HTTP/1.1 200 OK
Server: nginx
Date: Wed, 17 Jun 2020 14:48:14 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 87296
Last-Modified: Wed, 17 Jun 2020 13:51:14 GMT
Connection: keep-alive
Vary: Accept-Encoding
ETag: "5eea1fd2-15500"
Expires: Wed, 17 Jun 2020 14:51:14 GMT
Cache-Control: max-age=180
Vary: Accept-Encoding, Cookie
Pragma: public
Cache-Control: public
Strict-Transport-Security: max-age=31536000; includeSubdomains; preload
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Referrer-Policy: strict-origin-when-cross-origin
Feature-Policy: accelerometer 'none'; camera 'none'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; payment 'none'; usb 'none'
Content-Security-Policy: default-src https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://unpkg.com *.devplayground.com.br *.bizographics.com *.rawgit.com *.googleapis.com *.unpkg.com *.youtube.com *.googletagmanager.com *.googleadservices.com *.google.com *.gstatic.com *.google-analytics.com *.doubleclick.net *.ytimg.com *.facebook.net *.cloudfront.net *.rdstation.com.br *.w3-edge.com *.reclameaqui.com.br *.ampproject.org *.novahaus.com.br *.shoptarget.com.br *.shopback.net *.shopconvert.com.br *.voxus.com.br targeting.voxus.tv *.omguk.com *.hotjar.com snap.licdn.com; connect-src 'self' data: https://freegeoip.app *.plyr.io https://noembed.com *.devplayground.com.br *.googleapis.com *.rdstation.com.br *.ampproject.org *.shoptarget.com.br *.linximpulse.net *.retargeter.com.br *.shopconvert.com.br ckies.net *.shopback.net *.viacep.com.br viacep.com.br *.voxus.tv api.ipify.org *.loggly.com *.hotjar.com wss://*.hotjar.com *.hotjar.io *.facebook.com www.google-analytics.com; img-src 'self' data: *.ytimg.com *.devplayground.com.br *.facebook.com *.google-analytics.com *.google.com *.google.com.br *.doubleclick.net *.gravatar.com *.w.org *.linkedin.com *.shopback.net *.adsymptotic.com cliente.linx.com.br *.adnxs.com smartbmc.com.br *.smartbmc.com.br *.googletagmanager.com; style-src 'self' 'unsafe-inline' *.devplayground.com.br *.googleapis.com *.google.com *.shopback.net; font-src 'self' data: *.devplayground.com.br *.gstatic.com; worker-src https: blob:
Accept-Ranges: bytes