### API /api/health (GET) HTTP/1.1 200 OK Date: Sat, 10 Oct 2026 15:44:55 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive access-control-allow-credentials: true content-security-policy: default-src 'none'; frame-ancestors 'none' cross-origin-resource-policy: same-site etag: W/"58-PTAoqxIVuEKF87g1KUuzRsey5aM" referrer-policy: no-referrer rndr-id: 83fa2965-cdbb-468f Server: cloudflare strict-transport-security: max-age=31536000; includeSubDomains vary: Origin vary: Accept-Encoding x-content-type-options: nosniff x-frame-options: DENY x-render-origin-server: Render cf-cache-status: DYNAMIC CF-RAY: a486bfc69caab864-BOG alt-svc: h3=":443"; ma=86400 ### API ruta inexistente HTTP/1.1 404 Not Found Date: Sat, 10 Oct 2026 15:44:55 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive access-control-allow-credentials: true content-security-policy: default-src 'none'; frame-ancestors 'none' cross-origin-resource-policy: same-site etag: W/"53-7Wm+I2hl1Lb9q3qL4o6BmOIN/qw" referrer-policy: no-referrer rndr-id: 85198c9a-ed31-4d2e Server: cloudflare strict-transport-security: max-age=31536000; includeSubDomains vary: Origin vary: Accept-Encoding x-content-type-options: nosniff x-frame-options: DENY x-render-origin-server: Render cf-cache-status: DYNAMIC CF-RAY: a486bfc9aa8e5408-BOG alt-svc: h3=":443"; ma=86400 {"message":"Cannot GET /api/no-existe-trl-qa","error":"Not Found","statusCode":404} ### API raiz HTTP/1.1 404 Not Found Date: Sat, 10 Oct 2026 15:44:55 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive access-control-allow-credentials: true content-security-policy: default-src 'none'; frame-ancestors 'none' cross-origin-resource-policy: same-site etag: W/"3f-BunLb98SCK6azHy0RO08GDnFBek" referrer-policy: no-referrer rndr-id: f44a0358-ef80-4b6f Server: cloudflare strict-transport-security: max-age=31536000; includeSubDomains vary: Origin vary: Accept-Encoding x-content-type-options: nosniff x-frame-options: DENY x-render-origin-server: Render cf-cache-status: DYNAMIC CF-RAY: a486bfcb9957b70c-BOG alt-svc: h3=":443"; ma=86400 {"message":"Cannot GET /","error":"Not Found","statusCode":404} ### API JSON invalido a login HTTP/1.1 400 Bad Request Date: Sat, 10 Oct 2026 15:44:56 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive access-control-allow-credentials: true cf-cache-status: DYNAMIC content-security-policy: default-src 'none'; frame-ancestors 'none' cross-origin-resource-policy: same-site etag: W/"51-HUsSNIuzuQnqtSDvAjdQhVEhtD4" referrer-policy: no-referrer rndr-id: 15b42e70-860c-4573 Server: cloudflare strict-transport-security: max-age=31536000; includeSubDomains vary: Origin vary: Accept-Encoding x-content-type-options: nosniff x-frame-options: DENY x-render-origin-server: Render CF-RAY: a486bfceb935441c-BOG alt-svc: h3=":443"; ma=86400 {"message":"Unexpected end of JSON input","error":"Bad Request","statusCode":400} ### CORS preflight origen ajeno HTTP/1.1 204 No Content Date: Sat, 10 Oct 2026 15:44:56 GMT Connection: keep-alive access-control-allow-credentials: true access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE content-security-policy: default-src 'none'; frame-ancestors 'none' cross-origin-resource-policy: same-site referrer-policy: no-referrer rndr-id: 8a1302e2-8b36-41cc Server: cloudflare strict-transport-security: max-age=31536000; includeSubDomains vary: Origin, Access-Control-Request-Headers x-content-type-options: nosniff x-frame-options: DENY x-render-origin-server: Render cf-cache-status: DYNAMIC CF-RAY: