HTTP Headers Analysis for https://i.web.bbva.es

Detected Technologies from Headers

See all in URL Inspect 1

AWS CloudFront

HTTP Security Headers

Status

Strict-Transport-Security

Missing

Not configured

Content-Security-Policy

Missing

Not configured Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Missing

Not configured

X-Content-Type-Options

Missing

Not configured

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Add Strict-Transport-Security header with max-age of at least 1 year
• Add Content-Security-Policy header to prevent XSS attacks
• Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
• Add X-Content-Type-Options: nosniff
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

close

connection: close

Caching Headers

Cache-Control

Caching

no-cache, no-store, must-revalidate

Expires

Caching

0

Pragma

Caching

no-cache

cache-control: no-cache, no-store, must-revalidate
expires: 0
pragma: no-cache

Content Headers

Content-Length

Content

0

Content-Type

Content

application/octet-stream

content-length: 0
content-type: application/octet-stream

Server Headers

Server

haile

server: haile

CORS Headers

No CORS headers found

Cookies Headers

No cookies headers found

Other Headers

Alt-Svc

Other

h3=":443"; ma=86400

Date

Other

Tue, 11 Aug 2026 10:48:59 GMT

P3p

Other

CP="NOI ADM DEV PSAi COM NAV OUR OTR STP IND DEM"

Pics-Label

Other

(PICS-1.1 "http://www.icra.org/pics/vocabularyv03/" l r (n 0 s 0 v 0 l 0 oa 0 ob 0 oc 0 od 0 oe 0 of 0 og 0 oh 0 c 0) "http://www.icra.org/ratingsv02.html" l r (nz 0 vz 0 lz 0 oz 0 cz 0) "http://www.rsac.org/ratingsv01.html" l r (n 0 s 0 v 0 l 0))

Via

Other

1.1 01e2110cbab4e85fc866324c9ddb3d6e.cloudfront.net (CloudFront)

X-Amz-Cf-Id

Other

fpH_GRxR7aMjCr_lAOH_kGr_YtW_JQTBJOQAygfJC4bpVz2p8GFVFQ==

X-Amz-Cf-Pop

Other

IAD55-P9

X-Cache

Other

Miss from cloudfront

alt-svc: h3=":443"; ma=86400
date: Tue, 11 Aug 2026 10:48:59 GMT
p3p: CP="NOI ADM DEV PSAi COM NAV OUR OTR STP IND DEM"
pics-label: (PICS-1.1 "http://www.icra.org/pics/vocabularyv03/" l r (n 0 s 0 v 0 l 0 oa 0 ob 0 oc 0 od 0 oe 0 of 0 og 0 oh 0 c 0) "http://www.icra.org/ratingsv02.html" l r (nz 0 vz 0 lz 0 oz 0 cz 0) "http://www.rsac.org/ratingsv01.html" l r (n 0 s 0 v 0 l 0))
via: 1.1 01e2110cbab4e85fc866324c9ddb3d6e.cloudfront.net (CloudFront)
x-amz-cf-id: fpH_GRxR7aMjCr_lAOH_kGr_YtW_JQTBJOQAygfJC4bpVz2p8GFVFQ==
x-amz-cf-pop: IAD55-P9
x-cache: Miss from cloudfront

Recommendations

Enable compression (gzip/brotli) to improve performance