retailintuitive.com/
301 Moved Permanently 707 B IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 1304294c0823ca486542ba408ed761e3
b2a70fb2d810ca13985882e6981f33998823e83e
3bbe72f3baa8ec61de17a1d767fca58704769684b7abe9161d0c4eaf4c8f0982
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: retailintuitive.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: text/html
content-length: 707
date: Wed, 01 Feb 2023 16:40:40 GMT
server: LiteSpeed
location: https://retailintuitive.com/
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d2e72d45afe3d391c204b5391599607c
149d68b9d00a720b6f380fa2324779dca9dbe26d
f6f1c295c68dfebadacb1fc812b44e01c7ede0e203615ef3e2cced2ce2251e7e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F6F1C295C68DFEBADACB1FC812B44E01C7EDE0E203615EF3E2CCED2CE2251E7E"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4327
Expires: Wed, 01 Feb 2023 17:52:47 GMT
Date: Wed, 01 Feb 2023 16:40:40 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 62de35a6c8e4efd7633fc5236b5b086f
6a92912a86dfcd0330d040cef06bef36889c76ab
ebb8ca05df5ba73b92174105d54d192a8d9e3e10fba48bf96161b0cb759220ec
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EBB8CA05DF5BA73B92174105D54D192A8D9E3E10FBA48BF96161B0CB759220EC"
Last-Modified: Tue, 31 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7518
Expires: Wed, 01 Feb 2023 18:45:58 GMT
Date: Wed, 01 Feb 2023 16:40:40 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash ff250d3ef3fa45322bf05039a0122a9f
b3e7a2c383bce1bab807dbe1a03c375258b51f1d
d07f109a96e0ae6ec7b1d46ce8761b3f06fe845769ce65d69e053dd40aa561ba
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Retry-After, Backoff, Content-Type, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 01 Feb 2023 16:36:02 GMT
content-type: application/json
age: 278
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a8d45deaa7ebfcd996c2055dae592ab8
55befe074589fe7b39757c145968058162a8fc6b
50d7d516f446458145a304b288a0a39d391cd37ea50dabea36ae48d291c65ba7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "50D7D516F446458145A304B288A0A39D391CD37EA50DABEA36AE48D291C65BA7"
Last-Modified: Tue, 31 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3810
Expires: Wed, 01 Feb 2023 17:44:10 GMT
Date: Wed, 01 Feb 2023 16:40:40 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: TNqTPGX4hVhSrzfpm44TLUTGvaxz6+OS1oWyvq9frcOuzYASh8QfNAs6YWNob9FiJgi8Fm/b57A=
x-amz-request-id: GD3D84V67DXQH3JF
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 01 Feb 2023 15:51:37 GMT
age: 2943
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 01 Feb 2023 16:40:40 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Pragma, Backoff, Retry-After, Content-Length, Last-Modified, Expires, Cache-Control, ETag, Alert, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Wed, 01 Feb 2023 15:49:05 GMT
age: 3096
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8913af0be619500295008bb91f506660
a7b8068ba9aa506205a295b24458c2616997a0d1
6a9838d00256431807ca382fc205064b07c08d5054f2895c2ae3cc4e9094179a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6A9838D00256431807CA382FC205064B07C08D5054F2895C2AE3CC4E9094179A"
Last-Modified: Wed, 01 Feb 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2951
Expires: Wed, 01 Feb 2023 17:29:52 GMT
Date: Wed, 01 Feb 2023 16:40:41 GMT
Connection: keep-alive
ocsp.sectigo.com/
200 OK 282 B IP
Hash e0a381352099dee9f09295a1e7e11ee4
3adeb5e1f4db142a6e6d5c8affb0032061be6dcc
98ed9bfcb7bc5ca68d282566bece8f3f7dc2ecbdb1b37a6ba5487095fea26214
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 01 Feb 2023 16:40:41 GMT
Content-Type: application/ocsp-response
Content-Length: 282
Connection: keep-alive
Last-Modified: Wed, 01 Feb 2023 08:45:37 GMT
Expires: Wed, 08 Feb 2023 08:45:36 GMT
Etag: "3adeb5e1f4db142a6e6d5c8affb0032061be6dcc"
Cache-Control: max-age=575694,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 792c21596de6b511-OSL
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: N/mrWwHyWcd2HH817Pdt7Q==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: ddD9bxQ9hMHkWKcw4/XzKxppDOI=
ocsp.digicert.com/
200 OK 280 B IP
Hash b4e1f86943ce0e7b796ef975397745f9
609a3b3735701930bec486aacd311f61a731b9ec
b12748da52192a428a5d04d4eb39f6d8dbb0cad273e3fef8b82f077037e25b37
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6519
Cache-Control: max-age=110345
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 16:40:42 GMT
Etag: "63d9889c-118"
Expires: Thu, 02 Feb 2023 23:19:47 GMT
Last-Modified: Tue, 31 Jan 2023 21:31:08 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 280
ocsp.digicert.com/
200 OK 280 B IP
Hash b4e1f86943ce0e7b796ef975397745f9
609a3b3735701930bec486aacd311f61a731b9ec
b12748da52192a428a5d04d4eb39f6d8dbb0cad273e3fef8b82f077037e25b37
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3892
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 16:40:42 GMT
Etag: "63d9889c-118"
Last-Modified: Wed, 01 Feb 2023 15:35:51 GMT
Server: ECS (amb/6BA9)
X-Cache: HIT
Content-Length: 280
ocsp.digicert.com/
200 OK 280 B IP
Hash b4e1f86943ce0e7b796ef975397745f9
609a3b3735701930bec486aacd311f61a731b9ec
b12748da52192a428a5d04d4eb39f6d8dbb0cad273e3fef8b82f077037e25b37
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6519
Cache-Control: max-age=110345
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 16:40:42 GMT
Etag: "63d9889c-118"
Expires: Thu, 02 Feb 2023 23:19:47 GMT
Last-Modified: Tue, 31 Jan 2023 21:31:08 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 280
ocsp.digicert.com/
200 OK 280 B IP
Hash b4e1f86943ce0e7b796ef975397745f9
609a3b3735701930bec486aacd311f61a731b9ec
b12748da52192a428a5d04d4eb39f6d8dbb0cad273e3fef8b82f077037e25b37
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3152
Cache-Control: max-age=106978
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 16:40:42 GMT
Etag: "63d9889c-118"
Expires: Thu, 02 Feb 2023 22:23:40 GMT
Last-Modified: Tue, 31 Jan 2023 21:31:08 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 280
ocsp.digicert.com/
200 OK 280 B IP
Hash b4e1f86943ce0e7b796ef975397745f9
609a3b3735701930bec486aacd311f61a731b9ec
b12748da52192a428a5d04d4eb39f6d8dbb0cad273e3fef8b82f077037e25b37
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4252
Cache-Control: max-age=108078
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 16:40:42 GMT
Etag: "63d9889c-118"
Expires: Thu, 02 Feb 2023 22:42:00 GMT
Last-Modified: Tue, 31 Jan 2023 21:31:08 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 280
static.nc-img.com/pp/nc-ui-globalenv/museo-sans-700-webfont.b125dc012841fa8a23b98c37499ca5e8.woff2
200 OK 18 kB URL HTTP/2 static.nc-img.com/pp/nc-ui-globalenv/museo-sans-700-webfont.b125dc012841fa8a23b98c37499ca5e8.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 18128, version 1.0\012- data
Hash b125dc012841fa8a23b98c37499ca5e8
2ea271a80f6a93b9888a34797db75cee3e627673
177c4f2826cbc2cc24a9d8018e6c9848ed73178a76fd3aabe99b44ee9458514c
GET /pp/nc-ui-globalenv/museo-sans-700-webfont.b125dc012841fa8a23b98c37499ca5e8.woff2 HTTP/1.1
Host: static.nc-img.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.namecheap.com
Connection: keep-alive
Referer: https://www.namecheap.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 01 Feb 2023 16:40:42 GMT
content-type: application/font-woff2
content-length: 18128
last-modified: Wed, 20 Apr 2022 17:17:12 GMT
etag: "62604018-46d0"
vary: Origin, Accept-Encoding
cache-control: public, max-age=31536000, immutable
access-control-allow-origin: *
cf-cache-status: HIT
age: 23379228
accept-ranges: bytes
server: cloudflare
cf-ray: 792c215edcab0afe-OSL
X-Firefox-Spdy: h2
static.nc-img.com/pp/nc-ui-globalenv/museo-sans-500-webfont.5d9883d92e2eaa724e4e6beb0ef6728a.woff2
200 OK 21 kB URL HTTP/2 static.nc-img.com/pp/nc-ui-globalenv/museo-sans-500-webfont.5d9883d92e2eaa724e4e6beb0ef6728a.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 20920, version 1.0\012- data
Hash 5d9883d92e2eaa724e4e6beb0ef6728a
3e36376942825aaaa32279175fdb34a4b7bc9435
9c0749dc1deb3275e1846a462c0dcb83df2b5fec30112eacdf5530fa51e3160f
GET /pp/nc-ui-globalenv/museo-sans-500-webfont.5d9883d92e2eaa724e4e6beb0ef6728a.woff2 HTTP/1.1
Host: static.nc-img.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.namecheap.com
Connection: keep-alive
Referer: https://www.namecheap.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 01 Feb 2023 16:40:42 GMT
content-type: application/font-woff2
content-length: 20920
last-modified: Wed, 20 Apr 2022 17:17:12 GMT
etag: "62604018-51b8"
vary: Origin, Accept-Encoding
cache-control: public, max-age=31536000, immutable
access-control-allow-origin: *
cf-cache-status: HIT
age: 24578270
accept-ranges: bytes
server: cloudflare
cf-ray: 792c215f1cf30afe-OSL
X-Firefox-Spdy: h2
static.nc-img.com/pp/nc-ui-globalenv/museo-sans-300-webfont.96dd56ebb50aa0150f6630360d8d69cf.woff2
200 OK 21 kB URL HTTP/2 static.nc-img.com/pp/nc-ui-globalenv/museo-sans-300-webfont.96dd56ebb50aa0150f6630360d8d69cf.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 20848, version 1.0\012- data
Hash 96dd56ebb50aa0150f6630360d8d69cf
8ada6284514db2f56a084733eed649b9c7d41f1f
93467f75842330c3502fc0268a7a62151f3744221ca7ffa6dc5057dac4a64cee
GET /pp/nc-ui-globalenv/museo-sans-300-webfont.96dd56ebb50aa0150f6630360d8d69cf.woff2 HTTP/1.1
Host: static.nc-img.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.namecheap.com
Connection: keep-alive
Referer: https://www.namecheap.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 01 Feb 2023 16:40:42 GMT
content-type: application/font-woff2
content-length: 20848
last-modified: Wed, 09 Feb 2022 12:51:11 GMT
etag: "6203b8bf-5170"
vary: Origin, Accept-Encoding
cache-control: public, max-age=31536000, immutable
access-control-allow-origin: *
cf-cache-status: HIT
age: 24578270
accept-ranges: bytes
server: cloudflare
cf-ray: 792c215f1cf50afe-OSL
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 2751084b42dd111d0a7f28241a77201b
680a9ac2f4cf451c9a8449c4df3587595ed9cc4c
1c68a770afbcdb5405fe330f2eabefa576ea1d08740719956083d7f6b490ccf8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 16:40:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtm.js?id=GTM-544JFM
200 OK 112 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-544JFM
IP
File type ASCII text, with very long lines (40839)
Size 112 kB (112516 bytes)
Hash 16e2a25f663e694a9411c9d4d2fa9305
59c24f976a623dfb3d19445a69f7aebebfbefc82
957493e3d5484e2a3f72c2904766dc81ea2e5b4078d6ea584ad733696ca09209
GET /gtm.js?id=GTM-544JFM HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.namecheap.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 01 Feb 2023 16:40:42 GMT
expires: Wed, 01 Feb 2023 16:40:42 GMT
cache-control: private, max-age=900
last-modified: Wed, 01 Feb 2023 15:10:04 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 112516
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
static.nc-img.com/pp/nc-ui-globalenv/museo-sans-300-webfont.79d75c0208e298dce66a21f77de03ef7.woff
200 OK 35 kB URL HTTP/2 static.nc-img.com/pp/nc-ui-globalenv/museo-sans-300-webfont.79d75c0208e298dce66a21f77de03ef7.woff
IP
File type Web Open Font Format, TrueType, length 35241, version 0.0\012- data
Hash 79d75c0208e298dce66a21f77de03ef7
14541a65f08834b16aca7d79eb78300a65f1eda2
6a382a283c77b7e93e7bb5b0b1902242082a4800dac20da3334d641093b33005
GET /pp/nc-ui-globalenv/museo-sans-300-webfont.79d75c0208e298dce66a21f77de03ef7.woff HTTP/1.1
Host: static.nc-img.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.namecheap.com
Connection: keep-alive
Referer: https://static.nc-img.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 16:40:42 GMT
content-type: application/font-woff
content-length: 35241
last-modified: Wed, 09 Feb 2022 12:51:11 GMT
etag: "6203b8bf-89a9"
vary: Origin, Accept-Encoding
cache-control: public, max-age=31536000, immutable
access-control-allow-origin: *
cf-cache-status: HIT
age: 23375437
accept-ranges: bytes
server: cloudflare
cf-ray: 792c215fbdcc0afe-OSL
X-Firefox-Spdy: h2
static.nc-img.com/pp/nc-ui-globalenv/gb-icon-font.7c4d55ac808077a72e2414d4709b6095.woff2
200 OK 24 kB URL HTTP/2 static.nc-img.com/pp/nc-ui-globalenv/gb-icon-font.7c4d55ac808077a72e2414d4709b6095.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 23952, version 1.0\012- data
Hash 7c4d55ac808077a72e2414d4709b6095
cf0b5dbdb538dc05422e1493daef6abb72c6a70f
84fbb988e97f8e8d890b55ef883e7cac1a23baf35cbaf8e53cb18b0715bc1ba5
GET /pp/nc-ui-globalenv/gb-icon-font.7c4d55ac808077a72e2414d4709b6095.woff2 HTTP/1.1
Host: static.nc-img.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.namecheap.com
Connection: keep-alive
Referer: https://static.nc-img.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 16:40:42 GMT
content-type: application/font-woff2
content-length: 23952
last-modified: Tue, 13 Sep 2022 11:52:30 GMT
etag: "63206efe-5d90"
vary: Origin, Accept-Encoding
cache-control: public, max-age=31536000, immutable
access-control-allow-origin: *
cf-cache-status: HIT
age: 12194347
accept-ranges: bytes
server: cloudflare
cf-ray: 792c215fbdcd0afe-OSL
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 55bb9ebdb953b89f7f6d3d4ec43da8ad
71cf40541c5b672d9a5d1e36b110ae01a1457db4
5b355475ae774050e3662071f1bf56eef6ac57a3f393297f1fc725ceb93ea1a6
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=95372
Date: Wed, 01 Feb 2023 16:40:42 GMT
Etag: "63d95747-1d7"
Expires: Thu, 02 Feb 2023 19:10:14 GMT
Last-Modified: Tue, 31 Jan 2023 18:00:39 GMT
Server: ECS (bsa/EB21)
X-Cache: Miss from cloudfront
Via: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: TXRCQjdTJ6oLorsgYN4OOXA_O8j4wfOItIl2lfYWwnp-VZihcJ4cXQ==
Age: 4176
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 2751084b42dd111d0a7f28241a77201b
680a9ac2f4cf451c9a8449c4df3587595ed9cc4c
1c68a770afbcdb5405fe330f2eabefa576ea1d08740719956083d7f6b490ccf8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 16:40:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 279 B IP
Hash d51258558e6ef33e3d5c83c66fa0732b
a0b3ed79855d7438cd2434e37bb2590d6f3ad75f
7203fd0e795dfdd7091bd8a1a01f8cde7ff1a5af20f9282c25e9c8081ae2ed46
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4715
