GraphQL introspection is enabled.
This could leak to data leak if not properly configured.
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa3
GraphQL introspection enabled at /graphql
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa374c2942e74c2942e74c2942e74c2942e74c2942e
GraphQL introspection enabled at /graphql Detected: Magento
Severity: medium
Fingerprint: c2db3a1c40d490dbf8cbe7e2df9b2641df9b2641df9b2641df9b2641df9b2641
GraphQL introspection enabled at /graphql/api Detected: Magento
Severity: medium
Fingerprint: c2db3a1c40d490dbf8cbe7e2f8cbe7e2f8cbe7e2f8cbe7e2f8cbe7e2f8cbe7e2
GraphQL introspection enabled at /graphql/api
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa383f6a399c5344afbc37818d171f4c5c69eaef610
GraphQL introspection enabled at /graphql Types: 653 (by kind: ENUM: 59, INPUT_OBJECT: 162, INTERFACE: 30, OBJECT: 397, SCALAR: 5) Operations: - Query: Query | fields: a3mMenus, a3mNodes, adyenPaymentMethods, adyenPaymentMethodsBalance, adyenPaymentStatus - Mutation: Mutation | fields: addBundleProductsToCart, addConfigurableProductsToCart, addDownloadableProductsToCart, addGiftRegistryRegistrants, addProductsToCart Directives: deprecated, include, oneOf, skip (total: 4)
Severity: medium
Fingerprint: c2db3a1c40d490dbf8cbe7e2935a3f80d60f31446c57d6468ef2dfafb35c81d7
GraphQL introspection enabled at /graphql/api Types: 653 (by kind: ENUM: 59, INPUT_OBJECT: 162, INTERFACE: 30, OBJECT: 397, SCALAR: 5) Operations: - Query: Query | fields: a3mMenus, a3mNodes, adyenPaymentMethods, adyenPaymentMethodsBalance, adyenPaymentStatus - Mutation: Mutation | fields: addBundleProductsToCart, addConfigurableProductsToCart, addDownloadableProductsToCart, addGiftRegistryRegistrants, addProductsToCart Directives: deprecated, include, oneOf, skip (total: 4)
Open service 23.50.55.43:443 · staging.grupposave.com
2026-01-23 16:52
HTTP/1.1 302 Moved Temporarily Content-Length: 0 x-debug-info: eyJyZXRyaWVzIjowfQ== traceresponse: 00-188d6a53d028fc5cd841343ff22471e4-af8d698d738ef1a2-01 Content-Type: text/html; charset=UTF-8 x-timer: S1769187137.824723,VS0,VE104 x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Pragma: no-cache x-platform-server: i-0d264a3ae2d65a244 x-platform-server: i-0d264a3ae2d65a244 Location: https://staging.grupposave.com/it_it/ Accept-Ranges: bytes nalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com https://rum.hlx.page *.sharethis.com https://www.google.com https://www.gstatic.com https://c.paypal.com https://songbirdstag.cardinalcommerce.com https://maps.google.com https://maps.googleapis.com chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com save.local *.save.local tsf.local vbs.local vce.local vrn.local aeroportoverona.it trevisoairport.it veneziaairport.it aeroportodibrescia.it grupposave.it *.aeroportoverona.it *.trevisoairport.it *.veneziaairport.it *.aeroportodibrescia.it *.grupposave.it integration-5ojmyuq-xk54vbr4g326g.eu-3.magentosite.cloud integration2-hohc4oi-xk54vbr4g326g.eu-3.magentosite.cloud static.addtoany.com connect.facebook.net *.addthis.com *.moatads.com *.addthisedge.com acsbapp.com *.acsbapp.com ecomm.sella.it ecomms2s.sella.it external.airport.ai *.cookiebot.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cash.app *.sharethis.com https://fonts.googleapis.com https://www.gstatic.com downloads.mailchimp.com *.fontawesome.com assets.braintreegateway.com save.local *.save.local tsf.local vbs.local vce.local vrn.local aeroportoverona.it trevisoairport.it veneziaairport.it aeroportodibrescia.it grupposave.it *.aeroportoverona.it *.trevisoairport.it *.veneziaairport.it *.aeroportodibrescia.it *.grupposave.it integration-5ojmyuq-xk54vbr4g326g.eu-3.magentosite.cloud integration2-hohc4oi-xk54vbr4g326g.eu-3.magentosite.cloud *.cloudflare.com external.airport.ai 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com save.local *.save.local tsf.local vbs.local vce.local vrn.local aeroportoverona.it trevisoairport.it veneziaairport.it aeroportodibrescia.it grupposave.it *.aeroportoverona.it *.trevisoairport.it *.veneziaairport.it *.aeroportodibrescia.it *.grupposave.it integration-5ojmyuq-xk54vbr4g326g.eu-3.magentosite.cloud integration2-hohc4oi-xk54vbr4g326g.eu-3.magentosite.cloud 'self' data: 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com * *.sharethis.com https://payments.sandbox.braintree-api.com api.sandbox.braintreegateway.com https://origin-analytics-sand.sandbox.braintree-api.com https://kg668dbov0.execute-api.us-east-1.amazonaws.com https://writer.cardinalcommerce.com https://vimeo.com https://maps.googleapis.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com api.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com save.local *.save.local tsf.local vbs.l
Open service 23.50.55.43:443 · staging.grupposave.com
2026-01-09 10:58
HTTP/1.1 302 Moved Temporarily Content-Length: 0 Location: https://staging.grupposave.com/it_it/ x-frame-options: SAMEORIGIN x-debug-info: eyJyZXRyaWVzIjowfQ== x-platform-server: i-01411953158d47ed2 x-platform-server: i-01411953158d47ed2 geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com https://rum.hlx.page *.sharethis.com https://www.google.com https://www.gstatic.com https://c.paypal.com https://songbirdstag.cardinalcommerce.com https://maps.google.com https://maps.googleapis.com chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com save.local *.save.local tsf.local vbs.local vce.local vrn.local aeroportoverona.it trevisoairport.it veneziaairport.it aeroportodibrescia.it grupposave.it *.aeroportoverona.it *.trevisoairport.it *.veneziaairport.it *.aeroportodibrescia.it *.grupposave.it integration-5ojmyuq-xk54vbr4g326g.eu-3.magentosite.cloud integration2-hohc4oi-xk54vbr4g326g.eu-3.magentosite.cloud static.addtoany.com connect.facebook.net *.addthis.com *.moatads.com *.addthisedge.com acsbapp.com *.acsbapp.com ecomm.sella.it ecomms2s.sella.it external.airport.ai *.cookiebot.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cash.app *.sharethis.com https://fonts.googleapis.com https://www.gstatic.com downloads.mailchimp.com *.fontawesome.com assets.braintreegateway.com save.local *.save.local tsf.local vbs.local vce.local vrn.local aeroportoverona.it trevisoairport.it veneziaairport.it aeroportodibrescia.it grupposave.it *.aeroportoverona.it *.trevisoairport.it *.veneziaairport.it *.aeroportodibrescia.it *.grupposave.it integration-5ojmyuq-xk54vbr4g326g.eu-3.magentosite.cloud integration2-hohc4oi-xk54vbr4g326g.eu-3.magentosite.cloud *.cloudflare.com external.airport.ai 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com save.local *.save.local tsf.local vbs.local vce.local vrn.local aeroportoverona.it trevisoairport.it veneziaairport.it aeroportodibrescia.it grupposave.it *.aeroportoverona.it *.trevisoairport.it *.veneziaairport.it *.aeroportodibrescia.it *.grupposave.it integration-5ojmyuq-xk54vbr4g326g.eu-3.magentosite.cloud integration2-hohc4oi-xk54vbr4g326g.eu-3.magentosite.cloud 'self' data: 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com * *.sharethis.com https://payments.sandbox.braintree-api.com api.sandbox.braintreegateway.com https://origin-analytics-sand.sandbox.braintree-api.com https://kg668dbov0.execute-api.us-east-1.amazonaws.com https://writer.cardinalcommerce.com https://vimeo.com https://maps.googleapis.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com api.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com save.local *.save.local tsf
Open service 23.50.55.50:443 · staging.grupposave.com
2026-01-05 13:42
