mountaintraining.net/
200 OK 805 B IP
ASN #39729 Register S.p.A.
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 39d65c3e7c81739cf3dfdf38cfe2fa53
376226d0e6fa142bb7b06c0652e96e8edf8b9926
934d281843c26f986b1fb5ad6059f14e6475925443961b0aa62d2764087ed305
Analyzer Verdict Alert fortinet Malware
GET / HTTP/1.1
Host: mountaintraining.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Tue, 06 Sep 2022 10:30:04 GMT
Server: Apache
Last-Modified: Thu, 07 Sep 2017 15:59:22 GMT
Accept-Ranges: bytes
Content-Length: 805
Connection: close
Content-Type: text/html
Content-Language: it
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 99b7d23c1748d0526782b9ff9ea45f09
eadd801a3ba2aa00632c6fb52e1f9125bd6d5b4f
48f81668f76955320480b484138aebdad5d03c471036b4449c737aca1ecab08e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Content-Length, Backoff, Retry-After, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Tue, 06 Sep 2022 10:04:17 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 a2b4f68a89fc87406bff22c95fc07fba.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: tyO7OhK71yeYix8o8hbv2WyQCb_Y1DR694D42P_NHzdBwkK-23HnUQ==
Age: 1547
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d931e0142ef5ffe9cdb4c4c6bfcb9bc9
d9c4caf525e8926b042a14f38d374cc4033ed768
f610984fb0a75b3a31424faa860cbc8172c7f21804df1dc14fbb685b7c456f29
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F610984FB0A75B3A31424FAA860CBC8172C7F21804DF1DC14FBB685B7C456F29"
Last-Modified: Sat, 03 Sep 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4628
Expires: Tue, 06 Sep 2022 11:47:12 GMT
Date: Tue, 06 Sep 2022 10:30:04 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
IP
File type PEM certificate\012- , ASCII text
Hash 742edb4038f38bc533514982f3d2e861
cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1
b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Tue, 06 Sep 2022 01:15:18 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 475d4ecb64796af058573c6f1048e898.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Y7dzXNOJLyQiE8tJqWL4nNrssTDdO8XkstP69O4zhXw0LevSiN7hYA==
age: 33287
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 06 Sep 2022 10:30:04 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
mountaintraining.net/favicon.ico
404 Not Found 209 B URL HTTP/1.1 mountaintraining.net/favicon.ico
IP
ASN #39729 Register S.p.A.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 18ffb59b61525f781cf9251045be575d
bd7318b00b15b7a1c8a48524419fa2e5c27a5b6d
b6682cab65d3243b5b75efb7279dbf49491957484780f2ba0a87632cc0e25642
GET /favicon.ico HTTP/1.1
Host: mountaintraining.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mountaintraining.net/
HTTP/1.1 404 Not Found
Date: Tue, 06 Sep 2022 10:30:04 GMT
Server: Apache
Content-Length: 209
Connection: close
Content-Type: text/html; charset=iso-8859-1
courtesy.register.it/index.html
302 Found 24 B URL HTTP/1.1 courtesy.register.it/index.html
IP
ASN #39729 Register S.p.A.
Hash 383279986f3168f37e8a9f4610cd248b
dbd64fa31f303f0162584b3068ea98ad64740cd8
652bc94d77c436a047679916304dc74547418b0d1f5853cf8a0615d78f6742bd
GET /index.html HTTP/1.1
Host: courtesy.register.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mountaintraining.net/
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Date: Tue, 06 Sep 2022 10:30:04 GMT
Server: Apache
Cache-Control: no-cache, must-revalidate
Expires: Sat, 26 Jul 1997 05:00:00 GMT
Location: https://www.register.it/pp-dr/?lang=en&a=b&host=bW91bnRhaW50cmFpbmluZy5uZXQ=
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 24
Connection: close
Content-Type: text/html
ocsp.usertrust.com/
200 OK 2.2 kB IP
Hash 62fbd8c2349bf324520fb92c9af71df9
d0cb7fe4a18861d5184382f73df692a7124d625b
c3f0506860fd8ec459ecd7e4f2dffd735f20ed00bd23f2f305359ed5990d81d9
POST / HTTP/1.1
Host: ocsp.usertrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 06 Sep 2022 10:30:04 GMT
Content-Type: application/ocsp-response
Content-Length: 2236
Connection: keep-alive
Last-Modified: Sat, 03 Sep 2022 22:12:16 GMT
Expires: Sat, 10 Sep 2022 22:12:15 GMT
Etag: "d0cb7fe4a18861d5184382f73df692a7124d625b"
Cache-Control: max-age=600217,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: HIT
Age: 1020
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 746686f81f41b503-OSL
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, ETag, Backoff, Last-Modified, Pragma, Cache-Control, Expires, Content-Type, Content-Length, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Tue, 06 Sep 2022 09:38:18 GMT
Cache-Control: max-age=3600
Expires: Tue, 06 Sep 2022 10:33:37 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 aa34a836095df9de9d246a53dd63f1d6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: jke5zpuu1Qi2fOLkj1R496B2Bp3u9dt_SazBvTghhoTrl1r5yJz3Cg==
Age: 3106
ocsp.digicert.com/
200 OK 471 B IP
Hash e8952752ad4a452a575522a7eb737217
c5554fa2af05d7a7117032b0f99352de08988346
8c182bed7bbd843774a2136823b30a4cb707e2a5386f71d01640aa3558888bf7
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3562
Cache-Control: max-age=167761
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 10:30:05 GMT
Etag: "6316ff94-1d7"
Expires: Thu, 08 Sep 2022 09:06:06 GMT
Last-Modified: Tue, 06 Sep 2022 08:06:44 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 471
ocsp.sectigo.com/
200 OK 471 B IP
Hash 850ad2aa1b79a8522a71ef7ae7762c0c
ba1d5a48688e804776f60e7ba41e07dc6b44807f
4c6a1cc90a7ecb0340aa6586ea0385d322cc702b9ab289bb5ef0c94b55474489
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 06 Sep 2022 10:30:05 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 04 Sep 2022 06:50:46 GMT
Expires: Sun, 11 Sep 2022 06:50:45 GMT
Etag: "ba1d5a48688e804776f60e7ba41e07dc6b44807f"
Cache-Control: max-age=418239,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 746686f86e88b51e-OSL
www.register.it/pp-dr/?lang=en&a=b&host=bW91bnRhaW50cmFpbmluZy5uZXQ=
200 OK 7.2 kB URL HTTP/1.1 www.register.it/pp-dr/?lang=en&a=b&host=bW91bnRhaW50cmFpbmluZy5uZXQ=
IP
ASN #39729 Register S.p.A.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1820), with CRLF, LF line terminators
Hash 3713fa2df6af487d011c2cd97ac0f212
2e3e57586e3cb5dd5698d979d15ac05539fff368
cd13298935b4c07f7051ebceab5b04cbb5d0dc8fc23e1f8c48b0d453a64fef77
GET /pp-dr/?lang=en&a=b&host=bW91bnRhaW50cmFpbmluZy5uZXQ= HTTP/1.1
Host: www.register.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://mountaintraining.net/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: frame
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Content-Type: text/html; charset=UTF-8
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Last-Modified: Thu, 17 Nov 2016 14:09:13 GMT
Link: <https://www.register.it/wp-json/>; rel="https://api.w.org/", <https://www.register.it/wp-json/wp/v2/pages/8355>; rel="alternate"; type="application/json", <https://www.register.it/?p=8355&lang=en>; rel=shortlink
Pragma: public
Strict-Transport-Security: max-age=15768000;
Content-Encoding: gzip
Content-Length: 7182
Accept-Ranges: bytes
Date: Tue, 06 Sep 2022 10:30:05 GMT
www.register.it/wp-content/plugins/bwp-minify/min/?f=wp-includes/css/dist/block-library/style.min.css,wp-content/themes/dada/style.css,wp-content/themes/dada-register-child/style.css,wp-content/themes/dada/asset/css/dadaiconfont.css,wp-content/plugins/ht-knowledge-base/css/hkb-style.css
200 OK 39 kB URL HTTP/1.1 www.register.it/wp-content/plugins/bwp-minify/min/?f=wp-includes/css/dist/block-library/style.min.css,wp-content/themes/dada/style.css,wp-content/themes/dada-register-child/style.css,wp-content/themes/dada/asset/css/dadaiconfont.css,wp-content/plugins/ht-knowledge-base/css/hkb-style.css
IP
ASN #39729 Register S.p.A.
