HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: text/html; charset=utf-8
etag: "5d48acf8d64ec406a15369af084ce385040e7e549d4120cb07d3f89315176eb5-br"
last-modified: Sat, 25 Nov 2023 23:58:08 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Sat, 09 Dec 2023 01:55:18 GMT
x-served-by: cache-bma1670-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1702086919.803451,VS0,VE90
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 731
X-Firefox-Spdy: h2

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 3.13.3
x-jsd-version-type: version
etag: W/"812-JNA5fa8f0AOuhsCx/tlVrlCOIQE"
content-encoding: br
accept-ranges: bytes
date: Sat, 09 Dec 2023 01:55:19 GMT
age: 874
x-served-by: cache-fra-etou8220031-FRA, cache-bma1632-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 1093
X-Firefox-Spdy: h2

HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-origin: *
age: 21020355
cache-control: public,max-age=31536000
content-type: application/javascript
date: Sat, 09 Dec 2023 01:55:19 GMT
etag: "80288516b793d31:0"
last-modified: Mon, 22 Jan 2018 19:27:49 GMT
server: ECAcc (ska/F6AE)
timing-allow-origin: *
vary: Accept-Encoding
x-cache: HIT
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 30394
X-Firefox-Spdy: h2

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 8.3.2
x-jsd-version-type: version
etag: W/"556-Wdn/VD6mBE6EvolddgVB6g4Ez5g"
content-encoding: br
accept-ranges: bytes
date: Sat, 09 Dec 2023 01:55:19 GMT
age: 6126
x-served-by: cache-fra-etou8220065-FRA, cache-bma1632-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 687
X-Firefox-Spdy: h2

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 3.13.3
x-jsd-version-type: version
etag: W/"a9b1-mnqyfdTLGx2R6R4BRLl2MTgRLBA"
content-encoding: br
accept-ranges: bytes
date: Sat, 09 Dec 2023 01:55:19 GMT
age: 26636
x-served-by: cache-fra-eddf8230068-FRA, cache-bma1632-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 16411
X-Firefox-Spdy: h2

HTTP/3 200 OK
content-length: 11537
cache-control: max-age=3600
content-encoding: br
content-type: text/html; charset=utf-8
etag: "1f7886ee055d51ea29d505e9f31202db8b6b9090afb49c47fe4373b38de8a311-br"
last-modified: Sat, 25 Nov 2023 23:58:08 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Sat, 09 Dec 2023 01:55:19 GMT
x-served-by: cache-bma1646-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1702086920.635083,VS0,VE186
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400

HTTP/3 200 OK
content-length: 1093
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 3.13.3
x-jsd-version-type: version
etag: W/"812-JNA5fa8f0AOuhsCx/tlVrlCOIQE"
content-encoding: br
accept-ranges: bytes
date: Sat, 09 Dec 2023 01:55:19 GMT
age: 874
x-served-by: cache-fra-etou8220031-FRA, cache-bma1677-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400

HTTP/3 200 OK
content-length: 16411
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 3.13.3
x-jsd-version-type: version
etag: W/"a9b1-mnqyfdTLGx2R6R4BRLl2MTgRLBA"
content-encoding: br
accept-ranges: bytes
date: Sat, 09 Dec 2023 01:55:19 GMT
age: 26636
x-served-by: cache-fra-eddf8230068-FRA, cache-bma1677-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400

HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-origin: *
age: 21020355
cache-control: public,max-age=31536000
content-type: application/javascript
date: Sat, 09 Dec 2023 01:55:19 GMT
etag: "80288516b793d31:0"
last-modified: Mon, 22 Jan 2018 19:27:49 GMT
server: ECAcc (ska/F6AE)
timing-allow-origin: *
vary: Accept-Encoding
x-cache: HIT
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 30394
X-Firefox-Spdy: h2

HTTP/3 200 OK
content-length: 73785
cache-control: max-age=3600
content-encoding: br
content-type: text/css; charset=utf-8
etag: "0d7a64168f8e967af8bf3237063feb2752f8e866170ffd5823995c00f7860b69-br"
last-modified: Sat, 25 Nov 2023 23:58:08 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Sat, 09 Dec 2023 01:55:19 GMT
x-served-by: cache-bma1646-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1702086920.905317,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400

