HTTP/1.1 200 OK
Server: nginx
Date: Wed, 11 Dec 2019 18:48:21 GMT
Content-Type: text/html; charset=windows-1251
Content-Length: 14959
Connection: keep-alive
Vary: Accept-Encoding
P3P: policyref="/bitrix/p3p.xml", CP="NON DSP COR CUR ADM DEV PSA PSD OUR UNR BUS UNI COM NAV INT DEM STA"
X-Powered-CMS: Bitrix Site Manager (c78d4b5d4a110e803002fb734002d062)
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Link: </bitrix/templates/svinki_fast/all-css.css>; rel=preload; as=style, </bitrix/templates/svinki_fast/all-script.js>; rel=preload; as=script
Set-Cookie: PHPSESSID=2fe9f17a55d8b3b3de21eed8249382f6; path=/; domain=www.babai.ru; HttpOnly; Secure; SameSite=Lax
Set-Cookie: BABAI_SM_GUEST_ID=975283; expires=Sat, 05-Dec-2020 18:48:21 GMT; Max-Age=31104000; path=/; domain=www.babai.ru; HttpOnly; Secure; SameSite=Lax
Set-Cookie: BABAI_SM_LAST_VISIT=11.12.2019+21%3A48%3A21; expires=Sat, 05-Dec-2020 18:48:21 GMT; Max-Age=31104000; path=/; domain=www.babai.ru; HttpOnly; Secure; SameSite=Lax
Last-Modified: Tue, 10 Dec 2019 07:21:44 GMT
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Expect-CT: max-age=86400, enforce
Expect-Staple: max-age=31536000; includeSubDomains; preload
Referrer-Policy: strict-origin-when-cross-origin
Content-Security-Policy: default-src 'self' mta-sts.babai.ru www.babai.ru babai.ru; script-src 'self' 'unsafe-inline' 'unsafe-eval' mta-sts.babai.ru www.babai.ru babai.ru *.yandex.ru yandex.ru *.yandex.net yandex.st *.yandex.st https://*.yandex.ru https://www.googletagmanager.com https://*.googletagmanager.com *.googletagmanager.com *.googleapis.com *.gstatic.com gstatic.com *.googlesyndication.com *.doubleclick.net https://*.googleapis.com https://*.gstatic.com https://gstatic.com https://*.googlesyndication.com https://cdn.ampproject.org cdn.ampproject.org; frame-src 'self' mta-sts.babai.ru www.babai.ru babai.ru https://*.youtube-nocookie.com https://youtube-nocookie.com *.yandex.ru yandex.ru *.yandex.net yandex.st *.yandex.st https://*.yandex.ru *.googleapis.com *.gstatic.com gstatic.com https://www.googletagmanager.com https://*.googletagmanager.com *.googletagmanager.com *.googlesyndication.com *.doubleclick.net youtube.ru youtube.com *.youtube.ru *.youtube.com https://youtube.ru https://youtube.com https://*.youtube.ru https://*.youtube.com apis.google.com https://*.googleapis.com https://*.gstatic.com https://gstatic.com https://*.googlesyndication.com https://*.doubleclick.net https://apis.google.com https://cdn.ampproject.org cdn.ampproject.org; object-src 'self' *; img-src 'self' * data: * blob:; font-src 'self' * data:; connect-src 'self' *; media-src 'self' * data: * blob:; style-src 'unsafe-inline' 'unsafe-eval' 'self' *;
Feature-Policy: payment 'none'
Public-Key-Pins: pin-sha256="UHmokpoXgrwmJuyHGGKBUspMFbxOSblKyjd74Ui14Qg="; pin-sha256="HXXQgxueCIU5TTLHob/bPbwcKOKw6DkfsTWYHbxbqTY="; includeSubDomains; max-age=2592000; 
Strict-Transport-Security: max-age=63072000; includeSubdomains; preload