www.cloud-site.biz/
195.110.124.188200 OK 787 B IP 195.110.124.188:0
ASN #39729 Register S.p.A.
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash ca4ef63b5fb334e59394f7c7c0204b6d
ede7892373755a79cbd258d3e1326a1959685209
4160233e872e4587d718c37e5b2d3ad9bb83c2cbe2a2727b4480763dd44050f5
Analyzer Verdict Alert quad9 Sinkholed
GET / HTTP/1.1
Host: www.cloud-site.biz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Sat, 12 Nov 2022 09:24:26 GMT
Server: Apache
Last-Modified: Thu, 27 Oct 2016 16:18:07 GMT
Accept-Ranges: bytes
Content-Length: 787
Connection: close
Content-Type: text/html
Content-Language: it
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 3d0727e32cd103ddd4b73f28c81758aa
197a7bf43d63723fc532c23c6dced68d5cc36652
d3f75d03561d6a47d19370292e821a86e58381466f0c69386a21175de55882ff
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D3F75D03561D6A47D19370292E821A86E58381466F0C69386A21175DE55882FF"
Last-Modified: Fri, 11 Nov 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17572
Expires: Sat, 12 Nov 2022 14:17:18 GMT
Date: Sat, 12 Nov 2022 09:24:26 GMT
Connection: keep-alive
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 4edf853c470fcec0ab277c78527f3c2d
de93530ce15337e671c488d9fe05e7091d4956f0
b9d7976b398b1243ff8a571ddd3975d3a1317d69101061bdb1a755b3b56620e6
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1735
Cache-Control: max-age=92156
Content-Type: application/ocsp-response
Date: Sat, 12 Nov 2022 09:24:26 GMT
Etag: "636e247f-1d7"
Expires: Sun, 13 Nov 2022 11:00:22 GMT
Last-Modified: Fri, 11 Nov 2022 10:31:27 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash a8391107bfc5e4673e8a706f90f63768
5295ed0b1cb8bad4d3e851049acc7f0270937d12
ed5c27510100ffc4481be474ebcb020d147c645beb110604d5284eeeb8b97c02
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "ED5C27510100FFC4481BE474EBCB020D147C645BEB110604D5284EEEB8B97C02"
Last-Modified: Fri, 11 Nov 2022 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7922
Expires: Sat, 12 Nov 2022 11:36:28 GMT
Date: Sat, 12 Nov 2022 09:24:26 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
34.102.187.140200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 4736bac84ca28f2b1e961159fb4ea098
1319612979f53896fcfeacd4215c2715d4951e4c
5e81213e111ddf68c7f884f72b4e06fc4dc95eb902c3cf0762236b2418840dba
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Retry-After, Alert, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 12 Nov 2022 08:44:09 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 2417
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: lMAD8DICz/Nhe3bnjqZ1qn9e8+lT4fqtIJlruJJYsr3+zb+9sZJmx0HD/MmUzUpHPsT90IMlSig=
x-amz-request-id: EX5VZ5S8WET8PV1V
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 12 Nov 2022 08:50:11 GMT
age: 2055
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 12 Nov 2022 09:24:26 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
www.cloud-site.biz/favicon.ico
195.110.124.188404 Not Found 209 B URL HTTP/1.1 www.cloud-site.biz/favicon.ico
IP 195.110.124.188:0
ASN #39729 Register S.p.A.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 18ffb59b61525f781cf9251045be575d
bd7318b00b15b7a1c8a48524419fa2e5c27a5b6d
b6682cab65d3243b5b75efb7279dbf49491957484780f2ba0a87632cc0e25642
Analyzer Verdict Alert quad9 Sinkholed
GET /favicon.ico HTTP/1.1
Host: www.cloud-site.biz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cloud-site.biz/
HTTP/1.1 404 Not Found
Date: Sat, 12 Nov 2022 09:24:26 GMT
Server: Apache
Content-Length: 209
Connection: close
Content-Type: text/html; charset=iso-8859-1
courtesy.register.it/index.html
195.110.124.148302 Found 24 B URL HTTP/1.1 courtesy.register.it/index.html
IP 195.110.124.148:0
ASN #39729 Register S.p.A.
Hash 383279986f3168f37e8a9f4610cd248b
dbd64fa31f303f0162584b3068ea98ad64740cd8
652bc94d77c436a047679916304dc74547418b0d1f5853cf8a0615d78f6742bd
GET /index.html HTTP/1.1
Host: courtesy.register.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.cloud-site.biz/
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Date: Sat, 12 Nov 2022 09:24:26 GMT
Server: Apache
Cache-Control: no-cache, must-revalidate
Expires: Sat, 26 Jul 1997 05:00:00 GMT
Location: https://www.register.it/pp-dr/?lang=en&a=b&host=Y2xvdWQtc2l0ZS5iaXo=
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 24
Connection: close
Content-Type: text/html
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
34.102.187.140200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Cache-Control, Pragma, Last-Modified, ETag, Alert, Backoff, Content-Type, Retry-After, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 12 Nov 2022 08:44:48 GMT
cache-control: public,max-age=3600
age: 2379
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.usertrust.com/
172.64.155.188200 OK 2.2 kB IP 172.64.155.188:0
Hash 799d88a6357bc1890b6359a48eead80c
ba2ededbe3e290514b1f6819b35b706a76183cbe
71982e25e2603ac18cc63195894bcfbc7ac394bae98041492927bc2493b92052
POST / HTTP/1.1
Host: ocsp.usertrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 12 Nov 2022 09:24:27 GMT
Content-Type: application/ocsp-response
Content-Length: 2236
Connection: keep-alive
Last-Modified: Wed, 09 Nov 2022 10:12:16 GMT
Expires: Wed, 16 Nov 2022 10:12:15 GMT
Etag: "ba2ededbe3e290514b1f6819b35b706a76183cbe"
Cache-Control: max-age=603211,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: HIT
Age: 538
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 768e36f61d69b511-OSL
ocsp.sectigo.com/
104.18.32.68200 OK 471 B IP 104.18.32.68:0
Hash 1f040a125b3d56e508794253b028e001
ffdd6fcdb8c8b452cac329bd401544e7fc5d53bd
5b2bece61510e6cc5462aa45aa51dd4f1ad3675b0ef65834d396167b96903c1c
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 12 Nov 2022 09:24:27 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Wed, 09 Nov 2022 18:50:49 GMT
Expires: Wed, 16 Nov 2022 18:50:48 GMT
Etag: "ffdd6fcdb8c8b452cac329bd401544e7fc5d53bd"
Cache-Control: max-age=378980,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 768e36f628410b59-OSL
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash f7ff606fbc8634c858bbc04b69f55cf6
2441de2cba649239efd0dae7a878d7ef2245c0b4
95154e0dbb7e827b8f893cc141f986c29634ead618256470d753429aa65a0548
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2848
Cache-Control: max-age=88193
Content-Type: application/ocsp-response
Date: Sat, 12 Nov 2022 09:24:27 GMT
Etag: "636e10ac-1d7"
Expires: Sun, 13 Nov 2022 09:54:20 GMT
Last-Modified: Fri, 11 Nov 2022 09:06:52 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
52.39.57.61101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 52.39.57.61:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: J1m7yqLigXSJogb9+3KfiQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: CHp6nXbNwhzaPjvl4b2aIxtcYHs=
www.register.it/pp-dr/?lang=en&a=b&host=Y2xvdWQtc2l0ZS5iaXo=
81.88.58.193200 OK 7.2 kB URL HTTP/1.1 www.register.it/pp-dr/?lang=en&a=b&host=Y2xvdWQtc2l0ZS5iaXo=
IP 81.88.58.193:0
ASN #39729 Register S.p.A.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1820), with CRLF, LF line terminators
Hash 0733b9c2f0f98f33a7ae779c10210d62
9d432ddf739f157850787075ddd1f44680e32021
6960d6e64238e335317681868c0d732dc21ccca86bafd877517b3d677ab2a493
GET /pp-dr/?lang=en&a=b&host=Y2xvdWQtc2l0ZS5iaXo= HTTP/1.1
Host: www.register.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.cloud-site.biz/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: frame
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Content-Type: text/html; charset=UTF-8
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Last-Modified: Thu, 17 Nov 2016 14:09:13 GMT
Link: <https://www.register.it/wp-json/>; rel="https://api.w.org/", <https://www.register.it/wp-json/wp/v2/pages/8355>; rel="alternate"; type="application/json", <https://www.register.it/?p=8355&lang=en>; rel=shortlink
Pragma: public
Strict-Transport-Security: max-age=15768000;
Content-Encoding: gzip
Content-Length: 7167
Accept-Ranges: bytes
Date: Sat, 12 Nov 2022 09:24:27 GMT
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash 29cf24fffeae78d5353f9bcac723cd77
99afde46b1597018df2b7391531788532b450bab
a4e2fbb787fe850c51e1d5c0f2c58353fed94d3363484f2ce22475c84afdee81
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6196
Cache-Control: max-age=170416
Content-Type: application/ocsp-response
Date: Sat, 12 Nov 2022 09:24:27 GMT
Etag: "636f44c7-117"
Expires: Mon, 14 Nov 2022 08:44:43 GMT
Last-Modified: Sat, 12 Nov 2022 07:01:27 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash 29cf24fffeae78d5353f9bcac723cd77
99afde46b1597018df2b7391531788532b450bab
a4e2fbb787fe850c51e1d5c0f2c58353fed94d3363484f2ce22475c84afdee81
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6196
Cache-Control: max-age=170416
Content-Type: application/ocsp-response
Date: Sat, 12 Nov 2022 09:24:27 GMT
Etag: "636f44c7-117"
Expires: Mon, 14 Nov 2022 08:44:43 GMT
Last-Modified: Sat, 12 Nov 2022 07:01:27 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash 29cf24fffeae78d5353f9bcac723cd77
99afde46b1597018df2b7391531788532b450bab
a4e2fbb787fe850c51e1d5c0f2c58353fed94d3363484f2ce22475c84afdee81
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6196
Cache-Control: max-age=170416
Content-Type: application/ocsp-response
Date: Sat, 12 Nov 2022 09:24:27 GMT
Etag: "636f44c7-117"
Expires: Mon, 14 Nov 2022 08:44:43 GMT
Last-Modified: Sat, 12 Nov 2022 07:01:27 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 279
www.register.it/wp-content/plugins/bwp-minify/min/?f=wp-includes/css/dist/block-library/style.min.css,wp-content/themes/dada/style.css,wp-content/themes/dada-register-child/style.css,wp-content/themes/dada/asset/css/dadaiconfont.css,wp-content/plugins/ht-knowledge-base/css/hkb-style.css
81.88.58.193200 OK 39 kB URL HTTP/1.1 www.register.it/wp-content/plugins/bwp-minify/min/?f=wp-includes/css/dist/block-library/style.min.css,wp-content/themes/dada/style.css,wp-content/themes/dada-register-child/style.css,wp-content/themes/dada/asset/css/dadaiconfont.css,wp-content/plugins/ht-knowledge-base/css/hkb-style.css
IP 81.88.58.193:0
ASN #39729 Register S.p.A.
