Hunger.ai

content-length: 0
location: https://hotcake.app/
server: CloudFront
date: Sun, 21 Sep 2025 10:29:43 GMT
x-cache: Miss from cloudfront
via: 1.1 fc486e72455da7c1d3be4472dd5ba8b2.cloudfront.net (CloudFront)
x-amz-cf-pop: FRA60-P6
x-amz-cf-id: jTdPRizwoEzu3-EbFkYyQTqUY2Qo6d51X64KDoIRgsu37y5cW6BAiA==

HTTP/2 200 
content-type: text/html; charset=utf-8
access-control-allow-headers: X-Requested-With, Content-Type, Authorization
access-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS
access-control-allow-origin: https://hotcake.app
cache-control: public, max-age=0, must-revalidate
content-encoding: br
content-security-policy: default-src 'self' https://www.google-analytics.com https://google.com https://td.doubleclick.net https://api-iam.intercom.io https://vercel.live wss://nexus-websocket-a.intercom.io https://d2ob318ly2sjhj.cloudfront.net https://tw.hunger.ai https://pr-api.hotcakeapp.com https://www.facebook.com https://hotcake.app;    script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.googletagmanager.com https://www.googleadservices.com https://connect.facebook.net https://d.line-cdn.net https://d.line-scdn.net https://widget.intercom.io https://googleads.g.doubleclick.net https://js.intercomcdn.com https://va.vercel-scripts.com https://vercel.live https://d2ob318ly2sjhj.cloudfront.net https://tw.hunger.ai https://pr-api.hotcakeapp.com https://hotcake.app;    style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://hotcake.app;    img-src 'self' blob: data: https://www.facebook.com https://www.google.com https://www.google.com.tw https://www.googleadservices.com https://www.googletagmanager.com https://googleads.g.doubleclick.net https://tr.line.me;    font-src 'self' https://fonts.gstatic.com https://fonts.intercomcdn.com;    object-src 'none';    base-uri 'self';    form-action 'self' https://www.google.com https://www.google.com.tw https://www.facebook.com;    frame-ancestors 'none';    upgrade-insecure-requests;
date: Sat, 20 Sep 2025 07:07:42 GMT
server: Vercel
set-cookie: _csrfSecret=HANXuLDo9Nu%2Frq1M9DClr280; Path=/; Secure; HttpOnly; SameSite=strict
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-csrf-token: AAgy51PDpxRkcvTkJUaeLsRGAAdDgutWlGUJNg5v
x-frame-options: DENY
x-matched-path: /
x-powered-by: Next.js
x-robots-tag: all
x-vercel-cache: HIT
x-vercel-id: fra1::iad1::smt9z-1758398839161-0d6411be3027
etag: W/"61el78ag6jks1z"
x-cache: Hit from cloudfront
via: 1.1 d3039ad83798b26ecb9f9f1e666afe26.cloudfront.net (CloudFront)
x-amz-cf-pop: FRA6-C1
x-amz-cf-id: xAHGq0wOM5pBzqjyGo6ytrzRhI9EjpqeodVLBZ-ouFDJYVPDH6eiNQ==
age: 54691