HTTP/1.1 200 OK
Server: nginx
Date: Mon, 29 Jun 2020 16:41:27 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 49587
Connection: keep-alive
Vary: Accept-Encoding
Cache-Control: private
Set-Cookie: lang=ru-RU; expires=Mon, 28-Jun-2021 21:00:00 GMT; path=/; secure; HttpOnly
Set-Cookie: ASP.NET_SessionId_5=foywpb4vvrah5gsyzmmhlsmk; path=/; secure; HttpOnly
X-AspNet-Version: 4.0.30319
Set-Cookie: lang=ru-RU; expires=Mon, 28-Jun-2021 21:00:00 GMT; path=/; secure; HttpOnly
Set-Cookie: ASP.NET_SessionId_5=foywpb4vvrah5gsyzmmhlsmk; path=/; secure; HttpOnly
Set-Cookie: XSRF-TOKEN=rgfBbtb0_q2TmXlLfNJVNOjQKXiIlgOlGea75mNiIEdkhcG4X7Xx3t7YtUxJntIqR8Jsm9Yh6ftgRS8-o9sGaDPA6eq3jNfJVA4bem_qKJk1:spgGGFlRkey6RtbloEDIqmUPLC02WRJuIqpyr3_f1ZYijeqb1k-dXkMC9wh87t4RVKWANykQvDZI8UxEj2JCtIPidoIZ2fgfwltnuNK2_Dk1; path=/; secure
Set-Cookie: __AntiXsrfToken=52e3d99d10074eb7a4566af5b8c79f3d; path=/; secure; HttpOnly
X-Powered-By: ASP.NET
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://indx.ru
Access-Control-Allow-Methods: GET, POST
Access-Control-Allow-Headers: Origin,Referrer-Policy,X-Requested-With, Content-Type, Accept
Access-Control-Max-Age: 1728000
X-Frame-Options: deny
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: default-src 'self' *.gstatic.com *.web.money *.wmtransfer.com *.webmoney.ru; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googletagmanager.com *.google-analytics.com *.web.money *.wmtransfer.com *.webmoney.ru; img-src 'self' *.google-analytics.com data: *.googletagmanager.com *.google-analytics.com *.web.money *.wmtransfer.com *.webmoney.ru; style-src 'self' 'unsafe-inline' fonts.googleapis.com; frame-src 'self' *.web.money *.wmtransfer.com *.webmoney.ru; connect-src 'self' *.googletagmanager.com *.google-analytics.com *.web.money *.wmtransfer.com *.webmoney.ru;
Referrer-Policy: strict-origin
Feature-Policy: autoplay 'none'; camera 'none'; microphone 'none'; midi 'none'; payment 'none'; vr 'none'; geolocation 'none'
X-Permitted-Cross-Domain-Policies: none
Strict-Transport-Security: max-age=31536000; includeSubDomains
Pragma: no-cache
Cache-Control: no-cache