HTTP Headers Analysis for https://wellpointmass.com

SSL Verification Bypassed

The server's SSL certificate could not be verified. The analysis was completed using insecure mode. Data may be less reliable.

Reason:

Unknown Certificate Authority - the server's certificate is not trusted

Open Cached · 3h ago

17 Headers

HTTP Security Headers

Status

Strict-Transport-Security

Good

max-age=31536000; includeSubDomains

Content-Security-Policy

Weak

frame-ancestors

X-Frame-Options

Good

SAMEORIGIN

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Consider adding 'preload' to HSTS for maximum security
• Significantly strengthen CSP directives
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

Performance Headers

2 headers

Connection

Performance

Transfer-Encoding

Performance

chunked

Caching Headers

4 headers

Cache-Control

Caching

public, max-age=600

Etag

Caching

W/"4ab5d-6485bf176406a-gzip"

Expires

Caching

Wed, 14 Jan 2026 18:46:05 GMT

Last-Modified

Caching

Wed, 14 Jan 2026 16:53:10 GMT

Content Headers

1 headers

Content-Type

Content

text/html;charset=utf-8

Server Headers

1 headers

Server

Apache

CORS Headers

0 headers

No CORS headers found

Cookies Headers

1 headers

Set-Cookie

bm_sz=E8BC800AE128E4C4BCB1F709413B0504~YAAQWGvcF91yoCebAQAAISTLvR4vmww1cy4TfjYyARnk2yLm4HNdFFMSpwh8gP13KxQq5H+5CTqz47X8PDUlaM7L6unpxkXfrdmxCx18BmeGfOJwA1XRzInpQhiz66QYG2vfmNhQ8HLN284+h5CYs7TBet01dh6dPUtP7BOwUR5ZRU7Ksj3IeLntf0ktUF2uMb9yAsJrwVEcl/YLQ2+fJPRhE7/yemMNyk9rdqNdWmz+r/129l8RxU9G2YIykP5OkYBCpONNLYv07jgqCdLf987VWRKPXPnJwQannjOqJmIXJOOhwYnW1X6lp/6ceenCat4NowWxW3bDVxmicpeLLo7r+pE5MvovfcA1ZP9kuds=~3158067~3556408; Domain=.wellpoint.com; Path=/; Expires=Wed, 14 Jan 2026 22:36:05 GMT; Max-Age=14400