQEuAQGLa3WqFvkfhjf//TjGgCYWXQvCnl12jgNRUC98lxFh7aznfcJ28QjXsKUemjLvU2xRhvq8kgxBY+hvLzsJpgcpw06uItsesYzyqOZcnSpZsHQTGO8b6XTeKA7LdonBp/aa0WvRdpMpC+2JXCt1iPAg93Huz1LIP8b+11OUHLUTvIYRQpWkDJ+sCv+Fc+J/oy2FsLFnmmXfTJRSzuyjR8EQOXzcJs/fjalU5zcoOXRBIXaqmNBBlqDUcSCtZFN0uDsNTROaMz7ngleJqTOLMyIfXxxKmtZuy8XyhCVU7kl6PsttvVUwwLcJrCZ1zKn+6Jb8R9GSRO50Wsg=~3293509~4277571; Domain=.caremark.com; Path=/; Expires=Sun, 13 Sep 2026 09:03:58 GMT; Max-Age=14400

Other Headers

Allow

Other

GET, POST, HEAD, OPTIONS

Date

Other

Sun, 13 Sep 2026 05:03:58 GMT

Server-Timing

Other

cdn-cache; desc=MISS, edge; dur=402, origin; dur=227, ak_p; desc="1789275837845_400321112_240199295_65076_19135_22_102_-";dur=1

X-Correlationid

Other

Id-be2ea66a5f9144f6dc71ca06 0

X-Req

Other

a=allow;c=none;d=desktop;g=0.586adc17.1789275838.e51267f;h=pbmservices.caremark.com;i=23.220.106.88;l=use;t=ut;u=browser

allow: GET, POST, HEAD, OPTIONS
date: Sun, 13 Sep 2026 05:03:58 GMT
server-timing: cdn-cache; desc=MISS, edge; dur=402, origin; dur=227, ak_p; desc="1789275837845_400321112_240199295_65076_19135_22_102_-";dur=1
x-correlationid: Id-be2ea66a5f9144f6dc71ca06 0
x-req: a=allow;c=none;d=desktop;g=0.586adc17.1789275838.e51267f;h=pbmservices.caremark.com;i=23.220.106.88;l=use;t=ut;u=browser

Recommendations

Enable compression (gzip/brotli) to improve performance