Fantasyteam.mobi

Server: nginx
Date: Fri, 28 Mar 2025 07:51:01 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Origin, Accept-Encoding
Access-Control-Allow-Credentials: true
Content-Security-Policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data: g.doubleclick.net googleads.g.doubleclick.net google.com google-analytics.com googlesyndication.com googletagmanager.com www.googletagmanager.com tagmanager.google.com www.google.ae www.google.at www.google.ch www.google.com www.google.com.om www.google.de www.google.es www.google.co.sa www.google.co.za hotjar.com s3.eu-west-1.amazonaws.com dashboard.hyvesdp.com hyvesdp.com;object-src 'none';script-src 'self' cmp-api.hyvesdp.com s3.eu-west-1.amazonaws.com google.com googleadservices.com g.doubleclick.net td.doubleclick.net googleads.g.doubleclick.net google-analytics.com googletagmanager.com www.googletagmanager.com tagmanager.google.com www.google.ae www.google.at www.google.ch www.google.com www.google.com.om www.google.de www.google.es www.google.co.sa www.google.co.za hotjar.com hotjar.io cdn.tailwindcss.com analytics.tiktok.com unpkg.com 'unsafe-eval' 'unsafe-inline';script-src-attr 'unsafe-inline';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests;connect-src 'self' cmp-api.hyvesdp.com notify.clfldcbprotect.com pagead2.googlesyndication.com ws.dcbprotect.com wss://ws.dcbprotect.com:8080 analytics.google.com www.google-analytics.com www.google.com google.com www.google.ae www.google.at www.google.ch www.google.com www.google.com.om www.google.de www.google.es www.google.co.sa www.google.co.za stats.g.doubleclick.net;frame-src 'self' googletagmanager.com www.googletagmanager.com stats.g.doubleclick.net td.doubleclick.net
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Origin-Agent-Cluster: ?1
Referrer-Policy: same-origin
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Content-Type-Options: nosniff
X-DNS-Prefetch-Control: off
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-XSS-Protection: 0
Surrogate-Control: no-store
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate
Expires: 0
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-full-version-list,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-wow64,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-ua-form-factors
x-template-id: msisdn
Set-Cookie: connect.sid=s%3A080245ec-394b-45af-9327-5240ba6b2a8d.GDqv0HiJb3lgPKqz%2FZTFeWHj7Xf33s5BUXWFd2pxbIU; Path=/; Expires=Fri, 28 Mar 2025 08:51:02 GMT; HttpOnly; Secure
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-XSS-Protection: 1; mode=block
Referrer-Policy: origin-when-cross-origin
Content-Security-Policy: frame-ancestors 'none';