https://07k.offerfitscale.com/t/65dbaf812d2c/71dd0d36-1c1e-11f0-bd85-4516bee2d7e8/71fa2984-1c1e-11f0-85d2-3f5f5f809db6

ID scansione:: 3f3ae71f-1074-4de9-959a-fbe6f016526cFatto
URL inviato:: https://www.erictroca.com/55ddccfc49594d833bc4441c09a1f57d6a89fa71-0-0-0Reindirizzato
Report terminato:: 18 apr 2025, 06:29:03Pubblico

Transazioni HTTP · 10 rilevate

Un elenco di tutte le richieste e risposte HTTP effettuate dalla risorsa durante la sessione corrente


GEThttp/1.1	200OK	55ddccfc49594d833bc4441c09a1f57d6a89fa71-0-0-0https://www.erictroca.com	Documentotext/html	124B271B	216.107.137.112AS212238 (GB)
Generali URL completo https://www.erictroca.com/55ddccfc49594d833bc4441c09a1f57d6a89fa71-0-0-0 Protocollo http/1.1 Sicurezza TLS 1.2, P-256, AES_256_GCM Server 216.107.137.112AS212238 (GB) Intestazioni delle richieste Upgrade-Insecure-Requests 1 User-Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 sec-ch-ua "Google Chrome";v="126", "Not:A-Brand";v="8", "Chromium";v="119" sec-ch-ua-platform Win32 Accept text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding gzip, deflate, br, zstd Accept-Language en-US,en;q=0.9 Connection keep-alive Host www.erictroca.com Sec-Fetch-Dest document Sec-Fetch-Mode navigate Sec-Fetch-Site none Sec-Fetch-User ?1 cf-biso-devtools 1 cf-biso-request-id c9454e6e-13c3-4aa3-9c09-236325f9ab46 Intestazioni delle risposte Content-Encoding gzip Content-Type text/html; charset=UTF-8 Date Fri, 18 Apr 2025 06:29:11 GMT Server nginx/1.12.2 Transfer-Encoding chunked Vary Accept-Encoding
GETh2	200	Richiesta primaria71fa2984-1c1e-11f0-85d2-3f5f5f809db6Scaricahttps://07k.offerfitscale.com/t/65dbaf812d2c/71dd0d36-1c1e-11f0-bd85-4516bee2d7e8 Catena di reindirizzamento https://07k.firstfitscale.com/?s1=1072401589&s2=1072401589&kw=302 https://07k.offerfitscale.com/t/65dbaf812d2c/71dd0d36-1c1e-11f0-bd85-4516bee2d7e8/71fa2984-1c1e-11f0-85d2-3f5f5f809db6	Documentotext/html	10,18kB2,97kB	154.16.205.124AS20278 (US)
Generali URL completo https://07k.offerfitscale.com/t/65dbaf812d2c/71dd0d36-1c1e-11f0-bd85-4516bee2d7e8/71fa2984-1c1e-11f0-85d2-3f5f5f809db6 Richiesto da URL https://www.erictroca.com/55ddccfc49594d833bc4441c09a1f57d6a89fa71-0-0-0 host www.erictroca.com Tipo script Protocollo h2 Sicurezza TLS 1.3, X25519, AES_256_GCM Server 154.16.205.124AS20278 (US) Software server swoole-http-server Hash di risorsa aedbbdeab9335e23109851003dbd99a8ca3b52c304b85d8da2a10d5a9b7df633 Intestazioni di sicurezza strict-transport-security max-age=15768000 Intestazioni delle richieste Referer https://www.erictroca.com/55ddccfc49594d833bc4441c09a1f57d6a89fa71-0-0-0 Upgrade-Insecure-Requests 1 User-Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 sec-ch-ua "Google Chrome";v="126", "Not:A-Brand";v="8", "Chromium";v="119" sec-ch-ua-platform Win32 :authority 07k.offerfitscale.com :method GET :path /t/65dbaf812d2c/71dd0d36-1c1e-11f0-bd85-4516bee2d7e8/71fa2984-1c1e-11f0-85d2-3f5f5f809db6 :scheme https accept text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 accept-encoding gzip, deflate, br, zstd accept-language en-US,en;q=0.9 cf-biso-devtools 1 cf-biso-request-id c9454e6e-13c3-4aa3-9c09-236325f9ab46 priority u=0, i referer https://www.erictroca.com/ sec-fetch-dest document sec-fetch-mode navigate