Gupy.io - Assai.gupy.io

content-type: text/html; charset=utf-8
cache-control: max-age=900
content-encoding: gzip
content-security-policy: default-src 'self' *.gupy.io *.googleapis.com *.google.com s3.amazonaws.com *.unpkg.com; connect-src 'self' blob: 'self' *.gupy.io *.my.salesforce-scrt.com data: gap: *; font-src 'self' data: *.gupy.io *.gstatic.com use.typekit.net *.bootstrapcdn.com *.hotjar.com *.getbeamer.com; frame-src 'self' *.hotjar.com *.googletagmanager.com *.zdassets.com *.salesforce.com *.my.salesforce-scrt.com *.salesforceliveagent.com service.force.com *.my.site.com *.unpkg.com cookies.pn.vg www.youtube.com *.getbeamer.com *.gupy.io *.google.com youtu.be *.hubspotusercontent40.net *.doubleclick.net blob: *.gupy.io *.facebook.com *.twitter.com *.linkedin.com; img-src 'self' blob: 'self' *.gupy.io data: *; object-src 'none'; prefetch-src 'self' *.gupy.io *.googleapis.com *.google.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: *.gupy.io *.google.com *.google-analytics.com *.hotjar.com *.getbeamer.com *.googleapis.com *.gstatic.com *.pn.vg cdnjs.cloudflare.com cdn.jsdelivr.net *.segment.com *.mxpnl.com *.heapanalytics.com *.cloudfront.net cdn.privacytools.com.br *.googletagmanager.com *.unpkg.com unpkg.com *.zdassets.com *.salesforce.com *.my.salesforce-scrt.com *.salesforceliveagent.com service.force.com *.my.site.com *.googleoptimize.com *.facebook.net *.handtalk.me *.linkedin.com *.twitter.com *.jquery.com *.cloudflare.com *.chameleon.io; style-src 'self' 'unsafe-inline' blob: *.googleapis.com *.gupy.io *.getbeamer.com cdn.privacytools.com.br *.cloudflare.com *.bootstrapcdn.com service.force.com *.my.site.com; media-src 'self' blob: *.zdassets.com s3.amazonaws.com *.salesforce.com *.my.salesforce-scrt.com *.salesforceliveagent.com service.force.com *.my.site.com; frame-ancestors 'self';
date: Mon, 26 May 2025 09:14:23 GMT
etag: "10m9ug013f9grqx"
permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(self), battery=(), camera=(self), cross-origin-isolated=(), display-capture=(), document-domain=(), encrypted-media=(), execution-while-not-rendered=(), execution-while-out-of-viewport=(), fullscreen=(), geolocation=(self), gyroscope=(), magnetometer=(), microphone=(self), midi=(), navigation-override=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(self), usb=(), web-share=(self), xr-spatial-tracking=(), clipboard-read=(self), clipboard-write=(self), gamepad=(), speaker-selection=(), conversion-measurement=(), focus-without-user-activation=(), hid=(), idle-detection=(), interest-cohort=(), serial=(), sync-script=(self), trust-token-redemption=(self), vertical-scroll=(self)
referrer-policy: strict-origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-powered-by: Next.js
x-xss-protection: 1; mode=block
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 fee2c2cb47f095ac830952a062a5dac6.cloudfront.net (CloudFront)
x-amz-cf-pop: ORD58-P8
x-amz-cf-id: Jb-AwjsQIYbtRF8U7ke8NgZj12PP39ZmTYgTRPJFgjj-UvxnJQwcSA==