HTTP/1.1 200 OK
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Content-Type: text/html; charset=utf-8
Content-Encoding: gzip
Expires: -1
Vary: Accept-Encoding
Date: Wed, 28 Feb 2018 12:33:01 GMT
Content-Length: 127826
Set-Cookie:
hb-age: 52
Content-Security-Policy-Report-Only: default-src 'self' ; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://media.flixfacts.com https://t.flix360.com https://*.hepsiburada.net https://*.hepsiburada.com https://*.rfksrv.com https://collector.fitanalytics.com https://*.cloudfront.net https://connect.facebook.net https://hepsiburadacdn.api.sociaplus.com https://static.doubleclick.net https://cx.atdmt.com https://googleads.g.doubleclick.net https://media.flixcar.com https://c.go-mpulse.net https://tags.tiqcdn.com https://w.usabilla.com https://api.sorunapp.com https://cdn.optimizely.com https://cdn.segmentify.com https://nexus.ensighten.com https://radar.cedexis.com https://static.hotjar.com https://script.hotjar.com https://str.hit.gemius.pl/gstream.js https://www.youtube.com https://pagead2.googlesyndication.com https://ajax.googleapis.com https://www.google-analytics.com https://www.googleadservices.com https://adservice.google.com https://www.google.com https://www.google.com.tr https://adservice.google.com.tr https://widget.criteo.com https://static.criteo.net https://pixel.mathtag.com https://c.go-mpulse.net https://v2.zopim.com https://integrations.fitanalytics.com https://*.collect.igodigital.com https://st.smartassistant.com https://report2.webtrekk.de; img-src data: https://*.hepsiburada.net https://*.collect.igodigital.com https://media.flixcar.com https://ib.adnxs.com https://assets-jpcust.jwpsrv.com https://www.google-analytics.com https://cm.g.doubleclick.net https://pixel.rubiconproject.com https://ad.yieldlab.net https://www.google.com.tr https://www.google.com https://sb.scorecardresearch.com https://hepsiburada01.webtrekk.net https://cx.atdmt.com https://prod-euc1-alweb-mt.rfksrv.com https://www.facebook.com https://*.akstat.io https://u3s.mathtag.com https://stats.g.doubleclick.net https://v2.zopim.com https://www.evofone.com https://*.cloudfront.net https://image.sociaplus.com https://i1.imgiz.com; style-src 'self' 'unsafe-inline' https://*.hepsiburada.com https://media.flixcar.com https://*.hepsiburada.net https://*.cloudfront.net https://hepsiburadacdn.api.sociaplus.com https://st.smartassistant.com; font-src data: https://*.hepsiburada.net https://static.hotjar.com https://www.evofone.com https://*.cloudfront.net; frame-src https://www.facebook.com https://*.doubleclick.net https://www.evofone.com https://*.cdn.optimizely.com https://vars.hotjar.com https://pixel.mathtag.com https://dis.eu.criteo.com https://hepsiburada.api.sociaplus.com https://www.izlesene.com ;frame-ancestors 'none'; connect-src https://*.hepsiburada.com wss://*.zopim.com https://errors.client.optimizely.com https://logx.optimizely.com https://api.sorunapp.com https://dce2.segmentify.com https://api.evofone.com https://*.init.cedexis-radar.net https://*.akstat.io https://rpt.cedexis.com https://st.smartassistant.com https://www.google-analytics.com/ https://hepsiburada.api.sociaplus.com; report-uri https://hepsiburada.report-uri.com/r/d/csp/reportOnly;
Accept-Ranges: bytes
Connection: keep-alive
X-Content-Type-Options: nosniff
Set-cookie: useinternal=true; path=/