sec-fetch-site cross-site upgrade-insecure-requests 1 user-agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Intestazioni delle risposte cache-control no-cache, private content-encoding br content-length 2447 content-type text/html; charset=UTF-8 date Fri, 18 Apr 2025 06:29:15 GMT server swoole-http-server strict-transport-security max-age=15768000 x-redir true Intestazioni dei reindirizzamenti https://07k.firstfitscale.com/?s1=1072401589&s2=1072401589&kw=302 location https://07k.offerfitscale.com/t/65dbaf812d2c/71dd0d36-1c1e-11f0-bd85-4516bee2d7e8/71fa2984-1c1e-11f0-85d2-3f5f5f809db6 cache-control no-cache, private content-encoding br content-length 282 content-type text/html; charset=utf-8 date Fri, 18 Apr 2025 06:29:13 GMT server swoole-http-server strict-transport-security max-age=15768000 x-redir true
GETh2	200	app-ae755995.csshttps://07k.offerfitscale.com/build/assets	Foglio di stiletext/css	38,23kB38,42kB	154.16.205.124AS20278 (US)
Generali URL completo https://07k.offerfitscale.com/build/assets/app-ae755995.css Richiesto da URL https://07k.offerfitscale.com/t/65dbaf812d2c/71dd0d36-1c1e-11f0-bd85-4516bee2d7e8/71fa2984-1c1e-11f0-85d2-3f5f5f809db6 host 07k.offerfitscale.com Tipo parser Protocollo h2 Sicurezza TLS 1.3, X25519, AES_256_GCM Server 154.16.205.124AS20278 (US) Software server swoole-http-server Hash di risorsa ae7559958f025cd5a0a986526b82a976ed23c454544c900176e1d48ea333b97b Intestazioni di sicurezza strict-transport-security max-age=15768000 Intestazioni delle richieste sec-ch-ua "Google Chrome";v="126", "Not:A-Brand";v="8", "Chromium";v="119" User-Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 sec-ch-ua-platform Win32 :authority 07k.offerfitscale.com :method GET :path /build/assets/app-ae755995.css :scheme https accept text/css,/;q=0.1 accept-encoding gzip, deflate, br, zstd accept-language en-US,en;q=0.9 cf-biso-devtools 1 cf-biso-request-id c9454e6e-13c3-4aa3-9c09-236325f9ab46 cookie yredir_session=eyJpdiI6IjhrTEVsdE1ZSzYrOVRrZS81MWxUY1E9PSIsInZhbHVlIjoic3dVck5DYTMxbGlKalNXdlVaOCtFTTVLSFlFZnRVT3lXbXQxR29kdWtZTm1MSGVXcnBNcWZQblcvNzdCbzN5RUdCRlFCN3FaNlNsMjdoVUh2cmJ6MlRKUWhtMDJ0MllNNnVseUlHcU0wQkk4dTR6MmlqM29CQjRIQWhzOFROaUMiLCJtYWMiOiI2ZjRmZDQ5Zjg3Y2MzMDYxYmM0YzQ2ZjI5MmQ2NTQzODA5YTRjODQyOTAzYWNmNDBlNWFiZDVmOGFmZDAxNWVhIiwidGFnIjoiIn0%3D priority u=0 sec-fetch-dest style sec-fetch-mode no-cors sec-fetch-site same-origin user-agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Intestazioni delle risposte date Wed, 16 Apr 2025 09:48:57 GMT via 1.1 varnish (Varnish/7.4) strict-transport-security max-age=15768000 server swoole-http-server age 160818 x-varnish 25866983 24857980 content-type text/css accept-ranges bytes content-length 39143
GETh2	200	api.jsScaricahttps://hcaptcha.com/1	Scriptapplication/javascript	202,35kB62,76kB	104.19.230.21AS13335 (US)
