mystartr.com website report

HTTP/2 200
date: Sat, 24 Oct 2026 23:05:07 GMT
content-type: text/html; charset=utf-8
server: cloudflare
x-frame-options: SAMEORIGIN
content-security-policy: default-src 'self' 'unsafe-inline' 'unsafe-eval';script-src 'self' *.hotjar.com cdn.mxpnl.com www.google.com www.gstatic.com 'unsafe-inline' connect.facebook.net www.facebook.com static.cloudflareinsights.com www.googletagmanager.com 'unsafe-eval' ajax.cloudflare.com *.tagtoo.co *.google-analytics.com *.google.com *.googleadservices.com *.doubleclick.net *.rum.us-east-1.amazonaws.com https://optimize.google.com *.googleoptimize.com *.firebasedatabase.app;style-src 'self' fonts.googleapis.com https://optimize.google.com 'unsafe-inline';object-src 'self' 'unsafe-inline' 'unsafe-eval';base-uri 'self';connect-src 'self' wss://ws.hotjar.com *.hotjar.io stats.g.doubleclick.net cloudflareinsights.com *.google-analytics.com https://www.google.com.my https://api-js.mixpanel.com *.google.com *.facebook.com cognito-identity.ap-southeast-1.amazonaws.com sts.ap-southeast-1.amazonaws.com *.tagtoo.co *.googleapis.com https://dataplane.rum.ap-southeast-1.amazonaws.com https://payment.ipay88.com.my/ePayment/entry.asp https://mystartr.sgp1.digitaloceanspaces.com https://images.mystartr.my https://sgp1.digitaloceanspaces.com *.firebasedatabase.app;font-src 'self' fonts.gstatic.com data:;frame-src 'self' td.doubleclick.net www.google.com recaptcha.google.com www.facebook.com youtube.com www.youtube.com *.tagtoo.co *.hotjar.com *.ctos.com.my *.mystartr.my https://optimize.google.com https://mystartr-static.s3.ap-southeast-1.amazonaws.com *.firebasedatabase.app;img-src 'self' * 'unsafe-inline' data: blob: images.mystartr.my www.gstatic.com www.googletagmanager.com 'unsafe-eval' www.google-analytics.com www.google.com/ads/ga-audiences stats.g.doubleclick.net https://optimize.google.com;manifest-src 'self';worker-src 'none';form-action 'self' www.facebook.com *.merchant.razer.com *.fiuu.com *.onlinepayment.com.my *.ipay88.com.my;child-src 'self' 'unsafe-inline' 'unsafe-eval';media-src 'self' https://images.mystartr.my
x-content-type-options: nosniff
referrer-policy: origin-when-cross-origin
strict-transport-security: max-age=15552000; includeSubDomains
x-xss-protection: 1; mode=block
vary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Accept-Encoding
link: </_next/static/media/2fb5d94d8dca0cc5-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </_next/static/media/851c14db057e20c2-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </_next/static/media/904be59b21bd51cb-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </_next/static/media/e807dee2426166ad-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2"
cache-control: private, no-cache, no-store, max-age=0, must-revalidate
server-timing: cfCacheStatus;desc="DYNAMIC", cfEdge;dur=1179,cfOrigin;dur=269
x-envoy-upstream-service-time: 262
x-served-by: www.mystartr.com
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=6vy%2BbcdC7cRX9YbewqxLy65GsOx1VbQsROQIv8%2BGnqAxD1utKxw8tYoIoHFmy2i2JwcFox2wJRCzEwuBkvaoDxT389bFVd6xTivQ1nHeq3E8pLhOpDboz1Vg7V54sQ9%2F1DE%3D"}]}
cf-cache-status: DYNAMIC
content-encoding: br
cf-ray: a4fc9fd55ca1d0a4-CDG