HTTP Headers Analysis for https://pre.web.bbva.es

Detected Technologies from Headers

See all in URL Inspect 1

AWS CloudFront

HTTP Security Headers

Status

Strict-Transport-Security

Good

max-age=31536000; includeSubDomains

Content-Security-Policy

Weak

frame-ancestors Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Good

SAMEORIGIN

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Consider adding 'preload' to HSTS for maximum security
• Significantly strengthen CSP directives
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

close

connection: close

Caching Headers

No caching headers found

Content Headers

Content-Length

Content

263

Content-Type

Content

application/xml

content-length: 263
content-type: application/xml

Server Headers

No server headers found

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

Cookies

set-cookie: env=ei; maxAge=300; Secure; SameSite=Strict; Path=/index.html;
_abck=63CAF38FCC50A425D3DFC84C601BA3BF~-1~YAAQhYnMF0Orfu6fAQAAbvvh7xA25M6D5/TO7qy/PvbURu7aZUvbejIAD9yERDf4Q4eu5qfnCdmtC7jX2nIq9TOWXYqO83baHm+MUfcxhh8D+iI6sbBylIsVt1LehREYKsP4qXHMIXrliOgP+bFJyQMp4QYW6i17QrJ+F18mUcT8OJQKsm0jh0cKbpUm7z5ufF3O16QCBDWskYLD8cKq4TAGgCYPcIUsrw7X/m/htMBekkusomdfCuW6zvBPUp2TMWZnB7q3tBt7DG3WEGB+GnOEOmPc9ZR9Ah1GW/sdqmsGK+sINUF9rOgjnswp7DAgr5XjXqmGVpflQ7VNVn5NR+8b2NvSsBm4Fw4BZQXMiClnXfEIMY99vVKGCn/Pyv0uTcSM6Cp2Gr4Qr+CR0gMKcYNh0TgBDTrFJbII84dWP7idp9I+Is/uFQs8mhcyyunOVQdoPuYIBV5J9g==~-1~-1~-1~-1~-1; Domain=.bbva.es; Path=/; Expires=Wed, 11 Aug 2027 08:13:12 GMT; Max-Age=31536000; SameSite=None; Secure
bm_sz=7C7CC46D72404A078AB097FDE8EB8410~YAAQhYnMF0Srfu6fAQAAbvvh7wB66UQ2JeDpGae9kEKRWcAZl7QlLfRRVYK4JhinMHQ2EGmj+lcP5IT06qCHiuSk4bli/ZzdQZ82dflZxGCKMBknLvcUn9RKKkCBZDjSaIDY9B3fAzZwg6tLtWzoVsvvd+6iw+XmCkjgWrAVCWJTvOVdppdf90zL1s/OASpMb07hfTW4TsOjqp9Dh0ZrKfgobmpUlQ84O/pcLtR7MrYFbDm7E51K2sDeLYbu6deIPGdsun4Qqma8F6niu+AQtaLhXxlIWYufdLtsNfX/iBTHN5G7v4Og5wjMXWQfTG6tJX9iY23TSjuskcnCpXA/UziYjAmgbZWl2m8vRRwIMOHSFQ==~4539191~3491378; Domain=.bbva.es; Path=/; Expires=Tue, 11 Aug 2026 12:13:11 GMT; Max-Age=14399; SameSite=None; Secure

Other Headers

Date

Other

Tue, 11 Aug 2026 08:13:12 GMT

X-Amz-Cf-Id

Other

dLP5n5xNd5uAVHOCPe9noQc9K37UJkaktpVrxl-LEZv77TfSqzYn0Q==

X-Amz-Cf-Pop

Other

PHL51-P3

date: Tue, 11 Aug 2026 08:13:12 GMT
x-amz-cf-id: dLP5n5xNd5uAVHOCPe9noQc9K37UJkaktpVrxl-LEZv77TfSqzYn0Q==
x-amz-cf-pop: PHL51-P3

Recommendations

Enable compression (gzip/brotli) to improve performance

Add Cache-Control header to optimize caching