| www.palazzomorra.com/ |  62.149.128.45 | 301 Moved Permanently | 0 B |
IP62.149.128.45:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET / HTTP/1.1
Host: www.palazzomorra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Cache-Control: private
Content-Type: text/html
Location: http://www.palazzomorra.it
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Sat, 19 Nov 2022 18:58:12 GMT
Content-Length: 0
|
|
| r3.o.lencr.org/ |  23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hasheb76c0b3adf4098ad8a9d1e38250758f 99610ddb2b4ec6d04250ac244f966951695d4f00 01ed8c191c175471aee23cbc196d558e5bf5209f166806fc97db08eb06544bab
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "01ED8C191C175471AEE23CBC196D558E5BF5209F166806FC97DB08EB06544BAB"
Last-Modified: Sat, 19 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17615
Expires: Sat, 19 Nov 2022 23:51:48 GMT
Date: Sat, 19 Nov 2022 18:58:13 GMT
Connection: keep-alive
|
|
| ocsp.digicert.com/ |  93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hashf732c50f6a2482aeea20552e0370c2d0 6f33119d5c38e92a0a62f3a46766ff86014e4d68 a47e38c199c5fecd5594544a3889e1cfca5547d85f19056f06eaeeadf17f4fe9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6406
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 19 Nov 2022 18:58:13 GMT
Last-Modified: Sat, 19 Nov 2022 17:11:27 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 471
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash1cee7787feebac18f9eca273e56e3741 3a7dac544172921e24c2a1701beef5079b21d01b 79ff4a450c749d64e116c00ca3b00d40e968906c5c3881d6eeb2dc6374a4c858
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "79FF4A450C749D64E116C00CA3B00D40E968906C5C3881D6EEB2DC6374A4C858"
Last-Modified: Sat, 19 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15159
Expires: Sat, 19 Nov 2022 23:10:52 GMT
Date: Sat, 19 Nov 2022 18:58:13 GMT
Connection: keep-alive
|
|
| firefox.settings.services.mozilla.com/v1/ |  34.102.187.140 | 200 OK | 939 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/ IP34.102.187.140:0
File typeJSON data\012- , ASCII text, with very long lines (939), with no line terminators Hash4d7e4eed097b9c4e5d509419f1cfc85a 290bb3d428a7c6330e2e3d73a952b16f820896c8 0dc9ca0f57af15adcd416035e92794711434e3d53a1feff21d8481d6d500986c
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Content-Length, Alert, Backoff, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 19 Nov 2022 18:45:10 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 783
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain | 34.160.144.191 | 200 OK | 5.3 kB |
URL HTTP/2content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain IP34.160.144.191:0
File typePEM certificate\012- , ASCII text Hash9ebddc2b260d081ebbefee47c037cb28 492bad62a7ca6a74738921ef5ae6f0be5edebf39 74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 40d/195erG3wlG4PGt2dxad86JCKzCZujHhWpBz+0GmcyuP2NzzM90a4FWthaAQQPW5f0hEzq2c=
x-amz-request-id: ZQE9FR89D0WTH5BP
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 19 Nov 2022 18:41:24 GMT
age: 1009
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| contile.services.mozilla.com/v1/tiles | 34.117.237.239 | 200 OK | 12 B |
URL HTTP/2contile.services.mozilla.com/v1/tiles IP34.117.237.239:0
File typeJSON data\012- , ASCII text, with no line terminators Hash23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 19 Nov 2022 18:58:13 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| www.palazzomorra.it/ | 89.46.104.16 | 301 Moved Permanently | 168 B |
IP89.46.104.16:0
File typeHTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators Hash82f04704c04c2706b1b96a73be2ff3a9 8cd210a378b7f54ce8945cdf1c7ce1f696171eee ede97dbf06b3e703cd950b3591a29351ce9b24eccab58b1a913b3c7e4571bf02
GET / HTTP/1.1
Host: www.palazzomorra.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: aruba-proxy
Date: Sat, 19 Nov 2022 18:58:13 GMT
Content-Type: text/html
Content-Length: 168
Connection: keep-alive
Location: https://www.palazzomorra.it/
X-ServerName: ipvsproxy03.ad.aruba.it
|
|
| ocsp06.actalis.it/VA/AUTHDV-G3 | 109.70.240.114 | 200 | 3.9 kB |
URL HTTP/1.1ocsp06.actalis.it/VA/AUTHDV-G3 IP109.70.240.114:0
Hasha0b186503e53c2fe22d9587cc63e0abb 832e6add88c2b680a170ec6a23284c6ec6030a86 11b24e59dc307433606d6f733a0184fc29907cc91fc59fcf999c3801ef1cc731
POST /VA/AUTHDV-G3 HTTP/1.1
Host: ocsp06.actalis.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Server: nginx
Date: Sat, 19 Nov 2022 18:58:13 GMT
Content-Type: application/ocsp-response
Content-Length: 3926
Connection: keep-alive
Last-Modified: Sat, 19 Nov 2022 16:29:50 GMT
Expires: Sun, 20 Nov 2022 16:29:49 GMT
ETag: "832e6add88c2b680a170ec6a23284c6ec6030a86"
|
|
| firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US | 34.102.187.140 | 200 OK | 329 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US IP34.102.187.140:0
File typeJSON data\012- , ASCII text, with very long lines (329), with no line terminators Hash0333b0655111aa68de771adfcc4db243 63f295a144ac87a7c8e23417626724eeca68a7eb 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: ETag, Content-Type, Content-Length, Last-Modified, Alert, Backoff, Pragma, Expires, Retry-After, Cache-Control
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 19 Nov 2022 18:44:49 GMT
cache-control: public,max-age=3600
age: 805
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hash060d538b33e370fcd033339830d33a42 4a37d427988358eb318e18e2678c3484ef4a5ebd efa33f92547243814b5bd3bca4f94d26055d590a4431611b3ba251a8d774bfbb
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2629
Cache-Control: max-age=139947
Content-Type: application/ocsp-response
Date: Sat, 19 Nov 2022 18:58:14 GMT
Etag: "63789cac-1d7"
Expires: Mon, 21 Nov 2022 09:50:41 GMT
Last-Modified: Sat, 19 Nov 2022 09:06:52 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 471
|
|
| push.services.mozilla.com/ | 52.40.161.235 | 101 Switching Protocols | 0 B |
URL HTTP/1.1push.services.mozilla.com/ IP52.40.161.235:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: LjdfHnGHXP1uCOUBPiRLvg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: fgfe4IIN64ci2qsDrasn0lfAmGI=
|
|
| www.palazzomorra.it/wp-includes/css/classic-themes.min.css?ver=1 | 89.46.104.16 | 200 OK | 217 B |
URL HTTP/2www.palazzomorra.it/wp-includes/css/classic-themes.min.css?ver=1 IP89.46.104.16:0
Hash95e891f28e44a9b314c09545d86be2b7 f9b13a8bd47273b086a0a07df15f314e0af0bc3e 5a5f39391fbf5b06db84b8f9716d53de575ee97a627d2c5f12f79a991a671eb5
GET /wp-includes/css/classic-themes.min.css?ver=1 HTTP/1.1
Host: www.palazzomorra.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.palazzomorra.it/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: aruba-proxy
date: Sat, 19 Nov 2022 18:58:14 GMT
content-type: text/css
content-length: 217
last-modified: Wed, 02 Nov 2022 10:26:16 GMT
accept-ranges: bytes
x-servername: ipvsproxy03.ad.aruba.it
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 472 B |
IP142.250.74.3:0
Hash07caf241d63e15426cd26434ef88e9dd ec289ab860ffccd49ce9a62d2c47c59dc181fbd5 d1f4bc6604b8a399049b5943d23dbfb842d9a100bf6f5c71e91a27cd3588cecb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 19 Nov 2022 18:58:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 472 B |
IP142.250.74.3:0
Hash07caf241d63e15426cd26434ef88e9dd ec289ab860ffccd49ce9a62d2c47c59dc181fbd5 d1f4bc6604b8a399049b5943d23dbfb842d9a100bf6f5c71e91a27cd3588cecb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 19 Nov 2022 18:58:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.palazzomorra.it/wp-content/plugins/wp-whatsapp-chat-pro/assets/qlwapp-icons.min.css?ver=2.5.7 | 89.46.104.16 | 200 OK | 1.1 kB |
URL HTTP/2www.palazzomorra.it/wp-content/plugins/wp-whatsapp-chat-pro/assets/qlwapp-icons.min.css?ver=2.5.7 IP89.46.104.16:0
Hash81f5e42080dda52b2d176ebf9ef905e1 0957ce63b23213bc6fcc66c3b8fef037fa6d4330 cd404ba5dec0fa6e47838d805fac9bfb1b5ba0542f3b9e4ac8c35a86af8b08b9
GET /wp-content/plugins/wp-whatsapp-chat-pro/assets/qlwapp-icons.min.css?ver=2.5.7 HTTP/1.1
Host: www.palazzomorra.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.palazzomorra.it/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: aruba-proxy
date: Sat, 19 Nov 2022 18:58:14 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Wed, 06 Oct 2021 07:39:30 GMT
x-servername: ipvsproxy03.ad.aruba.it
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.palazzomorra.it/wp-content/uploads/2017/08/cropped-stemma-morra-1.gif | 89.46.104.16 | 200 OK | 31 kB |
URL HTTP/2www.palazzomorra.it/wp-content/uploads/2017/08/cropped-stemma-morra-1.gif IP89.46.104.16:0
File typeGIF image data, version 89a, 226 x 250\012- data Hash410bbad427c3da4db7a51b25387f2992 24e5d0b8e04064328d31ee18c94449236cdbb459 92181c2272c6ab982a97dc6fc36ef09d49255e6a6caffc578b39bb12b4107800
GET /wp-content/uploads/2017/08/cropped-stemma-morra-1.gif HTTP/1.1
Host: www.palazzomorra.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.palazzomorra.it/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: aruba-proxy
date: Sat, 19 Nov 2022 18:58:14 GMT
content-type: image/gif
content-length: 30751
last-modified: Sun, 27 Aug 2017 08:59:05 GMT
accept-ranges: bytes
x-servername: ipvsproxy03.ad.aruba.it
X-Firefox-Spdy: h2
|
|
| www.palazzomorra.it/wp-content/uploads/2017/08/stemma-titolo-100.png | 89.46.104.16 | 200 OK | 36 kB |
URL HTTP/2www.palazzomorra.it/wp-content/uploads/2017/08/stemma-titolo-100.png IP89.46.104.16:0
File typePNG image data, 612 x 100, 8-bit/color RGBA, non-interlaced\012- data Hash3068b36ad2f959cc4baafc656d42203d a20f788285723b9a3a2f8d9df6dfedbed3c697b4 05963eb9e751cba79f1dae22435a8fb6c101a441361e8add7ec542b6b65e871f
GET /wp-content/uploads/2017/08/stemma-titolo-100.png HTTP/1.1
Host: www.palazzomorra.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.palazzomorra.it/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: aruba-proxy
date: Sat, 19 Nov 2022 18:58:14 GMT
content-type: image/png
content-length: 36137
last-modified: Sun, 27 Aug 2017 08:56:56 GMT
accept-ranges: bytes
x-servername: ipvsproxy03.ad.aruba.it
X-Firefox-Spdy: h2
|
|
| www.palazzomorra.it/wp-content/uploads/2017/08/stemma-titolo-100-300x49.png | 89.46.104.16 | 200 OK | 12 kB |
URL HTTP/2www.palazzomorra.it/wp-content/uploads/2017/08/stemma-titolo-100-300x49.png IP89.46.104.16:0
File typePNG image data, 300 x 49, 8-bit/color RGBA, non-interlaced\012- data Hashc5bb50291dc6de3f58756393896dfa0a 13d8570013ad4408cc5d0cc505c60874e4d40545 bd2b997c7ba8f85d37e1fe0f39f6565e9fc8a00562155d296c38613dc3779176
GET /wp-content/uploads/2017/08/stemma-titolo-100-300x49.png HTTP/1.1
Host: www.palazzomorra.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.palazzomorra.it/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: aruba-proxy
date: Sat, 19 Nov 2022 18:58:14 GMT
content-type: image/png
content-length: 11709
last-modified: Sun, 27 Aug 2017 08:56:57 GMT
accept-ranges: bytes