HTTP/1.1 302 Moved Temporarily Content-Length: 0 x-timer: S1767620580.019737,VS0,VE79 Location: https://staging.grupposave.com/it_it/ Content-Type: text/html; charset=UTF-8 traceresponse: 00-1887d98d625075dfbd099fc88ca584f1-20c6897a1ff9fc51-01 Pragma: no-cache Accept-Ranges: bytes x-content-type-options: nosniff x-platform-server: i-024b4b7be994502ef x-platform-server: i-024b4b7be994502ef x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com https://rum.hlx.page *.sharethis.com https://www.google.com https://www.gstatic.com https://c.paypal.com https://songbirdstag.cardinalcommerce.com https://maps.google.com https://maps.googleapis.com chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com save.local *.save.local tsf.local vbs.local vce.local vrn.local aeroportoverona.it trevisoairport.it veneziaairport.it aeroportodibrescia.it grupposave.it *.aeroportoverona.it *.trevisoairport.it *.veneziaairport.it *.aeroportodibrescia.it *.grupposave.it integration-5ojmyuq-xk54vbr4g326g.eu-3.magentosite.cloud integration2-hohc4oi-xk54vbr4g326g.eu-3.magentosite.cloud static.addtoany.com connect.facebook.net *.addthis.com *.moatads.com *.addthisedge.com acsbapp.com *.acsbapp.com ecomm.sella.it ecomms2s.sella.it external.airport.ai *.cookiebot.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cash.app *.sharethis.com https://fonts.googleapis.com https://www.gstatic.com downloads.mailchimp.com *.fontawesome.com assets.braintreegateway.com save.local *.save.local tsf.local vbs.local vce.local vrn.local aeroportoverona.it trevisoairport.it veneziaairport.it aeroportodibrescia.it grupposave.it *.aeroportoverona.it *.trevisoairport.it *.veneziaairport.it *.aeroportodibrescia.it *.grupposave.it integration-5ojmyuq-xk54vbr4g326g.eu-3.magentosite.cloud integration2-hohc4oi-xk54vbr4g326g.eu-3.magentosite.cloud *.cloudflare.com external.airport.ai 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com save.local *.save.local tsf.local vbs.local vce.local vrn.local aeroportoverona.it trevisoairport.it veneziaairport.it aeroportodibrescia.it grupposave.it *.aeroportoverona.it *.trevisoairport.it *.veneziaairport.it *.aeroportodibrescia.it *.grupposave.it integration-5ojmyuq-xk54vbr4g326g.eu-3.magentosite.cloud integration2-hohc4oi-xk54vbr4g326g.eu-3.magentosite.cloud 'self' data: 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com * *.sharethis.com https://payments.sandbox.braintree-api.com api.sandbox.braintreegateway.com https://origin-analytics-sand.sandbox.braintree-api.com https://kg668dbov0.execute-api.us-east-1.amazonaws.com https://writer.cardinalcommerce.com https://vimeo.com https://maps.googleapis.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com api.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com save.local *.save.local tsf
Open service 23.50.55.43:80 · staging.grupposave.com
2026-01-05 13:42
HTTP/1.1 301 Moved Permanently Content-Length: 0 Location: https://staging.grupposave.com/ Cache-Control: max-age=0 Date: Mon, 05 Jan 2026 13:43:02 GMT Connection: close Server-Timing: cdn-cache; desc=HIT Server-Timing: edge; dur=1 X-Akamai-Staging: ESSL Server-Timing: ak_p; desc="1767620582618_389166887_12159920_9_1146_0_0_-";dur=1
Open service 23.50.55.43:443 · staging.grupposave.com
2026-01-05 13:42
HTTP/1.1 302 Moved Temporarily Content-Length: 0 x-timer: S1767620580.846738,VS0,VE75 Location: https://staging.grupposave.com/it_it/ Content-Type: text/html; charset=UTF-8 traceresponse: 00-1887d98d5806ad827fafd0c5ab38ba14-ef432350725e880a-01 Pragma: no-cache Accept-Ranges: bytes x-content-type-options: nosniff x-platform-server: i-01411953158d47ed2 x-platform-server: i-01411953158d47ed2 x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com https://rum.hlx.page *.sharethis.com https://www.google.com https://www.gstatic.com https://c.paypal.com https://songbirdstag.cardinalcommerce.com https://maps.google.com https://maps.googleapis.com chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com save.local *.save.local tsf.local vbs.local vce.local vrn.local aeroportoverona.it trevisoairport.it veneziaairport.it aeroportodibrescia.it grupposave.it *.aeroportoverona.it *.trevisoairport.it *.veneziaairport.it *.aeroportodibrescia.it *.grupposave.it integration-5ojmyuq-xk54vbr4g326g.eu-3.magentosite.cloud integration2-hohc4oi-xk54vbr4g326g.eu-3.magentosite.cloud static.addtoany.com connect.facebook.net *.addthis.com *.moatads.com *.addthisedge.com acsbapp.com *.acsbapp.com ecomm.sella.it ecomms2s.sella.it external.airport.ai *.cookiebot.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cash.app *.sharethis.com https://fonts.googleapis.com https://www.gstatic.com downloads.mailchimp.com *.fontawesome.com assets.braintreegateway.com save.local *.save.local tsf.local vbs.local vce.local vrn.local aeroportoverona.it trevisoairport.it veneziaairport.it aeroportodibrescia.it grupposave.it *.aeroportoverona.it *.trevisoairport.it *.veneziaairport.it *.aeroportodibrescia.it *.grupposave.it integration-5ojmyuq-xk54vbr4g326g.eu-3.magentosite.cloud integration2-hohc4oi-xk54vbr4g326g.eu-3.magentosite.cloud *.cloudflare.com external.airport.ai 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com save.local *.save.local tsf.local vbs.local vce.local vrn.local aeroportoverona.it trevisoairport.it veneziaairport.it aeroportodibrescia.it grupposave.it *.aeroportoverona.it *.trevisoairport.it *.veneziaairport.it *.aeroportodibrescia.it *.grupposave.it integration-5ojmyuq-xk54vbr4g326g.eu-3.magentosite.cloud integration2-hohc4oi-xk54vbr4g326g.eu-3.magentosite.cloud 'self' data: 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com * *.sharethis.com https://payments.sandbox.braintree-api.com api.sandbox.braintreegateway.com https://origin-analytics-sand.sandbox.braintree-api.com https://kg668dbov0.execute-api.us-east-1.amazonaws.com https://writer.cardinalcommerce.com https://vimeo.com https://maps.googleapis.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com api.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com save.local *.save.local tsf
Open service 2a02:26f0:3100::1732:372b:80 · staging.grupposave.com
2026-01-05 13:42
HTTP/1.1 301 Moved Permanently Content-Length: 0 Location: https://staging.grupposave.com/ Cache-Control: max-age=0 Date: Mon, 05 Jan 2026 13:43:02 GMT Connection: close Server-Timing: cdn-cache; desc=HIT Server-Timing: edge; dur=1 X-Akamai-Staging: ESSL Server-Timing: ak_p; desc="1767620582613_389166887_12159918_9_1160_0_0_-";dur=1
Open service 23.50.55.50:80 · staging.grupposave.com
2026-01-05 13:42
HTTP/1.1 301 Moved Permanently Content-Length: 0 Location: https://staging.grupposave.com/ Cache-Control: max-age=0 Date: Mon, 05 Jan 2026 13:43:02 GMT Connection: close Server-Timing: cdn-cache; desc=HIT Server-Timing: edge; dur=1 X-Akamai-Staging: ESSL Server-Timing: ak_p; desc="1767620582929_389166894_22222480_13_1504_80_0_-";dur=1
Open service 2a02:26f0:3100::1732:372b:443 · staging.grupposave.com
2026-01-05 13:42
