HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Link: <https://www.openbank.es>; rel="canonical", <https://www.openbank.es/>; rel="shortlink"
Link: <https://www.openbank.es/>; rel="alternate"; hreflang="es-ES"
Link: <https://www.openbank.es/en/en>; rel="alternate"; hreflang="en-ES"
X-UA-Compatible: IE=edge
Content-Language: es
X-Content-Type-Options: nosniff
X-Frame-Options: sameorigin
Access-Control-Allow-Origin: *
Content-Security-Policy: upgrade-insecure-requests;   default-src 'self' *.openbank.es;   script-src 'self' 'unsafe-inline' 'unsafe-eval' snap.licdn.com     *.openbank.es *.openbank.de *.openbank.nl *.openbank.pt *.openbank.com *.openbank.com.ar     https://maps.googleapis.com simuladores-pre.afi.es simuladores.afi.es     *.nr-data.net https://browseranalytic.com https://www.google.com     *.gstatic.com https://tags.tiqcdn.com *.google-analytics.com *.tealiumiq.com     https://tealium.hs.llnwd.net https://*.g.doubleclick.net  *.amazonaws.com     *.youtube.com *.googleadservices.com *.ads-twitter.com *.facebook.net     *.ytimg.com     https://cdnjs.cloudflare.com static.criteo.net sslwidget.criteo.com     *.googletagmanager.com *.we-stats.com static.browseranalytic.com     optimize.google.com bat.bing.com blob: openbanksimuladores-pre.afi.es     openbanksimuladores.afi.es;   style-src 'self' 'unsafe-inline' optimize.google.com https://fonts.googleapis.com     *.amazonaws.com *.openbankwealth.com *.openbank.es *.openbank.de *.openbank.nl *.openbank.com.ar     *.openbank.pt https://maxcdn.bootstrapcdn.com;   img-src 'self' px.ads.linkedin.com *.idealista.com     www.financeads.net data: 'unsafe-inline' *.amazonaws.com     *.googletagmanager.com https://maps.googleapis.com *.gstatic.com     *.google-analytics.com *.doubleclick.net *.openbank.es     *.openbank.de *.openbank.nl *.openbank.pt *.openbank.com.ar *.google.com *.google.es     *.google.ie *.facebook.com     https://aax-eu.amazon-adsystem.com bat.bing.com     tr.outbrain.com www.linkedin.com s-central1-madrid-investing.cloudfunctions.net     tbl.tradedoubler.com dmpue.el-mundo.net action.metaffiliation.com;   media-src 'self' 'unsafe-inline' *.amazonaws.com  *.openbank.es *.youtube.com;   frame-src 'self' optimize.google.com https://www.google.com *.gstatic.com     *.youtube.com simuladores-pre.afi.es simuladores.afi.es *.doubleclick.net     gum.criteo.com *.openbank.es blob:     openbanksimuladores-pre.afi.es openbanksimuladores.afi.es;   child-src  https://www.google.com *.gstatic.com *.youtube.com     simuladores-pre.afi.es simuladores.afi.es *.doubleclick.net     *.openbank.es blob:     openbanksimuladores-pre.afi.es openbanksimuladores.afi.es;   font-src 'self' *.openbank.es *.openbank.de *.openbank.com.ar     *.openbank.nl *.openbank.pt maxcdn.bootstrapcdn.com data:     https://fonts.gstatic.com *.openbankwealth.com     maxcdn.bootstrapcdn.com;   connect-src 'self' www.google-analytics.com *.openbank.pt *.openbank.nl     *.openbank.de *.openbank.es *.openbank.com.ar *.nr-data.net *.we-stats.com     *.tealiumiq.com     wup-othellotest.eu.v2.customers.biocatch.com log-othellotest.eu.v2.customers.biocatch.com     lib-eu-1.brilliantcollector.com op.browseranalytic.com *.ok-cloud.net     adservice.google.com www.google.com *.openbank.com;   frame-ancestors 'self' *.openbank.de *.openbank.nl *.openbank.pt *.openbank.es     api.paycomet.com https://www.paytpv.com *.openbank.com.ar     https://openbank-mkt-dev1-1.campaign.adobe.com https://openbank-mkt-stage1-1.campaign.adobe.com https://openbank-mkt-prod1-1.campaign.adobe.com     https://openbank-mkt-dev1.campaign.adobe.com https://openbank-mkt-stage1.campaign.adobe.com https://openbank.campaign.adobe.com;   object-src 'self' *.openbank.es
