Truck2hand.com

date: Thu, 12 May 2022 23:25:01 GMT
location: https://www.truck2hand.com/
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
server: cloudflare
cf-ray: 70a6e946bc562aae-ORD
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400

HTTP/2 200 
date: Thu, 12 May 2022 23:25:03 GMT
content-type: text/html; charset=utf-8
content-security-policy: default-src 'self' *.googlesyndication.com;script-src 'self' 'unsafe-inline' 'unsafe-eval' code.jquery.com cdn.omise.co *.treasuredata.com *.truck2hand.com *.cloudflare.com *.cloudflareinsights.com *.facebook.net *.google.com *.gstatic.com *.googletagmanager.com *.google-analytics.com *.google.co.th *.googlesyndication.com *.g.doubleclick.net *.googleadservices.com *.googletagservices.com *.omise.co *.firebaseio.com *.googleapis.com *.anymind360.com anymind360.com adservice.google.com.vn *.adlooxtracking.com *.hotjar.com *.sentry.io *.hs-scripts.com *.hsforms.net *.hsforms.com *.hs-analytics.net *.hs-banner.com *.usemessages.com *.hscollectedforms.net *.firebaseapp.com;img-src * data: blob: 'unsafe-inline';media-src * data: blob: 'unsafe-inline';block-all-mixed-content;font-src 'self' https: data:;frame-src 'self' cdn.omise.co *.google.com *.facebook.net *.facebook.com *.g.doubleclick.net *.googlesyndication.com *.omise.co *.anymind360.com anymind360.com adservice.google.com.vn *.googletagservices.com *.adlooxtracking.com *.youtube.com *.hotjar.com *.hs-scripts.com *.hubspot.com *.hsforms.net *.hsforms.com *.firebaseapp.com;object-src 'none';script-src-attr 'unsafe-inline';style-src 'self' https: 'unsafe-inline';connect-src 'self' data: blob: ws: 'unsafe-inline' *.google-analytics.com *.g.doubleclick.net *.treasuredata.com *.facebook.com *.facebook.net *.truck2hand.com *.cloudflare.com *.cloudflareinsights.com *.google.com *.gstatic.com *.googletagmanager.com *.google-analytics.com *.google.co.th *.googlesyndication.com *.g.doubleclick.net *.googleadservices.com *.googletagservices.com *.omise.co *.firebaseio.com *.googleapis.com *.anymind360.com anymind360.com adservice.google.com.vn *.adlooxtracking.com *.hotjar.com *.sentry.io *.hs-scripts.com hubspot-forms-static-embed.s3.amazonaws.com *.hubspot.com *.firebaseapp.com;form-action 'self' *.hsforms.net *.hsforms.com;upgrade-insecure-requests;base-uri 'self';frame-ancestors 'self'
x-dns-prefetch-control: off
expect-ct: max-age=0
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-permitted-cross-domain-policies: none
referrer-policy: origin
x-xss-protection: 0
set-cookie: token=;Expires=Thu, 12 May 2022 23:25:02 GMT;domain=.truck2hand.com;path=/;SameSite=Lax;secure;HttpOnly;
set-cookie: refresh_token=;Expires=Thu, 12 May 2022 23:25:02 GMT;domain=.truck2hand.com;path=/;SameSite=Lax;secure;HttpOnly;
set-cookie: __auth=;Expires=Thu, 12 May 2022 23:25:02 GMT;domain=.truck2hand.com;path=/;SameSite=Lax;secure;HttpOnly;
cache-control: private, no-cache, no-store, max-age=0, must-revalidate
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 70a6e9478ba58107-ORD
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400