lloydsbank.nl Review

 N/A

HTTP/1.1 301 Moved Permanently
Cache-Control: private
Location: https://lloydsbank.nl:443/
Content-Length: 0
Date: Sun, 14 Dec 2025 07:41:56 GMT
Content-Type: text/html; charset=UTF-8

HTTP/1.1 302 Found
Cache-Control: private
Location: https://www.lloydsbank.nl/
Content-Length: 0
Date: Sun, 14 Dec 2025 07:41:56 GMT
Content-Type: text/html; charset=UTF-8
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

HTTP/1.1 200 OK
Content-Type: text/html;charset=UTF-8
X-Magnolia-Registration: Registered
Cache-Control: no-cache, no-store, must-revalidate, max-age=0
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Last-Modified: Fri, 12 Dec 2025 13:27:29 GMT
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: player.vimeo.com unpkg.com *.unpkg.com www.youtube.com *.googleadservices.com *.adnxs.com ad.ad-srv.net ad4m.at *.adition.com *.adsrvr.org api.xs2a.com *.audiencemanager.de *.bankofscotland.de *.ccm19.net *.ccm19.de cdn.cookielaw.org cdn.mateti.net connect.facebook.net *.cookiebot.com *.doubleclick.net *.facebook.com *.googleapis.com *.googletagmanager.com *.google-analytics.com *.intelliad.de *.kuponacdn.de netzwerk.uppr.de responder.wt-safetag.com siteimproveanalytics.com *.hotjar.com *.wcfbc.net *.webtrekk.net *.windows.net *.vimeo.com mastertag.kpcustomer.de *.hstatic.nl; style-src 'self' 'unsafe-inline' api.xs2a.com *.ccm19.de *.gstatic.com *.googleapis.com *.windows.net; object-src 'self' blob: *.lloydsbank.nl; base-uri 'self'; connect-src 'self' player.vimeo.com ib.adnxs.com adnxs.com *.adnxs-simple.com adnxs-simple.com *.google.com web.bankofscotland.de consentcdn.cookiebot.com r.mateti.net *.ccm19.de *.webtrekk.net api.xs2a.com *.audiencemanager.de *.doubleclick.net *.google-analytics.com *.googlesyndication.com *.hotjar.com wss://*.hotjar.com *.hotjar.io *.vimeo.com vimeo.com *.uppr.de ib.adnxs.com; font-src 'self' blob: data: *.gstatic.com *.googleapis.com *.googleusercontent.com; frame-src 'self' blob: *.googletagmanager.com hal9000.redintelligence.net ad.ad-srv.net *.doubleclick.net *.vimeo.com vimeo.com consentcdn.cookiebot.com *.audiencemanager.de ad.ad-srv.net www.youtube-nocookie.com youtube.com www.youtube.com *.lloydsbank.nl *.advieskeuze.nl *.tools.hypotheekbond.nl staging.lloydsbank.eaanvraag.smartplatforms.io ad4m.at opt.kuponacdn.de insight.adsrvr.org consentcdn.cookiebot.com *.adsrvr.org *.googletagmanager.com; img-src 'self' data: blob: i.vimeocdn.com *.vimeo.com vimeo.com www.youtube-nocookie.com www.youtube.com img.youtube.com x.bidswitch.net adservice.google.de *.adnxs.com adnxs.com *.adnxs-simple.com adnxs-simple.com *.ccm19.de *.amazonaws.com *.googletagmanager.com *.googlesyndication.com *.bankofscotland.de *.lloydsbank.nl *.doubleclick.net *.google-analytics.com *.intelliad.de api.xs2a.com *.siteimproveanalytics.io *.wcfbc.net *.webtrekk.net *.windows.net *.intelliad.de *.ad4m.at *.adserver01.de *.adition.com track.adform.net adservice.google.com *.smartadserver.com *.adscale.de *.twiago.com *.casalemedia.com *.financeads.net; manifest-src 'self'; media-src 'self' player.vimeo.com youtube.com www.youtube.com; worker-src 'none'
Referrer-Policy: no-referrer-when-downgrade
Permissions-Policy: geolocation=(), midi=(), notifications=(), push=(), sync-xhr=(), microphone=(), camera=(), magnetometer=(), gyroscope=(), speaker=(self), vibrate=(), fullscreen=(self), payment=()
x-azure-ref: 20251214T074157Z-154f4c99cf4qsvgqhC1LONyex8000000061g000000005kvg
Accept-Ranges: bytes
X-Akamai-Transformed: 9 13228 0 pmb=mRUM,1
Content-Encoding: gzip
Date: Sun, 14 Dec 2025 07:41:57 GMT
Content-Length: 15288
Connection: keep-alive
Vary: Accept-Encoding
Set-Cookie: JSESSIONID=F02DDEDED3C63D2CE0B887D03686B515; Path=/; HttpOnly
Set-Cookie: csrf=6N9dTtWinXFx1BFycF3NpH1-_DnFjqsJl7HygZ1OsCxeM9QICCRTjWRuwAGW_YKYM86Og2MW74TY_5fYWOuabQ:AAABmxvPIKA:nYC3gDD2Rh2d0KnGkTez1Q; Path=; SameSite=Strict; Secure; HttpOnly
Server-Timing: cdn-cache; desc=MISS
Server-Timing: edge; dur=18
Server-Timing: origin; dur=26
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Server-Timing: ak_p; desc="1765698117544_34639903_671286049_4382_6766_216_227_-";dur=1