Ofertomat.mx

date: Fri, 27 Mar 2026 00:38:27 GMT
content-type: text/html
location: https://www.ofertomat.mx/
server: cloudflare
x-content-type-options: nosniff
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
cf-cache-status: HIT
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=WHmcKOoB72A%2F1zcExStb4xIjmQ2%2FCM6hqOZ6vEoG1t7hKc1TXepZDk7zeey2WGYiBK4yo7So9am3Ohle%2Bu0MhvZIKBESTyfzpFnfpAp09CKdupQsSwX%2FIHMTLyDCr%2FTVM8L9F6IGLv%2FTy2I%3D"}]}
cf-ray: 9e2a55161dab37fd-FRA
alt-svc: h3=":443"; ma=86400

HTTP/2 200 
date: Fri, 27 Mar 2026 00:38:27 GMT
content-type: text/html; charset=UTF-8
server: cloudflare
x-powered-by: Hyperia
x-upstream-server: letakomat-frontend-all-c9dc9b64d-vmxw4
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
x-frame-options: DENY
x-content-type-options: nosniff
x-content-type-options: nosniff
strict-transport-security: max-age=10; includeSubDomains
feature-policy: accelerometer 'self'; ambient-light-sensor 'self'; autoplay 'self'; battery 'self'; camera 'self'; display-capture 'self'; document-domain 'self'; encrypted-media 'self'; fullscreen 'self'; geolocation 'self'; gyroscope 'self'; layout-animations 'self'; magnetometer 'self'; microphone 'self'; midi 'self'; oversized-images 'self'; payment 'self'; picture-in-picture *; publickey-credentials-get 'self'; sync-xhr 'self'; usb 'self'; wake-lock 'self'; xr-spatial-tracking 'self'
permissions-policy: accelerometer=(self), ambient-light-sensor=(self), autoplay=(self), battery=(self), camera=(self), display-capture=(self), document-domain=(self), encrypted-media=(self), fullscreen=(self), geolocation=(self), gyroscope=(self), layout-animations=(self), magnetometer=(self), microphone=(self), midi=(self), oversized-images=(self), payment=(self), picture-in-picture=(*), publickey-credentials-get=(self), sync-xhr=(self), usb=(self), wake-lock=(self), xr-spatial-tracking=(self)
referrer-policy: strict-origin-when-cross-origin
x-xss-protection: 1; mode=block; report=https://hyperia.report-uri.com
report-to: []
content-security-policy: default-src 'self' 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' *; connect-src 'self' 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' *; font-src 'self' 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' *; frame-src 'self' *.cloudflare.com 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' blob: *; img-src 'self' 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' * data:; manifest-src 'self' 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' *; object-src 'self' 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' *; script-src 'self' *.cloudflare.com 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' *; style-src 'self' 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' *; media-src 'self' 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' *; form-action 'self' 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' *; worker-src 'self' 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' * blob:; report-uri https://hyperia.report-uri.com; block-all-mixed-content; upgrade-insecure-requests
link: </ads-static-js/?t=_1772720510>; rel="preload"; as="script"
link: </js/joined/necessary.min.js?t=4b1a51cce28800c4a4fd2dcab3e29a79>; rel="preload"; as="script"
access-control-allow-credentials: true
vary: Accept-Encoding
cf-cache-status: HIT
last-modified: Fri, 27 Mar 2026 00:25:32 GMT
content-encoding: br
cf-ray: 9e2a551748efd2d6-FRA
alt-svc: h3=":443"; ma=86400