Lumen VDP BugCrowd

businessreferrals.lumen.com


Endpoints (2 of 2)

Page 1 of 1

Path
Port
Status Code
Content-Length
Title
Resp Headers
/
443
302
0
None

Location: https://businessreferrals.lumen.com/zones/404_page?extole_source=direct&promotable_code=blank!&extole_labels=refer-a-friend

Content-Type: application/octet-stream

/
80
301
0
None

Location: https://businessreferrals.lumen.com/

  • Path: /
  • Port: 443
  • Status Code: 302
  • Title: None
  • P3p: CP="Please see our privacy policy"

    Date: Mon, 17 Jun 2024 23:06:57 GMT

    Vary: Origin, Accept-Encoding

    Server: Extole

    Location: https://businessreferrals.lumen.com/zones/404_page?extole_source=direct&promotable_code=blank!&extole_labels=refer-a-friend

    Set-Cookie: xtl_bid=7381612619956023888;Version=1;Domain=businessreferrals.lumen.com;Path=/;Max-Age=31536000;Secure;HttpOnly;Expires=Tue, 17 Jun 2025 23:06:57 GMT;SameSite=None, access_token=AJ8SFT9KMHJG3K8JBKS1MA1U83;Version=1;Domain=businessreferrals.lumen.com;Path=/;Max-Age=31536000;Secure;HttpOnly;Expires=Tue, 17 Jun 2025 23:06:57 GMT;SameSite=None

    Content-Type: application/octet-stream

    X-Extole-Token: AJ8SFT9KMHJG3K8JBKS1MA1U83

    X-Frame-Options: ALLOW-FROM https://*.extole.com

    Content-Security-Policy: frame-ancestors https://*.extole.com

    Strict-Transport-Security: max-age=31536000; includeSubDomains

    Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authentication,Authorization,X-CSRF-TOKEN,X-NONCE

    Access-Control-Allow-Methods: GET, PUT, POST, DELETE, OPTIONS

    Access-Control-Expose-Headers: X-Extole-Token

    Access-Control-Allow-Credentials: true

  • First snapshot: 1 year, 2 months ago
  • Latest snapshot: 1 year, 2 months ago
  • Path: /
  • Port: 80
  • Status Code: 301
  • Title: None
  • P3p: CP="Please see our privacy policy"

    Date: Mon, 17 Jun 2024 23:06:57 GMT

    Vary: Origin

    Server: Extole

    Location: https://businessreferrals.lumen.com/

    Content-Length: 0

    Strict-Transport-Security: max-age=31536000; includeSubDomains

    Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authentication,Authorization,X-CSRF-TOKEN,X-NONCE

    Access-Control-Allow-Methods: GET, PUT, POST, DELETE, OPTIONS

    Access-Control-Expose-Headers: X-Extole-Token

    Access-Control-Allow-Credentials: true

  • First snapshot: 1 year, 2 months ago
  • Latest snapshot: 1 year, 2 months ago

Page 1 of 1