Generali URL completo https://hcaptcha.com/1/api.js Richiesto da URL https://07k.offerfitscale.com/t/65dbaf812d2c/71dd0d36-1c1e-11f0-bd85-4516bee2d7e8/71fa2984-1c1e-11f0-85d2-3f5f5f809db6 host 07k.offerfitscale.com Tipo parser Protocollo h2 Sicurezza TLS 1.3, X25519Kyber768Draft00, AES_128_GCM Server 104.19.230.21AS13335 (US) Software server cloudflare Hash di risorsa 27135d498ad9814ac65a04baa0749fbbc62f173ef15d3102e26b1e9a0fa1179e Intestazioni di sicurezza strict-transport-security max-age=31536000; includeSubDomains; preload x-content-type-options nosniff cross-origin-resource-policy cross-origin Intestazioni delle richieste sec-ch-ua "Google Chrome";v="126", "Not:A-Brand";v="8", "Chromium";v="119" User-Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 sec-ch-ua-platform Win32 :authority hcaptcha.com :method GET :path /1/api.js :scheme https accept / accept-encoding gzip, deflate, br, zstd accept-language en-US,en;q=0.9 cf-biso-devtools 1 cf-biso-request-id c9454e6e-13c3-4aa3-9c09-236325f9ab46 sec-fetch-dest script sec-fetch-mode no-cors sec-fetch-site cross-site user-agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Intestazioni delle risposte date Fri, 18 Apr 2025 06:29:15 GMT strict-transport-security max-age=31536000; includeSubDomains; preload x-content-type-options nosniff cf-cache-status HIT content-encoding br server cloudflare age 0 etag W/"2b2a9b91cd9851d75efb2d60c5698973" vary Origin, Accept-Encoding content-type application/javascript access-control-allow-origin * cache-control max-age=300 cross-origin-resource-policy cross-origin cf-ray 93221b52a9eb6665-MAD alt-svc h3=":443"; ma=86400
GETh2	200	oldw7nlgznScaricahttps://trk-consulatu.com/scripts/push/script	Scriptapplication/javascript	7,97kB3,2kB	104.21.52.224AS13335 (US)
Generali URL completo https://trk-consulatu.com/scripts/push/script/oldw7nlgzn?url=default Richiesto da URL https://07k.offerfitscale.com/t/65dbaf812d2c/71dd0d36-1c1e-11f0-bd85-4516bee2d7e8/71fa2984-1c1e-11f0-85d2-3f5f5f809db6 host 07k.offerfitscale.com Tipo script Protocollo h2 Sicurezza TLS 1.3, X25519Kyber768Draft00, AES_128_GCM Server 104.21.52.224AS13335 (US) Software server cloudflare Hash di risorsa 69fab56309998e57de719709a4269b99d679a79893235b187d0aa5d659f0c961 Intestazioni di sicurezza x-content-type-options nosniff content-security-policy default-src 'self'; frame-src 'self' data:; connect-src 'self' https://cdn-media-2020.s3.amazonaws.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://storage.googleapis.com; style-src 'self' 'unsafe-inline'; img-src * 'self' https://* blob: data:; font-src 'self' data: x-xss-protection 1; mode=block referrer-policy strict-origin-when-cross-origin x-frame-options SAMEORIGIN permissions-policy camera=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), sync-xhr=() Intestazioni delle richieste sec-ch-ua "Google Chrome";v="126", "Not:A-Brand";v="8", "Chromium";v="119" User-Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 sec-ch-ua-platform Win32 :authority trk-consulatu.com :method GET :path /scripts/push/script/oldw7nlgzn?url=default :scheme https accept / accept-encoding gzip, deflate, br, zstd accept-language en-US,en;q=0.9 cf-biso-devtools 1 cf-biso-request-id c9454e6e-13c3-4aa3-9c09-236325f9ab46 sec-fetch-dest script sec-fetch-mode no-cors sec-fetch-site cross-site user-agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Intestazioni delle risposte date Fri, 18 Apr 2025 06:29:15 GMT content-encoding gzip x-content-type-options nosniff content-security-policy default-src 'self'; frame-src 'self' data:; connect-src 'self' https://cdn-media-2020.s3.amazonaws.