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 16:40:42 GMT
Last-Modified: Wed, 01 Feb 2023 15:22:07 GMT
Server: ECS (amb/6BA9)
X-Cache: HIT
Content-Length: 279
static.nc-img.com/api/fragment/uilayout2/b09bde70a3dc86bf3272330f81cd8fb7.png
200 OK 14 kB URL HTTP/2 static.nc-img.com/api/fragment/uilayout2/b09bde70a3dc86bf3272330f81cd8fb7.png
IP
File type PNG image data, 250 x 265, 8-bit colormap, non-interlaced\012- data
Hash b09bde70a3dc86bf3272330f81cd8fb7
1cd86c448190595d9087aa0c2293858ac7924e57
970b9acc47e2a6658424ac8cd127f2c4d62bc8e23bc43c4e2f3b53f9861bc8d6
GET /api/fragment/uilayout2/b09bde70a3dc86bf3272330f81cd8fb7.png HTTP/1.1
Host: static.nc-img.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.nc-img.com/uilayout2/app.1746c78f1bec568bf53f.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 16:40:42 GMT
content-type: image/png
content-length: 13724
last-modified: Fri, 16 Dec 2022 11:14:04 GMT
etag: "639c52fc-359c"
vary: Origin, Accept-Encoding
cache-control: public, max-age=31536000, immutable
cf-cache-status: HIT
age: 3729784
accept-ranges: bytes
server: cloudflare
cf-ray: 792c216178e7b51e-OSL
X-Firefox-Spdy: h2
www.namecheap.com/api/v1/ncpl/cart/user/get
200 OK 74 kB URL HTTP/2 www.namecheap.com/api/v1/ncpl/cart/user/get
IP
Hash a28da6cca453788331f1b39d0d1a25d6
e18962be239eee89dfa005cebb80c92f74d66cd7
5589e68de4010b5ecafb093dbc39b5c19f373fe590d0435a9cb38131d46a6cef
GET /api/v1/ncpl/cart/user/get HTTP/1.1
Host: www.namecheap.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
x-ncpl-rcsrf: b162b30ad9ab45159e83a7dec3dc2a7b
Connection: keep-alive
Referer: https://www.namecheap.com/market/buynow/retailintuitive.com/
Cookie: SessionId=dbe324adcdba4e8aa7f26d86c1f08251; x-ncpl-csrf=b162b30ad9ab45159e83a7dec3dc2a7b; __cflb=02DiuJ7dRDeDqrVicRi7tLYhyh8Y18iqJU7mn4zj9Z8aG; __cfruid=730500326bc1e94f9982b4ceaef4a0da6d1daa4d-1675269641
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 16:40:42 GMT
content-type: application/json
vary: Accept-Encoding
strict-transport-security: max-age=16000000; includeSubDomains
content-encoding: gzip
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 792c2160a862b521-OSL
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 472 B IP
Hash 92ed5f91ffb7da217fc592808cc5b5c9
cb0767e587e669abe3b939774636322fd686859d
d053374f73eec296040d8ccb49e3516ad045f98fa2517e03cb906a7af7625927
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 01 Feb 2023 16:40:42 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sun, 29 Jan 2023 06:44:42 GMT
Expires: Sun, 05 Feb 2023 06:44:41 GMT
Etag: "cb0767e587e669abe3b939774636322fd686859d"
Cache-Control: max-age=309238,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 792c21637b07b511-OSL
www.namecheap.com/domains/tlds.ashx
200 OK 32 kB URL HTTP/2 www.namecheap.com/domains/tlds.ashx
IP
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash bb2448a4915d606830f78172b11c89b4
b70790379ccaf88042e4a725da2a7386586f7de8
142c0ae14501deaef5feffdd9687fea502152ca2f1dd57864cd9937d7a7b5f67
GET /domains/tlds.ashx HTTP/1.1
Host: www.namecheap.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.namecheap.com/market/buynow/retailintuitive.com/
Cookie: SessionId=dbe324adcdba4e8aa7f26d86c1f08251; x-ncpl-csrf=b162b30ad9ab45159e83a7dec3dc2a7b; __cflb=02DiuJ7dRDeDqrVicRi7tLYhyh8Y18iqJU7mn4zj9Z8aG; __cfruid=730500326bc1e94f9982b4ceaef4a0da6d1daa4d-1675269641
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 16:40:42 GMT
content-type: application/json
vary: Accept-Encoding
cache-control: no-cache
pragma: no-cache
expires: -1
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-inst: 23
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, _NcCompliance
access-control-allow-methods: GET, POST
access-control-allow-credentials: true
strict-transport-security: max-age=16000000; includeSubDomains
content-encoding: gzip
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 792c2160a863b521-OSL
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 472 B IP
Hash 92ed5f91ffb7da217fc592808cc5b5c9
cb0767e587e669abe3b939774636322fd686859d
d053374f73eec296040d8ccb49e3516ad045f98fa2517e03cb906a7af7625927
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 01 Feb 2023 16:40:42 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sun, 29 Jan 2023 06:44:42 GMT
Expires: Sun, 05 Feb 2023 06:44:41 GMT
Etag: "cb0767e587e669abe3b939774636322fd686859d"
Cache-Control: max-age=309238,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 792c21640bd8b511-OSL
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e8e0173672ec76c01676a1ba4e1be857
3d01334320c94972440226cfe96c8c7646cae796
c75aea885e434e8bf53e439c4b441e2af4b228f70212001fcc4c8094f534e0f1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C75AEA885E434E8BF53E439C4B441E2AF4B228F70212001FCC4C8094F534E0F1"
Last-Modified: Tue, 31 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5687
Expires: Wed, 01 Feb 2023 18:15:29 GMT
Date: Wed, 01 Feb 2023 16:40:42 GMT
Connection: keep-alive
cdn.engagement.ai/production/static/js/loader/chatLoader.v3.js
200 OK 1.5 kB URL HTTP/2 cdn.engagement.ai/production/static/js/loader/chatLoader.v3.js
IP
Hash d5085ce01456abe5b4d969ec85206844
f444c7c38f19edb7edda782849b63c29320f316c
5017b36d0589b64c4b0a93a48bddd03b7908e02795ab983b9254a215a393e400
GET /production/static/js/loader/chatLoader.v3.js HTTP/1.1
Host: cdn.engagement.ai
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.namecheap.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
date: Wed, 01 Feb 2023 11:29:42 GMT
last-modified: Wed, 01 Feb 2023 11:29:29 GMT
etag: W/"2f04497c46e62d90bbbdc5a8d46033b1"
cache-control: max-age=86400,public
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: d4nQwxUiweBdMasgsfHOcQN9ZzLl1d0-SSNSQeXFtn-3CeMlMIVoGw==
age: 18661
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e8e0173672ec76c01676a1ba4e1be857
3d01334320c94972440226cfe96c8c7646cae796
c75aea885e434e8bf53e439c4b441e2af4b228f70212001fcc4c8094f534e0f1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C75AEA885E434E8BF53E439C4B441E2AF4B228F70212001FCC4C8094F534E0F1"
Last-Modified: Tue, 31 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5687
Expires: Wed, 01 Feb 2023 18:15:29 GMT
Date: Wed, 01 Feb 2023 16:40:42 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e8e0173672ec76c01676a1ba4e1be857
3d01334320c94972440226cfe96c8c7646cae796
c75aea885e434e8bf53e439c4b441e2af4b228f70212001fcc4c8094f534e0f1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C75AEA885E434E8BF53E439C4B441E2AF4B228F70212001FCC4C8094F534E0F1"
Last-Modified: Tue, 31 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5687
Expires: Wed, 01 Feb 2023 18:15:29 GMT
Date: Wed, 01 Feb 2023 16:40:42 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e8e0173672ec76c01676a1ba4e1be857
3d01334320c94972440226cfe96c8c7646cae796
c75aea885e434e8bf53e439c4b441e2af4b228f70212001fcc4c8094f534e0f1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C75AEA885E434E8BF53E439C4B441E2AF4B228F70212001FCC4C8094F534E0F1"
Last-Modified: Tue, 31 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5687
Expires: Wed, 01 Feb 2023 18:15:29 GMT
Date: Wed, 01 Feb 2023 16:40:42 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe2d02739-590e-4a37-9ca5-c27003f9e416.jpeg
200 OK 16 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe2d02739-590e-4a37-9ca5-c27003f9e416.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4bb3a6fba496d54cdbbccaf2b9600386
8e30002699e9fbf2047f9ac11a36d2175fc9c591
927bf3a04b011b4e3bc8d8772a3d5813507f7f523312d43627767b64615562f3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe2d02739-590e-4a37-9ca5-c27003f9e416.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 15857
x-amzn-requestid: cfe36b9d-34f6-4f3f-896e-e70ec45c4a04
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fmJ2JGGWoAMFSLA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d8bcf3-0dd68dd778b9aba268a129b0;Sampled=0
x-amzn-remapped-date: Tue, 31 Jan 2023 07:02:11 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: pU_436f27nMZKPxZZWqZekERHFTvcG5NT5p_CYEXHRPtIWjDtSA-uA==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 fda3b2797d2719576f6b916583a28e52.cloudfront.net (CloudFront), 1.1 google
date: Wed, 01 Feb 2023 07:27:41 GMT
age: 33181
etag: "8e30002699e9fbf2047f9ac11a36d2175fc9c591"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F591a38fc-2daf-42e7-a48b-a02e54cb63e0.jpeg
200 OK 7.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F591a38fc-2daf-42e7-a48b-a02e54cb63e0.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3c83dcdb618756ebbfeb69a8bff6d38c
5f909182ab6847690e7ebd100e3f0d2798e36192
2e29d0747fb973908228501178465ac09f6553ef8e50dd70ee617f3379eb733c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F591a38fc-2daf-42e7-a48b-a02e54cb63e0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7049
x-amzn-requestid: bc6522f2-eb6b-4e59-9912-0c03d145f021
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fk31LGE2IAMF8rw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d839ba-67477ed1260c27f67e28043d;Sampled=0
x-amzn-remapped-date: Mon, 30 Jan 2023 21:42:18 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Q_aVbWJKMbX1_bjggzbdnWbgmfooGvXj76t55QGGXRr_y6ZgW2gctw==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 556b99c6be8d7078b9f067347c62df6a.cloudfront.net (CloudFront), 1.1 google
date: Wed, 01 Feb 2023 12:23:45 GMT
age: 15418
etag: "5f909182ab6847690e7ebd100e3f0d2798e36192"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F72e6599c-6a41-4dd2-a346-b15fa84cb20a.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F72e6599c-6a41-4dd2-a346-b15fa84cb20a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 65c02d8a1b0d6a210cb2a649c5c67469
027dbc7a104c922904f067ed15d696c363c11774
89d5443a1d313c632d09a583ef602aa4645a16986076387329f434262d15b0a1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F72e6599c-6a41-4dd2-a346-b15fa84cb20a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10997
x-amzn-requestid: a6fac0ab-1acf-4808-8785-3b4ec5e32edf
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fhj30FX7IAMFa5w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d6e698-005109ec2e76529e793678d6;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 21:35:20 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: _xCzARAxn6PB9wrQAL98hWvnUxQOocZFqMoS2l_CoIzOJC18bXQuSQ==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 943c6a4d4ee43b18ee91634536f53eae.cloudfront.net (CloudFront), 1.1 google
date: Tue, 31 Jan 2023 21:53:32 GMT
age: 67631
etag: "027dbc7a104c922904f067ed15d696c363c11774"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F82a4ade3-0c43-4f21-9738-0bc1dbb9a6a6.jpeg
200 OK 8.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F82a4ade3-0c43-4f21-9738-0bc1dbb9a6a6.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 27e95b7912edc909d6b031e36fe83534
eb27fae0bb17dbe0929a620002195233ef50c1d0
b32e7e1a2eee367c5bf9e99bcb38f4c74c4e9e7bdfe7fb0f8f2a657060c0624c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F82a4ade3-0c43-4f21-9738-0bc1dbb9a6a6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8597
x-amzn-requestid: e7bf4ac9-d86d-4ee9-9e10-8a42e5dfe2c6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fcRaNEW4IAMFatA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d4c90d-7731312f630b00ba028836ca;Sampled=0
x-amzn-remapped-date: Sat, 28 Jan 2023 07:04:45 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: z3ZJ7bq6LuJd-9I9D22VIs0avctNGVDKnYmt-fxevCheQibivmUomQ==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 64f86ae1c24221f3a2e4d653d6dbc416.cloudfront.net (CloudFront), 1.1 google
date: Wed, 01 Feb 2023 12:57:00 GMT
age: 13423
etag: "eb27fae0bb17dbe0929a620002195233ef50c1d0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F71bb87d4-a329-46af-946e-9b5edda7dddb.jpeg
200 OK 7.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F71bb87d4-a329-46af-946e-9b5edda7dddb.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2419bbbf287e620325438f5620183e32
257963245f14742bf9cd90e71ca748066d5495c3
47c7495be97a81189da17fc3abf430d1f4ecae95fdda30006cc462a4cea4c643
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F71bb87d4-a329-46af-946e-9b5edda7dddb.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7628
x-amzn-requestid: 29c70d62-ed3a-4c90-8f32-2dc0c1caf5e0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fcDSnG4RIAMF5eg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d4b276-0267c928110be13d26906bed;Sampled=0
x-amzn-remapped-date: Sat, 28 Jan 2023 05:28:22 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: temaq_TJ35QzsVDLMotam8rNea4vwiE7Zo7i8wlqQJr0JIXdL1_Iww==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Tue, 31 Jan 2023 20:27:56 GMT
age: 72767
etag: "257963245f14742bf9cd90e71ca748066d5495c3"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46e30ba8-4b02-4bad-8cbf-1a128aa4376f.jpeg
200 OK 9.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46e30ba8-4b02-4bad-8cbf-1a128aa4376f.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3366ef4f8733cb9c89a5c88f63a0a441
7da46843b6d885f38a4759a08e6c899906ab7b97
7114397ee5c251cc5cb46f3433c2cc17ff68a08e0872e227671198e9b61eba0a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46e30ba8-4b02-4bad-8cbf-1a128aa4376f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9600
x-amzn-requestid: 48094e1a-d550-4a91-b87c-4a08505f7cce
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fVsWcFN7IAMF2pg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d2275c-5ced593a7e2126c9494563df;Sampled=0
x-amzn-remapped-date: Thu, 26 Jan 2023 07:10:20 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: aZOeDFqBJQoGwLpIs-GpPvY0FKGCAOXY6MgzG32qzX-kVzUCKKv-kw==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Wed, 01 Feb 2023 02:29:58 GMT
age: 51045
etag: "7da46843b6d885f38a4759a08e6c899906ab7b97"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
d3ry1h4w5036x1.cloudfront.net/hero-v2.svg
200 OK 14 kB URL HTTP/2 d3ry1h4w5036x1.cloudfront.net/hero-v2.svg
IP
Hash 40e5e0caf061f6ba0e8cb1bcce6145bf
b02d6a92f611afc0357cb78af2d08a21ee39cbe6
18a11c8fbbd131873901e9c5c471e4f247998f177ea30eac9f8bd370fe82c598
GET /hero-v2.svg HTTP/1.1
