HTTP Headers Analysis for https://services-beta.cvs.com

Detected Technologies from Headers

See all in URL Inspect 1

Akamai

HTTP Security Headers

Status

Strict-Transport-Security

Missing

Not configured

Content-Security-Policy

Missing

Not configured Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Missing

Not configured

X-Content-Type-Options

Missing

Not configured

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Add Strict-Transport-Security header with max-age of at least 1 year
• Add Content-Security-Policy header to prevent XSS attacks
• Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
• Add X-Content-Type-Options: nosniff
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

close

connection: close

Caching Headers

Expires

Caching

Mon, 31 Aug 2026 14:44:19 GMT

expires: Mon, 31 Aug 2026 14:44:19 GMT

Content Headers

Content-Type

Content

text/html

content-type: text/html

Server Headers

Server

AkamaiGHost

server: AkamaiGHost

CORS Headers

Access-Control-Allow-Credentials

Cors

true

Access-Control-Allow-Headers

Cors

env,grid

Access-Control-Allow-Methods

Cors

Get,Post,Head,Put,Delete,Options

access-control-allow-credentials: true
access-control-allow-headers: env,grid
access-control-allow-methods: Get,Post,Head,Put,Delete,Options

Cookies Headers

Set-Cookie

Cookies

set-cookie: _abck=CCA8578C870CA13795FB0BD4D988386D~-1~YAAQ3AwDF1zJCjWgAQAATkFHWBBiF1b19EKrta/jsmw0URYl90kbFDI+kN86O2pvc1i+iTg0ygHlg0VlU30irM/A8K+IQeCDiAPlcnoo9bXFLPU706U20AnNWOlmf4nuUZUe4+8fjKeg9XyyL9lR2Dy613+jSK4zuz8nS5a+FAThEmEjA6xdankWtkgjYkPFseFLTvmbpYkF20fn85lRAqLJgd9QeFIYR6i8KUrq3J4MKb5cBFq4CmdattGcBwQ5AYjbM6kOchd9cld8RP/bz4OrtG2hiFEd+vJ+II9g2tbvFEDCwfwh8CnsZAvL0yI5yG3gF6hkgkVBZaC39u7JFDfmk+RJt5n4dGE9JY0mVBa+oamZTnxwZXoe7QbciWdOeQc9GgwqRhdicTkyngypt255kujxXc2kBUP8iftRQaVurWfs1LJJEnAdufyRUP7ZrlM=~-1~-1~-1~-1~-1; Domain=.cvs.com; Path=/; Expires=Tue, 31 Aug 2027 14:44:19 GMT; Max-Age=31536000; Secure
bm_sz=4B37806888DB29FE017F2945B009F204~YAAQ3AwDF13JCjWgAQAATkFHWAGp2/zX49IrIJyf1QcS9Id06Jm20epuo+siNMwCskLopGe88dQIR/BiCCi91vB59uBNI/xctRKMbir7ySjG7/20L6xtll/Vi8nRSq3z05Qhf5mQLnbwrCY2zlpLAi4+DxF21ut9FcTZnqRiFM0lh6534QWzmWtTOEGlvlrG+oe93H5I5mlz4tN31Xw4Saz5aGnjmM2YRt/07R0KReagxmOX0T098Zcuiyplh5FyEcsLnHnDtGYX4CylM3jF1/hGZjKKPAzxYwNW0IX/KEw2TS9WoWR0/+LaXxIMJhKPpdzJLB/hbacrncz/ejywObXzwJRUWOS8B/g2~3223601~4539702; Domain=.cvs.com; Path=/; Expires=Mon, 31 Aug 2026 18:44:19 GMT; Max-Age=14400

Other Headers

Date

Other

Mon, 31 Aug 2026 14:44:19 GMT

Mime-Version

Other

1.0

X-Akamai-Transformed

Other

0 - 0 -

X-Req

Other

23.3.12.220:46b953d6

date: Mon, 31 Aug 2026 14:44:19 GMT
mime-version: 1.0
x-akamai-transformed: 0 - 0 -
x-req: 23.3.12.220:46b953d6

Recommendations

Enable compression (gzip/brotli) to improve performance

Add Cache-Control header to optimize caching