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://storage.googleapis.com; style-src 'self' 'unsafe-inline'; img-src * 'self' https://* blob: data:; font-src 'self' data: cf-cache-status DYNAMIC alt-svc h3=":443"; ma=86400 content-length 2533 x-xss-protection 1; mode=block pragma no-cache referrer-policy strict-origin-when-cross-origin server cloudflare x-frame-options SAMEORIGIN vary Origin, Access-Control-Request-Method, Access-Control-Request-Headers, accept-encoding content-type application/javascript;charset=UTF-8 cache-control no-cache, no-store, max-age=0, must-revalidate permissions-policy camera=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), sync-xhr=() cf-ray 93221b544af46665-MAD expires 0
GETh2	200	hcaptcha.htmlhttps://newassets.hcaptcha.com/captcha/v1/06e82212b1b0efbacd91e18e49cda9a5a591de4b/static	Documentotext/html	0B-1B	104.19.230.21AS13335 (US)
Generali URL completo https://newassets.hcaptcha.com/captcha/v1/06e82212b1b0efbacd91e18e49cda9a5a591de4b/static/hcaptcha.html#frame=challenge&id=009l6wvce7cb9&host=07k.offerfitscale.com&sentry=true&reportapi=https%3A%2F%2Faccounts.hcaptcha.com&recaptchacompat=true&custom=false&hl=en&tplinks=on&pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com&sitekey=8de8f782-dd76-4e4a-8634-8ae26a466578&theme=light&origin=https%3A%2F%2F07k.offerfitscale.com Richiesto da URL https://hcaptcha.com/1/api.js host hcaptcha.com Tipo script Protocollo h2 Sicurezza TLS 1.3, X25519Kyber768Draft00, AES_128_GCM Server 104.19.230.21AS13335 (US) Software server cloudflare Intestazioni di sicurezza content-security-policy report-uri https://sentry.hcaptcha.com/api/6/security/?sentry_key=30910f52569b4c17b1081ead2dae43b4&sentry_environment=prod&sentry_release=csp1; cross-origin-resource-policy cross-origin strict-transport-security max-age=31536000; includeSubDomains; preload x-content-type-options nosniff Intestazioni delle richieste Upgrade-Insecure-Requests 1 User-Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 sec-ch-ua "Google Chrome";v="126", "Not:A-Brand";v="8", "Chromium";v="119" sec-ch-ua-platform Win32 :authority newassets.hcaptcha.com :method GET :path /captcha/v1/06e82212b1b0efbacd91e18e49cda9a5a591de4b/static/hcaptcha.html :scheme https accept text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 accept-encoding gzip, deflate, br, zstd accept-language en-US,en;q=0.9 cf-biso-devtools 1 cf-biso-request-id c9454e6e-13c3-4aa3-9c09-236325f9ab46 priority u=0, i sec-fetch-dest iframe sec-fetch-mode navigate sec-fetch-site cross-site upgrade-insecure-requests 1 user-agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Intestazioni delle risposte alt-svc h3=":443"; ma=86400 cache-control max-age=3600 cf-cache-status HIT cf-ray 93221b54ab2f6665-MAD content-encoding br content-security-policy report-uri https://sentry.hcaptcha.com/api/6/security/?sentry_key=30910f52569b4c17b1081ead2dae43b4&sentry_environment=prod&sentry_release=csp1; content-type text/html cross-origin-resource-policy cross-origin date Fri, 18 Apr 2025 06:29:15 GMT server cloudflare strict-transport-security max-age=31536000; includeSubDomains; preload vary accept-encoding Origin x-content-type-options nosniff
GETh2	200	hcaptcha.htmlhttps://newassets.hcaptcha.com/captcha/v1/06e82212b1b0efbacd91e18e49cda9a5a591de4b/static	Documentotext/html	0B-1B	104.19.230.21AS13335 (US)
