HTTP/1.1 301 Moved Permanently
Date: Wed, 26 Feb 2025 22:33:57 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 89
Connection: keep-alive
Set-Cookie: AWSALB=AZxipE+lLowi8nDmZx+gjGXlm2pgftLCfMAKeUFWJIPKbIASUKAZDLD+3Ldt1CYnoD/mbG14rkW3qjlZADZ62YhWrL0JEbz+jLe5qpcYhSFmJbR4NgsagEuzkXcz; Expires=Wed, 05 Mar 2025 22:33:57 GMT; Path=/
Set-Cookie: AWSALBCORS=AZxipE+lLowi8nDmZx+gjGXlm2pgftLCfMAKeUFWJIPKbIASUKAZDLD+3Ldt1CYnoD/mbG14rkW3qjlZADZ62YhWrL0JEbz+jLe5qpcYhSFmJbR4NgsagEuzkXcz; Expires=Wed, 05 Mar 2025 22:33:57 GMT; Path=/; SameSite=None; Secure
access-control-allow-origin: *
cache-control: max-age=0, private, must-revalidate
content-security-policy: default-src 'self' 'unsafe-eval' 'unsafe-inline' data: ws: wss: blob: payitoff-public.s3.amazonaws.com payitoff-cdn.io partners.payitoff-cdn.io payitoff-sandbox.io payitoff.io acsbapp.com *.acsbapp.com appsignal-endpoint.net *.doubleclick.net analytics.google.com region1.analytics.google.com www.google.com www.googleadservices.com www.googletagmanager.com www.google-analytics.com fonts.googleapis.com www.googleapis.com fonts.gstatic.com www.gstatic.com js-na1.hs-scripts.com api.segment.io cdn.segment.io cdn.segment.com smartlook.com *.smartlook.com *.smartlook.cloud www.facebook.com connect.facebook.com connect.facebook.net *.livechatinc.com *.hubspot.com js.hscollectedforms.net js.hsadspixel.net *.hs-scripts.com js.hs-banner.com js.hs-analytics.net js.hsleadflows.net forms.hsforms.com *.usemessages.com *.hubapi.com atrium.mx.com snap.licdn.com cdn.linkedin.oribi.io app.clearbitscripts.com tag.clearbitscripts.com x.clearbitjs.com int-widgets.moneydesktop.com widgets.moneydesktop.com www.redditstatic.com partners.payitoff-sandbox.io payitoff-sandbox.io pio-sandbox-private.s3.us-east-2.amazonaws.com sandbox.payitoff.io; img-src * data:; connect-src 'self' ws://payitoff-sandbox.io wss://payitoff-sandbox.io payitoff-public.s3.amazonaws.com payitoff-cdn.io partners.payitoff-cdn.io payitoff-sandbox.io payitoff.io acsbapp.com *.acsbapp.com appsignal-endpoint.net *.doubleclick.net analytics.google.com region1.analytics.google.com www.google.com www.googleadservices.com www.googletagmanager.com www.google-analytics.com fonts.googleapis.com www.googleapis.com fonts.gstatic.com www.gstatic.com js-na1.hs-scripts.com api.segment.io cdn.segment.io cdn.segment.com smartlook.com *.smartlook.com *.smartlook.cloud www.facebook.com connect.facebook.com connect.facebook.net *.livechatinc.com *.hubspot.com js.hscollectedforms.net js.hsadspixel.net *.hs-scripts.com js.hs-banner.com js.hs-analytics.net js.hsleadflows.net forms.hsforms.com *.usemessages.com *.hubapi.com atrium.mx.com snap.licdn.com cdn.linkedin.oribi.io app.clearbitscripts.com tag.clearbitscripts.com x.clearbitjs.com int-widgets.moneydesktop.com widgets.moneydesktop.com www.redditstatic.com; script-src 'self' payitoff-public.s3.amazonaws.com payitoff-cdn.io partners.payitoff-cdn.io payitoff-sandbox.io payitoff.io acsbapp.com *.acsbapp.com appsignal-endpoint.net *.doubleclick.net analytics.google.com region1.analytics.google.com www.google.com www.googleadservices.com www.googletagmanager.com www.google-analytics.com fonts.googleapis.com www.googleapis.com fonts.gstatic.com www.gstatic.com js-na1.hs-scripts.com api.segment.io cdn.segment.io cdn.segment.com smartlook.com *.smartlook.com *.smartlook.cloud www.facebook.com connect.facebook.com connect.facebook.net *.livechatinc.com *.hubspot.com js.hscollectedforms.net js.hsadspixel.net *.hs-scripts.com js.hs-banner.com js.hs-analytics.net js.hsleadflows.net forms.hsforms.com *.usemessages.com *.hubapi.com atrium.mx.com snap.licdn.com cdn.linkedin.oribi.io app.clearbitscripts.com tag.clearbitscripts.com x.clearbitjs.com int-widgets.moneydesktop.com widgets.moneydesktop.com www.redditstatic.com 'unsafe-inline' 'unsafe-eval' blob:
location: https://www.payitoff.io
referrer-policy: strict-origin-when-cross-origin
server: Cowboy
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-request-id: GCfi4TuCr3pM8uIAFYGy