File type Unicode text, UTF-8 text, with very long lines (29698)
Hash 5a40c9c6261729a2ca04ae3e82013dfa
55f5313de9fca5d2321dd897273c90b39414ce26
b2095da7488bc2e1d933ff8115c27f011c8e922cc81885cfa109b5ad185f57ec
GET /wp-content/plugins/bwp-minify/min/?f=wp-includes/css/dist/block-library/style.min.css,wp-content/themes/dada/style.css,wp-content/themes/dada-register-child/style.css,wp-content/themes/dada/asset/css/dadaiconfont.css,wp-content/plugins/ht-knowledge-base/css/hkb-style.css HTTP/1.1
Host: www.register.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.register.it/pp-dr/?lang=en&a=b&host=Y2xvdWQtc2l0ZS5iaXo=
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Content-Type: text/css; charset=utf-8
Expires: Fri, 11 Nov 2022 12:06:46 GMT
Vary: Accept-Encoding
Last-Modified: Wed, 19 Oct 2022 10:04:53 GMT
Pragma: public
Strict-Transport-Security: max-age=15768000;
Cache-Control: max-age=3600, public
X-Frame-Options: SAMEORIGIN
Content-Encoding: gzip
Content-Length: 39204
Accept-Ranges: bytes
Date: Sat, 12 Nov 2022 09:24:27 GMT
code.jquery.com/jquery-migrate-1.4.0.min.js?ver=1.4.0
69.16.175.42200 OK 3.9 kB URL HTTP/2 code.jquery.com/jquery-migrate-1.4.0.min.js?ver=1.4.0
IP 69.16.175.42:0
File type ASCII text, with very long lines (9535)
Hash ecc013140f61a0669d8011c3dc34eb5d
f4caefb2a7b21b44ec3198fe22c5ffa39f2a124c
20f6a81ad924e778e9a060ef4af60e024f9481e087849ca88216fdc8fe708fa0
GET /jquery-migrate-1.4.0.min.js?ver=1.4.0 HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.register.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 12 Nov 2022 09:24:27 GMT
content-encoding: gzip
content-length: 3885
content-type: application/javascript; charset=utf-8
last-modified: Fri, 20 Aug 2021 17:47:53 GMT
accept-ranges: bytes
server: nginx
etag: W/"611feac9-25a0"
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-hw: 1668245067.dop216.sk1.t,1668245067.cds067.sk1.hn,1668245067.cds212.sk1.c
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.35200 OK 472 B IP 142.250.74.35:0
Hash 4b46bbcd35c85c4678b0e3e409bba3bc
bb0705335e28414345ad5fcdd61104cf2fbbbbc4
6c3df7e6d0a8491fe24c03df2ccba059ba2f84155a680a4a22f217d3870cff95
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 12 Nov 2022 09:24:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash 29cf24fffeae78d5353f9bcac723cd77
99afde46b1597018df2b7391531788532b450bab
a4e2fbb787fe850c51e1d5c0f2c58353fed94d3363484f2ce22475c84afdee81
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6196
Cache-Control: max-age=170416
Content-Type: application/ocsp-response
Date: Sat, 12 Nov 2022 09:24:27 GMT
Etag: "636f44c7-117"
Expires: Mon, 14 Nov 2022 08:44:43 GMT
Last-Modified: Sat, 12 Nov 2022 07:01:27 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 279
code.jquery.com/jquery-1.12.3.min.js?ver=1.12.3
69.16.175.42200 OK 34 kB URL HTTP/2 code.jquery.com/jquery-1.12.3.min.js?ver=1.12.3
IP 69.16.175.42:0
File type ASCII text, with very long lines (32029)
Hash beaa31f7f88eb05cb5e5bf01ce96dc18
4556f88a741898c3b87c39f22c7dae1a19c8c23b
b9b4822df88f4e406f7533efac270146997e0fb0e5b0bd58789e63a04eeda671
GET /jquery-1.12.3.min.js?ver=1.12.3 HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.register.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 12 Nov 2022 09:24:27 GMT
content-encoding: gzip
content-length: 33773
content-type: application/javascript; charset=utf-8
last-modified: Fri, 20 Aug 2021 17:47:53 GMT
accept-ranges: bytes
server: nginx
etag: W/"611feac9-17b9c"
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-hw: 1668245067.dop216.sk1.t,1668245067.cds067.sk1.hn,1668245067.cds202.sk1.c
X-Firefox-Spdy: h2
www.register.it/_css/base_buttons.css
81.88.58.193200 OK 3.7 kB URL HTTP/1.1 www.register.it/_css/base_buttons.css
IP 81.88.58.193:0
ASN #39729 Register S.p.A.
File type ASCII text, with CRLF line terminators
Hash dcaf52796622f4468439b733ee966de2
9e6c27e1bb782454eec54a3c0ab9ee45d49ccde5
45fb84ac772e0079ca28233d13331f69508b87a457f24cb46abdac63dff43775
GET /_css/base_buttons.css HTTP/1.1
Host: www.register.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.register.it/wp-content/plugins/bwp-minify/min/?f=wp-includes/css/dist/block-library/style.min.css,wp-content/themes/dada/style.css,wp-content/themes/dada-register-child/style.css,wp-content/themes/dada/asset/css/dadaiconfont.css,wp-content/plugins/ht-knowledge-base/css/hkb-style.css
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: Apache
Strict-Transport-Security: max-age=15768000;
Content-Security-Policy: frame-ancestors 'self' https://*.register.it/
Vary: X-Forwarded-Proto,Accept-Encoding
Last-Modified: Fri, 16 Sep 2022 14:15:19 GMT
ETag: "6f5ccf17-55d9-5e8cbfde1ebc0"
Content-Encoding: gzip
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET,PUT,POST,DELETE
X-Frame-Options: SAMEORIGIN
Content-Type: text/css
Content-Length: 3730
Accept-Ranges: bytes, bytes
Date: Sat, 12 Nov 2022 09:24:27 GMT
ocsp.pki.goog/gts1c3
142.250.74.35200 OK 472 B IP 142.250.74.35:0
Hash 4b46bbcd35c85c4678b0e3e409bba3bc
bb0705335e28414345ad5fcdd61104cf2fbbbbc4
6c3df7e6d0a8491fe24c03df2ccba059ba2f84155a680a4a22f217d3870cff95
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 12 Nov 2022 09:24:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.register.it/wp-content/themes/dada/asset/js/lib/jquery.cookie.js
81.88.58.193200 OK 1.5 kB URL HTTP/1.1 www.register.it/wp-content/themes/dada/asset/js/lib/jquery.cookie.js
IP 81.88.58.193:0
ASN #39729 Register S.p.A.
