HTTP/1.1 200 OK
Date: Tue, 08 Dec 2020 11:17:05 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __cfduid=d291e736a47d44412c6e76087729174341607426224; expires=Thu, 07-Jan-21 11:17:04 GMT; path=/; domain=.cakedeliver.com; HttpOnly; SameSite=Lax; Secure
Set-Cookie: a84b2b0a3ba4cb829698febff4cd3c42=173.208.201.146; expires=Thu, 07-Jan-2021 11:17:05 GMT; Max-Age=2592000; path=/; SameSite; domain=.cakedeliver.com; secure; httponly
Set-Cookie: PHPSESSID=neg2idrn1pe37qf07i91jo12p1; path=/; HttpOnly; secure
Pragma: no-cache
Set-Cookie: default=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; SameSite=strict; secure; httponly
Set-Cookie: language=en-gb; expires=Thu, 07-Jan-2021 11:17:05 GMT; Max-Age=2592000; path=/; SameSite=lax; domain=cakedeliver.com; secure; httponly
Set-Cookie: currency=MYR; expires=Thu, 07-Jan-2021 11:17:05 GMT; Max-Age=2592000; path=/; SameSite=lax; domain=cakedeliver.com; secure; httponly
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Referrer-Policy: no-referrer
Expect-CT: max-age=7776000, enforce
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://cakedeliver.com
Access-Control-Allow-Methods: GET, POST, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Content-Type, Content-Length, Accept-Encoding
Access-Control-Expose-Headers: AMP-Access-Control-Allow-Source-Origin
Access-Control-Allow-Source-Origin: https://cakedeliver.com
AMP-Access-Control-Allow-Source-Origin: https://cakedeliver.com
Cache-Control: public, max-age=604800
Feature-Policy: autoplay 'self'; camera 'self'; geolocation 'self'; fullscreen 'self'; microphone 'none'; midi 'none'; payment 'self'; sync-xhr 'self'; vr 'none'; ambient-light-sensor 'none';
Expires: Wed, 09 Dec 2020 11:17:05 GMT
Content-Security-Policy: default-src data: blob: * ; connect-src *.cakedeliver.com cakedeliver.com https://ssl.bing.com https://cakedeliver.com blob: https://*.cdn.ampproject.org https://*.youtube.com *.google.com *.youtube.com *.facebook.com https://*.cloudflare.com https://ssl.bing.com https://stackpath.bootstrapcdn.com https://static.cloudflareinsights.com https://www.googletagmanager.com https://images.dmca.com https://zz.bdstatic.com https://www.google-analytics.com https://*.baidu.com https://ajax.googleapis.com https://fonts.googleapis.com https://*.googleusercontent.com https://web.archive.org/save/; prefetch-src 'self' https://cn.cakedeliver.com https://my.cakedeliver.com https://youtube.com https://cdnjs.cloudflare.com https://www.google.com https://cdn.jsdelivr.net https://connect.facebook.net https://www.googletagmanager.com https://cakedeliver-com.cdn.ampproject.org https://cn-cakedeliver-com.cdn.ampproject.org https://my-cakedeliver-com.cdn.ampproject.org; frame-src https://www.google.com https://www.youtube.com https://*.paypal.com; img-src data: blob: cakedeliver.com *.google.com *.facebook.com *.youtube.com https://cakedeliver-com.cdn.ampproject.org *.googleusercontent.com https://platform-lookaside.fbsbx.com https://scontent.xx.fbcdn.net https://www.facebook.com https://graph.facebook.com https://*.linkedin.com https://www.baidu.com/ https://sp0.baidu.com/ https://media-exp1.licdn.com https://i.ytimg.com https://cakedeliver.com *.cakedeliver.com https://sp0.baidu.com https://www.google-analytics.com https://www.googletagmanager.com accounts.google.com; object-src https://www.youtube.com; script-src 'self' 'unsafe-inline' *.cakedeliver.com https://*.cloudflare.com https://cdn.ampproject.org https://cakedeliver.com https://stackpath.bootstrapcdn.com https://api.ipdata.co https://ajax.googleapis.com https://cdn.jsdelivr.net https://drive.google.com https://images.dmca.com https://static.cloudflareinsights.com https://connect.facebook.net https://www.google-analytics.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://zz.bdstatic.com https://*.cdn.ampproject.org accounts.google.com; style-src 'self' 'unsafe-inline' *.cakedeliver.com https://use.fontawesome.com https://fonts.googleapis.com https://cakedeliver.com/catalog/view/dev/default/stylesheet/ https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://*.cdn.ampproject.org accounts.google.com; worker-src 'self' *.cakedeliver.com; report-uri /csp-report.php
Vary: Accept-Encoding,Origin
X-hacker: We are small business without profit and we are appreciate if you free help to improve our business
Access-Control-Allow-Headers: origin, x-requested-with, content-type
Access-Control-Allow-Methods: GET, POST, PUT, DELETE, OPTIONS
edit: Set-Cookie (.*) "$1; SameSite=Lax"
X-Turbo-Charged-By: LiteSpeed
CF-Cache-Status: DYNAMIC
cf-request-id: 06e3aaca5c0000493df21c9000000001
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report?s=o1J%2B80xxgbHMqiavDjMGdWpRtaRsI1dHsNY6GXj40oDPkpkwPZgrYvg2ynHSpEv06taTbXyfgqyLGhv8VEsKWWT7xuRht4dFS4wTRD9dtAQ%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 5fe613f08d20493d-STL