HTTP Headers Analysis for https://t.cvs.com

Detected Technologies from Headers

See all in URL Inspect 8

Akamai

Bing

BootstrapCDN

Cloudflare

Cloudflare CDN

jQuery

Quantum Metric

YouTube

HTTP Security Headers

Status

Strict-Transport-Security

Present

max-age=31104000 ; includeSubDomains

Content-Security-Policy

Basic

default-src; script-src; frame-src Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Missing

Not configured

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Increase HSTS max-age to at least 1 year and add includeSubDomains
• Improve CSP by adding more specific directives and removing 'unsafe-inline'
• Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

close

connection: close

Caching Headers

Cache-Control

Caching

max-age=0, no-cache, no-store

Expires

Caching

Wed, 19 Aug 2026 12:18:19 GMT

Pragma

Caching

no-cache

cache-control: max-age=0, no-cache, no-store
expires: Wed, 19 Aug 2026 12:18:19 GMT
pragma: no-cache

Content Headers

Content-Type

Content

text/html

content-type: text/html

Server Headers

Server

AkamaiGHost

server: AkamaiGHost

CORS Headers

Access-Control-Allow-Headers

Cors

env,grid

Access-Control-Allow-Origin

Cors

t.cvs.com

access-control-allow-headers: env,grid
access-control-allow-origin: t.cvs.com

Cookies Headers

Set-Cookie

Cookies

set-cookie: aat1=off-p1; expires=Sun, 18-Oct-2026 12:18:19 GMT; path=/
pe=p1; path=/; domain=.cvs.com
adh_new_ps=on; path=/
adh_ps_pickup=on; expires=Tue, 17-Nov-2026 12:18:19 GMT; path=/
adh_ps_refill=on; path=/
icev2=off-p0; expires=Sun, 18-Oct-2026 12:18:19 GMT; path=/
disable-app-dynamics=on; path=/
enable_imz=on; path=/
ice-phr-offer=off; path=/
v3redirecton=false; path=/
ps=on; expires=Sun, 18-Oct-2026 12:18:19 GMT; path=/
rxd_bnr=on; path=/
rxd_dot_bnr=on; path=/
rxlitelob=off; path=/
rxhp=off-p0; expires=Sun, 18-Oct-2026 12:18:19 GMT; path=/
rxm=on; expires=Sun, 18-Oct-2026 12:18:19 GMT; path=/
rxm_phone_dob=off-p0; expires=Sun, 18-Oct-2026 12:18:19 GMT; path=/
show_exception_status=on; expires=Sun, 18-Oct-2026 12:18:19 GMT; path=/
akavpau_t_cvs_com_general=1787142199~id=ffa3c509caf7cf73b3534415f8292d38; Path=/; HttpOnly; Secure; SameSite=None
rxe=i1; path=/; priority=high

Other Headers

Date

Other

Wed, 19 Aug 2026 12:18:19 GMT

Mime-Version

Other

1.0

Server-Timing

Other

ak_p; desc="1787141898884_389073115_1530875986_74430_22024_27_238_-";dur=1

X-Akamai-Transformed

Other

0 - 0 -

X-Req

Other

a=a;c=none;d=desktop;g=0.dbc83017.1787141899.5b3f5052;h=t.cvs.com;i=23.48.200.219;l=use;t=ut;u=brw

date: Wed, 19 Aug 2026 12:18:19 GMT
mime-version: 1.0
server-timing: ak_p; desc="1787141898884_389073115_1530875986_74430_22024_27_238_-";dur=1
x-akamai-transformed: 0 - 0 -
x-req: a=a;c=none;d=desktop;g=0.dbc83017.1787141899.5b3f5052;h=t.cvs.com;i=23.48.200.219;l=use;t=ut;u=brw

Recommendations

Enable compression (gzip/brotli) to improve performance