ticketline.pt

Date: Fri, 25 Sep 2026 11:04:11 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Server: nginx
Location: http://www.ticketline.pt/
Content-Security-Policy: default-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: api.ticketline.pt analytics.tiktok.com *.usercentrics.eu *.klarnacdn.net *.ticketline.pt *.checkout.com *.equalweb.com *.googleadservices.com *.analytics.google.com sttlprod01.blob.core.windows.net tlpublicstorageprod.blob.core.windows.net *.facebook.net www.facebook.com *.klarna.com *.klarnaevt.com *.telpark.com *.ecs.us-west-2.on.aws connect.facebook.net *.openstreetmap.org fonts.gstatic.com services.ticketline.pt wa.sl.pt *.youtube.com *.vimeo.com *.google-analytics.com google.com *.google.com *.google.pt googleads.g.doubleclick.net stats.g.doubleclick.net *.googleapis.com www.googletagmanager.com ticketline.us14.list-manage.com pagamentosweb.reduniq.pt www.paypal.com www.wallet.pt wallet.pt idp.wallet.pt *.mailchimp.com dev.ticketline.pt *.cloudfront.net;
        base-uri 'self';: 
        script-src 'self' *.klarna.com *.checkout.com analytics.tiktok.com *.ticketline.pt *.telpark.com reserva.easyprebooks.telpark.com test.easyprebooks.telpark.com osm.klarnaservices.com *.youtube.com *.equalweb.com *.usercentrics.eu www.openstreetmap.org reserva.telpark.com *.reserva.telpark.com test.easyprebooks.telpark.com;: 
        script-src-elem 'self' 'unsafe-inline' *.googleadservices.com *.klarna.com *.checkout.com *.usercentrics.eu *.googletagmanager.com www.google-analytics.com;: 
        style-src 'self' 'unsafe-inline' x.klarnacdn.net;: 
        img-src 'self' *.googleadservices.com imgs.sapo.pt www.googletagmanager.com connect.facebook.net *.checkout.com *.ticketline.pt data: bars.sapo.pt js.sapo.pt googleadservices.com www.google.pt *.google.com *.google-analytics.com sttlprod01.blob.core.windows.net tlpublicstorageprod.blob.core.windows.net *.ticketline.pt *.facebook.com;
        object-src 'none';: 
        connect-src 'self' *.ticketline.pt api.ticketline.pt analytics.tiktok.com *.ecs.us-west-2.on.aws www.facebook.com *.klarna.com *.equalweb.com *.google-analytics.com *.google.pt *.google.com stats.g.doubleclick.net www.googletagmanager.com connect.facebook.net *.googleapis.com stats.g.doubleclick.net *.ticketline.pt;: 
        prefetch-src api.ticketline.pt sttlprod01.blob.core.windows.net tlpublicstorageprod.blob.core.windows.net ad.doubleclick.net;: 
        plugin-types application/pdf;: 
        report-uri /csp-report;: 
        report-to csp-endpoint;: 
Report-To: {
        "group": "csp-endpoint",
        "max_age": 10886400,
        "endpoints": [{"url": "/csp-report"}]
Strict-Transport-Security: max-age=31536000; includeSubDomains
Access-Control-Allow-Origin: https://ticketline.pt
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Referrer-Policy: strict-origin
Permissions-Policy: fullscreen=(self)