HTTP Headers Analysis for https://services-sit1.cvs.com

Detected Technologies from Headers

See all in URL Inspect 1

Akamai

HTTP Security Headers

Status

Strict-Transport-Security

Present

max-age=31104000 ; includeSubDomains

Content-Security-Policy

Missing

Not configured Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Missing

Not configured

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Increase HSTS max-age to at least 1 year and add includeSubDomains
• Add Content-Security-Policy header to prevent XSS attacks
• Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

close

connection: close

Caching Headers

Expires

Caching

Sun, 06 Sep 2026 01:21:59 GMT

expires: Sun, 06 Sep 2026 01:21:59 GMT

Content Headers

Content-Type

Content

text/html

content-type: text/html

Server Headers

Server

AkamaiGHost

server: AkamaiGHost

CORS Headers

Access-Control-Allow-Credentials

Cors

true

Access-Control-Allow-Headers

Cors

env,grid

Access-Control-Allow-Methods

Cors

Get,Post,Put,Delete,Options

Access-Control-Allow-Origin

Cors

services-sit1.cvs.com

access-control-allow-credentials: true
access-control-allow-headers: env,grid
access-control-allow-methods: Get,Post,Put,Delete,Options
access-control-allow-origin: services-sit1.cvs.com

Cookies Headers

Set-Cookie

Cookies

set-cookie: csc4=on; expires=Thu, 05-Nov-2026 01:21:59 GMT; path=/
sc6=on; expires=Thu, 05-Nov-2026 01:21:59 GMT; path=/
_abck=205C6392C0BED859D66A44BDA9D92C23~-1~YAAQUcgwF0YHukKgAQAAT9hOdBCuk4UbQU6OQiGTI9Vo2mUPnkIsqfzRWKaEk5zG6hAGKuA8aevUc6lssmveyktGhHoVQDjfmIRqvojHW09IOuCbyHnu3aVMTcffXpMem93Q5VrB9dT8VHFVIQjABE5nmuVaf7Y8eke197IpR04JbJyiS5sUrJ9X/i7bCbjswj1T5ASdvk5JeT9SGjHgKKv/Cxq/cGcLUXMxRqc/EAHdN49geBPAN/PyvaQZPF3AhiSMh/3T4FNghJYVWMVJ/doDWYvHDoM1BIsSG67Ip76WsS7ZXYT1Dul0FYzwJSYkUIi3tIXAdhzoY4a+Ii1wol2cnCyfFN1mN6WKnFCBXtDPd7/d84kRrBHEo6vDLOToacW788WklAIpDEdynJUeAYnMl8rt7Cjawksnz08k5Kv7KN1dm6rZ9c3vTF9QFdvin6Y=~-1~-1~-1~-1~-1; Domain=.cvs.com; Path=/; Expires=Mon, 06 Sep 2027 01:21:59 GMT; Max-Age=31536000; Secure
bm_sz=F006AD02F5144E1B08206DA17BEF3FC9~YAAQUcgwF0cHukKgAQAAT9hOdAEFnxyZB+a704wnv6+gfKKKepXYRDxUm2+bGE+RFuoUa1aIxJJ/t98JupFb4DMYIpUsTkJjP8ar7+FnKGGgboeuWfYW9GfYIUExO7x7aNNPIrlUFRTOg6qJnDDUiNAg6tsqQyfICmriU6oEL2Ks79hpLX8iyAtCEo4JlusVWalgjrKDdQ7PxrFhZb7WPG130dyvHgaKVlAyHLjclXuK7NcUtVLoCkm+o5RTRWPIdjup/DIv2zfl+9NMJ27PCUcwLTo2EYHt7JzZv8snX96SdurOpb1UmA7JREN5Bw918DS4tTpFMtr5TefCB0fxznBDHsHqNzVu+/1s~3228738~4272944; Domain=.cvs.com; Path=/; Expires=Sun, 06 Sep 2026 05:21:58 GMT; Max-Age=14399

Other Headers

Date

Other

Sun, 06 Sep 2026 01:21:59 GMT

Mime-Version

Other

1.0

Server-Timing

Other

edge; dur=618, origin; dur=252, cdn-cache; desc=MISS, ak_p; desc="1788657718399_389072977_2863653082_86814_12024_44_91_-";dur=1

X-Akamai-Transformed

Other

0 - 0 -

X-Req

Other

a=allow;c=none;d=desktop;g=0.51c83017.1788657718.aaafe0da;h=services-sit1.cvs.com;i=23.48.200.81;l=unk;t=ut;u=brw

date: Sun, 06 Sep 2026 01:21:59 GMT
mime-version: 1.0
server-timing: edge; dur=618, origin; dur=252, cdn-cache; desc=MISS, ak_p; desc="1788657718399_389072977_2863653082_86814_12024_44_91_-";dur=1
x-akamai-transformed: 0 - 0 -
x-req: a=allow;c=none;d=desktop;g=0.51c83017.1788657718.aaafe0da;h=services-sit1.cvs.com;i=23.48.200.81;l=unk;t=ut;u=brw

Recommendations

Enable compression (gzip/brotli) to improve performance

Add Cache-Control header to optimize caching