HTTP Headers Analysis for https://movil.bbva.es

Detected Technologies from Headers

See all in URL Inspect 2

Akamai Active incidents

AWS CloudFront

HTTP Security Headers

Status

Strict-Transport-Security

Present

max-age=63072000; includeSubdomains; preload

Content-Security-Policy

Missing

Not configured Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Good

SAMEORIGIN

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Good

no-referrer-when-downgrade

Permissions-Policy

Missing

Not configured

Recommendations

• Increase HSTS max-age to at least 1 year and add includeSubDomains
• Add Content-Security-Policy header to prevent XSS attacks
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

close

connection: close

Caching Headers

Cache-Control

Caching

must-revalidate, max-age=600, s-maxage=864000

Etag

Caching

"8b9730be6433e27ef11e9c4cedeb33c9"

Last-Modified

Caching

Mon, 05 Feb 2024 15:19:19 GMT

cache-control: must-revalidate, max-age=600, s-maxage=864000
etag: "8b9730be6433e27ef11e9c4cedeb33c9"
last-modified: Mon, 05 Feb 2024 15:19:19 GMT

Content Headers

Content-Length

Content

291

Content-Type

Content

text/html; charset=utf-8

content-length: 291
content-type: text/html; charset=utf-8

Server Headers

No server headers found

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

Cookies

set-cookie: _abck=98C5F1509686900256010C25244D6582~-1~YAAQEt/aF65SStifAQAA4g0Q9BCCCx3S3hzy1sMdiJYX5afgOShBR4jxNMyk+xAzi2ZrP0PpmVADmA5fzrotvrVGTK3U0lapLvZ4DX672pjKcOtEGInDIt9Zw5RyytntufqPegeSekutY3p6FGLWKsp8iud1sKKfqDCQ2PQHtZbn51ZgQ673xvTbmCrJTo/WfQTctB+KWMKXcTrWucsE/7hSMaPt+5N99dpbpmo1znRF8vAE1B6D9OTVRaXPBdLfx7FkUQgDyRT7faqJ6ligWqEiDjJpFRvkblTBYuqL6/5XO6qaE3qclmWclu5KEIwV3bTAjQfAV83ZyC58T5hC8tA7cbPPJN7V8McokUN6aaFDSZmfjwpn8alyctdfUGQhv2LXMs4Eulg1iZWvLRkemQSYt1EzpXw7AzHMQnR/5YnjMbwgXfPQvJY2fHDPMUoYpcKOh3XABZRGHA==~-1~-1~-1~-1~-1; Domain=.bbva.es; Path=/; Expires=Thu, 12 Aug 2027 03:42:00 GMT; Max-Age=31536000; SameSite=None; Secure
bm_sz=BB858628E305C6B4111451D575051A0A~YAAQEt/aF69SStifAQAA4g0Q9ADrRd2t1rxyHmJy4dFVaEKioq8VOBZe/oXRtQS0S5YDiO0ykup0q4YDWghfdK70LoBhMdIwIAqpVukhjhFsyasfdLQMkuS0vIArOEhyiEnihYxa8LNemolqp26IJKUP9uZYY5F/bzlLze5SuNCP/CVcCeQuIcF/O/8P0HAJFs3AwcbOzqRTPCA9K5ihCztb6LblRgC6A0QT2zLeYQzLV8xunfvvfL+67TJrYvnWuq9dc20Wwyhty1DRvNRa7gKpHG3wUeuQrZYDxVujgdgnuhcVqLt3Q1672xjQ0qkU21+J/VpcIhSAzuJ7ARP7RbPRcWZk2AnojSZzkpTDJlWTiA==~3422007~4539701; Domain=.bbva.es; Path=/; Expires=Wed, 12 Aug 2026 07:42:00 GMT; Max-Age=14400; SameSite=None; Secure

Other Headers

Date

Other

Wed, 12 Aug 2026 03:42:00 GMT

X-Akamai-Transformed

Other

0 - 0 -

X-Amz-Cf-Id

Other

cF2BZGeBqDWpHc1KuykPrfJtpJmV1BJ4tBBb-4S_zBrPhYivz8iA5w==

X-Amz-Cf-Pop

Other

JFK50-P15

date: Wed, 12 Aug 2026 03:42:00 GMT
x-akamai-transformed: 0 - 0 -
x-amz-cf-id: cF2BZGeBqDWpHc1KuykPrfJtpJmV1BJ4tBBb-4S_zBrPhYivz8iA5w==
x-amz-cf-pop: JFK50-P15

Recommendations

Enable compression (gzip/brotli) to improve performance