Cache-Control: no-cache Set-Cookie: unauth=9ce7a697e715405592247667159dabc3b670aaac; Domain=.prom.ua; Max-Age=31536000; Path=/; expires=Wed, 23-May-2018 23:52:24 GMT; HttpOnly Server: nginx/1.10.3 HTTP/1.1 200 OK Set-Cookie: auth=21c3b1a1364c02cbea84791ec8fa0706c61cd4d9; Domain=.prom.ua; Max-Age=31536000; Path=/; expires=Wed, 23-May-2018 23:52:24 GMT; HttpOnly Set-Cookie: user_tracker=63d3ad18adf0bfa49aeea72f4006ac50feabc4d8|62.75.137.71|2017-05-24; Domain=.prom.ua; Path=/ Connection: keep-alive Set-Cookie: cid=218423704855635498663057572163524721479; Max-Age=2592000; Path=/; expires=Thu, 22-Jun-2017 23:52:23 GMT Set-cookie: prom=5d6315a2d785b2773baacf0ec377bac7c22dd5252c867642de004fffa855021e8171e376; Domain=.prom.ua; httponly; Path=/ Content-Security-Policy-Report-Only: default-src 'self' *.prom.ua *.uaprom cdn.prom.st static-cache.ua.uaprom.net *.cloudfront.net counter.yadro.ru *.skype.com *.youtube.com *.youtu.be *.jivosite.com *.reformal.ru https: ws://*.hypercomments.com *.example.com 'unsafe-inline' 'unsafe-eval' *.yandex.ru *.yandex.net yandex.st *.doubleclick.net *.facebook.com *.facebook.net *.hypercomments.com *.siteheart.com yandex.st *.google.com *.googleapis.com *.googleadservices.com *.googletagservices.com *.google-analytics.com *.googlesyndication.com; img-src * data:; media-src *; style-src * 'unsafe-inline'; font-src *; connect-src *; report-uri https://prom.ua/js_tests/csp_report Pragma: no-cache Content-Length: 188933 X-Content-Type-Options: nosniff Date: Tue, 23 May 2017 23:52:24 GMT Content-Type: text/html; charset=utf-8 Set-Cookie: csrf_token=0e28f4de6b5546fd8768b4a1507ec640; Domain=.prom.ua; Max-Age=31449600; Path=/; expires=Tue, 22-May-2018 23:52:23 GMT Strict-Transport-Security: max-age=31104000 X-XSS-Protection: 1; mode=block