HTTP/1.1 200 OK
Cache-Control: no-cache, no-store
Pragma: no-cache
Content-Type: text/html; charset=utf-8
Expires: -1
Vary: User-Agent, Accept-Encoding
Strict-Transport-Security: max-age = 31536000; includeSubDomains; preload
Content-Security-Policy: frame-ancestors 'self' 
Set-Cookie: headandshoulders_ru#lang=ru-RU; path=/; secure; HttpOnly
Set-Cookie: ASP.NET_SessionId=iwz4u0o5g3oavyyh4gxuf5ro; path=/; secure; HttpOnly
X-Frame-Options: SAMEORIGIN
Set-Cookie: __CSRFCOOKIE=oGXFMlQDFpHcHlgHMd98iP58GDxvsJ0pOiAI0k8K2XUAkv7zqzAJaazE0JOSjw2WbzZIEfCvqA1RA0GRvLrHFsF94NQsr8ViyoAu1wT5TSo9dKEtNJarlAsOmKor; path=/; secure; HttpOnly
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Origin: *
X-Frames-Options: SAMEORIGIN
X-UA-Compatible: IE=edge
X-Server: SCCDH2
X-Xss-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Date: Fri, 07 Jun 2019 17:20:03 GMT
Set-Cookie: TS0112e387=019208dba6a20ac91afa36d6f81c46a2e63d50e13b2e3f74b430eead1e042f0b8c74e85e50a03b723ce09b6b48a96d86b21e9b62f4a0b46b1ccceddbe1f4defa85b968272af72b84481b65af23e2f970443b47a30cf7c4417c797be43dd48c8526c8f3b2a2; Path=/; Secure; HTTPOnly
Transfer-Encoding: chunked