X-XSS-Protection: 1; mode=block Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' http://www.google-analytics.com/ http://maps.googleapis.com/; style-src 'self' 'unsafe-inline' http://fonts.googleapis.com/; img-src 'self' http://www.google-analytics.com/ http://csi.gstatic.com/ http://maps.gstatic.com/ http://maps.googleapis.com/; font-src 'self' http://fonts.googleapis.com/ http://fonts.gstatic.com/; frame-src 'self' http://maps.google.com/ https://www.google.com/maps/ http://maps.googleapis.com/ http://www.youtube.com/embed/ https://www.youtube.com/embed/; Cache-Control: private, no-store X-Powered-By-Plesk: PleskWin HTTP/1.1 200 OK X-Content-Type-Options: nosniff Content-Type: text/html; charset=utf-8 Content-Length: 52970 Date: Sat, 17 Jun 2017 21:41:32 GMT X-Frame-Options: SAMEORIGIN