firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 2d12f67fe57a87e7366b662d153a5582
d7b02d81cc74f24a251d9363e0f4b0a149264ec1
73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Alert, Backoff, Retry-After, Content-Length
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Fri, 23 Sep 2022 00:14:06 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: gYq4ggei61L0WKKRSjNEzkL9Fzh5VG4253-qazJKZf__TqfAMwcWNw==
Age: 1099
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a26d0784548ecab22f417f3d689daf23
8893b79366bbadeb5c8d587b8f023e310694df1c
35baaae7b3ce3110ebb2b075881cfab55ecf3eab57d834283fd18ac691b41fa2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "35BAAAE7B3CE3110EBB2B075881CFAB55ECF3EAB57D834283FD18AC691B41FA2"
Last-Modified: Tue, 20 Sep 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5802
Expires: Fri, 23 Sep 2022 02:09:07 GMT
Date: Fri, 23 Sep 2022 00:32:25 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
IP
File type PEM certificate\012- , ASCII text
Hash 6113f8408c59aebe188d6af273b90743
7398873bf00f99944eaa77ad3ebc0d43c23dba6b
b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Thu, 22 Sep 2022 04:35:15 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 50584ad285d5f627ddebae74efdd0770.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: b8d23vFhgg0PKAkvD4rwHA8wo-fRC1DWGDrSPBMra8Er3fgUAE6PPg==
age: 71831
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 23 Sep 2022 00:32:25 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
code.jquery.com/jquery-latest.min.js
200 OK 33 kB URL HTTP/2 code.jquery.com/jquery-latest.min.js
IP
File type ASCII text, with very long lines (32086)
Hash a39e9fcc2a78d5b1ed25b5f853c17a22
f1d1d30d35146a7adee855becba02b776366f169
a0581d3f2c05cfb302f81d2894c114da758e14a290bd4f240c7b63628469ee8d
GET /jquery-latest.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ucfzfqp8.gq/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 23 Sep 2022 00:32:25 GMT
content-encoding: gzip
content-length: 33202
content-type: application/javascript; charset=utf-8
last-modified: Wed, 16 Feb 2022 10:50:39 GMT
accept-ranges: bytes
server: nginx
etag: W/"620cd6ff-1762a"
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-hw: 1663893145.dop009.sk1.t,1663893145.cds237.sk1.hn,1663893145.cds256.sk1.c
X-Firefox-Spdy: h2
ucfzfqp8.gq/
200 OK 186 kB IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 (with BOM) text, with very long lines (447), with CRLF line terminators
Size 186 kB (185840 bytes)
Hash a21c182a17e9b8b79617c15397df7f2e
8c133b56d7e1043c5191decad9380064204a2378
13f241ffa8e1721a40d1ac8c5345212831e7eb3ef760cc810ebba5c770e03d10
Analyzer Verdict Alert openphish Monte dei Paschi Di Siena
fortinet Phishing
GET / HTTP/1.1
Host: ucfzfqp8.gq
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Fri, 23 Sep 2022 00:32:24 GMT
Server: Apache
Last-Modified: Wed, 11 Nov 2020 05:10:12 GMT
Accept-Ranges: bytes
Content-Length: 185840
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html
ocsp.usertrust.com/
200 OK 2.2 kB IP
Hash 2c4f80099702bca09e880eb8b215916a
3f02d51cb154d7c8e5b8bdd064d8a0e14214be46
45dc6d75badbef75d483e2d6048c6f5aa165b05f1b0c519725a38b9f58a9b3ea
POST / HTTP/1.1
Host: ocsp.usertrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 23 Sep 2022 00:32:26 GMT
Content-Type: application/ocsp-response
Content-Length: 2236
Connection: keep-alive
Last-Modified: Wed, 21 Sep 2022 10:12:16 GMT
