HTTP Headers Analysis for https://bbvaoneview.com

Detected Technologies from Headers

See all in URL Inspect 13

AWS CloudFront

Gravatar

YouTube

AWS EC2

Amazon S3

Ceros

Google Fonts

Google reCAPTCHA

Google Search

Google Static File Front End

OneTrust

SlideShare

Google Cloud

HTTP Security Headers

Status

Strict-Transport-Security

Present

max-age=31536000; includeSubdomains; preload

Content-Security-Policy

Basic

default-src; connect-src; font-src; +5 more Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Excellent

DENY

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Good

no-referrer-when-downgrade

Permissions-Policy

Missing

Not configured

Recommendations

• Increase HSTS max-age to at least 1 year and add includeSubDomains
• Improve CSP by adding more specific directives and removing 'unsafe-inline'
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

close, Transfer-Encoding

Transfer-Encoding

Performance

chunked

connection: close, Transfer-Encoding
transfer-encoding: chunked

Caching Headers

Cache-Control

Caching

public, must-revalidate, proxy-revalidate, max-age=0

Etag

Caching

W/"d922ee550b409eac1cfca0e8956d3495"

Last-Modified

Caching

Wed, 05 Aug 2026 08:26:15 GMT

cache-control: public, must-revalidate, proxy-revalidate, max-age=0
etag: W/"d922ee550b409eac1cfca0e8956d3495"
last-modified: Wed, 05 Aug 2026 08:26:15 GMT

Content Headers

Content-Type

Content

text/html; charset=utf-8

content-type: text/html; charset=utf-8

Server Headers

No server headers found

CORS Headers

No CORS headers found

Cookies Headers

No cookies headers found

Other Headers

Date

Other

Sat, 08 Aug 2026 03:24:15 GMT

Feature-Policy

Other

accelerometer 'none'; ambient-light-sensor 'none'; autoplay 'none'; camera 'none'; encrypted-media 'none'; fullscreen 'self'; geolocation 'self'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; midi 'none'; payment 'self'; picture-in-picture 'none'; speaker 'self'; sync-xhr 'none'; usb 'none'; vibrate 'none'; vr 'none'

X-Amz-Cf-Id

Other

4MKYb7BKVdBwSpQh5wGoIj3UZbcvbtbkyuo7WQOQ4YhBGH3QFNLM0A==

X-Amz-Cf-Pop

Other

PHL51-P2

X-Amz-Version-Id

Other

Gw.twY8BMLE1RA4L1T0tXVrOaVmperv6

X-Openweb-Version

Other

10

date: Sat, 08 Aug 2026 03:24:15 GMT
feature-policy: accelerometer 'none'; ambient-light-sensor 'none'; autoplay 'none'; camera 'none'; encrypted-media 'none'; fullscreen 'self'; geolocation 'self'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; midi 'none'; payment 'self'; picture-in-picture 'none'; speaker 'self'; sync-xhr 'none'; usb 'none'; vibrate 'none'; vr 'none'
x-amz-cf-id: 4MKYb7BKVdBwSpQh5wGoIj3UZbcvbtbkyuo7WQOQ4YhBGH3QFNLM0A==
x-amz-cf-pop: PHL51-P2
x-amz-version-id: Gw.twY8BMLE1RA4L1T0tXVrOaVmperv6
x-openweb-version: 10

Recommendations

Enable compression (gzip/brotli) to improve performance