divar.ir Review

 N/A

HTTP/1.1 301 Moved Permanently
Date: Sat, 02 Dec 2023 01:35:03 GMT
Content-Type: text/html; charset=utf-8
Connection: keep-alive
Location: https://divar.ir
Cache-Control: no-store
Content-Length: 218387
Server: Delivery
X-ZRK-SN: 5001
Accept-Ranges: bytes

HTTP/1.1 200 OK
Date: Sat, 02 Dec 2023 01:35:05 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Set-Cookie: did=dc475a53-08f8-4112-b637-b0c404cc8def; Max-Age=63072000; Domain=.divar.ir; Path=/; Expires=Mon, 01 Dec 2025 01:35:05 GMT; SameSite=Lax
Content-Security-Policy: default-src 'self';media-src 'self' https://*.divarcdn.com;script-src https://divar.ir https://*.divarcdn.com https://*.hotjar.com 'unsafe-eval' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://analytics.google.com https://*.analytics.google.com https://cdn.yektanet.com https://audience-cdn.yektanet.com https://s1.mediaad.org https://cdn.sanjagh.com https://www.googleadservices.com https://www.gstatic.com;worker-src 'self' https://www.gstatic.com;style-src 'self' 'unsafe-inline' https://*.divarcdn.com https://fonts.googleapis.com https://www.googletagmanager.com;img-src 'self' data: blob: https://divar.ir https://*.divarcdn.com https://trustseal.enamad.ir https://www.google-analytics.com https://analytics.google.com https://*.analytics.google.com https://www.googletagmanager.com https://*.openstreetmap.org https://*.balad.ir https://*.cafebazaar.ir https://www.google.com https://www.google.nl https://www.google.de https://www.google.ae https://www.google.fr https://www.google.ca https://www.google.co.uk https://www.google.com.au https://logo.samandehi.ir https://cdn.karnameh.com https://map.divar.ir;connect-src 'self' https://divar.ir https://*.divar.ir https://*.divarcdn.com https://www.google-analytics.com https://analytics.google.com https://*.analytics.google.com https://*.doubleclick.net https://*.delivery.zeerak.cloud https://*.leogames.co https://*.hotjar.com https://*.googleapis.com https://api.mediaad.org https://ua.yektanet.com https://audience.yektanet.com https://api.sanjagh.com https://api.karnameh.com https://sentry.divar.cloud;font-src 'self' https://*.divarcdn.com https://fonts.gstatic.com data:;object-src 'none';frame-ancestors 'none';base-uri 'self';frame-src 'self' https://*.hotjar.com https://ua.yektanet.com https://mediacdn.mediaad.org;manifest-src 'self';upgrade-insecure-requests;block-all-mixed-content
X-DNS-Prefetch-Control: on
Expect-CT: max-age=0
X-Frame-Options: DENY
Strict-Transport-Security: max-age=31536000
X-Download-Options: noopen
X-Content-Type-Options: nosniff
X-Permitted-Cross-Domain-Policies: none
Referrer-Policy: origin
X-XSS-Protection: 1; mode=block
Vary: User-Agent
Access-Control-Allow-Origin: *
ETag: W/"4f89b-u73tmhTtvVnqdhfGhUfhYG+GjoA"
Content-Encoding: gzip
X-ZRK-US: 200
Server: Delivery
X-ZRK-CS: BYPASS
X-ZRK-SN: 5001
Accept-Ranges: bytes