HTTP/1.1 200 OK
Server: nginx
Date: Mon, 22 Jul 2019 13:31:39 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Last-Modified: Wed, 17 Jul 2019 07:40:56 GMT
Set-Cookie: ruru=f384efd4162d4c2c68c5b7e46e3f46da:528f4f2a8b481ce720081e8ceefa281e417a63ee; expires=Wed, 21-Aug-2019 13:31:39 GMT; Max-Age=2592000; path=/; HTTPOnly; Secure; secure; httponly
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.bemobtrk.com *.google.ru vk.com *.facebook.net *.twitter.com www.googletagmanager.com *.google-analyt ics.com mc.yandex.ru mc.webvisor.com mc.webvisor.org yastatic.net *.google.com *.doubleclick.net *.googleadservices.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com translate.googleapis.com; img-src * data:; connect-src 'self' mc.yandex.ru *.doubleclick.net; child-src 'self' blob: mc.yandex.ru; frame-src 'self' ruru.ru *.ruru.ru *.youtube.com *.doubleclick.net vk.com *.vk.com *.google.com *.facebook.com pay.cardstandard.ru koronapay.com blob:; font-src 'self' fonts.gstatic.com; frame-ancestors ruru.ru *.ruru.ru *.beeline.ru; report-uri https://www.ruru.ru/report/csp?v=1;