HTTP/1.1 200 OK
Cache-Control: private
Content-Type: text/html; charset=utf-8
content-security-policy: default-src *.santalolla.com.br 'unsafe-inline' 'unsafe-eval' 'self' rakuten.112.2o7.net rat.rakuten.co.jp *.rakuten.com.br *.rakuten-imagens.com.br wss://node.rakuten.com.br 2400020.r.msn.com 677-ct.c3tag.com a.ichiba.jp.rakuten-static.com ad.yieldmanager.com ads.yahoo.com ajax.googleapis.com az416426.vo.msecnd.net cdn.cxense.com cdnjs.cloudflare.com comcluster.cxense.com connect.facebook.net dc.services.visualstudio.com dis.us.criteo.com fbcdn-profile-a.akamaihd.net fbcdn- sphotos-b-a.akamaihd.net fbstatic-a.akamaihd.net googleads.g.doubleclick.net i.simpli.fi oas.adservingml.com onsite.chaordicsystems.com pixel.mathtag.com pixel.rubiconproject.com rakutenbrazil.tt.omtrdc.net *.pingdom.net rum- static.pingdom.net s-static.ak.facebook.com scdn.cxense.com secure.adnxs.com scomcluster.cxense.com secure.adnxs.com securetags.w55c.net selo.clearsale.com.br srv1.wa.marketingsolutions.yahoo.com *.yahoo.com ssl.google-analytics.com sslwidget.criteo.com static.ak.facebook.com static.chaordicsystems.com static.criteo.net tags.mediaforge.com tracking.hotwords.com.br widget.criteo.com *.facebook.com *.google-analytics.com *.google.com *.googleadservices.com *.google.com.br *.googleadservices.com *.googletagmanager.com *.pubmatic.com *.adnxs.com *.openx.net *.casalemedia.com *.btrll.com 360yield.com *.bluekai.com *.exelator.com *.twitter.com *.jsuol.com.br *.uol.com.br *.dynad.net *.rakuten.com *.veinteractive.com *.masterpass.com *.koin.com.br *.qa.koin.in *.doubleclick.net *.clearsale.com.br *.pinterest.com *.tumblr.com *.mozilla.net *.btg360.com.br mastertag.efiliacao.com.br *.amazonaws.com *.tolvnow.com fonts.googleapis.com secure.comodo.net widgets.getsitecontrol.com seal.verisign.com trustedcompany.com fonts.gstatic.com *.facebook.net *.cartstack.com *.cartstack.com.br *.cartstack.cloud resultsdemo.com resultspage.com sli-systems.com cfe.nz *.neoassist.com static.criteo.net selo.siteblindado.com a248.e.akamai.net *.paypal.com.br *.paypal.com *.smartcampaign.com.br institucional.luizabarcelos.com.br maps.googleapis.com cryptojs.altervista.org metrica.yandex.com cityadspix.com cityviplink.com x.cnt.my secure.comodo.com prntscr.com meliuz.com.br *.rmtag.com certificado.confianet.com.br *.yandex.com.br *.yandex.ru *.soclminer.com.br *.ebit.com.br ebitempresa.com.br plugins.soclminer.com.br *.sback.tech *.richrelevance.com *.clerk.io *.netdna-ssl.com *.igodigital.com *.trustsign.com.br *.retargeter.com.br *.efiliacao.com.br *.zopim.com *.zanox.com *.olark.com *.onesignal.com *.taboola.com *.shoptarget.com.br *.shopback.com.br *.godaddy.com *.siteblindado.com *.jquery.com *.shopconvert.com.br *.youtube.com r.r10s.jp *.rakutenpayments.com.br *.rakutenpay.com.br *.newrelic.com *.meiosdepagamentobradesco.com.br meiosdepagamentobradesco.com.br *.online-metrix.net *.online-metrix.net *.use.fontawesome.com/ *.fontawesome.com/ https://use.fontawesome.com/ https://netdna.bootstrapcdn.com/ *.netdna.bootstrapcdn.com/ *.bootstrapcdn.com/ https://secure.trust-provider.com/ *.secure.trust-provider.com/ *.trust-provider.com/ https://faq.directtalk.com.br/ *.faq.directtalk.com.br/ *.directtalk.com.br/ *.neowaydigital.com.br; upgrade-insecure-requests; img-src * data:;
X-Frame-Options: SAMEORIGIN
Access-Control-Allow-Origin: http://www.santalolla.com.br
Set-Cookie: RedirectByAgentDisabled=true; path=/
Set-Cookie: ASP.NET_SessionId=2tlttkfezpdleqzjr2reyerw; path=/; HttpOnly
Set-Cookie: UserSession=K4w3lRbmf/DjDbAA/t4SOQmVSrFJ6zP5UqEm0o4s4VaR9kTAwQmFwJFdq9GzxDyd; path=/; HttpOnly
Set-Cookie: BasketCode=d3xjpgo+WzvVZ41yH/gBntwhJzXEr5Fw1WeNch/4AZ7UGpa3xyzwPnIgAr0dB92BDmOaUmFccXDUGiHfpT9kUB9zn3JsV31eAFQ/PXmSIqZ9vruzUVjlaqn44L7WKGBdiqzfJvyVf+nrsNAvyT/ee9PQHRGSydhw; domain=santalolla.com.br; expires=Mon, 29-Jul-2019 20:45:54 GMT; path=/; HttpOnly
Set-Cookie: RedirectByAgentDisabled=true; path=/
Set-Cookie: ASP.NET_SessionId=2tlttkfezpdleqzjr2reyerw; path=/; HttpOnly
Set-Cookie: UserSession=K4w3lRbmf/DjDbAA/t4SOQmVSrFJ6zP5UqEm0o4s4VaR9kTAwQmFwJFdq9GzxDyd; path=/; HttpOnly
Set-Cookie: BasketCode=d3xjpgo+WzvVZ41yH/gBntwhJzXEr5Fw1WeNch/4AZ7UGpa3xyzwPnIgAr0dB92BDmOaUmFccXDUGiHfpT9kUB9zn3JsV31eAFQ/PXmSIqZ9vruzUVjlaqn44L7WKGBdiqzfJvyVf+nrsNAvyT/ee9PQHRGSydhw; domain=santalolla.com.br; expires=Mon, 29-Jul-2019 20:45:54 GMT; path=/; HttpOnly
Set-Cookie: __AntiXsrfToken=6aed6128e53346d6b120f57b61182b14; path=/; HttpOnly
Set-Cookie: _mall_uuid=66b5adeb-5302-4ac3-bda9-00c22981fb50; domain=.santalolla.com.br; expires=Fri, 22-Jul-2039 20:45:54 GMT; path=/
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff 
Date: Mon, 22 Jul 2019 20:45:54 GMT
Content-Length: 130512