a486bfd08e43f516-BOG alt-svc: h3=":443"; ma=86400 ### CORS GET origen ajeno HTTP/1.1 200 OK Date: Sat, 10 Oct 2026 15:44:56 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive access-control-allow-credentials: true content-security-policy: default-src 'none'; frame-ancestors 'none' cross-origin-resource-policy: same-site etag: W/"58-PTAoqxIVuEKF87g1KUuzRsey5aM" referrer-policy: no-referrer rndr-id: d8af46f6-7550-4ed7 Server: cloudflare strict-transport-security: max-age=31536000; includeSubDomains vary: Origin vary: Accept-Encoding x-content-type-options: nosniff x-frame-options: DENY x-render-origin-server: Render cf-cache-status: DYNAMIC CF-RAY: a486bfd26f64b864-BOG alt-svc: h3=":443"; ma=86400 ### CORS GET origen web HTTP/1.1 200 OK Date: Sat, 10 Oct 2026 15:44:57 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive access-control-allow-credentials: true access-control-allow-origin: https://www.proyectonara.com cf-cache-status: DYNAMIC content-security-policy: default-src 'none'; frame-ancestors 'none' cross-origin-resource-policy: same-site etag: W/"58-PTAoqxIVuEKF87g1KUuzRsey5aM" referrer-policy: no-referrer rndr-id: cb3295a9-b274-497c Server: cloudflare strict-transport-security: max-age=31536000; includeSubDomains vary: Origin vary: Accept-Encoding x-content-type-options: nosniff x-frame-options: DENY x-render-origin-server: Render CF-RAY: a486bfd47d6db6c3-BOG alt-svc: h3=":443"; ma=86400 ### WEB /ingreso HTTP/1.1 403 Forbidden Cache-Control: private, no-store, max-age=0 Content-Type: text/html; charset=utf-8 Server: Vercel X-Vercel-Challenge-Token: 2.1791647097.60.NTMyMzkzYTQ2MWY1YWUwMmJkZTVjZjU3YWEyMTk2ODk7NTdhZGEzNzM7NzZkZGEzYWZhZjNiNjc4NWE3YTMxZGQ0MDg5OWQxZTRkNzRhM2RjZjszOxkUR+syvftNW6abLU+jtLo2cMzlLD50TUMJ81F+w0Dp9uBkTWgzqjXkselipwJcAAXswTSpB345Z5dy+X9lPAnblQ==.4d5bcf250788733fcade6014582e6d48 X-Vercel-Id: iad1::1791647097-hGXZd8IVtTNbxwKiOcXs8R8mFCM6BBD4 X-Vercel-Mitigated: challenge Date: Sat, 10 Oct 2026 15:44:57 GMT Transfer-Encoding: chunked ### WEB /api/health via rewrite HTTP/1.1 403 Forbidden Cache-Control: private, no-store, max-age=0 Content-Type: text/html; charset=utf-8 Server: Vercel X-Vercel-Challenge-Token: 2.1791647098.60.NTMyMzkzYTQ2MWY1YWUwMmJkZTVjZjU3YWEyMTk2ODk7NzA2ZjZhNzQ7M2NlZWIzMjJmMWI0YmNmMDNjN2MxMzEyMGU5ZjFkZjVkNzRjOWE0ZDszO6pondQiguGf7bLpb9gEln/sTY3qTv1vNvO5/MlQzIHdVzEdCNDlfrasLuWVVMfZy+oErl4LdvQ8cwEuL9Hn9xbXuA==.cd2b7db3ecc71c63839d8f4083ebafc6 X-Vercel-Id: iad1::1791647098-ljUr2GQDn5ll7lKyXw0TDEg7RZ6qwF25 X-Vercel-Mitigated: challenge Date: Sat, 10 Oct 2026 15:44:58 GMT Transfer-Encoding: chunked Vercel Security Checkpoint

We're verifying your browser

### WEB ruta inexistente HTTP/1.1 403 Forbidden Cache-Control: private, no-store, max-age=0 Content-Type: text/html; charset=utf-8 Server: Vercel X-Vercel-Challenge-Token: 2.1791647098.60.NTMyMzkzYTQ2MWY1YWUwMmJkZTVjZjU3YWEyMTk2ODk7MDIwODBjYTE7NjI5YWEzZGE0ZGY3OTcwZjBhYTEzMzgzMjIxNjdhYWMzMDZjYzBhNjszO0nHFfeEw6yb0hFlTM0GbyMIurJtLRFMfu76qrf6PT53wDv3g1l+ZDnXA8sxmitP7kWkevhLwUCnCXh9A9NuTOgHkw==.5fc31b2d1084c7af28c4d586fe1a8262 X-Vercel-Id: iad1::1791647098-dvuKSyAQx6zQzNjcVQ9r1iAXh5RhNRGK X-Vercel-Mitigated: challenge Date: Sat, 10 Oct 2026 15:44:58 GMT Transfer-Encoding: chunked ### WEB http->https HTTP/1.0 308 Permanent Redirect Content-Type: text/plain Location: https://www.proyectonara.com/ingreso Refresh: 0;url=https://www.proyectonara.com/ingreso server: Vercel ### WEB .env / .git .env -> 403 .git/config -> 403 next.config.ts -> 403 _next/ -> 403 package.json -> 403