HTTP/1.1 200 OK
Cache-Control: no-cache
Pragma: no-cache
Content-Type: text/html; charset=utf-8
Expires: -1
Server: 
X-XSS-Protection: 1; mode=block
Referrer-Policy: strict-origin-when-cross-origin
X-Content-Type-Options: nosniff
Content-Security-Policy: default-src * data: blob: https:; script-src *.sberbank.si *.googleapis.com *.googletagmanager.com *.google.com *.googleadservices.com *.secondego.com *.iprom.net *.ipromcloud.com *.httpool.com *.toboads.com *.hs-analytics.net *.facebook.net *.google-analytics.com *.hs-scripts.com *.ampproject.org dec.azureedge.net *.contentexchange.me 'unsafe-inline' 'unsafe-eval'; style-src *.sberbank.si *.googleapis.com dec.azureedge.net *.google.com 'unsafe-inline'
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
Date: Mon, 22 Jul 2019 23:29:09 GMT
Content-Length: 220214