x-content-security-policy: default-src 'self' *.openbank.es;   script-src 'self' 'unsafe-inline' 'unsafe-eval' snap.licdn.com     *.openbank.es *.openbank.de *.openbank.nl *.openbank.pt *.openbank.com *.openbank.com.ar     https://maps.googleapis.com simuladores-pre.afi.es simuladores.afi.es     *.nr-data.net https://browseranalytic.com https://www.google.com     *.gstatic.com https://tags.tiqcdn.com *.google-analytics.com *.tealiumiq.com     https://tealium.hs.llnwd.net https://*.g.doubleclick.net  *.amazonaws.com     *.youtube.com *.googleadservices.com *.ads-twitter.com *.facebook.net     *.ytimg.com     https://cdnjs.cloudflare.com static.criteo.net sslwidget.criteo.com     *.googletagmanager.com *.we-stats.com static.browseranalytic.com     optimize.google.com bat.bing.com blob: openbanksimuladores-pre.afi.es     openbanksimuladores.afi.es;   style-src 'self' 'unsafe-inline' optimize.google.com     https://fonts.googleapis.com *.amazonaws.com *.openbankwealth.com     *.openbank.es *.openbank.de *.openbank.nl *.openbank.pt *.openbank.com.ar     https://maxcdn.bootstrapcdn.com;   img-src 'self' *.idealista.com px.ads.linkedin.com     www.financeads.net data: 'unsafe-inline' *.amazonaws.com     *.googletagmanager.com https://maps.googleapis.com *.gstatic.com     data: *.google-analytics.com *.doubleclick.net *.openbank.es     *.openbank.de *.openbank.nl *.openbank.pt *.openbank.com.ar *.google.com *.google.es     *.google.ie *.facebook.com     https://aax-eu.amazon-adsystem.com bat.bing.com     tr.outbrain.com www.linkedin.com s-central1-madrid-investing.cloudfunctions.net     tbl.tradedoubler.com dmpue.el-mundo.net action.metaffiliation.com;   media-src 'self' 'unsafe-inline' *.amazonaws.com *.openbank.es *.youtube.com;   frame-src 'self' optimize.google.com https://www.google.com *.gstatic.com     *.youtube.com simuladores-pre.afi.es simuladores.afi.es     *.doubleclick.net gum.criteo.com *.openbank.es blob:     openbanksimuladores-pre.afi.es openbanksimuladores.afi.es;   child-src  https://www.google.com *.gstatic.com *.youtube.com     simuladores-pre.afi.es simuladores.afi.es *.doubleclick.net     *.openbank.es blob:     openbanksimuladores-pre.afi.es openbanksimuladores.afi.es;   font-src 'self' *.openbank.es *.openbank.de *.openbank.nl *.openbank.pt     maxcdn.bootstrapcdn.com data: https://fonts.gstatic.com     *.openbankwealth.com maxcdn.bootstrapcdn.com;   connect-src 'self' www.google-analytics.com *.openbank.es *.nr-data.net     *.we-stats.com *.tealiumiq.com     op.browseranalytic.com lib-eu-1.brilliantcollector.com     wup-othellotest.eu.v2.customers.biocatch.com log-othellotest.eu.v2.customers.biocatch.com     *.ok-cloud.net adservice.google.com www.google.com *.openbank.com;   frame-ancestors 'self' *.openbank.de *.openbank.nl *.openbank.pt *.openbank.es *.openbank.com.ar     api.paycomet.com https://www.paytpv.com     https://openbank-mkt-dev1-1.campaign.adobe.com https://openbank-mkt-stage1-1.campaign.adobe.com https://openbank-mkt-prod1-1.campaign.adobe.com     https://openbank-mkt-dev1.campaign.adobe.com https://openbank-mkt-stage1.campaign.adobe.com https://openbank.campaign.adobe.com;   object-src 'self' *.openbank.es
X-XSS-Protection: 1; mode=block
Pragma: no-cache
Access-Control-Allow-Headers: Content-Type, Access-Control-Allow-Headers, Authorization, X-Requested-With
Cache-Control: must-revalidate, max-age=716
Expires: Tue, 02 Mar 2021 11:22:06 GMT
Date: Tue, 02 Mar 2021 11:10:10 GMT
Transfer-Encoding:  chunked
Connection: keep-alive
Connection: Transfer-Encoding
Access-Control-Allow-Credentials: false
Access-Control-Max-Age: 86400
Access-Control-Allow-Methods: GET,POST,HEAD