HTTP/1.1 200 OK
Date: Sat, 20 Jun 2020 09:50:07 GMT
Content-Type: text/html; charset=UTF-8
Vary: Accept-Encoding
Set-Cookie: gc_city=1; expires=Sat, 27-Jun-2020 09:50:06 GMT; Max-Age=604800; path=/; domain=.gomaji.com; secure
Set-Cookie: gc_city=1; expires=Sat, 27-Jun-2020 09:50:06 GMT; Max-Age=604800; path=/; domain=.gomaji.com; secure
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Content-Security-Policy: default-src 'self'; img-src 'self' *.gomaji.com images.buy123.com.tw tr.line.me sb.scorecardresearch.com stats.g.doubleclick.net certify.alexametrics.com cx.atdmt.com *.cloudfront.net cloudfront-labs.amazonaws.com www.google-analytics.com bat.bing.com *.facebook.com *.facebook.net *.google.com *.google.com.tw www.googletagmanager.com data:; script-src 'self' 'unsafe-inline' *.gomaji.com *.google.com www.google-analytics.com www.googleadservices.com sb.scorecardresearch.com bat.bing.com certify-js.alexametrics.com connect.facebook.net code.jquery.com d.line-scdn.net d.line-cdn.net www.googletagmanager.com *.doubleclick.net *.instagram.com *.yahoo.com s.yimg.com; style-src 'self' 'unsafe-inline' 'unsafe-eval' *.gomaji.com fonts.googleapis.com; font-src 'self' *.gomaji.com fonts.googleapis.com cdnjs.cloudflare.com fonts.gstatic.com; frame-src 'self' *.gomaji.com *.google.com *.facebook.com *.youtube.com *.instagram.com; connect-src 'self' *.gomaji.com www.google-analytics.com www.facebook.com stats.g.doubleclick.net s.yimg.com;report-uri https://csp.gomaji.com/report.php
Content-Encoding: gzip
Via: 1.1 google
Alt-Svc: clear
Transfer-Encoding: chunked