Hash 6cf4dd81cfb6e636470374d748f3ec63
9b8521b3f1287dbfb939c466b917094bde16fbf3
44031f5cbe2c85d10d7cb1d2fc91eb602e12658988c7a78971902521ea984a15
GET /wp-content/themes/dada/asset/js/lib/jquery.cookie.js HTTP/1.1
Host: www.register.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.register.it/pp-dr/?lang=en&a=b&host=Y2xvdWQtc2l0ZS5iaXo=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/javascript
Last-Modified: Wed, 19 Oct 2022 10:04:51 GMT
ETag: W/"634fcbc3-c38"
Cache-Control: max-age=31536000, max-age=31536000, public
Expires: Sat, 11 Nov 2023 11:06:46 GMT
Pragma: public
Strict-Transport-Security: max-age=15768000;
X-Frame-Options: SAMEORIGIN
Content-Encoding: gzip
Content-Length: 1456
Accept-Ranges: bytes
Date: Sat, 12 Nov 2022 09:24:28 GMT
www.register.it/wp-content/plugins/bwp-minify/min/?f=wp-content/plugins/svg-support/js/min/svgs-inline-min.js,wp-content/plugins/sitepress-multilingual-cms/templates/language-switchers/legacy-dropdown/script.min.js,wp-content/themes/dada/asset/js/dada-marketing-automation.js,wp-content/themes/dada/asset/js/dada-tracking-standalone.js
81.88.58.193200 OK 2.5 kB URL HTTP/1.1 www.register.it/wp-content/plugins/bwp-minify/min/?f=wp-content/plugins/svg-support/js/min/svgs-inline-min.js,wp-content/plugins/sitepress-multilingual-cms/templates/language-switchers/legacy-dropdown/script.min.js,wp-content/themes/dada/asset/js/dada-marketing-automation.js,wp-content/themes/dada/asset/js/dada-tracking-standalone.js
IP 81.88.58.193:0
ASN #39729 Register S.p.A.
File type ASCII text, with very long lines (1171)
Hash 0394fa330ca9b6e0a6ee92172678052c
2e73a630aa26d1e42c4a8871967d05a5fd674cb9
41ba577ca76842e074b27afc1f75de221b73ba4c3a7cae0adac2196c4884f952
GET /wp-content/plugins/bwp-minify/min/?f=wp-content/plugins/svg-support/js/min/svgs-inline-min.js,wp-content/plugins/sitepress-multilingual-cms/templates/language-switchers/legacy-dropdown/script.min.js,wp-content/themes/dada/asset/js/dada-marketing-automation.js,wp-content/themes/dada/asset/js/dada-tracking-standalone.js HTTP/1.1
Host: www.register.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.register.it/pp-dr/?lang=en&a=b&host=Y2xvdWQtc2l0ZS5iaXo=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/x-javascript; charset=utf-8
Expires: Fri, 11 Nov 2022 12:06:55 GMT
Vary: Accept-Encoding
Last-Modified: Wed, 19 Oct 2022 10:04:52 GMT
Pragma: public
Strict-Transport-Security: max-age=15768000;
Cache-Control: max-age=3600, public
X-Frame-Options: SAMEORIGIN
Content-Length: 2473
Accept-Ranges: bytes
Date: Sat, 12 Nov 2022 09:24:28 GMT
www.register.it/wp-content/plugins/bwp-minify/min/?f=wp-content/plugins/wpml-cms-nav/res/css/cms-navigation-base.css,wp-content/plugins/wpml-cms-nav/res/css/cms-navigation.css
81.88.58.193200 OK 1.1 kB URL HTTP/1.1 www.register.it/wp-content/plugins/bwp-minify/min/?f=wp-content/plugins/wpml-cms-nav/res/css/cms-navigation-base.css,wp-content/plugins/wpml-cms-nav/res/css/cms-navigation.css
IP 81.88.58.193:0
ASN #39729 Register S.p.A.
File type ASCII text, with very long lines (362)
Hash 6fb4b8de4b09bc2a14caeebc05bfa3e5
1ae4edcd60a985b7d0bb423fe6563695ef112bba
be455cc56f746001cd449af5ffcfe40d2e9d6df8696382fb66728f2de7713a8c
GET /wp-content/plugins/bwp-minify/min/?f=wp-content/plugins/wpml-cms-nav/res/css/cms-navigation-base.css,wp-content/plugins/wpml-cms-nav/res/css/cms-navigation.css HTTP/1.1
Host: www.register.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.register.it/pp-dr/?lang=en&a=b&host=Y2xvdWQtc2l0ZS5iaXo=
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Content-Type: text/css; charset=utf-8
Expires: Fri, 11 Nov 2022 12:06:46 GMT
Vary: Accept-Encoding
Last-Modified: Wed, 19 Oct 2022 10:04:53 GMT
Pragma: public
Strict-Transport-Security: max-age=15768000;
Cache-Control: max-age=3600, public
X-Frame-Options: SAMEORIGIN
Content-Encoding: gzip
Content-Length: 1092
Accept-Ranges: bytes
Date: Sat, 12 Nov 2022 09:24:28 GMT
www.register.it/wp-content/plugins/bwp-minify/min/?f=wp-content/themes/dada/asset/js/lib/jquery.mobile.touch.js,wp-includes/js/wp-embed.min.js,wp-content/themes/dada/asset/js/dada-www.js,wp-content/themes/dada/asset/js/dada-request-collector.js,wp-content/themes/dada/asset/js/dada-language.js
81.88.58.193200 OK 21 kB URL HTTP/1.1 www.register.it/wp-content/plugins/bwp-minify/min/?f=wp-content/themes/dada/asset/js/lib/jquery.mobile.touch.js,wp-includes/js/wp-embed.min.js,wp-content/themes/dada/asset/js/dada-www.js,wp-content/themes/dada/asset/js/dada-request-collector.js,wp-content/themes/dada/asset/js/dada-language.js
IP 81.88.58.193:0
ASN #39729 Register S.p.A.
File type ASCII text, with very long lines (6320)
Hash 502d2f319053702c1f8aa1fa75ef56c0
6b333ba824d2c4cb9b0eb4356eef5c99cc827472
21232688464cf7449144cf8af2d010eacfad1e2c44f823433f16daad4c3c8cf0
GET /wp-content/plugins/bwp-minify/min/?f=wp-content/themes/dada/asset/js/lib/jquery.mobile.touch.js,wp-includes/js/wp-embed.min.js,wp-content/themes/dada/asset/js/dada-www.js,wp-content/themes/dada/asset/js/dada-request-collector.js,wp-content/themes/dada/asset/js/dada-language.js HTTP/1.1
Host: www.register.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.register.it/pp-dr/?lang=en&a=b&host=Y2xvdWQtc2l0ZS5iaXo=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/x-javascript; charset=utf-8
Expires: Fri, 11 Nov 2022 12:06:56 GMT
Vary: Accept-Encoding
Last-Modified: Wed, 19 Oct 2022 10:04:53 GMT
Pragma: public
Strict-Transport-Security: max-age=15768000;
Cache-Control: max-age=3600, public
X-Frame-Options: SAMEORIGIN
Content-Length: 20999
Accept-Ranges: bytes
Date: Sat, 12 Nov 2022 09:24:28 GMT
ocsp.sectigo.com/
104.18.32.68200 OK 471 B IP 104.18.32.68:0
Hash d3837e8b6c00655d237233fe716f3d15
c71d54a72f9ecdd01101456e9c4ea505e4417597
cb5b7cc129e46de7cc494602915752a5097e7e9dc3d3eb5fcbaa6652edebe578
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 12 Nov 2022 09:24:28 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Wed, 09 Nov 2022 15:18:44 GMT
Expires: Wed, 16 Nov 2022 15:18:43 GMT
Etag: "c71d54a72f9ecdd01101456e9c4ea505e4417597"
Cache-Control: max-age=366254,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 768e36fb1cd40b59-OSL
cmp.teamblue.services/js/cmp_standalone.min.js
81.88.57.79200 OK 10 kB URL HTTP/1.1 cmp.teamblue.services/js/cmp_standalone.min.js
IP 81.88.57.79:0
ASN #39729 Register S.p.A.
File type HTML document, Unicode text, UTF-8 text, with very long lines (27376), with no line terminators
Hash 01c87ea9a98e8cdc802632b07fd48d81
68e3a0fe543e927b9d5a77653b2df6ab99b00f57
1e7f98ad32a722cdd2043129a85363b13b5e57096ba5df22282fa10e90bb1f26
GET /js/cmp_standalone.min.js HTTP/1.1
Host: cmp.teamblue.services
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.register.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sat, 12 Nov 2022 09:24:28 GMT
Content-Type: application/javascript
Last-Modified: Mon, 19 Sep 2022 08:53:19 GMT
Transfer-Encoding: chunked
Vary: Accept-Encoding
ETag: W/"63282dff-6af1"
Expires: Fri, 11 Nov 2022 09:24:28 GMT
Cache-Control: no-cache, no-store, must-revalidate, proxy-revalidate
Pragma: no-cache
Content-Encoding: gzip
www.register.it/wp-content/uploads/2016/10/parking_Icon_01.png
81.88.58.193200 OK 1.3 kB URL HTTP/1.1 www.register.it/wp-content/uploads/2016/10/parking_Icon_01.png
IP 81.88.58.193:0
ASN #39729 Register S.p.A.
File type PNG image data, 110 x 110, 8-bit colormap, non-interlaced\012- data
Hash 366d2ed8132f6b4ea05eb2e06bd623ce
4b1e4112d672c946a57da6d1669b155ed7274721
bab98a0bc951ea3e14b11907d25b7c8b52afac5d3b7fc818e22733c52837d601
GET /wp-content/uploads/2016/10/parking_Icon_01.png HTTP/1.1
Host: www.register.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.register.it/pp-dr/?lang=en&a=b&host=Y2xvdWQtc2l0ZS5iaXo=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Content-Type: image/png
Last-Modified: Fri, 07 Oct 2016 08:43:49 GMT
ETag: "57f76045-52d"
Cache-Control: max-age=31536000, max-age=31536000, public
Expires: Sat, 11 Nov 2023 11:06:57 GMT
Pragma: public
Strict-Transport-Security: max-age=15768000;
X-Frame-Options: SAMEORIGIN
Content-Length: 1325
Accept-Ranges: bytes
Date: Sat, 12 Nov 2022 09:24:28 GMT
www.register.it/wp-content/uploads/2016/10/parking_Icon_02.png
81.88.58.193200 OK 959 B URL HTTP/1.1 www.register.it/wp-content/uploads/2016/10/parking_Icon_02.png
IP 81.88.58.193:0
ASN #39729 Register S.p.A.
