HTTP Headers Analysis for https://wellpointstoploss.com

SSL Verification Bypassed

The server's SSL certificate could not be verified. The analysis was completed using insecure mode. Data may be less reliable.

Reason:

Unknown Certificate Authority - the server's certificate is not trusted

Open Cached · just now

17 Headers

HTTP Security Headers

Status

Strict-Transport-Security

Good

max-age=31536000; includeSubDomains

Content-Security-Policy

Weak

frame-ancestors

X-Frame-Options

Good

SAMEORIGIN

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Consider adding 'preload' to HSTS for maximum security
• Significantly strengthen CSP directives
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

Performance Headers

2 headers

Connection

Performance

Transfer-Encoding

Performance

chunked

Caching Headers

4 headers

Cache-Control

Caching

public, max-age=600

Etag

Caching

"5fe0e-64750bae355f7-gzip"

Expires

Caching

Fri, 02 Jan 2026 09:08:08 GMT

Last-Modified

Caching

Thu, 01 Jan 2026 10:05:18 GMT

Content Headers

1 headers

Content-Type

Content

text/html;charset=utf-8

Server Headers

1 headers

Server

Apache

CORS Headers

0 headers

No CORS headers found

Cookies Headers

1 headers

Set-Cookie

bm_sz=37C14427FAF9CBA0D72D04645546B14A~YAAQ1WncF+by93ebAQAAqrTtfR60BTSMRaJ9Jpdo+QG/05eFcBPdXcJMTUDq+2SSJYsTOi8Z5TBIevGivs5m/4mGKcK4en+Kubd96ZbtfX0lvoztAePYYmdvd//X29J7fDld2yEE7m/2otAzftrU8reCZ12XazUIpiJccG8jjSJpbsT4pY567wqhnZKhmS3iLw3Nb/L0DrhLbETecQORVkg7OwmaPeP0cQmZ/K+fLDbtSk4CeD2U6isaPA5TsEtcJ4OHjXoa2tzX9OTOgUCjs579uKTf+Ag7qVup1R6ICmblB9dvC9WHFta+UXQexLY5DcHIoEDdp1yWuGVRaN8+Rv9ftIWt+v74SriEs8seDDo=~4468804~4338993; Domain=.wellpoint.com; Path=/; Expires=Fri, 02 Jan 2026 12:58:08 GMT; Max-Age=14400