HTTP/1.1 302 Found Date: Mon, 19 Jan 2026 22:59:37 GMT Server: Apache Set-Cookie: AL_BALANCE-S=$xc/UNJlzOX6Io8Achak9ZG1_wtgTtT1gk0iknVAiEM65AraX3!h; Path=/; Secure; HttpOnly; SameSite=None Content-Length: 0 Vary: X-Forwarded-Proto Last-Modified: Mon, 19 Jan 2026 22:59:37 GMT Cache-Control: no-cache Referrer-Policy: same-origin X-Frame-Options: sameorigin X-UA-Compatible: IE=edge X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'self'; base-uri 'self'; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleapis.com *.google.com *.gstatic.com *.youtube.com *.ytimg.com *.vimeo.com doo.net piwik.itzbund.de; object-src 'self' multimedia.gsb.bund.de; media-src 'self' multimedia.gsb.bund.de *.youtube.com *.vimeo.com; frame-src *.google.com *.gstatic.com *.youtube.com *.vimeo.com; img-src 'self' data: *.google.com *.gstatic.com *.youtube.com piwik.itzbund.de; connect-src 'self' *.itzbund.de *.dtvp.de; frame-ancestors 'self'; X-Content-Security-Policy: sandbox allow-scripts allow-popups allow-same-origin; X-Permitted-Cross-Domain-Policies: none X-WebKit-CSP: default-src 'self'; base-uri 'self'; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleapis.com *.google.com *.gstatic.com *.youtube.com *.ytimg.com *.vimeo.com doo.net piwik.itzbund.de; object-src 'self' multimedia.gsb.bund.de; media-src 'self' multimedia.gsb.bund.de *.youtube.com *.vimeo.com; frame-src *.google.com *.gstatic.com *.youtube.com *.vimeo.com; img-src 'self' data: *.google.com *.gstatic.com *.youtube.com piwik.itzbund.de; connect-src 'self' *.itzbund.de *.dtvp.de; frame-ancestors 'self'; Pragma: no-cache Location: https://www.bafin.de/DE/Startseite/startseite_node.html Content-Language: de Strict-Transport-Security: max-age=31536000 Content-Type: text/html;charset=utf-8 HTTP/1.1 200 OK Date: Mon, 19 Jan 2026 22:59:39 GMT Server: Apache Content-Length: 44042 Vary: Accept-Encoding,X-Forwarded-Proto Referrer-Policy: same-origin X-Frame-Options: sameorigin X-UA-Compatible: IE=edge X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'self'; base-uri 'self'; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleapis.com *.google.com *.gstatic.com *.youtube.com *.ytimg.com *.vimeo.com doo.net piwik.itzbund.de; object-src 'self' multimedia.gsb.bund.de; media-src 'self' multimedia.gsb.bund.de *.youtube.com *.vimeo.com; frame-src *.google.com *.gstatic.com *.youtube.com *.vimeo.com; img-src 'self' data: *.google.com *.gstatic.com *.youtube.com piwik.itzbund.de; connect-src 'self' *.itzbund.de *.dtvp.de; frame-ancestors 'self'; X-Content-Security-Policy: sandbox allow-scripts allow-popups allow-same-origin; X-Permitted-Cross-Domain-Policies: none X-WebKit-CSP: default-src 'self'; base-uri 'self'; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleapis.com *.google.com *.gstatic.com *.youtube.com *.ytimg.com *.vimeo.com doo.net piwik.itzbund.de; object-src 'self' multimedia.gsb.bund.de; media-src 'self' multimedia.gsb.bund.de *.youtube.com *.vimeo.com; frame-src *.google.com *.gstatic.com *.youtube.com *.vimeo.com; img-src 'self' data: *.google.com *.gstatic.com *.youtube.com piwik.itzbund.de; connect-src 'self' *.itzbund.de *.dtvp.de; frame-ancestors 'self'; Last-Modified: Mon, 19 Jan 2026 17:13:42 GMT Expires: Mon, 19 Jan 2026 17:14:42 GMT Cache-Control: max-age=60 Content-Language: de Strict-Transport-Security: max-age=31536000 Content-Type: text/html;charset=utf-8