| date: |
Sat, 11 Jan 2025 23:15:03 GMT |
| content-type: |
text/html; charset=utf-8 |
| transfer-encoding: |
chunked |
| connection: |
close |
| vary: |
Accept-Encoding, Accept-Encoding, Accept-Encoding |
| set-cookie: |
newsToken=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJleHAiOjE3MzY2ODA1MDIsImlhdCI6MTczNjYzNzMwMiwidXNlcl9pZCI6MX0.fLs92qBMt6CxWMjnIw4fvgjsymR9sYr7FF6N5LL-zU0; Path=/; HTTPOnly; Secure; Expires=Sun, 12 Jan 2025 00:15:02 GMT; HttpOnly; SameSite=Strict,newsToken=; Max-Age=-1; Path=/; HTTPOnly; Secure,newsToken=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJleHAiOjE3MzY2ODA1MDIsImlhdCI6MTczNjYzNzMwMiwidXNlcl9pZCI6MX0.fLs92qBMt6CxWMjnIw4fvgjsymR9sYr7FF6N5LL-zU0; Path=/; HTTPOnly; Secure; Expires=Sun, 12 Jan 2025 00:15:02 GMT; HttpOnly; SameSite=Strict,__cf_bm=kA31wFDXqSjIoYBfyiR2QQF47PXHP_P9GfOHr9lMlE0-1736637303-1.0.1.1-DOICSvTME_yz7VlxvSqQ9MU3mdZ673SxZiZYOB6s8PEMzwiEcYZRavlS86MCqXMVVbQK1HcFOQxcJiO9JvkKQA; path=/; expires=Sat, 11-Jan-25 23:45:03 GMT; domain=.kassa24.kz; HttpOnly; Secure; SameSite=None,_cfuvid=kk2klmy1u.fTgQRItGRe.Bu6Q6JbyLWCDXglOGWq_AI-1736637303105-0.0.1.1-604800000; path=/; domain=.kassa24.kz; HttpOnly; Secure; SameSite=None |
| cache-control: |
private, no-cache, no-store, max-age=0, must-revalidate, public, max-age=86400, immutable |
| access-control-allow-methods: |
GET, POST, OPTIONS |
| access-control-allow-headers: |
DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Access-Control-Allow-Origin,Access-Control-Allow-Methods,Access-Control-Allow-Headers,Access-Control-Max-Age,Vary,Content-Security-Policy,Content-Security-Policy-Report-Only,Report-To,X-XSS-Protection,Strict-Transport-Security,X-Content-Type-Options,Referrer-Policy,X-Frame-Options,Permissions-Policy,Expect-CT |
| access-control-expose-headers: |
Content-Length,Content-Range |
| report-to: |
{"group":"default","max_age":31536000,"endpoints":[{"url":"https://kassa24.report-uri.com/a/d/g"}],"include_subdomains":true} |
| x-xss-protection: |
1; mode=block |
| strict-transport-security: |
max-age=31536000; includeSubDomains; preload |
| x-content-type-options: |
nosniff |
| referrer-policy: |
strict-origin-when-cross-origin |
| x-frame-options: |
SAMEORIGIN |
| expect-ct: |
max-age=86400, enforce |
| content-security-policy: |
connect-src 'self' *.eu.ipqualityscore.com *.ipqualityscore.com *.aitudala.kz api.kassa24.kz sentry2.kassa24.kz dmp.dt.aitudala.kz aitudala.kz ecommerce.pult24.kz stats.g.doubleclick.net rtc-v2-ms1.bitrix24.com wss://rtc-v2-ru4.bitrix24.com wss://rtc-v2-ru1.bitrix24.com wss://rtc-v2-ru5.bitrix24.com *.bitrix24.com www.facebook.com mc.yandex.kz mc.yandex.ru push.esputnik.com spektr.bitrix24.kz top-fwz1.mail.ru www.google-analytics.com ajax.googleapis.com sovetnik.market.yandex.ru code.jquery.com wss://*.bitrix24.com rtc-v2-ms1.bitrix24.com yandex.ru mc.yandex.kg mc.yandex.by mc.yandex.uz www.kassa24.kz; img-src data: *.maps.yandex.net games.szhuldyz.kz lh3.googleusercontent.com ssl.gstatic.com cdn-ru.bitrix24.kz www.google.com www.google.kz login.vk.com yastatic.net www.google.ru www.googletagmanager.com vec01.maps.yandex.net api-maps.yandex.ru cdn.bitrix24.kz kassa24.kz top-fwz1.mail.ru vec02.maps.yandex.net vec03.maps.yandex.net