x-servername: ipvsproxy03.ad.aruba.it
X-Firefox-Spdy: h2
|
|
| youtu.be/P2WBmrh_VCY | 172.217.21.174 | 303 See Other | 0 B |
IP172.217.21.174:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /P2WBmrh_VCY HTTP/1.1
Host: youtu.be
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.palazzomorra.it/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 303 See Other
content-type: application/binary
x-content-type-options: nosniff
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sat, 19 Nov 2022 18:58:14 GMT
location: https://www.youtube.com/watch?v=P2WBmrh_VCY&feature=youtu.be
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=31536000
cross-origin-opener-policy-report-only: same-origin-allow-popups; report-to="SHORT_URL"
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
report-to: {"group":"SHORT_URL","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/SHORT_URL"}]}
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
server: ESF
content-length: 0
x-xss-protection: 0
set-cookie: YSC=axeCaNxCJqw; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none
CONSENT=PENDING+868; expires=Mon, 18-Nov-2024 18:58:14 GMT; path=/; domain=.youtu.be; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 472 B |
IP142.250.74.3:0
Hash07caf241d63e15426cd26434ef88e9dd ec289ab860ffccd49ce9a62d2c47c59dc181fbd5 d1f4bc6604b8a399049b5943d23dbfb842d9a100bf6f5c71e91a27cd3588cecb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 19 Nov 2022 18:58:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.palazzomorra.it/wp-content/uploads/2017/08/atrio-4.jpg | 89.46.104.16 | 200 OK | 167 kB |
URL HTTP/2www.palazzomorra.it/wp-content/uploads/2017/08/atrio-4.jpg IP89.46.104.16:0
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 800x291, components 3\012- data Size167 kB (167051 bytes) Hash57009acbcd675445ccaba5f0cf6b9651 fccc8235f91c3e404c08f2d925e1f6540c8c0494 1f756dfe9401ea267e12e9521effd1b4c15f5136ab0b8bb6d092846f5129a6e0
GET /wp-content/uploads/2017/08/atrio-4.jpg HTTP/1.1
Host: www.palazzomorra.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.palazzomorra.it/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: aruba-proxy
date: Sat, 19 Nov 2022 18:58:14 GMT
content-type: image/jpeg
content-length: 167051
last-modified: Sun, 27 Aug 2017 08:56:44 GMT
accept-ranges: bytes
x-servername: ipvsproxy03.ad.aruba.it
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 472 B |
IP142.250.74.3:0
Hasha00fff9dd1711061b285e2136c973d13 66548ac11fc58024c6994539ab81804add41d2f2 4b87c5468c15817686a8497324c2a06d18fd5574141aa0476bf98aa3b8395a8f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 19 Nov 2022 18:58:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.palazzomorra.it/wp-content/uploads/2017/08/ingresso-1.jpg | 89.46.104.16 | 200 OK | 210 kB |
URL HTTP/2www.palazzomorra.it/wp-content/uploads/2017/08/ingresso-1.jpg IP89.46.104.16:0
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 640x728, components 3\012- data Size210 kB (210190 bytes) Hash5c4a657b8273cce3709fb8d88c0ee094 3ae588ab1753c61347725da5fd0a598e41c3b003 199a6a0baa254862f88ba98993ae81db4c99c995ef2df64cf15db61a90086ac1
GET /wp-content/uploads/2017/08/ingresso-1.jpg HTTP/1.1
Host: www.palazzomorra.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.palazzomorra.it/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: aruba-proxy
date: Sat, 19 Nov 2022 18:58:14 GMT
content-type: image/jpeg
content-length: 210190
last-modified: Sun, 27 Aug 2017 08:56:48 GMT
accept-ranges: bytes
x-servername: ipvsproxy03.ad.aruba.it
X-Firefox-Spdy: h2
|
|
| www.palazzomorra.it/wp-content/uploads/2017/08/IMG_0206-1024x765.jpg | 89.46.104.16 | 200 OK | 116 kB |
URL HTTP/2www.palazzomorra.it/wp-content/uploads/2017/08/IMG_0206-1024x765.jpg IP89.46.104.16:0
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=10, manufacturer=Apple, model=iPhone 4, orientation=upper-left, xresolution=150, yresolution=158, resolutionunit=2, software=4.3.3, datetime=2011:08:09 11:29:52], baseline, precision 8, 1024x765, components 3\012- data Size116 kB (116153 bytes) Hash7d9ec9440a3ac73a98aa3698b16a5e12 c8fe973fa1456532fc933a8d279e3116d988555d 6767d065cc6309bd24d6a01e4dee71e9ef92b8ab1901c63558dabbdb20ae1374
GET /wp-content/uploads/2017/08/IMG_0206-1024x765.jpg HTTP/1.1
Host: www.palazzomorra.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.palazzomorra.it/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: aruba-proxy
date: Sat, 19 Nov 2022 18:58:14 GMT
content-type: image/jpeg
content-length: 116153
last-modified: Mon, 04 Sep 2017 11:40:10 GMT
accept-ranges: bytes
x-servername: ipvsproxy03.ad.aruba.it
X-Firefox-Spdy: h2
|
|
| www.palazzomorra.it/wp-content/uploads/2017/08/IMG_0224.jpg | 89.46.104.16 | 200 OK | 394 kB |
URL HTTP/2www.palazzomorra.it/wp-content/uploads/2017/08/IMG_0224.jpg IP89.46.104.16:0
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 200x200, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=10, manufacturer=Apple, model=iPhone 4, orientation=upper-left, xresolution=150, yresolution=158, resolutionunit=2, software=4.3.3, datetime=2011:08:09 11:34:54], baseline, precision 8, 800x598, components 3\012- data Size394 kB (393836 bytes) Hash6bea0c29c91ad03fbf1f7d2448994efe 289363892be9adffe675293af0f8d4a2b8f23179 6af714bc22d96d0bbe388d87a5f72684ada951530fdc2ed13247191777c842cc
GET /wp-content/uploads/2017/08/IMG_0224.jpg HTTP/1.1
Host: www.palazzomorra.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.palazzomorra.it/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: aruba-proxy
date: Sat, 19 Nov 2022 18:58:14 GMT
content-type: image/jpeg
content-length: 393836
last-modified: Mon, 04 Sep 2017 11:40:15 GMT
accept-ranges: bytes
x-servername: ipvsproxy03.ad.aruba.it
X-Firefox-Spdy: h2
|
|
| www.palazzomorra.it/wp-content/uploads/2017/08/IMG_0250-1024x765.jpg | 89.46.104.16 | 200 OK | 57 kB |
URL HTTP/2www.palazzomorra.it/wp-content/uploads/2017/08/IMG_0250-1024x765.jpg IP89.46.104.16:0
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=10, manufacturer=Apple, model=iPhone 4, orientation=upper-left, xresolution=150, yresolution=158, resolutionunit=2, software=4.3.3, datetime=2011:08:09 11:43:09], baseline, precision 8, 1024x765, components 3\012- data Hash6cb6a0dff2a148b890eedbbdb44aaf3a 11e1c251f51a547965d359bb5ff718bb5d9031d8 eccbfb027e8927aa88f28d1a21cc79c41fe225f93015aadea71c04aae580a8a8
GET /wp-content/uploads/2017/08/IMG_0250-1024x765.jpg HTTP/1.1
Host: www.palazzomorra.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.palazzomorra.it/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: aruba-proxy
date: Sat, 19 Nov 2022 18:58:14 GMT
content-type: image/jpeg
content-length: 56813
last-modified: Mon, 04 Sep 2017 11:39:37 GMT
accept-ranges: bytes
x-servername: ipvsproxy03.ad.aruba.it
X-Firefox-Spdy: h2
|
|
| www.palazzomorra.it/wp-content/uploads/2017/08/IMG_0209-1024x765.jpg | 89.46.104.16 | 200 OK | 70 kB |
URL HTTP/2www.palazzomorra.it/wp-content/uploads/2017/08/IMG_0209-1024x765.jpg IP89.46.104.16:0
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=10, manufacturer=Apple, model=iPhone 4, orientation=upper-left, xresolution=150, yresolution=158, resolutionunit=2, software=4.3.3, datetime=2011:08:09 11:30:32], baseline, precision 8, 1024x765, components 3\012- data Hashb9c51edd03f38b18216486b52311d235 9657de3b44b00b27f281be19f78b63bba9b540d8 b496a0284e6de542b5ab0f2d75addeb00c7c99c295691bf1eaff54712021c8a6
GET /wp-content/uploads/2017/08/IMG_0209-1024x765.jpg HTTP/1.1
Host: www.palazzomorra.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.palazzomorra.it/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: aruba-proxy
date: Sat, 19 Nov 2022 18:58:14 GMT
content-type: image/jpeg
content-length: 69689
last-modified: Mon, 04 Sep 2017 11:40:14 GMT
accept-ranges: bytes
x-servername: ipvsproxy03.ad.aruba.it
X-Firefox-Spdy: h2
|
|
| www.palazzomorra.it/wp-content/uploads/2017/08/cropped-stemma-morra.gif | 89.46.104.16 | 200 OK | 130 kB |
URL HTTP/2www.palazzomorra.it/wp-content/uploads/2017/08/cropped-stemma-morra.gif IP89.46.104.16:0
File typeGIF image data, version 89a, 512 x 512\012- data Size130 kB (130072 bytes) Hashe05faf43fd168e1929967ffb942444a9 2339fa58509cd6c4b8af28564ea201cb05728864 d9362f95a9e3037e1bc6c01ca0f5d39e386a01824f8cefe3b8c9dd2356da9a57
GET /wp-content/uploads/2017/08/cropped-stemma-morra.gif HTTP/1.1
Host: www.palazzomorra.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.palazzomorra.it/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: aruba-proxy
date: Sat, 19 Nov 2022 18:58:14 GMT
content-type: image/gif
content-length: 130072
last-modified: Sun, 27 Aug 2017 08:56:45 GMT
accept-ranges: bytes
x-servername: ipvsproxy03.ad.aruba.it
X-Firefox-Spdy: h2
|
|
| www.palazzomorra.it/wp-content/uploads/2017/08/IMG_0241-1024x765.jpg | 89.46.104.16 | 200 OK | 91 kB |
URL HTTP/2www.palazzomorra.it/wp-content/uploads/2017/08/IMG_0241-1024x765.jpg IP89.46.104.16:0
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=10, manufacturer=Apple, model=iPhone 4, orientation=upper-left, xresolution=150, yresolution=158, resolutionunit=2, software=4.3.3, datetime=2011:08:09 11:41:18], baseline, precision 8, 1024x765, components 3\012- data Hashda6bf2acb62c648f10389a1eaf527ccd fe31e258a4f472ecb6d53ea3cd0449b29915790c 3b49170286a36569b3f6feeca86dfdc04eb53a432279f94c819c91953de10a26
GET /wp-content/uploads/2017/08/IMG_0241-1024x765.jpg HTTP/1.1
Host: www.palazzomorra.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.palazzomorra.it/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: aruba-proxy
date: Sat, 19 Nov 2022 18:58:14 GMT
content-type: image/jpeg
content-length: 91247
last-modified: Mon, 04 Sep 2017 11:39:33 GMT
accept-ranges: bytes
x-servername: ipvsproxy03.ad.aruba.it
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 472 B |
IP142.250.74.3:0
Hashc58de690a701dea26333a42815dc3003 91d9e60c285f6578b5d814901a90f52cafbb8790 179d035993138ec5fdb0b2bf1987888f751903e959af09e335ada210be842ca6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 19 Nov 2022 18:58:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.palazzomorra.it/wp-content/uploads/2017/08/pianta.jpg | 89.46.104.16 | 200 OK | 2.4 MB |
URL HTTP/2www.palazzomorra.it/wp-content/uploads/2017/08/pianta.jpg IP89.46.104.16:0
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=7, xresolution=98, yresolution=106, resolutionunit=2], baseline, precision 8, 800x502, components 4\012- data Size2.4 MB (2370092 bytes) Hash424c90f00c34f290c04215c00863ba6b 03af3bd90fe1a2c07eac821bea64e0687aefb6b8 7dc11c03139deb7ea3511146b3f98e565b17794506dea8f32ad1edf1b8893ae3
GET /wp-content/uploads/2017/08/pianta.jpg HTTP/1.1
Host: www.palazzomorra.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.palazzomorra.it/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: aruba-proxy
date: Sat, 19 Nov 2022 18:58:14 GMT
content-type: image/jpeg
content-length: 2370092