File type Unicode text, UTF-8 text, with very long lines (29698)
Hash 764873e341ab2ebbd819666383baed48
7125e1b3f5e4096d709f731c58a379e3424b4458
afb237a525ab728d2dd2ae522f14c23c552ac8cf3aab35eee6aafe043d27dfa0
GET /wp-content/plugins/bwp-minify/min/?f=wp-includes/css/dist/block-library/style.min.css,wp-content/themes/dada/style.css,wp-content/themes/dada-register-child/style.css,wp-content/themes/dada/asset/css/dadaiconfont.css,wp-content/plugins/ht-knowledge-base/css/hkb-style.css HTTP/1.1
Host: www.register.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.register.it/pp-dr/?lang=en&a=b&host=bW91bnRhaW50cmFpbmluZy5uZXQ=
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Content-Type: text/css; charset=utf-8
Expires: Tue, 06 Sep 2022 07:33:42 GMT
Vary: Accept-Encoding
Last-Modified: Mon, 11 Jul 2022 08:52:39 GMT
Pragma: public
Strict-Transport-Security: max-age=15768000;
Cache-Control: max-age=3600, public
X-Frame-Options: SAMEORIGIN
Content-Encoding: gzip
Content-Length: 39187
Accept-Ranges: bytes
Date: Tue, 06 Sep 2022 10:30:05 GMT
code.jquery.com/jquery-migrate-1.4.0.min.js?ver=1.4.0
200 OK 3.9 kB URL HTTP/2 code.jquery.com/jquery-migrate-1.4.0.min.js?ver=1.4.0
IP
File type ASCII text, with very long lines (9535)
Hash ecc013140f61a0669d8011c3dc34eb5d
f4caefb2a7b21b44ec3198fe22c5ffa39f2a124c
20f6a81ad924e778e9a060ef4af60e024f9481e087849ca88216fdc8fe708fa0
GET /jquery-migrate-1.4.0.min.js?ver=1.4.0 HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.register.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 06 Sep 2022 10:30:05 GMT
content-encoding: gzip
content-length: 3885
content-type: application/javascript; charset=utf-8
last-modified: Fri, 20 Aug 2021 17:47:53 GMT
accept-ranges: bytes
server: nginx
etag: W/"611feac9-25a0"
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-hw: 1662460205.dop216.sk1.t,1662460205.cds244.sk1.hn,1662460205.cds212.sk1.c
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f41565238dc856269109dcc30c34c535
28517f51eb3b6cd08981afbf878446d635430741
9e314961a8fca836481ea022db365cc463bcef3b5003c63ccece611b8ff77fe6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 10:30:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
code.jquery.com/jquery-1.12.3.min.js?ver=1.12.3
200 OK 34 kB URL HTTP/2 code.jquery.com/jquery-1.12.3.min.js?ver=1.12.3
IP
File type ASCII text, with very long lines (32029)
Hash beaa31f7f88eb05cb5e5bf01ce96dc18
4556f88a741898c3b87c39f22c7dae1a19c8c23b
b9b4822df88f4e406f7533efac270146997e0fb0e5b0bd58789e63a04eeda671
GET /jquery-1.12.3.min.js?ver=1.12.3 HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.register.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 06 Sep 2022 10:30:05 GMT
content-encoding: gzip
content-length: 33773
content-type: application/javascript; charset=utf-8
last-modified: Fri, 20 Aug 2021 17:47:53 GMT
accept-ranges: bytes
server: nginx
etag: W/"611feac9-17b9c"
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-hw: 1662460205.dop216.sk1.t,1662460205.cds244.sk1.hn,1662460205.cds202.sk1.c
X-Firefox-Spdy: h2
www.register.it/_css/base_buttons.css
200 OK 3.7 kB URL HTTP/1.1 www.register.it/_css/base_buttons.css
IP
ASN #39729 Register S.p.A.
File type ASCII text, with CRLF line terminators
Hash dcaf52796622f4468439b733ee966de2
9e6c27e1bb782454eec54a3c0ab9ee45d49ccde5
45fb84ac772e0079ca28233d13331f69508b87a457f24cb46abdac63dff43775
GET /_css/base_buttons.css HTTP/1.1
Host: www.register.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.register.it/wp-content/plugins/bwp-minify/min/?f=wp-includes/css/dist/block-library/style.min.css,wp-content/themes/dada/style.css,wp-content/themes/dada-register-child/style.css,wp-content/themes/dada/asset/css/dadaiconfont.css,wp-content/plugins/ht-knowledge-base/css/hkb-style.css
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: Apache
Strict-Transport-Security: max-age=15768000;
Content-Security-Policy: frame-ancestors 'self' https://*.register.it/
Vary: X-Forwarded-Proto,Accept-Encoding
Last-Modified: Wed, 29 Jun 2022 14:18:50 GMT
ETag: "6f5ccf17-55d9-5e296d4fee680"
Content-Encoding: gzip
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET,PUT,POST,DELETE
X-Frame-Options: SAMEORIGIN
Content-Type: text/css
Content-Length: 3730
Accept-Ranges: bytes, bytes
Date: Tue, 06 Sep 2022 10:30:05 GMT
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f41565238dc856269109dcc30c34c535
28517f51eb3b6cd08981afbf878446d635430741
9e314961a8fca836481ea022db365cc463bcef3b5003c63ccece611b8ff77fe6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 10:30:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.register.it/wp-content/themes/dada/asset/js/lib/jquery.cookie.js
200 OK 1.5 kB URL HTTP/1.1 www.register.it/wp-content/themes/dada/asset/js/lib/jquery.cookie.js
IP
ASN #39729 Register S.p.A.
Hash 6cf4dd81cfb6e636470374d748f3ec63
9b8521b3f1287dbfb939c466b917094bde16fbf3
44031f5cbe2c85d10d7cb1d2fc91eb602e12658988c7a78971902521ea984a15
GET /wp-content/themes/dada/asset/js/lib/jquery.cookie.js HTTP/1.1
Host: www.register.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.register.it/pp-dr/?lang=en&a=b&host=bW91bnRhaW50cmFpbmluZy5uZXQ=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/javascript
Last-Modified: Mon, 11 Jul 2022 08:52:37 GMT
ETag: W/"62cbe4d5-c38"
Cache-Control: max-age=31536000, max-age=31536000, public
Expires: Wed, 06 Sep 2023 06:33:43 GMT
Pragma: public
Strict-Transport-Security: max-age=15768000;
X-Frame-Options: SAMEORIGIN
Content-Encoding: gzip
Content-Length: 1456
Accept-Ranges: bytes
Date: Tue, 06 Sep 2022 10:30:05 GMT
www.register.it/wp-content/plugins/bwp-minify/min/?f=wp-content/plugins/svg-support/js/min/svgs-inline-min.js,wp-content/plugins/sitepress-multilingual-cms/templates/language-switchers/legacy-dropdown/script.min.js,wp-content/themes/dada/asset/js/dada-marketing-automation.js,wp-content/themes/dada/asset/js/dada-tracking-standalone.js
200 OK 2.5 kB URL HTTP/1.1 www.register.it/wp-content/plugins/bwp-minify/min/?f=wp-content/plugins/svg-support/js/min/svgs-inline-min.js,wp-content/plugins/sitepress-multilingual-cms/templates/language-switchers/legacy-dropdown/script.min.js,wp-content/themes/dada/asset/js/dada-marketing-automation.js,wp-content/themes/dada/asset/js/dada-tracking-standalone.js
IP
ASN #39729 Register S.p.A.
