kolesa.kz Review

 User-agent: *
Disallow: /a/comments
Disallow: /index/br
Disallow: /index/click
Disallow: /index/iclick*
Disallow: /*c-comments*
Disallow: /*change*
Disallow: /claim*
Disallow: /sendmess*
Disallow: /comments*
Disallow: /*_openstat
Disallow: /*from=adwords
Disallow: /*utm_source*
Disallow: /*gclid=
Disallow: /*poll_answer=
Disallow: /*actionpay=
Disallow: /*till=
Disallow: /a/show-map
Disallow: /*claim*
Disallow: /ajax/
Disallow: /*incorrect-data*
Disallow: /*raion=
Disallow: /captcha
Disallow: /verify-email*
Disallow: /*owner=*
Disallow: /my
Disallow: /passport/register
Disallow: /a/new
Disallow: /cabinet
Sitemap: https://kolesa.kz/sitemap.xml

HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Mon, 25 Aug 2025 05:01:44 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://kolesa.kz/

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 25 Aug 2025 05:01:46 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: klssid=njahn38ipeiomea5cdmofsgcud; expires=Mon, 25-Aug-2025 05:31:46 GMT; Max-Age=1800; path=/; domain=.kolesa.kz; secure; HttpOnly; SameSite=lax
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
X-XSS-Protection: 1
Permissions-Policy: accelerometer=(), ambient-light-sensor=(), battery=(), bluetooth=(), camera=(), display-capture=(), document-domain=(), encrypted-media=(), gyroscope=(), hid=(), identity-credentials-get=(), magnetometer=(), publickey-credentials-get=(), screen-wake-lock=(), usb=(), xr-spatial-tracking=(), browsing-topics=self
Content-Security-Policy-Report-Only: object-src 'none'; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' https://*.kolesa.kz https://kolesa.kz wss://*.kolesa.kz https://sentry-common.kolesa.team yastatic.net *.adfox.ru *.yandex.ru *.yandex.net *.yandex.kz *.yandex.com yandex.ru yandex.kz yandex.com yandexadexchange.net *.ftd.agency *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.google.com *.google.kz *.google.co.uz *.googlesyndication.com *.googleadservices.com *.gstatic.com *.ampproject.org *.segmentstream.com *.facebook.net *.facebook.com *.tiktok.com *.youtube.com; report-to csp-endpoint
Reporting-Endpoints: csp-endpoint="https://app.kolesa.kz/security/report-csp-violations"
Set-Cookie: kolesa_anonymous_id=b38b879b-2c8b-44f4-be3e-481233147d58; expires=Tue, 25-Aug-2026 05:01:46 GMT; Max-Age=31536000; path=/; domain=.kolesa.kz; SameSite=lax
Vary: Accept-Encoding, User-Agent
Strict-Transport-Security: max-age=31536000
X-Bug-Bounty: Please report bugs and vulnerabilities to bugs@kolesa.kz
X-Content-Type-Options: nosniff
Referrer-Policy: origin, origin-when-cross-origin
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: frame-ancestors 'self' https://webvisor.com
Alt-Svc: h3=":443"; ma=86400; persist=1
Content-Encoding: br