HTTP/1.1 200 OK
Date: Mon, 29 Jun 2020 17:13:34 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __cfduid=d8dfa6ba45adcbdf9de175707229dac821593450814; expires=Wed, 29-Jul-20 17:13:34 GMT; path=/; domain=.creditas.com; HttpOnly; SameSite=Lax; Secure
Last-Modified: Fri, 26 Jun 2020 18:01:12 GMT
Expires: Mon, 29 Jun 2020 17:23:34 GMT
Cache-Control: max-age=600
Content-Security-Policy: default-src *.creditas.com; style-src 'self' https://heapanalytics.com *.google.com *.creditas.com.br 'unsafe-inline' fonts.googleapis.com *.doubleclick.net tagmanager.google.com *.clicksign.com *.clicksign-demo.com plugins.soclminer.com.br; frame-src *.youtube.com *.google.com *.facebook.net targeting.voxus.tv widget.clicksign-demo.com widget.clicksign.com *.creditas.com.br *.criteo.com *.criteo.net *.snapengage.com *.doubleclick.net *.g.doubleclick.net *.soclminer.com.br *.hotjar.com *.hubspot.com *.hsforms.com *.hsforms.net 'self'; font-src 'self' https://heapanalytics.com *.creditas.glassboxdigital.io *.creditas.com.br fonts.gstatic.com data: *.zopim.com *.hotjar.com; script-src 'self' https://d1fc8wv8zag5ca.cloudfront.net https://assets.creditas.com https://js.hs-banner.com https://*.hsleadflows.net https://fullstory.com https://*.taboola.com https://*.outbrain.com https://www.linkedin.com https://sjs.bizographics.com https://cdn.heapanalytics.com 'unsafe-inline' https://heapanalytics.com 'unsafe-inline' https://px.ads.linkedin.com https://js.hs-scripts.com https://js.hs-analytics.net https://js.hscollectedforms.net https://*.glassboxcdn.com *.ytimg.com *.youtube.com https://static.zdassets.com https://ekr.zdassets.com voxus-targeting-voxusmidia.netdna-ssl.com *.voxus.com.br https://*.marketingautomation.services *.hubspot.com *.hsforms.com *.hsforms.net https://tpc.googlesyndication.com/ *.creditas.com.br www.googletagmanager.com https://www.googletagmanager.com/amp tagmanager.google.com www.googleadservices.com *.googleapis.com www.google-analytics.com duacdj7dg2phd.cloudfront.net connect.facebook.net *.inspectlet.com d37gvrvc0wt4s1.cloudfront.net 'unsafe-eval' 'unsafe-inline' *.googleadservices.com *.googleads.g.doubleclick.net *.google.com *.google.com.br *.doubleclick.net *.criteo.net *.criteo.com *.shoptarget.com.br *.sback.tech *.shopconvert.com.br *.snapengage.com *.shopback.net *.metaffiliation.com *.bing.com ad.zanox.com *.zendesk.com wss://*.zopim.com *.zopim.com d335luupugsy2.cloudfront.net cdnjs.cloudflare.com plugins.soclminer.com.br *.hotjar.com https://cdn.ampproject.org 'unsafe-eval' js-agent.newrelic.com bam.nr-data.net; connect-src 'self' *.creditas.io *.hubspot.com *.hsforms.com *.hsforms.net https://rs.fullstory.com wss://creditas.zendesk.com *.taboola.com https://heapanalytics.com https://*.glassboxdigital.io https://static.zdassets.com https://ekr.zdassets.com *.google.com *.google.com.br *.voxus.tv *.voxus.com.br *.ipify.org *.loggly.com *.google-analytics.com targeting-version-voxusmidia.netdna-ssl.com *.bkfonline.com.br *.creditas.com.br devsnowplow.creditas.com.br:8443 *.inspectlet.com wss://*.inspectlet.com api.rollbar.com *.doubleclick.net *.shoptarget.com.br *.retargeter.com.br *.sback.tech *.shopconvert.com.br *.shopback.net *.zendesk.com wss://*.zopim.com *.zopim.com api.postmon.com.br *.facebook.com *.facebook.com *.fbcdn.net *.fbcdn.net *.facebook.net *.facebook.net *.akamaihd.net ws://*.facebook.com:* *.akamaihd.net s3.amazonaws.com/rdstation-popups/ pageview-notify.rdstation.com.br www.rdstation.com.br ad.zanox.com api.soclminer.com.br *.hotjar.com wss://*.hotjar.com *.hotjar.io https://cdn.ampproject.org/ https://www.googletagmanager.com bam.nr-data.net; img-src * data: https://heapanalytics.com; child-src https://cdn.ampproject.org/ http://staging.creditas.com.br https://staging.creditas.com.br *.youtube.com *.google.com widget.clicksign-demo.com widget.clicksign.com *.creditas.com.br *.criteo.com *.criteo.net *.snapengage.com *.doubleclick.net *.g.doubleclick.net https://staging.creditas.com https://staging.creditas.com.br *.soclminer.com.br *.hotjar.com 'self'; worker-src blob: ; media-src 'self' https://static.zdassets.com; report-uri https://csp.creditas.com.br/csp-report;
Strict-Transport-Security: max-age=63072000; includeSubdomains; preload
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Referrer-Policy: no-referrer-when-downgrade
Cache-Control: public
Accept-Ranges: bytes
CF-Cache-Status: DYNAMIC
cf-request-id: 03a2aaf2d90000fbb4553d5200000001
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 5ab147648bcffbb4-MCI