File type ASCII text, with very long lines (1171)
Hash 0394fa330ca9b6e0a6ee92172678052c
2e73a630aa26d1e42c4a8871967d05a5fd674cb9
41ba577ca76842e074b27afc1f75de221b73ba4c3a7cae0adac2196c4884f952
GET /wp-content/plugins/bwp-minify/min/?f=wp-content/plugins/svg-support/js/min/svgs-inline-min.js,wp-content/plugins/sitepress-multilingual-cms/templates/language-switchers/legacy-dropdown/script.min.js,wp-content/themes/dada/asset/js/dada-marketing-automation.js,wp-content/themes/dada/asset/js/dada-tracking-standalone.js HTTP/1.1
Host: www.register.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.register.it/pp-dr/?lang=en&a=b&host=bW91bnRhaW50cmFpbmluZy5uZXQ=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/x-javascript; charset=utf-8
Expires: Tue, 06 Sep 2022 07:33:41 GMT
Vary: Accept-Encoding
Last-Modified: Mon, 11 Jul 2022 08:52:38 GMT
Pragma: public
Strict-Transport-Security: max-age=15768000;
Cache-Control: max-age=3600, public
X-Frame-Options: SAMEORIGIN
Content-Length: 2473
Accept-Ranges: bytes
Date: Tue, 06 Sep 2022 10:30:05 GMT
www.register.it/wp-content/plugins/bwp-minify/min/?f=wp-content/plugins/wpml-cms-nav/res/css/cms-navigation-base.css,wp-content/plugins/wpml-cms-nav/res/css/cms-navigation.css
200 OK 1.1 kB URL HTTP/1.1 www.register.it/wp-content/plugins/bwp-minify/min/?f=wp-content/plugins/wpml-cms-nav/res/css/cms-navigation-base.css,wp-content/plugins/wpml-cms-nav/res/css/cms-navigation.css
IP
ASN #39729 Register S.p.A.
File type ASCII text, with very long lines (362)
Hash 6fb4b8de4b09bc2a14caeebc05bfa3e5
1ae4edcd60a985b7d0bb423fe6563695ef112bba
be455cc56f746001cd449af5ffcfe40d2e9d6df8696382fb66728f2de7713a8c
GET /wp-content/plugins/bwp-minify/min/?f=wp-content/plugins/wpml-cms-nav/res/css/cms-navigation-base.css,wp-content/plugins/wpml-cms-nav/res/css/cms-navigation.css HTTP/1.1
Host: www.register.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.register.it/pp-dr/?lang=en&a=b&host=bW91bnRhaW50cmFpbmluZy5uZXQ=
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Content-Type: text/css; charset=utf-8
Expires: Tue, 06 Sep 2022 07:33:42 GMT
Vary: Accept-Encoding
Last-Modified: Mon, 11 Jul 2022 08:52:38 GMT
Pragma: public
Strict-Transport-Security: max-age=15768000;
Cache-Control: max-age=3600, public
X-Frame-Options: SAMEORIGIN
Content-Encoding: gzip
Content-Length: 1092
Accept-Ranges: bytes
Date: Tue, 06 Sep 2022 10:30:05 GMT
www.register.it/wp-content/plugins/bwp-minify/min/?f=wp-content/themes/dada/asset/js/lib/jquery.mobile.touch.js,wp-includes/js/wp-embed.min.js,wp-content/themes/dada/asset/js/dada-www.js,wp-content/themes/dada/asset/js/dada-request-collector.js,wp-content/themes/dada/asset/js/dada-language.js
200 OK 21 kB URL HTTP/1.1 www.register.it/wp-content/plugins/bwp-minify/min/?f=wp-content/themes/dada/asset/js/lib/jquery.mobile.touch.js,wp-includes/js/wp-embed.min.js,wp-content/themes/dada/asset/js/dada-www.js,wp-content/themes/dada/asset/js/dada-request-collector.js,wp-content/themes/dada/asset/js/dada-language.js
IP
ASN #39729 Register S.p.A.
File type ASCII text, with very long lines (6320)
Hash 502d2f319053702c1f8aa1fa75ef56c0
6b333ba824d2c4cb9b0eb4356eef5c99cc827472
21232688464cf7449144cf8af2d010eacfad1e2c44f823433f16daad4c3c8cf0
GET /wp-content/plugins/bwp-minify/min/?f=wp-content/themes/dada/asset/js/lib/jquery.mobile.touch.js,wp-includes/js/wp-embed.min.js,wp-content/themes/dada/asset/js/dada-www.js,wp-content/themes/dada/asset/js/dada-request-collector.js,wp-content/themes/dada/asset/js/dada-language.js HTTP/1.1
Host: www.register.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.register.it/pp-dr/?lang=en&a=b&host=bW91bnRhaW50cmFpbmluZy5uZXQ=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/x-javascript; charset=utf-8
Expires: Tue, 06 Sep 2022 07:33:51 GMT
Vary: Accept-Encoding
Last-Modified: Mon, 11 Jul 2022 08:52:39 GMT
Pragma: public
Strict-Transport-Security: max-age=15768000;
Cache-Control: max-age=3600, public
X-Frame-Options: SAMEORIGIN
Content-Length: 20999
Accept-Ranges: bytes
Date: Tue, 06 Sep 2022 10:30:05 GMT
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: U/9JQNiFOPJsBDyAD3hSnQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: C2oI2yl2VaGlNf/bS0xbs3Vi73I=
ocsp.sectigo.com/
200 OK 471 B IP
Hash a88647a5d35e79181d001fab7508650f
dfcdf1e9c6ac67bc90d666e7927b024ccf0c0c41
362ce6a693dbb8d2a0f01a09b2d9d87afae4a4f9598cd0c6673abfcb574a62dd
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 06 Sep 2022 10:30:06 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 04 Sep 2022 03:18:44 GMT
Expires: Sun, 11 Sep 2022 03:18:43 GMT
Etag: "dfcdf1e9c6ac67bc90d666e7927b024ccf0c0c41"
Cache-Control: max-age=405516,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 746686fffca2b51e-OSL
cmp.teamblue.services/js/cmp_standalone.min.js
200 OK 10 kB URL HTTP/1.1 cmp.teamblue.services/js/cmp_standalone.min.js
IP
ASN #39729 Register S.p.A.
File type HTML document, Unicode text, UTF-8 text, with very long lines (27593), with no line terminators
Hash b6aa9e6814d5a9b7c411a56c0b4eec0b
df21b54123061617e6e3d4ae568e95f9116ea8f4
e1978a9f96c8609defa0d68cc312d9da5e0e3f54931da63f9f685704ad5f377d
GET /js/cmp_standalone.min.js HTTP/1.1
Host: cmp.teamblue.services
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.register.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Tue, 06 Sep 2022 10:30:06 GMT
Content-Type: application/javascript
Last-Modified: Tue, 06 Sep 2022 07:27:55 GMT
Transfer-Encoding: chunked
Vary: Accept-Encoding
ETag: W/"6316f67b-6bca"
Expires: Mon, 05 Sep 2022 10:30:06 GMT
Cache-Control: no-cache, no-store, must-revalidate, proxy-revalidate
Pragma: no-cache
Content-Encoding: gzip
www.register.it/wp-content/uploads/2016/10/parking_Icon_02.png
200 OK 959 B URL HTTP/1.1 www.register.it/wp-content/uploads/2016/10/parking_Icon_02.png
IP
ASN #39729 Register S.p.A.
File type PNG image data, 110 x 110, 8-bit colormap, non-interlaced\012- data
Hash fcbab46186074a5da5b7020334dc2e4a
40613854806f2e746d7266c3b0b2bd5fee81ac66
2ee67eba3d4ba8702727f8b286a883b2763635f3d16cbd5341416075953f37b7
GET /wp-content/uploads/2016/10/parking_Icon_02.png HTTP/1.1
Host: www.register.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.register.it/pp-dr/?lang=en&a=b&host=bW91bnRhaW50cmFpbmluZy5uZXQ=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Content-Type: image/png
Last-Modified: Fri, 07 Oct 2016 08:43:50 GMT
ETag: "57f76046-3bf"
Cache-Control: max-age=31536000, max-age=31536000, public
Expires: Wed, 06 Sep 2023 06:33:58 GMT
Pragma: public
Strict-Transport-Security: max-age=15768000;
X-Frame-Options: SAMEORIGIN
Content-Length: 959
Accept-Ranges: bytes
Date: Tue, 06 Sep 2022 10:30:06 GMT
www.register.it/wp-content/uploads/2016/10/parking_Icon_01.png
200 OK 1.3 kB URL HTTP/1.1 www.register.it/wp-content/uploads/2016/10/parking_Icon_01.png
IP
ASN #39729 Register S.p.A.
