HTTP/1.1 200 OK
Server: nginx
Date: Sat, 20 Jul 2019 14:50:56 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=30
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Referrer-Policy: strict-origin-when-cross-origin
Feature-Policy: fullscreen 'self' https://www.youtube.com; geolocation 'self' https://maps.googleapis.com
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: default-src 'self'; object-src 'none'; frame-src 'self' data: www.google.com/recaptcha/ *.facebook.net *.youtube.com *.imedia.cz mapsengine.google.com www.google.com/maps/; img-src 'self' data: *.pro-doma.cz *.prodoma.cz *.google.cz *.google.com *.gstatic.com *.googletagmanager.com *.doubleclick.net *.google-analytics.com *.googleapis.com *.mookie1.com *.adnxs.com *.imedia.cz *.facebook.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.googletagmanager.com *.google-analytics.com *.googleapis.com *.googleadservices.com *.doubleclick.net *.imedia.cz *.facebook.net *.optimato.cz *.smartlook.com; worker-src 'self'; connect-src 'self' www.google.com/ads/; font-src 'self' *.gstatic.com; style-src 'self' 'unsafe-inline' *.googleapis.com;
Vary: X-Requested-With,Accept-Encoding
Cache-Control: max-age=0
Expires: Sat, 20 Jul 2019 14:50:56 GMT
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload