HTTP Headers Analysis for https://originacion.bancomer.com

Detected Technologies from Headers

See all in URL Inspect 1

Akamai Active incidents

HTTP Security Headers

Status

Strict-Transport-Security

Good

max-age=31536000; includeSubDomains

Content-Security-Policy

Good

default-src; frame-ancestors; form-action; +1 more Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Excellent

DENY

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Consider adding 'preload' to HSTS for maximum security
• Strengthen CSP by removing 'unsafe-eval'
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

close

connection: close

Caching Headers

Cache-Control

Caching

no-store

Pragma

Caching

no-cache

cache-control: no-store
pragma: no-cache

Content Headers

Content-Length

Content

2368

Content-Type

Content

text/html; charset=UTF-8

content-length: 2368
content-type: text/html; charset=UTF-8

Server Headers

No server headers found

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

Cookies

set-cookie: PDSSESSIONID=1_2_0_XhrDyp7a+cSvCPbK-oTCb9p5cPq9LmyZT5Bh-MPl6LfS1VBf; Path=/; Secure; HttpOnly
_abck=294BCB1F8243C7B5B535BD1F385EF81B~-1~YAAQnwwDF4IdU/qfAQAACb9MCxAEUeiowQPICY28qxamk9RZS39rk4/u3uafnfH9cFLxlWu+vRWr+wlber/xOb7+c/c423xYt11nk1lHOCGAVIa60/fSR/63thGe1pbOSpXkzqvtVqeBvo6bk9HVdK7xzyWBNdVyecaBXH0BYIsDFi1hW0w4FLxaHEmJmph1M8WLO14Gzh6yNO6w9zyJo4MC8EopKzrkM2SpJe19hwtHf71b/icTcMLmLTa0sDOpH5QsIlbMfk8tnbplO+YSvtn6kaIo5hootAt21L7MvsDslVqHTF662u5DNMtBcLOE+vB6dM9nfLhJ9DPVvzZe1uNxv7hvESQRD50p6rnaKA+sRZRraOLsoA4z6cY698Q+gjyHoUg94olLkX2a/JUSA6fu2n9h/MFM3sDv3FacY1D/KqA7DZBeLHNcPkTDsjJf5MO3rO08MkMfIQ==~-1~-1~-1~-1~-1; Domain=.bbva.mx; Path=/; Expires=Mon, 16 Aug 2027 15:59:34 GMT; Max-Age=31536000; SameSite=None; Secure
bm_sz=41D2EAADBA684616647487182AF30833~YAAQnwwDF4MdU/qfAQAACb9MCwBe9VeDnumflDBPsYapm5cRj2YU3FSPIMJCg3ReIDd559emg/3ItHOI+FbqzkoQ8cVD2vntdfPEsa4UI3cDQ1MzKt0cRwfK/pioG1rZM8Pgy2CQJvEW7zm2euhTkOP58mpaYA2Ru7Q7066xdMLyymiP70M8j1dEHI3d1zunFdkmlhy7sUUH9kYeoBC9OFCYRFGLKlBWmE1EqMETFmXzdBpxggJHRpe4HxgHKWq+/iAcZStTn++xhuJ4OhvNmDT4NJdlYR4LwiIH/t2uzR2ii077RzSVyNSo3jTZjjeIS/Td/ylJ1XLUkxhk1RHS5xoQSZ3Bj7NIbkMeTg9XsAvl+ww=~4404019~3163444; Domain=.bbva.mx; Path=/; Expires=Sun, 16 Aug 2026 19:59:33 GMT; Max-Age=14399; SameSite=None; Secure

Other Headers

Date

Other

Sun, 16 Aug 2026 15:59:34 GMT

P3p

Other

CP="NON OTPi OUR NOR UNI"

X-Akamai-Transformed

Other

0 - 0 -

date: Sun, 16 Aug 2026 15:59:34 GMT
p3p: CP="NON OTPi OUR NOR UNI"
x-akamai-transformed: 0 - 0 -

Recommendations

Enable compression (gzip/brotli) to improve performance