Host: d3ry1h4w5036x1.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.namecheap.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
date: Sat, 07 Jan 2023 03:45:01 GMT
last-modified: Tue, 13 Dec 2022 10:23:15 GMT
etag: W/"e47c1f8a3021ffa15224a58e04887372"
cache-control: public, max-age=31536000
server: AmazonS3
content-encoding: gzip
x-cache: Hit from cloudfront
via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: iP4JqfodkmSP1RTqv87BbR0pKeWgTfqmcAaYmwPU-wodIyKQJvDEIQ==
age: 2206543
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1490)
Hash ca7fbbfd120e3e329633044190bbf134
d17f81e03dd827554ddd207ea081fb46b3415445
847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.namecheap.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20085
date: Wed, 01 Feb 2023 15:45:20 GMT
expires: Wed, 01 Feb 2023 17:45:20 GMT
cache-control: public, max-age=7200
age: 3323
last-modified: Tue, 10 Jan 2023 21:29:14 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash a4253e662d539c01b8656dbb6d73aab1
08f71eead367b6fa76b99f7f590680a5f5650b62
f05b99f6b0c8fb5c38221d02c0c9ed96389fbd5105d6329cdc733d1fae411df2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 16:40:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sectigo.com/
200 OK 472 B IP
Hash 02001e13cb451b339efbf5d315ed2d7d
1bf5780efd6858fe62f1e3e2bd8f101b7a20dfbb
a8233aa11792e55c5464bcbcb505fbbaf2ecd5a3f768ae058fefebb2b48ec9e9
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 01 Feb 2023 16:40:43 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Mon, 30 Jan 2023 13:11:59 GMT
Expires: Mon, 06 Feb 2023 13:11:58 GMT
Etag: "1bf5780efd6858fe62f1e3e2bd8f101b7a20dfbb"
Cache-Control: max-age=418874,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 792c21671a140b06-OSL
www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-7DMJMG20P8&cid=122461027.1675269665>m=2oe1u0&aip=1&z=1522859650
200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-7DMJMG20P8&cid=122461027.1675269665>m=2oe1u0&aip=1&z=1522859650
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-7DMJMG20P8&cid=122461027.1675269665>m=2oe1u0&aip=1&z=1522859650 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.namecheap.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 01 Feb 2023 16:40:43 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
script.crazyegg.com/pages/data-scripts/0043/5670/site/www.namecheap.com.json?t=1
200 OK 2.0 kB URL HTTP/2 script.crazyegg.com/pages/data-scripts/0043/5670/site/www.namecheap.com.json?t=1
IP
File type JSON data\012- , ASCII text, with very long lines (5577), with no line terminators
Hash 207e1477a3081cbb2a88a93fb2e96069
9f454329c008ccfaa75e0879c41a387dbc17fc67
ab18c2257fc915492f0bfad1bef0752983e4570371b9a328e8fcb1d9c89629cf
GET /pages/data-scripts/0043/5670/site/www.namecheap.com.json?t=1 HTTP/1.1
Host: script.crazyegg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.namecheap.com
Connection: keep-alive
Referer: https://www.namecheap.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 01 Feb 2023 16:40:43 GMT
content-type: application/json
content-length: 1988
access-control-expose-headers: CE-Version
ce-version: 11.5.21
cache-control: public, max-age=300, s-maxage=1209600
timing-allow-origin: *
last-modified: Wed, 01 Feb 2023 10:06:43 GMT
content-encoding: gzip
access-control-allow-origin: *
cf-cache-status: HIT
age: 23637
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 792c2167bbc3b4fd-OSL
X-Firefox-Spdy: h2
www.namecheap.com/assets/img/nc-icon/favicon.ico
200 OK 1.2 kB URL HTTP/2 www.namecheap.com/assets/img/nc-icon/favicon.ico
IP
Hash c8e78bcc5975bb8742937733dd5ba28b
d0e17b86e4f5e1f2fc57eb97e8b46b06402de626
06d67f451fffe69139c3ef42dbf8f8bad17606bb0f2dc2bd1eb75b719d2dbdec
GET /assets/img/nc-icon/favicon.ico HTTP/1.1
Host: www.namecheap.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.namecheap.com/market/buynow/retailintuitive.com/
Cookie: SessionId=dbe324adcdba4e8aa7f26d86c1f08251; x-ncpl-csrf=b162b30ad9ab45159e83a7dec3dc2a7b; __cflb=02DiuJ7dRDeDqrVicRi7tLYhyh8Y18iqJU7mn4zj9Z8aG; __cfruid=730500326bc1e94f9982b4ceaef4a0da6d1daa4d-1675269641; _gcl_au=1.1.1824208519.1675269665; x-sf-country=c7bf3c5247c72bdaef050d7b42117e3b1d05b9ddc540e0537311714a5dcbd54f|NO; .c=USD; _ga_7DMJMG20P8=GS1.1.1675269665.1.0.1675269665.60.0.0; _ga=GA1.1.122461027.1675269665; IR_gbd=namecheap.com; IR_5618=1675269665110%7C0%7C1675269665110%7C%7C
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 16:40:43 GMT
content-type: image/x-icon
vary: Accept-Encoding
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-inst: 24
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, _NcCompliance
access-control-allow-methods: GET, POST
access-control-allow-credentials: true
strict-transport-security: max-age=16000000; includeSubDomains
content-encoding: gzip
last-modified: Wed, 01 Feb 2023 13:57:51 GMT
cf-cache-status: HIT
age: 6355
expires: Wed, 01 Feb 2023 20:40:43 GMT
cache-control: public, max-age=14400
server: cloudflare
cf-ray: 792c21673943b521-OSL
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash a4253e662d539c01b8656dbb6d73aab1
08f71eead367b6fa76b99f7f590680a5f5650b62
f05b99f6b0c8fb5c38221d02c0c9ed96389fbd5105d6329cdc733d1fae411df2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 16:40:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
region1.analytics.google.com/g/collect?v=2&tid=G-7DMJMG20P8>m=2oe1u0&_p=1416603679&_gaz=1&cid=122461027.1675269665&ul=en-us&sr=1280x1024&ir=1&uaW=1&_eu=EA&_s=1&sid=1675269665&sct=1&seg=0&dl=https%3A%2F%2Fwww.namecheap.com%2Fmarket%2Fbuynow%2Fretailintuitive.com%2F&dt=Market%20-%20Namecheap&en=page_view&_fv=2&_nsi=1&_ss=1&ep.cookieDomain=auto&ep.allowLinker=true&ep.userId=&ep.provider=ebfff33e2a15d73ca8f62fde772182b3fab176d1dda037b69d70b1524716d6e3&ep.timestamp=2023-02-01T16%3A41%3A04.946%2B00%3A00&ep.sessionId=1675269664947.ti0esx5&up.userId=&up.cid=none
204 No Content 0 B URL HTTP/2 region1.analytics.google.com/g/collect?v=2&tid=G-7DMJMG20P8>m=2oe1u0&_p=1416603679&_gaz=1&cid=122461027.1675269665&ul=en-us&sr=1280x1024&ir=1&uaW=1&_eu=EA&_s=1&sid=1675269665&sct=1&seg=0&dl=https%3A%2F%2Fwww.namecheap.com%2Fmarket%2Fbuynow%2Fretailintuitive.com%2F&dt=Market%20-%20Namecheap&en=page_view&_fv=2&_nsi=1&_ss=1&ep.cookieDomain=auto&ep.allowLinker=true&ep.userId=&ep.provider=ebfff33e2a15d73ca8f62fde772182b3fab176d1dda037b69d70b1524716d6e3&ep.timestamp=2023-02-01T16%3A41%3A04.946%2B00%3A00&ep.sessionId=1675269664947.ti0esx5&up.userId=&up.cid=none
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-7DMJMG20P8>m=2oe1u0&_p=1416603679&_gaz=1&cid=122461027.1675269665&ul=en-us&sr=1280x1024&ir=1&uaW=1&_eu=EA&_s=1&sid=1675269665&sct=1&seg=0&dl=https%3A%2F%2Fwww.namecheap.com%2Fmarket%2Fbuynow%2Fretailintuitive.com%2F&dt=Market%20-%20Namecheap&en=page_view&_fv=2&_nsi=1&_ss=1&ep.cookieDomain=auto&ep.allowLinker=true&ep.userId=&ep.provider=ebfff33e2a15d73ca8f62fde772182b3fab176d1dda037b69d70b1524716d6e3&ep.timestamp=2023-02-01T16%3A41%3A04.946%2B00%3A00&ep.sessionId=1675269664947.ti0esx5&up.userId=&up.cid=none HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.namecheap.com
Connection: keep-alive
Referer: https://www.namecheap.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://www.namecheap.com
date: Wed, 01 Feb 2023 16:40:43 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 2dc2e297877f6332a114de88eeeaca61
cc91e58f3dd132b078223d21cd3177f0819e40e7
94f1191402d63bc2757d7ec854bc418dd6929b5aa9efb815d9bd35f8dab98fef
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 16:40:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sectigo.com/
200 OK 472 B IP
Hash 02001e13cb451b339efbf5d315ed2d7d
1bf5780efd6858fe62f1e3e2bd8f101b7a20dfbb
a8233aa11792e55c5464bcbcb505fbbaf2ecd5a3f768ae058fefebb2b48ec9e9
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 01 Feb 2023 16:40:43 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Mon, 30 Jan 2023 13:11:59 GMT
Expires: Mon, 06 Feb 2023 13:11:58 GMT
Etag: "1bf5780efd6858fe62f1e3e2bd8f101b7a20dfbb"
Cache-Control: max-age=418874,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 792c21670ffcb511-OSL
stats.g.doubleclick.net/g/collect?v=2&tid=G-7DMJMG20P8&cid=122461027.1675269665>m=2oe1u0&aip=1
204 No Content 0 B URL HTTP/2 stats.g.doubleclick.net/g/collect?v=2&tid=G-7DMJMG20P8&cid=122461027.1675269665>m=2oe1u0&aip=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-7DMJMG20P8&cid=122461027.1675269665>m=2oe1u0&aip=1 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.namecheap.com
Connection: keep-alive
Referer: https://www.namecheap.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://www.namecheap.com
date: Wed, 01 Feb 2023 16:40:43 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-69192-32&cid=122461027.1675269665&jid=948517040&gjid=1368585535&_gid=1380597985.1675269666&_u=YCDACEAABAAAACgEK~&z=1910921896
200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-69192-32&cid=122461027.1675269665&jid=948517040&gjid=1368585535&_gid=1380597985.1675269666&_u=YCDACEAABAAAACgEK~&z=1910921896
IP
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-69192-32&cid=122461027.1675269665&jid=948517040&gjid=1368585535&_gid=1380597985.1675269666&_u=YCDACEAABAAAACgEK~&z=1910921896 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://www.namecheap.com
Connection: keep-alive
Referer: https://www.namecheap.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://www.namecheap.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Wed, 01 Feb 2023 16:40:43 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
aftermarketapi.namecheap.com/client/graphql
204 No Content 0 B URL HTTP/2 aftermarketapi.namecheap.com/client/graphql
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /client/graphql HTTP/1.1
Host: aftermarketapi.namecheap.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.namecheap.com/
Origin: https://www.namecheap.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 204 No Content
date: Wed, 01 Feb 2023 16:40:43 GMT
vary: Origin
access-control-allow-origin: https://www.namecheap.com
access-control-allow-credentials: true
access-control-allow-methods: GET,POST
access-control-allow-headers: content-type
access-control-max-age: 86400
X-Firefox-Spdy: h2
aftermarketapi.namecheap.com/client/graphql
204 No Content 0 B URL HTTP/2 aftermarketapi.namecheap.com/client/graphql
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /client/graphql HTTP/1.1
Host: aftermarketapi.namecheap.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.namecheap.com/
Origin: https://www.namecheap.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 204 No Content
date: Wed, 01 Feb 2023 16:40:43 GMT
vary: Origin
access-control-allow-origin: https://www.namecheap.com
access-control-allow-credentials: true
access-control-allow-methods: GET,POST
access-control-allow-headers: content-type
access-control-max-age: 86400
X-Firefox-Spdy: h2
aftermarketapi.namecheap.com/client/graphql
204 No Content 0 B URL HTTP/2 aftermarketapi.namecheap.com/client/graphql
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /client/graphql HTTP/1.1
Host: aftermarketapi.namecheap.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.namecheap.com/
Origin: https://www.namecheap.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 204 No Content
date: Wed, 01 Feb 2023 16:40:43 GMT
vary: Origin
access-control-allow-origin: https://www.namecheap.com
access-control-allow-credentials: true
access-control-allow-methods: GET,POST
access-control-allow-headers: content-type
access-control-max-age: 86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 2dc2e297877f6332a114de88eeeaca61
cc91e58f3dd132b078223d21cd3177f0819e40e7
94f1191402d63bc2757d7ec854bc418dd6929b5aa9efb815d9bd35f8dab98fef
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 16:40:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
aftermarketapi.namecheap.com/client/graphql
200 OK 89 B URL HTTP/2 aftermarketapi.namecheap.com/client/graphql
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 463c97a03e57a4e7cbd1e80d0aa19f60
a61248d5c30937920ecb1356617a47ac0b13c7bd
e981f1c3522d8f0bb90153514120b177782b4f9bc9918d896b0ade8f8bab2fd2
POST /client/graphql HTTP/1.1
Host: aftermarketapi.namecheap.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.namecheap.com/
content-type: application/json
Origin: https://www.namecheap.com
Content-Length: 197
Connection: keep-alive
Cookie: __cfruid=730500326bc1e94f9982b4ceaef4a0da6d1daa4d-1675269641; _gcl_au=1.1.1824208519.1675269665; _ga_7DMJMG20P8=GS1.1.1675269665.1.0.1675269665.60.0.0; _ga=GA1.2.122461027.1675269665; IR_gbd=namecheap.com; IR_5618=1675269665110%7C0%7C1675269665110%7C%7C; _gid=GA1.2.1380597985.1675269666; _gat_UA-69192-32=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 16:40:43 GMT
content-type: application/json; charset=utf-8
content-length: 89
vary: Origin, Accept-Encoding
access-control-allow-origin: https://www.namecheap.com
access-control-allow-credentials: true
set-cookie: aftermarketapi_session=2cc8934c845b81658bd804c8493dd69foTlGu0hrLjEkE8kTO8UabXjEjRwLXg7xF8g9OfRFiFUwy2cu0%2FC5t8946dKvApxvTt3qUOg5fRpbjBAPtZsJ0eSQlOJL4RZ94Fllm1VVUKOur60vLSGux0OA78t517yt; Path=/client/graphql; Expires=Fri, 03 Mar 2023 16:40:43 GMT; HttpOnly; Secure; SameSite=Strict
x-ratelimit-limit: 1000
x-ratelimit-remaining: 999
X-Firefox-Spdy: h2
aftermarketapi.namecheap.com/client/graphql
200 OK 725 B URL HTTP/2 aftermarketapi.namecheap.com/client/graphql
IP
File type JSON data\012- , ASCII text, with very long lines (725), with no line terminators
Hash 3289f46bef46ed4b2264aa4d8e543c7a
a0f91747df79bfce6933aa01e7d2f0ad8d58e938
2b6ac95ff1f33c5c4d463e83c5dd85151c541aade72f93f4e2b7574caa4cc405
POST /client/graphql HTTP/1.1
Host: aftermarketapi.namecheap.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.namecheap.com/
content-type: application/json
Origin: https://www.namecheap.com
Content-Length: 202
Connection: keep-alive
Cookie: __cfruid=730500326bc1e94f9982b4ceaef4a0da6d1daa4d-1675269641; _gcl_au=1.1.1824208519.1675269665; _ga_7DMJMG20P8=GS1.1.1675269665.1.0.1675269665.60.0.0; _ga=GA1.2.122461027.1675269665; IR_gbd=namecheap.com; IR_5618=1675269665110%7C0%7C1675269665110%7C%7C; _gid=GA1.2.1380597985.1675269666; _gat_UA-69192-32=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 16:40:43 GMT
