| booking.hotelsparerhof.it/ |  135.125.240.140 | 302 Found | 0 B |
URL HTTP/1.1booking.hotelsparerhof.it/ IP135.125.240.140:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET / HTTP/1.1
Host: booking.hotelsparerhof.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
content-length: 0
location: https://booking.hotelsparerhof.it/
cache-control: no-cache
|
|
| r3.o.lencr.org/ |  23.33.119.27 | 200 OK | 503 B |
IP23.33.119.27:0 ASN#20940 Akamai International B.V.
Hashcfec3d7283a9b66d2be426ce54d210f3 808c1feb1ba918951d1928c1f6bfc0c253262774 1bad6c06aa3e88dcbc125fc98a6cb753eb2b18d2c8dd61da21d12209aeeda3f9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1BAD6C06AA3E88DCBC125FC98A6CB753EB2B18D2C8DD61DA21D12209AEEDA3F9"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14065
Expires: Mon, 05 Dec 2022 05:05:51 GMT
Date: Mon, 05 Dec 2022 01:11:26 GMT
Connection: keep-alive
|
|
| ocsp.digicert.com/ |  93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hashfb2c0697c6d9a96a5411dd2952947458 79e57f831ec396bbdaa5bfe9472a05e6c9fb31f4 3fd7edcc349ab4402f62e54a142be6b4cecf0e7ee3f431d3168bdf0643ba4d92
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4786
Cache-Control: max-age=124777
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 01:11:26 GMT
Etag: "638c76f5-1d7"
Expires: Tue, 06 Dec 2022 11:51:03 GMT
Last-Modified: Sun, 04 Dec 2022 10:31:17 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 471
|
|
| firefox.settings.services.mozilla.com/v1/ |  34.102.187.140 | 200 OK | 939 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/ IP34.102.187.140:0
File typeJSON data\012- , ASCII text, with very long lines (939), with no line terminators Hash30db107dcf4380cef05efea409c2e6a3 96e6a306fbc07299aba64e5c14e2bfca35872fa9 b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Type, Backoff, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Mon, 05 Dec 2022 00:18:26 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 3180
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.33.119.27 | 200 OK | 503 B |
IP23.33.119.27:0 ASN#20940 Akamai International B.V.
Hash1ea206ac3c440825741687351f8c6e4e 2f38dafd8c43dcce2411a0590bc5c02cd6286735 7d7232c8c91bcd18161ba2c9d23e3bff159604e058bd5b3fc1c7fcbcd03a7ee3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7D7232C8C91BCD18161BA2C9D23E3BFF159604E058BD5B3FC1C7FCBCD03A7EE3"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13832
Expires: Mon, 05 Dec 2022 05:01:58 GMT
Date: Mon, 05 Dec 2022 01:11:26 GMT
Connection: keep-alive
|
|
| content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain | 34.160.144.191 | 200 OK | 5.3 kB |
URL HTTP/2content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain IP34.160.144.191:0
File typePEM certificate\012- , ASCII text Hash9ebddc2b260d081ebbefee47c037cb28 492bad62a7ca6a74738921ef5ae6f0be5edebf39 74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: Tf2s3cYbGHM4y6zHPIb8SMlThTq6yL82/mrxUVKtU0JGoOCAV7P+/T806Cg8AC421B7Jqwv9OOY=
x-amz-request-id: BWM2593CGGHDWYGW
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 05 Dec 2022 00:47:46 GMT
age: 1420
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| contile.services.mozilla.com/v1/tiles | 34.117.237.239 | 200 OK | 12 B |
URL HTTP/2contile.services.mozilla.com/v1/tiles IP34.117.237.239:0
File typeJSON data\012- , ASCII text, with no line terminators Hash23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 05 Dec 2022 01:11:26 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US | 34.102.187.140 | 200 OK | 329 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US IP34.102.187.140:0
File typeJSON data\012- , ASCII text, with very long lines (329), with no line terminators Hash0333b0655111aa68de771adfcc4db243 63f295a144ac87a7c8e23417626724eeca68a7eb 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Last-Modified, Retry-After, Cache-Control, Content-Type, Pragma, Backoff, ETag, Expires, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Mon, 05 Dec 2022 01:08:58 GMT
cache-control: public,max-age=3600
age: 149
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hash31b129c94a90b1e695b21395cb54e378 a3cae46b48d469cc61ab0581303bcd5f5b654db9 fac3f681be358a20f78958dff10c89b7a91365c5114c81246c1bc34c1362ba1e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4775
Cache-Control: max-age=119699
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 01:11:27 GMT
Etag: "638c632b-1d7"
Expires: Tue, 06 Dec 2022 10:26:26 GMT
Last-Modified: Sun, 04 Dec 2022 09:06:51 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 471
|
|
| push.services.mozilla.com/ | 52.39.96.8 | 101 Switching Protocols | 0 B |
URL HTTP/1.1push.services.mozilla.com/ IP52.39.96.8:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: ZxlGfkTlAbDs4SVld3o9bw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 83PR0vOU7h3auMoqOL8NsmR3XLE=
|
|
| d2jtzd336hs8un.cloudfront.net/_next/static/media/bf-icons-extended.00ff8422.ttf | 54.230.245.158 | 200 OK | 94 kB |
URL HTTP/2d2jtzd336hs8un.cloudfront.net/_next/static/media/bf-icons-extended.00ff8422.ttf IP54.230.245.158:0
File typeTrueType Font data, 11 tables, 1st "OS/2", 14 names, Macintosh, type 1 string, icomoon \012- data Hash439b52438c772a69ba68cddd45b0ba56 acc851fc76bade985719ddd6b688e184f1096121 fd15c1d08eecfa3bebd1c8a1e28836de2f04036509f7ee65e1945cc0decd725d
GET /_next/static/media/bf-icons-extended.00ff8422.ttf HTTP/1.1
Host: d2jtzd336hs8un.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://booking.hotelsparerhof.it
Connection: keep-alive
Referer: https://d2jtzd336hs8un.cloudfront.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 93868
date: Tue, 15 Nov 2022 13:37:21 GMT
last-modified: Tue, 03 May 2022 12:24:17 GMT
etag: "62711ef1-16eac"
access-control-allow-origin: *
cache-control: public, max-age=31536000, immutable
accept-ranges: bytes
strict-transport-security: max-age=31536000
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: gyyzO8R3rOckTNe4jI6wNqntccu1gi3zLeL-uH7vuuqkLnml7k6q0g==
age: 1683247
X-Firefox-Spdy: h2
|
|
| d2jtzd336hs8un.cloudfront.net/static/themes/default/assets/fonts/icons.woff | 54.230.245.158 | 200 OK | 50 kB |
URL HTTP/2d2jtzd336hs8un.cloudfront.net/static/themes/default/assets/fonts/icons.woff IP54.230.245.158:0
File typeWeb Open Font Format, TrueType, length 50524, version 1.0\012- data Hashfaff92145777a3cbaf8e7367b4807987 9c293328f39dc54bd654d273d0cc5af0d11905c6 95b6a4840f8711ecab427bc236eb86098db7e5c782bafb139c8c30805aa5ffe1
GET /static/themes/default/assets/fonts/icons.woff HTTP/1.1
Host: d2jtzd336hs8un.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://booking.hotelsparerhof.it
Connection: keep-alive
Referer: https://d2jtzd336hs8un.cloudfront.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/font-woff
content-length: 50524
date: Sun, 04 Dec 2022 08:03:41 GMT
last-modified: Tue, 03 May 2022 12:24:30 GMT
etag: "62711efe-c55c"
access-control-allow-origin: *
accept-ranges: bytes
strict-transport-security: max-age=15768000
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: wn6exJCXRR3-wR084oHXp5pLmfKgSQ6kOAIyVQJI1R8YfMNh3PcAyQ==
age: 61667
X-Firefox-Spdy: h2
|
|
| d2jtzd336hs8un.cloudfront.net/_next/static/media/bf-icons.3014e895.ttf | 54.230.245.158 | 200 OK | 156 kB |
URL HTTP/2d2jtzd336hs8un.cloudfront.net/_next/static/media/bf-icons.3014e895.ttf IP54.230.245.158:0
File typeTrueType Font data, 11 tables, 1st "OS/2", 14 names, Macintosh, type 1 string, icomoon \012- data Size156 kB (156184 bytes) Hashe457529d073c28d569d2808199a9bffe 689f15a06422982cc641b6406abb13db284a9ab1 6004f0b7111e09c8acdae325b3e75d38f965d89d6321df8811dabaf44d76d5df
GET /_next/static/media/bf-icons.3014e895.ttf HTTP/1.1
Host: d2jtzd336hs8un.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://booking.hotelsparerhof.it
Connection: keep-alive
Referer: https://d2jtzd336hs8un.cloudfront.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 156184
date: Tue, 15 Nov 2022 13:37:21 GMT
last-modified: Tue, 03 May 2022 12:34:30 GMT
etag: "62712156-26218"
access-control-allow-origin: *
cache-control: public, max-age=31536000, immutable
accept-ranges: bytes
strict-transport-security: max-age=31536000
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ZPQEDJiR-w1unLwwpfXoxZWi6WjNMPo6UV-NGRqkxbS7IE-0hhmKYA==
age: 1683247
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.33.119.27 | 200 OK | 503 B |
IP23.33.119.27:0 ASN#20940 Akamai International B.V.
