HTTP/1.1 301 Moved Permanently Date: Wed, 01 Sep 2021 06:40:19 GMT Server: Microsoft-IIS/8.5 Strict-Transport-Security: max-age=16070400; includeSubDomains; preload X-Xss-Protection: 1; mode=block X-Content-Type-Options: nosniff Location: https://finecobank.com/ Content-Type: text/html; charset=iso-8859-1 HTTP/1.1 302 Found Date: Wed, 01 Sep 2021 06:40:20 GMT Server: Microsoft-IIS/8.5 Strict-Transport-Security: max-age=16070400; includeSubDomains; preload X-Xss-Protection: 1; mode=block X-Content-Type-Options: nosniff Location: https://finecobank.com/it/online Content-Type: text/html; charset=iso-8859-1 HTTP/1.1 301 Moved Permanently Date: Wed, 01 Sep 2021 06:40:20 GMT Server: Microsoft-IIS/8.5 Strict-Transport-Security: max-age=16070400; includeSubDomains; preload X-Xss-Protection: 1; mode=block X-Content-Type-Options: nosniff Location: https://finecobank.com/it/online/ Content-Type: text/html; charset=iso-8859-1 HTTP/1.1 200 OK Date: Wed, 01 Sep 2021 06:40:20 GMT Server: Microsoft-IIS/8.5 Vary: Cookie,Accept-Encoding Last-Modified: Tue, 31 Aug 2021 10:45:21 GMT Accept-Ranges: bytes Content-Length: 131839 X-Powered-By: ASP.NET X-UA-Compatible: IE=edge,chrome=1 Content-Security-Policy: frame-ancestors 'self' Content-Security-Policy-Report-Only: default-src 'self' *.fineco.it *.finecobank.com finecobank.com *.promotorifinecobank.it *.finecobank.co.uk www.youtube.com responder.wt-safetag.com www.google-analytics.com www.googletagmanager.com connect.facebook.net bat.bing.com track.adform.net js.omg.neodatagroup.com trz.neodatagroup.com pixeL.mathtag.com www.google.com g.microsoft.com s2.adform.net googLeads.g.doubLeclick.net static.opentok.com cdn.cookielaw.org data: 'unsafe-eval' 'unsafe-inline'; frame-ancestors finecobank.com finecobank.co.uk *.fineco.it *.promotorifinecobank.it *.finecobank.co.uk; frame-src finecobank.com finecobank.co.uk *.fineco.it *.promotorifinecobank.it *.finecobank.co.uk www.youtube.com *.mateti.net vars.hotjar.com track.adform.net c1.adform.net widget.trustpilot.com; img-src 'self' data: https://images.fineco.it https://images.finecobank.com https://images*.finecobank.com https://finecobank.com http://localhost:9095 https://analytics.google.com https://t.mateti.net https://lt.morningstar.com https://www.morningstar.it https://t.co https://www.linkedin.com https://px.ads.linkedin.com https://d.omg.neodatagroup.com https://www.youronlinechoices.com https://uip.semasio.net https://server.seadform.net https://aax-eu.amazon-adsystem.com https://pixel.mathtag.com https://tracker.neodatagroup.com https://www.google-analytics.com https://*.twimg.com https://finecoitalia01.wt-eu02.net https://bat.bing.com https://www.facebook.com https://cm.g.doubLeclick.net https://match.adsrvr.org https://dmp.adform.net https://secure.adnxs.com https://b1sync.zemanta.com https://cms.anaLytics.yahoo.com https://trz.neodatagroup.com https://www.googLe.com https://www.googLe.it ; connect-src wss://tradepush.finecobank.com https://*.fineco.it https://*.finecobank.com https://finecobank.com https://analytics.google.com https://stats.g.doubleclick.net https://in.hotjar.com https://vc.hotjar.io https://script.crazyegg.com https://r.mateti.net wss://*.tokbox.com https://www.google-analytics.com https://*.tokbox.com https://config.opentok.com https://anvil.opentok.com https://cdn.cookielaw.org https://www.googletagmanager.com https://widget.trustpilot.com 'unsafe-eval' 'unsafe-inline'; script-src-elem 'self' *.fineco.it *.finecobank.com finecobank.com responder.wt-safetag.com static.opentok.com www.google-analytics.com track.adform.net s2.adform.net trz.neodatagroup.com pixel.mathtag.com d.omg.neodatagroup.com js.omg.neodatagroup.com www.googleadservices.com www.googletagmanager.com bat.bing.com connect.facebook.net googleads.g.doubleclick.net cdn.mateti.net static.hotjar.com static.ads-twitter.com snap.licdn.com script.crazyegg.com ethn.io script.hotjar.com analytics.twitter.com www.youtube.com widget.trustpilot.com cdn.cookielaw.org 'unsafe-eval' 'unsafe-inline'; report-uri https://www.fineco.it/_csp-report Cache-Control: max-age=60 Strict-Transport-Security: max-age=16070400; includeSubDomains; preload X-Xss-Protection: 1; mode=block X-Content-Type-Options: nosniff Age: 0 Content-Type: text/html