KOLESA.KZ 网站分析

HTTP/1.1 200 OK
Server: nginx
Date: Tue, 07 May 2024 12:12:00 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: klssid=enh7k32hnostikpt730eeeig80; expires=Tue, 07-May-2024 12:42:00 GMT; Max-Age=1800; path=/; domain=.kolesa.kz; secure; HttpOnly; SameSite=lax
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
X-XSS-Protection: 1
Permissions-Policy: accelerometer=(), ambient-light-sensor=(), battery=(), bluetooth=(), camera=(), display-capture=(), document-domain=(), encrypted-media=(), gyroscope=(), hid=(), identity-credentials-get=(), magnetometer=(), publickey-credentials-get=(), screen-wake-lock=(), usb=(), xr-spatial-tracking=(), browsing-topics=self
Content-Security-Policy-Report-Only: object-src 'none'; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' https://*.kolesa.kz wss://*.kolesa.kz yastatic.net *.adfox.ru *.yandex.ru *.yandex.net *.yandex.kz yandex.ru yandex.kz yandex.com yandexadexchange.net https://z.cdn.ftd.agency *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.google.com *.google.kz *.googlesyndication.com *.googleadservices.com *.gstatic.com *.ampproject.org *.segmentstream.com *.facebook.net *.facebook.com *.tiktok.com *.youtube.com; report-to csp-endpoint
Reporting-Endpoints: csp-endpoint="https://app.kolesa.kz/security/report-csp-violations"
Vary: Accept-Encoding, User-Agent
Strict-Transport-Security: max-age=31536000; preload
X-Bug-Bounty: Please report bugs and vulnerabilities to bugs@kolesa.kz
X-Content-Type-Options: nosniff
Referrer-Policy: origin, origin-when-cross-origin
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: frame-ancestors 'self' https://webvisor.com
Alt-Svc: h3=":443"; ma=86400; persist=1
Content-Encoding: br