last-modified: Mon, 04 Sep 2017 11:40:49 GMT
accept-ranges: bytes
x-servername: ipvsproxy03.ad.aruba.it
X-Firefox-Spdy: h2
|
|
| www.palazzomorra.it/wp-includes/js/jquery/jquery.min.js?ver=3.6.1 | 89.46.104.16 | 200 OK | 70 kB |
URL HTTP/2www.palazzomorra.it/wp-includes/js/jquery/jquery.min.js?ver=3.6.1 IP89.46.104.16:0
Hasha65cff2ea1aa64e0abf9f883cb23fc55 51f2a64cb8bb357906247dc61a05fbf22dbcbd90 8d2a24ce3030b0c04664c5dcd9b07bbb2584786e18a3453b8ddeaf3d7f0febf6
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.1 HTTP/1.1
Host: www.palazzomorra.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.palazzomorra.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: aruba-proxy
date: Sat, 19 Nov 2022 18:58:14 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Wed, 02 Nov 2022 10:26:18 GMT
x-servername: ipvsproxy03.ad.aruba.it
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.palazzomorra.it/wp-content/uploads/dynamic_avia/avia-merged-styles-cb946d3cfa0c38589103080ee5b6d360---60bb6d43e44d7.css | 89.46.104.16 | 200 OK | 766 kB |
URL HTTP/2www.palazzomorra.it/wp-content/uploads/dynamic_avia/avia-merged-styles-cb946d3cfa0c38589103080ee5b6d360---60bb6d43e44d7.css IP89.46.104.16:0
Size766 kB (765682 bytes) Hash3553371db78d2b7c08bfbdbb762b712d 9718fe724ae5c471904fa97026adb3d76c87fbf6 6f4d53f10799363bbdd2e2e7334ae0b43ab35661bef29b5a906b85635bc92b53
GET /wp-content/uploads/dynamic_avia/avia-merged-styles-cb946d3cfa0c38589103080ee5b6d360---60bb6d43e44d7.css HTTP/1.1
Host: www.palazzomorra.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.palazzomorra.it/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: aruba-proxy
date: Sat, 19 Nov 2022 18:58:14 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Sat, 05 Jun 2021 12:25:39 GMT
x-servername: ipvsproxy03.ad.aruba.it
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.palazzomorra.it/wp-content/uploads/2017/10/whatsapp-150x150.png | 89.46.104.16 | 200 OK | 9.3 kB |
URL HTTP/2www.palazzomorra.it/wp-content/uploads/2017/10/whatsapp-150x150.png IP89.46.104.16:0
File typePNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced\012- data Hash16f7566eb9dbebbba8963a8999329a54 f941f8eaaaefa8ee53157fb9d11cd898cfd9bb18 f7791a1a304d645719d74d29b1cf1a9a3446eecfad1b1b41cee623bdbda19224
GET /wp-content/uploads/2017/10/whatsapp-150x150.png HTTP/1.1
Host: www.palazzomorra.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.palazzomorra.it/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: aruba-proxy
date: Sat, 19 Nov 2022 18:58:15 GMT
content-type: image/png
content-length: 9276
last-modified: Tue, 10 Oct 2017 12:21:21 GMT
accept-ranges: bytes
x-servername: ipvsproxy03.ad.aruba.it
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 | 216.58.207.195 | 200 OK | 31 kB |
URL HTTP/2fonts.gstatic.com/s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 IP216.58.207.195:0
File typeWeb Open Font Format (Version 2), TrueType, length 30928, version 1.0\012- data Hashac0d2859ea5f8fd6bcb3c305c08ec184 7f6c17e3e592cd8bd346b9cc261d8dd961b8aef7 ae919a7c9f25f0fd97fc18e398ae8e453fcaae487e4a4cb4f896e7fecde4a780
GET /s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.palazzomorra.it
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 30928
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 17 Nov 2022 16:40:18 GMT
expires: Fri, 17 Nov 2023 16:40:18 GMT
cache-control: public, max-age=31536000
age: 181077
last-modified: Mon, 11 Jul 2022 18:57:39 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/allerta/v18/TwMO-IAHRlkbx940YnYXSA.woff2 | 216.58.207.195 | 200 OK | 7.8 kB |
URL HTTP/2fonts.gstatic.com/s/allerta/v18/TwMO-IAHRlkbx940YnYXSA.woff2 IP216.58.207.195:0
File typeWeb Open Font Format (Version 2), TrueType, length 7824, version 1.0\012- data Hash0cd3b03c066851fd03e8e51a0bb713cd ab90570fbff72d7d5070ef9629da2e31b506575a ef4a4798ee810a9641529acd802d9b08b48623504b15d10fba88fc42dcb2d9f6
GET /s/allerta/v18/TwMO-IAHRlkbx940YnYXSA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.palazzomorra.it
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7824
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 17 Nov 2022 21:42:05 GMT
expires: Fri, 17 Nov 2023 21:42:05 GMT
cache-control: public, max-age=31536000
age: 162970
last-modified: Tue, 19 Apr 2022 18:20:16 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| www.palazzomorra.it/wp-content/plugins/wp-whatsapp-chat-pro/assets/js/jquery.cookie.js?ver=6.1.1 | 89.46.104.16 | 200 OK | 1.9 kB |
URL HTTP/2www.palazzomorra.it/wp-content/plugins/wp-whatsapp-chat-pro/assets/js/jquery.cookie.js?ver=6.1.1 IP89.46.104.16:0
Hashdda7972bc58e7f464d5303992670f73b 0294828ba7139628f761cc256b4c01abf7e09384 70e0a7a9c74dc2461c9f84eda6a74fc5de13b1cd3a14e5e35cf68ca7e9793b88
GET /wp-content/plugins/wp-whatsapp-chat-pro/assets/js/jquery.cookie.js?ver=6.1.1 HTTP/1.1
Host: www.palazzomorra.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.palazzomorra.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: aruba-proxy
date: Sat, 19 Nov 2022 18:58:14 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Wed, 06 Oct 2021 07:39:30 GMT
x-servername: ipvsproxy03.ad.aruba.it
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.palazzomorra.it/wp-content/uploads/2017/08/cropped-cropped-stemma-morra-32x32.gif | 89.46.104.16 | 200 OK | 1.6 kB |
URL HTTP/2www.palazzomorra.it/wp-content/uploads/2017/08/cropped-cropped-stemma-morra-32x32.gif IP89.46.104.16:0
File typeGIF image data, version 89a, 32 x 32\012- data Hash7a5edbc04bb6205c81cb2ff405a98b40 53dad7079b2df75768bebd3beb81d2bf25e2befd b83c4d50b90592bd93f8da8f103cf62e62cce01de6d48d35f7a15c8e1c61c655
GET /wp-content/uploads/2017/08/cropped-cropped-stemma-morra-32x32.gif HTTP/1.1
Host: www.palazzomorra.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.palazzomorra.it/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: aruba-proxy
date: Sat, 19 Nov 2022 18:58:15 GMT
content-type: image/gif
content-length: 1566
last-modified: Sun, 27 Aug 2017 09:00:15 GMT
accept-ranges: bytes
x-servername: ipvsproxy03.ad.aruba.it
X-Firefox-Spdy: h2
|
|
| www.palazzomorra.it/wp-content/uploads/2017/08/cropped-cropped-stemma-morra-192x192.gif | 89.46.104.16 | 200 OK | 22 kB |
URL HTTP/2www.palazzomorra.it/wp-content/uploads/2017/08/cropped-cropped-stemma-morra-192x192.gif IP89.46.104.16:0
File typeGIF image data, version 89a, 192 x 192\012- data Hasha468c6e56262edfce42273a7baed8299 ba6d852e168813a4ed6f46a2a73293732ba89dd9 3048ef597399a95769b974afccc60bd9567fd5bd626f01af3822987d532b854d
GET /wp-content/uploads/2017/08/cropped-cropped-stemma-morra-192x192.gif HTTP/1.1
Host: www.palazzomorra.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.palazzomorra.it/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: aruba-proxy
date: Sat, 19 Nov 2022 18:58:15 GMT
content-type: image/gif
content-length: 22233
last-modified: Sun, 27 Aug 2017 09:00:15 GMT
accept-ranges: bytes
x-servername: ipvsproxy03.ad.aruba.it
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Montserrat:100,200,300,regular,500,600,700,800,900%7CPlayfair+Display:regular,italic,700,900&subset=latin%2Clatin-ext | 142.250.74.10 | 200 OK | 922 B |
URL HTTP/2fonts.googleapis.com/css?family=Montserrat:100,200,300,regular,500,600,700,800,900%7CPlayfair+Display:regular,italic,700,900&subset=latin%2Clatin-ext IP142.250.74.10:0
Hash0a03cf4309b3ca315f16835bab917cfd bc7be7be07cb724f74f48392ccef59f5526c64e2 79be1922386cd6c43d714df92427881b3162fae9a370f8a33ec49db605bdc2cc
GET /css?family=Montserrat:100,200,300,regular,500,600,700,800,900%7CPlayfair+Display:regular,italic,700,900&subset=latin%2Clatin-ext HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.palazzomorra.it/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 19 Nov 2022 18:58:14 GMT
date: Sat, 19 Nov 2022 18:58:14 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| www.palazzomorra.it/wp-content/themes/enfold/config-layerslider/LayerSlider/assets/static/layerslider/img/icon-muted-white.png | 89.46.104.16 | 200 OK | 4.0 kB |
URL HTTP/2www.palazzomorra.it/wp-content/themes/enfold/config-layerslider/LayerSlider/assets/static/layerslider/img/icon-muted-white.png IP89.46.104.16:0
File typePNG image data, 758 x 632, 8-bit colormap, non-interlaced\012- data Hashe1c9708a2cd32a831b692facea56d95e 8d0bd56c20fad17d3c966d0170c46511f55a03fe c2fcb192d0b85ddff74aa60a001e7b3360bafe23b627ee02320e3fe7ad73cda2
GET /wp-content/themes/enfold/config-layerslider/LayerSlider/assets/static/layerslider/img/icon-muted-white.png HTTP/1.1
Host: www.palazzomorra.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.palazzomorra.it/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: aruba-proxy
date: Sat, 19 Nov 2022 18:58:15 GMT
content-type: image/png
content-length: 4008
last-modified: Sat, 05 Jun 2021 08:49:33 GMT
accept-ranges: bytes
x-servername: ipvsproxy03.ad.aruba.it
X-Firefox-Spdy: h2
|
|
| www.palazzomorra.it/wp-content/themes/enfold/config-layerslider/LayerSlider/assets/static/layerslider/img/icon-unmuted-white.png | 89.46.104.16 | 200 OK | 8.8 kB |
URL HTTP/2www.palazzomorra.it/wp-content/themes/enfold/config-layerslider/LayerSlider/assets/static/layerslider/img/icon-unmuted-white.png IP89.46.104.16:0
File typePNG image data, 758 x 632, 8-bit colormap, non-interlaced\012- data Hash9c0ce282d49cb9305b5e411b9f6a8cc3 26965c7ddc1977fdeefefa79e58d7581c0f7f3f8 f1d43391b58fc3d272ccb086f29ad4d3ccf234b62ef03b365138749d72955468
GET /wp-content/themes/enfold/config-layerslider/LayerSlider/assets/static/layerslider/img/icon-unmuted-white.png HTTP/1.1
Host: www.palazzomorra.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.palazzomorra.it/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: aruba-proxy
date: Sat, 19 Nov 2022 18:58:15 GMT
content-type: image/png
content-length: 8784
last-modified: Sat, 05 Jun 2021 08:49:33 GMT
accept-ranges: bytes
x-servername: ipvsproxy03.ad.aruba.it
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashf7c5da16d7c4384a4c2454d6b0d84710 69fd80fdf2f1ce27b25617589c867cd1c6e5d2ab a80d1b813523e44d2e59d7c2edd6919c0354873637bb15bccc88f66f5c24e05d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A80D1B813523E44D2E59D7C2EDD6919C0354873637BB15BCCC88F66F5C24E05D"
Last-Modified: Thu, 17 Nov 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13365
Expires: Sat, 19 Nov 2022 22:41:00 GMT
Date: Sat, 19 Nov 2022 18:58:15 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashf7c5da16d7c4384a4c2454d6b0d84710 69fd80fdf2f1ce27b25617589c867cd1c6e5d2ab a80d1b813523e44d2e59d7c2edd6919c0354873637bb15bccc88f66f5c24e05d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A80D1B813523E44D2E59D7C2EDD6919C0354873637BB15BCCC88F66F5C24E05D"
Last-Modified: Thu, 17 Nov 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13365
Expires: Sat, 19 Nov 2022 22:41:00 GMT
