HTTP/1.1 200 OK
cache-control: public, no-cache="Set-Cookie"
content-type: text/html; charset=utf-8
etag: 3|12/15/2020 11:24:01 AM|DESKTOP
set-cookie: .ASPXBrowserOverride=; expires=Mon, 14-Dec-2020 04:24:01 GMT; path=/
set-cookie: DMX_View=DESKTOP; domain=.dienmayxanh.com; expires=Tue, 14-Dec-2021 17:00:00 GMT; path=/
set-cookie: DMX_Personal=%7b%22UID%22%3a%2264efdd05f3bd362eb736f1794e027b5e11bfdba1%22%2c%22ProvinceId%22%3a3%2c%22Culture%22%3a%22vi-3%22%2c%22Lat%22%3a0.0%2c%22Lng%22%3a0.0%2c%22DistrictId%22%3a0%2c%22WardId%22%3a0%2c%22CRMCustomerId%22%3anull%2c%22CustomerSex%22%3a0%2c%22CustomerName%22%3anull%2c%22CustomerPhone%22%3anull%2c%22CustomerEmail%22%3anull%2c%22CustomerIdentity%22%3anull%2c%22CustomerBirthday%22%3anull%2c%22CustomerAddress%22%3anull%2c%22IsDefault%22%3atrue%7d; domain=.dienmayxanh.com; expires=Tue, 14-Dec-2021 17:00:00 GMT; path=/
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
date: Tue, 15 Dec 2020 04:24:01 GMT
content-length: 303592
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
referrer-policy: no-referrer
content-security-policy: default-src 'self' 'unsafe-eval' *.tgdd.vn *.thegioididong.com *.dienmayxanh.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; img-src 'self' data: https:; style-src 'self' 'unsafe-inline' https: data:; font-src data: 'self' https:; frame-src 'self' https://*.api.useinsider.com https://vuivuilocal.firebaseapp.com https://*.hotjar.com https://thegioididong.typeform.com https://*.sociaplus.com  https://googleads.g.doubleclick.net https://*.youtube.com https://youtube.com https://*.doubleclick.net *.facebook.com *.google.com *.tgdd.vn *.thegioididong.com; media-src 'self' *.youtube.com youtube.com *.tgdd.vn *.thegioididong.com *.dienmayxanh.com; connect-src 'self' https://*.api.useinsider.com https://stats.g.doubleclick.net https://track.accesstrade.vn https://*.ecotrackings.com https://*.delighted.com https://*.useinsider.com https://*.sociaplus.com *.thegioididong.com *.tgdd.vn wss://rtm.thegioididong.com *.facebook.com *.googleapis.com *.google-analytics.com https://*.crazyegg.com https://*.hotjar.com; manifest-src 'self' https:; object-src 'self'
x-app-server: Be-Web-DMX-80/px131
x-via: dmx-ham32
strict-transport-security: max-age=31536000; preload;
set-cookie: SvID=e31|X9g6Z|X9g6Z; path=/
cache-control: private