Nestle.com.my

Date: Tue, 01 Jul 2025 14:04:46 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Tue, 01 Jul 2025 15:04:46 GMT
Location: https://www.nestle.com.my/
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 958674572eaf9267-FRA

HTTP/2 200 
date: Tue, 01 Jul 2025 14:04:46 GMT
content-type: text/html; charset=UTF-8
content-security-policy: frame-ancestors 'self';
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.cdn.cookielaw.org *.cookie-cdn.cookiepro.com *.onetrust.com *.googleapis.com *.googletagmanager.com *.google-analytics.com *.google.com *.google.co.uk *.newrelic.com *.betrad.com bam.nr-data.net static.addtoany.com cdnjs.cloudflare.com brand-ecommerce-assets.fusepump.com *.youtube.com s.ytimg.com *.evidon.com code.jquery.com *.cloudfront.net *.serving-sys.com 7225833.collect.igodigital.com connect.facebook.net stats.g.doubleclick.net *.googleoptimize.com cdn.jsdelivr.net static.ads-twitter.com snap.licdn.com *.googleadservices.com *.outbrain.com *.usabilla.com googleads.g.doubleclick.net analytics.twitter.com  cdn.hypemarks.com www.gstatic.com unpkg.com cdn.gbqofs.com c.lytics.io cdn.cookielaw.org addtocalendar.com d3js.org data-apac.nestle.com.my https://cdns.us1.gigya.com/ *.qualtrics.com *.ckeditor.com *.gigya.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com fonts.gstatic.com cdnjs.cloudflare.com brand-ecommerce-assets.fusepump.com *.youtube.com cloud.typography.com *.google.com cdn.jsdelivr.net *.cdn.cookielaw.org *.cookie-cdn.cookiepro.com *.onetrust.com c.lytics.io *.nestlepurinacareers.com *.nestlejobs.com unpkg.com *.cloudfront.net *.usabilla.com addtocalendar.com; img-src 'self' data: *.googleapis.com *.gstatic.com *.cloudflare.com *.google-analytics.com stats.g.doubleclick.net ade.googlesyndication.com www.google.co.uk *.doubleclick.net *.betrad.com *.amazonaws.com px.pump.to brand-ecommerce-assets.fusepump.com *.evidon.com nova.collect.igodigital.com *.facebook.com www.google.co.in *.outbrain.com *.cloudfront.net *.ads.linkedin.com *.googletagmanager.com t.co p.adsymptotic.com analytics.twitter.com cdn.cookielaw.org c.lytics.io *.cloudfront.net *.usabilla.com *.google.com cdn.jsdelivr.net app.bowencraggs.com *.staticflickr.com blob: *.qualtrics.com cdns.us1.gigya.com/ *.gigya.com; media-src 'self'; frame-src 'self' static.addtoany.com *.youtube.com *.youtu.be youtu.be info.evidon.com *.doubleclick.net *.facebook.com *.google.com cdn.hypemarks.com *.cloudfront.net *.usabilla.com *.q4web.com https://www.googletagmanager.com/ https://cdns.us1.gigya.com/ app.tintup.com *.googletagmanager.com *.qualtrics.com *.gigya.com; frame-ancestors 'self'; child-src 'self' blob: static.addtoany.com *.youtube.com *.youtu.be youtu.be info.evidon.com https://2275258.fls.doubleclick.net http://2275258.fls.doubleclick.net; font-src 'self' data: fonts.gstatic.com fonts.googleapis.com cdnjs.cloudflare.com cdn.jsdelivr.net unpkg.com *.cloudfront.net *.usabilla.com; connect-src 'self' brand-ecommerce-api.fusepump.com *.google-analytics.com collect.analyze.ly secure-ds.serving-sys.com bam.nr-data.net *.g.doubleclick.net cdnjs.cloudflare.com pagead2.googlesyndication.com *.linkedin.com *.cdn.cookielaw.org *.cookie-cdn.cookiepro.com *.onetrust.com c.lytics.io *.cookielaw.org *.nestlepurinacareers.com https://olivia.paradox.ai unpkg.com *.google.com report.nestle.gbqofs.io wss://ws.paradox.ai *.tintup.com *.us-east-1.amazonaws.com *.cloudfront.net *.usabilla.com maps.googleapis.com addtocalendar.com cdn.jsdelivr.net data-apac.nestle.com.my https://cdns.us1.gigya.com/ cdns.us1.gigya.com accounts.us1.gigya.com github.com login.es-test.factory.nestle.com endpoint-nestle-dev.cognigy.cloud js.adsrvr.org accounts.eu1.gigya.com login.ar-test.factory.nestle.com *.recaptcha.net *.googletagmanager.com *.googlesyndication.com *.qualtrics.com login.nestle.com.my/ *.facebook.com/ *.gigya.com; upgrade-insecure-requests
cache-control: max-age=60, public, s-maxage=21600
x-drupal-dynamic-cache: UNCACHEABLE (poor cacheability)
content-language: en
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
expires: Sun, 19 Nov 1978 05:00:00 GMT
last-modified: Tue, 01 Jul 2025 10:45:56 GMT
vary: Cookie,Accept-Encoding
x-xss-protection: 1; mode=block
strict-transport-security: max-age=31622400; includeSubDomains
referrer-policy: no-referrer
x-request-id: v-9195e984-5668-11f0-86b3-5b43ba298912
x-ah-environment: 01live
age: 11927
via: varnish
x-cache: HIT
x-cache-hits: 1092
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 958674579b9c9bdd-FRA
content-encoding: gzip