Caready.vn

cache-control: no-cache
pragma: no-cache
content-type: text/html; charset=utf-8
content-encoding: gzip
expires: -1
vary: Accept-Encoding
server: Microsoft-IIS/10.0
strict-transport-security: max-age=2592000
x-xss-protection: 1
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
referrer-policy: no-referrer
feature-policy: vibrate 'self' ; camera 'self' ; microphone 'self' ; speaker 'self' https://youtube.com https://www.youtube.com ;geolocation 'self' ; gyroscope 'self' ; magnetometer 'self' ; midi 'self' ; sync-xhr 'self' ; push 'self' ; notifications 'self' ; fullscreen '*' ; payment 'self' ;
content-security-policy: default-src 'self' ; script-src 'self' 'unsafe-inline' 'unsafe-eval' ; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://www.googleanalytics.com https://connect.facebook.net https://apis.google.com https://static.hotjar.com https://images.dmca.com/ https://custom-captcha.js.org/ https://www.google.com https://www.gstatic.com https://script.hotjar.com/ ws.hotjar.com https://content.hotjar.io/; style-src 'self' 'unsafe-inline' 'unsafe-eval' ; style-src-elem 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://www.googleanalytics.com https://fonts.googleapis.com https://custom-captcha.js.org/ https://www.gstatic.com https://script.hotjar.com/ https://www.google.com https://api.vieqr.com; img-src 'self' https://www.googletagmanager.com https://frasers.byte.vn https://www.google-analytics.com https://cdn.caready.vn data: https://twemoji.maxcdn.com https://cdn.jsdelivr.net https://images.dmca.com https://www.facebook.com/ https://api.vieqr.com/; font-src 'self' https://fonts.googleapis.com https://fonts.gstatic.com ;media-src 'self' ;frame-src 'self' https://www.googletagmanager.com https://www.google-analytics.com https://www.googleanalytics.com https://connect.facebook.net https://apis.google.com https://static.hotjar.com https://images.dmca.com/ https://custom-captcha.js.org/ https://www.google.com https://www.gstatic.com https://script.hotjar.com/ https://content.hotjar.io/ https://accounts.google.com/ https://www.facebook.com/ wss://ws.hotjar.com/api/v2/client/ws ;connect-src 'self' https://www.googletagmanager.com https://www.google-analytics.com https://www.googleanalytics.com https://connect.facebook.net https://apis.google.com https://static.hotjar.com https://images.dmca.com/ https://custom-captcha.js.org/ https://www.google.com https://www.gstatic.com https://script.hotjar.com/ https://content.hotjar.io/ https://accounts.google.com/ https://www.facebook.com/ wss://ws.hotjar.com/api/v2/client/ws https://socialplugin.facebook.net/ https://metrics.hotjar.io/ https://hook.eu2.make.com https://x.thunkable.com;
permissions-policy: geolocation=(), camera=(self), microphone=(), speaker=()
set-cookie: .AspNetCore.Mvc.CookieTempDataProvider=; expires=Thu, 01 Jan 1970 00:00:00 GMT; path=/; samesite=lax; httponly
set-cookie: .AspNetCore.Session=CfDJ8AGFQCRpDFxJvVYGb0p%2BImD2I79YMwNcHroTIuSwOW864LLmssF94grVXWR9ddQXvFe5AgRnMm0mN3sUMAGXjpVwF6hmIVC6e9ey2V1e2I3EicQjeC2AHYnaiJAqi2XVYNZN6LOSJ6nYXd3F0FWGMS23MEXcdVs1CDaxbCScin5v; path=/; samesite=lax; httponly
x-powered-by: ASP.NET
date: Wed, 11 Oct 2023 01:25:59 GMT