Vivaonline.bg

Date: Wed, 17 Apr 2019 11:28:04 GMT
Server: Apache/2.2.24 (Win32) mod_ssl/2.2.24 OpenSSL/1.0.2f mod_jk/1.2.37
Location: https://my.vivacom.bg
Content-Length: 205
Content-Type: text/html; charset=iso-8859-1

HTTP/1.1 302 
Server: nginx
Date: Wed, 17 Apr 2019 11:28:06 GMT
Content-Length: 0
Connection: keep-alive
Set-Cookie: SESSION=c626ef7d-9308-4302-89ed-4a754c7eb45e; Path=/; Secure; HttpOnly
Location: https://my.vivacom.bg/bg/BG/
X-Frame-Options: SAMEORIGIN

HTTP/1.1 302 
Server: nginx
Date: Wed, 17 Apr 2019 11:28:06 GMT
Content-Length: 0
Connection: keep-alive
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Content-Security-Policy: child-src 'self' * *.vivacom.bg *.borica.bg *.google.com *.youtube.com *.scalefocus.com *.bg *.com
X-Application-Context: Vivacom:my_vivacom_bg:8112
Set-Cookie: SESSION=dce44e30-737a-4763-94c7-db1ba307fb46; Path=/; Secure; HttpOnly
Location: https://my.vivacom.bg/bg/BG/my-account/services
Content-Language: bg-BG
X-Frame-Options: SAMEORIGIN

HTTP/1.1 302 
Server: nginx
Date: Wed, 17 Apr 2019 11:28:06 GMT
Content-Length: 0
Connection: keep-alive
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Content-Security-Policy: child-src 'self' * *.vivacom.bg *.borica.bg *.google.com *.youtube.com *.scalefocus.com *.bg *.com
Set-Cookie: SESSION=535f7cc7-35fa-4757-9dd3-1c8af3fb60ad; Path=/; Secure; HttpOnly
Location: https://my.vivacom.bg/bg/BG/login
X-Frame-Options: SAMEORIGIN

HTTP/1.1 302 
Server: nginx
Date: Wed, 17 Apr 2019 11:28:06 GMT
Content-Length: 0
Connection: keep-alive
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Content-Security-Policy: child-src 'self' * *.vivacom.bg *.borica.bg *.google.com *.youtube.com *.scalefocus.com *.bg *.com
X-Application-Context: Vivacom:my_vivacom_bg:8112
Set-Cookie: SESSION=30cd3eea-8d30-43b7-a42f-96167422fba8; Path=/; Secure; HttpOnly
Location: https://login.vivacom.bg/oauth2/authorize?response_type=code&scope=openid&redirect_uri=https://my.vivacom.bg/login/handle&client_id=9hfmakBbr_mOdUKCQQ52n8H6znEa&source=NORMAL&locale=bg
Content-Language: bg-BG
X-Frame-Options: SAMEORIGIN

HTTP/1.1 302 Found
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Location: https://login.vivacom.bg/authenticationendpoint/login.do?client_id=9hfmakBbr_mOdUKCQQ52n8H6znEa&commonAuthCallerPath=%2Foauth2%2Fauthorize&forceAuth=false&passiveAuth=false&redirect_uri=https%3A%2F%2Fmy.vivacom.bg%2Flogin%2Fhandle&response_type=code&scope=openid&tenantDomain=carbon.super&sessionDataKey=2cf28864-f1e4-4e6b-85cc-ff7c2857370f&relyingParty=9hfmakBbr_mOdUKCQQ52n8H6znEa&type=oidc&sp=eCommerce&isSaaSApp=false&authenticators=BasicAuthenticator:LOCAL&locale=bg&source=NORMAL
Content-Length: 0
Date: Wed, 17 Apr 2019 11:28:06 GMT
Server: WSO2 Carbon Server

HTTP/1.1 200 OK
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Set-Cookie: JSESSIONID=D29F9CE41D4E4171F4B838B959F5407849A8FEEEF097FC940056A235067C97BD50EE34788C3636F6DAD02725E3DFD153AFA2418F21AB9FF064AF7E592EBF15875B28B4D6B1A8D3F881F7123DCDDF6E592EF1D8394DD758F23079A04E0F9A22A956F3DA2281E5EEF919C4FF33B4235B18D49DCBBD724B94A8794CE236C3DBBF1D; Path=/authenticationendpoint; Secure; HttpOnly
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Content-Type: text/html;charset=UTF-8
Transfer-Encoding: chunked
Content-Encoding: gzip
Vary: Accept-Encoding
Date: Wed, 17 Apr 2019 11:28:08 GMT
Server: WSO2 Carbon Server