File type PNG image data, 110 x 110, 8-bit colormap, non-interlaced\012- data
Hash fcbab46186074a5da5b7020334dc2e4a
40613854806f2e746d7266c3b0b2bd5fee81ac66
2ee67eba3d4ba8702727f8b286a883b2763635f3d16cbd5341416075953f37b7
GET /wp-content/uploads/2016/10/parking_Icon_02.png HTTP/1.1
Host: www.register.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.register.it/pp-dr/?lang=en&a=b&host=Y2xvdWQtc2l0ZS5iaXo=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Content-Type: image/png
Last-Modified: Fri, 07 Oct 2016 08:43:50 GMT
ETag: "57f76046-3bf"
Cache-Control: max-age=31536000, max-age=31536000, public
Expires: Sat, 11 Nov 2023 11:06:57 GMT
Pragma: public
Strict-Transport-Security: max-age=15768000;
X-Frame-Options: SAMEORIGIN
Content-Length: 959
Accept-Ranges: bytes
Date: Sat, 12 Nov 2022 09:24:28 GMT
www.register.it/_img/header/register.it_logo.png
81.88.58.193200 OK 1.0 kB URL HTTP/1.1 www.register.it/_img/header/register.it_logo.png
IP 81.88.58.193:0
ASN #39729 Register S.p.A.
File type PNG image data, 200 x 52, 8-bit colormap, non-interlaced\012- data
Hash 32d3f7b1af99d549e6659086b7568b36
77b14e944f60c327520da309050fa29eec455576
3de0381e6599a1f075d7560a0044700ed4a98d2fb2f8c28f6a126cb123445e9e
GET /_img/header/register.it_logo.png HTTP/1.1
Host: www.register.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.register.it/pp-dr/?lang=en&a=b&host=Y2xvdWQtc2l0ZS5iaXo=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: Apache
Strict-Transport-Security: max-age=15768000;
Content-Security-Policy: frame-ancestors 'self' https://*.register.it/
Vary: X-Forwarded-Proto
Last-Modified: Tue, 09 Mar 2021 09:37:50 GMT
ETag: "6fa7fe52-40d-5bd174dc7e0b6"
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET,PUT,POST,DELETE
X-Frame-Options: SAMEORIGIN
Content-Type: image/png
Content-Length: 1037
Accept-Ranges: bytes, bytes
Date: Sat, 12 Nov 2022 09:24:28 GMT
cmp.teamblue.services/js/cmp_all.min.js?v=1.0.36
81.88.57.79200 OK 34 kB URL HTTP/1.1 cmp.teamblue.services/js/cmp_all.min.js?v=1.0.36
IP 81.88.57.79:0
ASN #39729 Register S.p.A.
File type Unicode text, UTF-8 text, with very long lines (65524), with no line terminators
Hash 2f3501cc087aa1409f1f69bbabc25749
469ba17df0e8492add7eed61740c91f66ff0c491
c242616e3b5265bd0d3abe955b9fb891505701972841afec1425695fa3f2a7af
GET /js/cmp_all.min.js?v=1.0.36 HTTP/1.1
Host: cmp.teamblue.services
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.register.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sat, 12 Nov 2022 09:24:28 GMT
Content-Type: application/javascript
Last-Modified: Mon, 19 Sep 2022 08:53:19 GMT
Transfer-Encoding: chunked
Vary: Accept-Encoding
ETag: W/"63282dff-17f7e"
Access-Control-Allow-Methods: DELETE, GET, HEAD, POST, PUT, OPTIONS
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, X-CSRF-TOKEN
Access-Control-Allow-Credentials: true
Content-Encoding: gzip
www.register.it/wp-includes/js/wp-emoji-release.min.js?ver=5.7.1
81.88.58.193200 OK 5.3 kB URL HTTP/1.1 www.register.it/wp-includes/js/wp-emoji-release.min.js?ver=5.7.1
IP 81.88.58.193:0
ASN #39729 Register S.p.A.
File type ASCII text, with very long lines (11272)
Hash bd229439861ef80c0ca1544bec369523
2ca88131b2886b19eef9aa51a759d7a4033d3b79
9820419aa4c896ce97d9c318d7671aa5958de4445c063a1b84fa3eb9ed8fbff5
GET /wp-includes/js/wp-emoji-release.min.js?ver=5.7.1 HTTP/1.1
Host: www.register.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.register.it/pp-dr/?lang=en&a=b&host=Y2xvdWQtc2l0ZS5iaXo=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/javascript
Last-Modified: Wed, 19 Oct 2022 10:04:53 GMT
ETag: W/"634fcbc5-3795"
Cache-Control: max-age=31536000, max-age=31536000, public
Expires: Sat, 11 Nov 2023 11:06:51 GMT
Pragma: public
Strict-Transport-Security: max-age=15768000;
X-Frame-Options: SAMEORIGIN
Content-Encoding: gzip
Content-Length: 5269
Accept-Ranges: bytes
Date: Sat, 12 Nov 2022 09:24:28 GMT
ocsp.pki.goog/gts1c3
142.250.74.35200 OK 472 B IP 142.250.74.35:0
Hash e3f9965225cba49c71506d7dee4c1647
d1d30248236cfe679fa182860d69634d30f5b0ca
8a2641a2fa1026f8893b4acf7f7c78c633a1408779f3063c87ad292729300d97
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 12 Nov 2022 09:24:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.register.it/wp-content/themes/dada/asset/fonts/dadaiconfont.woff
81.88.58.193200 OK 17 kB URL HTTP/1.1 www.register.it/wp-content/themes/dada/asset/fonts/dadaiconfont.woff
IP 81.88.58.193:0
ASN #39729 Register S.p.A.
File type Web Open Font Format, CFF, length 17272, version 1.0\012- data
Hash ed4446a1d025e7a037bdcb6a0a260884
5bcbba5dc1a23c75d0d0332f3ea4b4932f66a838
3c7538979141f84163dac40ce27d4c79e6610b6c65586f98a72071f2ccb5691b
GET /wp-content/themes/dada/asset/fonts/dadaiconfont.woff HTTP/1.1
Host: www.register.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.register.it/wp-content/plugins/bwp-minify/min/?f=wp-includes/css/dist/block-library/style.min.css,wp-content/themes/dada/style.css,wp-content/themes/dada-register-child/style.css,wp-content/themes/dada/asset/css/dadaiconfont.css,wp-content/plugins/ht-knowledge-base/css/hkb-style.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/font-woff
Last-Modified: Wed, 19 Oct 2022 10:04:51 GMT
ETag: "634fcbc3-4378"
Cache-Control: max-age=31536000, max-age=31536000, public
Expires: Sat, 11 Nov 2023 11:06:53 GMT
Pragma: public
Strict-Transport-Security: max-age=15768000;
X-Frame-Options: SAMEORIGIN
Content-Length: 17272
Accept-Ranges: bytes
Date: Sat, 12 Nov 2022 09:24:28 GMT
ocsp.pki.goog/gts1c3
142.250.74.35200 OK 471 B IP 142.250.74.35:0
Hash e7dc2623cb841be51d3e8857e015d8e1
cbfdb2a7b965598de893fef89d47e17763501acf
df1fc0809a603469e6abcf1f07a13d792550d68c862f80e38c00e47e9b233a5b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 12 Nov 2022 09:24:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/sourcesanspro/v21/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2
216.58.207.195200 OK 13 kB URL HTTP/2 fonts.gstatic.com/s/sourcesanspro/v21/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2
IP 216.58.207.195:0
File type Web Open Font Format (Version 2), TrueType, length 12956, version 1.0\012- data
Hash 1c772d9d0531b187db80bcfc199c1786
c0c04fb334190e10dffed0dcc5c817c2a6041a15
122854df4f39cf922db317714c2ff0eccab27a1028c14a5aa2211f48b7e0eade
GET /s/sourcesanspro/v21/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.register.it
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 12956
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 09 Nov 2022 19:28:31 GMT
expires: Thu, 09 Nov 2023 19:28:31 GMT
cache-control: public, max-age=31536000
age: 222957
last-modified: Wed, 27 Apr 2022 16:54:52 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/sourcesanspro/v21/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2
216.58.207.195200 OK 13 kB URL HTTP/2 fonts.gstatic.com/s/sourcesanspro/v21/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2
IP 216.58.207.195:0
File type Web Open Font Format (Version 2), TrueType, length 13036, version 1.0\012- data
Hash 0ad032b3d07aaf33b160ac4799dda40f
06b931e0d0bf37f5037d9e66d6feedfddd21c0ba
c124c88ca4fcb4336e97617647ef0d32441329371120c8eabaea0fea226560b0
GET /s/sourcesanspro/v21/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.register.it
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 13036
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 09 Nov 2022 19:26:57 GMT
expires: Thu, 09 Nov 2023 19:26:57 GMT
cache-control: public, max-age=31536000
age: 223051
last-modified: Wed, 27 Apr 2022 16:04:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.googletagmanager.com/gtm.js?id=GTM-WH9LDRH
142.250.74.168200 OK 46 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-WH9LDRH
IP 142.250.74.168:0
File type ASCII text, with very long lines (1921)
Hash d7714e1d403d0eb506aab9afa764aa4c
11dff130ccf26fdb66af52c7a8030538d7078bfc
deff343c4f6f1ed8ad49a7250e311dbd29d29735076029bd00eea7d29365ba43
GET /gtm.js?id=GTM-WH9LDRH HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.register.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 12 Nov 2022 09:24:28 GMT
expires: Sat, 12 Nov 2022 09:24:28 GMT
cache-control: private, max-age=900
last-modified: Sat, 12 Nov 2022 09:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 46075
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.register.it/wp-content/uploads/2016/10/CrossBanner_website_001.jpg
81.88.58.193200 OK 176 kB URL HTTP/1.1 www.register.it/wp-content/uploads/2016/10/CrossBanner_website_001.jpg
IP 81.88.58.193:0
ASN #39729 Register S.p.A.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1600x600, components 3\012- data
Size 176 kB (176279 bytes)
Hash 4533ea3eb3798a43cfbcb51ab00ff10d
f054d9e99fe3fa282f59f7f01a3576d0478f0696
288c6793b3bc4a1a0cbdbac39575240b4658b272a098551593e62add15a406b1
GET /wp-content/uploads/2016/10/CrossBanner_website_001.jpg HTTP/1.1
Host: www.register.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.register.it/pp-dr/?lang=en&a=b&host=Y2xvdWQtc2l0ZS5iaXo=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Content-Type: image/jpeg
Last-Modified: Fri, 07 Oct 2016 09:39:32 GMT
ETag: "57f76d54-2b097"
Cache-Control: max-age=31536000, max-age=31536000, public
Expires: Sat, 11 Nov 2023 11:06:59 GMT
Pragma: public
Strict-Transport-Security: max-age=15768000;
X-Frame-Options: SAMEORIGIN
Content-Length: 176279
Accept-Ranges: bytes
Date: Sat, 12 Nov 2022 09:24:28 GMT
consent.cookiebot.com/uc.js?v=1.0.36
23.72.139.51200 OK 32 kB URL HTTP/2 consent.cookiebot.com/uc.js?v=1.0.36
IP 23.72.139.51:0
ASN #20940 Akamai International B.V.
