Server: nginx Transfer-Encoding: chunked Connection: keep-alive Cache-control: private Content-Type: text/html; charset=utf-8 Set-Cookie: device_id=8250b515-b515-15d7-d782-824726a4f0c1; expires=Thu, 08-Apr-2117 18:55:18 GMT; Max-Age=3153600000; path=/; domain=.mates.ru Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Set-Cookie: has_secure_session=1; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=-1493751317; path=/; domain=.mates.ru P3P: policyref="https://mates.ru/w3c/p3p.xml", CP="NOI DSP COR NID ADM DEV PSA OUR IND UNI PUR COM NAV INT STA" Content-Security-Policy: default-src 'self' mates.ru eu1.mates.ru us1.mates.ru *.mates.ru *.eu1.mates.ru *.us1.mates.ru badoocdn.com *.badoocdn.com *.badoo.com *.api.here.com *.paypal.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' badoocdn.com *.badoocdn.com *.googleapis.com maps.gstatic.com www.gstatic.com *.google.com vk.com *.vk.me cdn.syndication.twitter.com *.facebook.net *.facebook.com www.paypalobjects.com *.youtube.com *.ytimg.com api.ok.ru ssl.google-analytics.com *.api.here.com *.instagram.com *.digicert.com; style-src 'self' 'unsafe-inline' badoocdn.com *.badoocdn.com vk.com *.vk.me *.googleapis.com; font-src 'self' badoocdn.com *.badoocdn.com fonts.googleapis.com fonts.gstatic.com; img-src * data: blob:; media-src * data: blob:; frame-src *; frame-ancestors 'self' apps.facebook.com twinfinder.com *.twinfinder.com; report-uri /jss/csp_report.phtml Set-Cookie: s1=w203bfecc59cc444f876e01824b94701b; path=/; domain=.mates.ru; HttpOnly Expires: Mon, 26 Jul 1997 05:00:00 GMT HTTP/1.1 200 OK Date: Tue, 02 May 2017 18:55:18 GMT Pragma: no-cache