Supermoney.com

date: Tue, 29 Aug 2023 21:53:31 GMT
location: https://www.supermoney.com/
cache-control: max-age=3600
expires: Tue, 29 Aug 2023 22:53:31 GMT
report-to: {"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v3?s=E5hFK8KpQBaTfqPgv7%2FiZqMnrA1PG4BWMOL1SsM2VP1wDVYoCaipd2jv8lOzOdMiT9nUiS9ArZAgKs870eKrbIDEJ7M4htatEZqNm5Elnb%2BOl76x0qj1VvctDq7OQSuY"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
server: cloudflare
cf-ray: 7fe806fabac2113b-ORD

HTTP/2 200 
date: Tue, 29 Aug 2023 21:53:31 GMT
content-type: text/html; charset=UTF-8
cache-control: must-revalidate
referrer-policy: no-referrer-when-downgrade
referrer-policy: no-referrer-when-downgrade
x-xss-protection: 0
x-content-type-options: nosniff
x-frame-options: DENY
content-encoding: gzip
strict-transport-security: max-age=15552000; includeSubDomains
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v3?s=M2FQWFGvBBLw8lA0Cd3QhGDk%2B3VnMe%2BcKZNgv0aJ13%2B6k3hk%2FdcYgH8KiHLTF%2F%2FRR6wr2v4qkH2YBd1VHwYgUs78FXEb9B10zXhBR%2Fx89z0F%2FTeSeO9UWDAYMYTS14QEK7NqRg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
access-control-allow-origin: https://www.supermoney.com
content-security-policy: default-src 'none';  base-uri 'self';  script-src 'self' 'report-sample' 'unsafe-inline' 'unsafe-eval' *.supermoney.com bam.nr-data.net bat.bing.com js-agent.newrelic.com s.pinimg.com static.zdassets.com www.clickcease.com www.google-analytics.com www.googletagmanager.com connect.facebook.net widget.trustpilot.com e.infogram.com cdnjs.cloudflare.com *.taboola.com *.crwdcntrl.net *.hotjar.com *.googleapis.com *.googleadservices.com *.invoca.net *.ringrevenue.com *.lidstatic.com cdn.jsdelivr.net *.googlesyndication.com *.zopim.com angel.co www.google.com *.hcaptcha.com interviews.coursalytics.com *.bing.com *.trustpilot.com *.tableau.com *.google-analytics.com maps.googleapis.com *.hubspot.com *.hscollectedforms.net *.hsadspixel.net *.hs-scripts.com *.hs-banner.com *.hs-analytics.net *.hsforms.com *.usemessages.com *.hsappstatic.net *.hubspotusercontent20.net *.hsleadflows.net *.hs-banner.net *.hsforms.net www.googleanalytics.com www.google-analytics.com www.googleoptimize.com optimize.google.com cdn.heapanalytics.com heapanalytics.com wellfound.com *.hotjar.com;   script-src-elem 'self' 'report-sample' 'unsafe-inline' 'unsafe-eval' *.supermoney.com bam.nr-data.net bat.bing.com js-agent.newrelic.com s.pinimg.com static.zdassets.com/ www.clickcease.com www.google-analytics.com www.googletagmanager.com connect.facebook.net widget.trustpilot.com e.infogram.com cdnjs.cloudflare.com *.taboola.com *.crwdcntrl.net *.hotjar.com *.googleapis.com *.googleadservices.com *.invoca.net *.ringrevenue.com *.lidstatic.com cdn.jsdelivr.net *.googlesyndication.com *.zopim.com angel.co www.google.com *.hcaptcha.com interviews.coursalytics.com *.bing.com *.trustpilot.com *.tableau.com *.google-analytics.com ww.googletagmanager.com *.hubspot.com *.hscollectedforms.net *.hsadspixel.net *.hs-scripts.com *.hs-banner.com *.hs-analytics.net *.hsforms.com *.usemessages.com *.hsappstatic.net *.hubspotusercontent20.net *.hsleadflows.net *.hs-banner.net *.hsforms.net optimize.google.com *.calconic.com yoast.com cdn.heapanalytics.com heapanalytics.com wellfound.com;  style-src 'self' 'unsafe-inline' https: data: optimize.google.com fonts.googleapis.com heapanalytics.com wellfound.com *.hotjar.com;  object-src 'none';  connect-src 'self' *.supermoney.com bam.nr-data.net bat.bing.com ct.pinterest.com ekr.zendesk.com stats.g.doubleclick.net supermoneyhelp.zendesk.com www.google-analytics.com www.googletagmanager.com widget-mediator.zopim.com *.taboola.com *.clickcease.com *.google-analytics.com *.leadid.com *.hotjar.com *.crwdcntrl.net *.zopim.com www.facebook.com *.googleapis.com *.hotjar.io *.yoast.com meetlookup.com 1637314617.rsc.cdn77.org m1.openfpcdn.io collect.tealiumiq.com angel.co *.hcaptcha.com *.cloudflareresearch.com *.zdassets.com api.fbanalytics.org interviews.coursalytics.com cdnm3.cdnservice.space yoast.com api.highdataanalytics.com zendesk-eu.my.sentry.io *.hubspot.com *.hubapi.com analytics.google.com *.google.com *.google.ca *.calconic.com app.calconic.com statistics-dot-calconic-app.appspot.com heapanalytics.com wellfound.com vitals.vercel-insights.com *.hotjar.com *.hotjar.io wss://*.hotjar.com;  font-src * 'self' data: https: fonts.gstatic.com heapanalytics.com wellfound.com *.hotjar.com;  frame-src 'self' *.trustpilot.com *.youtube.com *.infogram.com *.hotjar.com d2m2wsoho8qq12.cloudfront.net *.pinterest.com tsdtocl.com *.googletagmanager.com *.googlesyndication.com *.go2cloud.org *.leadid.com *.facebook.com *.hcaptcha.com fbanalytics.org *.tableau.com *.hubspot.com optimize.google.com wellfound.com;  img-src * 'self' data: https: android-webview-video-poster www.google-analytics.com www.googletagmanager.com optimize.google.com heapanalytics.com wellfound.com *.hotjar.com;  manifest-src 'self';  media-src 'self' static.zdassets.com data:;  worker-src 'self' blob:;  form-action 'self' supermoney.us7.list-manage.com www.google.com ct.pinterest.com *.leadid.com www.facebook.com;  frame-ancestors 'self' *.supermoney.com;  report-uri https://csp-report.supermoney.com;
permissions-policy: autoplay=*,  camera=*,  fullscreen=*,  geolocation=*,  picture-in-picture=*,  clipboard-write=*
server: cloudflare
cf-ray: 7fe806fb6aae2bd8-ORD