HTTP/3 200 OK
content-length: 1157
cache-control: max-age=3600
content-encoding: br
content-type: text/javascript; charset=utf-8
etag: "f8866fca72333ee89a5f5b5e1b10a44e5fc75cf4352db30089d3955c0803c635-br"
last-modified: Sat, 25 Nov 2023 23:58:08 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Sat, 09 Dec 2023 01:55:19 GMT
x-served-by: cache-bma1646-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1702086920.926046,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400

HTTP/3 200 OK
content-length: 687
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 8.3.2
x-jsd-version-type: version
etag: W/"556-Wdn/VD6mBE6EvolddgVB6g4Ez5g"
content-encoding: br
accept-ranges: bytes
date: Sat, 09 Dec 2023 01:55:19 GMT
age: 6126
x-served-by: cache-fra-etou8220065-FRA, cache-bma1677-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400

HTTP/2 200 OK
date: Sat, 09 Dec 2023 01:55:19 GMT
content-type: application/javascript; charset=utf-8
content-length: 26909
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec4-14e4a"
last-modified: Mon, 04 May 2020 16:11:48 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 22908
expires: Thu, 28 Nov 2024 01:55:19 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PcXpgyTFJoJ6WezbBMw0a57LvSbRHBBc2EJn4FzGzindUzUtyeeVD6z2AfAPaKzIEE81nSfqn6cKrdMN7Shn%2FAWcarqWi6wQsKFS%2BWjoFmpP6QzupGGLk6GeD4PVnqG%2FrDhx%2Fydz"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8329a011ca6656cb-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-15283"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 09 Dec 2023 01:55:19 GMT
age: 7286305
x-served-by: cache-lga21971-LGA, cache-bma1646-BMA
x-cache: HIT, HIT
x-cache-hits: 215, 178845
x-timer: S1702086920.982885,VS0,VE0
vary: Accept-Encoding
content-length: 30125
X-Firefox-Spdy: h2

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 115677
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 07 Dec 2023 15:41:00 GMT
expires: Fri, 06 Dec 2024 15:41:00 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 30 Nov 2017 21:30:06 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 123260
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

HTTP/3 200 OK
content-length: 7326
cache-control: max-age=3600
content-encoding: br
content-type: image/jpeg
etag: "1a315ff227821b99f834464233b946a03cadcd5071a6a798390a6d331ff13e6e-br"
last-modified: Sat, 25 Nov 2023 23:58:08 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Sat, 09 Dec 2023 01:55:20 GMT
x-served-by: cache-bma1646-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1702086920.158114,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400

HTTP/3 200 OK
content-length: 14944
cache-control: max-age=3600
content-type: font/woff2
etag: "c714c85e0e4c83ab2918725f0c64c822f79571ad85a535c71c69659da1bbcd86"
last-modified: Sat, 25 Nov 2023 23:58:08 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Sat, 09 Dec 2023 01:55:20 GMT
x-served-by: cache-bma1646-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1702086920.140123,VS0,VE69
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400

HTTP/3 200 OK
content-length: 15204
cache-control: max-age=3600
content-type: font/woff2
etag: "1e6182ff2e7aa54a6d57f8663e5d94d73cf8721d77221315dc73e60da7a5e27d"
last-modified: Sat, 25 Nov 2023 23:58:08 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Sat, 09 Dec 2023 01:55:20 GMT
x-served-by: cache-bma1646-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1702086920.136784,VS0,VE102
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400

HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 1444
Server: nginx
Content-Type: application/ocsp-response
Expires: Wed, 13 Dec 2023 01:02:05 GMT
ETag: "79b4087f983403c3db320bee590a7ae3348c9033"
Last-Modified: Sat, 09 Dec 2023 01:02:06 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sat, 09 Dec 2023 01:55:20 GMT
Age: 3194
X-Served-By: cache-qpg1254-QPG, cache-bma1630-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 11, 1
X-Timer: S1702086920.169294,VS0,VE377

HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 1444
Server: nginx
Content-Type: application/ocsp-response
Expires: Wed, 13 Dec 2023 01:02:05 GMT
ETag: "79b4087f983403c3db320bee590a7ae3348c9033"
Last-Modified: Sat, 09 Dec 2023 01:02:06 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sat, 09 Dec 2023 01:55:20 GMT
Age: 3194
X-Served-By: cache-qpg1254-QPG, cache-bma1631-BMA
X-Cache: HIT, MISS
X-Cache-Hits: 11, 0
X-Timer: S1702086920.169184,VS0,VE378

HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 1444
Server: nginx
Content-Type: application/ocsp-response
Expires: Wed, 13 Dec 2023 01:02:05 GMT
ETag: "79b4087f983403c3db320bee590a7ae3348c9033"
Last-Modified: Sat, 09 Dec 2023 01:02:06 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sat, 09 Dec 2023 01:55:20 GMT
Age: 3194
X-Served-By: cache-qpg1254-QPG, cache-bma1663-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 11, 1
X-Timer: S1702086920.169619,VS0,VE377

HTTP/2 200 OK
server: nginx
date: Sat, 09 Dec 2023 01:55:20 GMT
content-type: font/woff2
content-length: 14944
last-modified: Sun, 19 Nov 2023 23:11:30 GMT
etag: "655a9622-3a60"
cache-control: max-age=31536000
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2

HTTP/2 200 OK
server: nginx
date: Sat, 09 Dec 2023 01:55:20 GMT
content-type: font/woff2
content-length: 15204
last-modified: Sun, 19 Nov 2023 23:11:59 GMT
etag: "655a963f-3b64"
cache-control: max-age=31536000
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2

HTTP/2 200 OK
server: nginx
date: Sat, 09 Dec 2023 01:55:20 GMT
content-type: font/woff2
content-length: 15452
last-modified: Sun, 19 Nov 2023 23:11:30 GMT
etag: "655a9622-3c5c"
cache-control: max-age=31536000
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2

HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 1444
Server: nginx
Content-Type: application/ocsp-response
Expires: Wed, 13 Dec 2023 01:39:24 GMT
ETag: "dbedda82f467f364faf81aa854fefabe14fe3c44"
Last-Modified: Sat, 09 Dec 2023 01:39:25 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sat, 09 Dec 2023 01:55:21 GMT
Age: 955
X-Served-By: cache-qpg1267-QPG, cache-bma1631-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 6, 1
X-Timer: S1702086921.865122,VS0,VE382

HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 1444
Server: nginx
Content-Type: application/ocsp-response
Expires: Wed, 13 Dec 2023 01:39:24 GMT
ETag: "dbedda82f467f364faf81aa854fefabe14fe3c44"
Last-Modified: Sat, 09 Dec 2023 01:39:25 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sat, 09 Dec 2023 01:55:21 GMT
Age: 955
X-Served-By: cache-qpg1267-QPG, cache-bma1630-BMA
X-Cache: HIT, MISS
X-Cache-Hits: 6, 0
X-Timer: S1702086921.848375,VS0,VE400

HTTP/1.1 200 
Server: nginx
Date: Sat, 09 Dec 2023 01:55:21 GMT
Content-Length: 520
Connection: keep-alive
Vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
Accept-Ranges: bytes
ETag: W/"520-1699832750183"
Last-Modified: Sun, 12 Nov 2023 23:45:50 GMT
set-cookie: qSession=04529104.32655a691a7f7a8d9fbd895; domain=.comdirect.de; path=/; secure; httponly;
kunde=!47Obn6jAfLXrJVpY2/8+Jy2GEMdtGDnF/UwPlXLbqiTaJEJhq9vTSphDhNEGWtEUaZPlBpNSqjWhqPY=; path=/; Httponly; Secure

HTTP/2 200 OK
date: Sat, 09 Dec 2023 01:55:20 GMT
content-type: application/javascript; charset=utf-8
vary: Accept-Encoding
access-control-allow-origin: *
x-ratelimit-limit: 10000
x-ratelimit-remaining: 10000
x-powered-by: Octolus
x-content-type-options: nosniff, nosniff
x-xss-protection: 1; mode=block
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pFJ7rdx7vt5KneM%2BpwCGoRfpj7IkXzHFSRdjgWBuiQ9Gt4%2FN9j4wA4ESA%2B0x8Ajef3WHA5wFHnMRfyZD1ybn3OfPCXNlHIN%2B8ObRI4C713rCF9Z7tWe7pefvPuCiKv5NESc3tgFW"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8329a0142c917127-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