Generali URL completo https://newassets.hcaptcha.com/captcha/v1/06e82212b1b0efbacd91e18e49cda9a5a591de4b/static/hcaptcha.html#frame=checkbox&id=009l6wvce7cb9&host=07k.offerfitscale.com&sentry=true&reportapi=https%3A%2F%2Faccounts.hcaptcha.com&recaptchacompat=true&custom=false&hl=en&tplinks=on&pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com&sitekey=8de8f782-dd76-4e4a-8634-8ae26a466578&theme=light&origin=https%3A%2F%2F07k.offerfitscale.com Richiesto da URL https://hcaptcha.com/1/api.js host hcaptcha.com Tipo script Protocollo h2 Sicurezza TLS 1.3, X25519Kyber768Draft00, AES_128_GCM Server 104.19.230.21AS13335 (US) Software server cloudflare Intestazioni di sicurezza content-security-policy report-uri https://sentry.hcaptcha.com/api/6/security/?sentry_key=30910f52569b4c17b1081ead2dae43b4&sentry_environment=prod&sentry_release=csp1; cross-origin-resource-policy cross-origin x-content-type-options nosniff Intestazioni delle richieste Upgrade-Insecure-Requests 1 User-Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 sec-ch-ua "Google Chrome";v="126", "Not:A-Brand";v="8", "Chromium";v="119" sec-ch-ua-platform Win32 Intestazioni delle risposte alt-svc h3=":443"; ma=86400 cache-control max-age=3600 cf-cache-status HIT cf-ray 93221b54ab2f6665-MAD content-encoding br content-security-policy report-uri https://sentry.hcaptcha.com/api/6/security/?sentry_key=30910f52569b4c17b1081ead2dae43b4&sentry_environment=prod&sentry_release=csp1; content-type text/html cross-origin-resource-policy cross-origin date Fri, 18 Apr 2025 06:29:15 GMT server cloudflare vary accept-encoding Origin x-content-type-options nosniff
GETh2	200	favicon.icohttps://07k.offerfitscale.com	Altroimage/x-icon	0B167B	154.16.205.124AS20278 (US)
Generali URL completo https://07k.offerfitscale.com/favicon.ico Protocollo h2 Sicurezza TLS 1.3, X25519, AES_256_GCM Server 154.16.205.124AS20278 (US) Software server swoole-http-server Intestazioni di sicurezza strict-transport-security max-age=15768000 Intestazioni delle richieste sec-ch-ua "Google Chrome";v="126", "Not:A-Brand";v="8", "Chromium";v="119" User-Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 sec-ch-ua-platform Win32 :authority 07k.offerfitscale.com :method GET :path /favicon.ico :scheme https accept image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 accept-encoding gzip, deflate, br, zstd accept-language en-US,en;q=0.9 cf-biso-devtools 1 cf-biso-request-id c9454e6e-13c3-4aa3-9c09-236325f9ab46 cookie yredir_session=eyJpdiI6IjhrTEVsdE1ZSzYrOVRrZS81MWxUY1E9PSIsInZhbHVlIjoic3dVck5DYTMxbGlKalNXdlVaOCtFTTVLSFlFZnRVT3lXbXQxR29kdWtZTm1MSGVXcnBNcWZQblcvNzdCbzN5RUdCRlFCN3FaNlNsMjdoVUh2cmJ6MlRKUWhtMDJ0MllNNnVseUlHcU0wQkk4dTR6MmlqM29CQjRIQWhzOFROaUMiLCJtYWMiOiI2ZjRmZDQ5Zjg3Y2MzMDYxYmM0YzQ2ZjI5MmQ2NTQzODA5YTRjODQyOTAzYWNmNDBlNWFiZDVmOGFmZDAxNWVhIiwidGFnIjoiIn0%3D priority u=1, i sec-fetch-dest image sec-fetch-mode no-cors sec-fetch-site same-origin user-agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Intestazioni delle risposte date Wed, 16 Apr 2025 09:45:56 GMT via 1.1 varnish (Varnish/7.4) strict-transport-security max-age=15768000 server swoole-http-server age 160999 x-varnish 25866984 24919192 content-type image/x-icon accept-ranges bytes content-length 0
