Server | nginx/1.1.19 |
Content-Type | text/html; charset=utf-8 |
Connection | keep-alive |
X-Powered-By | PHP/5.3.10-1ubuntu3.10 |
X-WebKit-CSP | default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://yandex.ru ajax.googleapis.com c.100im.info https://site.yandex.net https://yastatic.net jsc.dt00.net mc.yandex.ru *.marketgid.com am15.net *.am15.net *.tbn.ru openstat.net cdn.connect.mail.ru *.gstatic.com vk.com *.google.com yastatic.net *.yastatic.net *.userapi.com userapi.com yastatic.net *.yastatic.net *.facebook.net pagead2.googlesyndication.com *.yandex.ru *.yandex.net http://yandex.ru yandex.net https://sitesuggest.yandex.ru www.google-analytics.com; object-src 'self' teploobmennik.su mc.yandex.ru yandex.ru www.gstatic.com; style-src 'self' 'unsafe-inline' https://yastatic.net ajax.googleapis.com *.marketgid.com yastatic.net fonts.googleapis.com; img-src 'self' https://site.yandex.net mc.yandex.ru https://www.facebook.com *.tns-counter.ru *.maps.yandex.net vk.com tns-counter.ru google-analytics.com counter.yadro.ru *.yandex.ru *.yandex.net teploobmennik.su *.google-analytics.com yastatic.net mc.yandex.ru; media-src 'self' *.mail.ru; frame-src 'self' *.am15.net *.tbn.ru connect.mail.ru www.youtube.com https://www.youtube.com vk.com mc.yandex.ru yandex.ru *.google.com *.facebook.net *.facebook.com googleads.g.doubleclick.net; font-src 'self' data: fonts.gstatic.com; connect-src 'self' mc.yandex.ru *.yandex.ru *.gstatic.com; |
Content-Security-Policy | default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://yandex.ru ajax.googleapis.com c.100im.info https://site.yandex.net https://yastatic.net jsc.dt00.net mc.yandex.ru *.marketgid.com am15.net *.am15.net *.tbn.ru openstat.net cdn.connect.mail.ru *.gstatic.com vk.com *.google.com yastatic.net *.yastatic.net *.userapi.com userapi.com yastatic.net *.yastatic.net *.facebook.net pagead2.googlesyndication.com *.yandex.ru *.yandex.net http://yandex.ru yandex.net https://sitesuggest.yandex.ru www.google-analytics.com; object-src 'self' teploobmennik.su mc.yandex.ru yandex.ru www.gstatic.com; style-src 'self' 'unsafe-inline' https://yastatic.net ajax.googleapis.com *.marketgid.com yastatic.net fonts.googleapis.com; img-src 'self' https://site.yandex.net mc.yandex.ru https://www.facebook.com *.tns-counter.ru *.maps.yandex.net vk.com tns-counter.ru google-analytics.com counter.yadro.ru *.yandex.ru *.yandex.net teploobmennik.su *.google-analytics.com yastatic.net mc.yandex.ru; media-src 'self' *.mail.ru; frame-src 'self' *.am15.net *.tbn.ru connect.mail.ru www.youtube.com https://www.youtube.com vk.com mc.yandex.ru yandex.ru *.google.com *.facebook.net *.facebook.com googleads.g.doubleclick.net; font-src 'self' data: fonts.gstatic.com; connect-src 'self' mc.yandex.ru *.yandex.ru *.gstatic.com; |
Access-Control-Allow-Origin | * |
P3P | CP="NOI NID ADMa OUR IND UNI COM NAV" |
Cache-Control | max-age=86400, must-revalidate |
Expires | Sun, 08 Nov 2015 05:07:34 GMT |
Pragma | no-cache |
Last-Modified | Thu, 08 Oct 2015 12:50:17 GMT |
Vary | Accept-Encoding |
Content-Encoding | gzip |