Invi.ir

date: Fri, 06 Feb 2026 06:44:36 GMT
content-type: text/html; charset=utf-8
x-nextjs-cache: HIT
etag: "la13994eup2wdf"
vary: Accept-Encoding
content-encoding: gzip
content-security-policy: default-src 'none'; frame-src https://www.aparat.com https://*.webengage.co https://*.yektanet.com https://*.mediaad.org; script-src-elem 'self' 'unsafe-inline' https://m.asanpardakht.com https://ssl.widgets.webengage.com https://www.googletagmanager.com https://*.yektanet.com https://www.clarity.ms https://www.*.clarity.ms https://*.mediaad.org https://audience.yektanet.com https://ua.yektanet.com https://c.webengage.com https://scripts.clarity.ms; script-src 'self' 'unsafe-inline' https://cdn.widgets.webengage.com/js/webengage-min-v-6.0.js https://m.asanpardakht.com https://m.asanpardakht.ir https://m.asanpardakht.net https://ssl.widgets.webengage.com/ https://www.googletagmanager.com/; style-src 'self' 'nonce-19fc45fb91182fd306ec694a63ee0d6b'; img-src 'self' https://m.asanpardakht.com https://m.asanpardakht.net https://m.asanpardakht.ir https://www.googletagmanager.com https://*.tile.openstreetmap.org data: https://trustseal.enamad.ir https://*.clarity.ms https://*.yektanet.com; font-src 'self' data:; connect-src 'self' https://*.webengage.com https://api.mediaad.org https://ma-cdn.pegah.tech https://region1.google-analytics.com https://snt.invi.ir https://www.google-analytics.com wss://invigold.net wss://invi.ir wss://cryptian.com wss://cryptian.com/ws https://invigold.net https://invi.ir https://*.yektanet.com/ https://*.clarity.ms; object-src 'none'; base-uri 'none'; form-action 'self' https://asan.shaparak.ir; frame-ancestors 'self' https://invi.ir; upgrade-insecure-requests; block-all-mixed-content;
x-content-type-options: nosniff
permission-policy: geolocation=(self), microphone=(), camera=(), fullscreen=(self)
host: invi.ir
access-control-allow-origin: https://invi.ir
access-control-allow-methods: GET, POST, DELETE, PUT
access-control-expose-headers: Content-Length, Content-Range, X-CSRF-Token
access-control-max-age: 86400
x-server: ing-k8s
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains; preload
expect-ct: max-age=86400, enforce
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,pwa-app-version,pwa-user-browser,pwa-user-os,pwa-app-id,pwa-opcode,X-Appversion,X-AppId,X-Language
x-xss-protection: 1,mode=block
cache-control: no-cache,no-store
X-Frame-Options: Deny
Set-Cookie: TS01cec922=01126062d747fa0cc7a568c19a91a7ecbe9874a0a0d3b3c041dbf6315d4b26dd862083010d2c7abc567a2fe804ee8d9cce664452b9; Path=/; Domain=.invi.ir
Transfer-Encoding: chunked