Date: Tue, 27 Jun 2017 18:38:29 GMT
Content-Type: text/html; charset=utf-8
Access-Control-Allow-Origin: *.88sao.tv
Access-Control-Allow-Methods: GET, POST, OPTIONS
Connection: keep-alive
X-Frame-Options: SAMEORIGIN
Transfer-Encoding: chunked
HTTP/1.1 200 OK
Vary: Accept-Encoding
Server: nginx
Access-Control-Allow-Credentials: true
Vary: Accept-Encoding
Content-Security-Policy: default-src 'self' 'unsafe-inline' 'unsafe-eval' ws://ws.88sao.tv http://88sao.tv http://*.88sao.tv http://88sao.vn http://*.8sao.vn https://connect.facebook.net http://connect.facebook.net https://www.facebook.com http://www.google-analytics.com https://fonts.googleapis.com https://fonts.gstatic.com http://img.sumeme.com https://stats.g.doubleclick.net https://www.google.com https://www.google.com.vn https://www.google-analytics.com http://www.googletagmanager.com https://googleads.g.doubleclick.net https://googleads.g.doubleclick.net; script-src 'self' 'unsafe-inline' 'unsafe-eval' http://88sao.tv http://*.88sao.tv http://88sao.vn http://*.8sao.vn https://connect.facebook.net http://connect.facebook.net https://www.facebook.com http://www.google-analytics.com https://fonts.googleapis.com https://fonts.gstatic.com http://img.sumeme.com https://stats.g.doubleclick.net https://www.google.com https://www.google.com.vn https://www.google-analytics.com http://www.googletagmanager.com https://googleads.g.doubleclick.net https://googleads.g.doubleclick.net; img-src 'self' data: about: http://88sao.tv http://*.88sao.tv http://88sao.vn http://*.8sao.vn https://connect.facebook.net http://connect.facebook.net https://www.facebook.com http://www.google-analytics.com https://fonts.googleapis.com https://fonts.gstatic.com http://img.sumeme.com https://stats.g.doubleclick.net https://www.google.com https://www.google.com.vn https://www.google-analytics.com http://www.googletagmanager.com https://googleads.g.doubleclick.net https://googleads.g.doubleclick.net; style-src 'self' 'unsafe-inline' 'unsafe-eval' http://88sao.tv http://*.88sao.tv http://88sao.vn http://*.8sao.vn https://connect.facebook.net http://connect.facebook.net https://www.facebook.com http://www.google-analytics.com https://fonts.googleapis.com https://fonts.gstatic.com http://img.sumeme.com https://stats.g.doubleclick.net https://www.google.com https://www.google.com.vn https://www.google-analytics.com http://www.googletagmanager.com https://googleads.g.doubleclick.net https://googleads.g.doubleclick.net; font-src 'self' 'unsafe-inline' 'unsafe-eval' http://88sao.tv http://*.88sao.tv http://88sao.vn http://*.8sao.vn https://connect.facebook.net http://connect.facebook.net https://www.facebook.com http://www.google-analytics.com https://fonts.googleapis.com https://fonts.gstatic.com http://img.sumeme.com https://stats.g.doubleclick.net https://www.google.com https://www.google.com.vn https://www.google-analytics.com http://www.googletagmanager.com https://googleads.g.doubleclick.net https://googleads.g.doubleclick.net; child-src 'self' 'unsafe-inline' 'unsafe-eval' http://88sao.tv http://*.88sao.tv http://88sao.vn http://*.8sao.vn https://connect.facebook.net http://connect.facebook.net https://www.facebook.com http://www.google-analytics.com https://fonts.googleapis.com https://fonts.gstatic.com http://img.sumeme.com https://stats.g.doubleclick.net https://www.google.com https://www.google.com.vn https://www.google-analytics.com http://www.googletagmanager.com https://googleads.g.doubleclick.net https://googleads.g.doubleclick.net; object-src 'self' 'unsafe-inline' 'unsafe-eval' http://88sao.tv http://*.88sao.tv http://88sao.vn http://*.8sao.vn https://connect.facebook.net http://connect.facebook.net https://www.facebook.com http://www.google-analytics.com https://fonts.googleapis.com https://fonts.gstatic.com http://img.sumeme.com https://stats.g.doubleclick.net https://www.google.com https://www.google.com.vn https://www.google-analytics.com http://www.googletagmanager.com https://googleads.g.doubleclick.net https://googleads.g.doubleclick.net; frame-ancestors 'self'
X-Content-Type-Options: nosniff
Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
X-XSS-Protection: 1; mode=block
Last-Modified: Tue, 27 Jun 2017 18:38:01 GMT