Yandex.com - Passport.yandex.com

Server: nginx
Date: Wed, 08 Nov 2023 14:05:01 GMT
Content-Type: text/plain; charset=utf-8
Content-Length: 111
Connection: keep-alive
Keep-Alive: timeout=120
X-Request-Id: efb25c5f40bb032663a020bf6b2efd44
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Content-Security-Policy: report-to default-group; base-uri 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' 'nonce-kp/EnqM9ngpVSaYI9Kd28g==' yastatic.net *.mc.yandex.com *.mc.yandex.by *.mc.yandex.com.tr *.mc.yandex.kz *.mc.yandex.ru *.mc.yandex.ua *.mc.yandex.az *.mc.yandex.co.il *.mc.yandex.com.am *.mc.yandex.com.ge *.mc.yandex.ee *.mc.yandex.fr *.mc.yandex.kg *.mc.yandex.lt *.mc.yandex.lv *.mc.yandex.md *.mc.yandex.tj *.mc.yandex.tm *.mc.yandex.uz mc.webvisor.com mc.webvisor.org mc.yandex.com mc.yandex.by mc.yandex.com.tr mc.yandex.kz mc.yandex.ru mc.yandex.ua mc.yandex.az mc.yandex.co.il mc.yandex.com.am mc.yandex.com.ge mc.yandex.ee mc.yandex.fr mc.yandex.kg mc.yandex.lt mc.yandex.lv mc.yandex.md mc.yandex.tj mc.yandex.tm mc.yandex.uz s3.yandex.net s3.mds.yandex.net api-maps.yandex.ru; style-src 'self' 'unsafe-inline' 'unsafe-eval' yastatic.net s3.yandex.net s3.mds.yandex.net; img-src 'self' data: blob: yastatic.net avatars.mds.yandex.net image.docs.id.yandex.ru *.mc.yandex.com *.mc.yandex.by *.mc.yandex.com.tr *.mc.yandex.kz *.mc.yandex.ru *.mc.yandex.ua *.mc.yandex.az *.mc.yandex.co.il *.mc.yandex.com.am *.mc.yandex.com.ge *.mc.yandex.ee *.mc.yandex.fr *.mc.yandex.kg *.mc.yandex.lt *.mc.yandex.lv *.mc.yandex.md *.mc.yandex.tj *.mc.yandex.tm *.mc.yandex.uz mc.webvisor.com mc.webvisor.org mc.yandex.com mc.yandex.by mc.yandex.com.tr mc.yandex.kz mc.yandex.ru mc.yandex.ua mc.yandex.az mc.yandex.co.il mc.yandex.com.am mc.yandex.com.ge mc.yandex.ee mc.yandex.fr mc.yandex.kg mc.yandex.lt mc.yandex.lv mc.yandex.md mc.yandex.tj mc.yandex.tm mc.yandex.uz mc.admetrica.ru leonardo.edadeal.io static-maps.yandex.ru downloader.disk.yandex.ru https://downloader.dst.yandex.ru s3.yandex.net s3.mds.yandex.net www.facebook.com passport.yandex.ru core-renderer-tiles.maps.yandex.net; font-src 'self' data: yastatic.net s3.yandex.net s3.mds.yandex.net; connect-src 'self' yastatic.net avatars.mds.yandex.net image.docs.id.yandex.ru mail.yandex.com yandexmetrica.com:* mc.webvisor.com mc.webvisor.org mc.yandex.com mc.yandex.by mc.yandex.com.tr mc.yandex.kz mc.yandex.ru mc.yandex.ua mc.yandex.az mc.yandex.co.il mc.yandex.com.am mc.yandex.com.ge mc.yandex.ee mc.yandex.fr mc.yandex.kg mc.yandex.lt mc.yandex.lv mc.yandex.md mc.yandex.tj mc.yandex.tm mc.yandex.uz mc.admetrica.ru *.mc.yandex.com *.mc.yandex.by *.mc.yandex.com.tr *.mc.yandex.kz *.mc.yandex.ru *.mc.yandex.ua *.mc.yandex.az *.mc.yandex.co.il *.mc.yandex.com.am *.mc.yandex.com.ge *.mc.yandex.ee *.mc.yandex.fr *.mc.yandex.kg *.mc.yandex.lt *.mc.yandex.lv *.mc.yandex.md *.mc.yandex.tj *.mc.yandex.tm *.mc.yandex.uz https://suggest-maps.yandex.ru yandex.com ya.ru trust.yandex.ru yandex.ru/clck/click api-maps.yandex.ru core-renderer-tiles.maps.yandex.net; frame-ancestors 'self' webvisor.com *.webvisor.com http://webvisor.com http://*.webvisor.com *.yandex.com *.yandex.by *.yandex.com.tr *.yandex.kz *.yandex.ru *.yandex.ua *.yandex.az *.yandex.co.il *.yandex.com.am *.yandex.com.ge *.yandex.ee *.yandex.fr *.yandex.kg *.yandex.lt *.yandex.lv *.yandex.md *.yandex.tj *.yandex.tm *.yandex.uz; frame-src 'self' blob: yastatic.net mc.yandex.ru mc.yandex.md mc.yandex.com https://desktop.checks.edadeal.yandex.ru https://desktop.checks.edastage.yandex.ru https://desktop.checks.edadeal.ya.ru https://desktop.checks.edastage.ya.ru https://forms.yandex.ru yandex.com ya.ru trust.yandex.ru https://split.yandex.ru https://bnpl-front.fintech.yandex.net https://yandex.com/chat https://bank.yandex.ru; child-src 'self' blob: mc.yandex.ru; prefetch-src 'self' yastatic.net; media-src data: yastatic.net s3.yandex.net s3.mds.yandex.net; default-src yastatic.net; report-uri https://csp.yandex.net/csp?from=yandex-id-production&project=yandex-id;
