Creditas.com.br Summary

Date: Tue, 01 Dec 2020 21:24:28 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __cfduid=d0c68344a4a1f70d028fca59b80e5525a1606857867; expires=Thu, 31-Dec-20 21:24:27 GMT; path=/; domain=.creditas.com; HttpOnly; SameSite=Lax; Secure
Last-Modified: Tue, 01 Dec 2020 19:31:34 GMT
Expires: Tue, 01 Dec 2020 21:34:28 GMT
Cache-Control: public, max-age=14400
Content-Security-Policy: default-src *.creditas.com; style-src 'self' https://heapanalytics.com *.google.com 'unsafe-inline' fonts.googleapis.com *.doubleclick.net tagmanager.google.com *.clicksign.com *.clicksign-demo.com; frame-src https://tag.rmp.rakuten.com/ https://d3u0jcwe5p7qrc.cloudfront.net https://cybba-bucket.s3.amazonaws.com https://*.cybba.solutions https://*.cybba.us code.jquery.com *.lomadee.com kindico.go2cloud.org rakuten.com linksynergy.com xg4ken.com nxtck.com https://www.meliuz.com.br https://secure.afilio.com.br https://track.omguk.com https://cptaffiliation.go2cloud.org *.youtube.com *.google.com *.facebook.net widget.clicksign-demo.com widget.clicksign.com *.criteo.com *.criteo.net *.snapengage.com *.doubleclick.net *.g.doubleclick.net *.hotjar.com *.hubspot.com *.hsforms.com *.hsforms.net b4bventures.go2cloud.org 'self'; font-src 'self' https://heapanalytics.com *.creditas.glassboxdigital.io *.creditas.com.br fonts.gstatic.com data: *.zopim.com *.hotjar.com; script-src 'self' https://d2rp1k1dldbai6.cloudfront.net/ https://tag.rmp.rakuten.com/ https://smartbmc.com.br https://*.rtb123.com https://d3u0jcwe5p7qrc.cloudfront.net https://cybba-bucket.s3.amazonaws.com https://*.cybba.solutions https://*.cybba.us https://storage.googleapis.com code.jquery.com *.lomadee.com kindico.go2cloud.org rakuten.com linksynergy.com xg4ken.com nxtck.com https://www.meliuz.com.br https://secure.afilio.com.br https://track.omguk.com https://cptaffiliation.go2cloud.org https://d1fc8wv8zag5ca.cloudfront.net https://assets.creditas.com https://js.hs-banner.com https://*.hsleadflows.net https://fullstory.com https://*.taboola.com https://www.linkedin.com https://sjs.bizographics.com https://cdn.heapanalytics.com 'unsafe-inline' https://heapanalytics.com 'unsafe-inline' https://px.ads.linkedin.com https://js.hs-scripts.com https://js.hs-analytics.net https://js.hscollectedforms.net https://*.glassboxcdn.com *.youtube.com https://static.zdassets.com https://ekr.zdassets.com https://*.marketingautomation.services *.hubspot.com *.hsforms.com *.hsforms.net https://tpc.googlesyndication.com/ *.creditas.com.br www.googletagmanager.com https://www.googletagmanager.com/amp tagmanager.google.com *.googleapis.com www.google-analytics.com duacdj7dg2phd.cloudfront.net connect.facebook.net *.inspectlet.com d37gvrvc0wt4s1.cloudfront.net 'unsafe-eval' 'unsafe-inline' *.googleadservices.com *.googleads.g.doubleclick.net *.google.com *.google.com.br *.doubleclick.net *.criteo.net *.criteo.com  *.snapengage.com *.bing.com ad.zanox.com *.zendesk.com *.zopim.com d335luupugsy2.cloudfront.net cdnjs.cloudflare.com *.hotjar.com https://cdn.ampproject.org b4bventures.go2cloud.org 'unsafe-eval' js-agent.newrelic.com bam.nr-data.net; connect-src 'self' *.creditas.io *.hubspot.com *.hsforms.com *.hsforms.net https://rs.fullstory.com wss://creditas.zendesk.com *.taboola.com https://heapanalytics.com https://*.glassboxdigital.io https://static.zdassets.com https://ekr.zdassets.com *.google.com *.google.com.br *.ipify.org *.loggly.com *.google-analytics.com *.bkfonline.com.br *.creditas.com.br devsnowplow.creditas.com.br:8443 *.inspectlet.com api.rollbar.com *.doubleclick.net *.zendesk.com wss://*.zopim.com *.zopim.com api.postmon.com.br *.facebook.com *.fbcdn.net *.facebook.net *.akamaihd.net ws://*.facebook.com:* *.akamaihd.net s3.amazonaws.com/rdstation-popups/ pageview-notify.rdstation.com.br www.rdstation.com.br ad.zanox.com *.hotjar.com wss://*.hotjar.com *.hotjar.io https://cdn.ampproject.org/ https://www.googletagmanager.com bam.nr-data.net; img-src * data: https://tag.rmp.rakuten.com/ https://heapanalytics.com https://www.meliuz.com.br https://*.rtb123.com https://smartbmc.com.br; child-src https://cdn.ampproject.org/  *.youtube.com *.google.com widget.clicksign-demo.com widget.clicksign.com *.creditas.com.br *.criteo.com *.criteo.net *.snapengage.com *.doubleclick.net *.g.doubleclick.net *.hotjar.com 'self'; worker-src blob: ; media-src 'self' https://static.zdassets.com; report-uri https://csp.creditas.com.br/csp-report;
Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Referrer-Policy: no-referrer-when-downgrade
CF-Cache-Status: REVALIDATED
cf-request-id: 06c1ca5a2e00000c094615c000000001
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 5fafe009ef7a0c09-AMS
x-encoded-content-encoding: gzip