Supermoney.ca

date: Tue, 02 Jun 2026 22:53:03 GMT
content-length: 0
location: https://supermoney.com
apigw-requestid: eWvAciUoPHcEM1Q=

HTTP/2 301 
date: Tue, 02 Jun 2026 22:53:03 GMT
content-type: text/html; charset=UTF-8
content-length: 167
location: https://www.supermoney.com/
strict-transport-security: max-age=31536000; includeSubDomains; preload
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=fd0vutE0H0MpG3Tx3K32CssrZiuRHs4%2B%2BSW5LmoazPanoU5scOXo7Nm2hYBecoioWcEn1aXEDSeX87FHxAYhokZ%2B1rAAGDXU4K40pnF1kQGAEbhd1HCWBGaiPFRs%2BFDm"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
expect-ct: max-age=86400, enforce
referrer-policy: no-referrer-when-downgrade
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 0
x-permitted-cross-domain-policies: none
cross-origin-opener-policy: same-origin
content-security-policy: default-src 'self' *.supermoney.com;  base-uri 'self' *.supermoney.com;  script-src 'self' 'report-sample' 'unsafe-inline' 'unsafe-eval' *.supermoney.com   bat.bing.com   pendo-io-static.storage.googleapis.com   pendo-static-5083953083187200.storage.googleapis.com   maxcdn.bootstrapcdn.com   js5.invoca.net   resources.tunecdn.com   widget-mediator.zopim.com   static.zdassets.com   *.datadoghq-browser-agent.com   *.cloudflare.com   *.googleapis.com   *.stripe.com   *.pendo.io   *.js.stripe.com   *.clarity.ms   *.clickcease.com   *.cloudflareinsights.com   *.doubleclick.net   *.facebook.net   *.google.com   *.google-analytics.com   *.googleadservices.com   *.googletagservices.com   *.googletagmanager.com   *.hotjar.com   *.infogram.com   *.lidstatic.com   *.pinimg.com   *.pinterest.com   *.posthog.com   *.quora.com   *.ringrevenue.com   *.taboola.com   *.tableau.com   *.termly.io   *.trustpilot.com;  style-src 'self' 'report-sample' 'unsafe-inline' *.supermoney.com https: data:;    object-src 'self' *.supermoney.com;  connect-src 'self' *.supermoney.com   api.feedback.us.pendo.io   pendo-static-5083953083187200.storage.googleapis.com   logs.browser-intake-datadoghq.com   browser-http-intake.logs.datadoghq.com   bat.bing.com   bat.bing.net   cognito-identity.us-west-2.amazonaws.com   pinpoint.us-west-2.amazonaws.com   static.zdassets.com   tune.zendesk.com   ekr.zdassets.com   wss://*.hotjar.com   wss://chat.supermoney.com   *.pendo.io   *.termly.io   *.quora.com   *.stripe.com   *.hasoffers.com   *.bugsnag.com   *.clarity.ms   *.clickcease.com   *.doubleclick.net   *.g.doubleclick.net   *.google-analytics.com   *.google.com   *.google.co.uk   *.googleadservices.com   *.googletagmanager.com   *.googlesyndication.com   *.googleapis.com   *.gstatic.com   *.hotjar.com   *.hotjar.io   *.intentiq.com   *.leadid.com   *.pinterest.com   *.posthog.com   *.quora.com   *.taboola.com   *.mapbox.com   *.tiles.mapbox.com   *.trustpilot.com;  font-src * data:;  frame-src 'self'   d2m2wsoho8qq12.cloudfront.net   tsdtocl.com   *.cloudflare.com   *.pendo.io   *.stripe.com   *.moneykit.com   *.js.stripe.com   *.doubleclick.net   *.googletagmanager.com   *.infogram.com   *.leadid.com   *.pinterest.com   *.supermoney.com   *.tableau.com   *.taboola.com   *.trustpilot.com   *.youtube.com   *.go2cloud.org;  img-src * data:;  manifest-src 'self' *.supermoney.com;  media-src 'self' data: https:   d2m2wsoho8qq12.cloudfront.net;  worker-src 'self' *.supermoney.com blob: data:;  form-action 'self' *.supermoney.com *.leadid.com;  frame-ancestors *;  report-uri https://csp-report.supermoney.com;
server: cloudflare
cf-ray: a05a08320c019214-FRA
alt-svc: h3=":443"; ma=86400

HTTP/2 403 
date: Tue, 02 Jun 2026 22:53:03 GMT
content-type: text/html; charset=UTF-8
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cf-mitigated: challenge
content-security-policy: default-src 'none'; script-src 'nonce-0yp9taWPmPRK7YHTzJmknr' 'unsafe-eval' https://challenges.cloudflare.com; script-src-attr 'none'; style-src 'unsafe-inline'; img-src 'self' https://challenges.cloudflare.com; connect-src 'self' https://challenges.cloudflare.com; frame-src 'self' https://challenges.cloudflare.com blob:; child-src 'self' https://challenges.cloudflare.com blob:; worker-src blob:; form-action http: https:; base-uri 'self'
server: cloudflare
critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
origin-agent-cluster: ?1
permissions-policy: accelerometer=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=(),xr-spatial-tracking=(self)
referrer-policy: same-origin
server-timing: chlray;desc="a05a083259efd394"
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=NQq%2Bi5dREDnT5wBXA3UXsqfXlO4e%2Be3taZ4MD32S2EmzYYoz1flFGEQ%2F0tEVkzNvVya8EG6GMSizPPEJ%2BRiime9kn%2BbHFMo8dqTWecTZfLy2kkrQ%2F99szIqob4x8aRMxJ0%2BY8Q%3D%3D"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
expect-ct: max-age=86400, enforce
x-xss-protection: 0
x-permitted-cross-domain-policies: none
content-encoding: br
cf-ray: a05a083259efd394-FRA
alt-svc: h3=":443"; ma=86400