HTTP/1.1 200 OK
Cache-Control: no-store, no-cache, must-revalidate
Content-Security-Policy: default-src 'self' data: *.quackquack.in *.imgassets.quackquack.co *.usrimg.quackquack.co *.google-analytics.com wss://qqchat.quackquack.in:* wss://chat.quickblox.com:* *.doubleclick.net *.googleapis.com fcm.googleapis.com *.facebook.net *.facebook.com *.instagram.com *.cashfree.com *.razorpay.com *.stripe.com *.hotjar.com *.bing.com *.googleusercontent.com *.collatebox.com *.aspnetcdn.com *.scpassets.quackquack.co scpassets.quackquack.co *.hotjar.io hotjar.io google.com *.google.com doubleclick.net ucweb.com *.ucweb.com *.google.co.in *.uc.cn *.gstatic.com *.quickblox.com http://*.hotjar.com:* https://*.hotjar.com:* http://*.hotjar.io https://*.hotjar.io wss://*.hotjar.com ;img-src  * data: blob: http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io; font-src 'self' *.quackquack.in *.fonts.googleapis.com *.fonts.gstatic.com fonts.gstatic.com *.googleusercontent.com *.bootstrapcdn.com http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io; style-src 'self' data: 'unsafe-inline' *.quackquack.in *.googleapis.com *.scpassets.quackquack.co scpassets.quackquack.co *.bootstrapcdn.com *.cloudflare.com *.datatables.net;script-src 'self' data: 'unsafe-inline' 'unsafe-eval' *.quackquack.in *.facebook.net *.googletagmanager.com *.google-analytics.com *.instagram.com *.googleadservices.com *.razorpay.com *.cashfree.com *.stripe.com *.hotjar.com *.doubleclick.net *.bing.com *.collatebox.com *.aspnetcdn.com *.jquery.com *.cdn-apple.com scpassets.quackquack.co *.scpassets.quackquack.co *.googleapis.com googleapis.com *.google.com google.com ucweb.com *.ucweb.com *.twitter.com *.googlesyndication.com *.cloudflare.com *.bootstrapcdn.com *.google.co.in *.datatables.net  http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io ;child-src 'self' *.quackquack.in *.facebook.com *.facebook.net *.stripe.com *.razorpay.com *.hotjar.com *.youtube.com *.twitter.com *.google.com *.googletagmanager.com *.googlesyndication.com *.doubleclick.net *.google-analytics.com https://www.google.com; worker-src 'self' quackquack.in;prefetch-src 'self' *.quackquack.in *.googleadservices.com;  report-uri /qq/csp-report/
Content-Type: text/html; charset=UTF-8
Date: Wed, 25 Aug 2021 21:13:12 GMT
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Permissions-Policy: geolocation=(self "https://www.quackquack.in")
Pragma: no-cache
Referrer-Policy: strict-origin-when-cross-origin
Server: QuackQuack.in
Set-Cookie: PHPSESSID=reo6hv4o6p09rv4ukjhb759d61; path=/;samesite=Lax; secure; HttpOnly
Set-Cookie: csrf_token_default=ZWo2TXNtQUk2Mmk2dWNERnEyN3BRZz09; expires=Fri, 27-Aug-2021 21:13:12 GMT; Max-Age=172800; path=/;samesite=Lax; domain=www.quackquack.in; secure
Set-Cookie: csrf_token_default=cjM4Y09Jb2dHcWpyaXJVcUZTcVZPSURPZlcvZ0Q3NndyR05HN3JqTkRQcz0%3D; expires=Fri, 27-Aug-2021 21:13:12 GMT; Max-Age=172800; path=/;samesite=Lax; domain=www.quackquack.in; secure
Set-Cookie: reg=register; expires=Wed, 25-Aug-2021 22:13:12 GMT; Max-Age=3600; path=/;samesite=Strict; domain=www.quackquack.in; secure; HttpOnly
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
X-Frame-Options: sameorigin
X-XSS-Protection: 1; mode=block
Content-Length: 60835
Connection: keep-alive