HTTP Headers Analysis for https://wellpoint.com

SSL Verification Bypassed

The server's SSL certificate could not be verified. The analysis was completed using insecure mode. Data may be less reliable.

Reason:

Unknown Certificate Authority - the server's certificate is not trusted

Open Cached · just now

17 Headers

HTTP Security Headers

Status

Strict-Transport-Security

Good

max-age=31536000; includeSubDomains

Content-Security-Policy

Weak

frame-ancestors

X-Frame-Options

Good

SAMEORIGIN

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Consider adding 'preload' to HSTS for maximum security
• Significantly strengthen CSP directives
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

Performance Headers

2 headers

Connection

Performance

Transfer-Encoding

Performance

chunked

Caching Headers

4 headers

Cache-Control

Caching

public, max-age=600

Etag

Caching

"5f9ed-647d15d334bd0-gzip"

Expires

Caching

Thu, 08 Jan 2026 01:19:07 GMT

Last-Modified

Caching

Wed, 07 Jan 2026 19:33:17 GMT

Content Headers

1 headers

Content-Type

Content

text/html;charset=utf-8

Server Headers

1 headers

Server

Apache

CORS Headers

0 headers

No CORS headers found

Cookies Headers

1 headers

Set-Cookie

bm_sz=2647856F06F37231256D4E502C8BFF0F~YAAQCt7aF/bjMWabAQAAB3Qmmx63Jh3DAi9eNCYlxFmH9WlMViNZ09bbeuFPDbWYHrfslspOm8sD99hbOooCz0FyJa7j9QmYdugHCTGuTz6rj9imldN9ogQxHDdXHxLeo7o6K/vaZ3d5onP42Zyu3jCkN5c2SkJcdzkT2oY+cKuoT4KtNffmYhtv7TgerZkyeMElvNABwEJyF2xusMtNj2TVI2hHWwKArat9j99V9AWz8+w0TgFxLSLJQfUxzjG/xeztRztm8lRJh66h3cclFGEEix/ICqJ7z/KVEztbfjErazzwtgs5sNiIqP0qHaWwYRe9PGCyFZ359Ol1tOJpsrGJJrE7XCie164Qo/xspo8=~3683638~3487541; Domain=.wellpoint.com; Path=/; Expires=Thu, 08 Jan 2026 05:09:07 GMT; Max-Age=14400