Content-Security-Policy: default-src 'none'; connect-src https://pagead2.googlesyndication.com https://clients6.google.com https://*.tawk.to 'self' sumome.com wss://*.tawk.to https://s3-eu-west-1.amazonaws.com; object-src https://pagead2.googlesyndication.com 'self'; font-src cdn.jsdelivr.net fonts.gstatic.com maxcdn.bootstrapcdn.com 'self'; child-src https://googleads.g.doubleclick.net https://*.tawk.to https://www.youtube.com 'self'; img-src analytics.homehunting.pt cdn.jsdelivr.net csi.gstatic.com data: https://csi.gstatic.com https://homehunting.pt https://img.youtube.com https://maps.gstatic.com https://s3-eu-west-1.amazonaws.com https://stats.g.doubleclick.net https://www.facebook.com www.google-analytics.com https://scontent.cdninstagram.com https://static-v.tawk.to maps.googleapis.com maps.gstatic.com https://mts.googleapis.com https://pagead2.googlesyndication.com 'self' sumome-140a.kxcdn.com blob: https://www.homehunting.pt; media-src https://static-v.tawk.to https://s3-eu-west-1.amazonaws.com; script-src analytics.homehunting.pt api.facebook.com buttons.reddit.com cdn.jsdelivr.net connect.facebook.net https://ajax.googleapis.com https://connect.facebook.net https://pagead2.googlesyndication.com pagead2.googlesyndication.com maps.googleapis.com data: https://api.bufferapp.com https://cdnjs.cloudflare.com https://*.tawk.to https://s.ytimg.com https://www.google.com https://www.youtube.com load.sumome.com 'unsafe-eval' 'unsafe-inline' 'self' sumome-140a.kxcdn.com widgets.pinterest.com www.google-analytics.com www.linkedin.com www.yummly.com https://code.jquery.com; style-src cdn.jsdelivr.net code.jquery.com fonts.googleapis.com https://fonts.googleapis.com https://ajax.googleapis.com https://www.google.com maxcdn.bootstrapcdn.com 'unsafe-inline' 'self' sumome-140a.kxcdn.com
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Content-Type: text/html; charset=utf-8
Set-Cookie: hh-sessionid=heu9hbvr1uslfqfa60p6ln9v82; path=/
Date: Sat, 13 May 2017 01:16:55 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Transfer-Encoding: chunked
X-Content-Security-Policy: default-src 'none'; connect-src https://pagead2.googlesyndication.com https://clients6.google.com https://*.tawk.to 'self' sumome.com wss://*.tawk.to https://s3-eu-west-1.amazonaws.com; object-src https://pagead2.googlesyndication.com 'self'; font-src cdn.jsdelivr.net fonts.gstatic.com maxcdn.bootstrapcdn.com 'self' data: application/font-woff; child-src https://googleads.g.doubleclick.net https://*.tawk.to https://www.youtube.com 'self'; img-src analytics.homehunting.pt cdn.jsdelivr.net csi.gstatic.com data: https://csi.gstatic.com https://homehunting.pt https://img.youtube.com https://maps.gstatic.com https://s3-eu-west-1.amazonaws.com https://stats.g.doubleclick.net https://www.facebook.com www.google-analytics.com https://scontent.cdninstagram.com https://static-v.tawk.to maps.googleapis.com maps.gstatic.com https://mts.googleapis.com https://pagead2.googlesyndication.com 'self' sumome-140a.kxcdn.com blob: https://www.homehunting.pt; media-src https://static-v.tawk.to https://s3-eu-west-1.amazonaws.com; script-src analytics.homehunting.pt api.facebook.com buttons.reddit.com cdn.jsdelivr.net connect.facebook.net https://ajax.googleapis.com https://connect.facebook.net https://pagead2.googlesyndication.com pagead2.googlesyndication.com maps.googleapis.com data: https://api.bufferapp.com https://cdnjs.cloudflare.com https://*.tawk.to https://s.ytimg.com https://www.google.com https://www.youtube.com load.sumome.com 'unsafe-eval' 'unsafe-inline' 'self' sumome-140a.kxcdn.com widgets.pinterest.com www.google-analytics.com www.linkedin.com www.yummly.com https://code.jquery.com; style-src cdn.jsdelivr.net code.jquery.com fonts.googleapis.com https://fonts.googleapis.com https://ajax.googleapis.com https://www.google.com maxcdn.bootstrapcdn.com 'unsafe-inline' 'self' sumome-140a.kxcdn.com
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Server: Apache/2.2.15 (CentOS)
X-Xss-Protection: 1; mode=block
HTTP/1.1 200 OK
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Pragma: no-cache