https://www.immuniweb.com/websec/s.gopropertythailand.com/4WhlNxvk/

ID scansione:: 281761af-ed18-40a1-a360-033a4d9df300Fatto
URL inviato:: https://www.immuniweb.com/websec/s.gopropertythailand.com/4WhlNxvk/
Report terminato:: 7 apr 2025, 02:47:37Pubblico

Transazioni HTTP · 6 rilevate

Un elenco di tutte le richieste e risposte HTTP effettuate dalla risorsa durante la sessione corrente


GETh2	403	https://www.immuniweb.com/websec/s.gopropertythailand.com/4WhlNxvk	Documentotext/html	9,96kB7,87kB	172.67.30.240AS13335 (US)
Generali URL completo https://www.immuniweb.com/websec/s.gopropertythailand.com/4WhlNxvk/ Protocollo h2 Sicurezza TLS 1.3, X25519Kyber768Draft00, AES_128_GCM Server 172.67.30.240AS13335 (US) Software server cloudflare Hash di risorsa bd26b23ae86f7b71f4e4d321ac33c39d11ff9435cf079574633e5e283372a05e Intestazioni di sicurezza cross-origin-embedder-policy require-corp cross-origin-opener-policy same-origin cross-origin-resource-policy same-origin permissions-policy accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() referrer-policy same-origin x-frame-options SAMEORIGIN Intestazioni delle richieste Upgrade-Insecure-Requests 1 User-Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 sec-ch-ua "Google Chrome";v="126", "Not:A-Brand";v="8", "Chromium";v="119" sec-ch-ua-platform Win32 :authority www.immuniweb.com :method GET :path /websec/s.gopropertythailand.com/4WhlNxvk/ :scheme https accept text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 accept-encoding gzip, deflate, br, zstd accept-language en-US,en;q=0.9 cf-biso-devtools 1 cf-biso-request-id 4138a996-05f3-4a82-9219-b22514d364a1 priority u=0, i sec-fetch-dest document sec-fetch-mode navigate sec-fetch-site none sec-fetch-user ?1 upgrade-insecure-requests 1 user-agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Intestazioni delle risposte accept-ch Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA cache-control private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out Spo2SyozbQK3Fdk8vmbTxXqN8PWZ8n4IVnVh81m8dn3lOwsSehpja5xEnXx3dAqStDjRYU2FLTRUUiwh/LbNr0OCnvrslLATGbuJHXYx+K/ABcC1euheBIIYEXDOgUxIil9ZDrmQnQ7KvoDRNgykLw==$fOrJyvkTDbLY5Rx46gPjrw== cf-mitigated challenge cf-ray 92c633d67b9a2fb7-MAD content-encoding br content-type text/html; charset=UTF-8 critical-ch Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA cross-origin-embedder-policy require-corp cross-origin-opener-policy same-origin cross-origin-resource-policy same-origin date Mon, 07 Apr 2025 02:47:49 GMT expires Thu, 01 Jan 1970 00:00:01 GMT origin-agent-cluster ?1 permissions-policy accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() referrer-policy same-origin server cloudflare server-timing chlray;desc="92c633d67b9a2fb7" vary Accept-Encoding x-content-options nosniff x-frame-options SAMEORIGIN
GETh2	200	v1Scaricahttps://www.immuniweb.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page	Scriptapplication/javascript	94,09kB35,3kB	172.67.30.240AS13335 (US)
Generali URL completo https://www.immuniweb.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=92c633d67b9a2fb7 Richiesto da URL https://www.immuniweb.com/websec/s.gopropertythailand.com/4WhlNxvk/ host www.immuniweb.com Tipo script Protocollo h2 Sicurezza TLS 1.3, X25519Kyber768Draft00, AES_128_GCM Server 172.67.30.240AS13335 (US) Software server cloudflare Hash di risorsa f5a4197247135125ca6efa806ef8941baa1ea27602a62d55b7d0a037e4d8dbcd Intestazioni delle richieste sec-ch-ua "Google Chrome";v="126", "Not:A-Brand";v="8", "Chromium";v="119" Referer https://www.immuniweb.com/websec/s.gopropertythailand.com/4WhlNxvk/?