Supermoney.us

date: Sun, 31 May 2026 20:15:34 GMT
content-length: 0
location: https://supermoney.com
apigw-requestid: ePyEAhPWvHcEPCw=

HTTP/2 301 
date: Sun, 31 May 2026 20:15:34 GMT
content-type: text/html; charset=UTF-8
content-length: 167
location: https://www.supermoney.com/
strict-transport-security: max-age=31536000; includeSubDomains; preload
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=N5l1LnnuliVbOufMaKn4MaGKYDFT4mPw8oyoQtY1OH5SDz6OCDRLBML3b%2BwyTqeFwESRZH7iWyeja1CY7CZXQVfBZTLDMfytMS59TvHDaz7CaGHMcxbv3xRYXM25%2BpUj"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
expect-ct: max-age=86400, enforce
referrer-policy: no-referrer-when-downgrade
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 0
x-permitted-cross-domain-policies: none
cross-origin-opener-policy: same-origin
content-security-policy: default-src 'self' *.supermoney.com;  base-uri 'self' *.supermoney.com;  script-src 'self' 'report-sample' 'unsafe-inline' 'unsafe-eval' *.supermoney.com   bat.bing.com   pendo-io-static.storage.googleapis.com   pendo-static-5083953083187200.storage.googleapis.com   maxcdn.bootstrapcdn.com   js5.invoca.net   resources.tunecdn.com   widget-mediator.zopim.com   static.zdassets.com   *.datadoghq-browser-agent.com   *.cloudflare.com   *.googleapis.com   *.stripe.com   *.pendo.io   *.js.stripe.com   *.clarity.ms   *.clickcease.com   *.cloudflareinsights.com   *.doubleclick.net   *.facebook.net   *.google.com   *.google-analytics.com   *.googleadservices.com   *.googletagservices.com   *.googletagmanager.com   *.hotjar.com   *.infogram.com   *.lidstatic.com   *.pinimg.com   *.pinterest.com   *.posthog.com   *.quora.com   *.ringrevenue.com   *.taboola.com   *.tableau.com   *.termly.io   *.trustpilot.com;  style-src 'self' 'report-sample' 'unsafe-inline' *.supermoney.com https: data:;    object-src 'self' *.supermoney.com;  connect-src 'self' *.supermoney.com   api.feedback.us.pendo.io   pendo-static-5083953083187200.storage.googleapis.com   logs.browser-intake-datadoghq.com   browser-http-intake.logs.datadoghq.com   bat.bing.com   bat.bing.net   cognito-identity.us-west-2.amazonaws.com   pinpoint.us-west-2.amazonaws.com   static.zdassets.com   tune.zendesk.com   ekr.zdassets.com   wss://*.hotjar.com   wss://chat.supermoney.com   *.pendo.io   *.termly.io   *.quora.com   *.stripe.com   *.hasoffers.com   *.bugsnag.com   *.clarity.ms   *.clickcease.com   *.doubleclick.net   *.g.doubleclick.net   *.google-analytics.com   *.google.com   *.google.co.uk   *.googleadservices.com   *.googletagmanager.com   *.googlesyndication.com   *.googleapis.com   *.gstatic.com   *.hotjar.com   *.hotjar.io   *.intentiq.com   *.leadid.com   *.pinterest.com   *.posthog.com   *.quora.com   *.taboola.com   *.mapbox.com   *.tiles.mapbox.com   *.trustpilot.com;  font-src * data:;  frame-src 'self'   d2m2wsoho8qq12.cloudfront.net   tsdtocl.com   *.cloudflare.com   *.pendo.io   *.stripe.com   *.moneykit.com   *.js.stripe.com   *.doubleclick.net   *.googletagmanager.com   *.infogram.com   *.leadid.com   *.pinterest.com   *.supermoney.com   *.tableau.com   *.taboola.com   *.trustpilot.com   *.youtube.com   *.go2cloud.org;  img-src * data:;  manifest-src 'self' *.supermoney.com;  media-src 'self' data: https:   d2m2wsoho8qq12.cloudfront.net;  worker-src 'self' *.supermoney.com blob: data:;  form-action 'self' *.supermoney.com *.leadid.com;  frame-ancestors *;  report-uri https://csp-report.supermoney.com;
server: cloudflare
cf-ray: a048a6beabc065ba-FRA
alt-svc: h3=":443"; ma=86400

HTTP/2 403 
date: Sun, 31 May 2026 20:15:34 GMT
content-type: text/html; charset=UTF-8
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cf-mitigated: challenge
content-security-policy: default-src 'none'; script-src 'nonce-hPpcSVHayT1KoiTKby2ivE' 'unsafe-eval' https://challenges.cloudflare.com; script-src-attr 'none'; style-src 'unsafe-inline'; img-src 'self' https://challenges.cloudflare.com; connect-src 'self' https://challenges.cloudflare.com; frame-src 'self' https://challenges.cloudflare.com blob:; child-src 'self' https://challenges.cloudflare.com blob:; worker-src blob:; form-action http: https:; base-uri 'self'
server: cloudflare
critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
origin-agent-cluster: ?1
permissions-policy: accelerometer=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=(),xr-spatial-tracking=(self)
referrer-policy: same-origin
server-timing: chlray;desc="a048a6befcda353c"
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=Fefyjaz3eShUx3talk1x5cw92anAPAX0UUN7wjLz3Cm4Sz1gc7EcOuliZ%2B2MzkHtU%2FKXnps7uHA13VwyBwl27jrnrpDH7fseploothCAWBTDOXkDncZd5sbOkSBZMr9J0%2FcakQ%3D%3D"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
expect-ct: max-age=86400, enforce
x-xss-protection: 0
x-permitted-cross-domain-policies: none
content-encoding: br
cf-ray: a048a6befcda353c-FRA
alt-svc: h3=":443"; ma=86400