montepio.org Review

 N/A

HTTP/1.1 302 Redirect
Content-Type: text/html; charset=UTF-8
Location: https://www.montepio.org/
Server: 
Date: Sat, 23 Aug 2025 07:02:02 GMT
Content-Length: 148

HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
Content-Encoding: gzip
Last-Modified: Fri, 22 Aug 2025 23:00:54 GMT
Server: 
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: frame-ancestors 'self'; font-src data: 'self' https://*.montepio.org https://use.fontawesome.com https://*.gstatic.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.montepio.org https://*.cloudflare.com https://*.fontawesome.com https://yoast.com https://cdn.jsdelivr.net https://*.youtube.com https://*.facebook.com https://*.clarity.ms https://*.google-analytics.com https://*.analytics.google.com https://stats.g.doubleclick.net https://connect.facebook.net https://egoimmerce.e-goi.com https://*.googletagmanager.com https://dev.visualwebsiteoptimizer.com https://*.googleapis.com https://*.google.com https://*.gstatic.com; object-src 'none'; style-src 'self' 'unsafe-inline' https://*.montepio.org https://*.cloudflare.com https://*.fontawesome.com https://*.googleapis.com; report-to csp-endpoint; form-action 'self' https://*.facebook.com; default-src 'self' https://*.clarity.ms https://my.yoast.com https://secure.gravatar.com https://yoast.com https://*.google-analytics.com https://*.analytics.google.com https://stats.g.doubleclick.net https://connect.facebook.net https://egoimmerce.e-goi.com https://*.googletagmanager.com https://dev.visualwebsiteoptimizer.com https://*.googleapis.com https://*.google.pt https://*.google.com https://*.gstatic.com https://*.adnxs.com data: https://*.montepio.org https://*.facebook.com https://*.youtube.com; worker-src blob https://*.montepio.org
Report-To: {"group":"csp-endpoint","max-age":1,"endpoints":[{"url":"/wp-json/general-utilities/v1/infrastructure/csp-reports"}]}
X-XSS-Protection: 1; mode=block
x-content-type-options: nosniff
Referrer-Policy: strict-origin
Access-Control-Allow-Methods: GET, POST, HEAD, OPTIONS
Access-Control-Allow-Credentials: false
Access-Control-Allow-Headers: X-Requested-With, origin, content-type, accept, token, X-WP-Nonce
Strict-Transport-Security: max-age=31536000; includeSubdomains
Permissions-Policy: camera=(), gyroscope=(), microphone=(), payment=()
Date: Sat, 23 Aug 2025 07:02:03 GMT
Content-Length: 34524