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (65499)
Hash 3c4e162c3321e924fd3d27dc6d095f08
9d2027cab49aaf66a89a521c16133ba818ff3d9d
425713b3dc09882376e466e3e6798ade37f8262d82138cf0e11ecbe92e2d565b
GET /uc.js?v=1.0.36 HTTP/1.1
Host: consent.cookiebot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.register.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-encoding: gzip
last-modified: Tue, 04 Oct 2022 09:02:48 GMT
accept-ranges: bytes
etag: "0ac913d0d7d81:0"
vary: Accept-Encoding
request-context: appId=cid-v1:89f47f4b-bed0-4db8-956b-d6e6dfac3fef
access-control-expose-headers: Request-Context
content-length: 31718
cache-control: public, max-age=714
expires: Sat, 12 Nov 2022 09:36:22 GMT
date: Sat, 12 Nov 2022 09:24:28 GMT
X-Firefox-Spdy: h2
ocsp.sectigo.com/
104.18.32.68200 OK 471 B IP 104.18.32.68:0
Hash 80cf40b168709187f7c3f41667e523d6
c382b10aef70bf2720c85843799dc90de0b12c86
ff4bac5d2bc3aebb4383d0815121e10120331d6cd73539898641dbf38182e3ff
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 12 Nov 2022 09:24:28 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Thu, 10 Nov 2022 22:07:13 GMT
Expires: Thu, 17 Nov 2022 22:07:12 GMT
Etag: "c382b10aef70bf2720c85843799dc90de0b12c86"
Cache-Control: max-age=477163,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 768e36fddf2b0b59-OSL
ocsp.pki.goog/gts1c3
142.250.74.35200 OK 471 B IP 142.250.74.35:0
Hash e7dc2623cb841be51d3e8857e015d8e1
cbfdb2a7b965598de893fef89d47e17763501acf
df1fc0809a603469e6abcf1f07a13d792550d68c862f80e38c00e47e9b233a5b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 12 Nov 2022 09:24:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
trk.register.it/js/skeletor.js
81.88.58.193200 OK 13 kB URL HTTP/1.1 trk.register.it/js/skeletor.js
IP 81.88.58.193:0
ASN #39729 Register S.p.A.
File type Unicode text, UTF-8 text, with very long lines (35683), with no line terminators
Hash bdf7a11a03cdd347514546180bd06cb7
dfa84635e9ef7af6449490dac1bcf4a8f5ac8353
46618c5b89cd22288583d0ea01496cde9a7a4aa53794127c54b15a61964a6d87
GET /js/skeletor.js HTTP/1.1
Host: trk.register.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.register.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Date: Sat, 12 Nov 2022 09:24:28 GMT
Content-Type: application/javascript
Last-Modified: Mon, 17 Oct 2022 12:16:36 GMT
Transfer-Encoding: chunked
Vary: Accept-Encoding
ETag: W/"634d47a4-8b64"
Expires: Fri, 11 Nov 2022 09:24:28 GMT
Cache-Control: no-cache, no-store, must-revalidate, proxy-revalidate
Pragma: no-cache
Content-Encoding: gzip
consentcdn.cookiebot.com/sdk/bc-v4.min.html
104.110.3.72200 OK 392 B URL HTTP/2 consentcdn.cookiebot.com/sdk/bc-v4.min.html
IP 104.110.3.72:0
File type HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (627), with no line terminators
Hash e7268eccad39bd651697fa793a52cc5c
47299cefa2397b0c1d0c5bf232390a5cf1bcc4d3
907e16c84d35556e4ed841a3511915e6d4bb4e9d68cfca178a740e90b4d80e35
GET /sdk/bc-v4.min.html HTTP/1.1
Host: consentcdn.cookiebot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.register.it/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-type: text/html
etag: "3d08665fa4c7bcf9fa2dcbbc7efe1d0f:1649057029.895163"
last-modified: Mon, 04 Apr 2022 07:23:49 GMT
server: AkamaiNetStorage
x-akamai-transformed: 9 - 0 pmb=mRUM,1
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=29771517
expires: Sun, 22 Oct 2023 23:16:25 GMT
date: Sat, 12 Nov 2022 09:24:28 GMT
content-length: 392
server-timing: cdn-cache; desc=HIT, edge; dur=1
X-Firefox-Spdy: h2
consentcdn.cookiebot.com/consentconfig/614a70ff-bada-428c-a96c-a9c09ca10db5/state.js
104.110.3.72200 OK 50 B URL HTTP/2 consentcdn.cookiebot.com/consentconfig/614a70ff-bada-428c-a96c-a9c09ca10db5/state.js
IP 104.110.3.72:0
File type ASCII text, with no line terminators
Hash 11162cf300c563c78b68778aba71c14b
61a397c20a7867448b1beda7a314a298555862b8
aa5aeeb724c2185d46aed9abd8a3cf57c1e0399a90deb7c69ebcf2b36b04d9aa
GET /consentconfig/614a70ff-bada-428c-a96c-a9c09ca10db5/state.js HTTP/1.1
Host: consentcdn.cookiebot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.register.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "8fabfd3bb9b067b11ad664181b30fa66:1598581020.828199"
last-modified: Fri, 28 Aug 2020 02:17:00 GMT
server: AkamaiNetStorage
content-encoding: gzip
content-length: 50
unused62: 8096267
cache-control: max-age=27000
expires: Sat, 12 Nov 2022 16:54:28 GMT
date: Sat, 12 Nov 2022 09:24:28 GMT
vary: Accept-Encoding
server-timing: cdn-cache; desc=HIT, edge; dur=1
X-Firefox-Spdy: h2
trk.register.it/js/he-man_all.min.js?v=2.1.11&ma=ma_enabled
81.88.58.193200 OK 71 kB URL HTTP/1.1 trk.register.it/js/he-man_all.min.js?v=2.1.11&ma=ma_enabled
IP 81.88.58.193:0
ASN #39729 Register S.p.A.