HTTP/1.1 302 Moved Temporarily Content-Length: 0 x-timer: S1767620580.213555,VS0,VE67 Location: https://staging.grupposave.com/it_it/ Content-Type: text/html; charset=UTF-8 traceresponse: 00-1887d98d6de73d4d5c95b35bea553cc5-c3943732d31c45dc-01 Pragma: no-cache Accept-Ranges: bytes x-content-type-options: nosniff x-platform-server: i-024b4b7be994502ef x-platform-server: i-024b4b7be994502ef x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com https://rum.hlx.page *.sharethis.com https://www.google.com https://www.gstatic.com https://c.paypal.com https://songbirdstag.cardinalcommerce.com https://maps.google.com https://maps.googleapis.com chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com save.local *.save.local tsf.local vbs.local vce.local vrn.local aeroportoverona.it trevisoairport.it veneziaairport.it aeroportodibrescia.it grupposave.it *.aeroportoverona.it *.trevisoairport.it *.veneziaairport.it *.aeroportodibrescia.it *.grupposave.it integration-5ojmyuq-xk54vbr4g326g.eu-3.magentosite.cloud integration2-hohc4oi-xk54vbr4g326g.eu-3.magentosite.cloud static.addtoany.com connect.facebook.net *.addthis.com *.moatads.com *.addthisedge.com acsbapp.com *.acsbapp.com ecomm.sella.it ecomms2s.sella.it external.airport.ai *.cookiebot.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cash.app *.sharethis.com https://fonts.googleapis.com https://www.gstatic.com downloads.mailchimp.com *.fontawesome.com assets.braintreegateway.com save.local *.save.local tsf.local vbs.local vce.local vrn.local aeroportoverona.it trevisoairport.it veneziaairport.it aeroportodibrescia.it grupposave.it *.aeroportoverona.it *.trevisoairport.it *.veneziaairport.it *.aeroportodibrescia.it *.grupposave.it integration-5ojmyuq-xk54vbr4g326g.eu-3.magentosite.cloud integration2-hohc4oi-xk54vbr4g326g.eu-3.magentosite.cloud *.cloudflare.com external.airport.ai 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com save.local *.save.local tsf.local vbs.local vce.local vrn.local aeroportoverona.it trevisoairport.it veneziaairport.it aeroportodibrescia.it grupposave.it *.aeroportoverona.it *.trevisoairport.it *.veneziaairport.it *.aeroportodibrescia.it *.grupposave.it integration-5ojmyuq-xk54vbr4g326g.eu-3.magentosite.cloud integration2-hohc4oi-xk54vbr4g326g.eu-3.magentosite.cloud 'self' data: 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com * *.sharethis.com https://payments.sandbox.braintree-api.com api.sandbox.braintreegateway.com https://origin-analytics-sand.sandbox.braintree-api.com https://kg668dbov0.execute-api.us-east-1.amazonaws.com https://writer.cardinalcommerce.com https://vimeo.com https://maps.googleapis.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com api.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com save.local *.save.local tsf
Open service 2a02:26f0:3100::1732:3732:443 · staging.grupposave.com
2026-01-05 13:42
HTTP/1.1 302 Moved Temporarily Content-Length: 0 x-timer: S1767620581.542576,VS0,VE94 Location: https://staging.grupposave.com/it_it/ Content-Type: text/html; charset=UTF-8 traceresponse: 00-1887d98d818d40687cbde3bd4657f657-9cc66504c13bdc80-01 Pragma: no-cache Accept-Ranges: bytes x-content-type-options: nosniff x-platform-server: i-01411953158d47ed2 x-platform-server: i-01411953158d47ed2 x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com https://rum.hlx.page *.sharethis.com https://www.google.com https://www.gstatic.com https://c.paypal.com https://songbirdstag.cardinalcommerce.com https://maps.google.com https://maps.googleapis.com chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com save.local *.save.local tsf.local vbs.local vce.local vrn.local aeroportoverona.it trevisoairport.it veneziaairport.it aeroportodibrescia.it grupposave.it *.aeroportoverona.it *.trevisoairport.it *.veneziaairport.it *.aeroportodibrescia.it *.grupposave.it integration-5ojmyuq-xk54vbr4g326g.eu-3.magentosite.cloud integration2-hohc4oi-xk54vbr4g326g.eu-3.magentosite.cloud static.addtoany.com connect.facebook.net *.addthis.com *.moatads.com *.addthisedge.com acsbapp.com *.acsbapp.com ecomm.sella.it ecomms2s.sella.it external.airport.ai *.cookiebot.