This page isn’t working right now
2upra.com sent an invalid response.
ERR_INVALID_REDIRECT

URL de la solicitud:
https://2upra.com/
Directiva de sitio de referencia:
strict-origin-when-cross-origin
:authority:
2upra.com
:method:
GET
:path:
/
:scheme:
https
accept:
text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
accept-encoding:
gzip, deflate, br, zstd
accept-language:
es-419,es;q=0.9,es-ES;q=0.8,en;q=0.7,en-GB;q=0.6,en-US;q=0.5
cache-control:
no-cache
cookie:
__stripe_mid=c0aa4eee-be49-4ad8-ad88-560b5d4d4d93154739; cf_clearance=Ww1mX4_V71CSkedsIYzu3d4jiUh9oJz881X1wNWDmik-1725422020-1.2.1.1-n.cybmsWMqEgsMe2MzMZFy.Uoe5eCLOcaIkLCq2D1iyd9r3Z6n.Ww_fwsjlAeqwtfAti47Lh3b1AKO6BRPnv.3zSPmIt05MKsy7wGJIOlXZ1JOq7SL.piENlO2qFckZDmKEY47guSqHKPPNw9sHa324fRQMizVqIcmGYLujk1ySNSpwR7qRHoPYSpcssgb1pKBMYP8RwubPrhsGep0vwauQscV7omHoVxStaa9NFPOrRT7x8u5eX2B80R2jdNoIwch6PeGiiK8.HaNrs7VEvrZ3ajneEVLyv1IchlSayu8tlhrA4XzpLfUVKlw60bWJ.O2iYaSvnV3zR6_0XcdiLfYPKLwBDk2botvyt_Fc5XcBL.oIPMoGt0H4PFrKh9_ZBgcZClISSMJsZxkuD9Y3mQw; wp-settings-time-1=1729726148; wp-settings-1=libraryContent%3Dbrowse%26imgsize%3Dfull%26editor%3Dhtml%26posts_list_mode%3Dlist%26instrumento_tab%3Dpop; tk_ai=hee6PULPpYFMDphJrqmaw28e; wordpress_logged_in_171212ad992468e5f38a03c9cec52973=1ndoryu%7C1730855430%7CT2pzZ31qQ9puhj8ypIjI7JaWBQfsIUIrhu3dIaJ0YTx%7C765800e6813cbeb55f8aa09a7114b2ba874c6e0fac79f2f5559b1d51482b213d; __stripe_sid=3a9e9fbf-f03a-406a-ad84-1e3f1334cafd4b12d6
dnt:
1
pragma:
no-cache
priority:
u=0, i
sec-ch-ua:
"Chromium";v="130", "Microsoft Edge";v="130", "Not?A_Brand";v="99"
sec-ch-ua-arch:
"x86"
sec-ch-ua-bitness:
"64"
sec-ch-ua-full-version:
"130.0.2849.56"
sec-ch-ua-full-version-list:
"Chromium";v="130.0.6723.70", "Microsoft Edge";v="130.0.2849.56", "Not?A_Brand";v="99.0.0.0"
sec-ch-ua-mobile:
?0
sec-ch-ua-model:
""
sec-ch-ua-platform:
"Windows"
sec-ch-ua-platform-version:
"10.0.0"
sec-fetch-dest:
document
sec-fetch-mode:
navigate
sec-fetch-site:
none
sec-fetch-user:
?1
upgrade-insecure-requests:
1
user-agent:
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 Edg/130.0.0.0

es mi pagina web pero carga desde modo incognito 

tal vez un mal ajuste en nginx pero no se donde debo buscar 

te muestro un archivo

user www-data;
worker_processes auto;
pid /run/nginx.pid;
include /etc/nginx/modules-enabled/*.conf;

events {
    worker_connections 2048;
    # multi_accept on;
}

http {

    map $http_referer $allow {
        default 0;
        "~^https?://([^/]+\.)?2upra\.com" 1;
    }