content-type: application/json; charset=utf-8
content-length: 725
vary: Origin, Accept-Encoding
access-control-allow-origin: https://www.namecheap.com
access-control-allow-credentials: true
set-cookie: aftermarketapi_session=7c8505a06ba611f0bc7c84a28e9de6cab3HEa1%2Fv2P4oaWpMtJ8%2B9s1Oc5%2FkzEV6CLdlM9K8UsbO7UVHmKQ8S3xFhm1Gwxi%2FqOgLk6fYeRrdFlMPKc%2BgglXb%2F73xReztpc0sQLIW6DePWnZk05jFq3xuF9kGSC9x; Path=/client/graphql; Expires=Fri, 03 Mar 2023 16:40:43 GMT; HttpOnly; Secure; SameSite=Strict
x-ratelimit-limit: 1000
x-ratelimit-remaining: 998
X-Firefox-Spdy: h2
script.crazyegg.com/pages/versioned/common-scripts/a71ff47379fe64aec2ec12080229caf0.js
200 OK 27 kB URL HTTP/2 script.crazyegg.com/pages/versioned/common-scripts/a71ff47379fe64aec2ec12080229caf0.js
IP
File type ASCII text, with very long lines (63889)
Hash d5ba632ea0a81dd1100f8dd036c526f5
55522f438259b026f72550f951dfcbd9d00039d3
a15d9eba24ab94e0136878ef1b91930b914698a2172e47713d03e213be831716
GET /pages/versioned/common-scripts/a71ff47379fe64aec2ec12080229caf0.js HTTP/1.1
Host: script.crazyegg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.namecheap.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 16:40:43 GMT
content-type: text/javascript
content-length: 26918
cache-control: public, max-age=31536000, s-maxage=31536000
timing-allow-origin: *
last-modified: Fri, 27 Jan 2023 16:34:43 GMT
content-encoding: gzip
access-control-allow-origin: *
cf-cache-status: HIT
age: 88567
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 792c216a1d04b521-OSL
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash df4a6d84addba49571d9f6ae44c61a3f
28c8093de27e27645cf6dfd5ae93a62fc77b9be5
cb6623b08b6245ea11bb871729613e453046d427d738a8c6431c5da8347e6e05
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 16:40:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
aftermarketapi.namecheap.com/client/graphql
200 OK 22 B URL HTTP/2 aftermarketapi.namecheap.com/client/graphql
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 4dd96f2a743271a862d9ffa9e9338afa
495c4e5043fee0a561075304f086c81c604d9fa0
966108cd393917faf665b3ae99da1dea5db08ef329025682eaddc9a133b72bbf
POST /client/graphql HTTP/1.1
Host: aftermarketapi.namecheap.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.namecheap.com/
content-type: application/json
Origin: https://www.namecheap.com
Content-Length: 172
Connection: keep-alive
Cookie: __cfruid=730500326bc1e94f9982b4ceaef4a0da6d1daa4d-1675269641; _gcl_au=1.1.1824208519.1675269665; _ga_7DMJMG20P8=GS1.1.1675269665.1.0.1675269665.60.0.0; _ga=GA1.1.122461027.1675269665; IR_gbd=namecheap.com; IR_5618=1675269665110%7C0%7C1675269665110%7C%7C
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 16:40:43 GMT
content-type: application/json; charset=utf-8
content-length: 22
vary: Origin, Accept-Encoding
access-control-allow-origin: https://www.namecheap.com
access-control-allow-credentials: true
set-cookie: aftermarketapi_session=3c02ddf04958971e7892ada3086ef12aZZxek9n5hI9GC%2BmecEDkrs5JWpJFBkpJZ1w7D4f8xg%2BhmTwva3KyK9Syw%2BUGjGaiUQC3puA0Jj1ojXaYGthLiNKSLmT21if02Ut6rZhSZwgwhGylO5U9UVzC0Ic4mlod; Path=/client/graphql; Expires=Fri, 03 Mar 2023 16:40:43 GMT; HttpOnly; Secure; SameSite=Strict
x-ratelimit-limit: 1000
x-ratelimit-remaining: 999
X-Firefox-Spdy: h2
static.nc-img.com/pp/nc-ui-globalenv/gb-icon.fc92e479cdcd7b6074c9908a32ea6e85.woff2
200 OK 24 kB URL HTTP/2 static.nc-img.com/pp/nc-ui-globalenv/gb-icon.fc92e479cdcd7b6074c9908a32ea6e85.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 23864, version 1.0\012- data
Hash fc92e479cdcd7b6074c9908a32ea6e85
dd985ee9603c453f3c60e37371f6ca1fef23c4be
69aad6299b431c9394aba77fe786475a06640318aebd4cbb7bf3f351b9c1f416
GET /pp/nc-ui-globalenv/gb-icon.fc92e479cdcd7b6074c9908a32ea6e85.woff2 HTTP/1.1
Host: static.nc-img.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.namecheap.com
Connection: keep-alive
Referer: https://static.nc-img.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 16:40:43 GMT
content-type: application/font-woff2
content-length: 23864
last-modified: Tue, 13 Sep 2022 11:52:30 GMT
etag: "63206efe-5d38"
vary: Origin, Accept-Encoding
cache-control: public, max-age=31536000, immutable
access-control-allow-origin: *
cf-cache-status: HIT
age: 12194098
accept-ranges: bytes
server: cloudflare
cf-ray: 792c216a68ad0afe-OSL
X-Firefox-Spdy: h2
www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-69192-32&cid=122461027.1675269665&jid=948517040&_u=YCDACEAABAAAACgEK~&z=2143138868
200 OK 42 B URL HTTP/2 www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-69192-32&cid=122461027.1675269665&jid=948517040&_u=YCDACEAABAAAACgEK~&z=2143138868
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-69192-32&cid=122461027.1675269665&jid=948517040&_u=YCDACEAABAAAACgEK~&z=2143138868 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.namecheap.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 01 Feb 2023 16:40:43 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
script.crazyegg.com/pages/data-scripts/0043/5670/sampling/www.namecheap.com.json?t=465352
200 OK 147 B URL HTTP/2 script.crazyegg.com/pages/data-scripts/0043/5670/sampling/www.namecheap.com.json?t=465352
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 9f66c12a2910363de52813abf75d1517
c75991e128b8bd94d969c8c5fc91670aef54063e
59f59e7f6d74bc69ac1ecc05dd83d93ca913369e3706f4160b1677e5eba5c055
GET /pages/data-scripts/0043/5670/sampling/www.namecheap.com.json?t=465352 HTTP/1.1
Host: script.crazyegg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.namecheap.com
Connection: keep-alive
Referer: https://www.namecheap.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 16:40:43 GMT
content-type: application/json
content-length: 147
access-control-expose-headers: CE-Version
ce-version: 11.5.21
cache-control: public, max-age=300, s-maxage=1209600
timing-allow-origin: *
last-modified: Wed, 01 Feb 2023 10:06:43 GMT
content-encoding: gzip
access-control-allow-origin: *
cf-cache-status: HIT
age: 23637
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 792c216a9ffeb4fd-OSL
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d06fd066caf4dfa1e21a722a5c468158
acb765577662906ae8e11242bed487ce1051db28
4b45760de269e60345d43ff2da6c5803722f7c052edd0a9f5258ce69b2ffa32f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 16:40:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
assets-tracking.crazyegg.com/healthcheck
200 OK 19 B URL HTTP/2 assets-tracking.crazyegg.com/healthcheck
IP
File type JSON data\012- , ASCII text
Hash d06f04fccf68d0b228a5923187ce1afd
5de9df9fdd66a91eed06e31981553d4ab9ccf490
830e67bda2532cd5880ee86e3b33e69721082f8458bb0df0cd4edbb1577fd375
GET /healthcheck HTTP/1.1
Host: assets-tracking.crazyegg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.namecheap.com
Connection: keep-alive
Referer: https://www.namecheap.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json
content-length: 19
date: Tue, 17 Jan 2023 03:56:02 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-expose-headers: Access-Control-Allow-Origin
access-control-max-age: 31536000
last-modified: Fri, 08 Jul 2022 22:25:51 GMT
etag: "d06f04fccf68d0b228a5923187ce1afd"
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 92c4bb210eab82a152000047d3609a02.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: mXd8lvsa0kcRlHcJVseaWCbSgXK_UiFlOHBIFRzs4y4Sx26jVfgUSw==
age: 1341883
X-Firefox-Spdy: h2
pagestates-tracking.crazyegg.com/healthcheck
200 OK 19 B URL HTTP/2 pagestates-tracking.crazyegg.com/healthcheck
IP
File type JSON data\012- , ASCII text
Hash d06f04fccf68d0b228a5923187ce1afd
5de9df9fdd66a91eed06e31981553d4ab9ccf490
830e67bda2532cd5880ee86e3b33e69721082f8458bb0df0cd4edbb1577fd375
GET /healthcheck HTTP/1.1
Host: pagestates-tracking.crazyegg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.namecheap.com
Connection: keep-alive
Referer: https://www.namecheap.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json
content-length: 19
date: Mon, 23 Jan 2023 11:43:55 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-expose-headers: Access-Control-Allow-Origin
access-control-max-age: 31536000
last-modified: Fri, 08 Jul 2022 22:25:51 GMT
etag: "d06f04fccf68d0b228a5923187ce1afd"
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 9H4qnMw9oqfrpWCH2b_g5A3V_79XYWlfecReu4RTeTFqKNDOmxDgjA==
age: 795410
X-Firefox-Spdy: h2
ocsp.r2m02.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.r2m02.amazontrust.com/
IP
Hash 583ef5202ea77c792015979c68c23f4f
3327a3c05518dcf8f6e5db1ffbde2271d667e0e4
ad905a24f74a8b9d494e3e325347f451fa6bbdf690898dcbbd76f24adfe7e6e1
POST / HTTP/1.1
Host: ocsp.r2m02.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Wed, 01 Feb 2023 16:40:44 GMT
Last-Modified: Wed, 01 Feb 2023 15:23:15 GMT
Server: ECS (bsa/EB21)
X-Cache: Miss from cloudfront
Via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: y-LlFOR20Mi6uT5aglu0uVCe0_NVHMeVck5J85LANVs2gvj5e9m15w==
Age: 4649
ocsp.r2m02.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.r2m02.amazontrust.com/
IP
Hash 583ef5202ea77c792015979c68c23f4f
3327a3c05518dcf8f6e5db1ffbde2271d667e0e4
ad905a24f74a8b9d494e3e325347f451fa6bbdf690898dcbbd76f24adfe7e6e1
POST / HTTP/1.1
Host: ocsp.r2m02.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Wed, 01 Feb 2023 16:40:44 GMT
Last-Modified: Wed, 01 Feb 2023 15:25:57 GMT
Server: ECS (bsa/EB13)
X-Cache: Miss from cloudfront
Via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: ypTeNlj-O_oTR8vDd6NNk7Op2-UE7eINVMJ8WvVWDK1t3fLLhg2xgw==
Age: 4487
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 7e46b805da2074ae6f113852ccf30d4e
0eaacdd44ebebdfedcb7e3386b0c23f04441f19a
6024ff63de9d9f11dc036145e7a4113d7d2e73d6a4f36ce85f7a6a1cc94975da
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=86953
Date: Wed, 01 Feb 2023 16:40:44 GMT
Etag: "63d92e96-1d7"
Expires: Thu, 02 Feb 2023 16:49:57 GMT
Last-Modified: Tue, 31 Jan 2023 15:07:02 GMT
Server: ECS (nyb/1D05)
X-Cache: Miss from cloudfront
Via: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: OniXfm7WE4fsBd8OYO_0z6_rPOJtDJNuhbLbNygIASrWweS9q-PmAQ==
Age: 6175
js-agent.newrelic.com/nr-spa-1210.min.js
200 OK 16 kB URL HTTP/2 js-agent.newrelic.com/nr-spa-1210.min.js
IP
File type ASCII text, with very long lines (32003)
Hash 7dc43edf7b434d3ee43d7c33026b7e84
69276d47de19be73cc7479084441f333e28542cd
7d613080c1440eba0ce5f3f4327abcc5849b225746444bb2c5de2f2849a76c71
GET /nr-spa-1210.min.js HTTP/1.1
Host: js-agent.newrelic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.namecheap.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 8GALpeUNGemgYPBv9n12Csyra/hkBffMQPtxbnaZuul/hTPXnfp4NWJfDMHB+l8hzAqI1R8DfnQ=
x-amz-request-id: QF0H3AJ4XJX5H3QJ
last-modified: Tue, 22 Jun 2021 22:47:08 GMT
etag: "d5eff122d09ab2c851fb1780f0287cbf"
x-amz-version-id: S2ZWAVF_bOLxH9dSP4fxyD9xCbMCwnq9
content-type: application/javascript
server: AmazonS3
access-control-allow-origin: *
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Wed, 01 Feb 2023 16:40:44 GMT
via: 1.1 varnish
x-served-by: cache-bma1675-BMA
x-cache: HIT
x-cache-hits: 38
x-timer: S1675269644.319507,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 15563
X-Firefox-Spdy: h2
vgnpvrqq6me5nibag4loxocxtq0obfrn.lambda-url.us-east-1.on.aws/
200 OK 0 B URL HTTP/1.1 vgnpvrqq6me5nibag4loxocxtq0obfrn.lambda-url.us-east-1.on.aws/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS / HTTP/1.1
Host: vgnpvrqq6me5nibag4loxocxtq0obfrn.lambda-url.us-east-1.on.aws
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.namecheap.com/
Origin: https://www.namecheap.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Wed, 01 Feb 2023 16:40:44 GMT
Content-Type: application/json
Content-Length: 0
Connection: keep-alive
x-amzn-RequestId: a0a96b94-c7f2-4ca7-91d8-5e56297e6d07
Access-Control-Allow-Origin: https://www.namecheap.com
Access-Control-Allow-Headers: *
Vary: Origin
Access-Control-Allow-Methods: POST
Access-Control-Max-Age: 86400
tracking.crazyegg.com/clock?t=1675269666278&tk=f2beed087999b9953b61e4b84d4367c4&s=205054&p=%2Fmarket%2Fbuynow%2Fretailintuitive.com%2F&u=435670&v=e0635046070770c23f431ad32259008d1f79a615
200 OK 26 B URL HTTP/2 tracking.crazyegg.com/clock?t=1675269666278&tk=f2beed087999b9953b61e4b84d4367c4&s=205054&p=%2Fmarket%2Fbuynow%2Fretailintuitive.com%2F&u=435670&v=e0635046070770c23f431ad32259008d1f79a615
IP
File type ASCII text, with no line terminators
Hash 1b3e465f21d69a75d56ace0a97d19c07
f268ef8612611b724f40588102a95d1911e19538
de79ba15b6e8a93d2e8c6d81bead301ffc65437ba07ef9d3e6eec2a379c805ff
GET /clock?t=1675269666278&tk=f2beed087999b9953b61e4b84d4367c4&s=205054&p=%2Fmarket%2Fbuynow%2Fretailintuitive.com%2F&u=435670&v=e0635046070770c23f431ad32259008d1f79a615 HTTP/1.1
Host: tracking.crazyegg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.namecheap.com
Connection: keep-alive
Referer: https://www.namecheap.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: awselb/2.0
date: Wed, 01 Feb 2023 16:40:44 GMT
content-type: text/plain
content-length: 26
cache-control: no-store
access-control-allow-origin: *
X-Firefox-Spdy: h2
vgnpvrqq6me5nibag4loxocxtq0obfrn.lambda-url.us-east-1.on.aws/
200 OK 31 B URL HTTP/1.1 vgnpvrqq6me5nibag4loxocxtq0obfrn.lambda-url.us-east-1.on.aws/
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 1f301d94b1b6659929f7cf1f15fe4804
e58ec6478ac6c8409e8dc9df8a68047bae018a34
dcf3b53c53d014bba46d9594883f5da14870f0b853e43e953bb8fe1749986da3
POST / HTTP/1.1
Host: vgnpvrqq6me5nibag4loxocxtq0obfrn.lambda-url.us-east-1.on.aws
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 44
Origin: https://www.namecheap.com
Connection: keep-alive
Referer: https://www.namecheap.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Wed, 01 Feb 2023 16:40:44 GMT
Content-Type: application/json
Content-Length: 31
Connection: keep-alive
x-amzn-RequestId: 377f8b27-e9cf-4d7a-ae00-bf86893800ca
Access-Control-Allow-Origin: https://www.namecheap.com
Vary: Origin
X-Amzn-Trace-Id: root=1-63da960c-30dcdc6f30d93b220af665f0;sampled=0