Hashaadd308b7be5b34c25b80471b08cf503 5f9ecf8d75f43bb4950d04aea40a1d9f667a7ff3 0f72c93a3ff7db91d593f05bb99704283f89fb3fe995cfe5c4b774549a313531
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0F72C93A3FF7DB91D593F05BB99704283F89FB3FE995CFE5C4B774549A313531"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6028
Expires: Mon, 05 Dec 2022 02:51:56 GMT
Date: Mon, 05 Dec 2022 01:11:28 GMT
Connection: keep-alive
|
|
| s.mts-online.com/u1043/en/widget/kube.js |  188.40.17.54 | 200 OK | 56 kB |
URL HTTP/1.1s.mts-online.com/u1043/en/widget/kube.js IP188.40.17.54:0 ASN#24940 Hetzner Online GmbH
File typeASCII text, with very long lines (65241) Hashe7d39e4402525590d50526259270ce3a f9868179f05b9539799e5cd52c483ee92492d573 1b27281008055997bef5bc840ad94ff85ae1eb50666435a728ac8f15c20328e4
GET /u1043/en/widget/kube.js HTTP/1.1
Host: s.mts-online.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://booking.hotelsparerhof.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 01:11:28 GMT
Server: Apache/2.4.18 (Ubuntu)
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Etag
Cache-Control: private, max-age=900, must-revalidate
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=0
ETag: "c71d9ec97f7c19abef0ae9d95ace5256"
Last-Modified: Mon, 05 Dec 2022 01:11:28 GMT
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: application/javascript
|
|
| cdn.jsdelivr.net/npm/litepicker/dist/bundle.js | 151.101.129.229 | 200 OK | 22 kB |
URL HTTP/2cdn.jsdelivr.net/npm/litepicker/dist/bundle.js IP151.101.129.229:0
File typeUnicode text, UTF-8 text, with very long lines (63805) Hashde04e462c177d5ebb1d555ddef62b8bf 683dde85388687bf80670097d7dea1e99104a9ea 4067a4d422a1b5500675f13c6c366f32c0ef4eaab3eec550aaf990022a6b1b5b
GET /npm/litepicker/dist/bundle.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://booking.hotelsparerhof.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 2.0.12
x-jsd-version-type: version
etag: W/"19b4e-ArtgGwQTHTJAWBv4sJZ4/fCkxIQ"
content-encoding: gzip
accept-ranges: bytes
date: Mon, 05 Dec 2022 01:11:28 GMT
age: 24879
x-served-by: cache-fra-eddf8230139-FRA, cache-bma1661-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 22511
X-Firefox-Spdy: h2
|
|
| d2jtzd336hs8un.cloudfront.net/_next/static/chunks/pages/index-4f91dc75cd41d669.js | 54.230.245.158 | 200 OK | 19 kB |
URL HTTP/2d2jtzd336hs8un.cloudfront.net/_next/static/chunks/pages/index-4f91dc75cd41d669.js IP54.230.245.158:0
Hashbb376d5ffcbb1ac330df765123c2dda2 10df302a8b7b916401aeb6a481dcd40b4b11f2fa 1990d59db12495b9d1e9d4bfa33a84df4ce10ec3009b386efdea85119eaf05c3
GET /_next/static/chunks/pages/index-4f91dc75cd41d669.js HTTP/1.1
Host: d2jtzd336hs8un.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://booking.hotelsparerhof.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Mon, 28 Nov 2022 16:02:09 GMT
last-modified: Mon, 28 Nov 2022 16:01:42 GMT
etag: W/"6384db66-1326b"
access-control-allow-origin: *
cache-control: public, max-age=31536000, immutable
strict-transport-security: max-age=31536000
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: RmqCmtxdZBzvDpPI_BJXqhvHUhOvFlqZ2OAgBWUSQLq_Nr9JtjF0Iw==
age: 551358
X-Firefox-Spdy: h2
|
|
| d2jtzd336hs8un.cloudfront.net/_next/static/ehIawmgvLPiidfXQEXmP0/_buildManifest.js | 54.230.245.158 | 200 OK | 1.7 kB |
URL HTTP/2d2jtzd336hs8un.cloudfront.net/_next/static/ehIawmgvLPiidfXQEXmP0/_buildManifest.js IP54.230.245.158:0
Hashbee39334548661c03343fa968fd9fa6a 83e974fe1b18cdc018349b35da08e4780385955f 303b6107f913a82a99e6edbcf69419b0db52706f1eb472a000560b057a7485fa
GET /_next/static/ehIawmgvLPiidfXQEXmP0/_buildManifest.js HTTP/1.1
Host: d2jtzd336hs8un.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://booking.hotelsparerhof.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Mon, 28 Nov 2022 16:02:09 GMT
last-modified: Mon, 28 Nov 2022 16:01:50 GMT
etag: W/"6384db6e-e22"
access-control-allow-origin: *
cache-control: public, max-age=31536000, immutable
strict-transport-security: max-age=31536000
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: vQ95y4CNwTyHzn_yRdAV5cTbF2vm_TXHG10gvqBy3h2PvCMiOPnp2g==
age: 551358
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtm.js?id=GTM-TX2LPWK | 142.250.74.168 | 200 OK | 50 kB |
URL HTTP/2www.googletagmanager.com/gtm.js?id=GTM-TX2LPWK IP142.250.74.168:0
File typeASCII text, with very long lines (7461) Hash2aa04a9c26e957494e9916ded16273be 8315b9ca2c15f0b1fd812efb9211472e900ff619 aec2136618720dc1e9a64c806f4ca04573d59996cc65da9546bddab19b94b47c
GET /gtm.js?id=GTM-TX2LPWK HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://booking.hotelsparerhof.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 05 Dec 2022 01:11:28 GMT
expires: Mon, 05 Dec 2022 01:11:28 GMT
cache-control: private, max-age=900
last-modified: Mon, 05 Dec 2022 00:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 50092
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hash3c4319f54a5675ee9acda96c58f97ac6 210ea86db1836d430b321d59b4bd1b016c914f22 cb20ad3ec895ed3a2ae9b1a90dda6b7cc174d8851f3a15ba054a435746cbdc65
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 01:11:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| res.cloudinary.com/seekda/image/upload/w_1920,h_1080,c_limit,f_auto,fl_lossy,q_auto/production/S000306/sparerhof-hotel-restaurant.png | 151.101.1.137 | 200 OK | 2.4 kB |
URL HTTP/2res.cloudinary.com/seekda/image/upload/w_1920,h_1080,c_limit,f_auto,fl_lossy,q_auto/production/S000306/sparerhof-hotel-restaurant.png IP151.101.1.137:0
File typeRIFF (little-endian) data, Web/P image\012- data Hash6a8562c1219857e18df7efca8adaa56c ef89b8dc28823b8c0072a9bc612c22fb0d32d528 0aa479c24f8f62e270d1f0ba62c3e76be5da5e9425c039c446fbd36d145e9097
GET /seekda/image/upload/w_1920,h_1080,c_limit,f_auto,fl_lossy,q_auto/production/S000306/sparerhof-hotel-restaurant.png HTTP/1.1
Host: res.cloudinary.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://booking.hotelsparerhof.it/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-disposition: inline; filename="sparerhof-hotel-restaurant.webp"
content-type: image/webp
etag: "6a8562c1219857e18df7efca8adaa56c"
last-modified: Fri, 10 Jun 2022 09:40:38 GMT
date: Mon, 05 Dec 2022 01:11:29 GMT
vary: Save-Data
strict-transport-security: max-age=604800
cache-control: private, no-transform, immutable, max-age=2592000
server-timing: fastly;dur=2;cpu=1;start=2022-12-05T01:11:29.043Z;desc=hit,rtt;dur=9
server: Cloudinary
timing-allow-origin: *
access-control-allow-origin: *
accept-ranges: bytes
x-content-type-options: nosniff
access-control-expose-headers: Content-Length,Content-Disposition,ETag,Server-Timing,Vary,X-Content-Type-Options
content-length: 2396
X-Firefox-Spdy: h2
|
|
| res.cloudinary.com/seekda/image/upload/w_1920,ar_2.8,c_fill,f_auto,fl_lossy,q_auto/production/S000306/Spargelmaultaschen_mit_Kalbsragout-Sparerhof-2.jpg | 151.101.1.137 | 200 OK | 67 kB |
URL HTTP/2res.cloudinary.com/seekda/image/upload/w_1920,ar_2.8,c_fill,f_auto,fl_lossy,q_auto/production/S000306/Spargelmaultaschen_mit_Kalbsragout-Sparerhof-2.jpg IP151.101.1.137:0
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 1920x686, Scaling: [none]x[none], YUV color, decoders should clamp\012- data Hashf91614ed3ab05d6660a4103ee4f327fc 2b3e84fcea593775acc3cd2223b13ae227153b9e 9affe47b10b9382a1df74ea7c7cba96c3d419629c970bca8dd06569d39bfd34e
GET /seekda/image/upload/w_1920,ar_2.8,c_fill,f_auto,fl_lossy,q_auto/production/S000306/Spargelmaultaschen_mit_Kalbsragout-Sparerhof-2.jpg HTTP/1.1
Host: res.cloudinary.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://booking.hotelsparerhof.it/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-disposition: inline; filename="Spargelmaultaschen_mit_Kalbsragout-Sparerhof-2.webp"
content-type: image/webp
etag: "f91614ed3ab05d6660a4103ee4f327fc"
last-modified: Tue, 15 Mar 2022 07:14:56 GMT
date: Mon, 05 Dec 2022 01:11:29 GMT
vary: Save-Data
strict-transport-security: max-age=604800
cache-control: private, no-transform, immutable, max-age=2592000
server-timing: fastly;dur=1;cpu=0;start=2022-12-05T01:11:29.044Z;desc=hit,rtt;dur=9
server: Cloudinary
timing-allow-origin: *
access-control-allow-origin: *
accept-ranges: bytes
x-content-type-options: nosniff
access-control-expose-headers: Content-Length,Content-Disposition,ETag,Server-Timing,Vary,X-Content-Type-Options
content-length: 66552
X-Firefox-Spdy: h2
|
|
| d2jtzd336hs8un.cloudfront.net/_next/static/chunks/webpack-af0fc1fb1b57cb39.js | 54.230.245.158 | 200 OK | 1.5 kB |
URL HTTP/2d2jtzd336hs8un.cloudfront.net/_next/static/chunks/webpack-af0fc1fb1b57cb39.js IP54.230.245.158:0
Hashc37ad93dab064aac8b15a7eae013abfd ac21fdc24713e9d1779e86c67a90dc4664ea5da6 4eb0192dc33c25575222bd71b79f9582ed64041a3966ab756745d616b4aba95f
GET /_next/static/chunks/webpack-af0fc1fb1b57cb39.js HTTP/1.1
Host: d2jtzd336hs8un.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://booking.hotelsparerhof.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
date: Tue, 15 Nov 2022 13:34:03 GMT
last-modified: Tue, 03 May 2022 12:34:30 GMT
etag: W/"62712156-7ce"
access-control-allow-origin: *
cache-control: public, max-age=31536000, immutable
strict-transport-security: max-age=31536000
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: F8Wd36BWqCJaIVs3HjcRvf75_beZfxhXvJDE5w2K0gp_8U7JlK1gGA==
age: 1683444
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.33.119.27 | 200 OK | 503 B |
IP23.33.119.27:0 ASN#20940 Akamai International B.V.
Hash83e0936435ad95a15c9ec5ff9520f4fe a8225ee0d8ae117f977f7ff817c342c62e91b5a9 ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7492
Expires: Mon, 05 Dec 2022 03:16:21 GMT
Date: Mon, 05 Dec 2022 01:11:29 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.33.119.27 | 200 OK | 503 B |
IP23.33.119.27:0 ASN#20940 Akamai International B.V.
Hash83e0936435ad95a15c9ec5ff9520f4fe a8225ee0d8ae117f977f7ff817c342c62e91b5a9 ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7492
Expires: Mon, 05 Dec 2022 03:16:21 GMT
Date: Mon, 05 Dec 2022 01:11:29 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.33.119.27 | 200 OK | 503 B |
IP23.33.119.27:0 ASN#20940 Akamai International B.V.
Hash83e0936435ad95a15c9ec5ff9520f4fe a8225ee0d8ae117f977f7ff817c342c62e91b5a9 ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7492
Expires: Mon, 05 Dec 2022 03:16:21 GMT
Date: Mon, 05 Dec 2022 01:11:29 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.33.119.27 | 200 OK | 503 B |
IP23.33.119.27:0 ASN#20940 Akamai International B.V.