vec04.maps.yandex.net www.google-analytics.com www.google.ae www.google.com.ua www.google.ie yandex.ru m.facebook.com www.facebook.com 'self' mc.yandex.ru pics.kassa24.kz spektr.bitrix24.kz vk.com www.google.co.uk www.google.lv auth2.bitrix24.net stats.g.doubleclick.net www.google.by www.google.it m.vk.com www.google.co.il www.google.de www.google.fr www.google.ge www.szhuldyz.kz www.google.com.tj www.google.lt core-sat.maps.yandex.net www.google.no file www.google.az www.google.com.eg www.google.es www.google.co.kr blob: connect.facebook.net translate.google.com www.google.am www.google.at www.google.be www.google.bg www.google.co.id www.google.co.uz www.google.com.do www.google.com.kw www.google.com.mt www.google.com.tr www.google.cz www.google.hu www.google.iq www.google.kg www.google.mn www.google.mv www.google.nl www.google.ro www.google.rs www.google.se www.google.tm www.gstatic.com; frame-src 'self' yandex.ua games.szhuldyz.kz aitubirge.kz yandex.ru api-maps.yandex.ru mc.yandex.md mc.yandex.ru www.googletagmanager.com www.youtube.com dl.metabar.ru saltcdn2.googleapis.com www.facebook.com www.google.com gsa://onpageload data:; script-src-elem *.ipqualityscore.com *.aitudala.kz dmp.dt.aitudala.kz aitudala.kz tagmanager.google.com aitubirge.kz yastatic.net yandex.st 'self' 'unsafe-inline' cdn-ru.bitrix24.kz api.instagram.com api.vk.com cdn.bitrix24.kz connect.facebook.net esputnik.com graph.facebook.com mc.yandex.ru spektr.bitrix24.kz top-fwz1.mail.ru api.ppyvzz8u.biz vk.com www.google-analytics.com www.google.com www.googletagmanager.com www.gstatic.com api-maps.yandex.ru gc.kis.v2.scr.kaspersky-labs.com dl.metabar.ru vec01.maps.yandex.net vec02.maps.yandex.net vec03.maps.yandex.net vec04.maps.yandex.net saltcdn2.googleapis.com code.jquery.com www.instagram.com data: gc.kis.scr.kaspersky-labs.com s3.amazonaws.com ajax.googleapis.com cdn-javascript.net cdnjs.cloudflare.com mc.yandex.kz vk-online.xyz; script-src *.eu.ipqualityscore.com *.ipqualityscore.com *.aitudala.kz aitudala.kz aitubirge.kz yastatic.net cdn-ru.bitrix24.kz yandex.st vec01.maps.yandex.net vec02.maps.yandex.net vec03.maps.yandex.net vec04.maps.yandex.net ucads-cdn.ucweb.com 'self' 'unsafe-eval' 'unsafe-inline' api.instagram.com api.vk.com cdn.bitrix24.kz cdn.visadd.com connect.facebook.net esputnik.com graph.facebook.com mc.yandex.ru spektr.bitrix24.kz top-fwz1.mail.ru vk.com www.google-analytics.com www.google.com www.googletagmanager.com www.gstatic.com api-maps.yandex.ru code.jquery.com mc.yandex.kz ajax.googleapis.com blob: cdn-javascript.net clck.yandex.ru img.ucweb.com www.instagram.com; font-src data: 'self' fonts.gstatic.com chrome-extension themes.googleusercontent.com; child-src 'self'; style-src 'unsafe-eval' 'unsafe-inline' fonts.googleapis.com spektr.bitrix24.kz 'self' translate.googleapis.com; style-src-elem tagmanager.google.com fonts.googleapis.com 'unsafe-inline' spektr.bitrix24.kz 'self' gc.kis.v2.scr.kaspersky-labs.com; style-src-attr 'unsafe-inline'; default-src fonts.googleapis.com spektr.bitrix24.kz 'unsafe-inline' 'self'; script-src-attr 'unsafe-inline'; manifest-src 'self'; worker-src 'self' |
| cf-cache-status: |
DYNAMIC |
| server: |
cloudflare |
| cf-ray: |
90089b445947e950-DME |
|