bam-cell.nr-data.net/1/NRJS-cf3d03e8590870dd0ff?a=642855605&sa=1&v=1210.e2a3f80&t=Unnamed%20Transaction&rst=4489&ck=1&ref=https://www.namecheap.com/market/buynow/retailintuitive.com/&be=1813&fe=3900&dc=2447&af=err,xhr,stn,ins,spa&perf=%7B%22timing%22:%7B%22of%22:1675269662266,%22n%22:0,%22f%22:972,%22dn%22:981,%22dne%22:1112,%22c%22:1114,%22s%22:1117,%22ce%22:1367,%22rq%22:1367,%22rp%22:1769,%22rpe%22:1769,%22dl%22:1785,%22di%22:2330,%22ds%22:2446,%22de%22:2450,%22dc%22:3898,%22l%22:3898,%22le%22:3905%7D,%22navigation%22:%7B%7D%7D&fcp=2188&jsonp=NREUM.setToken
200 OK 49 B URL HTTP/1.1 bam-cell.nr-data.net/1/NRJS-cf3d03e8590870dd0ff?a=642855605&sa=1&v=1210.e2a3f80&t=Unnamed%20Transaction&rst=4489&ck=1&ref=https://www.namecheap.com/market/buynow/retailintuitive.com/&be=1813&fe=3900&dc=2447&af=err,xhr,stn,ins,spa&perf=%7B%22timing%22:%7B%22of%22:1675269662266,%22n%22:0,%22f%22:972,%22dn%22:981,%22dne%22:1112,%22c%22:1114,%22s%22:1117,%22ce%22:1367,%22rq%22:1367,%22rp%22:1769,%22rpe%22:1769,%22dl%22:1785,%22di%22:2330,%22ds%22:2446,%22de%22:2450,%22dc%22:3898,%22l%22:3898,%22le%22:3905%7D,%22navigation%22:%7B%7D%7D&fcp=2188&jsonp=NREUM.setToken
IP
File type ASCII text, with no line terminators
Hash ada33e5b8877e743ff658bf4bfa1867c
5a78662243dac43c0ee48bcb7e05a536b84c2e38
dac715f087720dd7ff7067f5d2ec1988851fa93140ae8a9cbfaa15659dd7fd82
GET /1/NRJS-cf3d03e8590870dd0ff?a=642855605&sa=1&v=1210.e2a3f80&t=Unnamed%20Transaction&rst=4489&ck=1&ref=https://www.namecheap.com/market/buynow/retailintuitive.com/&be=1813&fe=3900&dc=2447&af=err,xhr,stn,ins,spa&perf=%7B%22timing%22:%7B%22of%22:1675269662266,%22n%22:0,%22f%22:972,%22dn%22:981,%22dne%22:1112,%22c%22:1114,%22s%22:1117,%22ce%22:1367,%22rq%22:1367,%22rp%22:1769,%22rpe%22:1769,%22dl%22:1785,%22di%22:2330,%22ds%22:2446,%22de%22:2450,%22dc%22:3898,%22l%22:3898,%22le%22:3905%7D,%22navigation%22:%7B%7D%7D&fcp=2188&jsonp=NREUM.setToken HTTP/1.1
Host: bam-cell.nr-data.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.namecheap.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 49
content-type: text/javascript
access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS
access-control-allow-credentials: true
access-control-allow-origin: *
set-cookie: JSESSIONID=638f39f97d6a947f; Path=/; Domain=.nr-data.net; Secure; SameSite=None
cross-origin-resource-policy: cross-origin
x-timer: S1675269645.737568,VS0,VE104
accept-ranges: bytes
date: Wed, 01 Feb 2023 16:40:44 GMT
via: 1.1 varnish
x-served-by: cache-bma1648-BMA
x-cache: MISS
x-cache-hits: 0
bam-cell.nr-data.net/events/1/NRJS-cf3d03e8590870dd0ff?a=642855605&sa=1&v=1210.e2a3f80&t=Unnamed%20Transaction&rst=4842&ck=1&ref=https://www.namecheap.com/market/buynow/retailintuitive.com/
200 OK 24 B URL HTTP/1.1 bam-cell.nr-data.net/events/1/NRJS-cf3d03e8590870dd0ff?a=642855605&sa=1&v=1210.e2a3f80&t=Unnamed%20Transaction&rst=4842&ck=1&ref=https://www.namecheap.com/market/buynow/retailintuitive.com/
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash bc32ed98d624acb4008f986349a20d26
2d3df8c11d2168ce2c27e0937421d11d85016361
0c9cf152a0ad00d4f102c93c613c104914be5517ac8f8e0831727f8bfbe8b300
POST /events/1/NRJS-cf3d03e8590870dd0ff?a=642855605&sa=1&v=1210.e2a3f80&t=Unnamed%20Transaction&rst=4842&ck=1&ref=https://www.namecheap.com/market/buynow/retailintuitive.com/ HTTP/1.1
Host: bam-cell.nr-data.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: text/plain
Content-Length: 1086
Origin: https://www.namecheap.com
Connection: keep-alive
Referer: https://www.namecheap.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 24
content-type: image/gif
access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS
access-control-allow-credentials: true
access-control-allow-origin: https://www.namecheap.com
x-timer: S1675269645.000684,VS0,VE101
accept-ranges: bytes
date: Wed, 01 Feb 2023 16:40:45 GMT
via: 1.1 varnish
x-served-by: cache-bma1648-BMA
x-cache: MISS
x-cache-hits: 0
www.redditstatic.com/ads/pixel.js
200 OK 7.4 kB URL HTTP/2 www.redditstatic.com/ads/pixel.js
IP
File type ASCII text, with very long lines (23347)
Hash 03d5db9dfd00a5719bb4c9261e6fa1bb
be9899225f59b4d3ef6fefcf0e66b72568353a94
e90f19642062e4311b58ede732592e8f29b7799661086a0bbfc68e259fd81398
GET /ads/pixel.js HTTP/1.1
Host: www.redditstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.namecheap.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Mon, 23 Jan 2023 21:56:14 GMT
etag: "03d5db9dfd00a5719bb4c9261e6fa1bb"
cache-control: public, max-age=60
content-encoding: gzip
content-type: application/javascript
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 01 Feb 2023 16:40:45 GMT
vary: Accept-Encoding,Origin
server: snooserv
report-to: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}
nel: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.02, "failure_fraction": 0.02}
content-length: 7356
X-Firefox-Spdy: h2
static.ads-twitter.com/uwt.js
200 OK 15 kB URL HTTP/2 static.ads-twitter.com/uwt.js
IP
File type ASCII text, with very long lines (57596), with no line terminators
Hash 573e6a7f86f6f3063763360ef0672c01
b12eab3b4ac8872d49ac6e15f9cd17741765c0cf
02445eb022a04139531f0ce8d8980c31083a1c670936f1477f5cfc4d252133f7
GET /uwt.js HTTP/1.1
Host: static.ads-twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.namecheap.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Thu, 27 Oct 2022 18:55:37 GMT
cache-control: no-cache
content-type: application/javascript; charset=utf-8
content-encoding: gzip
etag: "32ad004436155ec972bc50e6238b5b67+gzip+gzip"
accept-ranges: bytes
date: Wed, 01 Feb 2023 16:40:45 GMT
x-served-by: cache-iad-kjyo7100147-IAD, cache-bma1656-BMA
x-cache: HIT, HIT
vary: Accept-Encoding,Host
p3p: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
x-tw-cdn: FT
content-length: 15375
X-Firefox-Spdy: h2
bat.bing.com/bat.js
200 OK 12 kB IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type Unicode text, UTF-8 text, with very long lines (39395), with no line terminators
Hash 4f378a725368a42971cd69e29f75db89
2a1cdf193b346d9281c6e04a9b3775e7fc1ae11e
6a2a9d238501343cb3f25e0f54f4ecc4ec2c4e0fa6b228cc72dc3fff90502078
GET /bat.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.namecheap.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: private,max-age=1800
content-length: 11552
content-type: application/javascript
content-encoding: gzip
last-modified: Mon, 23 Jan 2023 19:59:24 GMT
accept-ranges: bytes
etag: "076bc30652fd91:0"
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: D5C6142D78A047BD8FEBE06E9E0E12C9 Ref B: OSL30EDGE0314 Ref C: 2023-02-01T16:40:45Z
date: Wed, 01 Feb 2023 16:40:45 GMT
X-Firefox-Spdy: h2
vgnpvrqq6me5nibag4loxocxtq0obfrn.lambda-url.us-east-1.on.aws/
200 OK 0 B URL HTTP/1.1 vgnpvrqq6me5nibag4loxocxtq0obfrn.lambda-url.us-east-1.on.aws/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS / HTTP/1.1
Host: vgnpvrqq6me5nibag4loxocxtq0obfrn.lambda-url.us-east-1.on.aws
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.namecheap.com/
Origin: https://www.namecheap.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Wed, 01 Feb 2023 16:40:45 GMT
Content-Type: application/json
Content-Length: 0
Connection: keep-alive
x-amzn-RequestId: 27dd7fe1-e739-417c-9e76-67a313db3134
Access-Control-Allow-Origin: https://www.namecheap.com
Access-Control-Allow-Headers: *
Vary: Origin
Access-Control-Allow-Methods: POST
Access-Control-Max-Age: 86400
ocsp.digicert.com/
200 OK 313 B IP
Hash f34e13cd7bd2390540358d01cbc690ff
15a098b4cd8fbd001a15d36207579fe9b18d4c07
1a74d35e15a7479290f811969f72f0de78f65bcb5b42bdfe673719d746839682
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5226
Cache-Control: max-age=160866
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 16:40:45 GMT
Etag: "63da5305-139"
Expires: Fri, 03 Feb 2023 13:21:51 GMT
Last-Modified: Wed, 01 Feb 2023 11:54:45 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 313
aftermarketapi.namecheap.com/client/graphql
200 OK 1.7 kB URL HTTP/2 aftermarketapi.namecheap.com/client/graphql
IP
Hash fbf936bd85cdf92d72ddca27fc8d180d
378dfd21754052abea788838877b17977498447c
8f75c8c062f319f1ac7bb1cb5c0a8c407138b5fc6706bd6b15074e972139b0d0
POST /client/graphql HTTP/1.1
Host: aftermarketapi.namecheap.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.namecheap.com/
content-type: application/json
Origin: https://www.namecheap.com
Content-Length: 194
Connection: keep-alive
Cookie: aftermarketapi_session=7c8505a06ba611f0bc7c84a28e9de6cab3HEa1%2Fv2P4oaWpMtJ8%2B9s1Oc5%2FkzEV6CLdlM9K8UsbO7UVHmKQ8S3xFhm1Gwxi%2FqOgLk6fYeRrdFlMPKc%2BgglXb%2F73xReztpc0sQLIW6DePWnZk05jFq3xuF9kGSC9x; __cfruid=730500326bc1e94f9982b4ceaef4a0da6d1daa4d-1675269641; _gcl_au=1.1.1824208519.1675269665; _ga_7DMJMG20P8=GS1.1.1675269665.1.0.1675269665.60.0.0; _ga=GA1.2.122461027.1675269665; IR_gbd=namecheap.com; IR_5618=1675269665110%7C0%7C1675269665110%7C%7C; _gid=GA1.2.1380597985.1675269666; _gat_UA-69192-32=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 16:40:44 GMT
content-type: application/json; charset=utf-8
vary: Origin, Accept-Encoding
access-control-allow-origin: https://www.namecheap.com
access-control-allow-credentials: true
set-cookie: aftermarketapi_session=61bfa83735384e28d1350c6519f80bb03Ubc3zAr2lT13FSwI25VUw8OwcPHT47n8KwNGHVQH8hAgl3nCkYXAfWvjLPJhpduAKvW3SFrvdLI%2BbmyqsqgZjgshz%2FZ7UqrFS9V7koOa2rbGqrfqSBepcBI%2Fnxx9uXF; Path=/client/graphql; Expires=Fri, 03 Mar 2023 16:40:43 GMT; HttpOnly; Secure; SameSite=Strict
x-ratelimit-limit: 1000
x-ratelimit-remaining: 998
x-cache: hit
content-encoding: gzip
X-Firefox-Spdy: h2
vgnpvrqq6me5nibag4loxocxtq0obfrn.lambda-url.us-east-1.on.aws/
200 OK 31 B URL HTTP/1.1 vgnpvrqq6me5nibag4loxocxtq0obfrn.lambda-url.us-east-1.on.aws/
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash f586d01c3d14e76d7c47087fe00c8f21
3c0c477b68b007b129d94e091b31bda86ae33e9c
e444434dbca03264bc62646bc3eece8df84c582c066a71cb57c011990a34f8f3
POST / HTTP/1.1
Host: vgnpvrqq6me5nibag4loxocxtq0obfrn.lambda-url.us-east-1.on.aws
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 44
Origin: https://www.namecheap.com
Connection: keep-alive
Referer: https://www.namecheap.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Wed, 01 Feb 2023 16:40:45 GMT
Content-Type: application/json
Content-Length: 31
Connection: keep-alive
x-amzn-RequestId: 6cbe794e-834c-4ac8-8f87-311f92d0ef33
Access-Control-Allow-Origin: https://www.namecheap.com
Vary: Origin
X-Amzn-Trace-Id: root=1-63da960d-1c6be636103dd6fc6f155838;sampled=0
t.co/1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=ea803df2-5102-4779-89d3-c4dd00e359da&integration=gtm&p_id=Twitter&p_user_id=0&pl_id=8153ab0b-a325-470e-9d28-6a5dfa0b0d2f&tw_document_href=https%3A%2F%2Fwww.namecheap.com%2Fmarket%2Fbuynow%2Fretailintuitive.com%2F&tw_iframe_status=0&txn_id=nv8s8&type=javascript&version=2.3.29
200 OK 43 B URL HTTP/2 t.co/1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=ea803df2-5102-4779-89d3-c4dd00e359da&integration=gtm&p_id=Twitter&p_user_id=0&pl_id=8153ab0b-a325-470e-9d28-6a5dfa0b0d2f&tw_document_href=https%3A%2F%2Fwww.namecheap.com%2Fmarket%2Fbuynow%2Fretailintuitive.com%2F&tw_iframe_status=0&txn_id=nv8s8&type=javascript&version=2.3.29
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 377d257f2d2e294916143c069141c1c5
b7cae69682cf31dd670b65088db8395acda6ed3e
ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957
GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=ea803df2-5102-4779-89d3-c4dd00e359da&integration=gtm&p_id=Twitter&p_user_id=0&pl_id=8153ab0b-a325-470e-9d28-6a5dfa0b0d2f&tw_document_href=https%3A%2F%2Fwww.namecheap.com%2Fmarket%2Fbuynow%2Fretailintuitive.com%2F&tw_iframe_status=0&txn_id=nv8s8&type=javascript&version=2.3.29 HTTP/1.1
Host: t.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.namecheap.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 01 Feb 2023 16:40:45 GMT
perf: 7626143928
server: tsa_o
set-cookie: muc_ads=438e495f-a47c-4845-ab40-7a42ebbfa8b3; Max-Age=63072000; Expires=Fri, 31 Jan 2025 16:40:45 GMT; Path=/; Domain=t.co; Secure; SameSite=None
content-type: image/gif;charset=utf-8
cache-control: no-cache, no-store, max-age=0
content-length: 43
x-transaction-id: 82ca94a7f5636234
strict-transport-security: max-age=0
x-response-time: 110
x-connection-hash: 01501446bf8dbb4c43db6297d7211dac30fa0dd56d3aa5ad54dd0bfc3abc6efb
X-Firefox-Spdy: h2
bat.bing.com/action/0?ti=5220469&tm=gtm002&Ver=2&mid=3615eed5-4ad7-40e9-ba4f-8653767fd5fe&sid=3a06b3a0a24f11ed902365417ad47cb6&vid=3a06d880a24f11ed94638bbf89c7b7e4&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=retailintuitive.com%20is%20listed%20for%20sale%20-%20Buy%20this%20domain%20now%20-%20Namecheap&p=https%3A%2F%2Fwww.namecheap.com%2Fmarket%2Fbuynow%2Fretailintuitive.com%2F&r=<=3905&evt=pageLoad&sv=1&rn=771646
204 No Content 0 B URL HTTP/2 bat.bing.com/action/0?ti=5220469&tm=gtm002&Ver=2&mid=3615eed5-4ad7-40e9-ba4f-8653767fd5fe&sid=3a06b3a0a24f11ed902365417ad47cb6&vid=3a06d880a24f11ed94638bbf89c7b7e4&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=retailintuitive.com%20is%20listed%20for%20sale%20-%20Buy%20this%20domain%20now%20-%20Namecheap&p=https%3A%2F%2Fwww.namecheap.com%2Fmarket%2Fbuynow%2Fretailintuitive.com%2F&r=<=3905&evt=pageLoad&sv=1&rn=771646
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /action/0?ti=5220469&tm=gtm002&Ver=2&mid=3615eed5-4ad7-40e9-ba4f-8653767fd5fe&sid=3a06b3a0a24f11ed902365417ad47cb6&vid=3a06d880a24f11ed94638bbf89c7b7e4&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=retailintuitive.com%20is%20listed%20for%20sale%20-%20Buy%20this%20domain%20now%20-%20Namecheap&p=https%3A%2F%2Fwww.namecheap.com%2Fmarket%2Fbuynow%2Fretailintuitive.com%2F&r=<=3905&evt=pageLoad&sv=1&rn=771646 HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.namecheap.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
set-cookie: MUID=3383E6DCF3BA662B2C88F477F2ED67DD; domain=.bing.com; expires=Mon, 26-Feb-2024 16:40:45 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 1307F757C04F49AD912343BC5BD4E1C9 Ref B: OSL30EDGE0314 Ref C: 2023-02-01T16:40:45Z
date: Wed, 01 Feb 2023 16:40:45 GMT
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 692391704ca6e43f9fc0b364efcd1310
85bd8131554ed317aa7bd7fa212934a0806483fb
