HTTP Headers Analysis for https://sit1depservices.cvs.com

Detected Technologies from Headers

See all in URL Inspect 1

Akamai

HTTP Security Headers

Status

Strict-Transport-Security

Good

max-age=31536000 ; includeSubDomains

Content-Security-Policy

Missing

Not configured Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Missing

Not configured

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Consider adding 'preload' to HSTS for maximum security
• Add Content-Security-Policy header to prevent XSS attacks
• Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

close

connection: close

Caching Headers

Cache-Control

Caching

max-age=0, no-cache, no-store

Expires

Caching

Thu, 03 Sep 2026 01:03:22 GMT

Pragma

Caching

no-cache

cache-control: max-age=0, no-cache, no-store
expires: Thu, 03 Sep 2026 01:03:22 GMT
pragma: no-cache

Content Headers

Content-Type

Content

text/html

content-type: text/html

Server Headers

No server headers found

CORS Headers

Access-Control-Allow-Credentials

Cors

true

Access-Control-Allow-Headers

Cors

env,grid

Access-Control-Allow-Methods

Cors

Get,Post,Head,Put,Delete,Options

Access-Control-Allow-Origin

Cors

sit1depservices.cvs.com

access-control-allow-credentials: true
access-control-allow-headers: env,grid
access-control-allow-methods: Get,Post,Head,Put,Delete,Options
access-control-allow-origin: sit1depservices.cvs.com

Cookies Headers

Set-Cookie

Cookies

set-cookie: _abck=EF76E25F345ED96E8ED8747B94FDBABA~-1~YAAQUcgwFwff4z+gAQAAz7rKZBDDXX62nZyio6gCtFW2wx8e5gEIG+EScMqLDdp4TttvqN4GaN1He3BbCfJfh1yYtVKUVV3nloi8Z/VxDAxeVhOqHxXm2w4t66sZqzo6axj4z/ktdIVzHjFn5R95wkKQ9d856KCM+rIZkrn8vsMQcM17kNWlEl5SEb4TWfDwAR0ztOGHQvzxpGNy9GhQz9waZbO7UxLVhgeUaBjOMO8ARcrz0GXzS3nRuduMRrITwJsQncb1C327GL79CbOzckrYqaO1rwNkF7OPaAaXZdt0L9m8eaCbjntlsVNts4WuW9rYg3B8qNa6FO443fYSaK/gbOvRtpWGsdI4LN0GbhjmQY0vH7BBvuZL9IiznUtwR5Al/IS3fHos88b0uvBPjO+GYS1cICAZJZgpVjOmwwTLa9Boi1uSMh6jmGR/uoCKDwE=~-1~-1~-1~-1~-1; Domain=.cvs.com; Path=/; Expires=Fri, 03 Sep 2027 01:03:22 GMT; Max-Age=31536000; Secure
bm_sz=138972520FC1840034232B4E6C351855~YAAQUcgwFwjf4z+gAQAAz7rKZAF/YbdZi4yn1HuNc3h5iuF4BdOSbldJuzNsPnGPuiuJT7mv8SKSQgPtO0VQmFyO3wt0jQ/nY2bb0dIrhScPVf8v91WoGUTWEasOqykE+YZt4gaLM0QJzxHcTCv13DWakA3o5wIrjW8PK57Rw7Xb9KChn+2wsNRTYdobiuQBbTPFHb143EKR8i46fvmTrP0MtNPKCW8ji0lneeQhQg0zeA2yy4+/gNdGUEEJGipWInIl9dYHVphEOCUR33VmU9GTxpfvZK8wP1SdOfvxMBfB3uTly5JA5hpRw9NQDjX4PmZa7jzEzfNf6cSk/0BwVNSS9gwYe23YBFQv~3749427~3487801; Domain=.cvs.com; Path=/; Expires=Thu, 03 Sep 2026 05:03:21 GMT; Max-Age=14399

Other Headers

Date

Other

Thu, 03 Sep 2026 01:03:22 GMT

Mime-Version

Other

1.0

Server-Timing

Other

edge; dur=1036, origin; dur=240, cdn-cache; desc=MISS, ak_p; desc="1788397401519_389072977_2031264984_127375_13365_5_20_-";dur=1

X-Akamai-Transformed

Other

0 - 0 -

X-Req

Other

ut,1788397402,23.48.200.81:7912a4d8,204.99.14.224

date: Thu, 03 Sep 2026 01:03:22 GMT
mime-version: 1.0
server-timing: edge; dur=1036, origin; dur=240, cdn-cache; desc=MISS, ak_p; desc="1788397401519_389072977_2031264984_127375_13365_5_20_-";dur=1
x-akamai-transformed: 0 - 0 -
x-req: ut,1788397402,23.48.200.81:7912a4d8,204.99.14.224

Recommendations

Enable compression (gzip/brotli) to improve performance