Date: Sat, 19 Nov 2022 18:58:15 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashf7c5da16d7c4384a4c2454d6b0d84710 69fd80fdf2f1ce27b25617589c867cd1c6e5d2ab a80d1b813523e44d2e59d7c2edd6919c0354873637bb15bccc88f66f5c24e05d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A80D1B813523E44D2E59D7C2EDD6919C0354873637BB15BCCC88F66F5C24E05D"
Last-Modified: Thu, 17 Nov 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13365
Expires: Sat, 19 Nov 2022 22:41:00 GMT
Date: Sat, 19 Nov 2022 18:58:15 GMT
Connection: keep-alive
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0a474c96-6cd7-4e42-a54a-02217768182e.jpeg | 34.120.237.76 | 200 OK | 8.1 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0a474c96-6cd7-4e42-a54a-02217768182e.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashc8f6118fc03f31862ff68fef8a2b9a7f 318c5d7acd0d36c816b09fcf1b7dc4bfb5ec7e73 cdd4d44f05cc524d7f2b1d6d792ecd8a9a933e52ecb7685a7d7ea786a510ef39
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0a474c96-6cd7-4e42-a54a-02217768182e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8089
x-amzn-requestid: f3c55266-9b03-4b7f-b076-fdf56704318e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b0QQyECioAMFzdQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6377fa6b-3e10cef6117a10a4115cfce7;Sampled=0
x-amzn-remapped-date: Fri, 18 Nov 2022 21:34:35 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: l3euSue3hLTcBU1OSLRCDuBDeXXM2mAIz0LhADeJV-30r-dW_TFV0w==
via: 1.1 010c0731b9775a983eceaec0f5fa6a2e.cloudfront.net (CloudFront), 1.1 0d4ebcaa87ba94709def0eaac9371e5a.cloudfront.net (CloudFront), 1.1 google
date: Fri, 18 Nov 2022 21:48:36 GMT
etag: "318c5d7acd0d36c816b09fcf1b7dc4bfb5ec7e73"
content-type: image/jpeg
age: 76179
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3007b4f3-f5db-4eb7-b71a-f9f854ae287e.jpeg | 34.120.237.76 | 200 OK | 7.6 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3007b4f3-f5db-4eb7-b71a-f9f854ae287e.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashb2b393e36ee2c9649d90db136aa49542 e88c5832ff0c49bab181d948c3a510d88343bb6f 8b524701df43bff56ac52a021ff0fbd964e06f00e84b4861aa557ec6ae6b4ffd
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3007b4f3-f5db-4eb7-b71a-f9f854ae287e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7631
x-amzn-requestid: b47e545d-1fb6-4a62-ab45-28cdb9d3f0b6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bw-vQE0XoAMFS3w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6376ab2e-56365eed3d4c082c53b172b3;Sampled=0
x-amzn-remapped-date: Thu, 17 Nov 2022 21:44:14 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: WpaBFpaCu0GBiHiiQzCCsyXrA7uzesHS92c_PsgxROxPkqjZ8RyI6Q==
via: 1.1 446313511980eb02f28ff5a9a4147c0a.cloudfront.net (CloudFront), 1.1 ce71f64ad5dca81beca846466f2d5008.cloudfront.net (CloudFront), 1.1 google
date: Fri, 18 Nov 2022 22:35:17 GMT
age: 73378
etag: "e88c5832ff0c49bab181d948c3a510d88343bb6f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F680965e1-a075-4bd9-8788-73e1a3c92de2.jpeg | 34.120.237.76 | 200 OK | 3.8 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F680965e1-a075-4bd9-8788-73e1a3c92de2.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash2e9f6e24e829065d4f201b4c9d9c8fd1 317ec439968641329b83210f7fcab59023310077 d1d304d12f3e1c2ad9cf9279bbb7cab4a954942ab86f41d5333e030cdc7a55c8
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F680965e1-a075-4bd9-8788-73e1a3c92de2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3842
x-amzn-requestid: 8effd7ec-299f-471f-8746-3cb81d94998b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: boYBREE6oAMFmfQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63733a07-46160f6159dfb4a729e5d688;Sampled=0
x-amzn-remapped-date: Tue, 15 Nov 2022 07:04:39 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 37fj6lqvqFTCEPkclxpI6OuYvlIB57GI2bS4wySNP3X4eQ3Lwy3WQA==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 73cb83fe6699afc2791b5c690c1ff8c6.cloudfront.net (CloudFront), 1.1 google
date: Sat, 19 Nov 2022 14:29:27 GMT
age: 16128
etag: "317ec439968641329b83210f7fcab59023310077"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F47c537d4-e03f-4ec6-8922-6dce72c72ab9.jpeg | 34.120.237.76 | 200 OK | 4.9 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F47c537d4-e03f-4ec6-8922-6dce72c72ab9.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash459df915ce91b32b2dcc4850516d68a0 d7a5473d367e7965a4af55acbf4675ed7088fab2 a03e26ebee79ad9b9dda1bf680e0d2467ae6d5e582589ada9fe6ddfa437c483c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F47c537d4-e03f-4ec6-8922-6dce72c72ab9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4851
x-amzn-requestid: 8c868655-d0eb-428d-9fc0-a7449f770bd4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: brtDFF9HoAMFV9w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63748ee0-4f7daf8f7451dc5e0840f620;Sampled=0
x-amzn-remapped-date: Wed, 16 Nov 2022 07:18:56 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: xirMw5z5GPbmx9Sii_I4iNeh1GS5k9lGmaaJvUGAPWoVyP0Tldhf1w==
via: 1.1 e9ba0a9a729ff2960a04323bf1833df8.cloudfront.net (CloudFront), 1.1 1508efc4152aa1778ed4adecb328b374.cloudfront.net (CloudFront), 1.1 google
date: Sat, 19 Nov 2022 03:31:06 GMT
age: 55629
etag: "d7a5473d367e7965a4af55acbf4675ed7088fab2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feb1ea6fe-f968-42eb-9bb6-5965ae4e6ce6.jpeg | 34.120.237.76 | 200 OK | 7.0 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feb1ea6fe-f968-42eb-9bb6-5965ae4e6ce6.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashe5fb6d72b647aabea33ab4017f4a0847 ed93ac946111340a254b92f8ce27e8be93ae87e8 0782ed4ffaea8f9487461d5a9b0c241d30dfe057676753b24e180d0a94efad99
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feb1ea6fe-f968-42eb-9bb6-5965ae4e6ce6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7045
x-amzn-requestid: e8dace8b-0cc8-4ea0-b47a-e42a66576f72
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bw-K3EuCIAMFsmQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6376aa45-71c191e462be52006858817b;Sampled=0
x-amzn-remapped-date: Thu, 17 Nov 2022 21:40:21 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: S0Sq8vuP-MbcuYVx_WFXTkmrY966mBTY1Qpowx_E_to1tDk1b8R-Bw==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 68fadeb91f97256bb67b03bfca74d830.cloudfront.net (CloudFront), 1.1 google
date: Fri, 18 Nov 2022 21:49:21 GMT
age: 76134
etag: "ed93ac946111340a254b92f8ce27e8be93ae87e8"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc0d2467c-b158-442b-92be-e4cb236d17fa.jpeg | 34.120.237.76 | 200 OK | 3.0 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc0d2467c-b158-442b-92be-e4cb236d17fa.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashd6b026c34985bbf2ebf89a62d0724c66 72369ebeccf447fa91ef77711d6297063c99777e e5598ada634274ab9995dedda8c1fd18344abcfdd49b3a1aaede0a86fafc0f40
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc0d2467c-b158-442b-92be-e4cb236d17fa.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3035
x-amzn-requestid: 3e3f3a7f-9a1d-4b37-b932-22c6e3e638f1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b0QRcFOuoAMF_fQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6377fa6f-09dc20ea5620dd167e3f7265;Sampled=0
x-amzn-remapped-date: Fri, 18 Nov 2022 21:34:39 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: pLsLyVnqWVp3c5Z5IavS9Xumx3cYUsungYuOLojzKNtOoRQx7-rEOQ==
via: 1.1 8dbfaf7df256a75768461d934659b6b2.cloudfront.net (CloudFront), 1.1 73cb83fe6699afc2791b5c690c1ff8c6.cloudfront.net (CloudFront), 1.1 google
date: Fri, 18 Nov 2022 21:48:36 GMT
etag: "72369ebeccf447fa91ef77711d6297063c99777e"
content-type: image/jpeg
age: 76179
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| www.youtube.com/s/player/041a7965/www-widgetapi.vflset/www-widgetapi.js | 216.58.207.238 | 200 OK | 54 kB |
URL HTTP/2www.youtube.com/s/player/041a7965/www-widgetapi.vflset/www-widgetapi.js IP216.58.207.238:0
File typeASCII text, with very long lines (817) Hash6e5f2bb38975e87f0fe0c4e6a2381f93 5d494f56e7d5a91414c7131317ed52668427b39d 3d3f13a7d190b56aa7c3afdbd6246cd493ae54ce78ba0aa79d4ce2e7312b30e0
GET /s/player/041a7965/www-widgetapi.vflset/www-widgetapi.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.palazzomorra.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding, Origin
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 53956
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 19 Nov 2022 06:29:31 GMT
expires: Sun, 19 Nov 2023 06:29:31 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 17 Nov 2022 01:17:30 GMT
content-type: text/javascript
age: 44924
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| img.youtube.com/vi/P2WBmrh_VCY/mqdefault.jpg | 216.58.207.238 | 200 OK | 19 kB |
URL HTTP/2img.youtube.com/vi/P2WBmrh_VCY/mqdefault.jpg IP216.58.207.238:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x180, components 3\012- data Hash8d5c96b20a488c308f4dfa1190e2cebf 40d10bd06a6ac80e20da0b915d2144559c83f381 c19efd178437f2b3d1dc73c954f1ff8c52a74c46decbd307b7685f4348a63b79
GET /vi/P2WBmrh_VCY/mqdefault.jpg HTTP/1.1
Host: img.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.palazzomorra.it/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/jpeg
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
timing-allow-origin: *
content-length: 18565
date: Sat, 19 Nov 2022 18:58:15 GMT
expires: Sat, 19 Nov 2022 20:58:15 GMT
cache-control: public, max-age=7200
etag: "1491154226"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| img.youtube.com/vi/P2WBmrh_VCY/sddefault.jpg | 216.58.207.238 | 200 OK | 81 kB |
URL HTTP/2img.youtube.com/vi/P2WBmrh_VCY/sddefault.jpg IP216.58.207.238:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 640x480, components 3\012- data Hash15ad42c736908464afd3bebf18fd155f 140860ba6594ef68454dc9434f57c73e562a89ba 4322b29f00dd8b6586ddd87fce2e301660469730eebf627ac5a114f44f572efe
GET /vi/P2WBmrh_VCY/sddefault.jpg HTTP/1.1
Host: img.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.palazzomorra.it/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
timing-allow-origin: *
content-length: 80916
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 19 Nov 2022 18:58:15 GMT
expires: Sat, 19 Nov 2022 20:58:15 GMT
cache-control: public, max-age=7200
etag: "1491154226"
content-type: image/jpeg
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| img.youtube.com/vi/P2WBmrh_VCY/default.jpg | 216.58.207.238 | 200 OK | 3.6 kB |
URL HTTP/2img.youtube.com/vi/P2WBmrh_VCY/default.jpg IP216.58.207.238:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 120x90, components 3\012- data Hashdb9bf9c241d0df1c5170950ba800841f 0271aa2a38e1f7900152a2552edac15ac0d6740c d298584afb778907b532ba3dc25d82723c9f3134e244953b4f8c774855611158
GET /vi/P2WBmrh_VCY/default.jpg HTTP/1.1
Host: img.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.palazzomorra.it/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/jpeg
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
timing-allow-origin: *
content-length: 3581
date: Sat, 19 Nov 2022 18:58:15 GMT
