HTTP/1.1 200 OK
Cache-Control: private
Content-Type: text/html; charset=utf-8
Server: Halkbank WebServer
X-Frame-Options: SAMEORIGIN
X-Svr: 4
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=16070400; includeSubDomains
X-UA-Compatible: IE=IE11
X-XSS-Protection: 1; mode=block
Content-Security-Policy: default-src 'self' *.youtube.com *.halkbank.com.tr *.google.com *.google.com.tr *.gstatic.com *.googleapis.com *.doubleclick.net *.activebuilder.com *.activebuilder.local *.google-analytics.com *.googletagmanager.com *.facebook.com data:; style-src 'self' 'unsafe-inline' *.halkbank.com.tr *.gstatic.com *.google.com *.activebuilder.com *.activebuilder.local *.googleapis.com *.google-analytics.com *.googletagmanager.com; script-src 'self' 'unsafe-inline' *.halkbank.com.tr *.gstatic.com *.google.com *.google.com.tr *.googleadservices.com *.googleapis.com *.google-analytics.com *.googletagmanager.com *.facebook.net *.facebook.com *.doubleclick.net *.creative-serving.com;
X-Content-Security-Policy: default-src 'self' *.youtube.com *.halkbank.com.tr *.google.com *.google.com.tr *.gstatic.com *.googleapis.com *.doubleclick.net *.activebuilder.com *.activebuilder.local *.google-analytics.com *.googletagmanager.com *.facebook.com data:; style-src 'self' 'unsafe-inline' *.halkbank.com.tr *.gstatic.com *.google.com *.activebuilder.com *.activebuilder.local *.googleapis.com *.google-analytics.com *.googletagmanager.com; script-src 'self' 'unsafe-inline' *.halkbank.com.tr *.google.com *.gstatic.com *.google.com.tr *.googleadservices.com *.googleapis.com *.google-analytics.com *.googletagmanager.com *.facebook.net *.facebook.com *.doubleclick.net *.creative-serving.com;
Date: Fri, 19 Jul 2019 08:03:39 GMT
Content-Length: 17392
Set-Cookie: wssnid=Gdn9cMX2szd7l+h9m1/ThGmbS2U0001; Domain=.parafly.com.tr; Path=/; HttpOnly