    # Basic Settings
    client_max_body_size 64M;
    sendfile on;
    tcp_nopush on;
    tcp_nodelay on;
    keepalive_timeout 65;
    types_hash_max_size 2048;
    server_tokens off;
    # server_names_hash_bucket_size 64;
    # server_name_in_redirect off;
    include /etc/nginx/mime.types;
    default_type application/octet-stream;

    # SSL Settings
    ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3; # Dropping SSLv3, ref: POODLE
    ssl_prefer_server_ciphers off;


    # Logging Settings
    access_log /var/log/nginx/access.log;
    error_log /var/log/nginx/error.log;


    # Gzip Settings

    gzip on;
    gzip_comp_level 4;
    gzip_min_length 256;
    gzip_types
    text/css
    text/javascript
    text/xml
    text/plain
    text/x-component
    application/javascript
    application/x-javascript
    application/json
    application/xml
    application/rss+xml
    application/atom+xml
    font/truetype
    font/opentype
    application/vnd.ms-fontobject
    image/svg+xml
    audio/mpeg;

    fastcgi_buffers 16 32k;
    fastcgi_buffer_size 64k;
    fastcgi_connect_timeout 300;
    fastcgi_send_timeout 300;
    fastcgi_read_timeout 300;
    fastcgi_cache_path /tmp/nginx-cache levels=1:2
    keys_zone=WORDPRESS:256m
    inactive=120m
    max_size=2g;
    fastcgi_cache_key "$scheme$request_method$host$request_uri";
    fastcgi_cache_use_stale error timeout invalid_header http_500 http_503;
    fastcgi_cache_valid 200 301 302 120m;
    client_body_buffer_size 128k;
    proxy_buffer_size 128k;
    proxy_buffers 4 256k;
    proxy_busy_buffers_size 256k;

    # Virtual Host Configs
    include /etc/nginx/conf.d/*.conf;
    include /etc/nginx/sites-enabled/*;
}

otro archivo

server {
    server_name 2upra.com www.2upra.com;

    root /var/www/wordpress;
    index index.php index.html index.htm;

    add_header Cache-Control "public, max-age=31536000";
    add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" always;
    add_header Vary "Accept-Encoding";
    add_header X-Cache-Status $upstream_cache_status;
    add_header Referrer-Policy "no-referrer-when-downgrade" always;
    add_header Permissions-Policy "geolocation=(), microphone=(), camera=()";
    add_header Content-Security-Policy "default-src 'self' https: data: blob: 'unsafe-inline' 'unsafe-eval'; img-src 'self' data: https: blob:; font-src 'self' data: https:; media-src 'self' blob: https:; object-src 'none';" always;
    add_header Alt-Svc 'h3=":443"; ma=86400';  # Indica la disponibilidad de HTTP/3 a los navegadores
    add_header X-Content-Type-Options nosniff;  
  
    http3 on;  # Habilita HTTP/3
    quic_retry on;

    listen 443 ssl;
    listen [::]:443 ssl;
    listen 443 quic reuseport;
    listen [::]:443 quic reuseport;

    # listen 443 ssl; # managed by Certbot
    ssl_certificate /etc/letsencrypt/live/2upra.com/fullchain.pem; # managed by Certbot
    ssl_certificate_key /etc/letsencrypt/live/2upra.com/privkey.pem; # managed by Certbot
    include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot

    if ($request_method !~ ^(GET|POST|HEAD)$ ) {
        return 444;
    }

    location ~* \.(jpg|jpeg|png|gif|ico|css|js)$ {
        expires 365d;
        add_header Cache-Control "public, no-transform";
    }

    if ($http_cookie ~* "wordpress_logged_in") {
        set $skip_cache 1;
    }

    location / {
        try_files $uri $uri/ /index.php?$args;
        add_header X-Cache-Status $upstream_cache_status;
        fastcgi_cache WORDPRESS;
        fastcgi_cache_bypass $skip_cache;
        fastcgi_no_cache $skip_cache;
    }
  