expires: Sat, 19 Nov 2022 20:58:15 GMT
cache-control: public, max-age=7200
etag: "1491154226"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| img.youtube.com/vi/P2WBmrh_VCY/maxresdefault.jpg | 216.58.207.238 | 200 OK | 259 kB |
URL HTTP/2img.youtube.com/vi/P2WBmrh_VCY/maxresdefault.jpg IP216.58.207.238:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x720, components 3\012- data Size259 kB (259404 bytes) Hasha3b9471505ff131ac22d56635d67c3ed 3b743a3e51be8ee9f2df785933ceaa54491b78f5 b05e4d21ee6e26c5e25f052577f3886f8db457bf8838ad4da12168933f56f483
GET /vi/P2WBmrh_VCY/maxresdefault.jpg HTTP/1.1
Host: img.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.palazzomorra.it/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/jpeg
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
timing-allow-origin: *
content-length: 259404
date: Sat, 19 Nov 2022 18:58:15 GMT
expires: Sat, 19 Nov 2022 20:58:15 GMT
cache-control: public, max-age=7200
etag: "1491154226"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| img.youtube.com/vi/P2WBmrh_VCY/hqdefault.jpg | 216.58.207.238 | 200 OK | 78 kB |
URL HTTP/2img.youtube.com/vi/P2WBmrh_VCY/hqdefault.jpg IP216.58.207.238:0
Hashcd652be12a40699a0e553b544d617662 d04683ad52c837ae82646b46b7b1fe7a049db134 a7020ea6d4322656e7e855bac9209c10bba0fb995c1b9f45e0491bbf0edea46f
GET /vi/P2WBmrh_VCY/hqdefault.jpg HTTP/1.1
Host: img.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.palazzomorra.it/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/jpeg
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
timing-allow-origin: *
content-length: 45825
date: Sat, 19 Nov 2022 18:58:15 GMT
expires: Sat, 19 Nov 2022 20:58:15 GMT
cache-control: public, max-age=7200
etag: "1491154226"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 | 216.58.207.195 | 200 OK | 15 kB |
URL HTTP/2fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 IP216.58.207.195:0
File typeWeb Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data Hash5d4aeb4e5f5ef754e307d7ffaef688bd 06db651cdf354c64a7383ea9c77024ef4fb4cef8 3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 19 Nov 2022 12:31:58 GMT
expires: Sun, 19 Nov 2023 12:31:58 GMT
cache-control: public, max-age=31536000
age: 23178
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 | 216.58.207.195 | 200 OK | 16 kB |
URL HTTP/2fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 IP216.58.207.195:0
File typeWeb Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data Hash285467176f7fe6bb6a9c6873b3dad2cc ea04e4ff5142ddd69307c183def721a160e0a64e 5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 17 Nov 2022 21:46:16 GMT
expires: Fri, 17 Nov 2023 21:46:16 GMT
cache-control: public, max-age=31536000
age: 162720
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 472 B |
IP142.250.74.3:0
Hashda2d83e904cd35e185b36b715ab785df 258667d57898e4559332a419918f9e8f1e5cd39c 2a11aab970c28cba544f5e4c734b94d8c25dd6f435affc4f28d35e4bdd114e86
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 19 Nov 2022 18:58:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 472 B |
IP142.250.74.3:0
Hash53d56fb68da96a50df543c9c9fb58f52 d802493bcf8c683b1ac73b035c51cd02b907a251 68b4e1c61fb6285a348937a2f6f81000f7979d90dd2882d5933fc4e64af68158
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 19 Nov 2022 18:58:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| static.doubleclick.net/instream/ad_status.js | 142.250.74.166 | 200 OK | 29 B |
URL HTTP/2static.doubleclick.net/instream/ad_status.js IP142.250.74.166:0
Hash1fa71744db23d0f8df9cce6719defcb7 e4be9b7136697942a036f97cf26ebaf703ad2067 eed0dc1fdb5d97ed188ae16fd5e1024a5bb744af47340346be2146300a6c54b9
GET /instream/ad_status.js HTTP/1.1
Host: static.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-doubleclick-media"
report-to: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]}
timing-allow-origin: *
content-length: 29
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 19 Nov 2022 18:44:05 GMT
expires: Sat, 19 Nov 2022 18:59:05 GMT
cache-control: public, max-age=900
age: 851
last-modified: Thu, 12 Dec 2013 23:40:16 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| googleads.g.doubleclick.net/pagead/id | 172.217.21.162 | 302 Found | 0 B |
URL HTTP/2googleads.g.doubleclick.net/pagead/id IP172.217.21.162:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pagead/id HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
location: https://googleads.g.doubleclick.net/pagead/id?slf_rd=1
access-control-allow-credentials: true
access-control-allow-origin: https://www.youtube.com
date: Sat, 19 Nov 2022 18:58:16 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 472 B |
IP142.250.74.3:0
Hashda2d83e904cd35e185b36b715ab785df 258667d57898e4559332a419918f9e8f1e5cd39c 2a11aab970c28cba544f5e4c734b94d8c25dd6f435affc4f28d35e4bdd114e86
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 19 Nov 2022 18:58:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create | 142.250.74.74 | 200 OK | 0 B |
URL HTTP/2jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create IP142.250.74.74:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Sat, 19 Nov 2022 18:58:16 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 472 B |
IP142.250.74.3:0
Hash53d56fb68da96a50df543c9c9fb58f52 d802493bcf8c683b1ac73b035c51cd02b907a251 68b4e1c61fb6285a348937a2f6f81000f7979d90dd2882d5933fc4e64af68158
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 19 Nov 2022 18:58:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create | 142.250.74.74 | 200 OK | 31 kB |
URL HTTP/2jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create IP142.250.74.74:0
File typeJSON data\012- , ASCII text, with very long lines (65536), with no line terminators Hash04d72467302a068ee8cc679dde9d069b 91682e1ec69077ffb6a04c5f0dc7b2119478a845 02e27069ddb84b54c320b43fe5e6e862e9b102dc591adab81ee4e697c5a0c33b
POST /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 24
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Sat, 19 Nov 2022 18:58:16 GMT
server: ESF
cache-control: private
content-length: 30911
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 472 B |
IP142.250.74.3:0
Hash5e884c53db72411f06e2209d005f7586 6e1049a7fc26d6a3259a97bfca9dc6ba7b0dd5af 2965603dd297987ffa36ffd33c133f2c6a67fa6df1551554160b65ce804b0198
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 19 Nov 2022 18:58:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.google.com/js/th/_mW_2QmsfiHfHQzuwJJjeV3lvrJQS7bChqYqZLie29Q.js | 142.250.74.164 | 200 OK | 14 kB |
URL HTTP/2www.google.com/js/th/_mW_2QmsfiHfHQzuwJJjeV3lvrJQS7bChqYqZLie29Q.js IP142.250.74.164:0
File typeASCII text, with very long lines (36106) Hash7fc7e22ecccb0cfd0ae897bb40a58efe 5d46470a711120793c362235105836fe49e699a4 1907005cab41fbd6d1d67df3b25586f3232e053a261c9e2b2503459f4980b1c5
GET /js/th/_mW_2QmsfiHfHQzuwJJjeV3lvrJQS7bChqYqZLie29Q.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="botguard-scs"
report-to: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]}
content-length: 14302
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 13 Nov 2022 10:09:03 GMT
expires: Mon, 13 Nov 2023 10:09:03 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 03 Nov 2022 10:00:00 GMT
content-type: text/javascript
age: 550153
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 471 B |
IP142.250.74.3:0
Hashd84b243e44a7b2208f595604ed8d9971 4f354f1ceede56972f2a2411a985ba877d0fca10 85799b4fe640f7a04b3dd08f775042b6b8dcfd38c45a9e6960f0910cf0bec6ae
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 19 Nov 2022 18:58:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| i.ytimg.com/vi_webp/P2WBmrh_VCY/maxresdefault.webp | 172.217.21.182 | 200 OK | 276 kB |
URL HTTP/2i.ytimg.com/vi_webp/P2WBmrh_VCY/maxresdefault.webp IP172.217.21.182:0
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 1280x720, Scaling: [none]x[none], YUV color, decoders should clamp\012- data Size276 kB (276258 bytes) Hash707bbfa69f524609102725fe5eb92306 fd8652fbf49b83990d80b26c2cc89f9adca8c454 959e16e8801e8c1b18bbc463788cb5bb8bc4d4bc67fa65d2bc26df7d0c7cf15c
GET /vi_webp/P2WBmrh_VCY/maxresdefault.webp HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/webp
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 276258
date: Sat, 19 Nov 2022 18:58:16 GMT
expires: Sat, 19 Nov 2022 20:58:16 GMT
cache-control: public, max-age=7200
etag: "1491154226"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 471 B |
IP142.250.74.3:0
Hashd84b243e44a7b2208f595604ed8d9971 4f354f1ceede56972f2a2411a985ba877d0fca10 85799b4fe640f7a04b3dd08f775042b6b8dcfd38c45a9e6960f0910cf0bec6ae
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 19 Nov 2022 18:58:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 472 B |
IP142.250.74.3:0
Hash59277a4dca16f49864f375aed6f1dac7 7002f5a369d26c4958d927858157c76c27a3b80f 812626c4c69994fa1e7474408de2a88bf558ed8a9eccd580b12acacbbb4ce418
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 19 Nov 2022 18:58:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| yt3.ggpht.com/ytc/AMLnZu-kM50xlS8jGNpVohHP-vZ_9krmQzyAoPIBnXrzMw=s68-c-k-c0x00ffffff-no-rj | 142.250.74.161 | 200 OK | 1.9 kB |
URL HTTP/2yt3.ggpht.com/ytc/AMLnZu-kM50xlS8jGNpVohHP-vZ_9krmQzyAoPIBnXrzMw=s68-c-k-c0x00ffffff-no-rj IP142.250.74.161:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 68x68, components 3\012- data Hasha61dfd492d7b68f997ece806a46652cd b4f10dca7b398d55443c9cbbd41bdf759f102f3a 3fe74f2329ae8381d3453cd068854902d6a16debfe5b9ab99ca1b12b383ec8b1
GET /ytc/AMLnZu-kM50xlS8jGNpVohHP-vZ_9krmQzyAoPIBnXrzMw=s68-c-k-c0x00ffffff-no-rj HTTP/1.1
Host: yt3.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="unnamed.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 1863
x-xss-protection: 0
date: Sat, 19 Nov 2022 15:06:10 GMT
expires: Sat, 12 Nov 2022 17:40:08 GMT
cache-control: public, max-age=86400, no-transform
age: 13927
etag: "vfa"
content-type: image/jpeg
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT | 142.250.74.74 | 200 OK | 0 B |
URL HTTP/2jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT IP142.250.74.74:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Sat, 19 Nov 2022 18:58:17 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT | 142.250.74.74 | 200 OK | 114 B |
URL HTTP/2jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT IP142.250.74.74:0
File typeJSON data\012- , ASCII text, with no line terminators Hash6cd6c85b5c91dd7582177043aa9c41db 254ee9e5da15891797839b9ae0ce30834a78b240 1ede215bf0736efa739908df3eff93a8874da7b0c347a210a21ef6a8a03b9d6e
POST /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 1070
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Sat, 19 Nov 2022 18:58:17 GMT
server: ESF
cache-control: private
content-length: 114
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 472 B |
IP142.250.74.3:0