Hash83e0936435ad95a15c9ec5ff9520f4fe a8225ee0d8ae117f977f7ff817c342c62e91b5a9 ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7492
Expires: Mon, 05 Dec 2022 03:16:21 GMT
Date: Mon, 05 Dec 2022 01:11:29 GMT
Connection: keep-alive
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F15537f94-1f24-4010-9d46-d70fec20ced3.jpeg | 34.120.237.76 | 200 OK | 8.6 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F15537f94-1f24-4010-9d46-d70fec20ced3.jpeg IP34.120.237.76:0
File typegzip compressed data, from Unix\012- data Hash9c147a44b8a47f2da04b04f1cd8c654d 5477955c4b9e8a987ce3392102e3201670cd184a 980facd26202751c6bde62822ee9c5763bf4aaaf562728a256141077f5caba18
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F15537f94-1f24-4010-9d46-d70fec20ced3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6827
x-amzn-requestid: 68443283-d7bf-4a40-8b2a-32c81e160d35
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cjKUkE6foAMFb3w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638abdb6-570021b92c46c99d1ad363bd;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 03:08:38 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: S96VFv064j3TfGQEG2cAJxe7UdaSey-JJUGERVgpm8mtdTmPk7FE6g==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 570075675953459325e00b7bcd171df2.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Dec 2022 03:21:44 GMT
age: 78585
etag: "8d3d92355304ccfcd50ae96f55b2754220f05187"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| d2jtzd336hs8un.cloudfront.net/_next/static/css/e45bafd752dbfc1b.css | 54.230.245.158 | 200 OK | 62 kB |
URL HTTP/2d2jtzd336hs8un.cloudfront.net/_next/static/css/e45bafd752dbfc1b.css IP54.230.245.158:0
Hash25b79a347a9aaa351389642ba5753b93 c4434df5d4e53e12f301755b1316ba178b31587c 475c04d90cba19ccc7ebe5f4cecdead143aecbb88dada16fc2b74dbbb3b31d05
GET /_next/static/css/e45bafd752dbfc1b.css HTTP/1.1
Host: d2jtzd336hs8un.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://booking.hotelsparerhof.it/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css
date: Mon, 28 Nov 2022 15:47:45 GMT
last-modified: Mon, 28 Nov 2022 15:47:13 GMT
etag: W/"6384d801-50631"
access-control-allow-origin: *
cache-control: public, max-age=31536000, immutable
strict-transport-security: max-age=31536000
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: EUtrLh43Ow1zSJxMCMCM0wB_xucGefjbia0yIQuf3cM-5PGMjpKwIA==
age: 552222
X-Firefox-Spdy: h2
|
|
| d2jtzd336hs8un.cloudfront.net/static/icons.css?checksum=10237f48c3fa09118c62aea0fad9d4f4 | 54.230.245.158 | 200 OK | 14 kB |
URL HTTP/2d2jtzd336hs8un.cloudfront.net/static/icons.css?checksum=10237f48c3fa09118c62aea0fad9d4f4 IP54.230.245.158:0
Hash863210584bc5d45f4962abbccd2ce929 3e4f960f7dd6b1c3d793457c90b549a227d3f347 0f21f474e2ea22e970df136844d5305071c798db2937a98d52cc89005efe430e
GET /static/icons.css?checksum=10237f48c3fa09118c62aea0fad9d4f4 HTTP/1.1
Host: d2jtzd336hs8un.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://booking.hotelsparerhof.it/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css
date: Sun, 04 Dec 2022 11:08:27 GMT
last-modified: Tue, 03 May 2022 12:24:30 GMT
etag: W/"62711efe-4a0a"
access-control-allow-origin: *
content-encoding: gzip
strict-transport-security: max-age=15768000
vary: Accept-Encoding,Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: uQMSxU7YvqAAXsAjXOChZBesVKQZ2nBP0rDOqbKCP_5-rNxrmTgGEg==
age: 50580
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe9e8d044-2cda-4dba-9da8-c0a296845bca.jpeg | 34.120.237.76 | 200 OK | 12 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe9e8d044-2cda-4dba-9da8-c0a296845bca.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashb8e6f84dff61fedd8ff9baa9bb648883 f8d5cc7b315879b66a11b403463da1330617d2fa 025c66a4a0e7927353e1733d7f8cfb6ec3c9c0228d34267cbff11f09cf112127
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe9e8d044-2cda-4dba-9da8-c0a296845bca.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12348
x-amzn-requestid: 72f681ef-9ae7-4fc5-8539-230e1d4277a1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cjKa_HpTIAMFrcg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638abddf-43ef45165fd982997e5018c8;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 03:09:19 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: tGsNaADKr1KoJT7rxDSFf8dxM1_IXsaF67Eqe8DIO9PAJy8HtqQKng==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 556b99c6be8d7078b9f067347c62df6a.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Dec 2022 03:21:42 GMT
age: 78587
etag: "f8d5cc7b315879b66a11b403463da1330617d2fa"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| d2jtzd336hs8un.cloudfront.net/static/semantic.min.css?checksum=c693bf067390b2ec6106c2aec0a1c2b1 | 54.230.245.158 | 200 OK | 108 kB |
URL HTTP/2d2jtzd336hs8un.cloudfront.net/static/semantic.min.css?checksum=c693bf067390b2ec6106c2aec0a1c2b1 IP54.230.245.158:0
Size108 kB (108305 bytes) Hashe3489b0fa3e7322cafb2a10426b3f4d6 efe1997282b72461005b3bac39dcafb3054a2ce2 e1adc77541fd0611e72638f3b7e8bd2cac1f6bd0457e1d376f452d2f680d5626
GET /static/semantic.min.css?checksum=c693bf067390b2ec6106c2aec0a1c2b1 HTTP/1.1
Host: d2jtzd336hs8un.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://booking.hotelsparerhof.it/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css
date: Sun, 04 Dec 2022 02:36:24 GMT
last-modified: Wed, 27 Jul 2022 15:15:58 GMT
etag: W/"62e156ae-996ea"
access-control-allow-origin: *
content-encoding: gzip
strict-transport-security: max-age=15768000
vary: Accept-Encoding,Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 8I4My_a1eH9N293NLexqPXYyCAodCgC5lmkr7oppG8I-5Ly6RCyOyQ==
age: 81303
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7b8e1482-c241-410e-81b0-55ea5ac84c98.jpeg | 34.120.237.76 | 200 OK | 7.6 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7b8e1482-c241-410e-81b0-55ea5ac84c98.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash50eeb012f0903f0848c8afcd6b26a7ec ff7740d3c12ce7ab23291272221c0d9503f9c139 f4aeac45941c34d8e0794d20a4bb2658b020fed85c5059f247844f2755bc9d72
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7b8e1482-c241-410e-81b0-55ea5ac84c98.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7631
x-amzn-requestid: 9fc3a621-dcd9-4332-b085-6cda0cb25ac9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cjKUYF2toAMFVkQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638abdb5-36f6c7d67940ed18394328c8;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 03:08:37 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: azPc-KWHbEA3DMhyphQq3zERUrF14hxrEHwxDZZfcFlu5-IpyKwtgw==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Dec 2022 03:17:41 GMT
age: 78828
etag: "ff7740d3c12ce7ab23291272221c0d9503f9c139"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| s.mts-online.com/u1043/widget/kube.css | 188.40.17.54 | 200 OK | 11 kB |
URL HTTP/1.1s.mts-online.com/u1043/widget/kube.css IP188.40.17.54:0 ASN#24940 Hetzner Online GmbH
File typeASCII text, with very long lines (65536), with no line terminators Hashe617804762f2ceca8d636905c45790a6 cb0de8bcce1fed76f8b80c04c5f428303106e9aa d8d9b8699dc684b8e1cce2d238bc9e17e118617373d77a50e433a9526a84f02b
GET /u1043/widget/kube.css HTTP/1.1
Host: s.mts-online.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://booking.hotelsparerhof.it/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 01:11:28 GMT
Server: Apache/2.4.18 (Ubuntu)
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Etag
Cache-Control: private, max-age=900, must-revalidate
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=0
ETag: "c605b4385fc223250701273a907ac7be"
Last-Modified: Thu, 01 Dec 2022 10:03:40 GMT
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/css;charset=UTF-8
|
|
| s.mts-online.com/u1043/2.6/Vollkorn-Regular.woff2 | 188.40.17.54 | 200 OK | 111 kB |
URL HTTP/1.1s.mts-online.com/u1043/2.6/Vollkorn-Regular.woff2 IP188.40.17.54:0 ASN#24940 Hetzner Online GmbH
File typeWeb Open Font Format (Version 2), TrueType, length 111156, version 1.0\012- data Size111 kB (111156 bytes) Hashd8dc0f62049bfc71135f21c206a2e0ee bf3ec35e50d4c7db89ae567b5081e2124ced8767 e80613b15d1942c45d026094ed01b89bc4aa69e036a5fe9b09199c36017786d6
GET /u1043/2.6/Vollkorn-Regular.woff2 HTTP/1.1
Host: s.mts-online.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://booking.hotelsparerhof.it
Connection: keep-alive
Referer: https://s.mts-online.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 01:11:29 GMT
Server: Apache/2.4.18 (Ubuntu)
Access-Control-Allow-Origin: *
Expires: Tue, 05 Dec 2023 01:11:29 GMT
Strict-Transport-Security: max-age=0
ETag: "ffaf9aa7658f52ce14bd5f1f867821a6"
Last-Modified: Mon, 14 Mar 2022 13:17:51 GMT
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: application/font-woff2
|
|
| s.mts-online.com/u1043/2.6/Vollkorn-Bold.woff2 | 188.40.17.54 | 200 OK | 118 kB |
URL HTTP/1.1s.mts-online.com/u1043/2.6/Vollkorn-Bold.woff2 IP188.40.17.54:0 ASN#24940 Hetzner Online GmbH
File typeWeb Open Font Format (Version 2), TrueType, length 118540, version 1.0\012- data Size118 kB (118540 bytes) Hash5a8cbd8b654f9bffd9cdfa5862db7e2b 023ef830fc1af09ac0cb86a735dfa7d895ad36de 195eeaee5b15b20e91f9c9635cb32c4af22989d2c248e729a72b94766493b9d3
GET /u1043/2.6/Vollkorn-Bold.woff2 HTTP/1.1
Host: s.mts-online.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://booking.hotelsparerhof.it
Connection: keep-alive
Referer: https://s.mts-online.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 01:11:29 GMT
Server: Apache/2.4.18 (Ubuntu)
Access-Control-Allow-Origin: *
Expires: Tue, 05 Dec 2023 01:11:29 GMT
Strict-Transport-Security: max-age=0
ETag: "76b31e224eb225d71521020ecb825c8a"
Last-Modified: Mon, 14 Mar 2022 13:17:52 GMT
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: application/font-woff2
|
|
