Qa-iqos.com - Krdce.qa-iqos.com

cache-control: max-age=0, must-revalidate, no-cache, no-store
content-security-policy: upgrade-insecure-requests;
content-security-policy-report-only: font-src data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com self *.unpkg.com *.salesforceliveagent.com *.rsmpay.kcp.co.kr *.googletagmanager.com rsmpay.kcp.co.kr/pay/mobileGW.kcp 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com *.sharethis.com https://service.force.com self *.daum.net *.daumcdn.net *.iamport.kr pmi.23video.com *.cdn.optimizely.com *.doubleclick.net *.service.force.com *.adsrvr.org *.crwdcntrl.net *.rsmpay.kcp.co.kr 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.sharethis.com self cdn.cookielaw.org ad.doubleclick.net www.google.co.kr data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.sharethis.com https://*.optimizely.com pmk.mapped.co.kr www.mapped.co.kr https://service.force.com https://developers.kakao.com https://optanon.blob.core.windows.net https://ssl.daumcdn.net http://t1.daumcdn.net https://d.la2-c1cs-ukb.salesforceliveagent.com self *.daum.net *.daumcdn.net *.optimizely.com *.pstatic.net *.naver.net *.cookielaw.org *.service.force.com pmi.23video.com unpkg.com *.salesforceliveagent.com *.adsrvr.org *.crwdcntrl.net *.adform.net *.qualtrics.com *.line-website.com *.kakao.com *.kakaocdn.net *.googleapis.com *.googletagmanager.com *.iamport.kr *.newrelic.com *.rsmpay.kcp.co.kr 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.sharethis.com https://service.force.com self service.force.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com self 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com *.sharethis.com https://*.optimizely.com self wcs.naver.com cdn.cookielaw.org *.doubleclick.net service.force.com logx.optimizely.com www.google.com googleads.g.doubleclick.net *.crwdcntrl.net *.qualtrics.com *.daum.net *.nr-data.net *.onkakao.net 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';
content-type: text/html; charset=UTF-8
expires: Sat, 25 Nov 2023 10:44:12 GMT
pragma: no-cache
set-cookie: PHPSESSID=a75b4be9f17328001fb8e8c933bbe261; expires=Mon, 25-Nov-2024 11:44:12 GMT; Max-Age=3600; path=/; domain=krdce.qa-iqos.com; secure; HttpOnly; SameSite=Lax
traceresponse: 00-180b302d46ae892a51c089e66b41f446-fd1d6c2392b90164-01
x-content-type-options: nosniff
x-debug-info: eyJyZXRyaWVzIjowfQ==
x-platform-server: i-0373b2661962d080e
x-platform-server: i-0373b2661962d080e
x-xss-protection: 1; mode=block
accept-ranges: bytes
date: Mon, 25 Nov 2024 10:44:14 GMT
x-served-by: cache-chi-kigq8000104-CHI
x-cache: MISS
x-cache-hits: 0
x-timer: S1732531452.839417,VS0,VE2451
vary: Accept-Encoding,Cookie
access-control-allow-origin: *
x-frame-options: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS
access-control-allow-headers: Origin,Accept,X-Requested-With,Content-Type,Access-Control-Request-Method,Access-Control-Request-Headers,Authorization,Store,Pragma
strict-transport-security: max-age=31557600