HTTP/2 302 Found
date: Sat, 09 Dec 2023 01:55:19 GMT
content-type: text/plain; charset=utf-8
access-control-allow-origin: *
cache-control: public, s-maxage=600, max-age=60
location: /axios@1.6.2/dist/axios.min.js
vary: Accept, Accept-Encoding
via: 1.1 fly.io
fly-request-id: 01HH6478XYJ17W7MYB0VNDPGSJ-arn
cf-cache-status: HIT
age: 369
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8329a011eb2356ba-OSL
X-Firefox-Spdy: h2

HTTP/2 200 OK
date: Sat, 09 Dec 2023 01:55:20 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=31536000
last-modified: Sat, 26 Oct 1985 08:15:00 GMT
etag: W/"8355-QTyXuMi6C+GMNqZaW+lAI5xZVsI"
via: 1.1 fly.io
fly-request-id: 01HGCN3VFCPPSGV0YWPCZJNHHR-arn
cf-cache-status: HIT
age: 855071
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8329a0133baa56ba-OSL
content-encoding: br
X-Firefox-Spdy: h2

HTTP/1.1 404 
Server: nginx
Date: Sat, 09 Dec 2023 01:55:21 GMT
Content-Type: text/html;charset=UTF-8
Connection: keep-alive
Vary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers
Cache-Control: no-cache, no-store, max-age=0
Referrer-Policy: strict-origin-when-cross-origin
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: connect-src 'self' https://www.comdirect.de https://protrader.comdirect.de https://kunde.comdirect.de https://b2b.comdirect.de https://nutzer.comdirect.de https://mobileapp.comdirect.de https://cfdapp.comdirect.de https://static.comdirect.de https://api.comdirect.de https://community.comdirect.de/ https://eurex.comdirect.de https://chartanalyzer.comdirect.de https://chartanalyzer-test.comdirect.de ;style-src 'self' https://static.comdirect.de/ccf2/ 'unsafe-inline' ;script-src 'self' 'strict-dynamic' 'nonce-e98a18024435483cb016ac402003c936' https://static.comdirect.de/ccf2/ https://www.comdirect.de/cms/ https://www.comdirect.de/ngtx/assets/ https://www.comdirect.de/ngbrk/assets/ https://static.comdirect.de/ngtx/assets/ https://static.comdirect.de/ngbrk/assets/ 'unsafe-eval' 'unsafe-inline' ;base-uri 'self' ;form-action 'self' https://www.comdirect.de https://kunde.comdirect.de https://protrader.comdirect.de https://b2b.comdirect.de https://nutzer.comdirect.de https://mobileapp.comdirect.de https://cfdapp.comdirect.de https://static.comdirect.de https://api.comdirect.de https://geldautomaten.comdirect.de/ https://cfd.comdirect.de/ https://community.comdirect.de/ https://wissen-stage.comdirect.de/ https://chartanalyzer.comdirect.de https://chartanalyzer-test.comdirect.de https://eurex.comdirect.de ;media-src https://www.comdirect.de https://kunde.comdirect.de https://nutzer.comdirect.de https://mobileapp.comdirect.de ;frame-src 'self' https://www.comdirect.de https://b2b.comdirect.de https://static.comdirect.de https://kunde.comdirect.de ;frame-ancestors 'self' ;img-src data: 'self' https://www.comdirect.de https://kunde.comdirect.de https://protrader.comdirect.de https://b2b.comdirect.de https://nutzer.comdirect.de https://mobileapp.comdirect.de https://cfdapp.comdirect.de https://static.comdirect.de https://api.comdirect.de https://charts.comdirect.de https://charts.test.comdirect.de https://daten.comdirect.de https://community.comdirect.de https://eurex.comdirect.de ;default-src 'self' ;font-src data: 'self' https://static.comdirect.de/ccf2/ ;report-uri https://www.comdirect.de/cp/csp/reports ;
Content-Language: en-US
Content-Encoding: gzip
Set-Cookie: kunde=!kh/AnrznbNzAyEFY2/8+Jy2GEMdtGLjKM8oJyNNaG/w2uMVVE6DQSVj0CUVjbzj6ZR+EdkkLubSeYjg=; path=/; Httponly; Secure
Transfer-Encoding: chunked