Vary: Accept-Encoding Server: nginx-reuseport/1.11.10 Connection: keep-alive X-Content-Type-Options: nosniff Last-Modified: Sat, 04 Feb 2017 16:17:41 GMT Transfer-Encoding: chunked X-Frame-Options: DENY Date: Mon, 18 Sep 2017 00:50:37 GMT HTTP/1.1 200 OK Keep-Alive: timeout=30 Cache-Control: post-check=0, pre-check=0 Pragma: no-cache Content-Type: text/html; charset=windows-1251 Expires: Sat, 04 Feb 2017 13:31:02 GMT X-Powered-By: PHP/5.2.17 X-XSS-Protection: 1; mode=block Cache-Control: no-store, no-cache, must-revalidate Content-Security-Policy: default-src 'self'; img-src data: *.amazonaws.com venyoo.ru *.doubleclick.net *.yandex.net *.yandex.ru yandex.ru vk.com *.google-analytics.com 'self'; script-src *.venyoo.ru yastatic.net *.jivosite.com *.flamp.ru *.pozvonim.com *.yandex.net *.yandex.ru yandex.ru vk.com *.2gis.com *.google-analytics.com *.googlesyndication.com *.googleapis.com *.jquery.com 'unsafe-inline' 'unsafe-eval' 'self'; frame-src *.youtube.com *.google.com *.jivosite.com *.flamp.ru *.yandex.net webvisor.com vk.com *.vk.com *.2gis.com *.googlesyndication.com *.googleapis.com 'self'; object-src 'self'; connect-src *.venyoo.ru *.jivosite.com *.pozvonim.com *.yandex.net *.yandex.ru yandex.ru 'self' wss://node11.jivosite.com/cometcn; style-src *.googleapis.com *.pozvonim.com *.yandex.net 'unsafe-inline' 'self'; media-src *.jivosite.com *.yandex.net *; font-src *.gstatic.com *.googleapis.com *.pozvonim.com 'self'; form-action ucvvm.ru 'self';