iding.tw website report

HTTP/2 200
content-type: text/html;charset=utf-8
date: Sun, 25 Oct 2026 21:37:27 GMT
content-encoding: gzip
permissions-policy: camera=(), display-capture=(), fullscreen=(), geolocation=(self), microphone=()
referrer-policy: no-referrer
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-xss-protection: 1; mode=block
vary: Accept-Encoding
access-control-allow-origin: *
set-cookie: _loc=undefined; Path=/; HttpOnly; Secure; SameSite=Lax, i18n_redirected=zh-TW; Path=/; Expires=Mon, 25 Oct 2027 21:37:27 GMT; SameSite=Lax, _a=null; Max-Age=2592000; Path=/; HttpOnly; Secure; SameSite=Lax
cross-origin-resource-policy: same-origin
cross-origin-opener-policy: same-origin
cross-origin-embedder-policy: unsafe-none
content-security-policy: base-uri 'self'; font-src 'self' https://fonts.gstatic.com; form-action 'self'; frame-ancestors 'none'; img-src 'self' data: http://localhost:3000 https://assets.iding.tw https://demo-dev.iding.tw/ https://fonts.gstatic.com https://iding.tw https://localhost:3000 https://maps.googleapis.com https://maps.gstatic.com https://play.google.com https://preview.iding.tw https://staging.iding.tw https://weiby-breakfast-store.s3-us-west-2.amazonaws.com https://weiby-breakfast-store.s3.amazonaws.com https://weiby-breakfast-store.weibyapps.com https://weiby.tw https://www.google-analytics.com https://www.google.com.tw/ads/ https://www.googletagmanager.com https://www.gstatic.com; object-src 'none'; script-src-attr 'none'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://www.googletagmanager.com; script-src 'self' 'nonce-uddSskFCWgdAXppHq9JeGfBx' 'strict-dynamic' 'wasm-unsafe-eval' https://demo-dev.iding.tw/ http://localhost:3000 https://iding.tw https://js.tappaysdk.com https://localhost:3000 https://maps.googleapis.com https://pay.google.com https://preview.iding.tw https://staging.iding.tw https://websdk-uat.cherrix.co https://www.google-analytics.com/ https://www.googletagmanager.com https://www.gstatic.com; upgrade-insecure-requests; default-src 'self'; connect-src data: http://127.0.0.1:12347 http://localhost:12347 http://localhost:3000 https://a.clarity.ms/collect https://alloy-collector.weibyapps.com.tw https://analytics.google.com https://demo-dev.iding.tw/ https://fraud.tappaysdk.com https://google.com/pay https://iding.tw https://istore-stag.weibyapps.com https://istore.weibyapps.com https://localhost:3000 https://maps.googleapis.com https://pay.google.com https://preview.iding.tw https://service-uat.cherrix.co https://staging.iding.tw https://www.google-analytics.com/ https://www.google.com/pay https://www.googletagmanager.com https://www.gstatic.com ws://localhost:* wss://localhost:*; frame-src http://localhost:3000 https://demo-dev.iding.tw/ https://fraud.tappaysdk.com https://iding.tw https://js.tappaysdk.com https://localhost:3000 https://pay.google.com https://preview.iding.tw https://staging.iding.tw https://www.googletagmanager.com; worker-src 'self' blob:;
origin-agent-cluster: ?1
x-dns-prefetch-control: off
x-cache: Miss from cloudfront
via: 1.1 bcdbf1400b5b04e46f310591b86ea9b8.cloudfront.net (CloudFront)
x-amz-cf-pop: CDG52-P5
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: _Q1IDzllphl_DbgKr7NhDlXX92ODNSOp82duP0342Tn9GPNs3Wn4kw==