ee2a00a29af72d317319234728d9705853547e617ab998366742910b36242cb5
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6377
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 16:40:45 GMT
Last-Modified: Wed, 01 Feb 2023 14:54:28 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
connect.facebook.net/en_US/fbds.js
200 OK 2.2 kB URL HTTP/2 connect.facebook.net/en_US/fbds.js
IP
File type ASCII text, with very long lines (2888)
Hash 454ec60071051c64c6b5069fccd5bfe4
8d9651c988bd8eeb06252bb3d87b4b16445c578b
3f4eb4cb678b8966c71066b57b62dbc27be69535b327226e7c4000e01b43239d
GET /en_US/fbds.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.namecheap.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: 7ba7a3aaa5c502df25ca0abbd49a9109
etag: "6b04c23792d97fdab1da782c4cfb484c"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Wed, 01 Feb 2023 16:44:42 GMT
cache-control: public,max-age=1200,stale-while-revalidate=3600
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-fb-rlafr: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: RU7GAHEFHGTGtQafzNW/5A==
x-fb-debug: 0H4u82/pHqoV9XPEZOP5MhGPVPqNoDeFhdyv46pLcca6HPmTke0buA9Rw5mMZHXSIqnRFTDl6L3bSXvqfH+vTQ==
priority: u=3,i
content-length: 2167
x-fb-trip-id: 1904183273
date: Wed, 01 Feb 2023 16:40:45 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 280 B IP
Hash 1ff74aab442f09fcaad69b961f34050b
dce6b1606d9f84c107dda78b54575db0abc2f58f
c52c37fd5e4c15f34a0aec3c57639ca95e1914937858d2d6fbff16530ae0cedb
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5995
Cache-Control: max-age=141519
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 16:40:45 GMT
Etag: "63da0471-118"
Expires: Fri, 03 Feb 2023 07:59:24 GMT
Last-Modified: Wed, 01 Feb 2023 06:19:29 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 280
googleads.g.doubleclick.net/pagead/viewthroughconversion/934751624/?random=1675269667688&cv=11&fst=1675269667688&bg=ffffff&guid=ON&async=1>m=2wg1u0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.namecheap.com%2Fmarket%2Fbuynow%2Fretailintuitive.com%2F&tiba=retailintuitive.com%20is%20listed%20for%20sale%20-%20Buy%20this%20domain%20now%20-%20Namecheap&auid=1824208519.1675269665&rfmt=3&fmt=4
200 OK 920 B URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/934751624/?random=1675269667688&cv=11&fst=1675269667688&bg=ffffff&guid=ON&async=1>m=2wg1u0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.namecheap.com%2Fmarket%2Fbuynow%2Fretailintuitive.com%2F&tiba=retailintuitive.com%20is%20listed%20for%20sale%20-%20Buy%20this%20domain%20now%20-%20Namecheap&auid=1824208519.1675269665&rfmt=3&fmt=4
IP
File type ASCII text, with very long lines (2009), with no line terminators
Hash 54d620618e4d4109e812c065ee84c96e
1d0e378dbb97c764af147aaad8d74bf7b18a3710
5ce9f1067f400f18774856b87ae6bc9f2431dc22524a9097107dfc5569c1193a
GET /pagead/viewthroughconversion/934751624/?random=1675269667688&cv=11&fst=1675269667688&bg=ffffff&guid=ON&async=1>m=2wg1u0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.namecheap.com%2Fmarket%2Fbuynow%2Fretailintuitive.com%2F&tiba=retailintuitive.com%20is%20listed%20for%20sale%20-%20Buy%20this%20domain%20now%20-%20Namecheap&auid=1824208519.1675269665&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.namecheap.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 01 Feb 2023 16:40:45 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 920
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Wed, 01-Feb-2023 16:55:45 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/viewthroughconversion/1019575149/?random=1675269667692&cv=11&fst=1675269667692&bg=ffffff&guid=ON&async=1>m=2wg1u0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.namecheap.com%2Fmarket%2Fbuynow%2Fretailintuitive.com%2F&tiba=retailintuitive.com%20is%20listed%20for%20sale%20-%20Buy%20this%20domain%20now%20-%20Namecheap&auid=1824208519.1675269665&rfmt=3&fmt=4
200 OK 921 B URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/1019575149/?random=1675269667692&cv=11&fst=1675269667692&bg=ffffff&guid=ON&async=1>m=2wg1u0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.namecheap.com%2Fmarket%2Fbuynow%2Fretailintuitive.com%2F&tiba=retailintuitive.com%20is%20listed%20for%20sale%20-%20Buy%20this%20domain%20now%20-%20Namecheap&auid=1824208519.1675269665&rfmt=3&fmt=4
IP
File type ASCII text, with very long lines (2011), with no line terminators
Hash 41b19b36a5e7c0cdb8b017b1fedd5082
81e516f23ce9bef20b95627aa792c573bc558297
6d15cd396f0c4c1601b7bd85f15d616575e8ebff31d75e05df3cd279b9762fef
GET /pagead/viewthroughconversion/1019575149/?random=1675269667692&cv=11&fst=1675269667692&bg=ffffff&guid=ON&async=1>m=2wg1u0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.namecheap.com%2Fmarket%2Fbuynow%2Fretailintuitive.com%2F&tiba=retailintuitive.com%20is%20listed%20for%20sale%20-%20Buy%20this%20domain%20now%20-%20Namecheap&auid=1824208519.1675269665&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.namecheap.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 01 Feb 2023 16:40:45 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 921
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Wed, 01-Feb-2023 16:55:45 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 692391704ca6e43f9fc0b364efcd1310
85bd8131554ed317aa7bd7fa212934a0806483fb
ee2a00a29af72d317319234728d9705853547e617ab998366742910b36242cb5
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6378
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 16:40:46 GMT
Last-Modified: Wed, 01 Feb 2023 14:54:28 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
cdn.cookielaw.org/scripttemplates/otSDKStub.js
200 OK 8.4 kB URL HTTP/2 cdn.cookielaw.org/scripttemplates/otSDKStub.js
IP
File type ASCII text, with very long lines (25592)
Hash e248bb3ed9070ee48f0b5bc674e6a49d
46a6ac373399405df390e910c580cf850dce9886
74fd866eaf62b63cec2b85eadf2245e9302107f4c8fabc25f9c3e5cd49f40a6b
GET /scripttemplates/otSDKStub.js HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.namecheap.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 01 Feb 2023 16:40:46 GMT
content-type: application/javascript
content-length: 8384
content-encoding: gzip
content-md5: 4ki7PtkHDuSPC1vGdOaknQ==
last-modified: Mon, 30 Jan 2023 20:36:09 GMT
etag: 0x8DB03019EC57C05
x-ms-request-id: 8bd5a73a-801e-0125-0408-350600000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 79338
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 792c217779feb509-OSL
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 312 B IP
Hash 48d422da608ad93de7b386b50965fc44
62da3f812d7e54aa5b2f6ea5155165594ac2a582
e8495eb429877fd01187938fa37616622e2b9caf23304d9a9f565dbc9e670472
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5665
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 16:40:46 GMT
Last-Modified: Wed, 01 Feb 2023 15:06:21 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 312
q.quora.com/_/ad/4c16f555c46346f69b10fdbaeafa6b7b/pixel?tag=ViewContent&i=gtm&u=https%3A%2F%2Fwww.namecheap.com%2Fmarket%2Fbuynow%2Fretailintuitive.com%2F
200 OK 43 B URL HTTP/1.1 q.quora.com/_/ad/4c16f555c46346f69b10fdbaeafa6b7b/pixel?tag=ViewContent&i=gtm&u=https%3A%2F%2Fwww.namecheap.com%2Fmarket%2Fbuynow%2Fretailintuitive.com%2F
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /_/ad/4c16f555c46346f69b10fdbaeafa6b7b/pixel?tag=ViewContent&i=gtm&u=https%3A%2F%2Fwww.namecheap.com%2Fmarket%2Fbuynow%2Fretailintuitive.com%2F HTTP/1.1
Host: q.quora.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.namecheap.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/gif
Date: Wed, 01 Feb 2023 16:40:45 GMT
Server: nginx
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Q-Stat: ,02b4a1d4e6e439a6d948421aea805ca9,10.0.0.230,17490,91.90.42.154,,98882334072,1,1675269645.959,0.122,,.,0,0,0.000,0.120,-,0,0,197,250,125,10,34729,,,,,,-,
Content-Length: 43
Connection: keep-alive
bat.bing.com/p/action/5220469.js
204 No Content 0 B URL HTTP/2 bat.bing.com/p/action/5220469.js
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p/action/5220469.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.namecheap.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: private,max-age=1800
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 5F10F4DA63594B59BE73B54C2E77FD92 Ref B: OSL30EDGE0314 Ref C: 2023-02-01T16:40:45Z
date: Wed, 01 Feb 2023 16:40:45 GMT
X-Firefox-Spdy: h2
alb.reddit.com/rp.gif?ts=1675269667784&id=t2_2rhi1pdt&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&uuid=933973cd-198b-4c4f-a435-d85bf7695d04&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_65e23bc4
200 OK 42 B URL HTTP/2 alb.reddit.com/rp.gif?ts=1675269667784&id=t2_2rhi1pdt&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&uuid=933973cd-198b-4c4f-a435-d85bf7695d04&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_65e23bc4
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /rp.gif?ts=1675269667784&id=t2_2rhi1pdt&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&uuid=933973cd-198b-4c4f-a435-d85bf7695d04&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_65e23bc4 HTTP/1.1
Host: alb.reddit.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.namecheap.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: Varnish
retry-after: 0
cross-origin-resource-policy: cross-origin
content-type: image/gif
accept-ranges: bytes
date: Wed, 01 Feb 2023 16:40:46 GMT
via: 1.1 varnish
content-length: 42
X-Firefox-Spdy: h2
cdn.cookielaw.org/consent/b1960cb7-b316-4c11-b5de-7b632670221f/b1960cb7-b316-4c11-b5de-7b632670221f.json
200 OK 1.6 kB URL HTTP/2 cdn.cookielaw.org/consent/b1960cb7-b316-4c11-b5de-7b632670221f/b1960cb7-b316-4c11-b5de-7b632670221f.json
IP
File type JSON data\012- , ASCII text, with very long lines (4247), with no line terminators
Hash ad1dbc04717942423756369a733f6885
89dbdaa81a016cf99c5d83cd712c763bbf0bb133
1e624bf289db2397f0d9c9f3f268e966c4e5ecfb22b83e6e596537422675d8cb
GET /consent/b1960cb7-b316-4c11-b5de-7b632670221f/b1960cb7-b316-4c11-b5de-7b632670221f.json HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.namecheap.com
Connection: keep-alive
Referer: https://www.namecheap.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 01 Feb 2023 16:40:46 GMT
content-type: application/x-javascript
content-length: 1647
cache-control: public, max-age=86400
content-encoding: gzip
content-md5: rR28BHF5QkI3Vjaacz9ohQ==
last-modified: Mon, 12 Dec 2022 17:12:54 GMT
etag: 0x8DADC641BA55399
x-ms-request-id: 26d3a9d0-d01e-011f-204c-0e45a3000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 74271
expires: Thu, 02 Feb 2023 16:40:46 GMT
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 792c2177ecceb4f9-OSL
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 717cf52cfdc9e790ae36f7a4e1d19d16
03b71415f75565d67d059f1046fa363be72245e5
f76f4406c8796751e4b51ecff884ff3b3ea2bff4c60b6a8941d68b31951b4541
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4100
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 16:40:46 GMT
Last-Modified: Wed, 01 Feb 2023 15:32:26 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
www.facebook.com/tr/?id=1420159808240413&ev=PixelInitialized&dl=https%3A%2F%2Fwww.namecheap.com%2Fmarket%2Fbuynow%2Fretailintuitive.com%2F&rl=&if=false&ts=1675269668206
200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=1420159808240413&ev=PixelInitialized&dl=https%3A%2F%2Fwww.namecheap.com%2Fmarket%2Fbuynow%2Fretailintuitive.com%2F&rl=&if=false&ts=1675269668206
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=1420159808240413&ev=PixelInitialized&dl=https%3A%2F%2Fwww.namecheap.com%2Fmarket%2Fbuynow%2Fretailintuitive.com%2F&rl=&if=false&ts=1675269668206 HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.namecheap.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Wed, 01 Feb 2023 16:40:46 GMT
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 045de77c25553cc3c7bcafa7f7c8419f
a073bbbfd3ffa062948db22a42c7f6bcd3bc082d
a756edf2fee4d6b169aab055c2d2f7ea9cc99a248691014aa708e72c32aff3d4
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5825
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 16:40:46 GMT
Last-Modified: Wed, 01 Feb 2023 15:03:41 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 279
geolocation.onetrust.com/cookieconsentpub/v1/geo/location
200 OK 545 B URL HTTP/2 geolocation.onetrust.com/cookieconsentpub/v1/geo/location
IP
Hash f78a7850463c66680ef0d18d33d7f3d1
a8ad79ce2b45d35940d55bad31bfaedaa0be1a50
4bce6f05a9cc291e31858a9a99fc2d855d21b7182c06c99fd43f09275c054ac8
GET /cookieconsentpub/v1/geo/location HTTP/1.1
Host: geolocation.onetrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.namecheap.com
Connection: keep-alive
Referer: https://www.namecheap.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 01 Feb 2023 16:40:46 GMT
content-type: application/json
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: GET, OPTIONS
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 792c21783e1cb527-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
analytics.twitter.com/1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=ea803df2-5102-4779-89d3-c4dd00e359da&integration=gtm&p_id=Twitter&p_user_id=0&pl_id=8153ab0b-a325-470e-9d28-6a5dfa0b0d2f&tw_document_href=https%3A%2F%2Fwww.namecheap.com%2Fmarket%2Fbuynow%2Fretailintuitive.com%2F&tw_iframe_status=0&txn_id=nv8s8&type=javascript&version=2.3.29
200 OK 43 B URL HTTP/2 analytics.twitter.com/1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=ea803df2-5102-4779-89d3-c4dd00e359da&integration=gtm&p_id=Twitter&p_user_id=0&pl_id=8153ab0b-a325-470e-9d28-6a5dfa0b0d2f&tw_document_href=https%3A%2F%2Fwww.namecheap.com%2Fmarket%2Fbuynow%2Fretailintuitive.com%2F&tw_iframe_status=0&txn_id=nv8s8&type=javascript&version=2.3.29
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 377d257f2d2e294916143c069141c1c5
b7cae69682cf31dd670b65088db8395acda6ed3e
ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957
GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=ea803df2-5102-4779-89d3-c4dd00e359da&integration=gtm&p_id=Twitter&p_user_id=0&pl_id=8153ab0b-a325-470e-9d28-6a5dfa0b0d2f&tw_document_href=https%3A%2F%2Fwww.namecheap.com%2Fmarket%2Fbuynow%2Fretailintuitive.com%2F&tw_iframe_status=0&txn_id=nv8s8&type=javascript&version=2.3.29 HTTP/1.1
