HTTP/1.1 200 OK
Date: Mon, 13 May 2019 11:04:44 GMT
Server: Apache
X-Frame-Options: ALLOW-FROM=webvisor\.com
Content-Type: text/html; charset=utf-8
X-Frame-Options: SAMEORIGIN
X-UA-Compatible: IE=edge
Strict-Transport-Security: max-age=31536000
Cache-Control: max-age=5
X-Content-Type-Options: nosniff
Content-Security-Policy: default-src 'self' ; script-src 'self' https://ad.admitad.com https://px.adhigh.net https://*.adriver.ru https://*.artlebedev.ru https://cdn.carrotquest.io https://cityadspix.com https://connect.facebook.net https://www.google-analytics.com https://*.google.com https://*.gstatic.com https://*.cdn.heapanalytics.com https://*.heapanalytics.com https://heapanalytics.com 'unsafe-inline' 'unsafe-eval' https://ru.fp.kaspersky-labs.com https://ad.cpahub.ru https://*.ggpht.com https://*.googleapis.com https://*.nanosemantics.ru https://*.marketcall.ru https://connect.ok.ru https://*.otm-r.com https://www.googleadservices.com https://*.googleapis.com https://*.googleads.g.doubleclick.net https://googleads.g.doubleclick.net https://cdn.rutarget.ru https://www.googletagmanager.com https://tracking.banki.ru https://platform.twitter.com https://vk.com https://*.weborama.fr https://yastatic.net https://mc.yandex.ru; connect-src 'self' https://i.bspb.ru https://localhost https://itest5.bspb.ru https://cms.bspb.ru https://itest6.bspb.ru https://127.0.0.1 https://*.carrotquest.io wss://*.carrotquest.io https://*.google.com https://*.google.ru https://*.heapanalytics.com https://heapanalytics.com https://ru.fp.kaspersky-labs.com https://*.nanosemantics.ru https://tracking.banki.ru https://mc.yandex.ru; style-src 'self' https://fonts.googleapis.com https://*.heapanalytics.com https://heapanalytics.com 'unsafe-inline' https://*.nanosemantics.ru https://*.google.com https://google.com; frame-src 'self' https://px.adhigh.net https://content.adriver.ru https://partners.cpaex.ru https://staticxx.facebook.com https://www.facebook.com https://*.nanosemantics.ru https://connect.ok.ru https://*.doubleclick.net https://*.google.com https://*.google.ru https://tag.rutarget.ru https://platform.twitter.com https://*.twitter.com https://vk.com https://www.youtube.com; img-src 'self' https://*.artlebedev.ru https://www.facebook.com https://ga-bq-ii.appspot.com https://www.google-analytics.com https://developer.android.com https://*.heapanalytics.com https://heapanalytics.com data: https://r.planbmedia.com https://ad.cpahub.ru https://goto.cpahub.ru https://cpa.linkprofit.ru https://cpa.linkprofit.ru https://*.ggpht.com https://*.googleapis.com https://*.gstatic.com https://*.nanosemantics.ru https://*.otm-r.com https://*.doubleclick.net https://*.google.com https://*.google.ru https://*.googletagmanager.com https://tracking.banki.ru https://*.twitter.com https://*.vk.me https://*.userapi.com https://vk.com https://vk.com https://mc.yandex.ru; font-src 'self' https://fonts.gstatic.com https://*.heapanalytics.com https://heapanalytics.com https://*.nanosemantics.ru data:; report-uri https://i.bspb.ru/application/cspreport
X-XSS-Protection: 1; mode=block
Content-Language: ru
Content-Length: 73593
Vary: Accept-Encoding
Set-Cookie: IBANK_FLASH=; Max-Age=0; Expires=Mon, 13 May 2019 11:04:44 GMT; Path=/; Secure; HTTPOnly;HttpOnly;Secure
Set-Cookie: IBANK_ERRORS=; Max-Age=0; Expires=Mon, 13 May 2019 11:04:44 GMT; Path=/; Secure; HTTPOnly;HttpOnly;Secure
Set-Cookie: cityads_cookie=http%3A%2F%2Fwww.google.com%2F&&&&&&; Max-Age=1728000; Expires=Sun, 02 Jun 2019 11:04:44 GMT; Path=/;HttpOnly;Secure
Set-Cookie: IBANK_SESSION=3da4667b5b6c97c5c23aeeca4bb213c27814025f-X19fQVQ9YTI3MmJiYTRhMDAzZTYxNmIyOWNkODNjNThhYmEwMDg2M2I1OWU4MCZfX19JRD03YjBmMWYyMy1mYWUzLTQ3YjMtYjUxYi01ZTQ0ZjAwZDYyMGQ=; Path=/; Secure; HTTPOnly;HttpOnly;Secure
Strict-Transport-Security: max-age=15768000;includeSubDomains