Expires: Wed, 28 Sep 2022 10:12:15 GMT
Etag: "3f02d51cb154d7c8e5b8bdd064d8a0e14214be46"
Cache-Control: max-age=603858,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: HIT
Age: 1566
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74ef2ee33b88b529-OSL
ocsp.usertrust.com/
200 OK 2.2 kB IP
Hash 2c4f80099702bca09e880eb8b215916a
3f02d51cb154d7c8e5b8bdd064d8a0e14214be46
45dc6d75badbef75d483e2d6048c6f5aa165b05f1b0c519725a38b9f58a9b3ea
POST / HTTP/1.1
Host: ocsp.usertrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 23 Sep 2022 00:32:26 GMT
Content-Type: application/ocsp-response
Content-Length: 2236
Connection: keep-alive
Last-Modified: Wed, 21 Sep 2022 10:12:16 GMT
Expires: Wed, 28 Sep 2022 10:12:15 GMT
Etag: "3f02d51cb154d7c8e5b8bdd064d8a0e14214be46"
Cache-Control: max-age=603858,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: HIT
Age: 1566
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74ef2ee33d2e0b49-OSL
ocsp.sectigo.com/
200 OK 471 B IP
Hash dce45e182ff34664e9b70b17f3a55ea5
3aa0294dca8422f977710b4c7d61d9d65844d8e5
3d10128473ed8a4315fc381a410a3ef372fefc12ed3af29eb34157051bec2344
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 23 Sep 2022 00:32:26 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Wed, 21 Sep 2022 19:11:32 GMT
Expires: Wed, 28 Sep 2022 19:11:31 GMT
Etag: "3aa0294dca8422f977710b4c7d61d9d65844d8e5"
Cache-Control: max-age=498544,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 74ef2ee34c02b50b-OSL
ocsp.sectigo.com/
200 OK 471 B IP
Hash dce45e182ff34664e9b70b17f3a55ea5
3aa0294dca8422f977710b4c7d61d9d65844d8e5
3d10128473ed8a4315fc381a410a3ef372fefc12ed3af29eb34157051bec2344
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 23 Sep 2022 00:32:26 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Wed, 21 Sep 2022 19:11:32 GMT
Expires: Wed, 28 Sep 2022 19:11:31 GMT
Etag: "3aa0294dca8422f977710b4c7d61d9d65844d8e5"
Cache-Control: max-age=498544,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 74ef2ee34d86b517-OSL
digital.mps.it/cmn/assets/css/catalogo/w.login.digitalBanking.min.css?vers=1131606
200 OK 9.6 kB URL HTTP/1.1 digital.mps.it/cmn/assets/css/catalogo/w.login.digitalBanking.min.css?vers=1131606
IP
ASN #13018 Banca Monte Dei Paschi Di Siena S.P.A.
File type ASCII text, with very long lines (47635)
Hash 3c4fc599d466483925fb3fb9233d5529
585a36d32ba57e831e4dfbdf41c28470447658dd
6a971a25c3f243887c31810842135e7be02f564eec7504add8207e0f41384c58
GET /cmn/assets/css/catalogo/w.login.digitalBanking.min.css?vers=1131606 HTTP/1.1
Host: digital.mps.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ucfzfqp8.gq/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Fri, 23 Sep 2022 00:32:26 GMT
Content-Length: 9604
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1; mode=block
Last-Modified: Mon, 18 Jul 2022 07:31:44 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Cache-Control: max-age=2592000
Expires: Sat, 22 Oct 2022 20:14:24 GMT
Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.gstatic.com https://www.googletagmanager.com https://www.google.com https://ajax.googleapis.com https://maps.googleapis.com www.google-analytics.com https://8294890.fls.doubleclick.net https://secure.adnxs.com https://white.mynsystems.com https://blue.mynsystems.com/ https://privacy.mynsystems.com https://ib.adnxs.com https://yellow.mynsystems.com https://zna4cciryw9kzle8d-mps.siteintercept.qualtrics.com https://siteintercept.qualtrics.com https://connect.facebook.net https://zn9nahtxma7dxxjqe-mps.siteintercept.qualtrics.com https://zn5j9lftsu1lqzb1k-mps.siteintercept.qualtrics.com https://zncveh3lu3fyce1re-mps.siteintercept.qualtrics.com;