| quality.seekda.com/events/ibe/searchBoxInit? | 135.125.240.141 | 200 OK | 0 B |
URL HTTP/2quality.seekda.com/events/ibe/searchBoxInit? IP135.125.240.141:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /events/ibe/searchBoxInit? HTTP/1.1
Host: quality.seekda.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: cache-control,content-type
Referer: https://booking.hotelsparerhof.it/
Origin: https://booking.hotelsparerhof.it
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-origin: https://booking.hotelsparerhof.it
access-control-allow-methods: POST
access-control-allow-headers: cache-control, content-type
access-control-allow-credentials: true
access-control-max-age: 1800
allow: GET, HEAD, POST, PUT, DELETE, TRACE, OPTIONS, PATCH
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: 0
x-frame-options: DENY
content-length: 0
date: Mon, 05 Dec 2022 01:11:29 GMT
strict-transport-security: max-age=15768000
set-cookie: VCSADDYFIHLUNGF=cheiG8ch; path=/; HttpOnly; Secure; SameSite=none
X-Firefox-Spdy: h2
|
|
| quality.seekda.com/events/ibe/pageLoaded? | 135.125.240.141 | 200 OK | 0 B |
URL HTTP/2quality.seekda.com/events/ibe/pageLoaded? IP135.125.240.141:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /events/ibe/pageLoaded? HTTP/1.1
Host: quality.seekda.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: cache-control,content-type
Referer: https://booking.hotelsparerhof.it/
Origin: https://booking.hotelsparerhof.it
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-origin: https://booking.hotelsparerhof.it
access-control-allow-methods: POST
access-control-allow-headers: cache-control, content-type
access-control-allow-credentials: true
access-control-max-age: 1800
allow: GET, HEAD, POST, PUT, DELETE, TRACE, OPTIONS, PATCH
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: 0
x-frame-options: DENY
content-length: 0
date: Mon, 05 Dec 2022 01:11:29 GMT
strict-transport-security: max-age=15768000
set-cookie: VCSADDYFIHLUNGF=thei9zuS; path=/; HttpOnly; Secure; SameSite=none
X-Firefox-Spdy: h2
|
|
| images.seekda.net/S000306/sparerhof_favicon_96.png | 135.125.240.142 | 307 Temporary Redirect | 0 B |
URL HTTP/2images.seekda.net/S000306/sparerhof_favicon_96.png IP135.125.240.142:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /S000306/sparerhof_favicon_96.png HTTP/1.1
Host: images.seekda.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://booking.hotelsparerhof.it/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 307 Temporary Redirect
location: https://res.cloudinary.com/seekda/image/upload/if_ar_gte_16:9,w_3888,h_1080,c_limit/if_ar_gte_9:16_and_ar_lt_16:9,w_1920,h_1920,c_limit/if_ar_lt_9:16,w_1080,h_3888,c_limit/f_auto,fl_lossy,q_auto/production/S000306/sparerhof_favicon_96.png
allow: GET,HEAD,POST,OPTIONS
access-control-allow-origin: https://hotels.kognitiv.com
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
content-length: 0
date: Mon, 05 Dec 2022 01:11:29 GMT
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
|
|
| hbe-api.kognitiv.com/marketing?channelId=ibe&context=DETAIL | 135.125.240.149 | 200 OK | 2 B |
URL HTTP/2hbe-api.kognitiv.com/marketing?channelId=ibe&context=DETAIL IP135.125.240.149:0
File typeJSON data\012- , ASCII text, with no line terminators Hashd751713988987e9331980363e24189ce 97d170e1550eee4afc0af065b78cda302a97674c 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
GET /marketing?channelId=ibe&context=DETAIL HTTP/1.1
Host: hbe-api.kognitiv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://booking.hotelsparerhof.it
Connection: keep-alive
Referer: https://booking.hotelsparerhof.it/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json; charset=utf-8
content-length: 2
status: 200 OK
access-control-allow-credentials: true
access-control-allow-origin: https://booking.hotelsparerhof.it
vary: Origin, Accept-Encoding
date: Mon, 05 Dec 2022 01:11:29 GMT
etag: W/"2-l9Fw4VUO7kr8CvBlt4zaMCqXZ0w"
set-cookie: MGLH51CKJDVB=VEI1698VEKLN9; path=/; HttpOnly; Secure
cache-control: private
X-Firefox-Spdy: h2
|
|
| res.cloudinary.com/seekda/image/upload/if_ar_gte_16:9,w_3888,h_1080,c_limit/if_ar_gte_9:16_and_ar_lt_16:9,w_1920,h_1920,c_limit/if_ar_lt_9:16,w_1080,h_3888,c_limit/f_auto,fl_lossy,q_auto/production/S000306/sparerhof_favicon_96.png | 151.101.1.137 | 200 OK | 2.2 kB |
URL HTTP/2res.cloudinary.com/seekda/image/upload/if_ar_gte_16:9,w_3888,h_1080,c_limit/if_ar_gte_9:16_and_ar_lt_16:9,w_1920,h_1920,c_limit/if_ar_lt_9:16,w_1080,h_3888,c_limit/f_auto,fl_lossy,q_auto/production/S000306/sparerhof_favicon_96.png IP151.101.1.137:0
File typeRIFF (little-endian) data, Web/P image\012- data Hash1e33e085df24f726c8af072f4f983fe2 41df01e99d0f8d7812704424f7282df42a46d921 ebc7821fba6052ca63cfb77ed2ab091f9330930bfd765dde184df1082bc68479
GET /seekda/image/upload/if_ar_gte_16:9,w_3888,h_1080,c_limit/if_ar_gte_9:16_and_ar_lt_16:9,w_1920,h_1920,c_limit/if_ar_lt_9:16,w_1080,h_3888,c_limit/f_auto,fl_lossy,q_auto/production/S000306/sparerhof_favicon_96.png HTTP/1.1
Host: res.cloudinary.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://booking.hotelsparerhof.it/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-disposition: inline; filename="sparerhof_favicon_96.webp"
content-type: image/webp
etag: "1e33e085df24f726c8af072f4f983fe2"
last-modified: Fri, 10 Jun 2022 09:40:39 GMT
date: Mon, 05 Dec 2022 01:11:30 GMT
vary: Save-Data
strict-transport-security: max-age=604800
cache-control: private, no-transform, immutable, max-age=2592000
server-timing: fastly;dur=2;cpu=0;start=2022-12-05T01:11:30.019Z;desc=hit,rtt;dur=8
server: Cloudinary
timing-allow-origin: *
access-control-allow-origin: *
accept-ranges: bytes
x-content-type-options: nosniff
access-control-expose-headers: Content-Length,Content-Disposition,ETag,Server-Timing,Vary,X-Content-Type-Options
content-length: 2228
X-Firefox-Spdy: h2
|
|
| hbe-api.kognitiv.com/unavailable-days | 135.125.240.149 | 200 OK | 7.4 kB |
URL HTTP/2hbe-api.kognitiv.com/unavailable-days IP135.125.240.149:0
Hash6a6ba6fd25bdfb4ae474921bb9d6efb7 ad67c10dd0b6922c5a983ae898af217b2def89e1 2e933a42fe431a48dc17e589a26c9be0fd6dc1bc3c07c11721f8887f648ff9d4
POST /unavailable-days HTTP/1.1
Host: hbe-api.kognitiv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 61
Origin: https://booking.hotelsparerhof.it
Connection: keep-alive
Referer: https://booking.hotelsparerhof.it/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
status: 200 OK
access-control-allow-credentials: true
access-control-allow-origin: https://booking.hotelsparerhof.it
vary: Accept-Encoding, Origin, Accept-Encoding
date: Mon, 05 Dec 2022 01:11:30 GMT
etag: W/"5b-guzHEpyOWKfcgWRbSF3Ymamt6aU"
content-encoding: gzip
set-cookie: MGLH51CKJDVB=VEI1698VEKLN9; path=/; HttpOnly; Secure
X-Firefox-Spdy: h2
|
|
| hbe-api.kognitiv.com/offers | 135.125.240.149 | 200 OK | 2.5 kB |
URL HTTP/2hbe-api.kognitiv.com/offers IP135.125.240.149:0
File typeJSON data\012- , ASCII text, with very long lines (32574), with no line terminators Hashe08ace521cf0091d4a2fe22e121fdfd0 308392e00daefb2d6cf3e27bc92fc90a924d631c 86b7bc0bb31a0dc3b843f5d227e033eab67ad21afae1b33f0ca8ec93b54be9f8
POST /offers HTTP/1.1
Host: hbe-api.kognitiv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 568
Origin: https://booking.hotelsparerhof.it
Connection: keep-alive
Referer: https://booking.hotelsparerhof.it/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
status: 200 OK
access-control-allow-credentials: true
access-control-allow-origin: https://booking.hotelsparerhof.it
vary: Origin, Accept-Encoding
content-encoding: gzip
date: Mon, 05 Dec 2022 01:11:30 GMT
etag: W/"7f3e-79GyxTVX+g+7Nh7cm+rMwGtX3VE"
set-cookie: MGLH51CKJDVB=HBE7KSGFADL4; path=/; HttpOnly; Secure
X-Firefox-Spdy: h2
|
|
| quality.seekda.com/events/ibe/viewTrustYouBadge? | 135.125.240.141 | 200 OK | 0 B |
URL HTTP/2quality.seekda.com/events/ibe/viewTrustYouBadge? IP135.125.240.141:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /events/ibe/viewTrustYouBadge? HTTP/1.1
Host: quality.seekda.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: cache-control,content-type
Referer: https://booking.hotelsparerhof.it/
Origin: https://booking.hotelsparerhof.it
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-origin: https://booking.hotelsparerhof.it
access-control-allow-methods: POST
access-control-allow-headers: cache-control, content-type
access-control-allow-credentials: true
access-control-max-age: 1800
allow: GET, HEAD, POST, PUT, DELETE, TRACE, OPTIONS, PATCH
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: 0
x-frame-options: DENY
content-length: 0
date: Mon, 05 Dec 2022 01:11:30 GMT
strict-transport-security: max-age=15768000
set-cookie: VCSADDYFIHLUNGF=thei9zuS; path=/; HttpOnly; Secure; SameSite=none
X-Firefox-Spdy: h2
|
|
| quality.seekda.com/events/ibe/pageReady? | 135.125.240.141 | 200 OK | 79 B |
URL HTTP/2quality.seekda.com/events/ibe/pageReady? IP135.125.240.141:0
File typeJSON data\012- , ASCII text, with no line terminators Hash41a600227c8d0071dbee9c5e71e96a60 e18f5a698a689c9dec4a8774fe2bdeebce0dc059 9b363b3777247dc54e3abb91cbb15d638f87633dd27bee967d104c9dccbd6a52
POST /events/ibe/pageReady? HTTP/1.1
Host: quality.seekda.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Cache-Control: no-cache
Content-Length: 813
Origin: https://booking.hotelsparerhof.it
Connection: keep-alive
Referer: https://booking.hotelsparerhof.it/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-origin: https://booking.hotelsparerhof.it
access-control-allow-credentials: true
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: 0
x-frame-options: DENY
content-type: application/json
date: Mon, 05 Dec 2022 01:11:30 GMT
strict-transport-security: max-age=15768000
set-cookie: VCSADDYFIHLUNGF=cheiG8ch; path=/; HttpOnly; Secure; SameSite=none
