BONUS.LY Revisión del sitio web

HTTP/1.1 200 OK
Cache-Control: max-age=0, private, must-revalidate
Content-Security-Policy: default-src 'self'; font-src 'self' fonts.gstatic.com fonts.googleapis.com js.intercomcdn.com production-cdn.bonus.ly staging-cdn.bonus.ly *.bootstrapcdn.com; img-src *; object-src 'self' production-cdn.bonus.ly staging-cdn.bonus.ly; style-src 'self' 'unsafe-inline' *.googleapis.com *.bonus.ly *.google.com; connect-src 'self' https://*.intercom.io https://*.nr-data.net wss://*.intercom.io wss://*.bonus.ly/cable wss://*.hotjar.com api.hubspot.com app.getsentry.com forms.hubspot.com *.hubapi.com syndication.twitter.com uploads.intercomcdn.com uploads.intercomusercontent.com *.algolianet.com *.algolia.net *.natero.com *.freshsuccess.com www.google-analytics.com www.facebook.com *.fullstory.com *.hotjar.io *.hotjar.com *.doubleclick.net *.apiary.io log.intellimize.co *.clearbit.com api.lever.co; frame-src 'self' fast.wistia.net js.stripe.com js.driftt.com share.intercom.io bonus.ly *.bonus.ly *.hubspot.com *.addthis.com *.doubleclick.net *.google.com *.twitter.com *.vimeo.com *.hsforms.com *.youtube.com www.instagram.com *.hotjar.com api.intellimize.co; media-src js.intercomcdn.com media.tenor.com; script-src 'self' 'unsafe-inline' api.usemessages.com connect.facebook.net graph.facebook.com googleads.g.doubleclick.net js.hs-analytics.net js.hs-scripts.com js.hsforms.net forms.hsforms.com js.hsleadflows.net *.hsadspixel.net js.leadin.com js.usemessages.com js.driftt.com production-cdn.bonus.ly staging-cdn.bonus.ly unpkg.com *.addthis.com *.addthisedge.com *.adroll.com *.bnsly.co *.google.com *.googleadservices.com *.googleapis.com *.googletagmanager.com *.google-analytics.com *.gstatic.com *.hscta.net *.hubspot.com *.intercom.io *.intercomcdn.com *.linkedin.com *.newrelic.com *.nr-data.net *.perfectaudience.com *.stripe.com *.twimg.com *.twitter.com zapier.com *.natero.com *.freshsuccess.com sjs.bizographics.com static.ads-twitter.com pixel.cdnwidget.com reddit.com redditstatic.com quora.com hotjar.com *.hotjar.com www.instagram.com *.fullstory.com *.licdn.com *.quantserve.com *.quantcount.com *.clearbit.com *.clearbitjs.com js.hs-banner.com bat.bing.com ct.capterra.com api.intellimize.co 'unsafe-eval'
Content-Type: text/html; charset=utf-8
Etag: W/"755cf565a27f3cdf14f0d34c73f62b4a"
Referrer-Policy: strict-origin-when-cross-origin
Set-Cookie: _special_sauce_session=clovN3ZVQzZqc0dIQUJvVy9PelRNU2d4Y1paY01mNXBoQllML0dGVWx5clN2ak8zRmZ2dGJCKzg3RjRpTXpTRFFwUTd0S0tvdFZXaFZma0VTTnJwTGw1dG53RkFiSk1JNTlyUWtNTGNxM0xJTjNrL0xZSzNCVzZPV0g2UThPZ1BLdy9zRTNYS0tZK1h4bmF5bmhzR1lsV0xYbERRQjNSRXlINWZMMkhyczlhRU84K1A1NXl0QndIcE1Nckk0bWN4UGp6b2hQNk05MnJGbjRBVCtYQXBMZz09LS1HWmI4YXhxOENYdGcwUXZEbEVvdGJRPT0%3D--b5b6a01d61107099a782e8a2beb48004202d8a20; path=/; expires=Thu, 09 Jun 2050 01:51:46 GMT; secure; HttpOnly
Strict-Transport-Security: max-age=315569520; includeSubDomains; preload
Via: 1.1 spaces-router (00a6e5b0e835)
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Request-Id: 268ee2f4-c462-2cf1-687a-dddc3d069b92
X-Runtime: 0.135794
X-Xss-Protection: 1; mode=block
Date: Tue, 09 Jun 2020 01:51:46 GMT
Transfer-Encoding: chunked