    #WP
    location /wp-content/uploads/audios/ {
        internal;
    }
    
    location /wp-content/uploads/ {
        valid_referers 2upra.com *.2upra.com;

        if ($invalid_referer) {
            return 403;
        }
        try_files $uri $uri/ =404;
    }  

    location ~* \.(mp3|wav)$ {
        deny all;
        return 403;
    }
    
   # Bloquear acceso directo a endpoints de audio
location ~ /wp-json/1/v1/2 {
    # Permitir OPTIONS para CORS
        if ($request_method = 'OPTIONS') {
            add_header 'Access-Control-Allow-Origin' 'https://2upra.com';
            add_header 'Access-Control-Allow-Methods' 'GET, OPTIONS';
            add_header 'Access-Control-Allow-Headers' 'X-Requested-With, X-WP-Nonce';
            add_header 'Access-Control-Max-Age' 1728000;
            add_header 'Content-Type' 'text/plain charset=UTF-8';
            add_header 'Content-Length' 0;
            return 204;
        }

        # Verificar que sea una petición AJAX y el referer correcto
        set $allow 1;

        if ($http_x_requested_with != "XMLHttpRequest") {
            set $allow 0;
        }

        if ($http_referer !~ ^https?://2upra\.com/) {
            set $allow 0;
        }

        # Si no cumple las condiciones, devolver 403
        if ($allow = 0) {
            return 403;
        }

        # Headers CORS para peticiones válidas
        add_header 'Access-Control-Allow-Origin' 'https://2upra.com' always;
        add_header 'Access-Control-Allow-Methods' 'GET, OPTIONS' always;
        add_header 'Access-Control-Allow-Headers' 'X-Requested-With, X-WP-Nonce' always;

        # Procesar la petición
        try_files $uri $uri/ /index.php?$args;
    }

    add_header X-Frame-Options "SAMEORIGIN";
    add_header X-Content-Type-Options "nosniff";
    add_header Referrer-Policy "strict-origin-when-cross-origin";

    location /wp-json/ {
        add_header 'Access-Control-Allow-Origin' 'https://2upra.com';
        add_header 'Access-Control-Allow-Methods' 'GET, POST, OPTIONS';
        add_header 'Access-Control-Allow-Headers' 'DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type';

        if ($request_method = 'OPTIONS') {
            add_header 'Access-Control-Allow-Origin' 'https://2upra.com';
            add_header 'Access-Control-Allow-Methods' 'GET, POST, OPTIONS';
            add_header 'Access-Control-Allow-Headers' 'DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type';
            add_header 'Access-Control-Max-Age' 1728000;
            add_header 'Content-Type' 'text/plain; charset=utf-8';
            add_header 'Content-Length' 0;
            return 204;
        }

        if ($http_referer !~ ^https?://2upra\.com) {
            return 403;
        }

        if ($request_method !~ ^(GET|POST|OPTIONS)$) {
           return 405;
        }


        if ($allow = 0) {
            return 403;
        }

        try_files $uri $uri/ /index.php?$args;
    }

    
       
    #FAVI
    location = /favicon.ico {
        alias /var/www/wordpress/wp-content/themes/2upra3v/assets/icons/favicon-256x256.png;
        access_log off;
        log_not_found off;
        expires 30d;
        add_header Cache-Control "public";
        add_header X-Content-Type-Options nosniff;
    }
 
    #WEB SOCKET
    location /ws {
        proxy_pass http://127.0.0.1:8082; # Redirige al servidor WebSocket
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "Upgrade";
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
    }

    #PHP
    location ~ \.php$ {
        include snippets/fastcgi-php.conf;
        fastcgi_pass unix:/var/run/php/php8.2-fpm.sock;
        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
        include fastcgi_params;
    }  
    
    # Bloquea el acceso a archivos .ht*
    location ~ /\.ht {
        deny all;
    }

    #ROBOT
    location = /robots.txt {
        allow all;
        log_not_found off;
        access_log off;
    }    
}

# Bloque HTTP (Puerto 80)
server {
    if ($host = www.2upra.com) {
        return 301 https://$host$request_uri;
    } # managed by Certbot

    if ($host = 2upra.com) {
        return 301 https://$host$request_uri;
    } # managed by Certbot

    deny 185.198.69.118;
    listen 80;
    server_name 2upra.com www.2upra.com;

    return 404; # managed by Certbot
}