File type PNG image data, 110 x 110, 8-bit colormap, non-interlaced\012- data
Hash 366d2ed8132f6b4ea05eb2e06bd623ce
4b1e4112d672c946a57da6d1669b155ed7274721
bab98a0bc951ea3e14b11907d25b7c8b52afac5d3b7fc818e22733c52837d601
GET /wp-content/uploads/2016/10/parking_Icon_01.png HTTP/1.1
Host: www.register.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.register.it/pp-dr/?lang=en&a=b&host=bW91bnRhaW50cmFpbmluZy5uZXQ=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Content-Type: image/png
Last-Modified: Fri, 07 Oct 2016 08:43:49 GMT
ETag: "57f76045-52d"
Cache-Control: max-age=31536000, max-age=31536000, public
Expires: Wed, 06 Sep 2023 06:33:58 GMT
Pragma: public
Strict-Transport-Security: max-age=15768000;
X-Frame-Options: SAMEORIGIN
Content-Length: 1325
Accept-Ranges: bytes
Date: Tue, 06 Sep 2022 10:30:06 GMT
www.register.it/_img/header/register.it_logo.png
200 OK 1.0 kB URL HTTP/1.1 www.register.it/_img/header/register.it_logo.png
IP
ASN #39729 Register S.p.A.
File type PNG image data, 200 x 52, 8-bit colormap, non-interlaced\012- data
Hash 32d3f7b1af99d549e6659086b7568b36
77b14e944f60c327520da309050fa29eec455576
3de0381e6599a1f075d7560a0044700ed4a98d2fb2f8c28f6a126cb123445e9e
GET /_img/header/register.it_logo.png HTTP/1.1
Host: www.register.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.register.it/pp-dr/?lang=en&a=b&host=bW91bnRhaW50cmFpbmluZy5uZXQ=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: Apache
Strict-Transport-Security: max-age=15768000;
Content-Security-Policy: frame-ancestors 'self' https://*.register.it/
Vary: X-Forwarded-Proto
Last-Modified: Tue, 09 Mar 2021 09:37:50 GMT
ETag: "6fa7fe52-40d-5bd174dc7e0b6"
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET,PUT,POST,DELETE
X-Frame-Options: SAMEORIGIN
Content-Type: image/png
Content-Length: 1037
Accept-Ranges: bytes, bytes
Date: Tue, 06 Sep 2022 10:30:06 GMT
cmp.teamblue.services/js/cmp_all.min.js?v=1.0.34
200 OK 35 kB URL HTTP/1.1 cmp.teamblue.services/js/cmp_all.min.js?v=1.0.34
IP
ASN #39729 Register S.p.A.
File type Unicode text, UTF-8 text, with very long lines (65524), with no line terminators
Hash fe83948ce452ae8f3c5e143e23b64001
e1590ac3b486400a6056ac3701a135ce5fb18b01
bdadd070c8360c6e3b805bff2bf7002842852fa3d5e93f942453f8f2e2b203eb
GET /js/cmp_all.min.js?v=1.0.34 HTTP/1.1
Host: cmp.teamblue.services
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.register.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Tue, 06 Sep 2022 10:30:06 GMT
Content-Type: application/javascript
Last-Modified: Tue, 06 Sep 2022 07:27:27 GMT
Transfer-Encoding: chunked
Vary: Accept-Encoding
ETag: W/"6316f65f-188c8"
Access-Control-Allow-Methods: DELETE, GET, HEAD, POST, PUT, OPTIONS
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, X-CSRF-TOKEN
Access-Control-Allow-Credentials: true
Content-Encoding: gzip
www.register.it/wp-includes/js/wp-emoji-release.min.js?ver=5.7.1
200 OK 5.3 kB URL HTTP/1.1 www.register.it/wp-includes/js/wp-emoji-release.min.js?ver=5.7.1
IP
ASN #39729 Register S.p.A.
File type ASCII text, with very long lines (11272)
Hash bd229439861ef80c0ca1544bec369523
2ca88131b2886b19eef9aa51a759d7a4033d3b79
9820419aa4c896ce97d9c318d7671aa5958de4445c063a1b84fa3eb9ed8fbff5
GET /wp-includes/js/wp-emoji-release.min.js?ver=5.7.1 HTTP/1.1
Host: www.register.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.register.it/pp-dr/?lang=en&a=b&host=bW91bnRhaW50cmFpbmluZy5uZXQ=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/javascript
Last-Modified: Mon, 11 Jul 2022 08:52:39 GMT
ETag: W/"62cbe4d7-3795"
Cache-Control: max-age=31536000, max-age=31536000, public
Expires: Wed, 06 Sep 2023 06:33:44 GMT
Pragma: public
Strict-Transport-Security: max-age=15768000;
X-Frame-Options: SAMEORIGIN
Content-Encoding: gzip
Content-Length: 5269
Accept-Ranges: bytes
Date: Tue, 06 Sep 2022 10:30:06 GMT
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash bcbb9bf29f1e0acaa7ac6d6566381370
dec1bea642dffbc11ebd6d65c94f87d6db95703a
b2bf22379151923244cbb9bd62499ded7b6f313a7db77914383bc1e704dd65de
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 10:30:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 0b9528d0aa584b0e7b8b95f31ec1c4ed
79afabc0856f6fb3c3e5a9f5675cb0a40ee08e54
2604edd5743acd1487c25665444019555a972492010c10bf3bd6aefeab4661eb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 10:30:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/sourcesanspro/v21/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2
200 OK 13 kB URL HTTP/2 fonts.gstatic.com/s/sourcesanspro/v21/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 12956, version 1.0\012- data
Hash 1c772d9d0531b187db80bcfc199c1786
c0c04fb334190e10dffed0dcc5c817c2a6041a15
122854df4f39cf922db317714c2ff0eccab27a1028c14a5aa2211f48b7e0eade
GET /s/sourcesanspro/v21/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.register.it
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 12956
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 31 Aug 2022 19:28:29 GMT
expires: Thu, 31 Aug 2023 19:28:29 GMT
cache-control: public, max-age=31536000
age: 486097
last-modified: Wed, 27 Apr 2022 16:54:52 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
maxcdn.bootstrapcdn.com/bootstrap/3.3.6/css/bootstrap.min.css
200 OK 38 kB URL HTTP/2 maxcdn.bootstrapcdn.com/bootstrap/3.3.6/css/bootstrap.min.css
IP
File type ASCII text, with very long lines (65371)
Hash a5d94b793b300db40fffc5d3bbd91cef
29d7a4215593d05a346d1b0ea5b2a53df3046635
ad145d15c5750964da0da9a8352154ae6f7dee0f1c8dced5424968db8c4a0860
GET /bootstrap/3.3.6/css/bootstrap.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.register.it/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 06 Sep 2022 10:30:05 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"2f624089c65f12185e79925bc5a7fc42"
last-modified: Mon, 25 Jan 2021 22:03:59 GMT
cdn-cachedat: 02/17/2022 20:27:53
cdn-proxyver: 1.02
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 860
cdn-status: 200
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-requestid: 441a5c346e6138207e493340368ec0b9
cdn-cache: HIT
cf-cache-status: HIT
age: 7906566
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 746686fa495fb518-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.googletagmanager.com/gtm.js?id=GTM-WH9LDRH
200 OK 44 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-WH9LDRH
IP
File type ASCII text, with very long lines (1615)
Hash 9e0567e1be94099e4b6983415d8c4c13
013f562132065543a2fcaf6881574777d6561a00
aef0969e12355a2dc07dbd55e4e4c2bf347006ba62469496e80f39df31bbdffa
GET /gtm.js?id=GTM-WH9LDRH HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.register.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 06 Sep 2022 10:30:06 GMT
expires: Tue, 06 Sep 2022 10:30:06 GMT
cache-control: private, max-age=900
last-modified: Tue, 06 Sep 2022 09:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 44327
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 0b9528d0aa584b0e7b8b95f31ec1c4ed
79afabc0856f6fb3c3e5a9f5675cb0a40ee08e54
2604edd5743acd1487c25665444019555a972492010c10bf3bd6aefeab4661eb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 10:30:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
