HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Date: Tue, 22 Dec 2020 23:50:12 GMT
Link: <https://iron.fit/>; rel=shortlink
Last-Modified: Tue, 22 Dec 2020 23:50:12 GMT
Expires: Wed, 23 Dec 2020 00:50:12 GMT
Pragma: public
Cache-Control: max-age=3600, public
X-UA-Compatible: IE=edge
Referrer-Policy: no-referrer-when-downgrade
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-XSS-Protection: 1; mode=block
Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' http://iron.fit *.google.com *.google.com.br *.cloudfront.net *.googletagmanager.com *.google-analytics.com *.hotjar.com *.gstatic.com *.typekit.net *.youtube.com *.ytimg.com *.linkedin.com *.ampproject.org *.w3-edge.com *.leadfeeder.com *.googleadservices.com *.doubleclick.net; style-src 'self' 'unsafe-inline' http://iron.fit *.googleapis.com *.google.com; img-src 'self' data: http://iron.fit *.google-analytics.com *.doubleclick.net *.google.com *.google.com.br *.typekit.net *.gravatar.com *.ithemes.com *.lfeeder.com; font-src 'self' data: *.gstatic.com *.typekit.net https://script.hotjar.com; frame-src 'self' *.google.com *.hotjar.com *.youtube.com *.youtube.com.br *.linkedin.com https://bid.g.doubleclick.net; connect-src 'self' wss://* *.rdstation.com.br *.hotjar.com *.hotjar.io *.yoast.com yoast.com https://www.google-analytics.com *.doubleclick.net;
Feature-Policy: geolocation 'none'; midi 'none'; notifications 'none'; push 'self'; sync-xhr 'none'; microphone 'none'; camera 'none'; magnetometer 'none'; gyroscope 'none'; speaker 'none'; vibrate 'self'; fullscreen 'self'; payment 'self'
Strict-Transport-Security: max-age=31536000; includeSubDomains
Referrer-Policy: no-referrer-when-downgrade
ETag: "e29a8ad9070b14b65f236ff2ab0e86af"
X-Cache: Miss from cloudfront
Via: 1.1 f3debe815c4aaee72e83dd7c98a4a7a8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: DFW53-C1
X-Amz-Cf-Id: 9uAtrintJmiCMGVjoLNcyQ6Gi5VjvLeLMAA7WvAFrt0R0NECmY3ROw==