HTTP/1.1 200 OK
Server: nginx
Date: Mon, 10 Jun 2019 16:32:35 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 47643
Connection: keep-alive
Set-Cookie: PHPSESSID=6j521hl9b0jd9gkv6r5uh3s2o5; path=/; secure; HttpOnly
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Security-Policy: connect-src 'self' icard.bg *.icards.eu mc.yandex.ru ;default-src 'self' data: *.fontawesome.com *.gstatic.com *.googleapis.com *.icards.eu icard.bg *.google-analytics.com *.googletagmanager.com mc.yandex.ru *.facebook.net *.facebook.com *.doubleclick.net *.google.com *.google.bg ;frame-ancestors 'self' ;frame-src 'none';media-src 'self' *.icard.bg *.icards.eu ;object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' icard.bg *.icards.eu code.jquery.com *.zdassets.com *.google-analytics.com *.googleapis.com *.bootstrapcdn.com *.googletagmanager.com mc.yandex.ru *.facebook.net *.facebook.com *.google.com ;style-src 'self' 'unsafe-inline' icard.bg *.icards.eu *.gstatic.com *.fontawesome.com *.googleapis.com *.bootstrapcdn.com *.googletagmanager.com *.google.com ;
X-Frame-Options: SAMEORIGIN
Vary: Accept-Encoding
Strict-Transport-Security: max-age=31536000; includeSubdomains;