X-Firefox-Spdy: h2
|
|
| res.cloudinary.com/seekda/image/upload/w_768,h_432,c_fill,f_auto,fl_lossy,q_auto/production/S000306/IMG_9051.jpg | 151.101.1.137 | 200 OK | 29 kB |
URL HTTP/2res.cloudinary.com/seekda/image/upload/w_768,h_432,c_fill,f_auto,fl_lossy,q_auto/production/S000306/IMG_9051.jpg IP151.101.1.137:0
File typeRIFF (little-endian) data, Web/P image\012- data Hash78cb532b6ccb0cce8990492f4e3d833e 3c068e0739b71317efb898c7f23a20e8c307ce23 59f45f9c2494eeb06235a4afa194a41ac2118ed55d538275b4cc366cd29eea56
GET /seekda/image/upload/w_768,h_432,c_fill,f_auto,fl_lossy,q_auto/production/S000306/IMG_9051.jpg HTTP/1.1
Host: res.cloudinary.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://booking.hotelsparerhof.it/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-disposition: inline; filename="IMG_9051.webp"
content-type: image/webp
etag: "78cb532b6ccb0cce8990492f4e3d833e"
last-modified: Tue, 31 May 2022 18:49:42 GMT
date: Mon, 05 Dec 2022 01:11:30 GMT
vary: Save-Data
strict-transport-security: max-age=604800
cache-control: private, no-transform, immutable, max-age=2592000
server-timing: fastly;dur=2;cpu=0;start=2022-12-05T01:11:30.558Z;desc=hit,rtt;dur=8
server: Cloudinary
timing-allow-origin: *
access-control-allow-origin: *
accept-ranges: bytes
x-content-type-options: nosniff
access-control-expose-headers: Content-Length,Content-Disposition,ETag,Server-Timing,Vary,X-Content-Type-Options
content-length: 28978
X-Firefox-Spdy: h2
|
|
| quality.seekda.com/events/ibe/searchBoxInit? | 135.125.240.141 | 200 OK | 252 B |
URL HTTP/2quality.seekda.com/events/ibe/searchBoxInit? IP135.125.240.141:0
Hash5f6258ef9c4301d82345ae420f2e367c 1c66ab2395490976d0c2e8705adf98b5fa0d2eed 55a5d54b4a2b5c10ef14f4ac2a8dbce61f426962f0375eaf458f9df2b9507dab
POST /events/ibe/searchBoxInit? HTTP/1.1
Host: quality.seekda.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Cache-Control: no-cache
Content-Length: 601
Origin: https://booking.hotelsparerhof.it
Connection: keep-alive
Referer: https://booking.hotelsparerhof.it/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-origin: https://booking.hotelsparerhof.it
access-control-allow-credentials: true
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: 0
x-frame-options: DENY
content-type: application/json
date: Mon, 05 Dec 2022 01:11:29 GMT
strict-transport-security: max-age=15768000
set-cookie: VCSADDYFIHLUNGF=cheiG8ch; path=/; HttpOnly; Secure; SameSite=none
X-Firefox-Spdy: h2
|
|
| switch.seekda.com/switch/api/properties/S000306/bookability.json | 135.125.240.145 | 200 OK | 3.1 kB |
URL HTTP/2switch.seekda.com/switch/api/properties/S000306/bookability.json IP135.125.240.145:0
Hash8f904aeef01a7d9576606003e1211ba2 c3e4426c2bcfe03662a08a44e88d9bcd18bd1df1 3b9e23705f9c4e131e5048f6809a9d91d40744175c04e372427f32387a328b1c
GET /switch/api/properties/S000306/bookability.json HTTP/1.1
Host: switch.seekda.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://booking.hotelsparerhof.it
Connection: keep-alive
Referer: https://booking.hotelsparerhof.it/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-robots-tag: noindex
access-control-allow-origin: https://booking.hotelsparerhof.it
access-control-allow-credentials: true
vary: accept-encoding
content-encoding: gzip
content-type: application/json
date: Mon, 05 Dec 2022 01:11:30 GMT
set-cookie: KLJIQWJ38ASK=5ee71ba80beb7e0; path=/; HttpOnly; Secure; SameSite=none
cache-control: private
X-Firefox-Spdy: h2
|
|
| u.mts-online.com/api/graphql/cm/u1043/1 | 76.76.21.98 | 200 OK | 163 B |
URL HTTP/2u.mts-online.com/api/graphql/cm/u1043/1 IP76.76.21.98:0
File typeJSON data\012- , ASCII text, with no line terminators Hash3d7b3f9b52468026e05a7fe48c7ebfe7 9129b7605d74fc191eb725d4efc25e6097d6c34a d383b7c0b0c6b352d2911fc06f0451c7a780d56e9b6e15a2f79afe161b8cb424
OPTIONS /api/graphql/cm/u1043/1 HTTP/1.1
Host: u.mts-online.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://booking.hotelsparerhof.it/
Origin: https://booking.hotelsparerhof.it
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-headers: X-Requested-With,Access-Control-Allow-Origin,X-HTTP-Method-Override,Content-Type,Authorization,Accept
access-control-allow-methods: POST,HEAD
access-control-allow-origin: *
access-control-max-age: 86400
cache-control: public, max-age=0, must-revalidate
content-type: application/json; charset=utf-8
date: Mon, 05 Dec 2022 01:11:31 GMT
etag: "a3-kSm3YF10/BketyXU78JeYJfWw0o"
server: Vercel
strict-transport-security: max-age=63072000
x-matched-path: /api/graphql/[source]/[client]/[version]
x-vercel-cache: MISS
x-vercel-id: arn1::fra1::zqxxj-1670202690905-c5e73952a4fc
content-length: 163
X-Firefox-Spdy: h2
|
|
| quality.seekda.com/events/ibe/viewTrustYouBadge? | 135.125.240.141 | 200 OK | 249 B |
URL HTTP/2quality.seekda.com/events/ibe/viewTrustYouBadge? IP135.125.240.141:0
Hash1067ecfb911c28bf66ba760df4655f3c d83e79838d8138be34aad03d3efb95c6bd027ae8 be1adea3d1c203b59d72598d5d4441f09412e682d6b4762f671e7ae17907c484
POST /events/ibe/viewTrustYouBadge? HTTP/1.1
Host: quality.seekda.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Cache-Control: no-cache
Content-Length: 900
Origin: https://booking.hotelsparerhof.it
Connection: keep-alive
Referer: https://booking.hotelsparerhof.it/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-origin: https://booking.hotelsparerhof.it
access-control-allow-credentials: true
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: 0
x-frame-options: DENY
content-type: application/json
date: Mon, 05 Dec 2022 01:11:30 GMT
strict-transport-security: max-age=15768000
set-cookie: VCSADDYFIHLUNGF=thei9zuS; path=/; HttpOnly; Secure; SameSite=none
X-Firefox-Spdy: h2
|
|
| booking.hotelsparerhof.it/static/trust-you-bubbles.svg | 135.125.240.140 | 200 OK | 368 B |
URL HTTP/2booking.hotelsparerhof.it/static/trust-you-bubbles.svg IP135.125.240.140:0
File typeSVG Scalable Vector Graphics image\012- , ASCII text Hashb790689f40532c460fdf8ae0fd23ae53 8ebf475e7ee62602d34c656f6297201cc39fbc5c fa446de041d2ad8712d9517fd0042b15e74886046b591a999d70e9815133cc0b
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /static/trust-you-bubbles.svg HTTP/1.1
Host: booking.hotelsparerhof.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://booking.hotelsparerhof.it/?activeBookingEngine=KBE&propertyCode=S000306&skd-checkin=2022-12-06&skd-checkout=2022-12-07&skd-property-code=S000306
Cookie: BF_QUERYPARAMS={%22skd-checkin%22:%222022-12-06%22%2C%22skd-checkout%22:%222022-12-07%22%2C%22skd-property-code%22:%22S000306%22}
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Dec 2022 01:11:31 GMT
content-type: image/svg+xml
content-length: 368
last-modified: Tue, 03 May 2022 12:24:30 GMT
etag: "62711efe-170"
access-control-allow-origin: *
accept-ranges: bytes
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
|
|
| apm-server.seekda.com/intake/v2/rum/events | 135.125.240.139 | 200 OK | 0 B |
URL HTTP/2apm-server.seekda.com/intake/v2/rum/events IP135.125.240.139:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /intake/v2/rum/events HTTP/1.1
Host: apm-server.seekda.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://booking.hotelsparerhof.it/
Origin: https://booking.hotelsparerhof.it
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-headers: Content-Type, Content-Encoding, Accept
access-control-allow-methods: POST, OPTIONS
access-control-allow-origin: https://booking.hotelsparerhof.it
access-control-expose-headers: Etag
access-control-max-age: 3600
content-length: 0
vary: Origin
x-content-type-options: nosniff
date: Mon, 05 Dec 2022 01:11:32 GMT
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
|
|
| apm-server.seekda.com/intake/v2/rum/events | 135.125.240.139 | 202 Accepted | 0 B |
URL HTTP/2apm-server.seekda.com/intake/v2/rum/events IP135.125.240.139:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /intake/v2/rum/events HTTP/1.1
Host: apm-server.seekda.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-ndjson
Content-Length: 41864
Origin: https://booking.hotelsparerhof.it
Connection: keep-alive
Referer: https://booking.hotelsparerhof.it/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 202 Accepted
access-control-allow-origin: https://booking.hotelsparerhof.it
x-content-type-options: nosniff
date: Mon, 05 Dec 2022 01:11:32 GMT
content-length: 0
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
|
|
| quality.seekda.com/events/ibe/pageLoaded? | 135.125.240.141 | 200 OK | 79 B |
URL HTTP/2quality.seekda.com/events/ibe/pageLoaded? IP135.125.240.141:0
File typeJSON data\012- , ASCII text, with no line terminators Hash41a600227c8d0071dbee9c5e71e96a60 e18f5a698a689c9dec4a8774fe2bdeebce0dc059 9b363b3777247dc54e3abb91cbb15d638f87633dd27bee967d104c9dccbd6a52
POST /events/ibe/pageLoaded? HTTP/1.1
Host: quality.seekda.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Cache-Control: no-cache
Content-Length: 618
Origin: https://booking.hotelsparerhof.it
Connection: keep-alive
Referer: https://booking.hotelsparerhof.it/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-origin: https://booking.hotelsparerhof.it
access-control-allow-credentials: true
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: 0
x-frame-options: DENY
content-type: application/json
date: Mon, 05 Dec 2022 01:11:29 GMT
strict-transport-security: max-age=15768000
set-cookie: VCSADDYFIHLUNGF=thei9zuS; path=/; HttpOnly; Secure; SameSite=none
X-Firefox-Spdy: h2
|
|
| d2jtzd336hs8un.cloudfront.net/_next/static/chunks/804-13fd754e32aa16c3.js | 54.230.245.158 | 200 OK | 0 B |
URL HTTP/2d2jtzd336hs8un.cloudfront.net/_next/static/chunks/804-13fd754e32aa16c3.js IP54.230.245.158:0
GET /_next/static/chunks/804-13fd754e32aa16c3.js HTTP/1.1
