HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: max-age=7200
Date: Tue, 07 May 2024 22:00:30 GMT
Server: ECAcc (amb/6B38)
X-Cache: Miss from cloudfront
Via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: wn0-AvyZ2_jRES5OfNWtdQ0xg3-2e2xPO04t4CpxYsAdJjlTJQIywA==

HTTP/2 200 OK
content-type: text/html
content-length: 403
last-modified: Tue, 07 May 2024 07:59:59 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: iPqygDGcCmiIaX_pGe6Tmr2aXjMUatzu
accept-ranges: bytes
server: AmazonS3
date: Tue, 07 May 2024 22:00:32 GMT
etag: "72895cfbd2ae615fda159d449a1f6ed6"
vary: Accept-Encoding
x-cache: RefreshHit from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: nEGsaJTbR1kWLT_o89--cAE9nvUcVOTxY_fj0wFYI_3K8-P5Y3j7ig==
x-frame-options: SAMEORIGIN
referrer-policy: same-origin
content-security-policy: script-src 'self' 'unsafe-inline' 'unsafe-eval' *.datadoghq.com *.sentry.io *.belvo.io *.belvo.com; font-src 'self' fonts.googleapis.com *.gstatic.com *.belvo.io *.belvo.com; img-src 'self' *.belvo.io *.belvo.com belvo-statics-cdn-staging.s3.amazonaws.com belvo-statics-cdn-production.s3.amazonaws.com; worker-src blob:
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
cache-control: no-store, must-revalidate
permissions-policy: geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()
X-Firefox-Spdy: h2

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 07 May 2024 22:00:32 GMT
date: Tue, 07 May 2024 22:00:32 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48236
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 02:35:00 GMT
expires: Fri, 02 May 2025 02:35:00 GMT
cache-control: public, max-age=31536000
age: 501932
last-modified: Thu, 14 Dec 2023 02:08:40 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: max-age=7200
Date: Tue, 07 May 2024 22:00:32 GMT
Server: ECAcc (amb/6B53)
X-Cache: Miss from cloudfront
Via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: z55MyNP6EEjXHuHhijCI7gjfq_eHAa9X6vWWyk_nwV10djA6ZPXkpg==

HTTP/2 200 OK
content-type: image/vnd.microsoft.icon
content-length: 93062
last-modified: Tue, 07 May 2024 07:59:59 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: QUMAG4t7GzFaQIfSRx9nEMo.zecBSUUX
accept-ranges: bytes
server: AmazonS3
date: Tue, 07 May 2024 22:00:34 GMT
etag: "8f5429ba11910da08bdd903e223558a2"
vary: Accept-Encoding
x-cache: RefreshHit from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 1Z3XeYd20YH7MpFj26rhZYBRtxmhUTTLRxi0JEQJMEMbZslODKxuVA==
x-frame-options: SAMEORIGIN
referrer-policy: same-origin
content-security-policy: script-src 'self' 'unsafe-inline' 'unsafe-eval' *.datadoghq.com *.sentry.io *.belvo.io *.belvo.com; font-src 'self' fonts.googleapis.com *.gstatic.com *.belvo.io *.belvo.com; img-src 'self' *.belvo.io *.belvo.com belvo-statics-cdn-staging.s3.amazonaws.com belvo-statics-cdn-production.s3.amazonaws.com; worker-src blob:
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
cache-control: no-store, must-revalidate
permissions-policy: geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()
X-Firefox-Spdy: h2

HTTP/2 200 OK
content-type: image/svg+xml
last-modified: Mon, 06 May 2024 15:59:38 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: null
server: AmazonS3
content-encoding: gzip
date: Tue, 07 May 2024 22:00:34 GMT
etag: W/"54b9e993f98a45a42c2cad114ac4ce91"
vary: Accept-Encoding
x-cache: RefreshHit from cloudfront
via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: k04YA3TNIoo4Ga5tTsg8s86DjT7lPYMwWw4pzZLYGZn9iqGmRORqdQ==
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48236
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 02:35:00 GMT
expires: Fri, 02 May 2025 02:35:00 GMT
cache-control: public, max-age=31536000
age: 501934
last-modified: Thu, 14 Dec 2023 02:08:40 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: max-age=7200
Date: Tue, 07 May 2024 22:00:34 GMT
Server: ECAcc (amb/6B0A)
X-Cache: Miss from cloudfront
Via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 6jYvLWUIV83k7uu4rWGoRRE58tItMxwsB79YVePuuuVOzenbuj9Aow==

