keep-alive
gzip
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.licdn.com https://*.doubleclick.net https://*.googleadservices.com https://*.google.com https://*.googlesyndication.com https://*.googletagservices.com *.google.com.pk *.google-analytics.com *.datatables.net *.jquery.com *.twitter.com *.twitter.com *.doubleclick.net *.ads-twitter.com *.googleadservices.com *.pushengage.com *.googletagmanager.com *.pushengage.com *.googleapis.com *.facebook.net *.unpkg.com *.google.com *.gstatic.com *.cloudflare.com *.google.com https://analytics.tiktok.com; style-src 'self' 'unsafe-inline' *.pushengage.com *.googleapis.com *.google.com data:; child-src blob: *.google.com *.doubleclick.net *.googlesyndication.com; object-src *.googlesyndication.com; base-uri 'self'; connect-src 'self' *.linkedin.com *.pushengage.com *.doubleclick.net *.google-analytics.com *.doubleclick.net *.google.com *.googlesyndication.com www.googletagservices.com https://maps.googleapis.com https://analytics.tiktok.com; form-action *.hbl.com *.google.com; font-src 'self' *.googleapis.com *.google-analytics.com *.gstatic.com data:; frame-src 'self' *.google.com *.doubleclick.net *.googlesyndication.com *.facebook.com *.youtube.com *.peekaboo.guru; img-src data: www.googleadservices.com *.googlesyndication.com *.doubleclick.net *.google.com.pk *.google.com *.t.co *.facebook.com *.google-analytics.com *.hbl.com *.pushengage.com *.googleapis.com *.gstatic.com *.visa.com *.ytimg.com; manifest-src 'self'; media-src 'self' dai.google.com; prefetch-src *.googlesyndication.com; worker-src 'self' www.google.com;
default-src 'self' 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' data: blob: www.google.co.uk adservice.google.com www.googletagmanager.com www.google.ae www.google.fr *.facebook.com www.google.ca www.google.com *.doubleclick.net *.facebook.net www.hbl.com www.google.de *.googleapis.com hbl-rewards.peekaboo.guru *.gstatic.com hbl-web.peekaboo.guru *.googleadservices.com www.google.com.au *.tiktok.com www.google.com.bh www.google.com.pk www.visa.com clientcdn.pushengage.com www.google-analytics.com www.google.com.sa *.licdn.com www.google.com.qa *.linkedin.com www.google.com.om analytics.pangle-ads.com www.youtube.com www.google.nl www.google.co.za hbl.pushengage.com cdnjs.cloudflare.com analytics.google.com region1.analytics.google.com ; form-action 'none' ; frame-ancestors 'self' ; report-uri /csp_report
text/html; charset=UTF-8
Tue, 09 Jan 2024 21:20:42 GMT
Mon, 26 Jul 1997 05:00:00 GMT
Tue, 09 Jan 2024 21:20:42 GMT
no-cache
exp_last_visit=1389475241; expires=Wed, 08-Jan-2025 21:20:41 GMT; Max-Age=31536000; path=/; domain=www.hbl.com; HttpOnly, exp_last_activity=1704835241; expires=Wed, 08-Jan-2025 21:20:41 GMT; Max-Age=31536000; path=/; domain=www.hbl.com; HttpOnly, exp_tracker=%7B%220%22%3A%22index%22%2C%22token%22%3A%229adba1f0e136f23d2ac49f37246bcda53a223e8874c44b4fe9d05b7cdccc46302730dccf76f1fcd4bf1fed25114ee52c%22%7D; path=/; domain=www.hbl.com; HttpOnly, exp_csrf_token=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=www.hbl.com; HttpOnly, exp_csrf_token=a7dc8be012cdf8376cea49c5bcca9b234cf98b1d; expires=Tue, 09-Jan-2024 23:20:41 GMT; Max-Age=7200; path=/; domain=www.hbl.com; HttpOnly, visid_incap_664729=GKJf+2NcSwuBNR+y3ey/xqa4nWUAAAAAQUIPAAAAAAAB/+hA3BIZ6YSR3qFmFOkF; expires=Wed, 08 Jan 2025 17:15:53 GMT; HttpOnly; path=/; Domain=.hbl.com; Secure; SameSite=None, nlbi_664729=nl1mJKdZkRFS1sXA3cXB6gAAAABi1GsHETiKS9Qn1IbU4G2u; path=/; Domain=.hbl.com; Secure; SameSite=None, incap_ses_767_664729=p4M6M4ZszVzx4HER8u6kCqq4nWUAAAAAG71Edr6BorpqZpBpaR5K/g==; path=/; Domain=.hbl.com; Secure; SameSite=None
max-age=31536000; includeSubDomains; preload
Accept-Encoding,User-Agent
