Set-Cookie: user_tracker=60c5efabc3ff7c77a17a22bcb573dc52bb956052|62.75.137.71|2017-05-12; Domain=.prom.ua; Path=/ X-XSS-Protection: 1; mode=block Set-cookie: prom=befbc288feb990fb1550ae0ed01df4838fc8f5e1dde1234bf69c4bfbb6d23327db539c1d; Domain=.prom.ua; httponly; Path=/ Content-Length: 254838 Pragma: no-cache Strict-Transport-Security: max-age=31104000 Set-Cookie: csrf_token=9140469c49bc47d5b7c6d2a64294c4a9; Domain=.prom.ua; Max-Age=31449600; Path=/; expires=Thu, 10-May-2018 21:09:15 GMT HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 X-Content-Type-Options: nosniff Content-Security-Policy-Report-Only: default-src 'self' *.prom.ua *.uaprom cdn.prom.st static-cache.ua.uaprom.net *.cloudfront.net counter.yadro.ru *.skype.com *.youtube.com *.youtu.be *.jivosite.com *.reformal.ru https: ws://*.hypercomments.com *.example.com 'unsafe-inline' 'unsafe-eval' *.yandex.ru *.yandex.net yandex.st *.doubleclick.net *.facebook.com *.facebook.net *.hypercomments.com *.siteheart.com yandex.st *.google.com *.googleapis.com *.googleadservices.com *.googletagservices.com *.google-analytics.com *.googlesyndication.com; img-src * data:; media-src *; style-src * 'unsafe-inline'; font-src *; connect-src *; report-uri https://prom.ua/js_tests/csp_report Connection: keep-alive Server: nginx/1.10.3 Set-Cookie: auth=c5c8dbf3c7335816b3f95d3042e4866d7fd1c84f; Domain=.prom.ua; Max-Age=31536000; Path=/; expires=Fri, 11-May-2018 21:09:15 GMT; HttpOnly Set-Cookie: csrf_token=34a444ee191d484bbc7d79a77b303895; Domain=.prom.ua; Max-Age=31449600; Path=/; expires=Thu, 10-May-2018 21:09:15 GMT Date: Thu, 11 May 2017 21:09:15 GMT Set-Cookie: cid=194008291087298059718075377561822733441; Max-Age=2592000; Path=/; expires=Sat, 10-Jun-2017 21:09:15 GMT Cache-Control: no-cache Set-Cookie: unauth=f5d256b55df27ef67e3a7b37f18d8f83edd3a318; Domain=.prom.ua; Max-Age=31536000; Path=/; expires=Fri, 11-May-2018 21:09:15 GMT; HttpOnly