File type Unicode text, UTF-8 text, with very long lines (65504), with no line terminators
Hash 98b9bf9fe82e26a190411bb4ea1f04bb
0272d76ecc15d59ee450a047762e593e65bfedbb
8d50e0d6941cb60a0523457a83ba5cc67e8ddf28341c18f113ca87081264da81
GET /js/he-man_all.min.js?v=2.1.11&ma=ma_enabled HTTP/1.1
Host: trk.register.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.register.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Date: Sat, 12 Nov 2022 09:24:28 GMT
Content-Type: application/javascript
Last-Modified: Mon, 17 Oct 2022 12:16:36 GMT
Transfer-Encoding: chunked
Vary: Accept-Encoding
ETag: W/"634d47a4-2f7da"
Access-Control-Allow-Methods: DELETE, GET, HEAD, POST, PUT, OPTIONS
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, X-CSRF-TOKEN, X-XSRF-TOKEN
Access-Control-Allow-Credentials: true
Content-Encoding: gzip
ocsp.sectigo.com/
104.18.32.68200 OK 472 B IP 104.18.32.68:0
Hash 270331c7b5eef76ac18b841586651333
e89a697e5ffff18f24873feca0c78fbf0110a493
b89d1517ad6870eb6816dd0cf455897b66261ea8f3264f0ce1177eec20c8d7d3
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 12 Nov 2022 09:24:28 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Thu, 10 Nov 2022 23:41:42 GMT
Expires: Thu, 17 Nov 2022 23:41:41 GMT
Etag: "e89a697e5ffff18f24873feca0c78fbf0110a493"
Cache-Control: max-age=482832,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 768e36fe88050b59-OSL
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 5823b629e86542b63f4355ec5e67a126
97cbdbbb6b03e6ef7f3f45449245470ad8bd8292
96d8e39efb6eebd1413a4bc0fa6800781f636e70dc0ccadf6a546f26fa022755
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "96D8E39EFB6EEBD1413A4BC0FA6800781F636E70DC0CCADF6A546F26FA022755"
Last-Modified: Thu, 10 Nov 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2669
Expires: Sat, 12 Nov 2022 10:08:57 GMT
Date: Sat, 12 Nov 2022 09:24:28 GMT
Connection: keep-alive
trk.register.it/server/he-man_server?tkq=dHJrQ19lU0YlM0R3d3cucmVnaXN0ZXIuaXQlMjUyRnBwLWRyJTI1MkYlMjZ0cmtDX2VTVUIlM0R3d3cucmVnaXN0ZXIuaXQlMjZjRE9NJTNELnJlZ2lzdGVyLml0JTI2dHJrQ19lSFIlM0RodHRwJTI1M0ElMjUyRiUyNTJGd3d3LmNsb3VkLXNpdGUuYml6JTI1MkYlMjZ0cmtDX2VVQSUzRE1vemlsbGElMjUyRjUuMCUyNTIwJTI4V2luZG93cyUyNTIwTlQlMjUyMDEwLjAlMjUzQiUyNTIwV2luNjQlMjUzQiUyNTIweDY0JTI1M0IlMjUyMHJ2JTI1M0ExMDUuMCUyOSUyNTIwR2Vja28lMjUyRjIwMTAwMTAxJTI1MjBGaXJlZm94JTI1MkYxMDUuMCUyNnRya0NfbGFuJTNEZW4lMjZ0cmtDX2VRUyUzRGxhbmclMjUzRGVuJTI1MjZhJTI1M0RiJTI1MjZob3N0JTI1M0RZMnh2ZFdRdGMybDBaUzVpYVhvJTI1M0QlMjZ0cmtDX2ZyYWdtZW50JTNEJTI2ZVBBR1ZBUlMlM0RiV0VsTTBReEpUSTJkSEpyUTE5c2IyZG5aV1FsTTBRd0pUSTJkSEpyUTE5b1lYTm9KVE5FTVRZMk9ESTBOVEEyT0RFME5WOTVNM05zTVhZMmNuaG5YM2Q1Wkd4NE0yZ2xNalowY210RFgzQnljU1V6UkRBbE1qWjBjbXREWDJWUlV5VXpSR3hoYm1jbE1qVXpSR1Z1SlRJMU1qWmhKVEkxTTBSaUpUSTFNalpvYjNOMEpUSTFNMFJaTW5oMlpGZFJkR015YkRCYVV6VnBZVmh2SlRJMU0wUSUyNTNEJTI2dHJrX2ludGVybmFsJTNEZmFsc2UlMjZzZXRNYWluQ29va2llcyUzRHRydWU=
81.88.58.193200 OK 0 B URL HTTP/1.1 trk.register.it/server/he-man_server?tkq=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
IP 81.88.58.193:0
ASN #39729 Register S.p.A.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /server/he-man_server?tkq=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 HTTP/1.1
Host: trk.register.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.register.it/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Date: Sat, 12 Nov 2022 09:24:28 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Set-Cookie: _wicasa=JSON_eyJjaWQiOiI2MjgwMzM4ZTMwOTc5MDRhMDUwNTY1M2NlOTdkNmFkNSIsImNrdGltZSI6IjE2NjgyNDUwNjgiLCJzY3AiOiIxIiwicGsiOiJSMDEiLCJja2Jvcm4iOiIxNjY4MjQ1MDY4IiwibGFzdHJlZiI6Ind3dy5yZWdpc3Rlci5pdFwvcHAtZHJcLyIsImxhc3Rkb21zcmMiOiIiLCJpc2NsaSI6IjAifQ%3D%3D; expires=Fri, 10-Feb-2023 09:24:28 GMT; Max-Age=7776000; path=/; Secure; SameSite=None; domain=register.it
_ashkii=JSON_eyJzaWQiOiI2MjgwMzM4ZTMwOTc5MDRhMDUwNTY1M2NlOTdkNmFkNSIsImNrdGltZSI6IjE2NjgyNDUwNjgiLCJzc3AiOiIxIiwicHAiOiJSMDEifQ%3D%3D; path=/; Secure; SameSite=None; domain=register.it
cookid=6280338e3097904a0505653ce97d6ad5; expires=Fri, 10-Feb-2023 09:24:28 GMT; Max-Age=7776000; path=/; Secure; SameSite=None; domain=register.it
dbmFP=6280338e3097904a0505653ce97d6ad5.R01; expires=Fri, 10-Feb-2023 09:24:28 GMT; Max-Age=7776000; path=/; Secure; SameSite=None; domain=register.it
dbmPK=6280338e3097904a0505653ce97d6ad5.R01; expires=Fri, 10-Feb-2023 09:24:28 GMT; Max-Age=7776000; path=/; Secure; SameSite=None; domain=register.it
Access-Control-Allow-Methods: DELETE, GET, HEAD, POST, PUT, OPTIONS
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, X-CSRF-TOKEN, X-XSRF-TOKEN
Access-Control-Allow-Credentials: true
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 5823b629e86542b63f4355ec5e67a126
97cbdbbb6b03e6ef7f3f45449245470ad8bd8292
96d8e39efb6eebd1413a4bc0fa6800781f636e70dc0ccadf6a546f26fa022755
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "96D8E39EFB6EEBD1413A4BC0FA6800781F636E70DC0CCADF6A546F26FA022755"
Last-Modified: Thu, 10 Nov 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2669
Expires: Sat, 12 Nov 2022 10:08:57 GMT
Date: Sat, 12 Nov 2022 09:24:28 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4af930b9-b854-4316-8425-07c6aa06477a.jpeg
34.120.237.76200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4af930b9-b854-4316-8425-07c6aa06477a.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash cd5bdc050716bb76afe8090fc81617e7
5109c156b180727767fc03c411190ccc0d3fb5fc
9b13e7838946c6654dda17886c2ca8d42de934acb93f4bddb1008dfa1bd1ea99
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4af930b9-b854-4316-8425-07c6aa06477a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11715
x-amzn-requestid: 20e508bd-6568-4225-9bee-c683a49d44f6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bdMhUHkpIAMFfJg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636ec13b-7dc726b94a37fc667e2e6646;Sampled=0
x-amzn-remapped-date: Fri, 11 Nov 2022 21:40:11 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: Lp5eW92D8SbFtcQLk-LRSaSKNMNFYCW7XTALdNdrJxN6ebgdH8_1Dw==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 1481cc55c02c3a782ad420b6bac2cb32.cloudfront.net (CloudFront), 1.1 google
date: Fri, 11 Nov 2022 21:42:55 GMT
age: 42093
etag: "5109c156b180727767fc03c411190ccc0d3fb5fc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
maxcdn.bootstrapcdn.com/font-awesome/4.4.0/css/font-awesome.min.css
104.18.10.207200 OK 15 kB URL HTTP/2 maxcdn.bootstrapcdn.com/font-awesome/4.4.0/css/font-awesome.min.css
IP 104.18.10.207:0
File type ASCII text, with very long lines (26548)
Hash 8750c2c43bc2041a9b28a685499ab039
9e7143e0788fffd0528ffa00758b3f92a5e4d4f7
28fb5970bef1203667e63ce8627ddb86b64115edc458be756d1be7dff9fb2f5d
GET /font-awesome/4.4.0/css/font-awesome.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.register.it/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 12 Nov 2022 09:24:27 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
last-modified: Mon, 25 Jan 2021 22:04:54 GMT
cdn-cachedat: 12/13/2021 21:25:06
cdn-proxyver: 1.02
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 632
cdn-status: 200
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-requestid: 8ac87b10825a6871d9cd076fc3a23e4f
cdn-cache: HIT
cf-cache-status: HIT
age: 13691819
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 768e36fa8d99b4f9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbae1f7e5-4deb-446b-bef2-d4185563f449.jpeg
34.120.237.76200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbae1f7e5-4deb-446b-bef2-d4185563f449.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 43e4308988c320212eab6fb4d27c215e
2c2503ca7de1a0c9a4224131f9b0e4b990f7efcd
56efcb5d90ed224301384c850ec2f11317c2426fdc8ed6f88a211bbb75e6871e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbae1f7e5-4deb-446b-bef2-d4185563f449.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12578