maxcdn.bootstrapcdn.com/font-awesome/4.4.0/css/font-awesome.min.css
200 OK 19 kB URL HTTP/2 maxcdn.bootstrapcdn.com/font-awesome/4.4.0/css/font-awesome.min.css
IP
File type ASCII text, with very long lines (26548)
Hash 6e1f573862ba1a8fc353643a61ca43df
6d96a96da9b970079e5206849700b07c4a495225
36c66cb4128e0388fbc178754c29ddef7723ff3f352b0da5c3bf402c95754d91
GET /font-awesome/4.4.0/css/font-awesome.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.register.it/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 06 Sep 2022 10:30:05 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
last-modified: Mon, 25 Jan 2021 22:04:54 GMT
cdn-cachedat: 12/13/2021 21:25:06
cdn-proxyver: 1.02
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 632
cdn-status: 200
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-requestid: 8ac87b10825a6871d9cd076fc3a23e4f
cdn-cache: HIT
cf-cache-status: HIT
age: 7906957
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 746686fa697ab518-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.register.it/wp-content/uploads/2016/10/CrossBanner_website_001.jpg
200 OK 176 kB URL HTTP/1.1 www.register.it/wp-content/uploads/2016/10/CrossBanner_website_001.jpg
IP
ASN #39729 Register S.p.A.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1600x600, components 3\012- data
Size 176 kB (176279 bytes)
Hash 4533ea3eb3798a43cfbcb51ab00ff10d
f054d9e99fe3fa282f59f7f01a3576d0478f0696
288c6793b3bc4a1a0cbdbac39575240b4658b272a098551593e62add15a406b1
GET /wp-content/uploads/2016/10/CrossBanner_website_001.jpg HTTP/1.1
Host: www.register.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.register.it/pp-dr/?lang=en&a=b&host=bW91bnRhaW50cmFpbmluZy5uZXQ=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Content-Type: image/jpeg
Last-Modified: Fri, 07 Oct 2016 09:39:32 GMT
ETag: "57f76d54-2b097"
Cache-Control: max-age=31536000, max-age=31536000, public
Expires: Wed, 06 Sep 2023 06:34:10 GMT
Pragma: public
Strict-Transport-Security: max-age=15768000;
X-Frame-Options: SAMEORIGIN
Content-Length: 176279
Accept-Ranges: bytes
Date: Tue, 06 Sep 2022 10:30:06 GMT
ocsp.sectigo.com/
200 OK 471 B IP
Hash 7e61cc7d7a2b12de018534331ab08503
e028918a2d8479b778c2e246e2ae8b410cf970cc
a428770e75df8d92af759bd3e7c2881d72b724cee4003461586b7354a5457d00
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 06 Sep 2022 10:30:06 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Mon, 05 Sep 2022 10:07:11 GMT
Expires: Mon, 12 Sep 2022 10:07:10 GMT
Etag: "e028918a2d8479b778c2e246e2ae8b410cf970cc"
Cache-Control: max-age=516423,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 746687021fffb51e-OSL
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 0b9528d0aa584b0e7b8b95f31ec1c4ed
79afabc0856f6fb3c3e5a9f5675cb0a40ee08e54
2604edd5743acd1487c25665444019555a972492010c10bf3bd6aefeab4661eb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 10:30:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash bcbb9bf29f1e0acaa7ac6d6566381370
dec1bea642dffbc11ebd6d65c94f87d6db95703a
b2bf22379151923244cbb9bd62499ded7b6f313a7db77914383bc1e704dd65de
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 10:30:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
consent.cookiebot.com/uc.js?v=1.0.34
200 OK 31 kB URL HTTP/2 consent.cookiebot.com/uc.js?v=1.0.34
IP
ASN #20940 Akamai International B.V.
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (65499)
Hash bfd5d0da3a9fa6771af0a51a693752ba
89714adfe7ccb0273694a820f1987ea9a64fdac8
25aef9f0356f966fa85489dc0252fc78179bf3900a654f0a2d521a651df1cd4a
GET /uc.js?v=1.0.34 HTTP/1.1
Host: consent.cookiebot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.register.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-encoding: gzip
last-modified: Tue, 23 Aug 2022 07:31:36 GMT
accept-ranges: bytes
etag: "aeea9f60c2b6d81:0"
vary: Accept-Encoding
request-context: appId=cid-v1:89f47f4b-bed0-4db8-956b-d6e6dfac3fef
access-control-expose-headers: Request-Context
content-length: 31207
cache-control: public, max-age=770
expires: Tue, 06 Sep 2022 10:42:56 GMT
date: Tue, 06 Sep 2022 10:30:06 GMT
X-Firefox-Spdy: h2
trk.register.it/js/skeletor.js
200 OK 14 kB URL HTTP/1.1 trk.register.it/js/skeletor.js
IP
ASN #39729 Register S.p.A.
File type HTML document, Unicode text, UTF-8 text, with very long lines (38726), with no line terminators
Hash 7309cae2114d87a840a5915413bf4028
5dc0c65003b63cbbbb56479af0c9ba7c92583470
409d730cde8aa12c6046c7a9b80a36a4aeacba51e86fb152159884d5b6fb6fc1
GET /js/skeletor.js HTTP/1.1
Host: trk.register.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.register.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Date: Tue, 06 Sep 2022 10:30:06 GMT
Content-Type: application/javascript
Last-Modified: Sat, 06 Aug 2022 21:35:04 GMT
Transfer-Encoding: chunked
Vary: Accept-Encoding
ETag: W/"62eede88-9747"
Expires: Mon, 05 Sep 2022 10:30:06 GMT
Cache-Control: no-cache, no-store, must-revalidate, proxy-revalidate
Pragma: no-cache
Content-Encoding: gzip
consentcdn.cookiebot.com/sdk/bc-v4.min.html
200 OK 392 B URL HTTP/2 consentcdn.cookiebot.com/sdk/bc-v4.min.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (627), with no line terminators
Hash e7268eccad39bd651697fa793a52cc5c
47299cefa2397b0c1d0c5bf232390a5cf1bcc4d3
907e16c84d35556e4ed841a3511915e6d4bb4e9d68cfca178a740e90b4d80e35
GET /sdk/bc-v4.min.html HTTP/1.1
Host: consentcdn.cookiebot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.register.it/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-type: text/html
etag: "3d08665fa4c7bcf9fa2dcbbc7efe1d0f:1649057029.895163"
last-modified: Mon, 04 Apr 2022 07:23:49 GMT
server: AkamaiNetStorage
x-akamai-transformed: 9 - 0 pmb=mRUM,1
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=31175407
expires: Sat, 02 Sep 2023 06:20:13 GMT
date: Tue, 06 Sep 2022 10:30:06 GMT
content-length: 392
server-timing: cdn-cache; desc=HIT, edge; dur=1
X-Firefox-Spdy: h2
consentcdn.cookiebot.com/consentconfig/614a70ff-bada-428c-a96c-a9c09ca10db5/state.js
200 OK 50 B URL HTTP/2 consentcdn.cookiebot.com/consentconfig/614a70ff-bada-428c-a96c-a9c09ca10db5/state.js
IP
File type ASCII text, with no line terminators
Hash 11162cf300c563c78b68778aba71c14b
61a397c20a7867448b1beda7a314a298555862b8
aa5aeeb724c2185d46aed9abd8a3cf57c1e0399a90deb7c69ebcf2b36b04d9aa
GET /consentconfig/614a70ff-bada-428c-a96c-a9c09ca10db5/state.js HTTP/1.1
Host: consentcdn.cookiebot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.register.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "8fabfd3bb9b067b11ad664181b30fa66:1598581020.828199"
last-modified: Fri, 28 Aug 2020 02:17:00 GMT
server: AkamaiNetStorage
content-encoding: gzip
content-length: 50
cache-control: max-age=70003
expires: Wed, 07 Sep 2022 05:56:49 GMT
date: Tue, 06 Sep 2022 10:30:06 GMT
vary: Accept-Encoding
server-timing: cdn-cache; desc=HIT, edge; dur=1
X-Firefox-Spdy: h2
trk.register.it/js/he-man_all.min.js?v=2.1.8&ma=ma_enabled
200 OK 70 kB URL HTTP/1.1 trk.register.it/js/he-man_all.min.js?v=2.1.8&ma=ma_enabled
IP
ASN #39729 Register S.p.A.