Host: d2jtzd336hs8un.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://booking.hotelsparerhof.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Tue, 15 Nov 2022 13:34:03 GMT
last-modified: Wed, 07 Sep 2022 13:23:58 GMT
etag: W/"63189b6e-7319"
access-control-allow-origin: *
cache-control: public, max-age=31536000, immutable
strict-transport-security: max-age=31536000
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: N2tYtEkTgIyFxd2VxB--qP29MPa5ik-wtgWNFe7buOVV3I6LqzL29g==
age: 1683444
X-Firefox-Spdy: h2
|
|
| d2jtzd336hs8un.cloudfront.net/_next/static/chunks/818-2d46f7d1223300d3.js | 54.230.245.158 | 200 OK | 0 B |
URL HTTP/2d2jtzd336hs8un.cloudfront.net/_next/static/chunks/818-2d46f7d1223300d3.js IP54.230.245.158:0
GET /_next/static/chunks/818-2d46f7d1223300d3.js HTTP/1.1
Host: d2jtzd336hs8un.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://booking.hotelsparerhof.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Mon, 28 Nov 2022 15:47:45 GMT
last-modified: Mon, 28 Nov 2022 15:47:13 GMT
etag: W/"6384d801-5d13a"
access-control-allow-origin: *
cache-control: public, max-age=31536000, immutable
strict-transport-security: max-age=31536000
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: vy2xGltlLcfipdsVZZQ6RRtwHOX7z1uCJlJrelwgaBcqteJth1a2Qg==
age: 552222
X-Firefox-Spdy: h2
|
|
| hbe-api.kognitiv.com/banners | 135.125.240.149 | 200 OK | 0 B |
URL HTTP/2hbe-api.kognitiv.com/banners IP135.125.240.149:0
OPTIONS /banners HTTP/1.1
Host: hbe-api.kognitiv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://booking.hotelsparerhof.it/
Origin: https://booking.hotelsparerhof.it
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
status: 200 OK
access-control-allow-credentials: true
access-control-allow-origin: https://booking.hotelsparerhof.it
vary: Origin
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-headers: content-type
date: Mon, 05 Dec 2022 01:11:29 GMT
set-cookie: MGLH51CKJDVB=HBE7KSGFADL4; path=/; HttpOnly; Secure
cache-control: private
X-Firefox-Spdy: h2
|
|
| d2jtzd336hs8un.cloudfront.net/_next/static/chunks/234-5f3fb97a1b4a275f.js | 54.230.245.158 | 200 OK | 0 B |
URL HTTP/2d2jtzd336hs8un.cloudfront.net/_next/static/chunks/234-5f3fb97a1b4a275f.js IP54.230.245.158:0
GET /_next/static/chunks/234-5f3fb97a1b4a275f.js HTTP/1.1
Host: d2jtzd336hs8un.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://booking.hotelsparerhof.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Tue, 15 Nov 2022 14:08:22 GMT
last-modified: Tue, 15 Nov 2022 14:07:29 GMT
etag: W/"63739d21-70cc"
access-control-allow-origin: *
cache-control: public, max-age=31536000, immutable
strict-transport-security: max-age=31536000
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: IBNi-5ZJJjrULJ4JLzB-VqApBupKHoFf8qKJdZs_xpa7qJEDR2e9Fg==
age: 1681385
X-Firefox-Spdy: h2
|
|
| d2jtzd336hs8un.cloudfront.net/_next/static/chunks/38-7f41f4a9e2fe47a2.js | 54.230.245.158 | 200 OK | 0 B |
URL HTTP/2d2jtzd336hs8un.cloudfront.net/_next/static/chunks/38-7f41f4a9e2fe47a2.js IP54.230.245.158:0
GET /_next/static/chunks/38-7f41f4a9e2fe47a2.js HTTP/1.1
Host: d2jtzd336hs8un.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://booking.hotelsparerhof.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Tue, 15 Nov 2022 13:34:03 GMT
last-modified: Tue, 27 Sep 2022 13:45:54 GMT
etag: W/"6332fe92-2832"
access-control-allow-origin: *
cache-control: public, max-age=31536000, immutable
strict-transport-security: max-age=31536000
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: NU75siiRh4731ZQLBmM_LJHOxqyWWEZdAt3I_GwbxrBrZUzR6o_JEg==
age: 1683444
X-Firefox-Spdy: h2
|
|
| d2jtzd336hs8un.cloudfront.net/_next/static/chunks/928-20b3fd6334a5c778.js | 54.230.245.158 | 200 OK | 0 B |
URL HTTP/2d2jtzd336hs8un.cloudfront.net/_next/static/chunks/928-20b3fd6334a5c778.js IP54.230.245.158:0
GET /_next/static/chunks/928-20b3fd6334a5c778.js HTTP/1.1
Host: d2jtzd336hs8un.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://booking.hotelsparerhof.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Mon, 28 Nov 2022 15:47:45 GMT
last-modified: Mon, 28 Nov 2022 15:47:13 GMT
etag: W/"6384d801-12605"
access-control-allow-origin: *
cache-control: public, max-age=31536000, immutable
strict-transport-security: max-age=31536000
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: cWR6RfRWIJiyRAJJ7ZQ-H9XBdHeXZ6tWfzeUmKNR756_KQSU2yrtxA==
age: 552222
X-Firefox-Spdy: h2
|
|
| quality.seekda.com/events/ibe/viewOffers? | 135.125.240.141 | 200 OK | 0 B |
URL HTTP/2quality.seekda.com/events/ibe/viewOffers? IP135.125.240.141:0
POST /events/ibe/viewOffers? HTTP/1.1
Host: quality.seekda.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Cache-Control: no-cache
Content-Length: 1565
Origin: https://booking.hotelsparerhof.it
Connection: keep-alive
Referer: https://booking.hotelsparerhof.it/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-origin: https://booking.hotelsparerhof.it
access-control-allow-credentials: true
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: 0
x-frame-options: DENY
content-type: application/json
date: Mon, 05 Dec 2022 01:11:30 GMT
strict-transport-security: max-age=15768000
set-cookie: VCSADDYFIHLUNGF=thei9zuS; path=/; HttpOnly; Secure; SameSite=none
X-Firefox-Spdy: h2
|
|
| d2jtzd336hs8un.cloudfront.net/_next/static/chunks/framework-4774102d6f75bb1e.js | 54.230.245.158 | 200 OK | 0 B |
URL HTTP/2d2jtzd336hs8un.cloudfront.net/_next/static/chunks/framework-4774102d6f75bb1e.js IP54.230.245.158:0
GET /_next/static/chunks/framework-4774102d6f75bb1e.js HTTP/1.1
Host: d2jtzd336hs8un.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://booking.hotelsparerhof.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
date: Tue, 15 Nov 2022 13:34:03 GMT
last-modified: Tue, 03 May 2022 12:24:17 GMT
etag: W/"62711ef1-2640a"
access-control-allow-origin: *
cache-control: public, max-age=31536000, immutable
strict-transport-security: max-age=31536000
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: WRMUc2PAffuImjx5xtUHJXv0x9u2Xlbs3TbKUpoVu3W-ZQpcnFhUlQ==
age: 1683444
X-Firefox-Spdy: h2
|
|
| d2jtzd336hs8un.cloudfront.net/_next/static/chunks/55ba302e-56c033a647309a77.js | 54.230.245.158 | 200 OK | 0 B |
URL HTTP/2d2jtzd336hs8un.cloudfront.net/_next/static/chunks/55ba302e-56c033a647309a77.js IP54.230.245.158:0
GET /_next/static/chunks/55ba302e-56c033a647309a77.js HTTP/1.1
Host: d2jtzd336hs8un.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://booking.hotelsparerhof.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Tue, 15 Nov 2022 13:34:03 GMT
last-modified: Mon, 14 Nov 2022 12:48:16 GMT
etag: W/"63723910-100e3"
access-control-allow-origin: *
cache-control: public, max-age=31536000, immutable
strict-transport-security: max-age=31536000
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 3qk2-arbdx0hnJtLN3iEDyvhdxnekz_QZVohOhhrQB9tOn0FK_FpEQ==
age: 1683444
X-Firefox-Spdy: h2
|
|
| d2jtzd336hs8un.cloudfront.net/_next/static/chunks/pages/_app-064f454970a46d93.js | 54.230.245.158 | 200 OK | 0 B |
URL HTTP/2d2jtzd336hs8un.cloudfront.net/_next/static/chunks/pages/_app-064f454970a46d93.js IP54.230.245.158:0
GET /_next/static/chunks/pages/_app-064f454970a46d93.js HTTP/1.1
Host: d2jtzd336hs8un.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://booking.hotelsparerhof.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Mon, 28 Nov 2022 15:47:45 GMT
last-modified: Mon, 28 Nov 2022 15:47:13 GMT
etag: W/"6384d801-1b79e9"
access-control-allow-origin: *
cache-control: public, max-age=31536000, immutable
strict-transport-security: max-age=31536000
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: lrA9nwvnSXpJK94XTxjhoX5JAfvsBFSAOgdSkoHDooLl5dG1ehkqaQ==
age: 552222
X-Firefox-Spdy: h2
|
|
| d2jtzd336hs8un.cloudfront.net/_next/static/chunks/364-89bf8dd5b58b10a4.js | 54.230.245.158 | 200 OK | 0 B |
URL HTTP/2d2jtzd336hs8un.cloudfront.net/_next/static/chunks/364-89bf8dd5b58b10a4.js IP54.230.245.158:0
GET /_next/static/chunks/364-89bf8dd5b58b10a4.js HTTP/1.1
Host: d2jtzd336hs8un.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://booking.hotelsparerhof.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Mon, 28 Nov 2022 15:47:45 GMT
last-modified: Mon, 28 Nov 2022 15:47:03 GMT
etag: W/"6384d7f7-2236"
access-control-allow-origin: *
cache-control: public, max-age=31536000, immutable
strict-transport-security: max-age=31536000
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: uupA87VVS_8VT2hhe0KRsQ-dMohAT5y_UtC_IsPfviM8FKqfOn8YZw==
age: 552222
X-Firefox-Spdy: h2
|
|
| d2jtzd336hs8un.cloudfront.net/_next/static/chunks/c0a33b72-efbe3e99c4b6522e.js | 54.230.245.158 | 200 OK | 0 B |
URL HTTP/2d2jtzd336hs8un.cloudfront.net/_next/static/chunks/c0a33b72-efbe3e99c4b6522e.js IP54.230.245.158:0
GET /_next/static/chunks/c0a33b72-efbe3e99c4b6522e.js HTTP/1.1
Host: d2jtzd336hs8un.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://booking.hotelsparerhof.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Tue, 15 Nov 2022 13:34:03 GMT
last-modified: Tue, 03 May 2022 12:24:17 GMT
etag: W/"62711ef1-4c0a4"
access-control-allow-origin: *
cache-control: public, max-age=31536000, immutable
strict-transport-security: max-age=31536000
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Fh40v3MzA_9JykF5zR7cnQ16naeDDmKaF05-W8jg3-JzQ_iDQ6TF4A==
age: 1683444
X-Firefox-Spdy: h2
|
|
| d2jtzd336hs8un.cloudfront.net/_next/static/chunks/433-a2824426e6ccb54e.js | 54.230.245.158 | 200 OK | 0 B |
URL HTTP/2d2jtzd336hs8un.cloudfront.net/_next/static/chunks/433-a2824426e6ccb54e.js IP54.230.245.158:0
GET /_next/static/chunks/433-a2824426e6ccb54e.js HTTP/1.1
Host: d2jtzd336hs8un.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://booking.hotelsparerhof.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Tue, 15 Nov 2022 13:34:03 GMT
last-modified: Mon, 14 Nov 2022 12:48:39 GMT
etag: W/"63723927-42f15"