default-src 'self' 'unsafe-inline'; script-src 'report-sample' 'self' 'unsafe-inline' 'unsafe-eval' apis.google.com https://www.google-analytics.com/analytics.js cdn.datatables.net code.jquery.com https://analytics.twitter.com https://analytics.twitter.com/i/adsct https://googleads.g.doubleclick.net https://static.ads-twitter.com https://www.googleadservices.com https://clients-api.pushengage.com https://www.googletagmanager.com https://hbl.pushengage.com maps.googleapis.com https://connect.facebook.net https://clientcdn.pushengage.com/ https://unpkg.com https://www.google.com/recaptcha/ https://www.googletagmanager.com/gtm.js https://www.gstatic.com/recaptcha/ https://cdnjs.cloudflare.com https://www.google.com/pagead/conversion_async.js https://analytics.tiktok.com; style-src 'report-sample' 'self' 'unsafe-inline' https://hbl.pushengage.com https://fonts.googleapis.com; object-src 'none'; base-uri 'self'; connect-src 'self' https://clients-api.pushengage.com https://stats.g.doubleclick.net https://www.google-analytics.com https://analytics.tiktok.com; font-src 'self' maps.googleapis.com https://www.google-analytics.com https://fonts.gstatic.com data:; frame-src 'self' https://bid.g.doubleclick.net https://web.facebook.com/ https://www.facebook.com/ https://www.google.com hbl-web.peekaboo.guru https://www.google.com/recaptcha/ https://www.youtube.com https://hbl-rewards.peekaboo.guru https://hbl-instalment-web.peekaboo.guru; img-src https://www.google.com.pk https://www.google.com https://t.co https://www.facebook.com https://www.google-analytics.com http://www.hbl.com assetscdn.pushengage.com maps.googleapis.com maps.gstatic.com www.gstatic.com https://www.visa.com https://offerswidget.visa.com https://i.ytimg.com/ data:; manifest-src 'self'; media-src 'self'; worker-src 'self';
nosniff
SAMEORIGIN
12-484174-484180 NNNN CT(16 37 0) RT(1704835241755 82) q(0 0 0 0) r(8 8) U6
default-src 'self' 'unsafe-inline'; script-src 'report-sample' 'self' 'unsafe-inline' 'unsafe-eval' apis.google.com https://www.google-analytics.com/analytics.js cdn.datatables.net code.jquery.com https://analytics.twitter.com https://analytics.twitter.com/i/adsct https://googleads.g.doubleclick.net https://static.ads-twitter.com https://www.googleadservices.com https://clients-api.pushengage.com https://www.googletagmanager.com https://hbl.pushengage.com maps.googleapis.com https://connect.facebook.net https://clientcdn.pushengage.com/ https://unpkg.com https://www.google.com/recaptcha/ https://www.googletagmanager.com/gtm.js https://www.gstatic.com/recaptcha/ https://cdnjs.cloudflare.com https://www.google.com/pagead/conversion_async.js https://analytics.tiktok.com; style-src 'report-sample' 'self' 'unsafe-inline' https://hbl.pushengage.com https://fonts.googleapis.com; object-src 'none'; base-uri 'self'; connect-src 'self' https://clients-api.pushengage.com https://stats.g.doubleclick.net https://www.google-analytics.com https://analytics.tiktok.com; font-src 'self' maps.googleapis.com https://www.google-analytics.com https://fonts.gstatic.com data:; frame-src 'self' https://bid.g.doubleclick.net https://web.facebook.com/ https://www.facebook.com/ https://www.google.com hbl-web.peekaboo.guru https://www.google.com/recaptcha/ https://www.youtube.com https://hbl-rewards.peekaboo.guru https://hbl-instalment-web.peekaboo.guru; img-src https://www.google.com.pk https://www.google.com https://t.co https://www.facebook.com https://www.google-analytics.com http://www.hbl.com assetscdn.pushengage.com maps.googleapis.com maps.gstatic.com www.gstatic.com https://www.visa.com https://offerswidget.visa.com https://i.ytimg.com/ data:; manifest-src 'self'; media-src 'self'; worker-src 'self';
1; mode=block
|