x-amzn-requestid: 60fda47c-9518-4ab3-8f94-4e925f0b6773
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bdM8iHeHoAMFQFQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636ec1e9-62597e7b5c0f3b6b1e53bcce;Sampled=0
x-amzn-remapped-date: Fri, 11 Nov 2022 21:43:05 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: FSquX2GRcCI4_Onwfi5qm_oBKl5EvL1RZJO84zJgyoEr7tPVTMy9dQ==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 91356d2137f5a7345e93da4516c49ec4.cloudfront.net (CloudFront), 1.1 google
date: Fri, 11 Nov 2022 22:01:48 GMT
age: 40960
etag: "2c2503ca7de1a0c9a4224131f9b0e4b990f7efcd"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffe8955e1-907b-43ed-a437-d4ad1f5fe742.jpeg
34.120.237.76200 OK 5.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffe8955e1-907b-43ed-a437-d4ad1f5fe742.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 38e32fc94c445ff47da5d2907e61e3a4
c76588ccaf97fdfd6e73833083200cb49a01a4af
e4e3947b2248206c9dacfd35ff5619ca3b3ae56a7bcd565d40ed048839ffa075
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffe8955e1-907b-43ed-a437-d4ad1f5fe742.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5478
x-amzn-requestid: c06e47c6-da2a-4a70-af2a-c1268557b913
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bdM67FEEIAMF-pA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636ec1df-0628d00244323ddf727e0b80;Sampled=0
x-amzn-remapped-date: Fri, 11 Nov 2022 21:42:55 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 3zeJU6wVmWDIbVDBlTYvTh8e78isxbmNC0GKWdKqdI5abbdERoyzpA==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 89791e6b21b9a30cc51cac1bc51cf098.cloudfront.net (CloudFront), 1.1 google
date: Fri, 11 Nov 2022 22:23:30 GMT
age: 39658
etag: "c76588ccaf97fdfd6e73833083200cb49a01a4af"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Source+Sans+Pro:300,400,600,300italic,400italic
142.250.74.10200 OK 7.2 kB URL HTTP/2 fonts.googleapis.com/css?family=Source+Sans+Pro:300,400,600,300italic,400italic
IP 142.250.74.10:0
Hash c5112b9ca9d00d539154ea49850d45df
fc2c1679301c65f64cec8024fbfa21bf0afe3231
05cbb8b60e273f91b70f1f88614607e9a56b578a2f71261576185b3af73787a3
GET /css?family=Source+Sans+Pro:300,400,600,300italic,400italic HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.register.it/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 12 Nov 2022 09:24:27 GMT
date: Sat, 12 Nov 2022 09:24:27 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
controlpanel.register.it/remote/sessionRemoteData.html
81.88.58.193200 OK 95 B URL HTTP/1.1 controlpanel.register.it/remote/sessionRemoteData.html
IP 81.88.58.193:0
ASN #39729 Register S.p.A.
File type JSON data\012- , ASCII text, with no line terminators
Hash f997d9dfcb371be579fdc40fd21d24b3
ba0eea2e573219893d12fb48a0f4a394873bbf76
c94f7e41ba43ce0e2bdb4ff911a743b946ea177cd33595881a41613a61e17fb0
POST /remote/sessionRemoteData.html HTTP/1.1
Host: controlpanel.register.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Content-Length: 53
Origin: https://www.register.it
Connection: keep-alive
Referer: https://www.register.it/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: Apache
Strict-Transport-Security: max-age=15768000;
Content-Security-Policy: frame-ancestors 'self' https://*.register.it/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Access-Control-Allow-Origin: https://www.register.it
Access-Control-Allow-Headers: X-Requested-With, Content-Type
Set-Cookie: dpsid=r1p52d47v2m2aufi78ldkpvct5; path=/; domain=register.it; secure; HttpOnly
cpLanguage=eng; path=/; domain=register.it
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET,PUT,POST,DELETE
X-Frame-Options: SAMEORIGIN
Content-Type: text/html; charset=ISO-8859-1
Content-Length: 95
Accept-Ranges: bytes
Date: Sat, 12 Nov 2022 09:24:28 GMT
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe6fac57d-aa5c-42c2-904b-58aa73c59975.jpeg
34.120.237.76200 OK 4.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe6fac57d-aa5c-42c2-904b-58aa73c59975.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 701700f42e1b0e528a63c3bd2a4c54e7
a3af603900538ea10e094981d298a0b37d0ab896
c84ac2d3524eb950a433aa01e1226d995d87948452e4e135a4661094923ca465
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe6fac57d-aa5c-42c2-904b-58aa73c59975.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4268
x-amzn-requestid: 19d2f4e7-b6c1-4093-b54c-70a9a476ad89
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bdMhSEwYIAMFg7Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636ec13b-6e2f5a6147153e5c32cc4499;Sampled=0
x-amzn-remapped-date: Fri, 11 Nov 2022 21:40:11 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: RPDkAR4fjBR89lWuee42HxnCGQv_vd6tWbOavmEsGCkZeKwjW_99Dg==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 707e733794d52100fde0ab21bf0b1462.cloudfront.net (CloudFront), 1.1 google
date: Fri, 11 Nov 2022 21:44:57 GMT
age: 41971
etag: "a3af603900538ea10e094981d298a0b37d0ab896"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 278 B IP 93.184.220.29:0
Hash 665b211d23df25dfcb3e28179ec12969
097d31da46a707159319e5fb764d30696d60483f
b0cabf979651ba0e2f44fc4e6828d2b237e13838857aa62985172f07af602a57
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2929
Cache-Control: max-age=162434
Content-Type: application/ocsp-response
Date: Sat, 12 Nov 2022 09:24:28 GMT
Etag: "636f325d-116"
Expires: Mon, 14 Nov 2022 06:31:42 GMT
Last-Modified: Sat, 12 Nov 2022 05:42:53 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 278
www.google-analytics.com/analytics.js
142.250.74.174200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP 142.250.74.174:0
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.register.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Sat, 12 Nov 2022 08:41:09 GMT
expires: Sat, 12 Nov 2022 10:41:09 GMT
cache-control: public, max-age=7200
age: 2599
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash 7ba0b74b5e2d208bbe411761cdf957a4
cd59ccac8d3487d1e8ad29a72c00b6176188c456
ad6d2d4d75776cbf90c32846b132c1c7d936f0ee41c2f7ec284a5a34da01da7c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3313
Cache-Control: max-age=145929
Content-Type: application/ocsp-response
Date: Sat, 12 Nov 2022 09:24:28 GMT
Etag: "636ef064-117"
Expires: Mon, 14 Nov 2022 01:56:37 GMT
Last-Modified: Sat, 12 Nov 2022 01:01:24 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 279
static.zdassets.com/ekr/asset_composer.js
104.18.72.113200 OK 6.2 kB URL HTTP/2 static.zdassets.com/ekr/asset_composer.js
IP 104.18.72.113:0
File type ASCII text, with very long lines (23416), with no line terminators
Hash 2adcf6c05fc0cb4ff1ac639ea4609bea
88523abd448ea9f0415d00ad1562b61615a13a66
5f951dbba0a282a996e74db4ad9eeb964f6501b6016dc707ee43d20cc9d8f0a4
GET /ekr/asset_composer.js HTTP/1.1
Host: static.zdassets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.register.it/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 12 Nov 2022 09:24:28 GMT
content-type: application/javascript
x-amz-id-2: dUZfshkH6s6HIQA7+U0tDhX+A5i1VSOF0AP1wrYwttudGl3FDx99SpKMnalxiwyFmxN4PZcqRnA=
x-amz-request-id: Y9E1NT7ZVNF7R3ZX
x-amz-replication-status: COMPLETED
last-modified: Thu, 28 Jul 2022 23:44:02 GMT
etag: W/"5cae6ce528dce0c327b2bcbaad459fdb"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=3600, s-maxage=60
x-amz-version-id: 57KHzv0Z81imwMa0XxScJAmcLiHhq1Ku
cf-cache-status: HIT
age: 60
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XDg1%2FP%2Bqz%2BtMVpncl0zmcmnL1kd8d50up7xORZTR3oMf5QZ1ZNFmEqii%2BWQX1z7GXNk0Zag41PdhQx%2Fu5CTcDhRw79uM8Ti6wYSk%2Ftxev8SI2XQxG8yTVNaX6IEUCQeqM%2Ff4srk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 768e37010904b51d-OSL
content-encoding: br
X-Firefox-Spdy: h2
trk.register.it/messages/he-man_messages?tke=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
