HTTP Headers Analysis for https://www-qa1.cvs.com

Detected Technologies from Headers

See all in URL Inspect 2

Akamai

Envoy

HTTP Security Headers

Status

Strict-Transport-Security

Good

max-age=31536000 ; includeSubDomains

Content-Security-Policy

Missing

Not configured Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Good

SAMEORIGIN

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Consider adding 'preload' to HSTS for maximum security
• Add Content-Security-Policy header to prevent XSS attacks
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

close

connection: close

Caching Headers

Cache-Control

Caching

max-age=0, no-cache, no-store

Etag

Caching

W/"66c74f13-129b"

Expires

Caching

Thu, 03 Sep 2026 09:37:55 GMT

Last-Modified

Caching

Thu, 22 Aug 2024 14:45:39 GMT

Pragma

Caching

no-cache

cache-control: max-age=0, no-cache, no-store
etag: W/"66c74f13-129b"
expires: Thu, 03 Sep 2026 09:37:55 GMT
last-modified: Thu, 22 Aug 2024 14:45:39 GMT
pragma: no-cache

Content Headers

Content-Length

Content

9512

Content-Type

Content

text/html

content-length: 9512
content-type: text/html

Server Headers

No server headers found

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

Cookies

set-cookie: aat2=on; expires=Mon, 02-Nov-2026 09:37:55 GMT; path=/
aat4=on; expires=Mon, 02-Nov-2026 09:37:55 GMT; path=/
lsapg=on; path=/
acct_reftkn=on; path=/
acct_lkup=on; path=/
adh_ps_pickup=on; expires=Wed, 02-Dec-2026 09:37:55 GMT; path=/
adh_ps_refill=off; path=/
acct_untieRx=on; path=/
acc_benefits_login=off; path=/
acc_ca_login=on; path=/
ahct_delivery=on; path=/
acct_mfm=off; path=/
gki=on; path=/
bfp=off; path=/
acc_ca_newreg=on; path=/
bfp_new=off; path=/
bashlf=off-p0; expires=Mon, 02-Nov-2026 09:37:55 GMT; path=/
bcchpredsn=on; expires=Mon, 02-Nov-2026 09:37:55 GMT; path=/
buynow=off; path=/
cdt_mv=on; path=/
psf_fds=on; path=/
psf_lds=on; path=/
psf_ds=on; path=/
circular_print=off-p0; expires=Mon, 02-Nov-2026 09:37:55 GMT; path=/
cp_new_dash=off; path=/
sab_displayads=on; expires=Mon, 02-Nov-2026 09:37:55 GMT; path=/
dashboard_v1=on; path=/
disable-app-dynamics=on; path=/
dpp_cdc=on; path=/
dic_exp=off; path=/
dpp_drug_dir=on; path=/
dpp_sft=on; path=/
drnew=off; path=/
ecfl=off; path=/
getcust_elastic=on; path=/
easy_xfer=on; path=/
ecpe=p1; path=/
footer_new_V1=on; path=/
gbp_api_v2=off; path=/
v3redirecton=false; path=/
ltyrbr=off; path=/
mc_cloud_service=off; path=/
mc_hl7=on; path=/
mc_videovisit=on; expires=Mon, 02-Nov-2026 09:37:55 GMT; path=/
newauthflow=off; path=/
pivotal_forgot_password=off-p0; expires=Mon, 02-Nov-2026 09:37:55 GMT; path=/
plpui=off; path=/
ps_i=on; path=/
rxdanshownba=off; path=/
rxdfixie=off; path=/
rxd_bnr=on; path=/
rxd_dot_bnr=on; path=/
rxdpromo=off; path=/
rxduan=on; path=/
rxm_demo_hide_LN=off; path=/
rxtiemm=off; path=/; domain=.cvs.com
rxtiesb=off; path=/
rxuntiesb=off; path=/
s2c_slimhd=on; expires=Mon, 02-Nov-2026 09:37:55 GMT; path=/
s2c_plp=off; path=/
sft_mfr_new=on; path=/
sftg=on; expires=Mon, 02-Nov-2026 09:37:55 GMT; path=/
show_exception_status=on; expires=Mon, 02-Nov-2026 09:37:55 GMT; path=/
ssexp=on; path=/
slistview=off-p0; expires=Mon, 02-Nov-2026 09:37:55 GMT; path=/
sl_v2=on; path=/
sub_cp_fmf=on; path=/
sub_cp_mmf=off; path=/
tphrm=off; path=/
sd_ma=off; path=/
user_geo_loc=39.0438/-77.4879/ASHBURN/VA/; path=/
akavpau_www_akatest_cvs_com_general=1788428575~id=f496a74a38e5a8cf176e594b33dc427f; Domain=www-qa1.cvs.com; Path=/; HttpOnly; Secure; SameSite=None
hp_uh=off; expires=Mon, 01-Jan-2026 23:59:59 GMT; path=/; priority=high
uh=off; expires=Mon, 01-Jan-2026 23:59:59 GMT; path=/; priority=high
mfep1=off; path=/; priority=high
mcpr=off; path=/; priority=high
imzfe=v1; path=/; priority=high
imzn=on; path=/; priority=high
gr=g2; expires=Sun, 25-Jun-2026 23:59:59 GMT; path=/; priority=high
gc=g2; expires=Sun, 25-Jun-2026 23:59:59 GMT; path=/; priority=high
rxp=off; path=/
gb=g2; expires=Sun, 25-Jun-2026 23:59:59 GMT; path=/; priority=high
ga=g1; expires=Sun, 25-Jun-2026 23:59:59 GMT; path=/; priority=high
ecpe=p1; path=/; priority=high; max-age=3000000
bfp=off; path=/; priority=high; max-age=13140000
gki=on; path=/; priority=high;
arfrsh=off; path=/; priority=high
hdnew=on; path=/; domain=.cvs.com; priority=high
hdnew=on; path=/; domain=.cvs.com; priority=high
fspe=p1; path=/; priority=high
aat3=on; expires=Sun, 25-Jun-2026 23:59:59 GMT; path=/; priority=high
aat1=on; expires=Sun, 25-Jun-2026 23:59:59 GMT; path=/; priority=high
kcpe=w; path=/; priority=high
rxe=i1; path=/; priority=high
agpe=gr; path=/; priority=high
mvpe=gr; path=/; priority=high
mcpe=gr; path=/; priority=high
mdpe=gr; path=/; priority=high
ccse=p1; path=/; priority=high
pe=p1; path=/; domain=.cvs.com; priority=high
acct_pe=p1; path=/; priority=high
_abck=E31A7AE0B4A8F1C08403860CBF72AA6A~-1~YAAQ1gwDF+/fIU2gAQAAPM2hZhB6suG7k2YXyAMr16UjVk81tnYT+A5ETmCYdmsOC5O73aaUpgTlziTqB+4dLlukSLQuSPbkaihSqrr6ZKh7l3CGWGp00n82hwmMAwG4M1USI9xgWsXQAvxwa8hITsSlpu5XHzB3XJ/WMsHqrZ7ocnz3d+TOhx8itX8FP081qL+ZlRItxIvTRNS8K6WZvXImmAJuvKDEPRKRal4/pHXzQgfaV+0vY0vxOgnP391UR/vsjYlQelwF7ujjjTUIdVIJZTpRbDqzRfT+98nkaWe3zf60+nERI79iCquQzvdckwsgZe8BYj6zgWJXBHexE0wENvzzSrgSSVy1wrpxQNhXW7sp9FHi2xLh6DkN75ZqmUp+Fy/RXVL+NdGbjuJMvQs1WegzwUkMo/02L3qAfnbzUGjiYOhaER/l0vy5aez464E=~-1~-1~-1~-1~-1; Domain=.cvs.com; Path=/; Expires=Fri, 03 Sep 2027 09:37:55 GMT; Max-Age=31536000; Secure
bm_sz=EDF60C64ED0C21CBD7CA69DEE3C4EF00~YAAQ1gwDF/DfIU2gAQAAPM2hZgFUPzNw9aSjRbsXSd1V1C2dho6J7B4cfRRj+Mu12LPCSW85KVFswLlR17Ol4sw1uWGkItxmel7LS0308DQpno98rWdOTlOoMbpCpey7vMKQDlM0qlXq3BOcGLQYWmhLZY7Yq4GocB52neyrj85kmp7ORJvMPsrULrj85Ax3nBJQ1fRooi0YP6m1f5RAoST6yoz39df0qZqCgbXIkG8X7KoeNtzHmcH3i8EAWcmRkMkywNt+LaG3RXtTY+zesDIKICmTghBMxhwVBGcvwh0W8CIGcQc6oVozeMFjN7OAmal06hMAmtP6NsjGzVbU07SDbLZhPXLpFwbb~3355714~4535873; Domain=.cvs.com; Path=/; Expires=Thu, 03 Sep 2026 13:37:54 GMT; Max-Age=14399

