HTTP Headers Analysis for https://wellpoint.com

SSL Verification Bypassed

The server's SSL certificate could not be verified. The analysis was completed using insecure mode. Data may be less reliable.

Reason:

Unknown Certificate Authority - the server's certificate is not trusted

Open Cached · 25m ago

17 Headers

HTTP Security Headers

Status

Strict-Transport-Security

Good

max-age=31536000; includeSubDomains

Content-Security-Policy

Weak

frame-ancestors

X-Frame-Options

Good

SAMEORIGIN

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Consider adding 'preload' to HSTS for maximum security
• Significantly strengthen CSP directives
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

Performance Headers

2 headers

Connection

Performance

Transfer-Encoding

Performance

chunked

Caching Headers

4 headers

Cache-Control

Caching

public, max-age=600

Etag

Caching

"5f7b9-6482bed7e54e5-gzip"

Expires

Caching

Mon, 12 Jan 2026 11:16:32 GMT

Last-Modified

Caching

Mon, 12 Jan 2026 07:36:05 GMT

Content Headers

1 headers

Content-Type

Content

text/html;charset=utf-8

Server Headers

1 headers

Server

Apache

CORS Headers

0 headers

No CORS headers found

Cookies Headers

1 headers

Set-Cookie

bm_sz=177E06B35B441A7793D2CF304ECBAF10~YAAQhsgwF3sQOFSbAQAAPdrisR4krblOLgpK5X7QIHrjoYObw2QqiEKmcamomcSAcPOpgnFl+K/xRzXe2giW1CkXhpWOnqtCG428EJjuZa62BCJKR8UcT7nF+y+5VbkLitHvaSFBFikr3wGQD5rhYRKUqqW2KaWKeE9AjAJ9w57q5rK9F+9QTX/3fqoB2475MSzwfcfGQypfGBaQ0CHVDxwzY32ktK5oRGv87jG9kGhmkeAHkHuDz8y/wNrRhqkT+MLCw0THRCfMLab0W3Y53kzVHLHGeakbnJNJ/cMG80QMAVGJaLJQuONIe1LAcDQlZ0ssXgn7xdDcWgt6ailUQLQdNmEJnkko2spjSRhoEaU=~3491137~3290422; Domain=.wellpoint.com; Path=/; Expires=Mon, 12 Jan 2026 15:06:32 GMT; Max-Age=14400