81.88.58.193200 OK 0 B URL HTTP/1.1 trk.register.it/messages/he-man_messages?tke=JTdCJTIyaGFzaCUyMiUzQSUyMjE2NjgyNDUwNjgxNDVfeTNzbDF2NnJ4Z193eWRseDNoJTIyJTJDJTIyZG9tYWluJTIyJTNBJTIycmVnaXN0ZXIuaXQlMjIlMkMlMjJmaWVsZCUyMiUzQSUyMnBlcmZvcm1hbmNlJTIyJTJDJTIybW9kZSUyMiUzQSUyMnNldCUyMiUyQyUyMm1lc3NhZ2UlMjIlM0ElN0IlMjJ0aW1pbmdzJTIyJTNBJTdCJTIycGFnZUxvYWRUaW1lJTIyJTNBMjI4OCUyQyUyMmNvbm5lY3RUaW1lJTIyJTNBNTU1JTJDJTIycmVuZGVyVGltZSUyMiUzQTExNjYlN0QlMkMlMjJyZXNvdXJjZXMlMjIlM0ElN0IlMjJudW1iZXIlMjIlM0EzNCUyQyUyMnNpemUlMjIlM0EzOTg4NjklN0QlMkMlMjJwYWdlJTIyJTNBJTIyd3d3LnJlZ2lzdGVyLml0L3BwLWRyLyUyMiUyQyUyMnVzZXJfYWdlbnQlMjIlM0ElMjJNb3ppbGxhLzUuMCUyMCUyOFdpbmRvd3MlMjBOVCUyMDEwLjAlM0IlMjBXaW42NCUzQiUyMHg2NCUzQiUyMHJ2JTNBMTA1LjAlMjklMjBHZWNrby8yMDEwMDEwMSUyMEZpcmVmb3gvMTA1LjAlMjIlN0QlN0Q=
IP 81.88.58.193:0
ASN #39729 Register S.p.A.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /messages/he-man_messages?tke=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 HTTP/1.1
Host: trk.register.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.register.it/
Cookie: _wicasa=JSON_eyJjaWQiOiI2MjgwMzM4ZTMwOTc5MDRhMDUwNTY1M2NlOTdkNmFkNSIsImNrdGltZSI6IjE2NjgyNDUwNjgiLCJzY3AiOiIxIiwicGsiOiJSMDEiLCJja2Jvcm4iOiIxNjY4MjQ1MDY4IiwibGFzdHJlZiI6Ind3dy5yZWdpc3Rlci5pdFwvcHAtZHJcLyIsImxhc3Rkb21zcmMiOiIiLCJpc2NsaSI6IjAifQ%3D%3D; _ashkii=JSON_eyJzaWQiOiI2MjgwMzM4ZTMwOTc5MDRhMDUwNTY1M2NlOTdkNmFkNSIsImNrdGltZSI6IjE2NjgyNDUwNjgiLCJzc3AiOiIxIiwicHAiOiJSMDEifQ%3D%3D; cookid=6280338e3097904a0505653ce97d6ad5; dbmFP=6280338e3097904a0505653ce97d6ad5.R01; dbmPK=6280338e3097904a0505653ce97d6ad5.R01
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Date: Sat, 12 Nov 2022 09:24:29 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Access-Control-Allow-Methods: DELETE, GET, HEAD, POST, PUT, OPTIONS
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, X-CSRF-TOKEN, X-XSRF-TOKEN
Access-Control-Allow-Credentials: true
ekr.zdassets.com/compose/zopim_chat/1nREZe3eBKGk19UW3qKkVx3rFZD43UKO
104.18.72.113200 OK 150 B URL HTTP/2 ekr.zdassets.com/compose/zopim_chat/1nREZe3eBKGk19UW3qKkVx3rFZD43UKO
IP 104.18.72.113:0
File type JSON data\012- , ASCII text, with no line terminators
Hash ce8ddfc9433a7f7bb3f39625ae79e612
772d71edabfc1820ac0205b6e35ca6b12d5c4f18
565653c77dcbf3d77643138ee030eeeee74611894d62b7da5aee9bf149f72dbc
GET /compose/zopim_chat/1nREZe3eBKGk19UW3qKkVx3rFZD43UKO HTTP/1.1
Host: ekr.zdassets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.register.it
Connection: keep-alive
Referer: https://www.register.it/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 12 Nov 2022 09:24:29 GMT
content-type: application/json; charset=utf-8
status: 200 OK
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-expose-headers:
access-control-max-age: 7200
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-download-options: noopen
x-permitted-cross-domain-policies: none
referrer-policy: strict-origin-when-cross-origin
cache-control: max-age=600, public, s-maxage=60, stale-while-revalidate=600, stale-if-error=3600
etag: W/"36b205528726fd656865d0877eb70788"
x-request-id: 9f1a3922e284c7fb7f77dba9ef37ffa8, 9f1a3922e284c7fb7f77dba9ef37ffa8
x-runtime: 0.004701
vary: Origin, Accept-Encoding
x-zendesk-zorg: yes
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Rs46f7t1l894SKLsuVRVKGDUeK1wOa3uXOVCbJXoL52Y79zMOk8QabCK4XCzG7ijoSPAhqsfyv%2Fl9%2BlD9Qme%2FjWKdAoihoJTnEAMp3Hux6VS7b%2FwLBAtrFqktjwxWxNu7YY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 768e370188e7b521-OSL
content-encoding: br
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
54.230.245.39200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 54.230.245.39:0
Hash 33a5d58a3831cbcc4f1c48d78997b5de
0365830ac5a6262f8cb763d3709fe61bea37f671
00220e45b92b61c2f390e1cc716e437283838976f0ac45c24de96080b2d47601
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=115820
Date: Sat, 12 Nov 2022 09:24:29 GMT
Etag: "636e83ea-1d7"
Expires: Sun, 13 Nov 2022 17:34:49 GMT
Last-Modified: Fri, 11 Nov 2022 17:18:34 GMT
Server: ECS (nyb/1D2F)
X-Cache: Miss from cloudfront
Via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: idVCeqOTXGtod8fQ8HwHILkWyo1lOUZVyjRGolysvFpDIR6IkvQPvg==
Age: 975
v2.zopim.com/bin/v/widget_v2.334.js
104.16.106.139200 OK 249 kB URL HTTP/2 v2.zopim.com/bin/v/widget_v2.334.js
IP 104.16.106.139:0
File type Unicode text, UTF-8 text, with very long lines (5091)
Size 249 kB (249338 bytes)
Hash 2bbb397a9ad7781d2af6ddbc2d8fe6f2
f4b8f996e088d277490a9bc3fdf66e4b8a4d5c23
56de6c28f99dc1580258fae68e4b157746251250346c72d25a1c7cac42da7137
GET /bin/v/widget_v2.334.js HTTP/1.1
Host: v2.zopim.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.register.it/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 12 Nov 2022 09:24:29 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Wed, 27 Jul 2022 03:35:19 GMT
vary: Accept-Encoding
etag: W/"62e0b277-10301f"
expires: Tue, 09 Nov 2032 09:24:29 GMT
cache-control: public, max-age=315360000
content-encoding: gzip
cf-cache-status: HIT
age: 791082
server: cloudflare
cf-ray: 768e37042d97b4ed-OSL
X-Firefox-Spdy: h2
v2.zopim.com/?1nREZe3eBKGk19UW3qKkVx3rFZD43UKO
104.16.106.139302 Found 638 B URL HTTP/2 v2.zopim.com/?1nREZe3eBKGk19UW3qKkVx3rFZD43UKO
IP 104.16.106.139:0
File type PNG image data, 64 x 64, 8-bit gray+alpha, non-interlaced\012- data
Hash 3fac65d78e7f62804a6ca574c2a3bbd9
2baeb6d302f26c89e6265dd648868c8247561597
59b0b341f2377d03855e6151484cc22019c58f997a11577715121d710fd2386c
GET /?1nREZe3eBKGk19UW3qKkVx3rFZD43UKO HTTP/1.1
Host: v2.zopim.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.register.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Sat, 12 Nov 2022 09:24:28 GMT
location: https://static.zdassets.com/ekr/asset_composer.js
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
vary: Accept-Encoding
server: cloudflare
cf-ray: 768e3700c9bdb4ed-OSL
X-Firefox-Spdy: h2
maxcdn.bootstrapcdn.com/bootstrap/3.3.6/js/bootstrap.min.js?ver=3.3.6
104.18.10.207200 OK 0 B URL HTTP/2 maxcdn.bootstrapcdn.com/bootstrap/3.3.6/js/bootstrap.min.js?ver=3.3.6
IP 104.18.10.207:0
GET /bootstrap/3.3.6/js/bootstrap.min.js?ver=3.3.6 HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.register.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 12 Nov 2022 09:24:27 GMT
content-type: application/javascript; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: SE
cdn-edgestorageid: 722, 617, 617
last-modified: Mon, 25 Jan 2021 22:03:59 GMT
cdn-cachedat: 2021-04-23 06:42:07
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cache-control: public, max-age=31919000
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
x-content-type-options: nosniff
cdn-requestid: 5422960a90bb1006ff10e717d3a4f5cf
cdn-cache: HIT
cf-cache-status: HIT
age: 17554802
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 768e36faadc2b4f9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
maxcdn.bootstrapcdn.com/bootstrap/3.3.6/css/bootstrap.min.css
104.18.10.207200 OK 0 B URL HTTP/2 maxcdn.bootstrapcdn.com/bootstrap/3.3.6/css/bootstrap.min.css
IP 104.18.10.207:0
GET /bootstrap/3.3.6/css/bootstrap.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.register.it/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 12 Nov 2022 09:24:27 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"2f624089c65f12185e79925bc5a7fc42"
last-modified: Mon, 25 Jan 2021 22:03:59 GMT
cdn-cachedat: 02/17/2022 20:27:53
cdn-proxyver: 1.02
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 860
cdn-status: 200
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-requestid: 441a5c346e6138207e493340368ec0b9
cdn-cache: HIT
cf-cache-status: HIT
age: 13691428
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 768e36fa6d82b4f9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2