OPTIONSh2	200	lmdzxr03ekhttps://event.trk-consulatu.com/register/event_log	Altro	0B0B	172.67.204.181AS13335 (US)
Generali URL completo https://event.trk-consulatu.com/register/event_log/lmdzxr03ek Richiesto da Tipo preflight Protocollo h2 Sicurezza TLS 1.3, X25519Kyber768Draft00, AES_128_GCM Server 172.67.204.181AS13335 (US) Software server cloudflare Intestazioni di sicurezza content-security-policy default-src 'self'; frame-src 'self' data:; connect-src 'self' https://cdn-media-2020.s3.amazonaws.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://storage.googleapis.com; style-src 'self' 'unsafe-inline'; img-src * 'self' https://* blob: data:; font-src 'self' data: permissions-policy camera=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), sync-xhr=() referrer-policy strict-origin-when-cross-origin x-content-type-options nosniff x-frame-options SAMEORIGIN x-xss-protection 1; mode=block Intestazioni delle richieste Accept / Access-Control-Request-Headers content-type Access-Control-Request-Method POST Origin https://07k.offerfitscale.com Sec-Fetch-Mode cors User-Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 :authority event.trk-consulatu.com :method OPTIONS :path /register/event_log/lmdzxr03ek :scheme https accept / accept-encoding gzip, deflate, br, zstd accept-language en-US,en;q=0.9 access-control-request-headers content-type access-control-request-method POST cf-biso-devtools 1 cf-biso-request-id c9454e6e-13c3-4aa3-9c09-236325f9ab46 origin https://07k.offerfitscale.com priority u=1, i sec-fetch-dest empty sec-fetch-mode cors sec-fetch-site cross-site user-agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Intestazioni delle risposte access-control-allow-headers content-type access-control-allow-methods POST access-control-allow-origin * access-control-expose-headers Authorization, Link, X-Total-Count, X-pushPlatformApp-alert, X-pushPlatformApp-error, X-pushPlatformApp-params access-control-max-age 1800 alt-svc h3=":443"; ma=86400 cache-control no-cache, no-store, max-age=0, must-revalidate cf-cache-status DYNAMIC cf-ray 93221b595e046665-MAD content-length 0 content-security-policy default-src 'self'; frame-src 'self' data:; connect-src 'self' https://cdn-media-2020.s3.amazonaws.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://storage.googleapis.com; style-src 'self' 'unsafe-inline'; img-src * 'self' https://* blob: data:; font-src 'self' data: date Fri, 18 Apr 2025 06:29:16 GMT expires 0 permissions-policy camera=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), sync-xhr=() pragma no-cache referrer-policy strict-origin-when-cross-origin server cloudflare vary Origin Access-Control-Request-Method Access-Control-Request-Headers x-content-type-options nosniff x-frame-options SAMEORIGIN x-xss-protection 1; mode=block
POSTh2	200	lmdzxr03ekhttps://event.trk-consulatu.com/register/event_log	Carica	0B-1B	172.67.204.181AS13335 (US)