File type HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (65504), with no line terminators
Hash 84aabc5b12de5d4ecc3ae7c553e8c1d7
3c5187c93e63aec8f2368dd1e7571c1b5c3cbd61
fa73257bde742db7f4ea81061e0247cea52036b84ba241ec336b88b960bd5fc4
GET /js/he-man_all.min.js?v=2.1.8&ma=ma_enabled HTTP/1.1
Host: trk.register.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.register.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Date: Tue, 06 Sep 2022 10:30:06 GMT
Content-Type: application/javascript
Last-Modified: Sat, 06 Aug 2022 21:35:04 GMT
Transfer-Encoding: chunked
Vary: Accept-Encoding
ETag: W/"62eede88-2f9cc"
Access-Control-Allow-Methods: DELETE, GET, HEAD, POST, PUT, OPTIONS
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, X-CSRF-TOKEN, X-XSRF-TOKEN
Access-Control-Allow-Credentials: true
Content-Encoding: gzip
ocsp.sectigo.com/
200 OK 472 B IP
Hash 59cdb01cff0b93f7ce80a93b3b857359
417d00e45d2405433f95b5b26b6a2c6828444090
7a590aca0c131e4f11952ae4cb73a558ff1b01b03521b877299c03f06d8dbe7e
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 06 Sep 2022 10:30:06 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Mon, 05 Sep 2022 11:41:41 GMT
Expires: Mon, 12 Sep 2022 11:41:40 GMT
Etag: "417d00e45d2405433f95b5b26b6a2c6828444090"
Cache-Control: max-age=522093,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 74668702a8f3b51e-OSL
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash bc70b1691dd339e8120b92ba393ffb69
99118be3645b3182ccdc5f9da149a97c220a3929
da94f53f998808b2b187d6c265722e95e4cdce9f0a4b23ff0bf6c96d2cdf2bd8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DA94F53F998808B2B187D6C265722E95E4CDCE9F0A4B23FF0BF6C96D2CDF2BD8"
Last-Modified: Mon, 05 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5626
Expires: Tue, 06 Sep 2022 12:03:52 GMT
Date: Tue, 06 Sep 2022 10:30:06 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash bc70b1691dd339e8120b92ba393ffb69
99118be3645b3182ccdc5f9da149a97c220a3929
da94f53f998808b2b187d6c265722e95e4cdce9f0a4b23ff0bf6c96d2cdf2bd8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DA94F53F998808B2B187D6C265722E95E4CDCE9F0A4B23FF0BF6C96D2CDF2BD8"
Last-Modified: Mon, 05 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5626
Expires: Tue, 06 Sep 2022 12:03:52 GMT
Date: Tue, 06 Sep 2022 10:30:06 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F803e9506-f3ea-4e09-a966-608b8dabf3b0.jpeg
200 OK 8.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F803e9506-f3ea-4e09-a966-608b8dabf3b0.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5540d72831e7e7b9fc287f92c48d9f5e
ec19429fa76d9ad47a0578734b011b530b79ebbf
bc27a44853fd17cf51d6bba0db58a755c75a309d9b0cbcd454dfc9d62785f72f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F803e9506-f3ea-4e09-a966-608b8dabf3b0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8134
x-amzn-requestid: 1b2ece5c-784c-4c14-a760-c43d697b1abf
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X7FSEE2CIAMFvgw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63144f40-2243fc211a76c7e404710c7c;Sampled=0
x-amzn-remapped-date: Sun, 04 Sep 2022 07:09:52 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: f2bMA3sdC6qxijseKXb53WMncdjInfvh-lVvr0W69sgaHEHKCNvLMQ==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 1b74ccf4cb51eacf97a0e6d60ae46a3e.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Sep 2022 07:25:52 GMT
age: 11054
etag: "ec19429fa76d9ad47a0578734b011b530b79ebbf"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F404ac7e7-f8ba-4b04-b736-5cab0995739f.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F404ac7e7-f8ba-4b04-b736-5cab0995739f.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8a5ed2a9c430f2f02da773c400d096e0
618252c5082ccfeeb8bc92aecba4485c48ac4206
948158a29f15f5f5ab45f541b665269d43bfc1e3b444ee4ecb9ba715d5b616d8
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F404ac7e7-f8ba-4b04-b736-5cab0995739f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11003
x-amzn-requestid: 29b9c3bc-4b10-44ed-9bc0-111a672c1d25
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XqpJpGjxoAMFzSw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-630dbbd7-1547b64d2fc3052e510f6218;Sampled=0
x-amzn-remapped-date: Tue, 30 Aug 2022 07:27:19 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: TGpnDyF8_8hy5bs5denuqKSMzLl98Oz7YHx4MAOMr_Ah-POktYDXSA==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 ebe4011a81a36e2bf678f69ce1711330.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Sep 2022 09:39:22 GMT
age: 3044
etag: "618252c5082ccfeeb8bc92aecba4485c48ac4206"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F228f042c-3a57-45c7-84c2-4aaaa1dd2f07.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F228f042c-3a57-45c7-84c2-4aaaa1dd2f07.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 19b452d6541a6028e7d3f90529477077
1c16eb50bc2490b4ebff6775ef611fdcb282f9f9
f4763a0f464067991c2c484c384df4fe791d7df6e3d6ad15650a954db537249f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F228f042c-3a57-45c7-84c2-4aaaa1dd2f07.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10694
x-amzn-requestid: c3d2f71c-927d-41f6-93ab-bf041374a9f1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YAWsgHQOIAMFvSA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63166b1c-5d2efd595cdf300972f4fb79;Sampled=0
x-amzn-remapped-date: Mon, 05 Sep 2022 21:33:16 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: eikhT8BkN5e163S6QriQybdyPNTKDTf3BCsHifNwfBJfrWv7LqgL8Q==
via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 cd64decb1403270c914848213601a674.cloudfront.net (CloudFront), 1.1 google
date: Mon, 05 Sep 2022 22:06:45 GMT
age: 44601
etag: "1c16eb50bc2490b4ebff6775ef611fdcb282f9f9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
maxcdn.bootstrapcdn.com/bootstrap/3.3.6/js/bootstrap.min.js?ver=3.3.6
200 OK 20 kB URL HTTP/2 maxcdn.bootstrapcdn.com/bootstrap/3.3.6/js/bootstrap.min.js?ver=3.3.6
IP
File type ASCII text, with very long lines (32003)
Hash ee1909ef1534b7c467481696b234f74b
e0712c660e282a48238edfbbb73b581e8319231e
f885512ba51f3ccc598b07e7918b5fbd7af85560ce1ee88828dacb83855ed183
GET /bootstrap/3.3.6/js/bootstrap.min.js?ver=3.3.6 HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.register.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 06 Sep 2022 10:30:05 GMT
content-type: application/javascript; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: SE
cdn-edgestorageid: 722, 617, 617
last-modified: Mon, 25 Jan 2021 22:03:59 GMT
cdn-cachedat: 2021-04-23 06:42:07
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cache-control: public, max-age=31919000
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
x-content-type-options: nosniff
cdn-requestid: 5422960a90bb1006ff10e717d3a4f5cf
cdn-cache: HIT
cf-cache-status: HIT
age: 11769940
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 746686fa5961b518-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F106059e1-95ed-4ffb-b6d2-7b4f160333ed.jpeg
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F106059e1-95ed-4ffb-b6d2-7b4f160333ed.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ec466c0d472e43c11d36bf6fce068205
720d3624a76d060b8e2699e9aa7a320e3efd4878
5553fc24713aae808f5ab81671551b0ae719435f3ced9f25df97d8edf6bfe86f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F106059e1-95ed-4ffb-b6d2-7b4f160333ed.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12683
x-amzn-requestid: 6127e5b6-72f6-40df-b400-41a1f147f6da
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Xz8XmEe0IAMFQDA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63117430-2b27a2683d2d320172cef32e;Sampled=0
x-amzn-remapped-date: Fri, 02 Sep 2022 03:10:40 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Mj_IT5g7hGu2AunKK7mvierv5BQ8cAxhnbGaUNsL6hRNu6MRAzIBDw==
via: 1.1 56c69262ecfa7873b40572ba8a323242.cloudfront.net (CloudFront), 1.1 4f3feb5c4393987d42d1971d404d7cea.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Sep 2022 04:31:02 GMT
age: 21544
etag: "720d3624a76d060b8e2699e9aa7a320e3efd4878"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc4b02d0f-9da0-42dc-a234-02e974e7d286.jpeg
200 OK 7.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc4b02d0f-9da0-42dc-a234-02e974e7d286.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8c23179b2131543088771e3fa84ff231
ae50ae4aecd962b698c19f2863857b51cea7fcec
660900ca69b1787a734c1dbe3d6b9b19656912b4bc4715964c4325edff57f008
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc4b02d0f-9da0-42dc-a234-02e974e7d286.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7855
x-amzn-requestid: d7c8054c-d7d3-4b76-815d-36c3a2e1f6a4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YAYn6FwzoAMF40g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63166e32-3ededbf27f83503978e0d775;Sampled=0
x-amzn-remapped-date: Mon, 05 Sep 2022 21:46:26 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: QFEoJOq9eyhQH3KTlAB_ctOvGWRfAkPMHiZUa34wae07KaezXFodBg==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 d01e7742f82df0bbc1fb681d709ed69c.cloudfront.net (CloudFront), 1.1 google
date: Mon, 05 Sep 2022 21:57:14 GMT
age: 45172
etag: "ae50ae4aecd962b698c19f2863857b51cea7fcec"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
controlpanel.register.it/remote/sessionRemoteData.html
200 OK 95 B URL HTTP/1.1 controlpanel.register.it/remote/sessionRemoteData.html
IP
ASN #39729 Register S.p.A.
