HTTP/1.1 200 OK
Server: nginx
Date: Tue, 15 Dec 2020 22:07:23 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Set-Cookie: referer=http%3A%2F%2Fwww.google.com%2F; expires=Thu, 14-Jan-2021 22:07:23 GMT; Max-Age=2592000; path=/; HttpOnly
Set-Cookie: landing=%2F; path=/; HttpOnly
Set-Cookie: PHPSESSID=fc210a6174357a28d1a8c300c9ab6e8a; path=/; HttpOnly
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block; report=/_csp
Referrer-Policy: no-referrer
Feature-Policy: geolocation none;midi none;notifications none;push none;sync-xhr none;microphone none;camera none;magnetometer none;gyroscope none;speaker self;vibrate none;fullscreen self;payment none;
Content-Security-Policy-Report-Only: default-src 'self' wss:; frame-src 'self' https://vk.com https://yastatic.net https://www.youtube.com https://mc.yandex.ru; font-src 'self' https://fonts.gstatic.com; media-src 'self' https://code.jivosite.com; connect-src * https:; style-src * 'unsafe-inline' https: data:; script-src 'self' https://code.jivosite.com https://www.google-analytics.com https://ssl.google-analytics.com https://mc.yandex.ru https://www.googletagmanager.com https://vk.com https://yastatic.net 'unsafe-inline' 'unsafe-eval'; img-src * https: data:; report-uri /_csp