Hash59277a4dca16f49864f375aed6f1dac7 7002f5a369d26c4958d927858157c76c27a3b80f 812626c4c69994fa1e7474408de2a88bf558ed8a9eccd580b12acacbbb4ce418
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 19 Nov 2022 18:58:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 471 B |
IP142.250.74.3:0
Hash1fe9675413275b7415b9569bbed3ca07 008049185211f9cf1411a0d27e2eda59a99fa70a 065e8c4cc7199453e84840d864c3941daed714d9d2ca07860d4f6bfeb3071443
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 19 Nov 2022 18:58:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 471 B |
IP142.250.74.3:0
Hash1fe9675413275b7415b9569bbed3ca07 008049185211f9cf1411a0d27e2eda59a99fa70a 065e8c4cc7199453e84840d864c3941daed714d9d2ca07860d4f6bfeb3071443
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 19 Nov 2022 18:58:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| rr1---sn-capm-vnae.googlevideo.com/videoplayback?expire=1668905897&ei=SSd5Y7TkGt7MyQWi15r4Dg&ip=91.90.42.154&id=o-ANk1SssnJooCfxs4U2rH9Ua-drk31M0shyVpCBdxv48w&itag=244&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C271%2C278%2C313&source=youtube&requiressl=yes&mh=6s&mm=31%2C29&mn=sn-capm-vnae%2Csn-5go7ynlk&ms=au%2Crdu&mv=m&mvi=1&pl=21&initcwndbps=1463750&spc=SFxXNvEV2wt7PULOWx5gyGf4FwsMTgA&vprv=1&mime=video%2Fwebm&ns=DJb00jPcyhi9yH9j2kLcsG8J&gir=yes&clen=10680910&dur=120.000&lmt=1516090586789945&mt=1668883980&fvip=5&keepalive=yes&fexp=24001373%2C24007246&c=WEB_EMBEDDED_PLAYER&n=ZbghfHIzR847kg&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AOq0QJ8wRQIhALgO-R8Nb4D4sGtswxQwBXoOBADvJNotP0PfKsl5og7sAiA1_T9OHZJ3nC2UpCSXiKT1RaOc7f00X2OBUs2WTH4ysg%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=AG3C_xAwRQIgKo4YEVQW_IDb2_Cb3P4QFioYjN3shqeLgLTVRJ5zpcACIQD6GolczgITqFAldwDsuTAhKiIFNsaoGKJwH47Msn8C3g%3D%3D&alr=yes&cpn=rCkhHxMRWkoOEGuV&cver=1.20221116.01.00&range=0-193608&rn=1&rbuf=0&pot=D-BAx5ZJyWew4Hv4wX05U7dXZMv1MQx6b7A5LGuIn6Ave5i8n276hYYqINyO3XNGai3C0oe6faiSUSkfHh-fwKY3DFWoZsXCtOjl5IyF3dpuKDZJJZ6Rr7RK8uKor5syMFtCy_3cslI= | 91.90.45.172 | 200 OK | 1.3 kB |
URL HTTP/1.1rr1---sn-capm-vnae.googlevideo.com/videoplayback?expire=1668905897&ei=SSd5Y7TkGt7MyQWi15r4Dg&ip=91.90.42.154&id=o-ANk1SssnJooCfxs4U2rH9Ua-drk31M0shyVpCBdxv48w&itag=244&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C271%2C278%2C313&source=youtube&requiressl=yes&mh=6s&mm=31%2C29&mn=sn-capm-vnae%2Csn-5go7ynlk&ms=au%2Crdu&mv=m&mvi=1&pl=21&initcwndbps=1463750&spc=SFxXNvEV2wt7PULOWx5gyGf4FwsMTgA&vprv=1&mime=video%2Fwebm&ns=DJb00jPcyhi9yH9j2kLcsG8J&gir=yes&clen=10680910&dur=120.000&lmt=1516090586789945&mt=1668883980&fvip=5&keepalive=yes&fexp=24001373%2C24007246&c=WEB_EMBEDDED_PLAYER&n=ZbghfHIzR847kg&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AOq0QJ8wRQIhALgO-R8Nb4D4sGtswxQwBXoOBADvJNotP0PfKsl5og7sAiA1_T9OHZJ3nC2UpCSXiKT1RaOc7f00X2OBUs2WTH4ysg%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=AG3C_xAwRQIgKo4YEVQW_IDb2_Cb3P4QFioYjN3shqeLgLTVRJ5zpcACIQD6GolczgITqFAldwDsuTAhKiIFNsaoGKJwH47Msn8C3g%3D%3D&alr=yes&cpn=rCkhHxMRWkoOEGuV&cver=1.20221116.01.00&range=0-193608&rn=1&rbuf=0&pot=D-BAx5ZJyWew4Hv4wX05U7dXZMv1MQx6b7A5LGuIn6Ave5i8n276hYYqINyO3XNGai3C0oe6faiSUSkfHh-fwKY3DFWoZsXCtOjl5IyF3dpuKDZJJZ6Rr7RK8uKor5syMFtCy_3cslI= IP91.90.45.172:0 ASN#50304 Blix Solutions AS
File typeASCII text, with very long lines (1250), with no line terminators Hash720fc4881ca741411857c78e9bcd34a2 b05cba5ae10a6505b353b301bc76ce764a991628 f082a49cb8e9306328f161a5e4380714d893797ab69555134ecac53b4cfd311b
GET /videoplayback?expire=1668905897&ei=SSd5Y7TkGt7MyQWi15r4Dg&ip=91.90.42.154&id=o-ANk1SssnJooCfxs4U2rH9Ua-drk31M0shyVpCBdxv48w&itag=244&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C271%2C278%2C313&source=youtube&requiressl=yes&mh=6s&mm=31%2C29&mn=sn-capm-vnae%2Csn-5go7ynlk&ms=au%2Crdu&mv=m&mvi=1&pl=21&initcwndbps=1463750&spc=SFxXNvEV2wt7PULOWx5gyGf4FwsMTgA&vprv=1&mime=video%2Fwebm&ns=DJb00jPcyhi9yH9j2kLcsG8J&gir=yes&clen=10680910&dur=120.000&lmt=1516090586789945&mt=1668883980&fvip=5&keepalive=yes&fexp=24001373%2C24007246&c=WEB_EMBEDDED_PLAYER&n=ZbghfHIzR847kg&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AOq0QJ8wRQIhALgO-R8Nb4D4sGtswxQwBXoOBADvJNotP0PfKsl5og7sAiA1_T9OHZJ3nC2UpCSXiKT1RaOc7f00X2OBUs2WTH4ysg%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=AG3C_xAwRQIgKo4YEVQW_IDb2_Cb3P4QFioYjN3shqeLgLTVRJ5zpcACIQD6GolczgITqFAldwDsuTAhKiIFNsaoGKJwH47Msn8C3g%3D%3D&alr=yes&cpn=rCkhHxMRWkoOEGuV&cver=1.20221116.01.00&range=0-193608&rn=1&rbuf=0&pot=D-BAx5ZJyWew4Hv4wX05U7dXZMv1MQx6b7A5LGuIn6Ave5i8n276hYYqINyO3XNGai3C0oe6faiSUSkfHh-fwKY3DFWoZsXCtOjl5IyF3dpuKDZJJZ6Rr7RK8uKor5syMFtCy_3cslI= HTTP/1.1
Host: rr1---sn-capm-vnae.googlevideo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/plain
Last-Modified: Wed, 02 May 2007 10:26:10 GMT
Date: Sat, 19 Nov 2022 18:58:17 GMT
Expires: Sat, 19 Nov 2022 18:58:17 GMT
Cache-Control: private, max-age=21300
Accept-Ranges: bytes
Content-Length: 1250
Connection: keep-alive
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
Access-Control-Allow-Origin: https://www.youtube.com
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: https://www.youtube.com
Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms
Vary: Origin
Cross-Origin-Resource-Policy: cross-origin
X-Restrict-Formats-Hint: None
X-Content-Type-Options: nosniff
Server: gvs 1.0
|
|
| rr1---sn-capm-vnae.googlevideo.com/videoplayback?expire=1668905897&ei=SSd5Y7TkGt7MyQWi15r4Dg&ip=91.90.42.154&id=o-ANk1SssnJooCfxs4U2rH9Ua-drk31M0shyVpCBdxv48w&itag=251&source=youtube&requiressl=yes&mh=6s&mm=31%2C29&mn=sn-capm-vnae%2Csn-5go7ynlk&ms=au%2Crdu&mv=m&mvi=1&pl=21&initcwndbps=1463750&spc=SFxXNvEV2wt7PULOWx5gyGf4FwsMTgA&vprv=1&mime=audio%2Fwebm&ns=DJb00jPcyhi9yH9j2kLcsG8J&gir=yes&clen=1962143&dur=120.021&lmt=1516089417346998&mt=1668883980&fvip=5&keepalive=yes&fexp=24001373%2C24007246&c=WEB_EMBEDDED_PLAYER&n=ZbghfHIzR847kg&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AOq0QJ8wRAIgb37AFQVM-HsKl4DuMNQl3WDrU6HXp8chzjM_Vn0iL2kCIG5WiwxuC_-klXH_jzoe4EasOLyiyj8KZ9ShZxhmnCum&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=AG3C_xAwRQIgKo4YEVQW_IDb2_Cb3P4QFioYjN3shqeLgLTVRJ5zpcACIQD6GolczgITqFAldwDsuTAhKiIFNsaoGKJwH47Msn8C3g%3D%3D&alr=yes&cpn=rCkhHxMRWkoOEGuV&cver=1.20221116.01.00&range=0-66002&rn=2&rbuf=0&pot=D-BAx5ZJyWew4Hv4wX05U7dXZMv1MQx6b7A5LGuIn6Ave5i8n276hYYqINyO3XNGai3C0oe6faiSUSkfHh-fwKY3DFWoZsXCtOjl5IyF3dpuKDZJJZ6Rr7RK8uKor5syMFtCy_3cslI= | 91.90.45.172 | 200 OK | 1.2 kB |
URL HTTP/1.1rr1---sn-capm-vnae.googlevideo.com/videoplayback?expire=1668905897&ei=SSd5Y7TkGt7MyQWi15r4Dg&ip=91.90.42.154&id=o-ANk1SssnJooCfxs4U2rH9Ua-drk31M0shyVpCBdxv48w&itag=251&source=youtube&requiressl=yes&mh=6s&mm=31%2C29&mn=sn-capm-vnae%2Csn-5go7ynlk&ms=au%2Crdu&mv=m&mvi=1&pl=21&initcwndbps=1463750&spc=SFxXNvEV2wt7PULOWx5gyGf4FwsMTgA&vprv=1&mime=audio%2Fwebm&ns=DJb00jPcyhi9yH9j2kLcsG8J&gir=yes&clen=1962143&dur=120.021&lmt=1516089417346998&mt=1668883980&fvip=5&keepalive=yes&fexp=24001373%2C24007246&c=WEB_EMBEDDED_PLAYER&n=ZbghfHIzR847kg&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AOq0QJ8wRAIgb37AFQVM-HsKl4DuMNQl3WDrU6HXp8chzjM_Vn0iL2kCIG5WiwxuC_-klXH_jzoe4EasOLyiyj8KZ9ShZxhmnCum&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=AG3C_xAwRQIgKo4YEVQW_IDb2_Cb3P4QFioYjN3shqeLgLTVRJ5zpcACIQD6GolczgITqFAldwDsuTAhKiIFNsaoGKJwH47Msn8C3g%3D%3D&alr=yes&cpn=rCkhHxMRWkoOEGuV&cver=1.20221116.01.00&range=0-66002&rn=2&rbuf=0&pot=D-BAx5ZJyWew4Hv4wX05U7dXZMv1MQx6b7A5LGuIn6Ave5i8n276hYYqINyO3XNGai3C0oe6faiSUSkfHh-fwKY3DFWoZsXCtOjl5IyF3dpuKDZJJZ6Rr7RK8uKor5syMFtCy_3cslI= IP91.90.45.172:0 ASN#50304 Blix Solutions AS
File typeASCII text, with very long lines (1155), with no line terminators Hash2ce84141ac489f9a83515d9a25f27f68 b4ab73007d918246f66a35004973272d8059237c 92892724e7278ff6d4f7da776a08f60b62721e7c34d6ecb599c4d638fae3843d
GET /videoplayback?expire=1668905897&ei=SSd5Y7TkGt7MyQWi15r4Dg&ip=91.90.42.154&id=o-ANk1SssnJooCfxs4U2rH9Ua-drk31M0shyVpCBdxv48w&itag=251&source=youtube&requiressl=yes&mh=6s&mm=31%2C29&mn=sn-capm-vnae%2Csn-5go7ynlk&ms=au%2Crdu&mv=m&mvi=1&pl=21&initcwndbps=1463750&spc=SFxXNvEV2wt7PULOWx5gyGf4FwsMTgA&vprv=1&mime=audio%2Fwebm&ns=DJb00jPcyhi9yH9j2kLcsG8J&gir=yes&clen=1962143&dur=120.021&lmt=1516089417346998&mt=1668883980&fvip=5&keepalive=yes&fexp=24001373%2C24007246&c=WEB_EMBEDDED_PLAYER&n=ZbghfHIzR847kg&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AOq0QJ8wRAIgb37AFQVM-HsKl4DuMNQl3WDrU6HXp8chzjM_Vn0iL2kCIG5WiwxuC_-klXH_jzoe4EasOLyiyj8KZ9ShZxhmnCum&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=AG3C_xAwRQIgKo4YEVQW_IDb2_Cb3P4QFioYjN3shqeLgLTVRJ5zpcACIQD6GolczgITqFAldwDsuTAhKiIFNsaoGKJwH47Msn8C3g%3D%3D&alr=yes&cpn=rCkhHxMRWkoOEGuV&cver=1.20221116.01.00&range=0-66002&rn=2&rbuf=0&pot=D-BAx5ZJyWew4Hv4wX05U7dXZMv1MQx6b7A5LGuIn6Ave5i8n276hYYqINyO3XNGai3C0oe6faiSUSkfHh-fwKY3DFWoZsXCtOjl5IyF3dpuKDZJJZ6Rr7RK8uKor5syMFtCy_3cslI= HTTP/1.1
Host: rr1---sn-capm-vnae.googlevideo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/plain
Last-Modified: Wed, 02 May 2007 10:26:10 GMT
Date: Sat, 19 Nov 2022 18:58:17 GMT
Expires: Sat, 19 Nov 2022 18:58:17 GMT
Cache-Control: private, max-age=21300
Accept-Ranges: bytes
Content-Length: 1155
Connection: keep-alive
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
Access-Control-Allow-Origin: https://www.youtube.com
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: https://www.youtube.com
Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms
Vary: Origin
Cross-Origin-Resource-Policy: cross-origin
X-Content-Type-Options: nosniff
Server: gvs 1.0
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 471 B |
IP142.250.74.3:0
Hash1fe9675413275b7415b9569bbed3ca07 008049185211f9cf1411a0d27e2eda59a99fa70a 065e8c4cc7199453e84840d864c3941daed714d9d2ca07860d4f6bfeb3071443
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 19 Nov 2022 18:58:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 472 B |
IP142.250.74.3:0
Hasheb3de862f012e1d7c7ce8d6c642c05ea 288d0cd6dd27921c2a3da8c7c3efdc4ea01b949a 79d1be52116481cffe0d7db5ee70b9dd5123615d650629e459ba9be381ead095
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 19 Nov 2022 18:58:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 472 B |
IP142.250.74.3:0
Hasheb3de862f012e1d7c7ce8d6c642c05ea 288d0cd6dd27921c2a3da8c7c3efdc4ea01b949a 79d1be52116481cffe0d7db5ee70b9dd5123615d650629e459ba9be381ead095
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 19 Nov 2022 18:58:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| rr1---sn-5goeen7k.googlevideo.com/videoplayback?expire=1668905897&ei=SSd5Y7TkGt7MyQWi15r4Dg&ip=91.90.42.154&id=o-ANk1SssnJooCfxs4U2rH9Ua-drk31M0shyVpCBdxv48w&itag=251&source=youtube&requiressl=yes&spc=SFxXNvEV2wt7PULOWx5gyGf4FwsMTgA&vprv=1&mime=audio%2Fwebm&ns=DJb00jPcyhi9yH9j2kLcsG8J&gir=yes&clen=1962143&dur=120.021&lmt=1516089417346998&keepalive=yes&fexp=24001373,24007246&c=WEB_EMBEDDED_PLAYER&n=ZbghfHIzR847kg&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AOq0QJ8wRAIgb37AFQVM-HsKl4DuMNQl3WDrU6HXp8chzjM_Vn0iL2kCIG5WiwxuC_-klXH_jzoe4EasOLyiyj8KZ9ShZxhmnCum&alr=yes&cpn=rCkhHxMRWkoOEGuV&cver=1.20221116.01.00&redirect_counter=1&cm2rm=sn-capm-vnae7e&cms_redirect=yes&cmsv=e&mh=6s&mm=29&mn=sn-5goeen7k&ms=rdu&mt=1668883743&mv=m&mvi=1&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRgIhAKEwFNt5PDfv0RczvLdX9JmDRgyy-TmDwJGU4B4kmzoSAiEA6_wBKvwjwtpP0YqYu0Ngoqyj7-sv00pCQSmRn5UVOGk%3D&range=0-66002&rn=4&rbuf=0&pot=D-BAx5ZJyWew4Hv4wX05U7dXZMv1MQx6b7A5LGuIn6Ave5i8n276hYYqINyO3XNGai3C0oe6faiSUSkfHh-fwKY3DFWoZsXCtOjl5IyF3dpuKDZJJZ6Rr7RK8uKor5syMFtCy_3cslI= | 173.194.150.199 | 200 OK | 66 kB |
