loading.express website report

HTTP/2 200 
server: nginx/1.28.0
date: Tue, 25 Aug 2026 19:53:22 GMT
content-type: text/html; charset=utf-8
content-length: 133889
last-modified: Tue, 18 Aug 2026 18:27:09 GMT
etag: "20b01-nq/Jat8i14Qwio6UVqvr3nzAXuw"
link: </_nuxt/0bea2d1.js>; rel=preload; as=script, </_nuxt/18cb6df.js>; rel=preload; as=script, </_nuxt/74e0922.js>; rel=preload; as=script, </_nuxt/fonts/PlayBold.82c5ab8.woff2>; rel=preload; as=font; crossorigin, </_nuxt/fonts/Play.4d22551.woff2>; rel=preload; as=font; crossorigin
vary: Accept-Encoding
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block; report=https://sentry.myiw.ru/api/6/security/?sentry_key=29777cbd17e945eea3f35027ada00ba9;
content-security-policy: default-src 'self' data: loading.express *.sales-ninja.me *.sppopups.com *.ddp-dev.ru *.loading.ru *.loading.express 'unsafe-inline' *.webpagetest.org http://*.hotjar.com:* https://*.hotjar.com:* http://*.hotjar.io https://*.hotjar.io wss://*.hotjar.com *.yandex.net *.yandex.ru *.cdn77.org *.yandex.md *.yandex.com *.yandexcloud.net *.yandex.fr *.yandex.ua *.yandex.kz *.yandex.by *.yandex.uz *.ampproject.org *.google.co.cr *.google.gr *.google.dz *.google.fi *.google.tm *.google.com.tw *.google.com.my *.google.mv *.google.com.mm *.google.mk *.google.com.bd *.google.com.gi *.google.dk *.google.com.sa *.google.ad *.google.com.pa *.google.co.tz *.google.li *.google.hr *.google.com *.google.com.co *.google.sk *.google.cn *.google.si *.google.cl *.google.hu *.google.no *.google.it *.google.bg *.google.co.jp *.google.be *.google.com.vn *.google.me *.google.kg *.google.rs *.google.com.ph *.google.com.cy *.google.com.br *.google.ie *.google.pt *.google.co.in *.google.lu *.google.lk *.google.com.pk *.google.cz *.google.am *.google.se *.google.ca *.google.ro *.google.com.mx *.google.ge *.google.ch *.google.lv *.google.co.uk *.google.az *.google.co.id *.google.com.eg *.google.nl *.google.co.il *.google.pl *.google.com.au *.google.com.hk *.google.com.tr *.google.co.nz *.google.at *.google.ae *.google.lt *.google.co.kr *.google.com.sg *.google.sc *.google.com.ua *.google.ee *.google.fr *.google.co.th *.google.co.uz *.google.md *.google.by *.google.kz *.google.de *.google.es *.google.com.tj *.googletagmanager.com *.google-analytics.com *.doubleclick.net *.ggpht.com *.ytimg.com *.google.ru *.youtube.com *.jsdelivr.net *.googleapis.com *.gstatic.com *.pusher.com wss://*.pusher.com *.gravatar.com *.youtube-nocookie.com *.w.org *.spreaker.com *.rating-widget.com *.fontawesome.com *.googleusercontent.com 'unsafe-eval' top-fwz1.mail.ru content.mql5.com *.licdn.com vk.com *.vk.com *.quora.com *.linkedin.com *.utmstat.com *.segment.com *.segment.io myiw.ru *.myiw.ru perfscan.ru *.perfscan.ru *.sendpulse.com carrotquest.app carrotquest.io *.carrottrack.io *.carrotquest.io *.carrotquest.app wss://*.carrotquest.app; report-uri https://sentry.myiw.ru/api/6/security/?sentry_key=29777cbd17e945eea3f35027ada00ba9;
referrer-policy: strict-origin
feature-policy: autoplay 'none'; camera 'none'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; midi 'none'; payment 'none'; usb 'none';
cache-control: max-age=31536000, must-revalidate
strict-transport-security: max-age=31536000;
accept-ranges: bytes