OpenResty1.15.8.1

HTTP/1.1 200 OK
Server: openresty/1.15.8.1
Date: Sat, 31 Aug 2024 04:50:19 GMT
Content-Type: text/html
Content-Length: 612
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Tue, 13 Aug 2019 19:06:43 GMT
ETag: "5d530a43-264"
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes

Invicti | Web Application Security For Enterprise | Netsparker

HTTP/1.1 200 OK
Date: Thu, 19 Sep 2024 15:06:02 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 45999
Connection: keep-alive
Cache-Control: private
Set-Cookie: msluuid=32bd89d4986442b2a7b87c1865a6eb7a; expires=Sat, 19-Sep-2026 15:06:01 GMT; path=/; secure; HttpOnly
Set-Cookie: landing_page_url=https://34.206.241.240/; expires=Thu, 19-Sep-2024 15:36:01 GMT; path=/; secure
web-site: service.invicti.com
Content-Security-Policy: default-src 'self' https://embed-ssl.wistia.com/deliveries/8e4be7011c8173f56f7717e7332cd52a7803b61e.bin embed-ssl.wistia.com fast.wistia.com static.getclicky.com distillery.wistia.com pipedream.wistia.com; script-src 'self' 'unsafe-eval' ssl.google-analytics.com d4qkvw08lssf8.cloudfront.net dpsvdv74uwwos.cloudfront.net https://www.gartner.com fast.wistia.com static.getclicky.com embedwistia-a.akamaihd.net https://www.google.com https://luoqll1mnc.execute-api.us-west-2.amazonaws.com https://js.driftt.com https://anchor.fm *.googletagmanager.com https://bat.bing.com *.vwo.com *.visualwebsiteoptimizer.com 'unsafe-inline' app.vwo.com d5phz18u4wuww.cloudfront.net *.invicti.com snap.licdn.com seoexperiments.io https://js.driftt.com/deploy https://pi.pardot.com/pd.js https://pi.pardot.com/ https://connect.facebook.net https://www.facebook.com/ https://ct.capterra.com/capterra_tracker.js https://tcp.googlesyndication.com https://x.clearbitjs.com https://vidassets.terminus.services https://j.6sc.co https://trk.techtarget.com https://tag.demandbase.com *.hotjar.com https://cdnjs.cloudflare.com https://client-registry.mutinycdn.com https://client.mutinycdn.com *.clarity.ms https://tagmanager.google.com https://www.googleadservices.com https://sjs.bizographics.com https://googleads.g.doubleclick.net https://px.ads.linkedin.com https://www.linkedin.com https://www.google-analytics.com; style-src 'self' d4qkvw08lssf8.cloudfront.net dpsvdv74uwwos.cloudfront.net https://www.gartner.com fast.wistia.com *.vwo.com *.invicti.com *.googleapis.com https://dpsvdv74uwwos.cloudfront.net 'unsafe-inline' https://tagmanager.google.com; frame-src *.youtube.com *.youtube-nocookie.com https://www.gartner.com https://js.driftt.com https://anchor.fm *.googletagmanager.com app.vwo.com youtube.com https://bid.g.doubleclick.net https://www.facebook.com/ *.hotjar.com https://player.vimeo.com; font-src 'self' d4qkvw08lssf8.cloudfront.net dpsvdv74uwwos.cloudfront.net fast.wistia.com data: stage.netsparker.com *.gstatic.com *.invicti.com app.vwo.com *.hotjar.com; img-src 'self' ssl.google-analytics.com stats.g.doubleclick.net d4qkvw08lssf8.cloudfront.net dpsvdv74uwwos.cloudfront.net https://reviews.static.gartner.com fast.wistia.com embedwistia-a.akamaihd.net https://embed-fastly.wistia.com https://bat.bing.com *.visualwebsiteoptimizer.com http://e-2072.adzerk.net/e/2072/419463/e.gif data: *.invicti.com px.ads.linkedin.com p.adsymptotic.com https://www.facebook.com/ https://www.linkedin.com/px/li_sync https://googleads.g.doubleclick.net *.google.com *.googleapis.com *.googletagmanager.com *.google.com.tr https://www.gravatar.com https://b.6sc.co https://vidassets.terminus.services https://match.adsrvr.org https://apt.techtarget.com https://match.prod.bidr.io https://id.rlcdn.com https://segments.company-target.com *.clarity.ms *.bing.com https://ssl.gstatic.com https://www.gstatic.com www.google.co.uk https://www.google-analytics.com; object-src 'self'; media-src 'self' blob: https://js.driftqa.com https://dpsvdv74uwwos.cloudfront.net; connect-src 'self' embedwistia-a.akamaihd.net embed-ssl.wistia.com distillery.wistia.com pipedream.wistia.com embed-fastly.wistia.com https://fg8vvsvnieiv3ej16jby.litix.io *.visualwebsiteoptimizer.com https://stats.g.doubleclick.net *.google.com https://www.google-analytics.com *.google.com.tr https://x.clearbit.com https://app.clearbit.com https://c.6sc.co/ https://secure.adnxs.com https://api.company-target.com wss://*.hotjar.com *.hotjar.com *.hotjar.io https://segments.company-target.com https://user-data.mutinycdn.com https://api-v2.mutinyhq.io https://api.mutinyhq.io *.clarity.ms
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: DENY
Referrer-Policy: same-origin
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Expect-CT: max-age=30,report-uri="https://www.netsparker.com/report-ct/"

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:d1:55:8c:7b:da:a2:2b:77:4b:5d:54:27:88:0c:17
        Signature Algorithm: sha384WithRSAEncryption
        Issuer: C=FR, O=Gandi, CN=Gandi RSA Domain Validation Secure Server CA 3
        Validity
            Not Before: Feb 22 00:00:00 2024 GMT
            Not After : Mar  1 23:59:59 2025 GMT
        Subject: CN=*.invicti.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:9e:68:ce:8d:69:e7:7e:71:eb:ed:15:9d:92:a3:
                    d9:46:d9:2c:7a:24:30:17:17:e5:d2:85:d2:ca:43:
                    13:df:2a:23:f9:cc:45:7e:d8:2c:6b:06:a1:a2:cc:
                    c2:ae:b5:ae:99:ae:3a:52:50:64:07:1c:15:2b:fa:
                    23:fa:f3:b6:e8:1e:2d:3a:9c:90:04:25:4c:f1:46:
                    56:3c:82:32:1e:4c:21:7b:da:88:14:9c:ea:fc:cb:
                    08:5c:39:7f:45:7d:94:33:61:71:40:f9:48:4f:e3:
                    d0:af:75:17:40:96:5c:3e:fb:0f:60:7d:22:b3:fa:
                    f6:67:d5:bb:f6:7a:6e:77:ba:72:42:61:08:ba:67:
                    e8:a0:de:55:7d:d6:aa:ff:c9:3e:dd:3b:29:73:fd:
                    f6:d9:5e:4d:04:10:77:ed:2d:f5:df:19:14:eb:bc:
                    8a:a3:24:aa:c4:6a:ea:95:5f:00:e2:95:c9:82:97:
                    7e:f0:d6:12:cd:54:b0:4e:46:a1:86:be:b5:11:db:
                    5a:fb:42:85:d0:02:0b:73:a5:8d:2b:e7:9f:41:ec:
                    68:0a:6c:30:90:aa:84:cf:60:59:79:f1:a4:bb:aa:
                    a9:79:cf:14:72:ab:65:8d:31:d4:c2:83:de:58:57:
                    8f:4b:06:3e:a9:f8:b4:46:c0:70:42:2f:fd:73:ff:
                    70:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                81:11:92:DE:66:32:A5:B0:5B:33:3D:65:43:85:FC:D4:04:2D:F1:AE
            X509v3 Subject Key Identifier: 
                E7:F5:82:F2:7A:23:97:C5:3F:E7:78:9B:49:75:D4:EF:05:7D:3F:56
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.6449.1.2.2.26
                  CPS: https://sectigo.com/CPS
                Policy: 2.23.140.1.2.1
            Authority Information Access: 
                CA Issuers - URI:http://crt.sectigo.com/GandiRSADomainValidationSecureServerCA3.crt
                OCSP - URI:http://ocsp.sectigo.com