Other Headers

Date

Other

Thu, 03 Sep 2026 09:37:55 GMT

Server-Timing

Other

cdn-cache; desc=HIT, edge; dur=3, ak_p; desc="1788428274885_386075862_2116868891_233_43935_9_8_-";dur=1

X-Akamai-Transformed

Other

9l 1805 0 pmb=mRUM,1

X-Envoy-Upstream-Service-Time

Other

14

X-Permitted-Cross-Domain-Policies

Other

none

X-Req

Other

a=a;c=www-qa1.cvs.com-home;d=desktop;g=0.d60c0317.1788428274.7e2cdb1b;h=www-qa1.cvs.com;i=23.3.12.214;l=use;t=ut;u=brw

X-Robots-Tag

Other

noindex, nofollow

date: Thu, 03 Sep 2026 09:37:55 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=3, ak_p; desc="1788428274885_386075862_2116868891_233_43935_9_8_-";dur=1
x-akamai-transformed: 9l 1805 0 pmb=mRUM,1
x-envoy-upstream-service-time: 14
x-permitted-cross-domain-policies: none
x-req: a=a;c=www-qa1.cvs.com-home;d=desktop;g=0.d60c0317.1788428274.7e2cdb1b;h=www-qa1.cvs.com;i=23.3.12.214;l=use;t=ut;u=brw
x-robots-tag: noindex, nofollow

Recommendations

Enable compression (gzip/brotli) to improve performance