access-control-allow-origin: *
cache-control: public, max-age=31536000, immutable
strict-transport-security: max-age=31536000
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: OrauNwBfq9Cc-lBpGnW6rvpwLNm5ZjKwMsqDbFecp3jZMiOhWWM3kQ==
age: 1683444
X-Firefox-Spdy: h2
|
|
| d2jtzd336hs8un.cloudfront.net/_next/static/chunks/695-5ea418b3362d2010.js | 54.230.245.158 | 200 OK | 0 B |
URL HTTP/2d2jtzd336hs8un.cloudfront.net/_next/static/chunks/695-5ea418b3362d2010.js IP54.230.245.158:0
GET /_next/static/chunks/695-5ea418b3362d2010.js HTTP/1.1
Host: d2jtzd336hs8un.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://booking.hotelsparerhof.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Tue, 15 Nov 2022 13:34:03 GMT
last-modified: Wed, 07 Sep 2022 13:23:58 GMT
etag: W/"63189b6e-fd62"
access-control-allow-origin: *
cache-control: public, max-age=31536000, immutable
strict-transport-security: max-age=31536000
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: gk31EsQtD9LAgqK9EZnI7_TNbdede5b1FFuhl1FsmoAHHjuuvtgepA==
age: 1683444
X-Firefox-Spdy: h2
|
|
| d2jtzd336hs8un.cloudfront.net/_next/static/chunks/956-9885616c4f0e27cf.js | 54.230.245.158 | 200 OK | 0 B |
URL HTTP/2d2jtzd336hs8un.cloudfront.net/_next/static/chunks/956-9885616c4f0e27cf.js IP54.230.245.158:0
GET /_next/static/chunks/956-9885616c4f0e27cf.js HTTP/1.1
Host: d2jtzd336hs8un.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://booking.hotelsparerhof.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Tue, 15 Nov 2022 13:34:03 GMT
last-modified: Mon, 14 Nov 2022 12:48:16 GMT
etag: W/"63723910-1052d"
access-control-allow-origin: *
cache-control: public, max-age=31536000, immutable
strict-transport-security: max-age=31536000
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: UuO5N3RpRfGkK00RVZI9Bcj0AoU_KKmf8EKakyotm-gAcO25ap6mew==
age: 1683444
X-Firefox-Spdy: h2
|
|
| d2jtzd336hs8un.cloudfront.net/static/scripts/elastic-apm-rum.umd.min.js?checksum=e93c8d4d150530d83ee4ee385157b262 | 54.230.245.158 | 200 OK | 0 B |
URL HTTP/2d2jtzd336hs8un.cloudfront.net/static/scripts/elastic-apm-rum.umd.min.js?checksum=e93c8d4d150530d83ee4ee385157b262 IP54.230.245.158:0
GET /static/scripts/elastic-apm-rum.umd.min.js?checksum=e93c8d4d150530d83ee4ee385157b262 HTTP/1.1
Host: d2jtzd336hs8un.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://booking.hotelsparerhof.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
last-modified: Wed, 11 May 2022 16:35:36 GMT
access-control-allow-origin: *
content-encoding: gzip
strict-transport-security: max-age=15768000
date: Sun, 04 Dec 2022 11:44:04 GMT
etag: W/"627be5d8-f0b3"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: kEFy8lrvBLgq1xgyD7vY1jQJLPeM9CBS_ug2aQ1LVBIpSgVjtWNmZQ==
age: 48443
X-Firefox-Spdy: h2
|
|
| hbe-api.kognitiv.com/banners | 135.125.240.149 | 200 OK | 0 B |
URL HTTP/2hbe-api.kognitiv.com/banners IP135.125.240.149:0
POST /banners HTTP/1.1
Host: hbe-api.kognitiv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 185
Origin: https://booking.hotelsparerhof.it
Connection: keep-alive
Referer: https://booking.hotelsparerhof.it/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
status: 200 OK
access-control-allow-credentials: true
access-control-allow-origin: https://booking.hotelsparerhof.it
vary: Accept-Encoding, Origin, Accept-Encoding
date: Mon, 05 Dec 2022 01:11:30 GMT
etag: W/"24c-Re2c59UxBOnt0cl0JuZXApBkUJ4"
content-encoding: gzip
set-cookie: MGLH51CKJDVB=VEI1698VEKLN9; path=/; HttpOnly; Secure
X-Firefox-Spdy: h2
|
|
| booking.hotelsparerhof.it/static/bookingFlowCustomTracking.js | 135.125.240.140 | 200 OK | 0 B |
URL HTTP/2booking.hotelsparerhof.it/static/bookingFlowCustomTracking.js IP135.125.240.140:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /static/bookingFlowCustomTracking.js HTTP/1.1
Host: booking.hotelsparerhof.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://booking.hotelsparerhof.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Dec 2022 01:11:27 GMT
content-type: application/javascript
last-modified: Tue, 03 May 2022 12:24:30 GMT
vary: Accept-Encoding, Accept-Encoding
etag: W/"62711efe-11c"
access-control-allow-origin: *
content-encoding: gzip
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
|
|
| d2jtzd336hs8un.cloudfront.net/_next/static/chunks/0b7b90cd-2a28d1759dacf41f.js | 54.230.245.158 | 200 OK | 0 B |
URL HTTP/2d2jtzd336hs8un.cloudfront.net/_next/static/chunks/0b7b90cd-2a28d1759dacf41f.js IP54.230.245.158:0
GET /_next/static/chunks/0b7b90cd-2a28d1759dacf41f.js HTTP/1.1
Host: d2jtzd336hs8un.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://booking.hotelsparerhof.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Tue, 15 Nov 2022 13:34:03 GMT
last-modified: Tue, 03 May 2022 12:24:17 GMT
etag: W/"62711ef1-22c77"
access-control-allow-origin: *
cache-control: public, max-age=31536000, immutable
strict-transport-security: max-age=31536000
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ge8QXjUl4-3ug9i_05EEF6Hw6XGOgYXwsbCBtTsxwWcnXECOd9tsDg==
age: 1683444
X-Firefox-Spdy: h2
|
|
| d2jtzd336hs8un.cloudfront.net/_next/static/chunks/648-b7d007e5ee685d28.js | 54.230.245.158 | 200 OK | 0 B |
URL HTTP/2d2jtzd336hs8un.cloudfront.net/_next/static/chunks/648-b7d007e5ee685d28.js IP54.230.245.158:0
GET /_next/static/chunks/648-b7d007e5ee685d28.js HTTP/1.1
Host: d2jtzd336hs8un.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://booking.hotelsparerhof.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Mon, 28 Nov 2022 15:47:45 GMT
last-modified: Mon, 28 Nov 2022 15:47:03 GMT
etag: W/"6384d7f7-3b3e0"
access-control-allow-origin: *
cache-control: public, max-age=31536000, immutable
strict-transport-security: max-age=31536000
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: PhkllDaHElR05VGld8QUsyGyKaf1XxpEo7IN4Fcogv2gsTM1X6vhDA==
age: 552222
X-Firefox-Spdy: h2
|
|
| ibe.seekda.com/dsr/S000306/attribution?callback=skdtracking1670202686922399&cookie-enabled=true | 135.125.240.149 | 200 OK | 0 B |
URL HTTP/2ibe.seekda.com/dsr/S000306/attribution?callback=skdtracking1670202686922399&cookie-enabled=true IP135.125.240.149:0
GET /dsr/S000306/attribution?callback=skdtracking1670202686922399&cookie-enabled=true HTTP/1.1
Host: ibe.seekda.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://booking.hotelsparerhof.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: Apache-Coyote/1.1
content-type: application/javascript;charset=ISO-8859-1
content-encoding: gzip
vary: Accept-Encoding
date: Mon, 05 Dec 2022 01:11:29 GMT
set-cookie: ULTZCTLUCKO67=qwiuxs88; path=/; HttpOnly; Secure
cache-control: private
X-Firefox-Spdy: h2
|
|
| hbe-api.kognitiv.com/offers | 135.125.240.149 | 200 OK | 0 B |
URL HTTP/2hbe-api.kognitiv.com/offers IP135.125.240.149:0
OPTIONS /offers HTTP/1.1
Host: hbe-api.kognitiv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://booking.hotelsparerhof.it/
Origin: https://booking.hotelsparerhof.it
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
status: 200 OK
access-control-allow-credentials: true
access-control-allow-origin: https://booking.hotelsparerhof.it
vary: Origin
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-headers: content-type
date: Mon, 05 Dec 2022 01:11:29 GMT
set-cookie: MGLH51CKJDVB=HBE7KSGFADL4; path=/; HttpOnly; Secure
cache-control: private
X-Firefox-Spdy: h2
|
|
| u.mts-online.com/api/graphql/cm/u1043/1 | 76.76.21.98 | 200 OK | 0 B |
URL HTTP/2u.mts-online.com/api/graphql/cm/u1043/1 IP76.76.21.98:0
POST /api/graphql/cm/u1043/1 HTTP/1.1
Host: u.mts-online.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://booking.hotelsparerhof.it/
Content-Type: application/json
Origin: https://booking.hotelsparerhof.it
Content-Length: 670
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
content-encoding: br
content-type: application/json; charset=utf-8
date: Mon, 05 Dec 2022 01:11:31 GMT
etag: W/"b04-+5TSmdWF/GQ9TKWuXNjL1Ui3Rlc"
server: Vercel
strict-transport-security: max-age=63072000
x-matched-path: /api/graphql/[source]/[client]/[version]
x-vercel-cache: MISS
x-vercel-id: arn1::fra1::zqxxj-1670202691041-ec0eb9c3e6b5
X-Firefox-Spdy: h2
|
|
| d2jtzd336hs8un.cloudfront.net/_next/static/chunks/d099b070-221cabf5ffd73869.js | 54.230.245.158 | 200 OK | 0 B |
URL HTTP/2d2jtzd336hs8un.cloudfront.net/_next/static/chunks/d099b070-221cabf5ffd73869.js IP54.230.245.158:0
GET /_next/static/chunks/d099b070-221cabf5ffd73869.js HTTP/1.1
Host: d2jtzd336hs8un.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://booking.hotelsparerhof.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Tue, 15 Nov 2022 13:34:03 GMT
last-modified: Wed, 27 Jul 2022 15:16:14 GMT
etag: W/"62e156be-11876"
access-control-allow-origin: *
cache-control: public, max-age=31536000, immutable
strict-transport-security: max-age=31536000
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: K2o4gohmI3cWQlb1LTwe58MHfFGEj94ZcgGZuXrBBAYLzDpH1BlAYg==
age: 1683444
X-Firefox-Spdy: h2
|
|
| d2jtzd336hs8un.cloudfront.net/_next/static/ehIawmgvLPiidfXQEXmP0/_middlewareManifest.js | 54.230.245.158 | 200 OK | 0 B |
URL HTTP/2d2jtzd336hs8un.cloudfront.net/_next/static/ehIawmgvLPiidfXQEXmP0/_middlewareManifest.js IP54.230.245.158:0
GET /_next/static/ehIawmgvLPiidfXQEXmP0/_middlewareManifest.js HTTP/1.1
Host: d2jtzd336hs8un.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://booking.hotelsparerhof.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Mon, 28 Nov 2022 16:02:09 GMT
last-modified: Mon, 28 Nov 2022 16:01:42 GMT
etag: W/"6384db66-5c"
access-control-allow-origin: *
cache-control: public, max-age=31536000, immutable
strict-transport-security: max-age=31536000
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: kxDaC3pmgBvVs1uzPIYQr1i-l5jqk5RojFb69bJ5S2UUmlzxjp5drg==
age: 551358
X-Firefox-Spdy: h2
|
|