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cash.app *.sharethis.com https://fonts.googleapis.com https://www.gstatic.com downloads.mailchimp.com *.fontawesome.com assets.braintreegateway.com save.local *.save.local tsf.local vbs.local vce.local vrn.local aeroportoverona.it trevisoairport.it veneziaairport.it aeroportodibrescia.it grupposave.it *.aeroportoverona.it *.trevisoairport.it *.veneziaairport.it *.aeroportodibrescia.it *.grupposave.it integration-5ojmyuq-xk54vbr4g326g.eu-3.magentosite.cloud integration2-hohc4oi-xk54vbr4g326g.eu-3.magentosite.cloud *.cloudflare.com external.airport.ai 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com save.local *.save.local tsf.local vbs.local vce.local vrn.local aeroportoverona.it trevisoairport.it veneziaairport.it aeroportodibrescia.it grupposave.it *.aeroportoverona.it *.trevisoairport.it *.veneziaairport.it *.aeroportodibrescia.it *.grupposave.it integration-5ojmyuq-xk54vbr4g326g.eu-3.magentosite.cloud integration2-hohc4oi-xk54vbr4g326g.eu-3.magentosite.cloud 'self' data: 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com * *.sharethis.com https://payments.sandbox.braintree-api.com api.sandbox.braintreegateway.com https://origin-analytics-sand.sandbox.braintree-api.com https://kg668dbov0.execute-api.us-east-1.amazonaws.com https://writer.cardinalcommerce.com https://vimeo.com https://maps.googleapis.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com api.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com save.local *.save.local tsf
Open service 2a02:26f0:3100::1732:3732:80 · staging.grupposave.com
2026-01-05 13:42
HTTP/1.1 301 Moved Permanently Content-Length: 0 Location: https://staging.grupposave.com/ Cache-Control: max-age=0 Date: Mon, 05 Jan 2026 13:43:02 GMT Connection: close Server-Timing: cdn-cache; desc=HIT Server-Timing: edge; dur=1 X-Akamai-Staging: ESSL Server-Timing: ak_p; desc="1767620582436_389166894_22222445_17_1644_12_0_-";dur=1
Open service 23.50.55.43:443 · staging.grupposave.com
2026-01-02 18:50
HTTP/1.1 302 Moved Temporarily Content-Length: 0 x-timer: S1767379829.375541,VS0,VE75 Location: https://staging.grupposave.com/it_it/ Content-Type: text/html; charset=UTF-8 traceresponse: 00-1886fe97416cfee281b0366d64e065b4-bf93247fcdd2a44e-01 Pragma: no-cache Accept-Ranges: bytes x-content-type-options: nosniff x-platform-server: i-01411953158d47ed2 x-platform-server: i-01411953158d47ed2 x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com https://rum.hlx.page *.sharethis.com https://www.google.com https://www.gstatic.com https://c.paypal.com https://songbirdstag.cardinalcommerce.com https://maps.google.com https://maps.googleapis.com chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com save.local *.save.local tsf.local vbs.local vce.local vrn.local aeroportoverona.it trevisoairport.it veneziaairport.it aeroportodibrescia.it grupposave.it *.aeroportoverona.it *.trevisoairport.it *.veneziaairport.it *.aeroportodibrescia.it *.grupposave.it integration-5ojmyuq-xk54vbr4g326g.eu-3.magentosite.cloud integration2-hohc4oi-xk54vbr4g326g.eu-3.magentosite.cloud static.addtoany.com connect.facebook.net *.addthis.com *.moatads.com *.addthisedge.com acsbapp.com *.acsbapp.com ecomm.sella.it ecomms2s.sella.it external.airport.ai *.cookiebot.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cash.app *.sharethis.com https://fonts.googleapis.com https://www.gstatic.com downloads.mailchimp.com *.fontawesome.com assets.braintreegateway.com save.local *.save.local tsf.local vbs.local vce.local vrn.local aeroportoverona.it trevisoairport.it veneziaairport.it aeroportodibrescia.it grupposave.it *.aeroportoverona.it *.trevisoairport.it *.veneziaairport.it *.aeroportodibrescia.it *.grupposave.it integration-5ojmyuq-xk54vbr4g326g.eu-3.magentosite.cloud integration2-hohc4oi-xk54vbr4g326g.eu-3.magentosite.cloud *.cloudflare.com external.airport.ai 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com