HTTP/1.1 200 OK
Server: nginx
Date: Sat, 08 Jun 2019 00:16:38 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Set-Cookie: PHPSESSID=5q6libq6j08c5slin412khmi88; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: YII_CSRF_TOKEN=d6ad0d20d6ed596190a39a81e3b85034f99060c9s%3A40%3A%2240647267d71e1ee50bf6424789689c6f09b4905f%22%3B; path=/
Strict-Transport-Security: max-age=0;
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'  https://yastatic.net  https://*.yastatic.net   https://*.yandex.net  https://*.twimg.com  https://*.log.optimizely.com https://*.optimizely.com https://hipo.kz http://hipo.kz https://*.hipo.kz http://*.hipo.kz https://hipo.kz http://hipo.kz https://*.hipo.kz http://*.hipo.kz https://*.googletagmanager.com http://*.googletagmanager.com https://*.google-analytics.com http://*.google-analytics.com https://*.googleadservices.com http://*.googleadservices.com https://*.yandex.ru http://*.yandex.ru https://*.twitter.com https://*.linkedin.com http://*.linkedin.com https://vk.com http://vk.com https://*.vk.com http://*.vk.com https://*.facebook.com http://*.facebook.com https://*.facebook.net http://*.facebook.net https://*.sematext.com; img-src 'self' data: blob: https://hipo.kz  https://*.hipo.kz http://*.hipo.kz  https://*.twimg.com  https://*.twitter.com https://*.google-analytics.com http://*.google-analytics.com https://*.facebook.com http://*.facebook.com https://*.doubleclick.net http://*.doubleclick.net https://*.google.com http://*.google.com https://*.google.kz https://mc.yandex.ru https://vk.com http://vk.com https://*.licdn.com; style-src 'self' https://hipo.kz https://hipo.kz 'unsafe-inline'  https://*.twitter.com  https://*.twimg.com  https://fonts.googleapis.com; font-src 'self' https://hipo.kz https://hipo.kz  https://*.gstatic.com https://themes.googleusercontent.com; frame-src  https://yastatic.net  https://*.yastatic.net  https://hipo.kz https://hipo.kz  https://*.youtube.com  https://youtube.com  https://*.twitter.com  https://*.facebook.com https://s-static.ak.facebook.com https://platform.twitter.com http://*.facebook.com http://static.ak.facebook.com http://platform.twitter.com; connect-src 'self' https://hipo.kz https://hipo.kz  https://*.yandex.kz  https://*.log.optimizely.com  https://mc.yandex.ru data: blob: https://hipo.kz; object-src 'self'
Public-Key-Pins: pin-sha256="86xYb4FDUkj1eKU4ORfZaq33ctAAhyG/q+u+rW4ZSSU="; \
   pin-sha256="4QWRJVUIqQylbXCS/zjzz4monBBGVngSdBf8JMBY4Ac="; \
   pin-sha256="VwtkjuoGewB31BE096OZglRlIMNLmRuzsbLS8YVcBjM=";