File type JSON data\012- , ASCII text, with no line terminators
Hash f997d9dfcb371be579fdc40fd21d24b3
ba0eea2e573219893d12fb48a0f4a394873bbf76
c94f7e41ba43ce0e2bdb4ff911a743b946ea177cd33595881a41613a61e17fb0
POST /remote/sessionRemoteData.html HTTP/1.1
Host: controlpanel.register.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Content-Length: 53
Origin: https://www.register.it
Connection: keep-alive
Referer: https://www.register.it/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: Apache
Strict-Transport-Security: max-age=15768000;
Content-Security-Policy: frame-ancestors 'self' https://*.register.it/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Access-Control-Allow-Origin: https://www.register.it
Access-Control-Allow-Headers: X-Requested-With, Content-Type
Set-Cookie: dpsid=itiu5j3s5bc42ppg03al4h8s52; path=/; domain=register.it; secure; HttpOnly
cpLanguage=eng; path=/; domain=register.it
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET,PUT,POST,DELETE
X-Frame-Options: SAMEORIGIN
Content-Type: text/html; charset=ISO-8859-1
Content-Length: 95
Accept-Ranges: bytes
Date: Tue, 06 Sep 2022 10:30:06 GMT
trk.register.it/server/he-man_server?tkq=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
200 OK 0 B URL HTTP/1.1 trk.register.it/server/he-man_server?tkq=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
IP
ASN #39729 Register S.p.A.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /server/he-man_server?tkq=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 HTTP/1.1
Host: trk.register.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.register.it/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Date: Tue, 06 Sep 2022 10:30:06 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Set-Cookie: _wicasa=JSON_eyJjaWQiOiI1OWI5YTU0MjQ0N2E5NGQyNGJlYjgwMjUwZWJlZmUzOCIsImNrdGltZSI6IjE2NjI0NjAyMDYiLCJzY3AiOiIxIiwicGsiOiJSMDEiLCJja2Jvcm4iOiIxNjYyNDYwMjA2IiwibGFzdHJlZiI6Ind3dy5yZWdpc3Rlci5pdFwvcHAtZHJcLyIsImxhc3Rkb21zcmMiOiIiLCJpc2NsaSI6IjAifQ%3D%3D; expires=Mon, 05-Dec-2022 10:30:06 GMT; Max-Age=7776000; path=/; Secure; SameSite=None; domain=register.it
_ashkii=JSON_eyJzaWQiOiI1OWI5YTU0MjQ0N2E5NGQyNGJlYjgwMjUwZWJlZmUzOCIsImNrdGltZSI6IjE2NjI0NjAyMDYiLCJzc3AiOiIxIiwicHAiOiJSMDEifQ%3D%3D; path=/; Secure; SameSite=None; domain=register.it
cookid=59b9a542447a94d24beb80250ebefe38; expires=Mon, 05-Dec-2022 10:30:06 GMT; Max-Age=7776000; path=/; Secure; SameSite=None; domain=register.it
dbmFP=59b9a542447a94d24beb80250ebefe38.R01; expires=Mon, 05-Dec-2022 10:30:06 GMT; Max-Age=7776000; path=/; Secure; SameSite=None; domain=register.it
dbmPK=59b9a542447a94d24beb80250ebefe38.R01; expires=Mon, 05-Dec-2022 10:30:06 GMT; Max-Age=7776000; path=/; Secure; SameSite=None; domain=register.it
Access-Control-Allow-Methods: DELETE, GET, HEAD, POST, PUT, OPTIONS
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, X-CSRF-TOKEN, X-XSRF-TOKEN
Access-Control-Allow-Credentials: true
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 56f5d7f608e25d64207135f045f988cb
901eb59372ae330ae85e1384da93479b21ae1082
1910daea79e5a9d04829a91e432dfa56f45a80a3e14a8cf667fec73af9fd3d29
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.register.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20006
date: Tue, 06 Sep 2022 08:41:12 GMT
expires: Tue, 06 Sep 2022 10:41:12 GMT
cache-control: public, max-age=7200
age: 6534
last-modified: Wed, 13 Apr 2022 21:02:38 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
static.zdassets.com/ekr/asset_composer.js
200 OK 6.2 kB URL HTTP/2 static.zdassets.com/ekr/asset_composer.js
IP
File type ASCII text, with very long lines (23416), with no line terminators
Hash 2adcf6c05fc0cb4ff1ac639ea4609bea
88523abd448ea9f0415d00ad1562b61615a13a66
5f951dbba0a282a996e74db4ad9eeb964f6501b6016dc707ee43d20cc9d8f0a4
GET /ekr/asset_composer.js HTTP/1.1
Host: static.zdassets.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.register.it/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 06 Sep 2022 10:30:06 GMT
content-type: application/javascript
x-amz-id-2: dUZfshkH6s6HIQA7+U0tDhX+A5i1VSOF0AP1wrYwttudGl3FDx99SpKMnalxiwyFmxN4PZcqRnA=
x-amz-request-id: Y9E1NT7ZVNF7R3ZX
x-amz-replication-status: COMPLETED
last-modified: Thu, 28 Jul 2022 23:44:02 GMT
etag: W/"5cae6ce528dce0c327b2bcbaad459fdb"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=3600, s-maxage=60
x-amz-version-id: 57KHzv0Z81imwMa0XxScJAmcLiHhq1Ku
cf-cache-status: HIT
age: 23
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=AeZ1DFJWEabTMGnk9PJ2cORYSXengb7xe4CI7EacuVLdARY4TFZNjtuU6HbbVt%2FlulqdvOmperI%2BJeV7vUoUfwNPppDv8TmoH%2Bbhjc6BjnY7nKbu9q2D5IuRe7czK7SEJ0xX4nY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 746687059ee6fac4-OSL
content-encoding: br
X-Firefox-Spdy: h2
v2.zopim.com/w?1nREZe3eBKGk19UW3qKkVx3rFZD43UKO
302 Found 0 B URL HTTP/2 v2.zopim.com/w?1nREZe3eBKGk19UW3qKkVx3rFZD43UKO
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /w?1nREZe3eBKGk19UW3qKkVx3rFZD43UKO HTTP/1.1
Host: v2.zopim.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.register.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Tue, 06 Sep 2022 10:30:07 GMT
content-type: application/octet-stream
content-length: 0
location: https://v2.zopim.com/bin/v/widget_v2.334.js
etag: "62e9bace-0"
expires: Tue, 06 Sep 2022 14:30:07 GMT
cache-control: max-age=14400, max-age=14400, public, must-revalidate, proxy-revalidate
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 746687075c7fb523-OSL
X-Firefox-Spdy: h2
trk.register.it/messages/he-man_messages?tke=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
200 OK 0 B URL HTTP/1.1 trk.register.it/messages/he-man_messages?tke=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
IP
ASN #39729 Register S.p.A.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /messages/he-man_messages?tke=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 HTTP/1.1
Host: trk.register.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.register.it/
Cookie: _wicasa=JSON_eyJjaWQiOiI1OWI5YTU0MjQ0N2E5NGQyNGJlYjgwMjUwZWJlZmUzOCIsImNrdGltZSI6IjE2NjI0NjAyMDYiLCJzY3AiOiIxIiwicGsiOiJSMDEiLCJja2Jvcm4iOiIxNjYyNDYwMjA2IiwibGFzdHJlZiI6Ind3dy5yZWdpc3Rlci5pdFwvcHAtZHJcLyIsImxhc3Rkb21zcmMiOiIiLCJpc2NsaSI6IjAifQ%3D%3D; _ashkii=JSON_eyJzaWQiOiI1OWI5YTU0MjQ0N2E5NGQyNGJlYjgwMjUwZWJlZmUzOCIsImNrdGltZSI6IjE2NjI0NjAyMDYiLCJzc3AiOiIxIiwicHAiOiJSMDEifQ%3D%3D; cookid=59b9a542447a94d24beb80250ebefe38; dbmFP=59b9a542447a94d24beb80250ebefe38.R01; dbmPK=59b9a542447a94d24beb80250ebefe38.R01