| static.seekda.com/widgets/tracking-api/js/tracking-api.min.js?R9f343f5a1880f9815284e9ef9423a193ba6976d2 | 135.125.240.147 | 200 OK | 0 B |
URL HTTP/2static.seekda.com/widgets/tracking-api/js/tracking-api.min.js?R9f343f5a1880f9815284e9ef9423a193ba6976d2 IP135.125.240.147:0
GET /widgets/tracking-api/js/tracking-api.min.js?R9f343f5a1880f9815284e9ef9423a193ba6976d2 HTTP/1.1
Host: static.seekda.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://booking.hotelsparerhof.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Dec 2022 01:11:29 GMT
content-type: application/javascript
content-security-policy: block-all-mixed-content
etag: W/"3868633285d5ac63f9bd0ba84f051796"
last-modified: Thu, 13 Oct 2022 12:11:40 GMT
vary: Accept-Encoding, Origin, Accept-Encoding
x-amz-replication-status: COMPLETED
x-amz-request-id: 172DC07F2FB900B6
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-amz-version-id: 01da0275-ff14-45b1-acdb-50ac57ea90aa
content-encoding: gzip
strict-transport-security: max-age=15768000
server: Kognitiv
set-cookie: WEIU3SASDIO=5e60c02c30b5580; path=/; HttpOnly; Secure; SameSite=none
cache-control: max-age=43200, private
X-Firefox-Spdy: h2
|
|
| d2jtzd336hs8un.cloudfront.net/_next/static/chunks/979-fc9d9c0ee5b8eeaa.js | 54.230.245.158 | 200 OK | 0 B |
URL HTTP/2d2jtzd336hs8un.cloudfront.net/_next/static/chunks/979-fc9d9c0ee5b8eeaa.js IP54.230.245.158:0
GET /_next/static/chunks/979-fc9d9c0ee5b8eeaa.js HTTP/1.1
Host: d2jtzd336hs8un.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://booking.hotelsparerhof.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Tue, 15 Nov 2022 13:34:03 GMT
last-modified: Wed, 07 Sep 2022 13:23:35 GMT
etag: W/"63189b57-7ff8"
access-control-allow-origin: *
cache-control: public, max-age=31536000, immutable
strict-transport-security: max-age=31536000
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: C1xiWgz8cpM-3UUtdyO5r6mG7nBGefjwxNHmsjT4Cs8zejcOAWrGhQ==
age: 1683444
X-Firefox-Spdy: h2
|
|
| hbe-api.kognitiv.com/unavailable-days | 135.125.240.149 | 200 OK | 0 B |
URL HTTP/2hbe-api.kognitiv.com/unavailable-days IP135.125.240.149:0
OPTIONS /unavailable-days HTTP/1.1
Host: hbe-api.kognitiv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://booking.hotelsparerhof.it/
Origin: https://booking.hotelsparerhof.it
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
status: 200 OK
access-control-allow-credentials: true
access-control-allow-origin: https://booking.hotelsparerhof.it
vary: Origin
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-headers: content-type
date: Mon, 05 Dec 2022 01:11:29 GMT
set-cookie: MGLH51CKJDVB=VEI1698VEKLN9; path=/; HttpOnly; Secure
cache-control: private
X-Firefox-Spdy: h2
|
|
| booking.hotelsparerhof.it/ | 135.125.240.140 | 200 OK | 0 B |
URL HTTP/2booking.hotelsparerhof.it/ IP135.125.240.140:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET / HTTP/1.1
Host: booking.hotelsparerhof.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Mon, 05 Dec 2022 01:11:27 GMT
content-type: text/html; charset=utf-8
status: 200 OK
cache-control: private, no-cache, no-store, max-age=0, must-revalidate
vary: Accept-Encoding
content-encoding: gzip
etag: "37e11-SvgXkryz7SkZGx1AnrYDQ1SQeI4"
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self' *.kognitiv.com
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
|
|
| d2jtzd336hs8un.cloudfront.net/_next/static/chunks/main-1f7489bfb2b58832.js | 54.230.245.158 | 200 OK | 0 B |
URL HTTP/2d2jtzd336hs8un.cloudfront.net/_next/static/chunks/main-1f7489bfb2b58832.js IP54.230.245.158:0
GET /_next/static/chunks/main-1f7489bfb2b58832.js HTTP/1.1
Host: d2jtzd336hs8un.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://booking.hotelsparerhof.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Tue, 15 Nov 2022 13:34:03 GMT
last-modified: Tue, 27 Sep 2022 13:45:30 GMT
etag: W/"6332fe7a-23bda"
access-control-allow-origin: *
cache-control: public, max-age=31536000, immutable
strict-transport-security: max-age=31536000
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: LQU4Xj73koO1DQaZbTfWzzx9f1G6iarLR24bGW6wUH0f6ImdXArfcg==
age: 1683444
X-Firefox-Spdy: h2
|
|
| d2jtzd336hs8un.cloudfront.net/_next/static/chunks/333-f51e7b20f7750937.js | 54.230.245.158 | 200 OK | 0 B |
URL HTTP/2d2jtzd336hs8un.cloudfront.net/_next/static/chunks/333-f51e7b20f7750937.js IP54.230.245.158:0
GET /_next/static/chunks/333-f51e7b20f7750937.js HTTP/1.1
Host: d2jtzd336hs8un.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://booking.hotelsparerhof.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Mon, 28 Nov 2022 15:47:45 GMT
last-modified: Mon, 28 Nov 2022 15:47:03 GMT
etag: W/"6384d7f7-324cb"
access-control-allow-origin: *
cache-control: public, max-age=31536000, immutable
strict-transport-security: max-age=31536000
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: EDDlAwdUR7R_LsakvL9IABweHqi7vAadGm-dNokos0ZnpVusivLl0g==
age: 552222
X-Firefox-Spdy: h2
|
|
| d2jtzd336hs8un.cloudfront.net/_next/static/chunks/302-7b32094aede33cd2.js | 54.230.245.158 | 200 OK | 0 B |
URL HTTP/2d2jtzd336hs8un.cloudfront.net/_next/static/chunks/302-7b32094aede33cd2.js IP54.230.245.158:0
GET /_next/static/chunks/302-7b32094aede33cd2.js HTTP/1.1
Host: d2jtzd336hs8un.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://booking.hotelsparerhof.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Tue, 15 Nov 2022 13:34:03 GMT
last-modified: Mon, 14 Nov 2022 12:48:16 GMT
etag: W/"63723910-52fd"
access-control-allow-origin: *
cache-control: public, max-age=31536000, immutable
strict-transport-security: max-age=31536000
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 35zry9JvnUI_k-IDhqcygi4gFJL305CfrTDniBVIBxg2Vxz9NDQ3lQ==
age: 1683444
X-Firefox-Spdy: h2
|
|
| d2jtzd336hs8un.cloudfront.net/_next/static/ehIawmgvLPiidfXQEXmP0/_ssgManifest.js | 54.230.245.158 | 200 OK | 0 B |
URL HTTP/2d2jtzd336hs8un.cloudfront.net/_next/static/ehIawmgvLPiidfXQEXmP0/_ssgManifest.js IP54.230.245.158:0
GET /_next/static/ehIawmgvLPiidfXQEXmP0/_ssgManifest.js HTTP/1.1
Host: d2jtzd336hs8un.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://booking.hotelsparerhof.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Mon, 28 Nov 2022 16:02:09 GMT
last-modified: Mon, 28 Nov 2022 16:01:42 GMT
etag: W/"6384db66-4d"
access-control-allow-origin: *
cache-control: public, max-age=31536000, immutable
strict-transport-security: max-age=31536000
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: vGBRVxQSBFVid3pcA2nPKFM7jC_lKfYHklLNrMXH7ZZP2Y9gOLU9Nw==
age: 551358
X-Firefox-Spdy: h2
|
|
| d2jtzd336hs8un.cloudfront.net/_next/static/chunks/373-95390337f262d59f.js | 54.230.245.158 | 200 OK | 0 B |
URL HTTP/2d2jtzd336hs8un.cloudfront.net/_next/static/chunks/373-95390337f262d59f.js IP54.230.245.158:0
GET /_next/static/chunks/373-95390337f262d59f.js HTTP/1.1
Host: d2jtzd336hs8un.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://booking.hotelsparerhof.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Tue, 15 Nov 2022 13:34:03 GMT
last-modified: Mon, 14 Nov 2022 12:48:16 GMT
etag: W/"63723910-c616"
access-control-allow-origin: *
cache-control: public, max-age=31536000, immutable
strict-transport-security: max-age=31536000
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: xPTZCg-HVC3hsS5eBnfDz3UrH98T7aa3dT0U6NNjbEhyxv7Y1LDs1A==
age: 1683444
X-Firefox-Spdy: h2
|
|
| d2jtzd336hs8un.cloudfront.net/_next/static/chunks/99d407f1-740efc49d6ddee4e.js | 54.230.245.158 | 200 OK | 0 B |
URL HTTP/2d2jtzd336hs8un.cloudfront.net/_next/static/chunks/99d407f1-740efc49d6ddee4e.js IP54.230.245.158:0
GET /_next/static/chunks/99d407f1-740efc49d6ddee4e.js HTTP/1.1
Host: d2jtzd336hs8un.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://booking.hotelsparerhof.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Mon, 28 Nov 2022 15:47:45 GMT
last-modified: Mon, 28 Nov 2022 15:47:03 GMT
etag: W/"6384d7f7-5dc71"
access-control-allow-origin: *
cache-control: public, max-age=31536000, immutable
strict-transport-security: max-age=31536000
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: yElBXK3zjbh83uaxFdI0z4qSzLP-5fgx5Nhz8imredqEAp_G0Dfyvw==
age: 552222
X-Firefox-Spdy: h2
|
|
| d2jtzd336hs8un.cloudfront.net/_next/static/chunks/7e0f675c-7628088f2378fdb4.js | 54.230.245.158 | 200 OK | 0 B |
URL HTTP/2d2jtzd336hs8un.cloudfront.net/_next/static/chunks/7e0f675c-7628088f2378fdb4.js IP54.230.245.158:0
GET /_next/static/chunks/7e0f675c-7628088f2378fdb4.js HTTP/1.1
Host: d2jtzd336hs8un.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://booking.hotelsparerhof.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Tue, 15 Nov 2022 13:34:03 GMT
last-modified: Tue, 27 Sep 2022 13:45:30 GMT
etag: W/"6332fe7a-cabd"
access-control-allow-origin: *
cache-control: public, max-age=31536000, immutable
strict-transport-security: max-age=31536000
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: DWB9yXtpjkikkQiSqbfEGkL0GN0qoU80PNgETx8R4N30n2lDzEvnuA==
age: 1683444
X-Firefox-Spdy: h2
|
|
| d2jtzd336hs8un.cloudfront.net/_next/static/chunks/659-a75792a0129c3b75.js | 54.230.245.158 | 200 OK | 0 B |
URL HTTP/2d2jtzd336hs8un.cloudfront.net/_next/static/chunks/659-a75792a0129c3b75.js IP54.230.245.158:0
GET /_next/static/chunks/659-a75792a0129c3b75.js HTTP/1.1
Host: d2jtzd336hs8un.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://booking.hotelsparerhof.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Tue, 15 Nov 2022 13:34:03 GMT
last-modified: Mon, 14 Nov 2022 12:48:39 GMT
etag: W/"63723927-42543"
access-control-allow-origin: *
cache-control: public, max-age=31536000, immutable
strict-transport-security: max-age=31536000
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: j8xisypakwC2Urn98fnudMkGZo75Ike8HsClWQWI10tCQ9JrHhkbCw==
age: 1683444
X-Firefox-Spdy: h2
|
|
0.0.0.0