HTTP Headers Analysis for https://www.leasecloud.mx

Detected Technologies from Headers

See all in URL Inspect 3

Akamai Active incidents

AWS CloudFront

Amazon S3

HTTP Security Headers

Status

Strict-Transport-Security

Missing

Not configured

Content-Security-Policy

Weak

frame-ancestors Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Missing

Not configured

X-Content-Type-Options

Missing

Not configured

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Add Strict-Transport-Security header with max-age of at least 1 year
• Significantly strengthen CSP directives
• Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
• Add X-Content-Type-Options: nosniff
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

close, Transfer-Encoding

Transfer-Encoding

Performance

chunked

connection: close, Transfer-Encoding
transfer-encoding: chunked

Caching Headers

Cache-Control

Caching

public, must-revalidate, proxy-revalidate, max-age=0

Etag

Caching

W/"6a98d1dae8a29525a0c81aac0ca759a7"

Last-Modified

Caching

Mon, 27 Jul 2026 15:38:08 GMT

cache-control: public, must-revalidate, proxy-revalidate, max-age=0
etag: W/"6a98d1dae8a29525a0c81aac0ca759a7"
last-modified: Mon, 27 Jul 2026 15:38:08 GMT

Content Headers

Content-Type

Content

text/html

content-type: text/html

Server Headers

No server headers found

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

Cookies

set-cookie: _abck=4093D11C9A02D480270CC11F4D10D6F4~-1~YAAQnwwDF5nBUsqfAQAAPqv68RCoUTOwk3gAsR7sLsiAClzXoJUCdyRLsADNlCntE5TvpJVLV5L22ryH8wRu8BS545xrggVoBdP6POYU+DXSolXb0+VgfUsZ+sb0kbf1M4Fml90BjELcgw4ie/j2L5NplhcjFqSbr8xv8x4mjH7XRjkJhAHufRujzvm5mcxQK5V/wdhxhUFw+fhRkzoyCbUfA/A6Ap+FschjuuyIeJaoNcuuRIV4UGxlRzKTzHc+43wOJoYJWv4gOpo7PPvBPa7HazX0RHWg3lAhILLZWMp1u43ouxPyTMVOliAItee78wL9wTAtQblR/KlV3I5h6aA+8/PcYx3ZglY7+ugCGtmn5t4Jhy9xZIOwqXmwmaoeWFbgcVUz94hRtLS4674AUh7DwSHbE76zCIIiSetyyVVg0rlM1nh3MBme/oUdR9Vuz4ECW04kgOrk23CTjs3y/3o=~-1~-1~-1~-1~-1; Domain=.bbvaleasing.mx; Path=/; Expires=Wed, 11 Aug 2027 17:59:24 GMT; Max-Age=31536000; SameSite=None; Secure
bm_sz=791DE13484D3B23FF9A8F574B9B4FD9D~YAAQnwwDF5rBUsqfAQAAPqv68QDHeopfpiiEEMvjzw5Iw4hQm1qUxyP+FdPC7luuCW+DrtWXpOMPto+ZTXl/3Gme/OR58i7rzIphCBAiRLB9sQyGtS007R2/L1gAZjQcUsXvClU8vRoMfUazaub1dhvJZyMXY7yvK72IgEy80XI6U3BRNyTE34UbN9quGoJ3wkNbZDKSCCu4Wlvaj8yzf22tShfq+nG8JCL1uGniWdSWZyEkb++hQdcbEijA097esUUJOu4DQGX75bBH+1hO97ty6Au0g+JYydXhsfagw/c2qH5MRPv0S67aQnjx+lmLVHu//DNkcf+5BNTrtnJu0Gb2Aa67VGAxCoCuIu7c2GvzDY++PJcbSnc=~3753538~4471092; Domain=.bbvaleasing.mx; Path=/; Expires=Tue, 11 Aug 2026 21:59:24 GMT; Max-Age=14400; SameSite=None; Secure

Other Headers

Date

Other

Tue, 11 Aug 2026 17:59:24 GMT

X-Akamai-Transformed

Other

0 - 0 -

X-Amz-Cf-Id

Other

ltSd-2ujFOEu4O5UAUGHZmtnrjs-12-hoKWxRaHsE9u4uhtNJgW4tA==

X-Amz-Cf-Pop

Other

PHL51-P3

X-Amz-Version-Id

Other

hUG.Qu6zxl.bUUTgdTPo_vyhVD.BODfm

X-Ow-V

Other

2

date: Tue, 11 Aug 2026 17:59:24 GMT
x-akamai-transformed: 0 - 0 -
x-amz-cf-id: ltSd-2ujFOEu4O5UAUGHZmtnrjs-12-hoKWxRaHsE9u4uhtNJgW4tA==
x-amz-cf-pop: PHL51-P3
x-amz-version-id: hUG.Qu6zxl.bUUTgdTPo_vyhVD.BODfm
x-ow-v: 2

Recommendations

Enable compression (gzip/brotli) to improve performance