            X509v3 Subject Alternative Name: 
                DNS:*.invicti.com, DNS:invicti.com
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : CF:11:56:EE:D5:2E:7C:AF:F3:87:5B:D9:69:2E:9B:E9:
                                1A:71:67:4A:B0:17:EC:AC:01:D2:5B:77:CE:CC:3B:08
                    Timestamp : Feb 22 13:35:23.228 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:B4:DA:27:E9:95:7B:81:43:F2:8F:34:
                                59:A8:92:6F:86:3E:3F:0F:19:FA:DA:68:A9:9F:9D:41:
                                68:94:BE:72:6E:02:20:5F:9B:66:B0:0F:17:4D:05:F9:
                                F3:95:23:1F:94:0A:C3:6A:A8:65:65:97:AC:1A:93:A7:
                                81:F2:4B:AA:C7:7E:19
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : A2:E3:0A:E4:45:EF:BD:AD:9B:7E:38:ED:47:67:77:53:
                                D7:82:5B:84:94:D7:2B:5E:1B:2C:C4:B9:50:A4:47:E7
                    Timestamp : Feb 22 13:35:24.150 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:72:7E:C0:3B:FA:C1:39:43:E6:3D:22:29:
                                D9:6A:86:BD:90:E7:D6:5B:A1:51:DF:64:46:62:F5:F8:
                                0E:54:5F:63:02:20:69:6D:0F:9D:0A:CE:AF:68:FB:CC:
                                3E:BB:70:56:CD:A9:33:27:E4:BF:CB:63:64:28:78:2C:
                                87:41:31:F7:7E:B5
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 4E:75:A3:27:5C:9A:10:C3:38:5B:6C:D4:DF:3F:52:EB:
                                1D:F0:E0:8E:1B:8D:69:C0:B1:FA:64:B1:62:9A:39:DF
                    Timestamp : Feb 22 13:35:23.315 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:14:C9:47:9D:16:16:1A:73:3A:C7:45:AB:
                                EB:2F:BB:F2:3F:BA:04:21:16:A0:52:59:23:FF:40:1A:
                                2C:DC:11:0F:02:21:00:B9:D1:DC:3F:24:D9:DE:E4:C9:
                                BA:79:E7:10:51:BF:0B:A4:93:9C:B1:9D:4D:1A:8B:E2:
                                B1:74:B8:43:70:2F:57
    Signature Algorithm: sha384WithRSAEncryption
    Signature Value:
        95:7f:8f:8a:0f:2c:aa:c6:c9:b6:0c:fd:52:bd:a2:76:8f:bf:
        be:16:6d:78:10:84:02:51:dd:18:c7:db:65:84:e9:06:71:d7:
        9b:a1:b6:6f:f9:69:ec:c2:20:b4:7e:34:34:d4:c9:68:74:00:
        34:2d:bb:64:41:f4:c4:24:57:25:45:93:d3:13:63:e6:1f:d0:
        7b:3d:19:8e:52:94:7e:be:c7:08:c0:de:dd:f3:22:e5:6e:65:
        59:19:de:6f:51:30:99:b2:a7:17:e4:8d:49:34:e4:e6:62:5c:
        35:85:7a:91:64:3b:0b:9b:a3:44:44:5f:f9:96:d3:62:09:75:
        e3:93:f5:0e:71:5e:77:c5:52:69:3f:61:eb:55:77:a9:26:8b:
        38:13:ff:84:d6:1a:b5:b0:ad:2f:0f:be:fd:63:73:8a:0d:9c:
        c9:2b:af:2e:56:d9:6a:e8:21:3d:5f:f4:f1:bb:0f:cb:bb:96:
        d4:99:2f:89:22:aa:38:c5:4e:84:b7:2f:7f:51:72:0a:0f:49:
        0a:42:e6:1a:2c:3f:41:53:6a:70:06:70:dc:f1:7c:1e:97:24:
        ba:19:24:d9:09:27:27:73:02:c9:be:76:f7:6d:e8:82:03:ba:
        6f:9a:00:ad:47:16:85:92:5f:a3:27:a0:48:f7:d6:b9:51:e2:
        9d:5e:2c:64:1c:25:ae:e5:7e:fc:07:11:bb:e9:b3:3e:45:9f:
        e7:96:20:f3:64:24:84:29:7f:fc:71:33:22:3b:57:12:e5:80:
        e1:d5:39:12:32:a6:c3:21:0e:9f:28:f4:9a:f2:df:d8:d5:f6:
        8b:9d:51:4f:52:94:d2:83:cc:cf:3a:d1:8d:98:60:b2:16:e5:
        42:89:cf:a9:c4:0b:a2:06:cd:a2:12:e0:81:52:be:ba:45:c3:
        45:0b:9b:ee:a8:f0:53:21:ef:ff:1b:4c:e0:00:6b:97:1f:f0:
        c6:ce:d4:d3:5c:15:79:6f:f5:bb:12:4d:9b:b4:b1:56:20:40:
        a0:cc:6e:39:8d:01