HTTP/1.1 200 OKCache-Control: privateContent-Length: 28756Content-Type: text/html; charset=utf-8Content-Encoding: gzipVary: Accept-EncodingServer: Microsoft-IIS/7.5Set-Cookie: _sc=ocyxyfyn3gwhgo1frvlad3wz; path=/; HttpOnlyContent-Security-Policy: default-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; script-src 'self' 'unsafe-inline' 'unsafe-eval' yastatic.net ajax.googleapis.com *.yandex.net yandex.st code.createjs.com apis.google.com www.gstatic.com www.google.com ssl.gstatic.com www.googletagmanager.com *.facebook.net www.googleadservices.com vk.com st.top100.ru www.google-analytics.com *.yandex.ru *.adfox.ru *.exist.ru *.exist.parts telegram.org; img-src * 'unsafe-inline' data:; font-src * 'unsafe-inline'; connect-src * 'self' 'unsafe-inline' 'unsafe-eval'; frame-src 'self' *.exist.ru https://tc.exist.ru:4433 yandex.ru yandex.kz yandex.ua yandex.by *.yandex.ru *.yandex.kz *.yandex.by *.yandex.ua www.facebook.com staticxx.facebook.com vk.com www.google.com api-maps.yandex.ru www.elcats.ru www.japancats.ru oauth.telegram.org;X-XSS-Protection: 1; mode=blockX-Frame-Options: sameoriginDate: Tue, 27 Nov 2018 18:46:37 GMT