URL HTTP/1.1rr1---sn-5goeen7k.googlevideo.com/videoplayback?expire=1668905897&ei=SSd5Y7TkGt7MyQWi15r4Dg&ip=91.90.42.154&id=o-ANk1SssnJooCfxs4U2rH9Ua-drk31M0shyVpCBdxv48w&itag=251&source=youtube&requiressl=yes&spc=SFxXNvEV2wt7PULOWx5gyGf4FwsMTgA&vprv=1&mime=audio%2Fwebm&ns=DJb00jPcyhi9yH9j2kLcsG8J&gir=yes&clen=1962143&dur=120.021&lmt=1516089417346998&keepalive=yes&fexp=24001373,24007246&c=WEB_EMBEDDED_PLAYER&n=ZbghfHIzR847kg&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AOq0QJ8wRAIgb37AFQVM-HsKl4DuMNQl3WDrU6HXp8chzjM_Vn0iL2kCIG5WiwxuC_-klXH_jzoe4EasOLyiyj8KZ9ShZxhmnCum&alr=yes&cpn=rCkhHxMRWkoOEGuV&cver=1.20221116.01.00&redirect_counter=1&cm2rm=sn-capm-vnae7e&cms_redirect=yes&cmsv=e&mh=6s&mm=29&mn=sn-5goeen7k&ms=rdu&mt=1668883743&mv=m&mvi=1&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRgIhAKEwFNt5PDfv0RczvLdX9JmDRgyy-TmDwJGU4B4kmzoSAiEA6_wBKvwjwtpP0YqYu0Ngoqyj7-sv00pCQSmRn5UVOGk%3D&range=0-66002&rn=4&rbuf=0&pot=D-BAx5ZJyWew4Hv4wX05U7dXZMv1MQx6b7A5LGuIn6Ave5i8n276hYYqINyO3XNGai3C0oe6faiSUSkfHh-fwKY3DFWoZsXCtOjl5IyF3dpuKDZJJZ6Rr7RK8uKor5syMFtCy_3cslI= IP173.194.150.199:0
File typeWebM\012- EBML file, creator webmB\20\012- data Hash2676eb02754f2d9a63a86025d624572e f5a0a8705bf1e8c852df6aec7b99a16c8b4bf374 df45a950c03632e0ef282c6baacb872d15c7621372de08bbe7fcd927c253d366
GET /videoplayback?expire=1668905897&ei=SSd5Y7TkGt7MyQWi15r4Dg&ip=91.90.42.154&id=o-ANk1SssnJooCfxs4U2rH9Ua-drk31M0shyVpCBdxv48w&itag=251&source=youtube&requiressl=yes&spc=SFxXNvEV2wt7PULOWx5gyGf4FwsMTgA&vprv=1&mime=audio%2Fwebm&ns=DJb00jPcyhi9yH9j2kLcsG8J&gir=yes&clen=1962143&dur=120.021&lmt=1516089417346998&keepalive=yes&fexp=24001373,24007246&c=WEB_EMBEDDED_PLAYER&n=ZbghfHIzR847kg&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AOq0QJ8wRAIgb37AFQVM-HsKl4DuMNQl3WDrU6HXp8chzjM_Vn0iL2kCIG5WiwxuC_-klXH_jzoe4EasOLyiyj8KZ9ShZxhmnCum&alr=yes&cpn=rCkhHxMRWkoOEGuV&cver=1.20221116.01.00&redirect_counter=1&cm2rm=sn-capm-vnae7e&cms_redirect=yes&cmsv=e&mh=6s&mm=29&mn=sn-5goeen7k&ms=rdu&mt=1668883743&mv=m&mvi=1&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRgIhAKEwFNt5PDfv0RczvLdX9JmDRgyy-TmDwJGU4B4kmzoSAiEA6_wBKvwjwtpP0YqYu0Ngoqyj7-sv00pCQSmRn5UVOGk%3D&range=0-66002&rn=4&rbuf=0&pot=D-BAx5ZJyWew4Hv4wX05U7dXZMv1MQx6b7A5LGuIn6Ave5i8n276hYYqINyO3XNGai3C0oe6faiSUSkfHh-fwKY3DFWoZsXCtOjl5IyF3dpuKDZJJZ6Rr7RK8uKor5syMFtCy_3cslI= HTTP/1.1
Host: rr1---sn-5goeen7k.googlevideo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Last-Modified: Tue, 16 Jan 2018 07:56:57 GMT
Content-Type: audio/webm
Date: Sat, 19 Nov 2022 18:58:17 GMT
Expires: Sat, 19 Nov 2022 18:58:17 GMT
Cache-Control: private, max-age=21300
Accept-Ranges: bytes
Content-Length: 66003
Connection: keep-alive
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
Access-Control-Allow-Origin: https://www.youtube.com
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: https://www.youtube.com
Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms
Vary: Origin
Cross-Origin-Resource-Policy: cross-origin
X-Content-Type-Options: nosniff
Server: gvs 1.0
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 472 B |
IP142.250.74.3:0
Hash910cdf7411fe10f9b588b091b852b3bf 2caa2c7c331c995d8c6e2c05b022841b6cff1413 1f42b487de9a1feac710078e8a648513aa3bfd7df900b48d0e9cf1a2593afb4b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 19 Nov 2022 18:58:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| rr1---sn-5hnednss.googlevideo.com/videoplayback?expire=1668905897&ei=SSd5Y7TkGt7MyQWi15r4Dg&ip=91.90.42.154&id=o-ANk1SssnJooCfxs4U2rH9Ua-drk31M0shyVpCBdxv48w&itag=247&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C271%2C278%2C313&source=youtube&requiressl=yes&spc=SFxXNvEV2wt7PULOWx5gyGf4FwsMTgA&vprv=1&mime=video%2Fwebm&ns=DJb00jPcyhi9yH9j2kLcsG8J&gir=yes&clen=21639614&dur=120.000&lmt=1516090586975120&keepalive=yes&fexp=24001373,24007246&c=WEB_EMBEDDED_PLAYER&n=ZbghfHIzR847kg&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AOq0QJ8wRAIgMptlxw4FyEbygbwdoBp5xf5YNhLCzNsshTqCwtDj630CIBx3Qp7yO3on5cE9LGNkxe7jXh3ZY93gnZhHbB8SCK9O&alr=yes&cpn=rCkhHxMRWkoOEGuV&cver=1.20221116.01.00&cm2rm=sn-capm-vnae7e,sn-5golz7e&redirect_counter=2&cms_redirect=yes&cmsv=e&mh=6s&mm=34&mn=sn-5hnednss&ms=ltu&mt=1668883963&mv=m&mvi=1&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRQIhALyfni3JTYejxSh74AVeQVTZ6Rdfqijs-oMwzhOM7duuAiB_Wn8Mo4w-_k0JYOv65E_5IBTgU4Hd18y2fZ91v5gxYg%3D%3D&range=0-630&rn=7&rbuf=0&pot=D-BAx5ZJyWew4Hv4wX05U7dXZMv1MQx6b7A5LGuIn6Ave5i8n276hYYqINyO3XNGai3C0oe6faiSUSkfHh-fwKY3DFWoZsXCtOjl5IyF3dpuKDZJJZ6Rr7RK8uKor5syMFtCy_3cslI= | 172.217.132.198 | 200 OK | 631 B |
URL HTTP/1.1rr1---sn-5hnednss.googlevideo.com/videoplayback?expire=1668905897&ei=SSd5Y7TkGt7MyQWi15r4Dg&ip=91.90.42.154&id=o-ANk1SssnJooCfxs4U2rH9Ua-drk31M0shyVpCBdxv48w&itag=247&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C271%2C278%2C313&source=youtube&requiressl=yes&spc=SFxXNvEV2wt7PULOWx5gyGf4FwsMTgA&vprv=1&mime=video%2Fwebm&ns=DJb00jPcyhi9yH9j2kLcsG8J&gir=yes&clen=21639614&dur=120.000&lmt=1516090586975120&keepalive=yes&fexp=24001373,24007246&c=WEB_EMBEDDED_PLAYER&n=ZbghfHIzR847kg&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AOq0QJ8wRAIgMptlxw4FyEbygbwdoBp5xf5YNhLCzNsshTqCwtDj630CIBx3Qp7yO3on5cE9LGNkxe7jXh3ZY93gnZhHbB8SCK9O&alr=yes&cpn=rCkhHxMRWkoOEGuV&cver=1.20221116.01.00&cm2rm=sn-capm-vnae7e,sn-5golz7e&redirect_counter=2&cms_redirect=yes&cmsv=e&mh=6s&mm=34&mn=sn-5hnednss&ms=ltu&mt=1668883963&mv=m&mvi=1&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRQIhALyfni3JTYejxSh74AVeQVTZ6Rdfqijs-oMwzhOM7duuAiB_Wn8Mo4w-_k0JYOv65E_5IBTgU4Hd18y2fZ91v5gxYg%3D%3D&range=0-630&rn=7&rbuf=0&pot=D-BAx5ZJyWew4Hv4wX05U7dXZMv1MQx6b7A5LGuIn6Ave5i8n276hYYqINyO3XNGai3C0oe6faiSUSkfHh-fwKY3DFWoZsXCtOjl5IyF3dpuKDZJJZ6Rr7RK8uKor5syMFtCy_3cslI= IP172.217.132.198:0
File typeWebM\012- EBML file, creator webmB\20\012- data Hash72185774b31517abf723e35225405137 d2fd1fcc9a1c1f0f176ab0dffae59438b3ab794e c0610364b9754d97cfe809b36fa0f1ed0dc17c53b765056724d9da731e5301f6
GET /videoplayback?expire=1668905897&ei=SSd5Y7TkGt7MyQWi15r4Dg&ip=91.90.42.154&id=o-ANk1SssnJooCfxs4U2rH9Ua-drk31M0shyVpCBdxv48w&itag=247&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C271%2C278%2C313&source=youtube&requiressl=yes&spc=SFxXNvEV2wt7PULOWx5gyGf4FwsMTgA&vprv=1&mime=video%2Fwebm&ns=DJb00jPcyhi9yH9j2kLcsG8J&gir=yes&clen=21639614&dur=120.000&lmt=1516090586975120&keepalive=yes&fexp=24001373,24007246&c=WEB_EMBEDDED_PLAYER&n=ZbghfHIzR847kg&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AOq0QJ8wRAIgMptlxw4FyEbygbwdoBp5xf5YNhLCzNsshTqCwtDj630CIBx3Qp7yO3on5cE9LGNkxe7jXh3ZY93gnZhHbB8SCK9O&alr=yes&cpn=rCkhHxMRWkoOEGuV&cver=1.20221116.01.00&cm2rm=sn-capm-vnae7e,sn-5golz7e&redirect_counter=2&cms_redirect=yes&cmsv=e&mh=6s&mm=34&mn=sn-5hnednss&ms=ltu&mt=1668883963&mv=m&mvi=1&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRQIhALyfni3JTYejxSh74AVeQVTZ6Rdfqijs-oMwzhOM7duuAiB_Wn8Mo4w-_k0JYOv65E_5IBTgU4Hd18y2fZ91v5gxYg%3D%3D&range=0-630&rn=7&rbuf=0&pot=D-BAx5ZJyWew4Hv4wX05U7dXZMv1MQx6b7A5LGuIn6Ave5i8n276hYYqINyO3XNGai3C0oe6faiSUSkfHh-fwKY3DFWoZsXCtOjl5IyF3dpuKDZJJZ6Rr7RK8uKor5syMFtCy_3cslI= HTTP/1.1
Host: rr1---sn-5hnednss.googlevideo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Last-Modified: Tue, 16 Jan 2018 08:16:26 GMT
Content-Type: video/webm
Date: Sat, 19 Nov 2022 18:58:17 GMT
Expires: Sat, 19 Nov 2022 18:58:17 GMT
Cache-Control: private, max-age=21300
Accept-Ranges: bytes
Content-Length: 631
Connection: keep-alive
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
Access-Control-Allow-Origin: https://www.youtube.com
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: https://www.youtube.com
Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms
Vary: Origin
Cross-Origin-Resource-Policy: cross-origin
X-Restrict-Formats-Hint: None
X-Content-Type-Options: nosniff
Server: gvs 1.0
|
|
| rr1---sn-5goeen7k.googlevideo.com/videoplayback?expire=1668905897&ei=SSd5Y7TkGt7MyQWi15r4Dg&ip=91.90.42.154&id=o-ANk1SssnJooCfxs4U2rH9Ua-drk31M0shyVpCBdxv48w&itag=244&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C271%2C278%2C313&source=youtube&requiressl=yes&spc=SFxXNvEV2wt7PULOWx5gyGf4FwsMTgA&vprv=1&mime=video%2Fwebm&ns=DJb00jPcyhi9yH9j2kLcsG8J&gir=yes&clen=10680910&dur=120.000&lmt=1516090586789945&keepalive=yes&fexp=24001373,24007246&c=WEB_EMBEDDED_PLAYER&n=ZbghfHIzR847kg&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AOq0QJ8wRQIhALgO-R8Nb4D4sGtswxQwBXoOBADvJNotP0PfKsl5og7sAiA1_T9OHZJ3nC2UpCSXiKT1RaOc7f00X2OBUs2WTH4ysg%3D%3D&alr=yes&cpn=rCkhHxMRWkoOEGuV&cver=1.20221116.01.00&redirect_counter=1&cm2rm=sn-capm-vnae7e&cms_redirect=yes&cmsv=e&mh=6s&mm=29&mn=sn-5goeen7k&ms=rdu&mt=1668883743&mv=m&mvi=1&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRAIga5q43SqHe8YHSS574G8lNk-8AAmy8QCWpUs46KH8yBQCIHlmPxnB91Tf6S6n25_TqotTY0eZ1x2pZ5qxDbfpS6lO&range=0-193608&rn=3&rbuf=0&pot=D-BAx5ZJyWew4Hv4wX05U7dXZMv1MQx6b7A5LGuIn6Ave5i8n276hYYqINyO3XNGai3C0oe6faiSUSkfHh-fwKY3DFWoZsXCtOjl5IyF3dpuKDZJJZ6Rr7RK8uKor5syMFtCy_3cslI= | 173.194.150.199 | 200 OK | 194 kB |
URL HTTP/1.1rr1---sn-5goeen7k.googlevideo.com/videoplayback?expire=1668905897&ei=SSd5Y7TkGt7MyQWi15r4Dg&ip=91.90.42.154&id=o-ANk1SssnJooCfxs4U2rH9Ua-drk31M0shyVpCBdxv48w&itag=244&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C271%2C278%2C313&source=youtube&requiressl=yes&spc=SFxXNvEV2wt7PULOWx5gyGf4FwsMTgA&vprv=1&mime=video%2Fwebm&ns=DJb00jPcyhi9yH9j2kLcsG8J&gir=yes&clen=10680910&dur=120.000&lmt=1516090586789945&keepalive=yes&fexp=24001373,24007246&c=WEB_EMBEDDED_PLAYER&n=ZbghfHIzR847kg&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AOq0QJ8wRQIhALgO-R8Nb4D4sGtswxQwBXoOBADvJNotP0PfKsl5og7sAiA1_T9OHZJ3nC2UpCSXiKT1RaOc7f00X2OBUs2WTH4ysg%3D%3D&alr=yes&cpn=rCkhHxMRWkoOEGuV&cver=1.20221116.01.00&redirect_counter=1&cm2rm=sn-capm-vnae7e&cms_redirect=yes&cmsv=e&mh=6s&mm=29&mn=sn-5goeen7k&ms=rdu&mt=1668883743&mv=m&mvi=1&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRAIga5q43SqHe8YHSS574G8lNk-8AAmy8QCWpUs46KH8yBQCIHlmPxnB91Tf6S6n25_TqotTY0eZ1x2pZ5qxDbfpS6lO&range=0-193608&rn=3&rbuf=0&pot=D-BAx5ZJyWew4Hv4wX05U7dXZMv1MQx6b7A5LGuIn6Ave5i8n276hYYqINyO3XNGai3C0oe6faiSUSkfHh-fwKY3DFWoZsXCtOjl5IyF3dpuKDZJJZ6Rr7RK8uKor5syMFtCy_3cslI= IP173.194.150.199:0
File typeWebM\012- EBML file, creator webmB\20\012- data Size194 kB (193609 bytes) Hash9c0d348d07b3fedb6b129555192f68ed 14e89599b1ec0ad90f30929076e7f5ee55251231 57bac2c36e34822b9b47fe2465ad349da38b016e3aaced3dbf53f4c278d3adf9
