Headers of http://grupos-api.nautaliaviajes.com

HTTP/1.1 301 Moved Permanently
Server
nginx
Date
Tue, 27 Feb 2024 11:45:32 GMT
Content-Type
text/html
Content-Length
162
Connection
close
Location
https://grupos-api.nautaliaviajes.com/
HTTP/1.1 302 Found
Server
nginx
Content-Type
text/html; charset=UTF-8
Transfer-Encoding
chunked
Connection
close
X-Powered-By
PHP/8.1.10
Cache-Control
no-cache, private
Date
Tue, 27 Feb 2024 11:45:33 GMT
Location
https://grupos-api.nautaliaviajes.com/login
Strict-Transport-Security
max-age=31536000; includeSubdomains
Referrer-Policy
same-origin
X-Frame-Options
SAMEORIGIN
X-Content-Type-Options
nosniff
X-XSS-Protection
1; mode=block
Content-Security-Policy
default-src 'self' data: grupos-intranet.nautaliaviajes.com fonts.googleapis.com fonts.gstatic.com grupos-app.nautaliaviajes.com 'unsafe-inline'; img-src 'self' data: grupos-intranet.nautaliaviajes.com; script-src 'self' grupos-intranet.nautaliaviajes.com cdn.polyfill.io 'unsafe-inline' 'unsafe-eval';
Access-Control-Allow-Origin
*
Access-Control-Expose-Headers
Cache-Control, Content-Language, Content-Type, Expires, Last-Modified, Pragma, X-Valid-Discount-Code, X-Expired
Set-Cookie
XSRF-TOKEN=eyJpdiI6IlZrQ0FZTUwxb2JHbHJZSWJibjFGRUE9PSIsInZhbHVlIjoiNVYzT2JDaEw2c3VrbWFxdjlkZGU0WWVjbDM5WlFLVjdVSzlYMzVId3NBdUcxQWE1L3N4VmMyendSc0w3VnEraUgzREFSeGpNNmVDTmNVY0ZZcHhnVjEvU09JTXJJa0prR1hhd3FxS1YrdmhJNzBxc2x3MWc1TjFjY0JKQkRXcHYiLCJtYWMiOiI3ZmY2MmY0MjQ2NTJhNGFlYmI2NGQ2ODE0ZjBlZGQ4MjJhZTk5YmViMDFkODRmNzFkOTUzNjgzYzFlMTJiODYzIiwidGFnIjoiIn0%3D; expires=Tue, 27-Feb-2024 13:45:33 GMT; Max-Age=7200; path=/; samesite=strict
Set-Cookie
nautalia_grupales_session=eyJpdiI6ImFYN01Gb0kyaHJyWjJ1ZVFkSkRSU1E9PSIsInZhbHVlIjoiZnd0eGpPMmFDNXRBa3FHM3k2djByUHVnS2M5ckU4TCtBa01MRlVFR0lOODZUbkh5MmQ0T3lxTE1RMmsySVNLYWNHUkRNcWhWajJybWNwZExDZ1k5aDVUb01mRWNsOWFtaFplNUlhVDRQaytQUi83dGJnT1pneUZWUGlKYzAxaXMiLCJtYWMiOiJjZjNmM2NkYmI1YzRlYTNjYmIxM2ZjZDEyYWIyNWY0ZTY4MTA2OGFlYzllOTFhNDA1OWVmMDZmMzk3ZTdhMTBhIiwidGFnIjoiIn0%3D; expires=Tue, 27-Feb-2024 13:45:33 GMT; Max-Age=7200; path=/; httponly; samesite=strict
Strict-Transport-Security
max-age=31536000; includeSubDomains
Content-Security-Policy
directives
X-Frame-Options
SAMEORIGIN
X-Content-Type-Options
nosniff
Referrer-Policy
policy
HTTP/1.1 403 Forbidden
Server
nginx
Content-Type
application/json
Transfer-Encoding
chunked
Connection
close
X-Powered-By
PHP/8.1.10
Cache-Control
no-cache, private
Date
Tue, 27 Feb 2024 11:45:34 GMT
Strict-Transport-Security
max-age=31536000; includeSubdomains
Referrer-Policy
same-origin
X-Frame-Options
SAMEORIGIN
X-Content-Type-Options
nosniff
X-XSS-Protection
1; mode=block
Content-Security-Policy
default-src 'self' data: grupos-intranet.nautaliaviajes.com fonts.googleapis.com fonts.gstatic.com grupos-app.nautaliaviajes.com 'unsafe-inline'; img-src 'self' data: grupos-intranet.nautaliaviajes.com; script-src 'self' grupos-intranet.nautaliaviajes.com cdn.polyfill.io 'unsafe-inline' 'unsafe-eval';
Access-Control-Allow-Origin
*
Access-Control-Expose-Headers
Cache-Control, Content-Language, Content-Type, Expires, Last-Modified, Pragma, X-Valid-Discount-Code, X-Expired
Set-Cookie
XSRF-TOKEN=eyJpdiI6ImlLdDhoektjVTlGTGIzSlJXOTNNK0E9PSIsInZhbHVlIjoiNStZRVgvejZFMnNqeC90UWJJbjh4bU5JemVDbVBmQzZDVlJwWEo4ZGJweWRyRjBoN3V6ak51WjQxRlJ0VUEwV0tWcFk0a0lpanh2dVgzRTEzMzhvVDhFR2JDWjdsemx4Z2lrR2tpN3FpRHVQUnkvN2k2R2JFQS82NXZZd3k5WlYiLCJtYWMiOiIxOWU4ZWIyZGRmYTcwOTY5N2QxNzE0YzFlZmQ0YTBmN2NiNzBhNWRlMDlmMjk0ODhjYzY3ZjQyOTE2MTRhNjQyIiwidGFnIjoiIn0%3D; expires=Tue, 27-Feb-2024 13:45:34 GMT; Max-Age=7200; path=/; samesite=strict
Set-Cookie
nautalia_grupales_session=eyJpdiI6InY3Y0NyWW4wSlErRGZmekZNa01YZkE9PSIsInZhbHVlIjoiUmV2OHQ1cFRxcVk5bWxWVG5hTU4zdCtQKzg5bUxGMENQVEVISUxPRENtcE1sR2hoL3JQWkZPVC9pT1Z5SXVobkF3dnlwSTBUV0lmenZQcDNvUFVDMTBwQ0JLWEd5QnptL0ZlL1NSUkNDZnp3OWQ0SUxmck5oTDBsRnFWc2hzZEIiLCJtYWMiOiI4YjExZmU0OWJkN2UyYTkxY2Q4OWZiYTRkNzVlMTBhZTRhNTBjMThlZTVmOTIxNDAxOGFiYTBiMDJiODY5MGFiIiwidGFnIjoiIn0%3D; expires=Tue, 27-Feb-2024 13:45:34 GMT; Max-Age=7200; path=/; httponly; samesite=strict
Strict-Transport-Security
max-age=31536000; includeSubDomains
Content-Security-Policy
directives
X-Frame-Options
SAMEORIGIN
X-Content-Type-Options
nosniff
Referrer-Policy
policy