HTTP/2 200 OK
date: Tue, 07 May 2024 22:00:33 GMT
content-type: application/json; version=1.65.0
allow: GET, HEAD, OPTIONS
x-frame-options: DENY
vary: Cookie, origin
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
referrer-policy: same-origin
cross-origin-opener-policy: same-origin
access-control-allow-origin: https://santander-co.belvo-link.com
access-control-allow-credentials: true
access-control-expose-headers: content-disposition
x-request-id: f480045687ae4e35bb1716a0625b2923
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 88047bc58bfa568b-OSL
content-encoding: gzip
X-Firefox-Spdy: h2

HTTP/2 201 Created
date: Tue, 07 May 2024 22:00:54 GMT
content-type: application/json; version=1.65.0
content-length: 1608
allow: POST, OPTIONS
x-frame-options: DENY
vary: Cookie, origin
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
referrer-policy: same-origin
cross-origin-opener-policy: same-origin
access-control-allow-origin: https://santander-co.belvo-link.com
access-control-allow-credentials: true
access-control-expose-headers: content-disposition
x-request-id: 782e907b8c974559a89e7f93614d9fbb
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 88047c4719e7568b-OSL
X-Firefox-Spdy: h2

HTTP/2 200 OK
content-type: image/svg+xml
last-modified: Mon, 06 May 2024 15:59:41 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: null
server: AmazonS3
content-encoding: gzip
date: Tue, 07 May 2024 22:00:35 GMT
etag: W/"8806f7373c4bdfa4f24a9995626c0701"
vary: Accept-Encoding
x-cache: RefreshHit from cloudfront
via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: I-nul8RaFfJHfAab4Lx4KfMKqFmRRe6v-vm8q_UZcI3dSzOxvxvpuw==
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2

HTTP/3 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 07 May 2024 22:00:35 GMT
date: Tue, 07 May 2024 22:00:35 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

HTTP/3 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 07 May 2024 22:00:35 GMT
date: Tue, 07 May 2024 22:00:35 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

HTTP/2 200 OK
content-type: font/ttf
date: Tue, 07 May 2024 22:00:35 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Mon, 06 May 2024 15:59:40 GMT
etag: W/"e0049112ba631861e023f3c7a40b976a"
x-amz-server-side-encryption: AES256
x-amz-version-id: null
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding,Origin,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Miss from cloudfront
via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: TAh5Dc7pyEB9HmWPijvd8QTvYS7F9qewf2CwRoAKgkUhRW5cEwcaTA==
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2

HTTP/2 200 OK
content-type: text/javascript
date: Tue, 07 May 2024 22:00:35 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Tue, 07 May 2024 18:33:19 GMT
x-amz-version-id: CFvJVdI.IijZyidjaw9JhPlc42hghKXd
etag: W/"0d2cb665a09a41d2d4d45cb001528d6e"
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding,Origin,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: iyn2_puxGnNdLahi-57w7dkD4k0zEKnBfyBeA7UKVlCtZka3PkABEg==
strict-transport-security: max-age=15552000; includeSubDomains; preload
X-Firefox-Spdy: h2

HTTP/2 200 OK
content-type: text/javascript
date: Tue, 07 May 2024 22:00:35 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
cache-control: max-age=300
last-modified: Tue, 07 May 2024 18:33:17 GMT
x-amz-version-id: ZcZBB6fxFmxe0AUm7zY642AX.pab2k5I
etag: W/"f1e4727d4da0f010e6fe73bedeaaf1f3"
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding,Origin,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Miss from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: s6rVwSNC6dgDi9NiM_oTy87JIpp1L_jhqcsBPuWAY_KxDhQaqu6CaQ==
strict-transport-security: max-age=15552000; includeSubDomains; preload
X-Firefox-Spdy: h2

