openbank.es Review

 N/A

HTTP/1.1 301 Moved Permanently
Content-Length: 0
Connection: keep-alive
Server: CloudFront
Date: Fri, 22 Aug 2025 06:51:02 GMT
Location: https://www.openbank.es/
Access-Control-Max-Age: 3600
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Content-Encoding: UTF-8
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Content-Security-Policy: upgrade-insecure-requests
X-Cache: Miss from cloudfront
Via: 1.1 a3b5bb90516201e5ddd137696b7b0f50.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: SEA19-C3
X-Amz-Cf-Id: _56pm8-bTD0oAawNtNUw3IY0w7Yff0qsdmZUI7oOz5Ec6O4hh0oJYQ==

HTTP/1.1 200 OK
Server: CloudFront
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Date: Thu, 21 Aug 2025 09:00:52 GMT
Last-Modified: Thu, 21 Aug 2025 08:57:13 GMT
ETag: W/"688d791ec8f56d627f23d3cd1b865e8f"
x-amz-server-side-encryption: AES256
Cache-Control: max-age=0,s-maxage=31536000
x-amz-version-id: 0Wuv2F1VNwewj5qZb3n4wyl_E_0ZDRO7
X-Ods-Info: d107b0698bdafdb95afd12fc2ed34199
Content-Encoding: gzip
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 ea3ab3ba863446bb1632fe25698154f4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: HKG62-C2
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: uFXcInDs1rp8wyUa21sFiBsZy8l8138LhLzuoVnJqRCg3UbY_Rsdqg==
Age: 78611
X-XSS-Protection: 1; mode=block
X-Frame-Options: DENY
Content-Security-Policy: upgrade-insecure-requests; default-src 'self' *.openbank.com *.openbank.es; script-src *.openbank.es *.openbank.com 'unsafe-inline' 'unsafe-eval' snap.licdn.com https://js.hcaptcha.com/ https://maps.googleapis.com simuladores.afi.es https://browseranalytic.com https://www.google.com *.gstatic.com tags.tiqcdn.com *.google-analytics.com https://*.g.doubleclick.net *.youtube.com *.googleadservices.com *.facebook.net *.ytimg.com api-ob.nd.nudatasecurity.com https://cdnjs.cloudflare.com *.googletagmanager.com *.we-stats.com static.browseranalytic.com bat.bing.com blob: openbanksimuladores.afi.es unpkg.com; connect-src 'self' *.openbank.es *.openbank.com *.google-analytics.com *.we-stats.com *.biocatch.com lib-eu-1.brilliantcollector.com op.browseranalytic.com *.google.com *.googleapis.com *.googlesyndication.com https://*.g.doubleclick.net bat.bing.com cdn.linkedin.oribi.io https://hcaptcha.com https://*.hcaptcha.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com *.openbank.com https://maxcdn.bootstrapcdn.com; img-src 'self' *.openbank.es px.ads.linkedin.com www.financeads.net data: 'unsafe-inline' *.googletagmanager.com blob: https://maps.googleapis.com *.gstatic.com *.google-analytics.com *.doubleclick.net *.openbank.com *.google.ie *.google.com https://aax-eu.amazon-adsystem.com bat.bing.com www.linkedin.com tbl.tradedoubler.com *.googlesyndication.com www.facebook.com; media-src 'self' *.openbank.com *.youtube.com; child-src 'self' https://www.google.com *.gstatic.com *.youtube.com simuladores.afi.es blob: openbanksimuladores.afi.es https://newassets.hcaptcha.com *.doubleclick.net ;frame-ancestors 'self' https://openbank.campaign.adobe.com;
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-Permitted-Cross-Domain-Policies: none
Vary: Origin