HTTP Headers Analysis for https://requestcenter.cvscaremark.com

Detected Technologies from Headers

See all in URL Inspect 12

Akamai

Bing

BootstrapCDN

Cloudflare

Cloudflare CDN

Font Awesome

Google DoubleClick

Google Tag Manager

jQuery

Qualtrics

Quantum Metric

YouTube

HTTP Security Headers

Status

Strict-Transport-Security

Good

max-age=31536000 ; includeSubDomains

Content-Security-Policy

Basic

default-src; script-src; frame-src Analyze

Content-Security-Policy-Report-Only

Basic

object-src; script-src; base-uri Analyze

X-Frame-Options

Good

SAMEORIGIN

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Missing

Not configured

Permissions-Policy

Present

interest-cohort=()

Recommendations

• Consider adding 'preload' to HSTS for maximum security
• Improve CSP by adding more specific directives and removing 'unsafe-inline'
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)

Performance Headers

Connection

Performance

close

connection: close

Caching Headers

Cache-Control

Caching

no-cache="set-cookie, set-cookie2"

Expires

Caching

Thu, 01 Dec 1994 16:00:00 GMT

cache-control: no-cache="set-cookie, set-cookie2"
expires: Thu, 01 Dec 1994 16:00:00 GMT

Content Headers

Content-Language

Content

en-US

Content-Length

Content

6515

Content-Type

Content

text/html;charset=ISO-8859-1

content-language: en-US
content-length: 6515
content-type: text/html;charset=ISO-8859-1

Server Headers

X-Powered-By

Server

Servlet/3.1

x-powered-by: Servlet/3.1

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

Cookies

set-cookie: DINOISSESJ=0000Bayl3lu9asv5tC8ipZBEjft:1iu5nqv0q; Path=/; Secure; HttpOnly;HttpOnly;Secure
_abck=338CBCAD69C267666BCB55241899E015~-1~YAAQi4nMF+f0UzagAQAAaV9AORCejZ7UstcHpsLGV2gRnb4B8fHcYuQDadSmI649bh9wk7Ht7mBe8sUNaHg8t1jzAg7hJb76A2PikIzjXNzb2erlJ7Y+LD73ZSjdDtABXJnt4X+0cb+qcT7OyuZvgo09allC8uXh+XvHsvVxi0KySjIUuSOEWNX9XM+9K7JF4dD/tvw2BjqOPwNUYvzcdfjIy4moaIOqVsQQHiL9nkTivODdn5hCRwZac1hkhmaFlNgpOLcpRrQ6rf8CwsEKi7IeW6Bhvt9eBaAnYl9o10/UFWAk9sIrBnq5invpyA4b80Bt8jcler4x1ZcpIJoosLgkHeja3mdcWLVUcZl1rKH85kGZSD/l7ZYw05I9DBVs6boxrmzwRRG0mJjUQj84fdeijaHJfJoHlfHO2wGSQ9pjusdCIsNFtT002x1LVhW1Pn4ZDp41417q1A==~-1~-1~-1~-1~-1; Domain=.cvscaremark.com; Path=/; Expires=Wed, 25 Aug 2027 14:08:35 GMT; Max-Age=31536000; Secure
bm_sz=BB3B52C95402DCA0EFC445E257080C88~YAAQi4nMF+j0UzagAQAAaV9AOQA6YSMcs3AT1o6U59OxI4dG/1E6zwz1ItKJD5kzk1Zor/sCYDzxF6oO7TliswBTR3bs8KDebVInNKnxapxRUKdk2G0nu3Fj2yeXYCwjH3LtrJWB8gc4rBC1Fls0zKjBBY8ZeN0/iKMhplwOXbt8dvS4+/nLXifaqkGyE/3TR51SKch8DWdqyJ533/ecO4dyKNhuzt845hcajQX0rp8pRY4ZKPgdQWpIVYDGSu7LiqqpKPh03bRMVEguYx5l4w2mFJhVi8JLkJHbd5KVBvKEQIKKmyem8mDSn3qi95dIy9Vb2bc/ENes33Lbd+XsBecl3b8Uki0PRphLriJUCEtCbFM=~3491140~3159095; Domain=.cvscaremark.com; Path=/; Expires=Tue, 25 Aug 2026 18:08:34 GMT; Max-Age=14399

Other Headers

Cross-Origin-Embedder-Policy-Report-Only

Other

require-corp

Date

Other

Tue, 25 Aug 2026 14:08:35 GMT

P3p

Other

CP='CAO ADMo DEVo OUR IND PHY ONL PUR FIN COM NAV STA HEA GOV'

X-Akamai-Transformed

Other

0 - 0 -

X-Req

Other

a=allow;c=;d=desktop;g=0.8b89cc17.1787666914.1243ddc6;h=requestcenter.cvscaremark.com;i=23.204.137.139;l=;t=ut;u=

cross-origin-embedder-policy-report-only: require-corp
date: Tue, 25 Aug 2026 14:08:35 GMT
p3p: CP='CAO ADMo DEVo OUR IND PHY ONL PUR FIN COM NAV STA HEA GOV'
x-akamai-transformed: 0 - 0 -
x-req: a=allow;c=;d=desktop;g=0.8b89cc17.1787666914.1243ddc6;h=requestcenter.cvscaremark.com;i=23.204.137.139;l=;t=ut;u=

Recommendations

Enable compression (gzip/brotli) to improve performance

Consider removing X-Powered-By header to hide server technology