Report-To: {"group":"default-group","endpoints":[{"url":"https://csp.yandex.net/csp?from=yandex-id-production&project=yandex-id"}],"max_age":1800,"include_subdomains":true}
Location: https://passport.yandex.com/auth/?retpath=https%3A%2F%2Fpassport.yandex.com%2F&noreturn=1
Vary: Accept
Strict-Transport-Security: max-age=315360000; includeSubDomains; preload

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 08 Nov 2023 14:05:01 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=120
Vary: Accept-Encoding
P3P: policyref="/w3c/p3p.xml", CP="NON DSP ADM DEV PSD IVDo OUR IND STP PHY PRE NAV UNI"
Set-Cookie: i=J4sQJ/NGAhRkvYuD627n5oWcao5iqWhuffJ6ZgnOAu7SR0i7LfXPrLJnFGoYLLZ8xlxNoap7qk34zcrzKYzyFYNMOXQ=; Domain=.yandex.com; Expires=Sat, 05 Nov 2033 14:05:01 GMT; Secure; HttpOnly; Path=/
Set-Cookie: yandexuid=6112375361699452301; Domain=.yandex.com; Expires=Sat, 05 Nov 2033 14:05:01 GMT; Secure; Path=/
Set-Cookie: uniqueuid=636568921699452301; Max-Age=315360000; Path=/; Expires=Sat, 05 Nov 2033 14:05:01 GMT; HttpOnly; Secure; SameSite=Lax
Set-Cookie: lah=; Domain=.passport.yandex.com; Expires=Thu, 01 Jan 1970 00:00:01 GMT; Secure; HttpOnly; Path=/
Surrogate-Control: no-store
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate
Pragma: no-cache
Expires: 0
Content-Security-Policy: default-src 'none';style-src 'self' yastatic.net 'unsafe-inline' 'unsafe-eval' s3.mds.yandex.net s3.mdst.yandex.net;script-src 'self' yastatic.net mc.admetrica.ru mc.yandex.ru mc.yandex.com chat.s3.yandex.net api-maps.yandex.ru suggest-maps.yandex.net export.yandex.com 'unsafe-eval' 'unsafe-inline' 'nonce-bf0bd21f-a289-4aef-b47a-df930ac2c30a' https://yastatic.net/s3/frontend/butterfly/latest/butterfly.js;img-src 'self' yastatic.net https://ysa-static.passport.yandex.ru https://ysa-static.passport.yandex.net yandex.st data: mc.admetrica.ru mc.yandex.ru mc.yandex.com api-maps.yandex.ru *.captcha.yandex.net s3.mds.yandex.net s3.mdst.yandex.net avatars.mds.yandex.net avatars.mdst.yandex.net clck.yandex.ru *.maps.yandex.net yapic.yandex.ru img.yandex.ru static-maps.yandex.ru https://video-tub-ru.yandex.net https://img0-tub-ru.yandex.net https://img1-tub-ru.yandex.net https://img2-tub-ru.yandex.net https://img3-tub-ru.yandex.net yango.com blob:  mc.webvisor.com mc.webvisor.org https://downloader.disk.yandex.ru;font-src 'self' data: yastatic.net;object-src yastatic.net;media-src *.captcha.yandex.net data: yastatic.net;connect-src mail.yandex.com 'self' mc.admetrica.ru mc.yandex.ru mc.yandex.com trust.yandex.ru trust.yandex.com suggest-maps.yandex.net mc.webvisor.com mc.webvisor.org yandex.ru api.passport.yandex.com *.disk.yandex.net;frame-ancestors 'self';frame-src 'self' yandex.st s4.money.yandex.net https://yandex.com/chat split.yandex.ru yastatic.net yandex.com null null pass.yandex.com passport.yandex.com https://trust.yandex.com blob: mc.yandex.ru magic.passport.yandex.com https://yandex.ru/forms https://forms.yandex.ru/;child-src 'self' yandex.st yandex.com null passport.yandex.com pass.yandex.com https://trust.yandex.com blob: mc.yandex.ru;report-uri https://csp.yandex.net/csp?from=passport&project=passport&yandex_login=&yandexuid=;manifest-src 'self' yastatic.net
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=15552000; includeSubDomains
X-Download-Options: noopen
X-Content-Type-Options: nosniff
X-DNS-Prefetch-Control: off
X-XSS-Protection: 0
Referrer-Policy: origin
X-Yandex-Passport-Authorize: 1
Accept-CH: Sec-CH-Prefers-Color-Scheme
Vary: Sec-CH-Prefers-Color-Scheme
Critical-CH: Sec-CH-Prefers-Color-Scheme
Strict-Transport-Security: max-age=315360000; includeSubDomains; preload
Content-Encoding: gzip