Americanexpress.co.jp Summary

Content-Security-Policy: connect-src https://assets.adobedtm.com/ 'self' https://performance.typekit.net/ wss://www.americanexpress.com/ https://*.liveperson.net/ https://*.contentsquare.net/ https://www.google-analytics.com/ https://americanexpresscards.tt.omtrdc.net/ https://v.lkqd.net/ https://in.hotjar.com/ https://www.youtube.com/ https://*.aexp-static.com/ https://s.delvenetworks.com/ https://*.visualwebsiteoptimizer.com/ https://events.bouncex.net/ https://connect.facebook.net/ https://*.americanexpress.com/ https://dpm.demdex.net/ wss://iwmap.americanexpress.com/ https://bat.bing.com/ https://www.facebook.com/ https://vc.hotjar.io/ https://aeopprodvip.acxiom.com/ wss://va.msg.liveperson.net/ https://*.akamaihd.net/; base-uri https://aeopprodvip.acxiom.com/ https://*.americanexpress.com/ https://ds-aksb-a.akamaihd.net/ 'self'; style-src https://14106077.va.cobrowse.liveperson.net/ https://cdnjs.cloudflare.com/ 'unsafe-inline' 'self' https://fonts.googleapis.com/ https://icm.americanexpress.com/ https://*.aexp-static.com/ https://cloud.webtype.com/ https://cdn.myfonts.net/ http://cloud.webtype.com/; report-uri https://csp.tsrs.cloud/r/4e4910de5d8c0bbcefab5dbd9886b07221005e61; script-src http://assets.adobedtm.com/ 'self' https://*.delvenetworks.com/ https://s.yjtag.jp/ https://*.lpsnmedia.net/ https://www.gstatic.com/ https://www.googleadservices.com/ https://*.hotjar.com/ http://omn.americanexpress.com/ http://www.aexp-static.com/ https://img.en25.com/ https://d5phz18u4wuww.cloudfront.net/ https://bat.bing.com/ https://*.google.com/ https://*.omtrdc.net/ https://ads.avocet.io/ https://*.doubleclick.net/ https://*.contentsquare.com/ https://easy.myfonts.net/ https://cdnssl.clicktale.net/ https://addevent.com/ https://*.ensighten.com/ https://secure.leadforensics.com/ 'unsafe-eval' https://*.ss-omtrdc.net/ https://assets.adobedtm.com/ 'unsafe-inline' https://use.typekit.net/ https://stags.bluekai.com/ https://*.liveperson.net/ https://maxcdn.bootstrapcdn.com/ https://script.crazyegg.com/ https://bam.nr-data.net/ https://code.jquery.com/ https://www.cdn-net.com/ https://www.google-analytics.com/ https://js-agent.newrelic.com/ https://dev.visualwebsiteoptimizer.com/ https://yjtag.yahoo.co.jp/ https://service.maxymiser.net/ https://cdn.raygun.io/ https://ads.avct.cloud/ https://www.googletagmanager.com/ https://*.aexp-static.com/ https://www.youtube.com/ https://snap.licdn.com/ https://*.bounceexchange.com/ http://nexus.ensighten.com/ https://connect.facebook.net/ https://*.americanexpress.com/ https://*.linkedin.com/ https://ct.contentsquare.net/ https://amplify.outbrain.com/ https://*.googleapis.com/ https://contentsquare.com/ https://assets.omny.fm/ https://aeopprodvip.acxiom.com/ https://*.akamaihd.net/; img-src 'self' data: https: http:; media-src https://www.youtube.com/ https://lpcdn.lpsnmedia.net/ https://origin-slgem.americanexpress.com/ https://production.smedia.lvp.llnw.net/ 'self' http://production.smedia.lvp.llnw.net/; frame-ancestors https://*.aexp.com/  https://*.americanexpress.com/; worker-src  'self' blob:; object-src  'self'; form-action https://connect.facebook.net/ https://www.cdn-net.com/ https://www.facebook.com/ https://amexhk.chubbtravelinsurance.com/ https://*.americanexpress.com/ 'self'; font-src https://cdnjs.cloudflare.com/ https://fonts.gstatic.com/ http://www.aexp-static.com/ https://use.typekit.net/ 'self' https://easy.myfonts.net/ http://fonts.gstatic.com/ https://maxcdn.bootstrapcdn.com/ https://*.aexp-static.com/ https://cloud.webtype.com/ http://cloud.webtype.com/ data:; frame-src https://connect.facebook.net/ https://*.americanexpress.com/ https://*.liveperson.net/ https://lpcdn.lpsnmedia.net/ https://*.facebook.com/ https://vars.hotjar.com/ https://www.cdn-net.com/ https://*.doubleclick.net/ https://assets.bounceexchange.com/ https://service.maxymiser.net/ https://*.youtube.com/ https://youtube.com/ https://*.aexp-static.com/ https://omny.fm/ https://*.akamaihd.net/ https://aexp.demdex.net/ https://youtu.be/;
Strict-Transport-Security: max-age=15552000;
Accept-Ranges: bytes
Vary: Accept-Encoding
Cache-Control: max-age=0, no-cache, no-store, must-revalidate
Expires: -1
Pragma: no-cache
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Cnection: close
Content-Type: text/html
Date: Wed, 25 Nov 2020 06:23:43 GMT
Connection: keep-alive
Set-Cookie: agent-id=2d34689b-7b9c-474f-a456-ae88055ed63e; expires=Thu, 25-Nov-2021 06:23:43 GMT; path=/; domain=.americanexpress.com; secure; HttpOnly
X-Frame-Options: SAMEORIGIN
x-encoded-content-encoding: gzip
x-encoded-content-length: 43692