HTTP/1.0 200 OK
Content-Security-Policy: img-src 'self' data: https: http:; connect-src https://www.google.co.th/ https://cdnjs.cloudflare.com/ http://www.americanexpress.com/ https://assets.adobedtm.com/ 'self' https://performance.typekit.net/ https://*.vivocha.com/ https://*.custhelp.com/ https://ds-aksb-a.akamaihd.net/ https://*.contentsquare.net/ https://14106077-sync.va.cobrowse.liveperson.net/ https://www.cdn-net.com/ https://dev.visualwebsiteoptimizer.com/ https://americanexpresscards.tt.omtrdc.net/ https://*.eloqua.com/ https://*.aexp-static.com/ https://events.bouncex.net/ https://*.americanexpress.com/ https://dpm.demdex.net/ https://bat.bing.com/ https://aeopprodvip.acxiom.com/ wss://va.msg.liveperson.net/ https://www.google.com/ wss://*.americanexpress.com/ https://ib.adnxs.com/ https://ing-district.clicktale.net/ https://conductor.clicktale.net/; form-action https://www.cdn-net.com/ http://www.americanexpress.com/ https://*.americanexpress.com/ https://*.custhelp.com/ 'self' https://*.eloqua.com/; object-src 'self' https://www.aexp-static.com/; worker-src  'self' blob:; plugin-types  application/x-shockwave-flash; media-src https://ssl.gstatic.com/ https://lpcdn.lpsnmedia.net/ https://production.smedia.lvp.llnw.net/ 'self' http://production.smedia.lvp.llnw.net/; style-src http://fonts.googleapis.com/ https://secure.cmax.americanexpress.com/ https://*.americanexpress.com/ 'unsafe-inline' 'self' https://cdn.vivocha.com/ https://fonts.googleapis.com/ https://*.aexp-static.com/ https://maxcdn.bootstrapcdn.com/ https://cloud.webtype.com/; frame-ancestors https://*.aexp.com/  https://*.americanexpress.com/; base-uri 'self' https://lpcdn.lpsnmedia.net/ https://*.americanexpress.com/; font-src https://cache.marriott.com/ https://use.typekit.net/ 'self' https://cdn.vivocha.com/ https://fonts.googleapis.com/ https://*.aexp-static.com/ https://maxcdn.bootstrapcdn.com/ https://cloud.webtype.com/ data: https://gem-dev.aexp.com/; frame-src https://icm.aexp-static.com/ https://*.americanexpress.com/ 'self' https://player.videosmart.com/ https://*.liveperson.net/ https://www.youtube-nocookie.com/ https://*.facebook.com/ https://lpcdn.lpsnmedia.net/ https://www.cdn-net.com/ https://fls.doubleclick.net/ https://*.doubleclick.net/ https://c1.adform.net/ https://www.payback.it/ https://service.maxymiser.net/ https://assets.bounceexchange.com/ https://www.youtube.com/ https://*.akamaihd.net/ https://aexp.demdex.net/ https://f2.vivocha.com/ https://*.yahoo.com/; report-uri https://csp.tsrs.cloud/r/f6b3ed01ef52c2d19145e23330772aa01baabd93; script-src https://s.ytimg.com/ http://icm.aexp-static.com/ 'self' https://*.delvenetworks.com/ https://*.demdex.net/ https://px.ads.linkedin.com/ https://*.lpsnmedia.net/ https://googleads.g.doubleclick.net/ https://www.gstatic.com/ https://www.googleadservices.com/ https://secure.cmax.americanexpress.com/ https://adservice.google.it/ https://img.en25.com/ https://d5phz18u4wuww.cloudfront.net/ https://report1.maritz.com/ https://*.google.com/ https://bat.bing.com/ https://www.youtube-nocookie.com/ https://*.omtrdc.net/ https://app.contentsquare.com/ https://ads.avocet.io/ https://va.v.liveperson.net/ https://static.doubleclick.net/ https://cdnssl.clicktale.net/ https://secure.leadforensics.com/ https://fidoapi.com/ 'unsafe-eval' https://ajax.googleapis.com/ https://cdnjs.cloudflare.com/ https://*.ss-omtrdc.net/ https://assets.adobedtm.com/ 'unsafe-inline' https://use.typekit.net/ https://*.liveperson.net/ https://*.vivocha.com/ https://dstatic.dev.ipc.us.aexp.com/ https://code.jquery.com/ https://www.cdn-net.com/ https://www.google-analytics.com/ https://dev.visualwebsiteoptimizer.com/ https://service.maxymiser.net/ https://www.googletagmanager.com/ https://*.aexp-static.com/ https://www.youtube.com/ https://snap.licdn.com/ https://*.bounceexchange.com/ https://connect.facebook.net/ https://*.adform.net/ https://*.americanexpress.com/ https://ct.contentsquare.net/ https://nexus.ensighten.com/ https://*.bluekai.com/ https://contentsquare.com/ https://aeopprodvip.acxiom.com/ https://*.akamaihd.net/ https://www.linkedin.com/; 
Strict-Transport-Security: max-age=15552000;
Cache-Control: max-age=0, no-cache, no-store, must-revalidate
Expires: -1
Pragma: no-cache
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Cnection: close
Content-Type: text/html
Date: Fri, 22 Jan 2021 00:36:19 GMT
Connection: close
Set-Cookie: agent-id=5ebceeda-a482-40b4-a9d5-5233f4f77708; expires=Sat, 22-Jan-2022 00:36:19 GMT; path=/; domain=.americanexpress.com; secure; HttpOnly
X-Frame-Options: SAMEORIGIN