HTTP/1.1 200 OK
Cache-Control: no-store, no-cache, must-revalidate
Content-Security-Policy: default-src 'none';  font-src 'self' *.bobsfa.com.br *.cdn77.org fonts.gstatic.com *.bootstrapcdn.com data: *.fontawesome.com; style-src 'unsafe-inline' 'self' *.bobsfa.com.br *.cdn77.org fonts.googleapis.com *.bootstrapcdn.com *.google.com cdnjs.cloudflare.com *.fontawesome.com; connect-src 'self' *.bobs.com.br *.bobsfa.com.br *.addthis.com *.hotjar.com wss://*.hotjar.com sentry.io *.facebook.com *.loggly.com *.ipify.org *.netdna-ssl.com; object-src 'self'; child-src 'self' *.google.com rpm.newrelic.com *.addthis.com *.hotjar.com *.facebook.com *.facebook.net  *.reclameaqui.com.br *.googletagmanager.com *.voxus.tv *.doubleclick.net *.uptimerobot.com *.youtube.com; img-src data: 'self' *.bobs.com.br *.bobsfa.com.br *.cdn77.org *.google.com.br *.google.com maps.googleapis.com *.gstatic.com  *.twimg.com *.google-analytics.com *.doubleclick.net *.facebook.com t.co *.adnxs.com  *.googletagmanager.com api.qrserver.com; media-src data: 'self' *.bobsfa.com.br *.cdn77.org ; frame-ancestors 'self' *.facebook.com *.hotjar.com; script-src 'unsafe-eval' 'unsafe-inline' 'self' *.bobsfa.com.br *.bobs.com.br *.cdn77.org *.reclameaqui.com.br *.google-analytics.com  *.googleapis.com *.google.com *.gstatic.com www.googletagmanager.com www.googleadservices.com *.jquery.com  cdnjs.cloudflare.com *.sentry-cdn.com *.addthis.com   *.bootstrapcdn.com *.facebook.net *.facebook.com *.hotjar.com *.twitter.com *.ads-twitter.com *.crazyegg.com  *.newrelic.com *.nr-data.net *.reclameaqui.com.br cdn.smart.voxus.com.br *.netdna-ssl.com;manifest-src 'self';
Content-Type: text/html; charset=UTF-8
Date: Fri, 17 May 2019 16:06:11 GMT
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Pragma: no-cache
Server: Apache/2.4.34 (Amazon) OpenSSL/1.0.2k-fips PHP/7.1.17
Set-Cookie: BFC=uvgkrh56r0eo5es3dlvc5jd4ov; path=/
Strict-Transport-Security: max-age=63072000; includeSubdomains;
Vary: Accept-Encoding
X-Powered-By: PHP/7.1.17
transfer-encoding: chunked
Connection: keep-alive