Host: analytics.twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.namecheap.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 01 Feb 2023 16:40:46 GMT
perf: 7626143928
server: tsa_o
set-cookie: guest_id_marketing=v1%3A167526964607663548; Max-Age=63072000; Expires=Fri, 31 Jan 2025 16:40:46 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None
guest_id_ads=v1%3A167526964607663548; Max-Age=63072000; Expires=Fri, 31 Jan 2025 16:40:46 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None
personalization_id="v1_rHJIlu4RGDGIoG5eE/q8vw=="; Max-Age=63072000; Expires=Fri, 31 Jan 2025 16:40:46 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None
guest_id=v1%3A167526964607663548; Max-Age=63072000; Expires=Fri, 31 Jan 2025 16:40:46 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None
content-type: image/gif;charset=utf-8
cache-control: no-cache, no-store, max-age=0
content-length: 43
x-transaction-id: 0f189adf34664c87
strict-transport-security: max-age=631138519
x-response-time: 104
x-connection-hash: 3da9e3797baa62f7e2c3c40ac67379afc49f8b802931b00cb0ab2d54a370bb27
X-Firefox-Spdy: h2
cdn.cookielaw.org/scripttemplates/6.39.0/otBannerSdk.js
200 OK 90 kB URL HTTP/2 cdn.cookielaw.org/scripttemplates/6.39.0/otBannerSdk.js
IP
File type ASCII text, with very long lines (65455)
Hash 669fc272b6662bb850d92e9cfedf53a7
e573ee887b0ca01445457cc338f510c559a092f4
e77f0bfe908a1ee2181992bad85721333d192528c2a00aac42077549f7d377ba
GET /scripttemplates/6.39.0/otBannerSdk.js HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.namecheap.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 16:40:46 GMT
content-type: application/javascript
content-length: 90454
content-encoding: gzip
content-md5: Zp/CcrZmK7hQ2S6c/t9Tpw==
last-modified: Fri, 26 Aug 2022 16:31:04 GMT
etag: 0x8DA87805EB35DE2
x-ms-request-id: 41a1e322-301e-0173-6402-efee70000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 72230
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 792c21786b4bb509-OSL
X-Firefox-Spdy: h2
cdn.cookielaw.org/consent/b1960cb7-b316-4c11-b5de-7b632670221f/00e3b11e-6275-4df0-9b85-5d308c5086c3/en.json
200 OK 23 kB URL HTTP/2 cdn.cookielaw.org/consent/b1960cb7-b316-4c11-b5de-7b632670221f/00e3b11e-6275-4df0-9b85-5d308c5086c3/en.json
IP
File type JSON data\012- HTML document, Unicode text, UTF-8 text, with very long lines (65510), with no line terminators
Hash 359ba27a0015f4aee645f41d17e42233
c30baf4c06666dd01f80017fcbebb84ccc2201d4
61f8272ce016debb755976482e6001e9ab43795ebad424b17e163dce8584b317
GET /consent/b1960cb7-b316-4c11-b5de-7b632670221f/00e3b11e-6275-4df0-9b85-5d308c5086c3/en.json HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.namecheap.com/
Origin: https://www.namecheap.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 16:40:46 GMT
content-type: application/x-javascript
content-length: 23337
cache-control: public, max-age=86400
content-encoding: gzip
content-md5: NZuiegAV9K7mRfQdF+QiMw==
last-modified: Mon, 12 Dec 2022 17:12:57 GMT
etag: 0x8DADC641D5E863D
x-ms-request-id: 9dbb7feb-701e-001d-3c4c-0e010c000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 30729
expires: Thu, 02 Feb 2023 16:40:46 GMT
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 792c21791e2ab4f9-OSL
X-Firefox-Spdy: h2
cdn.cookielaw.org/scripttemplates/6.39.0/assets/otFloatingFlat.json
200 OK 2.7 kB URL HTTP/2 cdn.cookielaw.org/scripttemplates/6.39.0/assets/otFloatingFlat.json
IP
File type JSON data\012- , ASCII text, with very long lines (8048)
Hash 7d0ba1555a2c1912c12c88cc2db1d00b
89c29fd3980e89458664732954df9756068bc0d8
38d1e065aa4a648dd8676a89341adffeb445a2680b417cfc9b1236509848677b
GET /scripttemplates/6.39.0/assets/otFloatingFlat.json HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.namecheap.com/
Origin: https://www.namecheap.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 16:40:46 GMT
content-type: application/json
content-length: 2702
content-encoding: gzip
content-md5: fQuhVVosGRLBLIjMLbHQCw==
last-modified: Fri, 26 Aug 2022 16:30:55 GMT
etag: 0x8DA878059E157EF
x-ms-request-id: aebacb25-101e-0164-544d-0e2e13000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 69162
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 792c21796ea5b4f9-OSL
X-Firefox-Spdy: h2
vgnpvrqq6me5nibag4loxocxtq0obfrn.lambda-url.us-east-1.on.aws/
200 OK 0 B URL HTTP/1.1 vgnpvrqq6me5nibag4loxocxtq0obfrn.lambda-url.us-east-1.on.aws/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS / HTTP/1.1
Host: vgnpvrqq6me5nibag4loxocxtq0obfrn.lambda-url.us-east-1.on.aws
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.namecheap.com/
Origin: https://www.namecheap.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Wed, 01 Feb 2023 16:40:46 GMT
Content-Type: application/json
Content-Length: 0
Connection: keep-alive
x-amzn-RequestId: 9996de8f-1978-4ea3-b5e5-1c8d04807348
Access-Control-Allow-Origin: https://www.namecheap.com
Access-Control-Allow-Headers: *
Vary: Origin
Access-Control-Allow-Methods: POST
Access-Control-Max-Age: 86400
vgnpvrqq6me5nibag4loxocxtq0obfrn.lambda-url.us-east-1.on.aws/
200 OK 31 B URL HTTP/1.1 vgnpvrqq6me5nibag4loxocxtq0obfrn.lambda-url.us-east-1.on.aws/
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash ec1de843f4ef96b7916d55df7407728c
42d3ec4a6e7c6f8fd05f2b7f046d77fd994fcaa5
16c07bcbf53b3d9950a2b7b526120862e14bc8bca77efefdbdeb1130bf8de196
POST / HTTP/1.1
Host: vgnpvrqq6me5nibag4loxocxtq0obfrn.lambda-url.us-east-1.on.aws
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 44
Origin: https://www.namecheap.com
Connection: keep-alive
Referer: https://www.namecheap.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Wed, 01 Feb 2023 16:40:46 GMT
Content-Type: application/json
Content-Length: 31
Connection: keep-alive
x-amzn-RequestId: 7a76e985-816e-4105-a8ff-236758011f22
Access-Control-Allow-Origin: https://www.namecheap.com
Vary: Origin
X-Amzn-Trace-Id: root=1-63da960e-5c3cac6a2597f2ff4effe669;sampled=0
vgnpvrqq6me5nibag4loxocxtq0obfrn.lambda-url.us-east-1.on.aws/
200 OK 0 B URL HTTP/1.1 vgnpvrqq6me5nibag4loxocxtq0obfrn.lambda-url.us-east-1.on.aws/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS / HTTP/1.1
Host: vgnpvrqq6me5nibag4loxocxtq0obfrn.lambda-url.us-east-1.on.aws
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.namecheap.com/
Origin: https://www.namecheap.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Wed, 01 Feb 2023 16:40:48 GMT
Content-Type: application/json
Content-Length: 0
Connection: keep-alive
x-amzn-RequestId: 02cd341e-0894-4887-b410-e3d3a7172077
Access-Control-Allow-Origin: https://www.namecheap.com
Access-Control-Allow-Headers: *
Vary: Origin
Access-Control-Allow-Methods: POST
Access-Control-Max-Age: 86400
vgnpvrqq6me5nibag4loxocxtq0obfrn.lambda-url.us-east-1.on.aws/
200 OK 31 B URL HTTP/1.1 vgnpvrqq6me5nibag4loxocxtq0obfrn.lambda-url.us-east-1.on.aws/
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 6344396c6fbfd8f885a89de8f74044b7
0d4aa5708b7cb5181797fb551b9891a5bfc57919
578dc8ae18b1a82119d49176e7adc3214b16d6990030e3727e14187c21048717
POST / HTTP/1.1
Host: vgnpvrqq6me5nibag4loxocxtq0obfrn.lambda-url.us-east-1.on.aws
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 44
Origin: https://www.namecheap.com
Connection: keep-alive
Referer: https://www.namecheap.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Wed, 01 Feb 2023 16:40:48 GMT
Content-Type: application/json
Content-Length: 31
Connection: keep-alive
x-amzn-RequestId: f553c414-8217-4bfa-9d3f-3e05666ac8db
Access-Control-Allow-Origin: https://www.namecheap.com
Vary: Origin
X-Amzn-Trace-Id: root=1-63da9610-12eeed6d7d8a27363e953524;sampled=0
www.namecheap.com/api/v1/ncpl/cart/user/getshoppingcartsummary
200 OK 0 B URL HTTP/2 www.namecheap.com/api/v1/ncpl/cart/user/getshoppingcartsummary
IP
POST /api/v1/ncpl/cart/user/getshoppingcartsummary HTTP/1.1
Host: www.namecheap.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=utf-8
x-ncpl-rcsrf: b162b30ad9ab45159e83a7dec3dc2a7b
Content-Length: 24
Origin: https://www.namecheap.com
Connection: keep-alive
Referer: https://www.namecheap.com/market/buynow/retailintuitive.com/
Cookie: SessionId=dbe324adcdba4e8aa7f26d86c1f08251; x-ncpl-csrf=b162b30ad9ab45159e83a7dec3dc2a7b; __cflb=02DiuJ7dRDeDqrVicRi7tLYhyh8Y18iqJU7mn4zj9Z8aG; __cfruid=730500326bc1e94f9982b4ceaef4a0da6d1daa4d-1675269641
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 16:40:42 GMT
content-type: application/json
vary: Accept-Encoding
access-control-allow-headers: Accept,access-control-allow-headers,Access-Control-Allow-Origin,Access-Control-Allow-Methods,access-control-allow-credentials,access-control-expose-headers,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With,x-ncpl-currency,x-ncpl-rcsrf
access-control-allow-origin: https://www.namecheap.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS
content-encoding: gzip
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 792c2160a860b521-OSL
X-Firefox-Spdy: h2
www.namecheap.com/assets/img/nc-icon/namecheap-icon-152x152.png
200 OK 0 B URL HTTP/2 www.namecheap.com/assets/img/nc-icon/namecheap-icon-152x152.png
IP
GET /assets/img/nc-icon/namecheap-icon-152x152.png HTTP/1.1
Host: www.namecheap.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.namecheap.com/market/buynow/retailintuitive.com/
Cookie: SessionId=dbe324adcdba4e8aa7f26d86c1f08251; x-ncpl-csrf=b162b30ad9ab45159e83a7dec3dc2a7b; __cflb=02DiuJ7dRDeDqrVicRi7tLYhyh8Y18iqJU7mn4zj9Z8aG; __cfruid=730500326bc1e94f9982b4ceaef4a0da6d1daa4d-1675269641; _gcl_au=1.1.1824208519.1675269665; x-sf-country=c7bf3c5247c72bdaef050d7b42117e3b1d05b9ddc540e0537311714a5dcbd54f|NO; .c=USD; _ga_7DMJMG20P8=GS1.1.1675269665.1.0.1675269665.60.0.0; _ga=GA1.1.122461027.1675269665; IR_gbd=namecheap.com; IR_5618=1675269665110%7C0%7C1675269665110%7C%7C
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 16:40:43 GMT
content-type: image/png
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-inst: 24
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, _NcCompliance
access-control-allow-methods: GET, POST
access-control-allow-credentials: true
strict-transport-security: max-age=16000000; includeSubDomains
last-modified: Wed, 01 Feb 2023 15:49:00 GMT
cf-cache-status: HIT
age: 460
expires: Wed, 01 Feb 2023 20:40:43 GMT
cache-control: public, max-age=14400
vary: Accept-Encoding
server: cloudflare
cf-ray: 792c21673940b521-OSL
X-Firefox-Spdy: h2
static.nc-img.com/uilayout2/app.f80823060dc0847adfb6.js
200 OK 0 B URL HTTP/2 static.nc-img.com/uilayout2/app.f80823060dc0847adfb6.js
IP
GET /uilayout2/app.f80823060dc0847adfb6.js HTTP/1.1
Host: static.nc-img.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.namecheap.com
Connection: keep-alive
Referer: https://www.namecheap.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 01 Feb 2023 16:40:42 GMT
content-type: application/javascript
last-modified: Tue, 20 Dec 2022 12:33:34 GMT
vary: Accept-Encoding, Origin
etag: W/"63a1ab9e-43993"
cache-control: public, max-age=31536000, immutable
access-control-allow-origin: *
cf-cache-status: HIT
age: 3729809
server: cloudflare
cf-ray: 792c215f0ced0afe-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.namecheap.com/api/v1/ncpl/cart/user/getShoppingCartSummary
200 OK 0 B URL HTTP/2 www.namecheap.com/api/v1/ncpl/cart/user/getShoppingCartSummary
IP
POST /api/v1/ncpl/cart/user/getShoppingCartSummary HTTP/1.1
Host: www.namecheap.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.namecheap.com/market/buynow/retailintuitive.com/
cache-control: no-cache
pragma: no-cache
x-ncpl-rcsrf: b162b30ad9ab45159e83a7dec3dc2a7b
Content-Type: text/plain;charset=UTF-8
Origin: https://www.namecheap.com
Content-Length: 23
Connection: keep-alive
Cookie: SessionId=dbe324adcdba4e8aa7f26d86c1f08251; x-ncpl-csrf=b162b30ad9ab45159e83a7dec3dc2a7b; __cflb=02DiuJ7dRDeDqrVicRi7tLYhyh8Y18iqJU7mn4zj9Z8aG; __cfruid=730500326bc1e94f9982b4ceaef4a0da6d1daa4d-1675269641; _gcl_au=1.1.1824208519.1675269665; x-sf-country=c7bf3c5247c72bdaef050d7b42117e3b1d05b9ddc540e0537311714a5dcbd54f|NO; .c=USD; _ga_7DMJMG20P8=GS1.1.1675269665.1.0.1675269665.60.0.0; _ga=GA1.1.122461027.1675269665; IR_gbd=namecheap.com; IR_5618=1675269665110%7C0%7C1675269665110%7C%7C
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 16:40:43 GMT
content-type: application/json
vary: Accept-Encoding
access-control-allow-headers: Accept,access-control-allow-headers,Access-Control-Allow-Origin,Access-Control-Allow-Methods,access-control-allow-credentials,access-control-expose-headers,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With,x-ncpl-currency,x-ncpl-rcsrf
access-control-allow-origin: https://www.namecheap.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS
content-encoding: gzip
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 792c2164adcdb521-OSL
X-Firefox-Spdy: h2
www.namecheap.com/api/v1/ncpl/cart/user/get
200 OK 0 B URL HTTP/2 www.namecheap.com/api/v1/ncpl/cart/user/get
IP
GET /api/v1/ncpl/cart/user/get HTTP/1.1
Host: www.namecheap.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
x-ncpl-rcsrf: b162b30ad9ab45159e83a7dec3dc2a7b
Connection: keep-alive
Referer: https://www.namecheap.com/market/buynow/retailintuitive.com/
Cookie: SessionId=dbe324adcdba4e8aa7f26d86c1f08251; x-ncpl-csrf=b162b30ad9ab45159e83a7dec3dc2a7b; __cflb=02DiuJ7dRDeDqrVicRi7tLYhyh8Y18iqJU7mn4zj9Z8aG; __cfruid=730500326bc1e94f9982b4ceaef4a0da6d1daa4d-1675269641; _gcl_au=1.1.1824208519.1675269665; x-sf-country=c7bf3c5247c72bdaef050d7b42117e3b1d05b9ddc540e0537311714a5dcbd54f|NO; .c=USD; _ga_7DMJMG20P8=GS1.1.1675269665.1.0.1675269665.60.0.0; _ga=GA1.2.122461027.1675269665; IR_gbd=namecheap.com; IR_5618=1675269665110%7C0%7C1675269665110%7C%7C; _gid=GA1.2.1380597985.1675269666; _gat_UA-69192-32=1; _ce.s=v~e0635046070770c23f431ad32259008d1f79a615~vpv~0; cebs=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 16:40:44 GMT
content-type: application/json
vary: Accept-Encoding
strict-transport-security: max-age=16000000; includeSubDomains
content-encoding: gzip
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 792c216aee08b521-OSL
X-Firefox-Spdy: h2
script.crazyegg.com/pages/scripts/0043/5670.js
