HTTP/1.1 200 OK
Server: nginx
Date: Sat, 18 May 2019 02:01:10 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Expires: Sat, 18 May 2019 02:03:09 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: PHPSESSID=klq2caf1np4b3kt17nb2suihp5; path=/;HttpOnly;Secure
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: DENY
Content-Security-Policy: default-src 'self'; script-src https://googleads.g.doubleclick.net https://developers.google.com https://maps.googleapis.com https://offerswidget.visa.com https://blinger.io https://www.googleadservices.com https://app.blinger.io https://mc.yandex.ru https://connect.facebook.net https://www.googletagmanager.com https://www.google-analytics.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src https://fonts.googleapis.com https://offerswidget.visa.com 'self' 'unsafe-inline' 'unsafe-eval'; img-src data: https://maps.googleapis.com https://app.blinger.io https://maps.gstatic.com https://www.google.com https://www.visa.com https://offerswidget.visa.com https://mc.yandex.ru https://blinger.io https://www.facebook.com https://www.google-analytics.com https://stats.g.doubleclick.net 'self'; frame-src https://bid.g.doubleclick.net https://widget.fxclub.org https://www.facebook.com https://www.youtube.com; connect-src https://www.google-analytics.com https://stats.g.doubleclick.net wss://app.blinger.io https://blinger.io https://mc.yandex.ru 'self'; font-src https://fonts.gstatic.com https://offerswidget.visa.com 'self'; base-uri 'self'; form-action https://www.bsb.by https://www.facebook.com; frame-ancestors 'self'