Cache-Control: no-cache Set-Cookie: unauth=de8cd1bea733a2fee731fbfa9e56040da72fae1f; Domain=.prom.ua; Max-Age=31536000; Path=/; expires=Fri, 18-May-2018 07:05:42 GMT; HttpOnly Server: nginx/1.10.3 HTTP/1.1 200 OK Set-Cookie: auth=0b816596450b84f16da4e0b40d9f48fb4a7936cc; Domain=.prom.ua; Max-Age=31536000; Path=/; expires=Fri, 18-May-2018 07:05:42 GMT; HttpOnly Set-Cookie: user_tracker=87f9d03015aca61898c4dc1fa717060be2225b56|62.75.137.71|2017-05-18; Domain=.prom.ua; Path=/ Connection: keep-alive Set-Cookie: cid=225110007679383577073253000926949728238; Max-Age=2592000; Path=/; expires=Sat, 17-Jun-2017 07:05:41 GMT Set-cookie: prom=c111638ae3f6498855bb1e600e909d79c98a2d8e2617845cfb3d4d778d3f38f382eb5d38; Domain=.prom.ua; httponly; Path=/ Content-Security-Policy-Report-Only: default-src 'self' *.prom.ua *.uaprom cdn.prom.st static-cache.ua.uaprom.net *.cloudfront.net counter.yadro.ru *.skype.com *.youtube.com *.youtu.be *.jivosite.com *.reformal.ru https: ws://*.hypercomments.com *.example.com 'unsafe-inline' 'unsafe-eval' *.yandex.ru *.yandex.net yandex.st *.doubleclick.net *.facebook.com *.facebook.net *.hypercomments.com *.siteheart.com yandex.st *.google.com *.googleapis.com *.googleadservices.com *.googletagservices.com *.google-analytics.com *.googlesyndication.com; img-src * data:; media-src *; style-src * 'unsafe-inline'; font-src *; connect-src *; report-uri https://prom.ua/js_tests/csp_report Pragma: no-cache Content-Length: 249622 X-Content-Type-Options: nosniff Date: Thu, 18 May 2017 07:05:42 GMT Content-Type: text/html; charset=utf-8 Set-Cookie: csrf_token=c406b1cb04854333b4d010b3019336a9; Domain=.prom.ua; Max-Age=31449600; Path=/; expires=Thu, 17-May-2018 07:05:41 GMT Strict-Transport-Security: max-age=31104000 X-XSS-Protection: 1; mode=block