Generali URL completo https://event.trk-consulatu.com/register/event_log/lmdzxr03ek Richiesto da URL https://trk-consulatu.com/scripts/push/script/oldw7nlgzn?url=default host trk-consulatu.com Tipo script Protocollo h2 Sicurezza TLS 1.3, X25519Kyber768Draft00, AES_128_GCM Server 172.67.204.181AS13335 (US) Software server cloudflare Intestazioni di sicurezza content-security-policy default-src 'self'; frame-src 'self' data:; connect-src 'self' https://cdn-media-2020.s3.amazonaws.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://storage.googleapis.com; style-src 'self' 'unsafe-inline'; img-src * 'self' https://* blob: data:; font-src 'self' data: x-content-type-options nosniff x-xss-protection 1; mode=block referrer-policy strict-origin-when-cross-origin x-frame-options SAMEORIGIN permissions-policy camera=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), sync-xhr=() Intestazioni delle richieste sec-ch-ua "Google Chrome";v="126", "Not:A-Brand";v="8", "Chromium";v="119" sec-ch-ua-platform Win32 User-Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-type application/json :authority event.trk-consulatu.com :method POST :path /register/event_log/lmdzxr03ek :scheme https accept / accept-encoding gzip, deflate, br, zstd accept-language en-US,en;q=0.9 cf-biso-devtools 1 cf-biso-request-id c9454e6e-13c3-4aa3-9c09-236325f9ab46 content-length 162 content-type application/json origin https://07k.offerfitscale.com priority u=1, i sec-fetch-dest empty sec-fetch-mode cors sec-fetch-site cross-site user-agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Intestazioni delle risposte date Fri, 18 Apr 2025 06:29:16 GMT content-security-policy default-src 'self'; frame-src 'self' data:; connect-src 'self' https://cdn-media-2020.s3.amazonaws.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://storage.googleapis.com; style-src 'self' 'unsafe-inline'; img-src * 'self' https://* blob: data:; font-src 'self' data: x-content-type-options nosniff cf-cache-status DYNAMIC x-pushplatformapp-alert pushPlatformApp.pushSubscription.deleted alt-svc h3=":443"; ma=86400 content-length 0 x-xss-protection 1; mode=block pragma no-cache referrer-policy strict-origin-when-cross-origin server cloudflare x-frame-options SAMEORIGIN vary Origin, Access-Control-Request-Method, Access-Control-Request-Headers access-control-allow-origin * access-control-expose-headers Authorization, Link, X-Total-Count, X-pushPlatformApp-alert, X-pushPlatformApp-error, X-pushPlatformApp-params cache-control no-cache, no-store, max-age=0, must-revalidate permissions-policy camera=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), sync-xhr=() cf-ray 93221b5a5e9f6665-MAD expires 0

· 3 voci della cronologia della pagina trovate

HTTP, JavaScript o reindirizzamenti ai tag Meta

https://www.erictroca.com/55ddccfc49594d833bc4441c09a1f57d6a89fa71-0-0-0200
https://07k.firstfitscale.com/?s1=1072401589&s2=1072401589&kw=302
https://07k.offerfitscale.com/t/65dbaf812d2c/71dd0d36-1c1e-11f0-bd85-4516bee2d7e8/71fa2984-1c1e-11f0-85d2-3f5f5f809db6200

Catene di reindirizzamento · 1 trovate

Reindirizzamenti rilevati nelle transazioni HTTP

Catena di reindirizzamento per la transazione n2

https://07k.firstfitscale.com/?s1=1072401589&s2=1072401589&kw=302
https://07k.offerfitscale.com/t/65dbaf812d2c/71dd0d36-1c1e-11f0-bd85-4516bee2d7e8/71fa2984-1c1e-11f0-85d2-3f5f5f809db6

Record DNS · 1 trovati

I record DNS forniscono informazioni su un dominio, incluso l'indirizzo IP a cui è associato

Tipo	Nome	Contenuto	DNSSEC
A	07k.offerfitscale.com	154.16.205.124	Disabilitato