xtrf.eu Review

 N/A

HTTP/1.1 301 
date: Fri, 06 Dec 2024 23:29:50 GMT
content-length: 0
location: https://xtrf.eu/
x-cdn-cache-status: EXPIRED
x-via: NRT1

HTTP/1.1 301 
date: Fri, 06 Dec 2024 23:29:50 GMT
content-type: text/html; charset=UTF-8
transfer-encoding: chunked
cache-control: max-age=3600
server: Apache
x-powered-by: PHP/7.4.33
x-redirect-by: redirection
x-provided-by: StackCDN
x-dns-prefetch-control: off
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
location: https://xtm.cloud/xtrf/
access-control-allow-origin: *
x-origin-cache-status: HIT
x-cdn-cache-status: EXPIRED
x-via: NRT1

HTTP/1.1 200 OK
Date: Fri, 06 Dec 2024 23:29:52 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000
X-Frame-Options: SAMEORIGIN
Vary: Accept-Encoding,Cookie
Upgrade: h2
Connection: Upgrade, Keep-Alive
Accept-Ranges: bytes
X-Mod-Pagespeed: 1.13.35.2-0
Cache-Control: max-age=0, no-cache
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Referrer-Policy: no-referrer-when-downgrade
Content-Security-Policy: base-uri 'self'; report-to incidents@xtm.cloud; frame-src 'self' *.typeform.com *.hubspot.com *.hsforms.com *.vimeo.com *.xtm.cloud *.google.com *.demoboost.com *.pendo.io *.googletagmanager.com *.doubleclick.net *.youtube.com *.youtube-nocookie.com *.hs-sites.com; connect-src 'self' api.hubapi.com *.cookielaw.org *.onetrust.com *.fontawesome.com *.hscollectedforms.net *.hsforms.com *.vimeo.com vimeo.com *.hubspot.com *.eventbrite.com *.demoboost.com  *.pendo.io *.google.com *.doubleclick.net *.g2crowd.com aplo-evnt.com *.linkedin.com *.hotjar.com *.hotjar.io *.adnxs.com *.6sc.co *.6sense.com *.api.irisagent.com *.facebook.com *.convertexperiments.com 'self' api.hubapi.com *.cookielaw.org *.onetrust.com *.fontawesome.com *.hscollectedforms.net *.hsforms.com *.vimeo.com vimeo.com *.hubspot.com *.eventbrite.com *.demoboost.com  *.pendo.io *.google.com *.doubleclick.net *.g2crowd.com aplo-evnt.com *.linkedin.com *.hotjar.com *.hotjar.io *.adnxs.com *.6sc.co *.6sense.com *.api.irisagent.com *.facebook.com *.convertexperiments.com wss://ws.hotjar.com/;;; font-src 'self' 'unsafe-inline' fonts.gstatic.com ka-p.fontawesome.com data:;; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.jquery.com *.g2crowd.com *.cookielaw.org *.vimeocdn.com *.hs-scripts.com *.hs-analytics.net *.hsadspixel.net *.hs-banner.com *.hscollectedforms.net *.googletagmanager.com api.hubapi.com *.hsappstatic.net *.jsdelivr.net *.typeform.com *.fontawesome.com *.licdn.com *.google-analytics.com *.facebook.com *.facebook.net googleads.g.doubleclick.net *.usemessages.com ws.zoominfo.com bat.bing.com *.hotjar.com *.gstatic.com *.google.com *.hsforms.net *.6sc.co *.eventbrite.com *.onetrust.com *.xtm.cloud *.demoboost.com  *.pendo.io *.hubspot.com *.apollo.io *.api.irisagent.com unpkg.com *.convertexperiments.com;; style-src 'self' 'unsafe-inline' 'unsafe-eval' *.typeform.com *.googleapis.com *.fontawesome.com;; img-src 'self' 'unsafe-inline' data: *.cookielaw.org *.vimeocdn.com *.hubspot.com *.gravatar.com *.typeform.com *.bing.com *.hsforms.com *.google.com *.google.pl *.linkedin.com *.facebook.com b.6sc.co *.googletagmanager.com *.doubleclick.net  *.pendo.io *.google.com.ua *.googleapis.com *.api.irisagent.com *.w.org yoast.com yoa.st *.hs-sites.com *.hsappstatic.net; media-src 'self'; object-src 'unsafe-eval'; style-src-elem 'self' 'unsafe-inline' 'unsafe-eval' *.typeform.com *.googleapis.com *.fontawesome.com;; worker-src 'self' blob:
X-Permitted-Cross-Domain-Policies: none
X-Powered-By: W3 Total Cache/2.8.0
Pragma: public
Content-Length: 23901
Keep-Alive: timeout=15, max=100
Content-Type: text/html; charset=UTF-8
Content-Encoding: gzip