__cf_chl_rt_tk=PGDCv.pBG6HJkiW5MHc3O1MBV_qhRKSXuAqWpvBFRxo-1743994069-1.0.1.1-tOssbs4CvFDdBuNB87FmywRw0r_iIldmofTvp_KJGho User-Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 sec-ch-ua-platform Win32 :authority www.immuniweb.com :method GET :path /cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=92c633d67b9a2fb7 :scheme https accept / accept-encoding gzip, deflate, br, zstd accept-language en-US,en;q=0.9 cf-biso-devtools 1 cf-biso-request-id 4138a996-05f3-4a82-9219-b22514d364a1 referer https://www.immuniweb.com/websec/s.gopropertythailand.com/4WhlNxvk/?__cf_chl_rt_tk=PGDCv.pBG6HJkiW5MHc3O1MBV_qhRKSXuAqWpvBFRxo-1743994069-1.0.1.1-tOssbs4CvFDdBuNB87FmywRw0r_iIldmofTvp_KJGho sec-fetch-dest script sec-fetch-mode no-cors sec-fetch-site same-origin user-agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Intestazioni delle risposte date Mon, 07 Apr 2025 02:47:49 GMT cache-control private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 content-encoding br server cloudflare cf-ray 92c633d6fbb02fb7-MAD content-type application/javascript; charset=UTF-8
GETh2	200	api.jsScaricahttps://challenges.cloudflare.com/turnstile/v0/g/64912bd87b0e	Scriptapplication/javascript	47kB15,9kB	104.18.95.41AS13335 (US)
Generali URL completo https://challenges.cloudflare.com/turnstile/v0/g/64912bd87b0e/api.js?onload=oPhx0&render=explicit Richiesto da URL https://www.immuniweb.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=92c633d67b9a2fb7 host www.immuniweb.com Tipo script Protocollo h2 Sicurezza TLS 1.3, X25519Kyber768Draft00, AES_128_GCM Server 104.18.95.41AS13335 (US) Software server cloudflare Hash di risorsa d0c2d281d97fb066ba46f44b9a606cfdf80a5824b1346afe6a237656e2ee6e82 Intestazioni di sicurezza cross-origin-resource-policy cross-origin Intestazioni delle richieste sec-ch-ua "Google Chrome";v="126", "Not:A-Brand";v="8", "Chromium";v="119" Origin https://www.immuniweb.com User-Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 sec-ch-ua-platform Win32 :authority challenges.cloudflare.com :method GET :path /turnstile/v0/g/64912bd87b0e/api.js?onload=oPhx0&render=explicit :scheme https accept / accept-encoding gzip, deflate, br, zstd accept-language en-US,en;q=0.9 cf-biso-devtools 1 cf-biso-request-id 4138a996-05f3-4a82-9219-b22514d364a1 origin https://www.immuniweb.com sec-fetch-dest script sec-fetch-mode cors sec-fetch-site cross-site user-agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Intestazioni delle risposte date Mon, 07 Apr 2025 02:47:49 GMT content-encoding br last-modified Mon, 31 Mar 2025 18:19:53 GMT server cloudflare vary Accept-Encoding content-type application/javascript; charset=UTF-8 access-control-allow-origin * cache-control max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public cross-origin-resource-policy cross-origin cf-ray 92c633d7cbe02fb7-MAD alt-svc h3=":443"; ma=86400
GETh2	200	favicon.icohttps://www.immuniweb.com	Immagineimage/x-icon	15,04kB5,27kB	172.67.30.240AS13335 (US)
Generali URL completo https://www.immuniweb.com/favicon.ico Richiesto da URL https://www.immuniweb.com/websec/s.gopropertythailand.com/4WhlNxvk/ host www.immuniweb.com Tipo parser Protocollo h2 Sicurezza TLS 1.3, X25519Kyber768Draft00, AES_128_GCM Server 172.67.30.240AS13335 (US) Software server cloudflare Hash di risorsa c748148fa5d25e42f5df06b29ec3b731402fa732d9e605b2cc31b052a713cd22 Intestazioni delle richieste sec-ch-ua "Google Chrome";v="126", "Not:A-Brand";v="8", "Chromium";v="119" Referer https://www.immuniweb.com/websec/s.gopropertythailand.com/4WhlNxvk/ User-Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 sec-ch-ua-platform Win32 :authority www.immuniweb.com :method GET :path /favicon.ico :scheme https accept image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 accept-encoding gzip, deflate, br, zstd accept-language en-US,en;q=0.9 cf-biso-devtools 1 cf-biso-request-id 4138a996-05f3-4a82-9219-b22514d364a1 priority i referer https://www.immuniweb.com/websec/s.gopropertythailand.com/4WhlNxvk/ sec-fetch-dest image sec-fetch-mode no-cors sec-fetch-site same-origin user-agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Intestazioni delle risposte date Mon, 07 Apr 2025 02:47:50 GMT content-encoding br cf-cache-status BYPASS last-modified Fri, 22 Apr 2022 17:07:29 GMT server cloudflare etag W/"6262e0d1-3c2e" vary Accept-Encoding content-type image/x-icon cache-control max-age=604800, private cf-ray 92c633d78bce2fb7-MAD expires Mon, 14 Apr 2025 02:47:50 GMT
POSTh2	200	ziMUsz2kYXSanNta4sbGpN9xRwS2uguIlP8XX7cb7Ko-1743994069-1.2.1.1-jdsJNfee3doiw2LFOM9JrSatum4FH9XY5Ezc3e5IG3.t0qAizHA.SKK6EP3F9n6ZScaricahttps://www.immuniweb.com/cdn-cgi/challenge-platform/h/g/flow/ov1/671469881:1743992721:PYnw0_uwuMvpnmmsJW16h41taEgHyGj9N3Lg5A9ppRM/92c633d67b9a2fb7	XHRtext/plain	16,56kB12,62kB	172.67.30.240AS13335 (US)
Generali URL completo https://www.immuniweb.com/cdn-cgi/challenge-platform/h/g/flow/ov1/671469881:1743992721:PYnw0_uwuMvpnmmsJW16h41taEgHyGj9N3Lg5A9ppRM/92c633d67b9a2fb7/ziMUsz2kYXSanNta4sbGpN9xRwS2uguIlP8XX7cb7Ko-1743994069-1.2.1.1-jdsJNfee3doiw2LFOM9JrSatum4FH9XY5Ezc3e5IG3.t0qAizHA.SKK6EP3F9n6Z Richiesto da URL https://www.immuniweb.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=92c633d67b9a2fb7 host www.immuniweb.com Tipo script Protocollo h2 Sicurezza TLS 1.3, X25519Kyber768Draft00, AES_128_GCM Server 172.67.30.240AS13335 (US) Software server cloudflare Hash di risorsa a73ada6c59353f22ba6fb10b5b8ae3d49909bea8b5632e70b297ed6cfba17152 Intestazioni delle richieste sec-ch-ua "Google Chrome";v="126", "Not:A-Brand";v="8", "Chromium";v="119" Content-Type text/plain;charset=UTF-8 Referer https://www.immuniweb.com/websec/s.gopropertythailand.com/4WhlNxvk/ cf-chl ziMUsz2kYXSanNta4sbGpN9xRwS2uguIlP8XX7cb7Ko-1743994069-1.2.1.1-jdsJNfee3doiw2LFOM9JrSatum4FH9XY5Ezc3e5IG3.t0qAizHA.SKK6EP3F9n6Z cf-chl-ra 0 User-Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 sec-ch-ua-platform Win32 :authority www.immuniweb.com :method POST :path /cdn-cgi/challenge-platform/h/g/flow/ov1/671469881:1743992721:PYnw0_uwuMvpnmmsJW16h41taEgHyGj9N3Lg5A9ppRM/92c633d67b9a2fb7/ziMUsz2kYXSanNta4sbGpN9xRwS2uguIlP8XX7cb7Ko-1743994069-1.2.1.1-jdsJNfee3doiw2LFOM9JrSatum4FH9XY5Ezc3e5IG3.t0qAizHA.SKK6EP3F9n6Z :scheme https accept / accept-encoding gzip, deflate, br, zstd accept-language en-US,en;q=0.9 cf-biso-devtools 1 cf-biso-request-id 4138a996-05f3-4a82-9219-b22514d364a1 content-length 2368 content-type text/plain;charset=UTF-8 origin https://www.immuniweb.com priority u=1, i referer https://www.immuniweb.com/websec/s.gopropertythailand.com/4WhlNxvk/ sec-fetch-dest empty sec-fetch-mode cors sec-fetch-site same-origin user-agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Intestazioni delle risposte cf-chl-gen AnLjVGUPG6LnSQ4XXIO3Qn5o340GK+ftzRV3HuIVQdg=$xtTLN4E9+TQqhynZgrCLaw== date Mon, 07 Apr 2025 02:47:49 GMT content-encoding br server cloudflare cf-ray 92c633d83c012fb7-MAD content-type text/plain; charset=UTF-8
GETh2	200	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/j26w6/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal/auto	Documentotext/html	0B-1B	104.18.95.41AS13335 (US)
