HTTP/1.1 200 OK
Server: Apache
ETag: "200cf-5a5b0104d1e1d"
X-Frame-Options: SAMEORIGIN
Last-Modified: Fri, 15 May 2020 13:48:09 GMT
Content-Security-Policy: default-src 'self' *.santander.de *.kernarea.de; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.re-drive.de *.kernpunkt.de *.googletagmanager.com *.google-analytics.com *.vwd-webtech.com *.doubleclick.net *.akamaihd.net *.googleadservices.com *.wtp101.com *.google.com *.santanderbank.de data:; style-src 'self' 'unsafe-inline' 'unsafe-eval' *.vwd-webtech.com *.santanderbank.de *; img-src 'self' data: *; font-src 'self' *; connect-src *.google-analytics.com *.kernpunkt.de *.algolia.net *.kernarea.de *.best-credit.de *.usercentrics.eu *.santander.de; frame-src *.youtube.com santander.de *.santander.de *.youtube-nocookie.com; sandbox allow-forms allow-modals allow-popups allow-same-origin allow-scripts allow-top-navigation allow-presentation;
X-Content-Type-Options: nosniff
Content-Type: text/html; charset=UTF-8
Cache-Control: max-age=28
Expires: Sat, 16 May 2020 09:01:45 GMT
Date: Sat, 16 May 2020 09:01:17 GMT
Transfer-Encoding:  chunked
Connection: keep-alive
Connection: Transfer-Encoding
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=31536000 ; includeSubDomains