Date: Tue, 08 Dec 2020 02:52:53 GMT
Server: 
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Referrer-Policy: origin
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Content-Security-Policy: default-src 'self' https://cdn-ca.jivosite.com/ https://vars.hotjar.com/ ; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.receitaws.com.br/ https://connect.facebook.net/ https://tpc.googlesyndication.com/ https://googleads.g.doubleclick.net/ https://static.hotjar.com/ https://script.hotjar.com/ https://code.jquery.com/ https://www.googleadservices.com/ https://www.googletagmanager.com/ https://www.google-analytics.com/ https://www.routingnumbers.info/  https://stackpath.bootstrapcdn.com/ https://ajax.googleapis.com/ https://cdnjs.cloudflare.com/ https://unpkg.com/ https://use.fontawesome.com/ https://cdn.datatables.net/; style-src 'self' 'unsafe-inline' https://stackpath.bootstrapcdn.com/ https://use.fontawesome.com/ https://cdn.datatables.net/ https://fonts.googleapis.com/ https://cdnjs.cloudflare.com/; font-src 'self' data: https://fonts.googleapis.com/ https://stackpath.bootstrapcdn.com/ https://use.fontawesome.com/ https://cdnjs.cloudflare.com/ https://fonts.gstatic.com/; img-src 'self' data: https://www.googletagmanager.com/ https://lh6.googleusercontent.com/ https://www.facebook.com/ https://cdn-ca.jivosite.com/ https://stats.g.doubleclick.net/ https://www.bluetransfer.com.br https://googleads.g.doubleclick.net/ https://www.google.com/ https://www.google.com.br/ https://ps.w.org/ https://www.google-analytics.com/ https://secure.gravatar.com/ https://cdn.datatables.net/; connect-src 'self' wss://bluetransfer.com.br/ wss://ws1.hotjar.com/api/v1/client/ws https://ws1.hotjar.com/api/v2/ wss://ws5.hotjar.com/api/v1/client/ws https://ws5.hotjar.com/api/v2/ https://www.facebook.com/ https://www.receitaws.com.br/ https://node163.jivosite.com/ https://err.jivosite.com/ wss://chat2-2.jivosite.com/ https://code.jivosite.com/ https://cdn-ca.jivosite.com/ https://stats.g.doubleclick.net/ wss://ws10.hotjar.com/ https://vc.hotjar.io/ https://in.hotjar.com/ wss://ws4.hotjar.com/ https://ipapi.co/ https://www.google-analytics.com/ https://cdn.datatables.net/ wss://bluetransfer.com.br/ wss://bluetransfer.com.br:8001/ https://viacep.com.br/; child-src https://vars.hotjar.com/ https://bluetransfer.com.br https://tpc.googlesyndication.com/ https://bid.g.doubleclick.net/;
Cache-Control: no-cache, no-store, must-revalidate
X-FRAME-OPTIONS: SAMEORIGIN
Vary: Accept-Encoding
Set-Cookie: PHPSESSID=pcm8efh1v74m8g4meie4ogc8ru; path=/; secure; HttpOnly;HttpOnly;Secure;SameSite=Strict
Pragma: no-cache
Access-Control-Allow-Origin: https://bluetransfer.com.br
Keep-Alive: timeout=10, max=50
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
x-encoded-content-encoding: gzip
x-encoded-content-length: 8346