HTTP Headers Analysis for https://sit1care.cvs.com

Detected Technologies from Headers

See all in URL Inspect 2

Akamai

Envoy

HTTP Security Headers

Status

Strict-Transport-Security

Good

max-age=31536000 ; includeSubDomains

Content-Security-Policy

Missing

Not configured Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Good

SAMEORIGIN

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Consider adding 'preload' to HSTS for maximum security
• Add Content-Security-Policy header to prevent XSS attacks
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

close, Transfer-Encoding

Transfer-Encoding

Performance

chunked

connection: close, Transfer-Encoding
transfer-encoding: chunked

Caching Headers

Cache-Control

Caching

max-age=0, no-cache, no-store

Expires

Caching

Fri, 28 Aug 2026 18:16:09 GMT

Pragma

Caching

no-cache

cache-control: max-age=0, no-cache, no-store
expires: Fri, 28 Aug 2026 18:16:09 GMT
pragma: no-cache

Content Headers

Content-Type

Content

text/html

content-type: text/html

Server Headers

No server headers found

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

Cookies

set-cookie: aat2=on; expires=Tue, 27-Oct-2026 18:16:09 GMT; path=/
acct_pe=p1; path=/; priority=high
pe=p1; path=/; domain=.cvs.com; priority=high
ccse=p1; path=/; priority=high
mdpe=gr; path=/; priority=high
mcpe=gr; path=/; priority=high
mvpe=gr; path=/; priority=high
agpe=gr; path=/; priority=high
rxe=i1; path=/; priority=high
kcpe=e; path=/; priority=high
aat1=on; expires=Sun, 25-Jun-2026 23:59:59 GMT; path=/; priority=high
aat3=on; expires=Sun, 25-Jun-2026 23:59:59 GMT; path=/; priority=high
fspe=p1; path=/; priority=high
hdnew=on; path=/; domain=.cvs.com; priority=high
hdnew=on; path=/; domain=.cvs.com; priority=high
lsapg=on; path=/
aat4=off-p0; expires=Tue, 27-Oct-2026 18:16:09 GMT; path=/
_abck=AC3EEE8C47C2D5D17763134ABE48EAAD~-1~YAAQ1gwDF62FAj6gAQAAvh2WSRBmta8I2HRdryZpLQB5nNTy6DbbhklZagGhbJXGJtbEpQTl56i5NUbnZrkttaigr2Zt06l5ILXhYjpOXhk0+MyRjQ59tPJjLaY37bIwiL5//DBA5BN0w9Jhu+fXSY5MxstjOHpLpeesPHDu+STg5f71B2XMmU0VBH9eRo8HPGabnc0VYbO+yPS7zB3e3hdTp8q2+XlGf+fLx6oraGNdTinhJPqmRb86n3gbZ3u9vm1+v0MZTMDrFVKGJxKKM9ptb6Tz9zKHSku7ZiEmDUbqvGHa0N9g+6PUrpnMoDBF31zfWDKcafZZWKSnVN+vqJ1lvxQKaWSDeqNDa4q/ePxCPoo4WTjstwQpyZd4PyMfO6Nm2N7CSLzfN1VKTeauGT34pcFhj4IsN8b7tyo/fdFR67uNm8mbDJAO0uQaT9OPy4g=~-1~-1~-1~-1~-1; Domain=.cvs.com; Path=/; Expires=Sat, 28 Aug 2027 18:16:09 GMT; Max-Age=31536000; Secure
bm_sz=642561A833B82156E5D4F583C2CA266D~YAAQ1gwDF66FAj6gAQAAvh2WSQDdsk81L/7VOPNgmbO2YhXghko0k8xp9nzKveH9o85YeV93LB/1CeyoRTOzj1uB7OoSWh1z/4Dg8xzgWvFe94fwrikI2SrVetgswH5O4SPBXV++zkkt9Lk1eUNy9fS6MVwRQxFIPB/CfVHlioOSO6DgKcDEYnQsDzxEZTBxsCrcvFeQWzL2XSY668cfVzuLa1ZCYqyq8lfmvGwM/F8sK3w8rPiyHBfWGF9HpehqHOoI0nInNmTU92qVZ0UYorQlddFcokJl6fhS+pVewTEL2euwR/JI41Eb1haEKQUsu56XpZ0EBPJnxYKwaexan8cjqfZLIbyWsTk=~3163447~4404806; Domain=.cvs.com; Path=/; Expires=Fri, 28 Aug 2026 22:16:09 GMT; Max-Age=14400

Other Headers

Date

Other

Fri, 28 Aug 2026 18:16:09 GMT

X-Akamai-Transformed

Other

l 81017 0 -

X-Envoy-Upstream-Service-Time

Other

3

X-Permitted-Cross-Domain-Policies

Other

none

X-Req

Other

a=a;c=none;d=desktop;g=0.d60c0317.1787940969.314da368;h=www-qa2.cvs.com;i=23.3.12.214;l=use;t=ut;u=brw

date: Fri, 28 Aug 2026 18:16:09 GMT
x-akamai-transformed: l 81017 0 -
x-envoy-upstream-service-time: 3
x-permitted-cross-domain-policies: none
x-req: a=a;c=none;d=desktop;g=0.d60c0317.1787940969.314da368;h=www-qa2.cvs.com;i=23.3.12.214;l=use;t=ut;u=brw

Recommendations

Enable compression (gzip/brotli) to improve performance