HTTP/1.1 200 OK
Server: nginx
Date: Sat, 20 Jun 2020 10:22:05 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 567919
Connection: keep-alive
Cache-Control: private
Set-Cookie: search-result-coverage=100; expires=Sun, 20-Jun-2021 10:22:04 GMT; path=/; secure
Set-Cookie: search-result-kind=new; expires=Sun, 20-Jun-2021 10:22:04 GMT; path=/; secure
Set-Cookie: search-result-user-id=2e18b09f-f794-475f-b620-167822409f9a; expires=Sun, 20-Jun-2021 10:22:04 GMT; path=/; secure
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Referrer-Policy: strict-origin-when-cross-origin
Expect-CT: max-age=86400, report-uri="https://sentry.io/api/277394/security/?sentry_key=0a2b2bfb6013486ebb44c51258ebac52"
Vary: Origin
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
Content-Security-Policy: default-src 'none'; base-uri 'self' matomo.sletat.ru; object-src 'none'; block-all-mixed-content; connect-src 'self' sentry.io *.sletat.ru *.sletat.travel *.adriver.ru *.google.com *.google-analytics.com *.g.doubleclick.net *.yandex.ru *.tildacdn.com app.comagic.ru *.maptiler.com *.matomo.cloud *.sletat.net maker.ifttt.com; font-src 'self' data: *.sletat.ru *.adriver.ru *.gstatic.com *.tildacdn.com *.tophotels.ru; form-action 'self' data: sletat.ru; frame-ancestors 'self' https://webvisor.com http://webvisor.com; frame-src *.sletat.ru *.adriver.ru sletat.ostrovok.ru *.google.com *.youtube.com *.fls.doubleclick.net *.g.doubleclick.net *.yandex.ru landing1.vipcruise.ru search.vcruiz.ru *.googletagmanager.com forms.tildacdn.com rtb.com.ru blob: tag.rutarget.ru *.matomo.cloud; child-src blob: https://mc.yandex.ru; img-src 'self' data: *.sletat.ru sletat.ru *.adriver.ru click.topturizm.ru sletat.ru *.gstatic.com *.googleapis.com *.google.com *.google.ru *.googletagmanager.com *.yandex.ru counter.yadro.ru *.g.doubleclick.net *.maps.yandex.net *.google-analytics.com *.gstatic.com yandex.ru yandex.st www.bontour.ru partner.tophotels.ru *.matomo.cloud blob:; manifest-src 'self'; media-src 'none'; script-src 'self' data: 'unsafe-eval' 'unsafe-inline' *.sletat.ru *.adriver.ru *.matomo.cloud *.calltouch.ru *.google.com *.google.ru *.googletagservices.com *.gstatic.com *.googleapis.com *.googleadservices.com *.google-analytics.com *.googletagmanager.com *.googlesyndication.com *.yandex.ru *.maps.yandex.net *.fls.doubleclick.net *.g.doubleclick.net code.jquery.com cdn.ravenjs.com stat.tildacdn.com app.comagic.ru yastatic.net *.recaptcha.net partner.tophotels.ru *.rutarget.ru *.youtube.com data:; style-src 'self' data: 'unsafe-inline' *.sletat.ru *.adriver.ru *.google.com *.googleapis.com *.g.doubleclick.net *.yandex.ru *.maps.yandex.net counter.yadro.ru static.tildacdn.com partner.tophotels.ru; worker-src blob: ;