HTTP/2 200 OK
content-type: application/javascript
date: Tue, 07 May 2024 22:00:32 GMT
last-modified: Tue, 07 May 2024 07:59:59 GMT
etag: W/"97dc71d092d0037708dcd2265b17f523"
x-amz-server-side-encryption: AES256
x-amz-version-id: UjQ9zC3WJoBFffJ7L7mBiFQNBn8J5KPT
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: aeBwQxnrMcK3RxKsZOjf6SN_NG0cFu4Ytv4fx_tnlaDZ4wEDy9YoRw==
x-frame-options: SAMEORIGIN
referrer-policy: same-origin
content-security-policy: script-src 'self' 'unsafe-inline' 'unsafe-eval' *.datadoghq.com *.sentry.io *.belvo.io *.belvo.com; font-src 'self' fonts.googleapis.com *.gstatic.com *.belvo.io *.belvo.com; img-src 'self' *.belvo.io *.belvo.com belvo-statics-cdn-staging.s3.amazonaws.com belvo-statics-cdn-production.s3.amazonaws.com; worker-src blob:
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
cache-control: no-store, must-revalidate
permissions-policy: geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()
X-Firefox-Spdy: h2

HTTP/2 200 OK
content-type: image/svg+xml
date: Tue, 07 May 2024 22:00:35 GMT
last-modified: Sat, 08 Jul 2023 00:09:34 GMT
etag: W/"53e2d4793b9518c2c849a98bc0432f20"
x-amz-server-side-encryption: AES256
x-amz-version-id: czqFZ9m_FG_A.34L1Yx0Lr5nAQLEK8WY
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: wseGugHb2RruwfOgn6epi-C7z_Q-x4Gd5uW835V9vcBz9GL4LgMpHg==
strict-transport-security: max-age=15552000; includeSubDomains; preload
X-Firefox-Spdy: h2

HTTP/2 200 OK
content-type: text/javascript
date: Tue, 07 May 2024 18:46:32 GMT
last-modified: Tue, 07 May 2024 18:33:25 GMT
x-amz-version-id: auQK1.jReKtxzZxfHmANmTAdKiB5JAlI
etag: W/"561c73afe7327ba355dce147e819d417"
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 227a1815a1677b9cf6dd587e443000b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: mtx8M-v2-Wj1duk7k-6HTyHcurGHkMExWycIdQWPqlTkFZm30F4QlA==
age: 11643
strict-transport-security: max-age=15552000; includeSubDomains; preload
X-Firefox-Spdy: h2

HTTP/2 200 OK
content-type: text/javascript
date: Tue, 07 May 2024 22:00:35 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Tue, 07 May 2024 18:33:19 GMT
x-amz-version-id: CFvJVdI.IijZyidjaw9JhPlc42hghKXd
etag: W/"0d2cb665a09a41d2d4d45cb001528d6e"
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding,Origin,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Miss from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 7o15mYLJeNWkpYq1mSeqzMNj_hf9mAVpk_h9Jc1o-35An7Zaud2AZA==
strict-transport-security: max-age=15552000; includeSubDomains; preload
X-Firefox-Spdy: h2

HTTP/2 200 OK
content-type: text/css
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-expose-headers: ETag
access-control-max-age: 3000
last-modified: Tue, 07 May 2024 07:59:59 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: MTmSsw_LwoUxZtXRBLGo9WZVChfokEnV
server: AmazonS3
content-encoding: gzip
date: Tue, 07 May 2024 22:00:32 GMT
etag: W/"a852338bbc5eea02379f3566d7255b24"
vary: Accept-Encoding
x-cache: RefreshHit from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: ve4OEjYqhr3BBby0YbdHAd8N507yU0JYIkY3VXk7TDhZNHmykqMzXQ==
x-frame-options: SAMEORIGIN
referrer-policy: same-origin
content-security-policy: script-src 'self' 'unsafe-inline' 'unsafe-eval' *.datadoghq.com *.sentry.io *.belvo.io *.belvo.com; font-src 'self' fonts.googleapis.com *.gstatic.com *.belvo.io *.belvo.com; img-src 'self' *.belvo.io *.belvo.com belvo-statics-cdn-staging.s3.amazonaws.com belvo-statics-cdn-production.s3.amazonaws.com; worker-src blob:
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
cache-control: no-store, must-revalidate
permissions-policy: geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()
X-Firefox-Spdy: h2