HTTP/1.1 200 OK
Server: nginx
Date: Sat, 18 May 2019 22:48:56 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Set-Cookie: PHPSESSID=kb8avkf95a2a31ukd0f5d4p382; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Set-Cookie: cbcookie=CB5ce08bd8de09e4.32669304; expires=Sun, 17-May-2020 22:48:56 GMT; path=/
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-Xss-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: script-src *.carbase.my *.google.com *.googleapis.com *.google-analytics.com *.googlesyndication.com *.googletagservices.com *.gstatic.com *.scorecardresearch.com *.cloudfront.net *.facebook.net *.chartbeat.com *.twitter.com *.addthis.com *.addthisedge.com *.amazonaws.com *.newsharecounts.com *.g.doubleclick.net *.newrelic.com *.nr-data.net *.ampproject.org 'unsafe-inline' 'unsafe-eval'