HTTP/1.1 200 OK
Cache-Control: private
Content-Type: text/html; charset=utf-8
Set-Cookie: DMX_View=DESKTOP; domain=.dienmayxanh.com; expires=Mon, 06-May-2019 17:00:00 GMT; path=/; Secure
Set-Cookie: DMX_Personal={"UID":"32734ea033ea93ea04f7939704fd6983419f8fc4","ProvinceId":3,"Culture":"vi-3","Lat":0.0,"Lng":0.0,"DistrictId":0,"WardId":0,"CRMCustomerId":null,"CustomerSex":0,"CustomerName":null,"CustomerPhone":null,"CustomerEmail":null,"CustomerAddress":null,"IsDefault":true}; domain=.dienmayxanh.com; expires=Mon, 06-May-2019 17:00:00 GMT; path=/; Secure
Set-Cookie: .ASPXBrowserOverride=; expires=Sun, 06-May-2018 00:49:19 GMT; path=/; Secure
Server-Name: DMXOVM102
Server-PID: 6360
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Date: Mon, 07 May 2018 00:49:19 GMT
Content-Length: 166776
Public-Key-Pins: pin-sha256="FhOj9vyA2djpp1v4AMC/JCX2FkPkIYtP1q85oG1xFUU="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="JbQbUG5JMJUoI6brnx0x3vZF6jilxsapbXGVfjhN8Fg="; pin-sha256="YpymA+coFCPmfJbeM4tb2r50aC2OTPEDuzC3ZW9Huso="; max-age=0; preload
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Referrer-Policy: no-referrer
Content-Security-Policy: default-src 'self' 'unsafe-eval' *.tgdd.vn *.thegioididong.com *.dienmayxanh.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; img-src 'self' data: https:; style-src 'self' 'unsafe-inline' https: data:; font-src data: 'self' https:; frame-src 'self' *.facebook.com *.hotjar.com thegioididong.typeform.com *.sociaplus.com *.tgdd.vn *.thegioididong.com *.dienmayxanh.com https://googleads.g.doubleclick.net *.youtube.com youtube.com https://*.doubleclick.net *.facebook.com *.google.com; media-src 'self' *.youtube.com youtube.com *.tgdd.vn *.thegioididong.com *.dienmayxanh.com; connect-src 'self' https://track.accesstrade.vn https://*.ecotrackings.com https://*.delighted.com *.useinsider.com https://*.sociaplus.com *.thegioididong.com *.tgdd.vn wss://rtm.thegioididong.com *.facebook.com *.googleapis.com *.google-analytics.com; manifest-src 'self' https:; object-src 'self'; report-uri /csp-violation-report-endpoint/
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=15768000; preload;
Set-Cookie: SvID=e02|Wu+il|Wu+il; path=/