Usealtar.com.br

date: Sun, 01 Dec 2024 05:47:02 GMT
content-type: text/html
location: https://thajoias.com.br/
cf-ray: 8eb0c7bdf95a21af-ORD
cf-cache-status: MISS
cache-control: max-age=14400
vary: Accept-Encoding
cf-apo-via: origin,resnok
report-to: {"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=qxRG4zi15U5aWoxf7d6iwLwRhTOGMKIvAfXmwtP1AbhfN1lQU9rlHsUTACVNmkGWZ7NgAmR9%2FykoMh8Wt7bofmEGmdh4NX9Yv0K70JninjATlglAMrMgXgf8MkmfT%2B%2FFbw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=2024&min_rtt=1965&rtt_var=508&sent=8&recv=12&lost=0&retrans=0&sent_bytes=2946&recv_bytes=894&delivery_rate=1455276&cwnd=153&unsent_bytes=0&cid=6740498a52842c7c&ts=112&x=0"

HTTP/2 200 
date: Sun, 01 Dec 2024 05:47:03 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
set-cookie: PHPSESSID=arv4bh5n1tfqkcqag0scuaqnt6; expires=Sun, 01-Dec-2024 06:47:03 GMT; Max-Age=3600; path=/; domain=thajoias.com.br; secure; HttpOnly; SameSite=Lax
x-magento-cache-control: max-age=86400, public, s-maxage=86400
x-magento-tags: cat_c,cat_c_3,cat_c_5,cat_c_58,cat_c_42,cat_c_43,cat_c_44,cat_c_100,cat_c_45,store,cms_b,mp_smtp_script,cms_p_7,amasty_slider_1,cat_p,FPC
pragma: no-cache
cache-control: max-age=0, must-revalidate, no-cache, no-store
expires: Fri, 01 Dec 2023 02:58:24 GMT
x-magento-cache-debug: HIT
report-to: {"group":"report-endpoint","max_age":10886400,"endpoints":[{"url":"https://csp-reporting-service.com/my-project/endpoint"}]}
content-security-policy-report-only: worker-src blob:; font-src fonts.gstatic.com *.kxcdn.com *.fontawesome.com https://fonts.bunny.net *.google.com *.gstatic.com data: 'self' 'unsafe-inline'; form-action *.pagar.me *.netsgroup.com *.sibs.pt *.seglan.com *.secureacs.com *.rsa3dsauth.com *.apata.io *.cardinalcommerce.com *.santander.com.br *.bradesco.com.br *.bradesco *.stone.com.br *.nubank.com.br *.itau.com.br *.bb.com.br *.caixa.gov.br *.inter.co *.bancointer.com.br *.c6bank.com.br *.bancobmg.com.br *.safra.com.br *.sicoob.com.br *.banrisul.com.br *.banrisul.b.br *.banorte.com *.xpi.com.br *.btgpactual.com *.btgpactualdigital.com *.mercadopago.com.br *.mercadopago.com *.picpay.com *.amedigital.com *.neon.tech *.neon.com.br *.wise.com *.revolut.com *.sandbox.3dsecure.io *.google.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com player.vimeo.com https://www.google.com/recaptcha/ *.instagram.com www.google.com facebook.com www.facebook.com *.kxcdn.com youtube.com www.youtube.com platform.twitter.com *.google.com *.addthis.com *.pagar.me *.netsgroup.com *.sibs.pt *.seglan.com *.secureacs.com *.rsa3dsauth.com *.apata.io *.cardinalcommerce.com *.santander.com.br *.bradesco.com.br *.bradesco *.stone.com.br *.nubank.com.br *.itau.com.br *.bb.com.br *.caixa.gov.br *.inter.co *.bancointer.com.br *.c6bank.com.br *.bancobmg.com.br *.safra.com.br *.sicoob.com.br *.banrisul.com.br *.banrisul.b.br *.banorte.com *.xpi.com.br *.btgpactual.com *.btgpactualdigital.com *.mercadopago.com.br *.mercadopago.com *.picpay.com *.amedigital.com *.neon.tech *.neon.com.br *.wise.com *.revolut.com *.sandbox.3dsecure.io 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.cdninstagram.com *.kxcdn.com *.twitter.com *.googleapis.com *.google.com *.gstatic.com *.fbcdn.net https://firebasestorage.googleapis.com cdn.mundipagg.com api.pagar.me data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.instagram.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.googleapis.com *.google.com *.gstatic.com cdn.ampproject.org connect.facebook.net googletagmanager.com *.kxcdn.com platform.twitter.com *.addthis.com *.addthisedge.com *.moatads.com s7.addthis.com *.avada.io 3ds2.pagar.me 3ds2-sdx.pagar.me 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.googleapis.com *.google.com *.kxcdn.com *.gstatic.com *.fontawesome.com https://fonts.bunny.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.cdninstagram.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com https://www.paypal.com/xoplatform/logger/api/logger cdn.ampproject.org *.kxcdn.com *.instagram.com ekr.zdassets.com/ https://get.geojs.io *.avada.io api.mundipagg.com api.pagar.me brasilapi.com.br viacep.com.br servicodados.ibge.gov.br *.google.com google.com pay.sandbox.google.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://csp-reporting-service.com/my-project/endpoint; report-to report-endpoint;
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 8eb0c7bebf7b10b6-ORD
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=1281&min_rtt=1254&rtt_var=285&sent=7&recv=11&lost=0&retrans=0&sent_bytes=3421&recv_bytes=894&delivery_rate=2188964&cwnd=209&unsent_bytes=0&cid=2fc02f96d1b8b570&ts=1169&x=0"