Generali URL completo https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/j26w6/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal/auto/ Richiesto da URL https://challenges.cloudflare.com/turnstile/v0/g/64912bd87b0e/api.js?onload=oPhx0&render=explicit host challenges.cloudflare.com Tipo script Protocollo h2 Sicurezza TLS 1.3, X25519Kyber768Draft00, AES_128_GCM Server 104.18.95.41AS13335 (US) Software server cloudflare Intestazioni di sicurezza content-security-policy default-src 'none'; script-src 'nonce-Y7eWYMwETd1EjPPk' 'unsafe-eval'; script-src-attr 'none'; worker-src blob:; style-src 'unsafe-inline'; img-src 'self'; connect-src 'self'; frame-src 'self' blob:; child-src 'self' blob:; form-action 'none'; base-uri 'self'; sandbox allow-same-origin allow-scripts allow-popups allow-forms cross-origin-embedder-policy require-corp cross-origin-opener-policy same-origin cross-origin-resource-policy cross-origin permissions-policy accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() referrer-policy same-origin Intestazioni delle richieste Upgrade-Insecure-Requests 1 User-Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 sec-ch-ua "Google Chrome";v="126", "Not:A-Brand";v="8", "Chromium";v="119" sec-ch-ua-platform Win32 :authority challenges.cloudflare.com :method GET :path /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/j26w6/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal/auto/ :scheme https accept text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 accept-encoding gzip, deflate, br, zstd accept-language en-US,en;q=0.9 cf-biso-devtools 1 cf-biso-request-id 4138a996-05f3-4a82-9219-b22514d364a1 priority u=0, i sec-fetch-dest iframe sec-fetch-mode navigate sec-fetch-site cross-site upgrade-insecure-requests 1 user-agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Intestazioni delle risposte accept-ch Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA alt-svc h3=":443"; ma=86400 cache-control private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-ray 92c633d8ec202fb7-MAD content-encoding br content-security-policy default-src 'none'; script-src 'nonce-Y7eWYMwETd1EjPPk' 'unsafe-eval'; script-src-attr 'none'; worker-src blob:; style-src 'unsafe-inline'; img-src 'self'; connect-src 'self'; frame-src 'self' blob:; child-src 'self' blob:; form-action 'none'; base-uri 'self'; sandbox allow-same-origin allow-scripts allow-popups allow-forms content-type text/html; charset=UTF-8 critical-ch Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA cross-origin-embedder-policy require-corp cross-origin-opener-policy same-origin cross-origin-resource-policy cross-origin date Mon, 07 Apr 2025 02:47:49 GMT document-policy js-profiling origin-agent-cluster ?1 permissions-policy accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() referrer-policy same-origin server cloudflare

· 1 voce della cronologia della pagina trovata

HTTP, JavaScript o reindirizzamenti ai tag Meta

https://www.immuniweb.com/websec/s.gopropertythailand.com/4WhlNxvk/403

Catene di reindirizzamento · 0 trovate

Reindirizzamenti rilevati nelle transazioni HTTP

Record DNS · 6 trovati

I record DNS forniscono informazioni su un dominio, incluso l'indirizzo IP a cui è associato

Tipo	Nome	Contenuto	DNSSEC
A	www.immuniweb.com	172.67.30.240	Abilitato
A	www.immuniweb.com	104.22.41.197	Abilitato
A	www.immuniweb.com	104.22.40.197	Abilitato
AAAA	www.immuniweb.com	2606:4700:10::ac43:1ef0	Abilitato
AAAA	www.immuniweb.com	2606:4700:10::6816:28c5	Abilitato
AAAA	www.immuniweb.com	2606:4700:10::6816:29c5	Abilitato