HTTP Headers Analysis for https://bbvaapimarket.com

Detected Technologies from Headers

See all in URL Inspect 3

Akamai

AWS CloudFront

Amazon S3

HTTP Security Headers

Status

Strict-Transport-Security

Present

max-age=31536000; includeSubdomains;

Content-Security-Policy

Missing

Not configured Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Good

sameorigin

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Present

same-origin

Permissions-Policy

Missing

Not configured

Recommendations

• Increase HSTS max-age to at least 1 year and add includeSubDomains
• Add Content-Security-Policy header to prevent XSS attacks
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

close, Transfer-Encoding

Transfer-Encoding

Performance

chunked

connection: close, Transfer-Encoding
transfer-encoding: chunked

Caching Headers

Cache-Control

Caching

max-age=21600

Etag

Caching

W/"4962f5b67717d6376287139f05b07d9f"

Last-Modified

Caching

Fri, 07 Aug 2026 10:40:30 GMT

cache-control: max-age=21600
etag: W/"4962f5b67717d6376287139f05b07d9f"
last-modified: Fri, 07 Aug 2026 10:40:30 GMT

Content Headers

Content-Type

Content

text/html

content-type: text/html

Server Headers

No server headers found

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

Cookies

set-cookie: _abck=FDF423924B4811DC0C97D8C98265C6B6~-1~YAAQjgwDF25cY7OfAQAAhQKK3BA33IU93Xeopr4L9QW2AWCKHdIWCkC71lqeaY67EY9L5W8JDFcKA3Y/EqFDay5jGJyR3WRUOgll70IgpVXd/NQOVPOOR2ekUMzQcYEK+3c2tdsAfR583PDQM/fjMCrU2szSITraS0xjtcdYCnttE2GcBKg+nkgRKBtDb8tCL5xQcMBVX7doXCBaoaX7vMBpqa2+zLTV0xGFO3R6Kon0/Nt+nXzbWJAwTrF5z0SSsNmyb0ARspQY6b5SbFgzjbUvLdqSoyS+yaYO+fs76fCI3uQKdsNV+iW6TT1ZUGPDHUoadwAlF4MX5Ew5+eNkqkBT+YHXfyyXC9W3ihCbHorioH54wfBdWQcnaQTSsDQyVK0FsKDc6wp+NjIBeCyaSsYZoPnof4ggi0JDMLPtCYJCpwrFr+ZoclMMQTo6FHbAJYKJ6ugR+SphQ1Gu~-1~-1~-1~-1~-1; Domain=.bbvaapimarket.com; Path=/; Expires=Sat, 07 Aug 2027 14:04:19 GMT; Max-Age=31536000; Secure
bm_sz=829FECECC3E6FF9AD98DE6285246A571~YAAQjgwDF29cY7OfAQAAhQKK3ACVS/PMIth6qk5yE/VRWKzu8sPOlMyOw4BVXmnHIVOia5chDMKwUQ2nBGOfB+gE3eIfGk8Q4SVzwaYo4roY2lpPqRedEfHdYKKcSit5votPh/uJHLfIijrZLJ1QN7k7WlEEO6Zj5Aau5YWUwLRDK3d80yLlnt2LthNa5pqScTBF5tdNtT1d8i9+AO8NpcmH8GeVVuZtkrBsiCA11R2gKIQ01cijnJGhDCxMAlzEv4NNz1iLRWqovucx+LduzsF61kx8gQtCXuaRxFvlOjrKOBdbff4WnhTa/Y7J1jv4+1+djEFiXf49zGI8EXng2+DeVdlNiYzieVsKHcNdBIdctA1c~4601909~3421751; Domain=.bbvaapimarket.com; Path=/; Expires=Fri, 07 Aug 2026 18:04:19 GMT; Max-Age=14400

Other Headers

Date

Other

Fri, 07 Aug 2026 14:04:19 GMT

X-Akamai-Transformed

Other

0 - 0 -

X-Amz-Cf-Id

Other

6ZcdzkS5q285uGaFL2pDiGcR9RQ9IQ4SKf75YoDFLdGiTSv44vXSUA==

X-Amz-Cf-Pop

Other

PHL51-P2

X-Amz-Version-Id

Other

1KHzvyAj7a2AQ2bqcBhzS.CZmAN.4_Me

X-Openweb-Version

Other

8

X-Ow-V

Other

8

date: Fri, 07 Aug 2026 14:04:19 GMT
x-akamai-transformed: 0 - 0 -
x-amz-cf-id: 6ZcdzkS5q285uGaFL2pDiGcR9RQ9IQ4SKf75YoDFLdGiTSv44vXSUA==
x-amz-cf-pop: PHL51-P2
x-amz-version-id: 1KHzvyAj7a2AQ2bqcBhzS.CZmAN.4_Me
x-openweb-version: 8
x-ow-v: 8

Recommendations

Enable compression (gzip/brotli) to improve performance