Traffic Report and Web Analysis for Bancodeoccidente - bancodeoccidente.com.co

0 :HTTP/2 200
content-type :text/html;charset=UTF-8
server :CloudFront
date :Sun, 19 Jul 2026 23:23:56 GMT
vary :Accept-Encoding
x-content-type-options :nosniff
x-frame-options :SAMEORIGIN
set-cookie :JSESSIONID=861CF73ECACDDE77165E09DA0A1EEEC2; Path=/; Secure; HttpOnly; SameSite=Lax; Secure; HttpOnl
y
expires :Thu, 01 Jan 1970 00:00:00 GMT
cache-control :private, no-cache, no-store, must-revalidate
pragma :no-cache
strict-transport-security :max-age=63072000; includeSubDomains
x-xss-protection :1; mode=block
referrer-policy :same-origin
permissions-policy :geolocation=(self)
access-control-allow-origin :https://www.bancodeoccidente.com.co
content-security-policy :base-uri 'self'; default-src 'self'; img-src 'self' data: https://*.dynamicyield.com https://*.googl
e-analytics.com https://*.googletagmanager.com https://*.hotjar.com https://*.gstatic.com https://ma
ps.googleapis.com https://*.googleapis.com https://*.ggpht.com https://*.tealiumiq.com https://*.fac
ebook.com https://*.demdex.net https://*.scene7.com https://*.mathilde-ads.com https://*.sitescout.c
om https://*.oracleinfinity.io https://*.everesttech.net https://*.bluekai.com https://cdn01.basis.n
et https://*.google.com https://*.googleadservices.com data:; font-src 'self' data: https://fonts.go
ogleapis.com https://fonts.gstatic.com https://*.dynamicyield.com https://*.hotjar.com; frame-src 's
elf' https://www.youtube.com https://player.vimeo.com https://*.wistia.net https://*.dynamicyield.co
m https://*.bancodeoccidente.com.co https://www.ath.com.co https://*.hotjar.com https://*.demdex.net
 https://*.mathilde-ads.com https://*.sitescout.com https://*.bluekai.com https://td.doubleclick.net
; style-src 'self' 'unsafe-inline' https://*.dynamicyield.com https://fonts.googleapis.com https://f
onts.gstatic.com https://*.omtrdc.net https://*.demdex.net https://*.adobedtm.com https://*.googleap
is.com; child-src 'self' https://*.hotjar.com https://*.doubleclick.net; connect-src 'self' https://
*.dynamicyield.com https://*.dy-api.com https://*.hotjar.com wss://*.hotjar.com https://*.google-ana
lytics.com https://*.tealiumiq.com https://*.doubleclick.net https://*.demdex.net https://*.omtrdc.n
et https://*.adobedtm.com https://*.clarity.ms https://*.oracleinfinity.io https://*.googleapis.com 
https://*.gstatic.com https://ath.sitimapa.co https://content.hotjar.io https://*.mathilde-ads.com h
ttps://*.googleadservices.com https://*.google.com https://*.googlesyndication.com; script-src 'self
' 'unsafe-inline' 'unsafe-eval' https://*.dynamicyield.com https://*.hotjar.com https://*.tealiumiq.
com https://connect.facebook.net https://*.googletagmanager.com https://www.google-analytics.com htt
ps://ssl.google-analytics.com https://*.doubleclick.net https://*.googleapis.com https://*.demdex.ne
t https://*.adobedtm.com https://*.omtrdc.net https://code.jquery.com https://cdnjs.cloudflare.com h
ttps://*.oracleinfinity.io https://*.bancodeoccidente.com.co https://tags.tiqcdn.com https://cs.math
ilde-ads.com https://www.clarity.ms https://*.mathilde-ads.com https://*.cloudfront.net https://*.go
ogle.com https://*.googleadservices.com https://scripts.clarity.ms https://api.pushio.com https://ai
v1qo0-webpush.oraclersys.com;
cross-origin-opener-policy :same-origin
cross-origin-embedder-policy :unsafe-none
cross-origin-resource-policy :cross-origin
via :1.1 google, 1.1 b76ab09d3ce4fcd767d0eab0ed23eaec.cloudfront.net (CloudFront)
feature-policy :payment 'self'
x-cache :Miss from cloudfront
x-amz-cf-pop :CDG52-P6
x-amz-cf-id :Xj-ZDU4LCpGjJn5iRDPxvGSnHhX4i_P0c-pjGR1NMJ6N3Z5LPD8GmQ==