save.local *.save.local tsf.local vbs.local vce.local vrn.local aeroportoverona.it trevisoairport.it veneziaairport.it aeroportodibrescia.it grupposave.it *.aeroportoverona.it *.trevisoairport.it *.veneziaairport.it *.aeroportodibrescia.it *.grupposave.it integration-5ojmyuq-xk54vbr4g326g.eu-3.magentosite.cloud integration2-hohc4oi-xk54vbr4g326g.eu-3.magentosite.cloud 'self' data: 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com * *.sharethis.com https://payments.sandbox.braintree-api.com api.sandbox.braintreegateway.com https://origin-analytics-sand.sandbox.braintree-api.com https://kg668dbov0.execute-api.us-east-1.amazonaws.com https://writer.cardinalcommerce.com https://vimeo.com https://maps.googleapis.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com api.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com save.local *.save.local tsf
Open service 23.50.55.43:443 · staging.grupposave.com
2025-12-22 15:04
HTTP/1.1 302 Moved Temporarily Content-Length: 0 x-timer: S1766415873.383397,VS0,VE79 Location: https://staging.grupposave.com/it_it/ Content-Type: text/html; charset=UTF-8 traceresponse: 00-188391e0c2ff5f6ff313a40e525b82cb-0690405a2667a05e-01 Pragma: no-cache Accept-Ranges: bytes x-content-type-options: nosniff x-platform-server: i-024b4b7be994502ef x-platform-server: i-024b4b7be994502ef x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com https://rum.hlx.page *.sharethis.com https://www.google.com https://www.gstatic.com https://c.paypal.com https://songbirdstag.cardinalcommerce.com https://maps.google.com https://maps.googleapis.com chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com save.local *.save.local tsf.local vbs.local vce.local vrn.local aeroportoverona.it trevisoairport.it veneziaairport.it aeroportodibrescia.it grupposave.it *.aeroportoverona.it *.trevisoairport.it *.veneziaairport.it *.aeroportodibrescia.it *.grupposave.it integration-5ojmyuq-xk54vbr4g326g.eu-3.magentosite.cloud integration2-hohc4oi-xk54vbr4g326g.eu-3.magentosite.cloud static.addtoany.com connect.facebook.net *.addthis.com *.moatads.com *.addthisedge.com acsbapp.com *.acsbapp.com ecomm.sella.it ecomms2s.sella.it external.airport.ai *.cookiebot.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cash.app *.sharethis.com https://fonts.googleapis.com https://www.gstatic.com downloads.mailchimp.com *.fontawesome.com assets.braintreegateway.com save.local *.save.local tsf.local vbs.local vce.local vrn.local aeroportoverona.it trevisoairport.it veneziaairport.it aeroportodibrescia.it grupposave.it *.aeroportoverona.it *.trevisoairport.it *.veneziaairport.it *.aeroportodibrescia.it *.grupposave.it integration-5ojmyuq-xk54vbr4g326g.eu-3.magentosite.cloud integration2-hohc4oi-xk54vbr4g326g.eu-3.magentosite.cloud *.cloudflare.com external.airport.ai 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com save.local *.save.local tsf.local vbs.local vce.local vrn.local aeroportoverona.it trevisoairport.it veneziaairport.it aeroportodibrescia.it grupposave.it *.aeroportoverona.it *.trevisoairport.it *.veneziaairport.it *.aeroportodibrescia.it *.grupposave.it integration-5ojmyuq-xk54vbr4g326g.eu-3.magentosite.cloud integration2-hohc4oi-xk54vbr4g326g.eu-3.magentosite.cloud 'self' data: 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com * *.sharethis.com https://payments.sandbox.braintree-api.com api.sandbox.braintreegateway.com https://origin-analytics-sand.sandbox.braintree-api.com https://kg668dbov0.execute-api.us-east-1.amazonaws.com https://writer.cardinalcommerce.com https://vimeo.com https://maps.googleapis.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com api.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com save.local *.save.local tsf