atoka.io Review

 User-agent: *
Disallow: /public/it/azienda/-/
Disallow: /public/en/
Disallow: /it/try-atoka/
Disallow: /en/try-atoka/
Disallow: /it/login/
Disallow: /en/login/
Disallow: /login/
Disallow: /cerved/login/
Disallow: /pages/it/tos-inbiz/
Disallow: /pages/en/tos-inbiz/
Sitemap: https://atoka.io/sitemap.xml

HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Tue, 04 Nov 2025 22:21:56 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://atoka.io/
X-Cache: Redirect from cloudfront
Via: 1.1 e3d057b3e6efdd15e49b433f7704a6c8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: HIO52-P4
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: dQdflNTdQIFt5WRkRhVtnB_HzkVEtHWV5CAX3ICY5NVUZTt6qaZnCA==
Content-Security-Policy: object-src 'none'; frame-ancestors 'self'; report-to csp-report; report-uri https://csp-report-receiver.atoka.io/report/atoka-production/
X-Content-Type-Options: nosniff
Cache-Control: no-cache
Content-Security-Policy-Report-Only: form-action 'self'; report-to csp-report; report-uri https://csp-report-receiver.atoka.io/report/atoka-production/
Reporting-Endpoints: csp-report=https://csp-report-receiver.atoka.io/report/atoka-production/

HTTP/1.1 302 Found
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Date: Tue, 04 Nov 2025 22:21:57 GMT
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-XSS-Protection: 1; mode=block
Server: openresty
Location: /it/
Vary: Accept-Language, Cookie
x-sd-trace-id: fdc95bd9a6b83ef4f31a5981bbe8ef70
x-sd-trace-sampled: false
X-Content-Type-Options: nosniff
Referrer-Policy: same-origin
Referrer-Policy: strict-origin-when-cross-origin
Cross-Origin-Opener-Policy: same-origin-allow-popups
Set-Cookie: sessionid=570qo70hwnd9cdhewpju8x5h4q6g2l8d; expires=Tue, 18 Nov 2025 22:21:57 GMT; HttpOnly; Max-Age=1209600; Path=/; SameSite=Lax; Secure
X-Cache: Miss from cloudfront
Via: 1.1 7e52f07d480e9ef9f97c00d438c0189c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LAX53-P3
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: SMSF6ksj58BbuYCvj8luejS2nPHFdUwS2djPh6lLaiznn9RMsh01Xw==
Content-Security-Policy: object-src 'none'; frame-ancestors 'self'; report-to csp-report; report-uri https://csp-report-receiver.atoka.io/report/atoka-production/
Cache-Control: no-cache
Content-Security-Policy-Report-Only: form-action 'self'; report-to csp-report; report-uri https://csp-report-receiver.atoka.io/report/atoka-production/
Reporting-Endpoints: csp-report=https://csp-report-receiver.atoka.io/report/atoka-production/

HTTP/1.1 302 Found
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Date: Tue, 04 Nov 2025 22:21:57 GMT
X-XSS-Protection: 1; mode=block
Server: openresty
Location: https://atoka.io/pages/it/
X-Frame-Options: DENY
Content-Security-Policy: report-to csp-report; object-src 'none'; frame-ancestors 'self'; report-uri https://csp-report-receiver.atoka.io/report/atoka-production/
Content-Security-Policy-Report-Only: frame-src 'self' form.typeform.com *.iubenda.com; style-src 'self' *.iubenda.com fonts.gstatic.com fonts.googleapis.com *.fontawesome.com atoka.io 'unsafe-inline'; report-to csp-report; font-src 'self' fonts.gstatic.com fonts.googleapis.com *.fontawesome.com data:; connect-src 'self' api.mixpanel.com api.amplitude.com *.iubenda.com *.ingest.sentry.io *.fontawesome.com *.atoka.io cervedapps.piwik.pro; default-src 'self'; img-src 'self' media-atoka-io.s3-eu-west-1.amazonaws.com atoka.io api.mapbox.com *.iubenda.com; form-action 'self'; script-src 'self' strict-dynamic cdn.mxpnl.com *.iubenda.com sentry.io atoka.io tr.atoka.io *.fontawesome.com cdnjs.cloudflare.com cervedapps.containers.piwik.pro www.googletagmanager.com www.google.com maxcdn.bootstrapcdn.com player.vimeo.com oss.maxcdn.com cdn.jsdelivr.net 'unsafe-eval'; report-uri https://csp-report-receiver.atoka.io/report/atoka-production/
Content-Language: it
Vary: Cookie
x-sd-trace-id: 7a5cde1576342f336d9fc8bbee5e3bab
x-sd-trace-sampled: false
X-Content-Type-Options: nosniff
Referrer-Policy: same-origin
Referrer-Policy: strict-origin-when-cross-origin
Cross-Origin-Opener-Policy: same-origin-allow-popups
Set-Cookie: sessionid=3ydg8gew0bgl8tl7zqnsv3bncy3ygz05; expires=Tue, 18 Nov 2025 22:21:57 GMT; HttpOnly; Max-Age=1209600; Path=/; SameSite=Lax; Secure
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Cache: Miss from cloudfront
Via: 1.1 7e52f07d480e9ef9f97c00d438c0189c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LAX53-P3
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: mUlrRngYTZ6zOjY2w5xFd6XMQM5BYCTPNJyrsazduZbO6gWrCEuUOQ==
Cache-Control: no-cache
Reporting-Endpoints: csp-report=https://csp-report-receiver.atoka.io/report/atoka-production/

HTTP/1.1 200 OK
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
x-amz-meta-md5chksum: 77daf7308c354550903dcb7660913558
Last-Modified: Tue, 07 Oct 2025 06:17:52 GMT
x-amz-version-id: mUYooP7XvWPQ9wKRtRm7XCTRlXoCEt0D
Server: AmazonS3
Content-Encoding: gzip
Date: Tue, 04 Nov 2025 22:21:58 GMT
ETag: W/"77daf7308c354550903dcb7660913558"
Vary: accept-encoding
X-Cache: RefreshHit from cloudfront
Via: 1.1 7e52f07d480e9ef9f97c00d438c0189c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LAX53-P3
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: -wjs6m43Vsima2pPYmwlE00oU6be0vO5kfb7GlOM9XJwdWWuNmVB_A==
Content-Security-Policy: object-src 'none'; frame-ancestors 'self'; report-to csp-report; report-uri https://csp-report-receiver.atoka.io/report/atoka-production/
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
Cache-Control: no-cache
Content-Security-Policy-Report-Only: form-action 'self'; report-to csp-report; report-uri https://csp-report-receiver.atoka.io/report/atoka-production/
Reporting-Endpoints: csp-report=https://csp-report-receiver.atoka.io/report/atoka-production/