Date: Wed, 27 Dec 2017 03:01:21 GMT
Content-Type: text/html
X-Cache-Status: HIT
Accept-Ranges: bytes
Connection: keep-alive
Access-Control-Allow-Credentials: true
Content-Length: 25813
HTTP/1.1 200 OK
X-Frame-Options: SAMEORIGIN
Server: nginx
Set-Cookie: ngxm=rBEABlpDDQF2UFH7AwMZAg==; expires=Thu, 27-Dec-18 03:01:21 GMT; domain=yva.ai; path=/
Last-Modified: Mon, 04 Dec 2017 09:21:09 GMT
Content-Security-Policy: default-src 'self' *.yva.ai; script-src 'self' 'unsafe-inline' *.yva.ai data: https://code.jquery.com https://cdnjs.cloudflare.com https://www.googletagmanager.com https://www.googleadservices.com https://www.google-analytics.com https://connect.facebook.net https://www.facebook.com https://platform.twitter.com https://cdn.optimizely.com https://bat.bing.com https://d24n15hnbwhuhn.cloudfront.net https://mc.yandex.ru https://www.google.com https://fs29.formsite.com https://cdn.onesignal.com https://onesignal.com https://www.google.ae https://dc.ads.linkedin.com https://px.ads.linkedin.com https://d1y0v6ricksqp.cloudfront.net https://kickoffpages-kickofflabs.netdna-ssl.com; font-src 'self' *.yva.ai data: https://cdnjs.cloudflare.com https://fonts.googleapis.com https://fonts.gstatic.com https://netdna.bootstrapcdn.com; style-src 'self' 'unsafe-inline' *.yva.ai data: https://cdnjs.cloudflare.com https://fonts.googleapis.com https://netdna.bootstrapcdn.com; img-src 'self' *.yva.ai data: https: http:; frame-src 'self' *.yva.ai https://player.vimeo.com https://*.facebook.com https://*.twitter.com https://www.google.com/ https://fs29.formsite.com https://www.youtube.com; object-src 'none'; connect-src 'self' *.yva.ai *.amplitude.com *.google-analytics.com www.facebook.com mc.yandex.ru onesignal.com *.twitter.com; report-uri https://yva.ai/track/csp;
X-Xss-Protection: 1; mode=block
Strict-Transport-Security: max-age=31536000;; includeSubDomains
X-Content-Type-Options: nosniff
ETag: "e8fe5738e16cd31:0"