GET /videoplayback?expire=1668905897&ei=SSd5Y7TkGt7MyQWi15r4Dg&ip=91.90.42.154&id=o-ANk1SssnJooCfxs4U2rH9Ua-drk31M0shyVpCBdxv48w&itag=244&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C271%2C278%2C313&source=youtube&requiressl=yes&spc=SFxXNvEV2wt7PULOWx5gyGf4FwsMTgA&vprv=1&mime=video%2Fwebm&ns=DJb00jPcyhi9yH9j2kLcsG8J&gir=yes&clen=10680910&dur=120.000&lmt=1516090586789945&keepalive=yes&fexp=24001373,24007246&c=WEB_EMBEDDED_PLAYER&n=ZbghfHIzR847kg&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AOq0QJ8wRQIhALgO-R8Nb4D4sGtswxQwBXoOBADvJNotP0PfKsl5og7sAiA1_T9OHZJ3nC2UpCSXiKT1RaOc7f00X2OBUs2WTH4ysg%3D%3D&alr=yes&cpn=rCkhHxMRWkoOEGuV&cver=1.20221116.01.00&redirect_counter=1&cm2rm=sn-capm-vnae7e&cms_redirect=yes&cmsv=e&mh=6s&mm=29&mn=sn-5goeen7k&ms=rdu&mt=1668883743&mv=m&mvi=1&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRAIga5q43SqHe8YHSS574G8lNk-8AAmy8QCWpUs46KH8yBQCIHlmPxnB91Tf6S6n25_TqotTY0eZ1x2pZ5qxDbfpS6lO&range=0-193608&rn=3&rbuf=0&pot=D-BAx5ZJyWew4Hv4wX05U7dXZMv1MQx6b7A5LGuIn6Ave5i8n276hYYqINyO3XNGai3C0oe6faiSUSkfHh-fwKY3DFWoZsXCtOjl5IyF3dpuKDZJJZ6Rr7RK8uKor5syMFtCy_3cslI= HTTP/1.1
Host: rr1---sn-5goeen7k.googlevideo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Last-Modified: Tue, 16 Jan 2018 08:16:26 GMT
Content-Type: video/webm
Date: Sat, 19 Nov 2022 18:58:18 GMT
Expires: Sat, 19 Nov 2022 18:58:18 GMT
Cache-Control: private, max-age=21299
Accept-Ranges: bytes
Content-Length: 193609
Connection: keep-alive
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
Access-Control-Allow-Origin: https://www.youtube.com
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: https://www.youtube.com
Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms
Vary: Origin
Cross-Origin-Resource-Policy: cross-origin
X-Restrict-Formats-Hint: None
X-Content-Type-Options: nosniff
Server: gvs 1.0
|
|
| www.palazzomorra.it/ | 89.46.104.16 | 200 OK | 0 B |
IP89.46.104.16:0
GET / HTTP/1.1
Host: www.palazzomorra.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
server: aruba-proxy
date: Sat, 19 Nov 2022 18:58:14 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
link: <https://www.palazzomorra.it/wp-json/>; rel="https://api.w.org/", <https://www.palazzomorra.it/wp-json/wp/v2/pages/1087>; rel="alternate"; type="application/json", <https://www.palazzomorra.it/>; rel=shortlink
x-servername: ipvsproxy03.ad.aruba.it
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.palazzomorra.it/wp-content/plugins/wp-whatsapp-chat/build/frontend/js/index.js?ver=5cf11c421167aee95e6c | 89.46.104.16 | 200 OK | 0 B |
URL HTTP/2www.palazzomorra.it/wp-content/plugins/wp-whatsapp-chat/build/frontend/js/index.js?ver=5cf11c421167aee95e6c IP89.46.104.16:0
GET /wp-content/plugins/wp-whatsapp-chat/build/frontend/js/index.js?ver=5cf11c421167aee95e6c HTTP/1.1
Host: www.palazzomorra.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.palazzomorra.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: aruba-proxy
date: Sat, 19 Nov 2022 18:58:14 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Mon, 14 Nov 2022 22:56:31 GMT
x-servername: ipvsproxy03.ad.aruba.it
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.palazzomorra.it/wp-content/themes/enfold/config-layerslider/LayerSlider/assets/static/layerslider/js/layerslider.kreaturamedia.jquery.js?ver=6.11.7 | 89.46.104.16 | 200 OK | 0 B |
URL HTTP/2www.palazzomorra.it/wp-content/themes/enfold/config-layerslider/LayerSlider/assets/static/layerslider/js/layerslider.kreaturamedia.jquery.js?ver=6.11.7 IP89.46.104.16:0
GET /wp-content/themes/enfold/config-layerslider/LayerSlider/assets/static/layerslider/js/layerslider.kreaturamedia.jquery.js?ver=6.11.7 HTTP/1.1
Host: www.palazzomorra.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.palazzomorra.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: aruba-proxy
date: Sat, 19 Nov 2022 18:58:14 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Sat, 05 Jun 2021 08:49:33 GMT
x-servername: ipvsproxy03.ad.aruba.it
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.palazzomorra.it/wp-content/plugins/wp-whatsapp-chat/build/frontend/css/style.css?ver=6.2.2 | 89.46.104.16 | 200 OK | 0 B |
URL HTTP/2www.palazzomorra.it/wp-content/plugins/wp-whatsapp-chat/build/frontend/css/style.css?ver=6.2.2 IP89.46.104.16:0
GET /wp-content/plugins/wp-whatsapp-chat/build/frontend/css/style.css?ver=6.2.2 HTTP/1.1
Host: www.palazzomorra.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.palazzomorra.it/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: aruba-proxy
date: Sat, 19 Nov 2022 18:58:14 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Mon, 14 Nov 2022 22:56:31 GMT
x-servername: ipvsproxy03.ad.aruba.it
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.palazzomorra.it/wp-content/uploads/dynamic_avia/avia-footer-scripts-963760bf9eb87971f23945f991293098---60bb6d4450574.js | 89.46.104.16 | 200 OK | 0 B |
URL HTTP/2www.palazzomorra.it/wp-content/uploads/dynamic_avia/avia-footer-scripts-963760bf9eb87971f23945f991293098---60bb6d4450574.js IP89.46.104.16:0
GET /wp-content/uploads/dynamic_avia/avia-footer-scripts-963760bf9eb87971f23945f991293098---60bb6d4450574.js HTTP/1.1
Host: www.palazzomorra.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.palazzomorra.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: aruba-proxy
date: Sat, 19 Nov 2022 18:58:14 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Sat, 05 Jun 2021 12:25:40 GMT
x-servername: ipvsproxy03.ad.aruba.it
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.palazzomorra.it/wp-includes/js/wp-emoji-release.min.js?ver=6.1.1 | 89.46.104.16 | 200 OK | 0 B |
URL HTTP/2www.palazzomorra.it/wp-includes/js/wp-emoji-release.min.js?ver=6.1.1 IP89.46.104.16:0
GET /wp-includes/js/wp-emoji-release.min.js?ver=6.1.1 HTTP/1.1
Host: www.palazzomorra.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.palazzomorra.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: aruba-proxy
date: Sat, 19 Nov 2022 18:58:14 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Tue, 24 May 2022 22:56:28 GMT
x-servername: ipvsproxy03.ad.aruba.it
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.palazzomorra.it/wp-content/themes/enfold/config-layerslider/LayerSlider/assets/static/layerslider/js/layerslider.transitions.js?ver=6.11.7 | 89.46.104.16 | 200 OK | 0 B |
URL HTTP/2www.palazzomorra.it/wp-content/themes/enfold/config-layerslider/LayerSlider/assets/static/layerslider/js/layerslider.transitions.js?ver=6.11.7 IP89.46.104.16:0
GET /wp-content/themes/enfold/config-layerslider/LayerSlider/assets/static/layerslider/js/layerslider.transitions.js?ver=6.11.7 HTTP/1.1
Host: www.palazzomorra.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.palazzomorra.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: aruba-proxy
date: Sat, 19 Nov 2022 18:58:14 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Sat, 05 Jun 2021 08:49:33 GMT
x-servername: ipvsproxy03.ad.aruba.it
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.palazzomorra.it/wp-content/themes/enfold/config-layerslider/LayerSlider/assets/static/layerslider/js/layerslider.utils.js?ver=6.11.7 | 89.46.104.16 | 200 OK | 0 B |
URL HTTP/2www.palazzomorra.it/wp-content/themes/enfold/config-layerslider/LayerSlider/assets/static/layerslider/js/layerslider.utils.js?ver=6.11.7 IP89.46.104.16:0
GET /wp-content/themes/enfold/config-layerslider/LayerSlider/assets/static/layerslider/js/layerslider.utils.js?ver=6.11.7 HTTP/1.1
Host: www.palazzomorra.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.palazzomorra.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: aruba-proxy
date: Sat, 19 Nov 2022 18:58:14 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Sat, 05 Jun 2021 08:49:33 GMT
x-servername: ipvsproxy03.ad.aruba.it
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.palazzomorra.it/wp-includes/css/dist/block-library/style.min.css?ver=6.1.1 | 89.46.104.16 | 200 OK | 0 B |
URL HTTP/2www.palazzomorra.it/wp-includes/css/dist/block-library/style.min.css?ver=6.1.1 IP89.46.104.16:0
GET /wp-includes/css/dist/block-library/style.min.css?ver=6.1.1 HTTP/1.1
Host: www.palazzomorra.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.palazzomorra.it/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: aruba-proxy
date: Sat, 19 Nov 2022 18:58:14 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Tue, 15 Nov 2022 22:53:10 GMT
x-servername: ipvsproxy03.ad.aruba.it
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.palazzomorra.it/wp-content/themes/enfold/config-layerslider/LayerSlider/assets/static/layerslider/skins/v6/skin.css | 89.46.104.16 | 200 OK | 0 B |
URL HTTP/2www.palazzomorra.it/wp-content/themes/enfold/config-layerslider/LayerSlider/assets/static/layerslider/skins/v6/skin.css IP89.46.104.16:0
GET /wp-content/themes/enfold/config-layerslider/LayerSlider/assets/static/layerslider/skins/v6/skin.css HTTP/1.1
Host: www.palazzomorra.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.palazzomorra.it/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: aruba-proxy
date: Sat, 19 Nov 2022 18:58:15 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Sat, 05 Jun 2021 08:49:34 GMT
x-servername: ipvsproxy03.ad.aruba.it
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.palazzomorra.it/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 | 89.46.104.16 | 200 OK | 0 B |
URL HTTP/2www.palazzomorra.it/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 IP89.46.104.16:0
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1
Host: www.palazzomorra.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.palazzomorra.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: aruba-proxy
date: Sat, 19 Nov 2022 18:58:14 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Fri, 02 Apr 2021 07:49:39 GMT
x-servername: ipvsproxy03.ad.aruba.it
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Allerta | 142.250.74.10 | 200 OK | 0 B |
URL HTTP/2fonts.googleapis.com/css?family=Allerta IP142.250.74.10:0
GET /css?family=Allerta HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.palazzomorra.it/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 19 Nov 2022 18:58:14 GMT
date: Sat, 19 Nov 2022 18:58:14 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| www.palazzomorra.it/ | 89.46.104.16 | 200 OK | 0 B |
IP89.46.104.16:0
GET / HTTP/1.1
Host: www.palazzomorra.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.palazzomorra.it/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: aruba-proxy
date: Sat, 19 Nov 2022 18:58:15 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
link: <https://www.palazzomorra.it/wp-json/>; rel="https://api.w.org/", <https://www.palazzomorra.it/wp-json/wp/v2/pages/1087>; rel="alternate"; type="application/json", <https://www.palazzomorra.it/>; rel=shortlink
x-servername: ipvsproxy03.ad.aruba.it
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
0.0.0.0