HTTP/1.1 200 OK
Date: Wed, 11 May 2022 16:49:55 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
content-security-policy: default-src 'self' *.googlesyndication.com;script-src 'self' 'unsafe-inline' 'unsafe-eval' code.jquery.com cdn.omise.co *.treasuredata.com *.truck2hand.com *.cloudflare.com *.cloudflareinsights.com *.facebook.net *.google.com *.gstatic.com *.googletagmanager.com *.google-analytics.com *.google.co.th *.googlesyndication.com *.g.doubleclick.net *.googleadservices.com *.googletagservices.com *.omise.co *.firebaseio.com *.googleapis.com *.anymind360.com anymind360.com adservice.google.com.vn *.adlooxtracking.com *.hotjar.com *.sentry.io *.hs-scripts.com *.hsforms.net *.hsforms.com *.hs-analytics.net *.hs-banner.com *.usemessages.com *.hscollectedforms.net *.firebaseapp.com;img-src * data: blob: 'unsafe-inline';media-src * data: blob: 'unsafe-inline';block-all-mixed-content;font-src 'self' https: data:;frame-src 'self' cdn.omise.co *.google.com *.facebook.net *.facebook.com *.g.doubleclick.net *.googlesyndication.com *.omise.co *.anymind360.com anymind360.com adservice.google.com.vn *.googletagservices.com *.adlooxtracking.com *.youtube.com *.hotjar.com *.hs-scripts.com *.hubspot.com *.hsforms.net *.hsforms.com *.firebaseapp.com;object-src 'none';script-src-attr 'unsafe-inline';style-src 'self' https: 'unsafe-inline';connect-src 'self' data: blob: ws: 'unsafe-inline' *.google-analytics.com *.g.doubleclick.net *.treasuredata.com *.facebook.com *.facebook.net *.truck2hand.com *.cloudflare.com *.cloudflareinsights.com *.google.com *.gstatic.com *.googletagmanager.com *.google-analytics.com *.google.co.th *.googlesyndication.com *.g.doubleclick.net *.googleadservices.com *.googletagservices.com *.omise.co *.firebaseio.com *.googleapis.com *.anymind360.com anymind360.com adservice.google.com.vn *.adlooxtracking.com *.hotjar.com *.sentry.io *.hs-scripts.com hubspot-forms-static-embed.s3.amazonaws.com *.hubspot.com *.firebaseapp.com;form-action 'self' *.hsforms.net *.hsforms.com;upgrade-insecure-requests;base-uri 'self';frame-ancestors 'self'
x-dns-prefetch-control: off
expect-ct: max-age=0
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-permitted-cross-domain-policies: none
referrer-policy: origin
x-xss-protection: 0
set-cookie: token=;Expires=Wed, 11 May 2022 16:49:55 GMT;domain=.truck2hand.com;path=/;SameSite=Lax;secure;HttpOnly;
set-cookie: refresh_token=;Expires=Wed, 11 May 2022 16:49:55 GMT;domain=.truck2hand.com;path=/;SameSite=Lax;secure;HttpOnly;
set-cookie: __auth=;Expires=Wed, 11 May 2022 16:49:55 GMT;domain=.truck2hand.com;path=/;SameSite=Lax;secure;HttpOnly;
Cache-Control: private, no-cache, no-store, max-age=0, must-revalidate
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 709c691acb6332d3-EWR
Content-Encoding: gzip
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400