200 OK 0 B URL HTTP/2 script.crazyegg.com/pages/scripts/0043/5670.js
IP
GET /pages/scripts/0043/5670.js HTTP/1.1
Host: script.crazyegg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.namecheap.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 01 Feb 2023 16:40:43 GMT
content-type: text/javascript
access-control-allow-origin: *
access-control-expose-headers: CE-Version
ce-version: 11.5.21
cache-control: public, max-age=300, s-maxage=1209600
cf-bgj: minify
cf-polished: origSize=6088
last-modified: Wed, 01 Feb 2023 10:06:42 GMT
timing-allow-origin: *
cf-cache-status: HIT
age: 23639
vary: Accept-Encoding
server: cloudflare
cf-ray: 792c2167697cb521-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
cdn.cookielaw.org/scripttemplates/6.39.0/assets/otCommonStyles.css
200 OK 0 B URL HTTP/2 cdn.cookielaw.org/scripttemplates/6.39.0/assets/otCommonStyles.css
IP
GET /scripttemplates/6.39.0/assets/otCommonStyles.css HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.namecheap.com/
Origin: https://www.namecheap.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 16:40:46 GMT
content-type: text/css
content-md5: B55i3ZY9miZIaUrwjufy0w==
last-modified: Fri, 26 Aug 2022 16:31:09 GMT
x-ms-request-id: db9af5dc-b01e-0029-144c-0eaea4000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 74271
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 792c21796eaab4f9-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
static.nc-img.com/nclabs/lc.nclabs.minicartwidget/main.393ec80ba7fe27363c22.build.js
200 OK 0 B URL HTTP/2 static.nc-img.com/nclabs/lc.nclabs.minicartwidget/main.393ec80ba7fe27363c22.build.js
IP
GET /nclabs/lc.nclabs.minicartwidget/main.393ec80ba7fe27363c22.build.js HTTP/1.1
Host: static.nc-img.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.namecheap.com
Connection: keep-alive
Referer: https://www.namecheap.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 16:40:42 GMT
content-type: application/javascript
last-modified: Wed, 27 Apr 2022 13:05:42 GMT
vary: Accept-Encoding, Origin
etag: W/"62693fa6-62b95"
cache-control: public, max-age=31536000, immutable
access-control-allow-origin: *
cf-cache-status: HIT
age: 24203459
server: cloudflare
cf-ray: 792c215ecc970afe-OSL
content-encoding: br
X-Firefox-Spdy: h2
d3ry1h4w5036x1.cloudfront.net/static/css/main.1cc63927.css
200 OK 0 B URL HTTP/2 d3ry1h4w5036x1.cloudfront.net/static/css/main.1cc63927.css
IP
GET /static/css/main.1cc63927.css HTTP/1.1
Host: d3ry1h4w5036x1.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.namecheap.com
Connection: keep-alive
Referer: https://www.namecheap.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css
date: Fri, 13 Jan 2023 00:49:46 GMT
last-modified: Tue, 13 Dec 2022 10:23:15 GMT
etag: W/"6bbc6b61d1586ca8b654c6f942a46520"
cache-control: public, max-age=31536000, immutable
server: AmazonS3
content-encoding: br
x-cache: Hit from cloudfront
via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: v2xPUzXwDppvZ37B1s_PA6bIT-WSsX2MRNQmhB2mVnKV1KNbRxU4rg==
age: 1698656
access-control-allow-origin: https://www.namecheap.com
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
static.nc-img.com/uilayout2/app.1746c78f1bec568bf53f.css
200 OK 0 B URL HTTP/2 static.nc-img.com/uilayout2/app.1746c78f1bec568bf53f.css
IP
GET /uilayout2/app.1746c78f1bec568bf53f.css HTTP/1.1
Host: static.nc-img.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.namecheap.com
Connection: keep-alive
Referer: https://www.namecheap.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 01 Feb 2023 16:40:42 GMT
content-type: text/css
last-modified: Tue, 20 Dec 2022 12:33:30 GMT
vary: Accept-Encoding, Origin
etag: W/"63a1ab9a-81cc"
cache-control: public, max-age=31536000, immutable
access-control-allow-origin: *
cf-cache-status: HIT
age: 3729809
server: cloudflare
cf-ray: 792c215f1cf70afe-OSL
content-encoding: br
X-Firefox-Spdy: h2
static.nc-img.com/uilayout2/34735a65a0c63bd007fa4c32f67dab4c.svg
200 OK 0 B URL HTTP/2 static.nc-img.com/uilayout2/34735a65a0c63bd007fa4c32f67dab4c.svg
IP
GET /uilayout2/34735a65a0c63bd007fa4c32f67dab4c.svg HTTP/1.1
Host: static.nc-img.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.namecheap.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 16:40:42 GMT
content-type: image/svg+xml
last-modified: Sun, 27 Feb 2022 10:42:46 GMT
etag: W/"621b55a6-8980"
vary: Accept-Encoding, Origin
cache-control: public, max-age=31536000, immutable
access-control-allow-origin: *
cf-cache-status: HIT
age: 3729837
server: cloudflare
cf-ray: 792c215f1da5b51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
static.nc-img.com/uilayout2/libs/vendors_5feae52b1e038b28d546.js
200 OK 0 B URL HTTP/2 static.nc-img.com/uilayout2/libs/vendors_5feae52b1e038b28d546.js
IP
GET /uilayout2/libs/vendors_5feae52b1e038b28d546.js HTTP/1.1
Host: static.nc-img.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.namecheap.com
Connection: keep-alive
Referer: https://www.namecheap.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 16:40:42 GMT
content-type: application/javascript
last-modified: Wed, 31 Aug 2022 14:20:30 GMT
vary: Accept-Encoding, Origin
etag: W/"630f6e2e-58c23"
cache-control: public, max-age=31536000, immutable
access-control-allow-origin: *
cf-cache-status: HIT
age: 3729809
server: cloudflare
cf-ray: 792c215ffe0d0afe-OSL
content-encoding: br
X-Firefox-Spdy: h2
chat.engagement.ai/api/v2/widget/discover
200 OK 0 B URL HTTP/2 chat.engagement.ai/api/v2/widget/discover
IP
GET /api/v2/widget/discover HTTP/1.1
Host: chat.engagement.ai
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.namecheap.com
Connection: keep-alive
Referer: https://www.namecheap.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 01 Feb 2023 16:40:43 GMT
content-type: application/json; charset=utf-8
etag: W/"5a3-Wa5FiTaG9O8r7SSKMVgHsKMp9sA"
access-control-allow-origin: https://www.namecheap.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept,access-control-allow-headers,Access-Control-Allow-Origin,Access-Control-Allow-Methods,access-control-allow-credentials,access-control-expose-headers,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With,x-ncpl-currency,x-ncpl-rcsrf,x-client-version
access-control-expose-headers: X-Incompatible-Version
vary: Origin
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 792c216158aa0b55-OSL
content-encoding: br
X-Firefox-Spdy: h2
cdn.engagement.ai/production/static/js/sdk/chatSDK.2356ebc7211f5663a7c2.js
200 OK 0 B URL HTTP/2 cdn.engagement.ai/production/static/js/sdk/chatSDK.2356ebc7211f5663a7c2.js
IP
GET /production/static/js/sdk/chatSDK.2356ebc7211f5663a7c2.js HTTP/1.1
Host: cdn.engagement.ai
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.namecheap.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
last-modified: Wed, 25 Jan 2023 15:24:45 GMT
server: AmazonS3
content-encoding: gzip
date: Wed, 01 Feb 2023 02:13:24 GMT
cache-control: max-age=86400,public
etag: W/"7759fe113dfd6bf19acee2211b74aa18"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Yw7OxE6pJ3cq5MlGpfj1fhIyEnyYCCNGFF_DxGpvamYqp9YgVao_mQ==
age: 52082
X-Firefox-Spdy: h2
d3ry1h4w5036x1.cloudfront.net/static/js/555.1eeadbfe.chunk.js
200 OK 0 B URL HTTP/2 d3ry1h4w5036x1.cloudfront.net/static/js/555.1eeadbfe.chunk.js
IP
GET /static/js/555.1eeadbfe.chunk.js HTTP/1.1
Host: d3ry1h4w5036x1.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.namecheap.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Tue, 10 Jan 2023 01:47:18 GMT
last-modified: Tue, 13 Dec 2022 10:23:15 GMT
etag: W/"8bd37fe10ca418c7d8d67adde246ef5b"
cache-control: public, max-age=31536000, immutable
server: AmazonS3
content-encoding: br
x-cache: Hit from cloudfront
via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 075T9Zq4P0msfaw60uN4X65l-bCCj9od2y7UDXoexZJpCfobZk4AHg==
age: 1954406
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
retailintuitive.com/
302 Found 0 B IP
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: retailintuitive.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 302 Found
location: https://www.namecheap.com/market/buynow/retailintuitive.com/
vary: Accept-Encoding,User-Agent
content-type: text/html; charset=UTF-8
cache-control: no-cache, no-store, must-revalidate, max-age=0
expires: Fri, 03 Mar 2023 16:40:40 GMT
content-encoding: gzip
date: Wed, 01 Feb 2023 16:40:40 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
static.nc-img.com/pp/nc-ui-globalenv/main.05e11966e54a7ee94a37404daccb2c74.css
200 OK 0 B URL HTTP/2 static.nc-img.com/pp/nc-ui-globalenv/main.05e11966e54a7ee94a37404daccb2c74.css
IP
GET /pp/nc-ui-globalenv/main.05e11966e54a7ee94a37404daccb2c74.css HTTP/1.1
Host: static.nc-img.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.namecheap.com
Connection: keep-alive
Referer: https://www.namecheap.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 01 Feb 2023 16:40:42 GMT
content-type: text/css
last-modified: Tue, 13 Sep 2022 11:52:30 GMT
vary: Accept-Encoding, Origin
etag: W/"63206efe-2a163"
cache-control: public, max-age=31536000, immutable
access-control-allow-origin: *
cf-cache-status: HIT
age: 12194347
server: cloudflare
cf-ray: 792c215ecc910afe-OSL
content-encoding: br
X-Firefox-Spdy: h2
static.nc-img.com/nclabs/lc.nclabs.minicartwidget/main.393ec80ba7fe27363c22.css
200 OK 0 B URL HTTP/2 static.nc-img.com/nclabs/lc.nclabs.minicartwidget/main.393ec80ba7fe27363c22.css
IP
GET /nclabs/lc.nclabs.minicartwidget/main.393ec80ba7fe27363c22.css HTTP/1.1
Host: static.nc-img.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.namecheap.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 01 Feb 2023 16:40:42 GMT
content-type: text/css
last-modified: Wed, 27 Apr 2022 13:05:42 GMT
vary: Accept-Encoding, Origin
etag: W/"62693fa6-a822"
cache-control: public, max-age=31536000, immutable
access-control-allow-origin: *
cf-cache-status: HIT
age: 20707751
server: cloudflare
cf-ray: 792c215f1da3b51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
d3ry1h4w5036x1.cloudfront.net/static/media/tld-sprite.3e26e3ab7e6312b6586f7418fffb0d16.svg
200 OK 0 B URL HTTP/2 d3ry1h4w5036x1.cloudfront.net/static/media/tld-sprite.3e26e3ab7e6312b6586f7418fffb0d16.svg
IP
GET /static/media/tld-sprite.3e26e3ab7e6312b6586f7418fffb0d16.svg HTTP/1.1
Host: d3ry1h4w5036x1.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.namecheap.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
date: Tue, 17 Jan 2023 05:00:49 GMT
last-modified: Tue, 13 Dec 2022 10:23:15 GMT
etag: W/"63f46716a380797954b95efa805239f9"
cache-control: public, max-age=31536000, immutable
server: AmazonS3
content-encoding: br
x-cache: Hit from cloudfront
via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Ngwqr6Fx5OLSNFd1R9ZV0lRUWsWtkLUv3UB_NxODYKUbohdBMVUa2w==
age: 1337996
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
d3ry1h4w5036x1.cloudfront.net/timesync.min.js
200 OK 0 B URL HTTP/2 d3ry1h4w5036x1.cloudfront.net/timesync.min.js
IP
GET /timesync.min.js HTTP/1.1
Host: d3ry1h4w5036x1.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.namecheap.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Wed, 11 Jan 2023 06:21:37 GMT
last-modified: Tue, 13 Dec 2022 10:23:15 GMT
etag: W/"307e1272c514872ff4f6b8d1f765390b"
cache-control: public, max-age=31536000
server: AmazonS3
content-encoding: br
x-cache: Hit from cloudfront
via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: gRwo2TzLfh_j-CWoXD7sU4fAL0tcL25LagwO_0QFC7uHBf8XPQ0wWg==
age: 1851547
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
www.namecheap.com/market/buynow/retailintuitive.com/
200 OK 0 B URL HTTP/2 www.namecheap.com/market/buynow/retailintuitive.com/
IP
GET /market/buynow/retailintuitive.com/ HTTP/1.1
Host: www.namecheap.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Wed, 01 Feb 2023 16:40:41 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
strict-transport-security: max-age=16000000; includeSubDomains
content-encoding: gzip
cf-cache-status: DYNAMIC
set-cookie: SessionId=dbe324adcdba4e8aa7f26d86c1f08251; domain=.www.namecheap.com; path=/; httponly
x-ncpl-csrf=b162b30ad9ab45159e83a7dec3dc2a7b; domain=.www.namecheap.com; path=/; secure; samesite=none
__cflb=02DiuJ7dRDeDqrVicRi7tLYhyh8Y18iqJU7mn4zj9Z8aG; SameSite=Lax; path=/; expires=Thu, 02-Feb-23 15:40:41 GMT; HttpOnly
__cfruid=730500326bc1e94f9982b4ceaef4a0da6d1daa4d-1675269641; path=/; domain=.namecheap.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 792c215ac83bb521-OSL
X-Firefox-Spdy: h2
d3ry1h4w5036x1.cloudfront.net/static/js/main.dfb061d2.js
200 OK 0 B URL HTTP/2 d3ry1h4w5036x1.cloudfront.net/static/js/main.dfb061d2.js
IP
GET /static/js/main.dfb061d2.js HTTP/1.1
Host: d3ry1h4w5036x1.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.namecheap.com
Connection: keep-alive
Referer: https://www.namecheap.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
date: Tue, 17 Jan 2023 05:21:29 GMT
last-modified: Tue, 17 Jan 2023 05:21:18 GMT
etag: W/"003ad14e8bb35e34eb9eab29554eebfc"
cache-control: public, max-age=31536000, immutable
server: AmazonS3
content-encoding: br
x-cache: Hit from cloudfront
via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: SELI4bDOBjzAJMH-nWTu7ZhKilvCFY8izSjkHqxotS7aeilGL5prFg==
age: 1336754
access-control-allow-origin: https://www.namecheap.com
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
d3ry1h4w5036x1.cloudfront.net/static/js/183.a23f2cd5.chunk.js
200 OK 0 B URL HTTP/2 d3ry1h4w5036x1.cloudfront.net/static/js/183.a23f2cd5.chunk.js
IP
GET /static/js/183.a23f2cd5.chunk.js HTTP/1.1
Host: d3ry1h4w5036x1.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.namecheap.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Tue, 17 Jan 2023 05:00:45 GMT
last-modified: Tue, 13 Dec 2022 10:23:15 GMT
etag: W/"70eedb84537cdf522793db5dc62fce49"
cache-control: public, max-age=31536000, immutable
server: AmazonS3
content-encoding: br
x-cache: Hit from cloudfront
via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: grOakua8IBiUzuNYdoPRer8f2XI_2uL4NoUUOcMoE4P3NxvHGneGCg==
age: 1337999
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
66.42.116.212
104.19.148.8
151.101.84.157
157.240.205.35
93.184.220.29
23.33.119.27
52.212.178.69