掃描 ID：
400d313c-c245-4c65-9c92-95c23476c495已完成
已提交的 URL：
https://www.sanchezonline.cl/
報告完成時間：

Cookie · 找到 17 個

Copy link

Cookie 是儲存在使用者裝置上的小型文字檔，通常用來記住使用者喜好設定並實現個人化體驗

名稱價值網域路徑到期 (UTC)安全僅 HTTP
PHPSESSID[PHPSESSID redacted].www.sanchezonline.cl/否是
cf_clearancegnb55Vj6Wh_OTeRAlF4R.yParF6irAqRMM2rdtlmDwI-1743613485-1.2.1.1-8dZQ6XOWROzgVZFZP8PcCmlVd2miQtp6VjEFiv8wSXP89jjxB1juXZOUk3ubh5ydQQbLwsyG_1rCrwaRwaUsJtrkQ5I0XOo6EbjqppIi6XHSEqbcMKRn0dxjgoN.B74EHKG8O3IlRwBOhmWgcCKvuln5Zf0beeXpbYJMxqX65klL51PtmE.wS_x70dUEk1HqtddAtF4yp0bBeU8N.JUsYypP0Wh.H2H9tnZs3RJ.Cl1ORIjHrJKiXdmPXBrl128.nMHMDMACNqZDA8elbMeTw8li9BQcs.k4wx9m2YYYC3vERjVGcueHtCysOsRxq.Zs8GtQbAt0Z0605D.iVtJyy5y.x5SBu7fSqTSPawmEu_Q.sanchezonline.cl/是是
_fbpfb.1.1743613486609.272832919351040486.sanchezonline.cl/否否
_gaGA1.2.573900549.1743613487.sanchezonline.cl/否否
_gidGA1.2.471910763.1743613487.sanchezonline.cl/否否
_gat_UA-204336425-11.sanchezonline.cl/否否
mage-cache-storage%7B%7Dwww.sanchezonline.cl/否否
mage-cache-storage-section-invalidation%7B%7Dwww.sanchezonline.cl/否否
_ga_99B4BMHZTZGS1.2.1743613487.1.0.1743613487.60.0.0.sanchezonline.cl/否否
mage-cache-sessidtruewww.sanchezonline.cl/否否

JavaScript 變數 · 找到 60 個

Copy link

在頁面的視窗物件上載入的全域 JavaScript 變數是在函數外部宣告的變數，可從目前範圍內程式碼中的任何位置存取

名稱類型
0object
onbeforetoggleobject
documentPictureInPictureobject
onpageswapobject
onpagerevealobject
onscrollendobject
__cfQRobject
__cfBeaconobject
BASE_URLstring
requirefunction

主控台記錄訊息 · 找到 72 條

Copy link

記錄到 Web 主控台的訊息

Level來源Message
errorother
URL
https://www.sanchezonline.cl/
Text
The Content-Security-Policy directive 'frame-ancestors' does not support the source expression ''unsafe-inline''
errorsecurity
URL
https://www.sanchezonline.cl/
Text
[Report Only] Refused to load the stylesheet 'https://fonts.googleapis.com/css?family=Roboto&subset=cyrillic,cyrillic-ext,greek,greek-ext,latin-ext,vietnamese' because it violates the following Content Security Policy directive: "style-src getfirebug.com *.fontawesome.com maxcdn.bootstrapcdn.com tagmanager.google.com 'self' 'unsafe-inline'". Note that 'style-src-elem' was not explicitly set, so 'style-src' is used as a fallback.
errorsecurity
URL
https://www.sanchezonline.cl/
Text
[Report Only] Refused to load the image 'data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==' because it violates the following Content Security Policy directive: "img-src widgets.magentocommerce.com www.googleadservices.com www.google-analytics.com *.vimeocdn.com s.ytimg.com *.gstatic.com *.googleapis.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://www.magezon.com 'self' 'unsafe-inline'".
errorsecurity
URL
https://www.sanchezonline.cl/
Text
[Report Only] Refused to load the image 'data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==' because it violates the following Content Security Policy directive: "img-src widgets.magentocommerce.com www.googleadservices.com www.google-analytics.com *.vimeocdn.com s.ytimg.com *.gstatic.com *.googleapis.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://www.magezon.com 'self' 'unsafe-inline'".
errorsecurity
URL
https://www.sanchezonline.cl/
Text
[Report Only] Refused to load the image 'data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==' because it violates the following Content Security Policy directive: "img-src widgets.magentocommerce.com www.googleadservices.com www.google-analytics.com *.vimeocdn.com s.ytimg.com *.gstatic.com *.googleapis.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://www.magezon.com 'self' 'unsafe-inline'".
errorsecurity
URL
https://www.sanchezonline.cl/
Text
[Report Only] Refused to load the image 'data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==' because it violates the following Content Security Policy directive: "img-src widgets.magentocommerce.com www.googleadservices.com www.google-analytics.com *.vimeocdn.com s.ytimg.com *.gstatic.com *.googleapis.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://www.magezon.com 'self' 'unsafe-inline'".
errorsecurity
URL
https://www.sanchezonline.cl/
Text
[Report Only] Refused to load the image 'data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==' because it violates the following Content Security Policy directive: "img-src widgets.magentocommerce.com www.googleadservices.com www.google-analytics.com *.vimeocdn.com s.ytimg.com *.gstatic.com *.googleapis.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://www.magezon.com 'self' 'unsafe-inline'".
errorsecurity
URL
https://www.sanchezonline.cl/
Text
[Report Only] Refused to load the image 'data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==' because it violates the following Content Security Policy directive: "img-src widgets.magentocommerce.com www.googleadservices.com www.google-analytics.com *.vimeocdn.com s.ytimg.com *.gstatic.com *.googleapis.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://www.magezon.com 'self' 'unsafe-inline'".
errorsecurity
URL
https://www.sanchezonline.cl/
Text
[Report Only] Refused to load the image 'data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==' because it violates the following Content Security Policy directive: "img-src widgets.magentocommerce.com www.googleadservices.com www.google-analytics.com *.vimeocdn.com s.ytimg.com *.gstatic.com *.googleapis.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://www.magezon.com 'self' 'unsafe-inline'".
errorsecurity
URL
https://www.sanchezonline.cl/
Text
[Report Only] Refused to load the image 'data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==' because it violates the following Content Security Policy directive: "img-src widgets.magentocommerce.com www.googleadservices.com www.google-analytics.com *.vimeocdn.com s.ytimg.com *.gstatic.com *.googleapis.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://www.magezon.com 'self' 'unsafe-inline'".