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Date: Tue, 06 Sep 2022 10:30:07 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Access-Control-Allow-Methods: DELETE, GET, HEAD, POST, PUT, OPTIONS
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, X-CSRF-TOKEN, X-XSRF-TOKEN
Access-Control-Allow-Credentials: true
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 12ef7295ae83f7d37c08d2fb56805c6e
cf098fc98d94cbe256d1343012683a7b20a84409
27488486bb84a5020b1235746827a2e2d232bb313d81725e703752820c01536f
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Tue, 06 Sep 2022 10:30:07 GMT
Last-Modified: Tue, 06 Sep 2022 08:59:10 GMT
Server: ECS (nyb/1D0E)
X-Cache: Miss from cloudfront
Via: 1.1 5de23153ac267c206221751e1cccb6e8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: R7EqGYpsrBVPgIsdpjsHoOgd3XtOTXTHvTduFRuBpy6Fe5OVacpMzg==
Age: 5457
widget-mediator.zopim.com/s/W/ws/c1yMv3kLy2MpP4Pq/c/1662460202134
101 Switching Protocols 0 B URL HTTP/1.1 widget-mediator.zopim.com/s/W/ws/c1yMv3kLy2MpP4Pq/c/1662460202134
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s/W/ws/c1yMv3kLy2MpP4Pq/c/1662460202134 HTTP/1.1
Host: widget-mediator.zopim.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://www.register.it
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: QVAR6dEmlLO22Y8UPL6bxg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Date: Tue, 06 Sep 2022 10:30:07 GMT
Connection: upgrade
Set-Cookie: AWSALB=TGcixvY61QUMLAeNtrC2d/XDFWf5E6TwGEC2B4uV1jE7K+SJ1keftLvCbFKP1d6YdDbTDZkl3U8NOPoBmxXHsniKG3TZxRUaukJiO3co1tkqFy35VY8cmTZx0pXX; Expires=Tue, 13 Sep 2022 10:30:07 GMT; Path=/
AWSALBCORS=TGcixvY61QUMLAeNtrC2d/XDFWf5E6TwGEC2B4uV1jE7K+SJ1keftLvCbFKP1d6YdDbTDZkl3U8NOPoBmxXHsniKG3TZxRUaukJiO3co1tkqFy35VY8cmTZx0pXX; Expires=Tue, 13 Sep 2022 10:30:07 GMT; Path=/; SameSite=None; Secure
Upgrade: websocket
Sec-WebSocket-Accept: S2hOWUvQGo9X+Q5YQ8HtBBCzWQs=
Sec-WebSocket-Version: 13
WebSocket-Server: uWebSockets
v2.zopim.com/widget/images/avatar_simple_visitor.png
200 OK 638 B URL HTTP/2 v2.zopim.com/widget/images/avatar_simple_visitor.png
IP
File type PNG image data, 64 x 64, 8-bit gray+alpha, non-interlaced\012- data
Hash 3fac65d78e7f62804a6ca574c2a3bbd9
2baeb6d302f26c89e6265dd648868c8247561597
59b0b341f2377d03855e6151484cc22019c58f997a11577715121d710fd2386c
GET /widget/images/avatar_simple_visitor.png HTTP/1.1
Host: v2.zopim.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.register.it/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 06 Sep 2022 10:30:08 GMT
content-type: image/png
content-length: 638
cache-control: public, max-age=604800
cf-bgj: imgq:100,h2pri
cf-polished: origSize=1922
etag: "58b8006b-782"
expires: Tue, 13 Sep 2022 10:30:08 GMT
last-modified: Thu, 02 Mar 2017 11:22:19 GMT
cf-cache-status: HIT
age: 23366
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7466870c8d1fb523-OSL
X-Firefox-Spdy: h2
v2.zopim.com/bin/v/widget_v2.334.js
200 OK 0 B URL HTTP/2 v2.zopim.com/bin/v/widget_v2.334.js
IP
GET /bin/v/widget_v2.334.js HTTP/1.1
Host: v2.zopim.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.register.it/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 06 Sep 2022 10:30:07 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Wed, 27 Jul 2022 03:35:19 GMT
vary: Accept-Encoding
etag: W/"62e0b277-10301f"
expires: Fri, 03 Sep 2032 10:30:07 GMT
cache-control: public, max-age=315360000
content-encoding: gzip
cf-cache-status: HIT
age: 23350
server: cloudflare
cf-ray: 74668707fd53b523-OSL
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Source+Sans+Pro:300,400,600,300italic,400italic
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Source+Sans+Pro:300,400,600,300italic,400italic
IP
GET /css?family=Source+Sans+Pro:300,400,600,300italic,400italic HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.register.it/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 06 Sep 2022 10:30:05 GMT
date: Tue, 06 Sep 2022 10:30:05 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
v2.zopim.com/?1nREZe3eBKGk19UW3qKkVx3rFZD43UKO
302 Found 0 B URL HTTP/2 v2.zopim.com/?1nREZe3eBKGk19UW3qKkVx3rFZD43UKO
IP
GET /?1nREZe3eBKGk19UW3qKkVx3rFZD43UKO HTTP/1.1
Host: v2.zopim.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.register.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Tue, 06 Sep 2022 10:30:06 GMT
location: https://static.zdassets.com/ekr/asset_composer.js
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
vary: Accept-Encoding
server: cloudflare
cf-ray: 746687051938b523-OSL
X-Firefox-Spdy: h2
ekr.zdassets.com/compose/zopim_chat/1nREZe3eBKGk19UW3qKkVx3rFZD43UKO
200 OK 0 B URL HTTP/2 ekr.zdassets.com/compose/zopim_chat/1nREZe3eBKGk19UW3qKkVx3rFZD43UKO
IP
GET /compose/zopim_chat/1nREZe3eBKGk19UW3qKkVx3rFZD43UKO HTTP/1.1
Host: ekr.zdassets.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.register.it
Connection: keep-alive
Referer: https://www.register.it/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 06 Sep 2022 10:30:07 GMT
content-type: application/json; charset=utf-8
status: 200 OK
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-expose-headers:
access-control-max-age: 7200
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-download-options: noopen
x-permitted-cross-domain-policies: none
referrer-policy: strict-origin-when-cross-origin
cache-control: max-age=600, public, s-maxage=60, stale-while-revalidate=600, stale-if-error=3600
etag: W/"36b205528726fd656865d0877eb70788"
x-request-id: 9f1a3922e284c7fb7f77dba9ef37ffa8, 9f1a3922e284c7fb7f77dba9ef37ffa8
x-runtime: 0.004701
vary: Origin, Accept-Encoding
x-zendesk-zorg: yes
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iMppmt6CBZP96rAZ9wScE8vJBMwSEhlUICCnMBWlA2kY2rBjdNGzo%2Fb%2BtK2grYsUWItePMB%2BtLxRKQyXL3OVbBtpMykOE1mYdUCr4RLEnAXVbcrkqaofquHyZ9FpGKywM84%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 746687061b1cb524-OSL
content-encoding: br
X-Firefox-Spdy: h2
195.110.124.133
142.250.74.3
104.18.72.113
3.123.209.152
93.184.220.29
23.36.77.32
2.22.31.91