HTTP/1.1 200 OK
Date: Tue, 18 Jun 2019 15:33:55 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 132605
Connection: keep-alive
Server: nginx/1.14.0 (Ubuntu)
Vary: Accept-Encoding
Vary: Accept-Encoding
Content-Language: pt
ETag: W/"ad26b4fd79e448480cf6ee3752296f14"
Cache-Control: max-age=0, private, must-revalidate
Set-Cookie: _camaloon_cookies_accept=true; path=/; expires=Sat, 18 Jun 2039 16:33:55 -0000; secure; HttpOnly; SameSite=Lax
Set-Cookie: first_visit_mkt_code=%7B%22code%22%3A%227EkCAAcMQLZQ5je2arnBZk8L1Qr_BzC3o8t-W7YVkZGjQ-zeAl0H8UwYwSrBFwg6qlmyJzgbwsGUBzmvyhSgjnVHKvfL84gYol6hxz5YxE0z65ZphoNNtYkpFn7EpfzSG8_USSx5_-bZsi7mpYlprRRqPZlVTzABAUr1aIpXQ3IumNKqsIa4l36xcPQWAZCXecVSELraCqgMAtmUGkxcTw%3D%3D%22%2C%22created_at%22%3A%222019-06-18T15%3A33%3A55Z%22%7D; path=/; expires=Thu, 18 Jun 2020 15:33:55 -0000; secure; HttpOnly; SameSite=Lax
Set-Cookie: last_visit_mkt_code=%7B%22code%22%3A%227EkCAAcMQLZQ5je2arnBZk8L1Qr_BzC3o8t-W7YVkZGjQ-zeAl0H8UwYwSrBFwg6qlmyJzgbwsGUBzmvyhSgjnVHKvfL84gYol6hxz5YxE0z65ZphoNNtYkpFn7EpfzSG8_USSx5_-bZsi7mpYlprRRqPZlVTzABAUr1aIpXQ3IumNKqsIa4l36xcPQWAZCXecVSELraCqgMAtmUGkxcTw%3D%3D%22%2C%22created_at%22%3A%222019-06-18T15%3A33%3A55Z%22%2C%22expires_at%22%3A%222019-06-18T18%3A33%3A55Z%22%7D; path=/; expires=Thu, 18 Jun 2020 15:33:55 -0000; secure; HttpOnly; SameSite=Lax
Set-Cookie: last_period_visit_mkt_code=%7B%22code%22%3A%227EkCAAcMQLZQ5je2arnBZk8L1Qr_BzC3o8t-W7YVkZGjQ-zeAl0H8UwYwSrBFwg6qlmyJzgbwsGUBzmvyhSgjnVHKvfL84gYol6hxz5YxE0z65ZphoNNtYkpFn7EpfzSG8_USSx5_-bZsi7mpYlprRRqPZlVTzABAUr1aIpXQ3IumNKqsIa4l36xcPQWAZCXecVSELraCqgMAtmUGkxcTw%3D%3D%22%2C%22created_at%22%3A%222019-06-18T15%3A33%3A55Z%22%2C%22expires_at%22%3A%222019-07-02T15%3A33%3A55Z%22%7D; path=/; expires=Thu, 18 Jun 2020 15:33:55 -0000; secure; HttpOnly; SameSite=Lax
Set-Cookie: _camaloon_session=3n%2B4o0jJQ4lbO9LZZplDBR3t2xp8rG5I4bTY6hkNVB%2FINokLoWE861tcuAROnt6AxP5yBJcjnN%2BffAHrib2aUOZa7ZtCyXc9KfeUskTtTD0QX%2FFktWCzxBUg18tXGKa5dhmSlzf1r3Yn%2BpvQuosoO8EVxe1NQcmmk6RXB05jKva7euOY%2BiMlOBTQSm7QtgP%2FzQsGP%2Fnr8pn2NY8AXXxOUMLXNI5S5fpxjaS1p0MwpxFREscJZSBSFqnMiBETrq%2FkGLVraC6KOs0GkXRLtPrHj4NyadNIVA%2BQiieOqD%2F1BB%2FB4GyYv25O0rP2h13y%2FDs44mIDRK0%2BN0ybV2%2FoBhjAWI9%2BpO4Rxl%2FLbdk6mxICpIsom1wJTnQL%2Fa8Dcn0%2Fe6xkLxSImhbfLyP5N7AyVN4gWv6xIkg9Q1pvbMEt5D56BZahJrYyC%2FRP5TydJailSu1FF%2BvZ4Ncb8uwqScIxkVLTrQUgU12dOTUCFzu%2FQa%2BPWPCZfZDb--uQjrci34%2F%2BLHBKkH--mbG%2BxSG65rbvLhmeuDB2ag%3D%3D; path=/; HttpOnly; secure; SameSite=Lax
X-Request-Id: ae8a87a2-fe3a-4e92-bc1f-208d489e928c
X-Runtime: 0.167232
Strict-Transport-Security: max-age=631138519
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Download-Options: noopen
X-Permitted-Cross-Domain-Policies: none
Referrer-Policy: origin-when-cross-origin
Content-Security-Policy: default-src https: 'self'; base-uri 'self' optimize.google.com; block-all-mixed-content; connect-src 'self' *.braintreegateway.com camaloon-web.s3-eu-west-1.amazonaws.com *.camaloon.media *.cloudfront.net *.doubleclick.net www.facebook.com *.fullstory.com *.google-analytics.com *.hotjar.com *.mstrlytcs.com *.opmnstr.com *.optmstr.com *.optmnstr.com sentry.io *.braintree-api.com wss://*.hotjar.com; font-src 'self' data: *.fontawesome.com *.gstatic.com *.hotjar.com; form-action 'self' connect.facebook.net www.facebook.com *.salesforceliveagent.com; frame-ancestors 'none'; frame-src 'self' *.braintreegateway.com *.criteo.com *.facebook.com *.hotjar.com *.kaptcha.com *.livechatinc.com optimize.google.com *.reviews.io *.stripe.com *.youtube.com; img-src data: blob: *; media-src 'self'; object-src 'self'; plugin-types application/pdf; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.ads-twitter.com *.bing.com *.cloudflare.com *.criteo.net *.criteo.com *.emsecure.net *.facebook.net fullstory.com *.googleadservices.com *.google-analytics.com *.gstatic.com *.googletagmanager.com *.google.com *.googleapis.com *.hotjar.com *.livechatinc.com *.newrelic.com *.nr-data.net *.reviews.io *.salesforceliveagent.com *.stripe.com *.sentry-cdn.com *.opmnstr.com *.optnmnstr.com *.optmstr.com 1191.xg4ken.com; style-src 'unsafe-inline' 'self' *.fontawesome.com *.google.com *.googleapis.com *.gstatic.com; upgrade-insecure-requests