安全標頭 · 找到 3 個

Copy link

可增強 Web 應用程式安全性的 HTTP 回應標頭

瞭解更多...
名稱價值支援資訊
Strict-Transport-Security—良性宣佈僅可透過安全連線 (HTTPS) 存取網站。

按一下以瞭解更多...
X-Frame-OptionsSAMEORIGIN良性表明是否應允許瀏覽器在 <frame>、<iframe>、<embed> 或 <object> 中呈現頁面。

按一下以瞭解更多...
X-Content-Type-Optionsnosniff良性表明應遵循在 Content-Type 標頭中公告的 MIME 類型，不得變更。

按一下以瞭解更多...
Content-Security-Policy—良性控制允許使用者代理程式為給定頁面載入的資源。

按一下以瞭解更多...
Referrer-Policy—良性控制要求中應包含多少推薦人資訊。

按一下以瞭解更多...
Clear-Site-Data—良性控制用戶端瀏覽器為來源伺服器儲存的資料。

按一下以瞭解更多...
X-Permitted-Cross-Domain-Policies—良性控制 Web 用戶端（例如，Adobe Flash Player 或 Adobe Acrobat）是否有權跨網域處理資料。

按一下以瞭解更多...
Permissions-Policy—新允許和拒絕在文件或 iframe 中使用瀏覽器功能。

按一下以瞭解更多...
Cross-Origin-Embedder-Policy—新設定將跨來源資源嵌入至文件中。

按一下以瞭解更多...
Cross-Origin-Opener-Policy—新確保頂層文件不會與跨來源文件共用瀏覽上下文群組。

按一下以瞭解更多...
Cross-Origin-Resource-Policy—新要求瀏覽器封鎖對給定資源的 no-cors 跨來源/跨網站要求。

按一下以瞭解更多...
X-XSS-Protection1; mode=block已棄用已棄用。偵測到反射式 Cross-site scripting (XSS) 攻擊時，阻止載入頁面。

按一下以瞭解更多...
Feature-Policy—已棄用已棄用。取代為 Permissions-Policy 標頭。

按一下以瞭解更多...
Expect-CT—已棄用已棄用。選擇加入報告和/或強制執行憑證透明度要求。

按一下以瞭解更多...
Public-Key-Pins—已棄用已棄用。允許 HTTPS 網站抵制攻擊者使用錯誤核發或詐騙性憑證進行假冒。

按一下以瞭解更多...

PerformanceNavigationTiming

Copy link

PerformanceNavigationTiming 介面提供了有關瀏覽器文件導覽事件的指標

瞭解更多...

處理卸載事件

活動時間（毫秒）
unloadEventStart0
unloadEventEnd0

重新導向

活動時間（毫秒）
redirectStart0
redirectEnd0

Service Worker Init

活動時間（毫秒）
workerStart0

Service Worker Fetch 事件

活動時間（毫秒）
fetchStart1

DNS

活動時間（毫秒）
domainLookupStart1
domainLookupEnd1

TCP

活動時間（毫秒）
connectStart54
secureConnectionStart70
connectEnd173

請求

活動時間（毫秒）
requestStart173

回應

活動時間（毫秒）
responseStart539
responseEnd624

正在處理

活動時間（毫秒）
domInteractive1784
domContentLoadedEventStart1806
domContentLoadedEventEnd1808
domComplete1853

負載

活動時間（毫秒）
loadEventStart1854
loadEventEnd1855