HTTP/1.1 200 OK
Date: Wed, 05 Jun 2019 21:57:24 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __cfduid=dfba81bfbccc4602a52522d175f8efd461559771843; expires=Thu, 04-Jun-20 21:57:23 GMT; path=/; domain=.futebolcard.com; HttpOnly
Vary: Accept-Encoding
Set-Cookie: PHPSESSID=df4ejsehs871t3vlrq51b3mf9v; path=/; secure; HttpOnly
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval' *.smartarena.pt services.idpalmeiras.com.br  paypalobjects.com  *.paypalobjects.com  www.gstatic.com  http://*.neoassist.com/socket.io/socket.io.js  googleads.g.doubleclick.net http://*.futebolcard.com/lib/default/js/msdropdown/jquery.dd.min.js https://pagead2.googlesyndication.com/pub-config/r20160913/ca-pub-8650409797118377.js http://*.futebolcard.com/lib/default/js/msdropdown/jquery.dd.min.js connect.facebook.net  *.facebook.com *.visa.com  http://pagead2.googlesyndication.com/pagead/js/r20170626/r20170110/show_ads_impl.js http://pagead2.googlesyndication.com/pagead/js/r20170629/r20170110/show_ads_impl.js https://www.google-analytics.com/analytics.js *.atendimen.to http://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js https://www.google.com/recaptcha/api.js https://www.paypalobjects.com/api/checkout.js *.googlesyndication.com https://ajax.cloudflare.com/ adservice.google.com adservice.google.com.br; style-src 'self' 'unsafe-inline'; object-src 'self' thm.visa.com; default-src 'self'; frame-src 'self' avantipalmeiras.neoassist.com futebolcard.neoassist.com https://www.google.com/recaptcha/api2/ secure.checkout.visa.com thm.visa.com https://www.youtube.com/embed/T4mozqp0lQQ https://www.youtube.com/embed/pDDuLtDmTKQ http://shortem.com/w/adpyt http://shortem.com/w/adpyt/ googleads.g.doubleclick.net paypal.com *.paypal.com static.ak.facebook.com s-static.ak.facebook.com www.facebook.com staticxx.facebook.com; worker-src 'self' https://avantipalmeiras.neoassist.com/; img-src 'self' https://scontent.xx.fbcdn.net http://cdn-01.neoassist.com/ www.staticv.me futebolcard.neoassist.com *.futebolcard.com s3-sa-east-1.amazonaws.com cdn.atendimen.to *.doubleclick.net rt-c-sp-01-02.neoassist.com shield.sitelock.com secure.checkout.visa.com assets.secure.checkout.visa.com www.google-analytics.com www.facebook.com http://neoassist.com/clients/neoassist/images/ https://neoassist.com/clients/neoassist/images/ https://*.neoassist.com/clients/neoassist/images/darkbg.png data:; connect-src 'self' https://pagead2.googlesyndication.com wss://*.neoassist.com/socket.io/ futebolcard.neoassist.com paypal.com *.paypal.com https://googleads.g.doubleclick.net/ *.facebook.com; child-src 'self' *.facebook.com; media-src 'self'; font-src 'self';
Strict-Transport-Security: max-age=63072000; includeSubdomains;
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 4e2566e679287af8-MCI