Plata.com

server: awselb/2.0
date: Mon, 03 Mar 2025 20:32:03 GMT
content-type: text/html
content-length: 134
location: https://www.plata.com:443/
strict-transport-security: max-age=31536000; includeSubDomains; preload=false

HTTP/2 200 
date: Mon, 03 Mar 2025 20:32:03 GMT
content-type: text/html; charset=utf-8
content-length: 29964
cache-control: no-cache
content-encoding: gzip
content-security-policy: connect-src 'self' *.analytics.google.com *.google-analytics.com *.googletagmanager.com *.smartlook.cloud adservice.google.com api.pay360.com api.rollbar.com api.talkdeskapp.eu consentcdn.cookiebot.com d3gj43804r9iyz.cloudfront.net firstbanco-production-attachments.s3.eu-west-1.amazonaws.com googleads.g.doubleclick.net mpsnare.iesnare.com pagead2.googlesyndication.com stats.g.doubleclick.net translate.googleapis.com wss://mpsnare.iesnare.com www.google.com/ccm/ www.google.com/pagead/ www.tag4arm.com; default-src 'self'; font-src 'self' d3gj43804r9iyz.cloudfront.net data: fonts.googleapis.com fonts.gstatic.com p.typekit.net use.typekit.net; form-action 'self'; frame-src 'self' 8103783.fls.doubleclick.net bambooloans.prismic.io bid.g.doubleclick.net consentcdn.cookiebot.com dev.mite.pay360.com fls.doubleclick.net plata.prismic.io plata.web.emea-1.jumio.ai secure.mite.pay360.com secure.pay360.com talkdeskchatsdk.talkdeskapp.com td.doubleclick.net tpc.googlesyndication.com upload.web.emea-1.jumio.ai web.emea-1.jumio.ai widget.trustpilot.com www.googletagmanager.com www.youtube.com; img-src 'self' *.analytics.google.com *.google-analytics.com 8103783.fls.doubleclick.net ad.doubleclick.net ade.googlesyndication.com bambooloans.cdn.prismic.io d3gj43804r9iyz.cloudfront.net data: fonts.gstatic.com googleads.g.doubleclick.net images.prismic.io imgsct.cookiebot.com lh3.googleusercontent.com plata.cdn.prismic.io prismic-io.s3.amazonaws.com s3-eu-west-1.amazonaws.com/firstbanco-email-assets/ s3-eu-west-1.amazonaws.com/firstbanco-production-broker-logos/ ssl.gstatic.com stats.g.doubleclick.net translate.google.com www.google.co.uk www.google.com www.google.com/ads/ www.google.com/pagead/ www.googletagmanager.com www.gstatic.com www.tag4arm.com; media-src data: https://mpsnare.iesnare.com; object-src 'self'; report-to /csp-violations; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.smartlook.com ajax.googleapis.com api.mite.pay360.com api.pay360.com cdn.rollbar.com/rollbarjs/ consent.cookiebot.com consentcdn.cookiebot.com d3gj43804r9iyz.cloudfront.net googleads.g.doubleclick.net html2canvas.hertzen.com/dist/html2canvas.min.js mpsnare.iesnare.com prismic.io ssl.google-analytics.com static.cdn.prismic.io tagmanager.google.com talkdeskchatsdk.talkdeskapp.com tpc.googlesyndication.com widget.trustpilot.com www.google-analytics.com www.google.com/pagead/ www.googleadservices.com www.googletagmanager.com www.tag4arm.com; style-src 'self' 'unsafe-inline' d3gj43804r9iyz.cloudfront.net fonts.googleapis.com p.typekit.net tagmanager.google.com use.fontawesome.com use.typekit.net; upgrade-insecure-requests;
etag: W/"886536cdf299fd460d79a129c1ea1236"
feature-policy: accelerometer 'none'; ambient-light-sensor 'none'; autoplay 'none'; battery 'none'; cross-origin-isolated 'none'; display-capture 'none'; document-domain 'none'; encrypted-media 'none'; execution-while-not-rendered 'none'; execution-while-out-of-viewport 'none'; geolocation 'none'; keyboard-map 'none'; midi 'none'; navigation-override 'none'; notifications 'none'; picture-in-picture 'none'; publickey-credentials-get 'none'; screen-wake-lock 'none'; usb 'none'; web-share 'none'; xr-spatial-tracking 'none'; push 'none'; microphone 'none'; magnetometer 'none'; gyroscope 'none'; speaker 'none'; vibrate 'none'; fullscreen 'none'; payment 'none'; camera 'self'; clipboard-write 'self'; clipboard-read 'self';
link: <https://d3gj43804r9iyz.cloudfront.net/master/0a158e534ec02bdeb5447d608e22f7579be0c0ca/webpack-cookie_consent-7c4c453c96ac83d994fd.css>; rel=preload; as=style; nopush,<https://d3gj43804r9iyz.cloudfront.net/master/0a158e534ec02bdeb5447d608e22f7579be0c0ca/application-829dc1c65ba46dbf7e59b2926f8714787953891005c3d81af39ab7e36dae0371.css>; rel=preload; as=style; nopush,<https://d3gj43804r9iyz.cloudfront.net/master/0a158e534ec02bdeb5447d608e22f7579be0c0ca/home-d4ea779bdab035ab29b4a8dc9cd20e15de68594b69de67b14b7bbbcf4a705a0a.js>; rel=preload; as=script; nopush,<https://d3gj43804r9iyz.cloudfront.net/master/0a158e534ec02bdeb5447d608e22f7579be0c0ca/webpack-home-0d604cd8453493d0c497.js>; rel=preload; as=script; crossorigin=anonymous; nopush,<https://d3gj43804r9iyz.cloudfront.net/master/0a158e534ec02bdeb5447d608e22f7579be0c0ca/webpack-vendors-f6390f4de0346fe978b8.js>; rel=preload; as=script; crossorigin=anonymous; nopush
permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), cross-origin-isolated=(), display-capture=(), document-domain=(), encrypted-media=(), execution-while-not-rendered=(), execution-while-out-of-viewport=(), geolocation=(), keyboard-map=(), midi=(), navigation-override=(), notifications=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), usb=(), web-share=(), xr-spatial-tracking=(), push=(), microphone=(), magnetometer=(), gyroscope=(), speaker=(), vibrate=(), fullscreen=(), payment=(), camera=(self), clipboard-write=(self), clipboard-read=(self)
referrer-policy: strict-origin-when-cross-origin
set-cookie: _session_id=5ed407cf95c27499e80d44b78c539c9f; path=/; expires=Mon, 03 Mar 2025 21:02:03 GMT; HttpOnly; secure
vary: Accept,Accept-Encoding
x-content-type-options: nosniff
x-frame-options: DENY
x-permitted-cross-domain-policies: none
x-request-id: ec4223e2-328e-49a7-acff-5ec45b25be9e
x-runtime: 0.075992
x-xss-protection: 0
strict-transport-security: max-age=31536000; includeSubDomains; preload=false