Toyota.com.sg Summary

Cache-Control: no-cache, no-store
Pragma: no-cache
Content-Type: text/html; charset=utf-8
Expires: -1
Vary: Accept-Encoding,Accept-Encoding
Server: Inchcape
Set-Cookie: ASP.NET_SessionId=ntf4cfwziu2ixcglvovzmubq; path=/; secure; HttpOnly; SameSite=Lax; SameSite=Inchcape; HttpOnly ;Secure;
Set-Cookie: ASP.NET_SessionId=ntf4cfwziu2ixcglvovzmubq; path=/; secure; HttpOnly; SameSite=Lax; SameSite=Inchcape; HttpOnly ;Secure;
Set-Cookie: SC_ANALYTICS_GLOBAL_COOKIE=51fb09f175464c14bad0dd7157c07393|False; expires=Mon, 25-Nov-2030 16:08:22 GMT; path=/; secure; HttpOnly; SameSite=Inchcape; HttpOnly ;Secure;
Set-Cookie: __RequestVerificationToken=EHS7f4WTB8wk9PXsBsPUWKJkkiKqnZTanEn85O0QsI787lvGnoOwSafhx3MZO7fbX0YlyGGR8fhaqBN8ZiOhaJPxKIgRNhtQy2fwFo_zspY1; path=/; secure; HttpOnly; SameSite=Inchcape; HttpOnly ;Secure;
X-Frame-Options: SAMEORIGIN
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=31536000; includeSubdomains; preload
Referrer-Policy: no-referrer-when-downgrade
X-Content-Type-Options: nosniff
X-XSS-Protection: 1;mode=block;
feature-policy: autoplay 'none'; camera 'none'
expect-ct: max-age=604800, enforce
X-Powered-By: Inchcape
content-security-policy: default-src 'self';script-src 'self' 'unsafe-inline' https://www.google.co.in https://use.fontawesome.com https://js.stripe.com https://maxcdn.bootstrapcdn.com https://*.pages.ubembed.com https://assets.ubembed.com https://*.js.ubembed.com  https://*.salesforceliveagent.com https://checkout.stripe.com https://c.la1-c1cs-par.salesforceliveagent.com https://cdn.syndication.twimg.com https://platform.twitter.com https://cdnjs.cloudflare.com https://maps.googleapis.com https://www.gstatic.com https://www.google.com 'unsafe-eval' https://googleads.g.doubleclick.net https://sp.analytics.yahoo.com https://www.googleadservices.com https://www.googletagmanager.com https://www.google-analytics.com https://*.addthis.com  https://connect.facebook.net https://ajax.googleapis.com https://z.moatads.com https://v1.addthisedge.com https://pixel.mathtag.com https://s.yimg.com; connect-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.facebook.com https://*.events.ubembed.com https://*.pages.ubembed.com https://checkout.stripe.com https://stats.g.doubleclick.net https://s.yimg.com https://www.google-analytics.com; img-src 'self' blob: data: *  https://maps.googleapis.com https://maps.gstatic.com http://testground.me https://pixel.mediaiqdigital.com https://www.google.com https://www.google.co.in https://pixel.mathtag.com https://secure.adnxs.com https://www.google-analytics.com https://www.googletagmanager.com;frame-src 'self' https://js.stripe.com https://*.pages.ubembed.com https://my.matterport.com https://checkout.stripe.com https://web.facebook.com https://syndication.twitter.com https://platform.twitter.com https://www.youtube.com https://www.facebook.com https://*.addthis.com https://*.fls.doubleclick.net https://www.google.com https://pixel.mathtag.com https://bid.g.doubleclick.net;   style-src 'self' 'unsafe-inline' https://use.fontawesome.com https://checkout.stripe.com https://forms.borneomotors.com.sg https://ton.twimg.com https://platform.twitter.com https://cdnjs.cloudflare.com https://maxcdn.bootstrapcdn.com https://code.jquery.com https://fonts.googleapis.com;font-src 'self' data: https://use.fontawesome.com https://cdnjs.cloudflare.com https://fonts.gstatic.com https://forms.borneomotors.com.sg https://maxcdn.bootstrapcdn.com; media-src *; upgrade-insecure-requests; block-all-mixed-content;
Access-Control-Allow-Origin: *
Date: Fri, 27 Nov 2020 16:08:22 GMT
x-encoded-content-encoding: gzip
x-encoded-content-length: 29442