Access-Control-Allow-Headers: Content-Type
Server-Timing: dtSInfo;desc="0", dtRpid;desc="-1054855640"
Etag: W/"PSA-FVzCgDKGRW"
X-Original-Content-Length: 47636
X-Content-Type-Options: nosniff, nosniff
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: text/css
Set-Cookie: dtCookie=v_4_srv_3_sn_E197366CD7F3CF64FD2B4EC6A1FC0690_perc_100000_ol_0_mul_1_app-3A07e31ae0c92b1b0b_0; Path=/; Domain=.mps.it
TS01d2b0ab=01eaad23892b086ddd1b291b5291dd11de8bdaf8c5780611f10a224ffb2302b065262e70fe37eb9f0986c37bfc6b881c14a3893e09; Path=/; Secure; HTTPOnly
TS01802bdf=01eaad23898027bc92f81fa0c655e81b495454e015780611f10a224ffb2302b065262e70fe4a3bd6812a0dba5db6494167d7a18b4c74c8e12bd5020244356a2373a3a40293; path=/; domain=.mps.it; HTTPonly; Secure
Content-Encoding: gzip
digital.mps.it/cmn/assets/js/jquery-ext.js?vers=1131606
200 OK 9.4 kB URL HTTP/1.1 digital.mps.it/cmn/assets/js/jquery-ext.js?vers=1131606
IP
ASN #13018 Banca Monte Dei Paschi Di Siena S.P.A.
File type ASCII text, with very long lines (25288), with no line terminators
Hash e69c8494b3c0e1293affe921e2043d7d
be12047ceb1a6fd7bae7220ea2f1ce8e7acff78c
eb81448778b66199471c91f95bf2ca21b28679eb87c4bdb7aee25ffc34bc72c3
GET /cmn/assets/js/jquery-ext.js?vers=1131606 HTTP/1.1
Host: digital.mps.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ucfzfqp8.gq/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Fri, 23 Sep 2022 00:32:26 GMT
Content-Length: 9430
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1; mode=block
Last-Modified: Mon, 18 Jul 2022 07:32:52 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Cache-Control: max-age=2592000
Expires: Sat, 22 Oct 2022 19:05:15 GMT
Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.gstatic.com https://www.googletagmanager.com https://www.google.com https://ajax.googleapis.com https://maps.googleapis.com www.google-analytics.com https://8294890.fls.doubleclick.net https://secure.adnxs.com https://white.mynsystems.com https://blue.mynsystems.com/ https://privacy.mynsystems.com https://ib.adnxs.com https://yellow.mynsystems.com https://zna4cciryw9kzle8d-mps.siteintercept.qualtrics.com https://siteintercept.qualtrics.com https://connect.facebook.net https://zn9nahtxma7dxxjqe-mps.siteintercept.qualtrics.com https://zn5j9lftsu1lqzb1k-mps.siteintercept.qualtrics.com https://zncveh3lu3fyce1re-mps.siteintercept.qualtrics.com;
Access-Control-Allow-Headers: Content-Type
Server-Timing: dtSInfo;desc="0", dtRpid;desc="-671970191"
Etag: W/"PSA-2jPy1yEKjj"
X-Original-Content-Length: 25288
X-Content-Type-Options: nosniff, nosniff
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: application/javascript
Set-Cookie: dtCookie=v_4_srv_1_sn_BF6BACA32926D6B09679F0C62FC0F13E_perc_100000_ol_0_mul_1_app-3A07e31ae0c92b1b0b_0; Path=/; Domain=.mps.it
TS01d2b0ab=01eaad2389b290db33b608d65be130fe808056566e00cc8acf9fddcdaecd83a949d6050f46810c1ce8b41d32774c8b9dac39ac91ca; Path=/; Secure; HTTPOnly
TS01802bdf=01eaad238996bba8217aad93b801d5541b64c8ff2700cc8acf9fddcdaecd83a949d6050f46b69a27323c875c4e654056ba49b849e61f11e53583f5cdea2b8326e4137fcd8a; path=/; domain=.mps.it; HTTPonly; Secure
Content-Encoding: gzip
digital.mps.it/libs/img/loginBI/iconaSpeechAssistantred.png
200 OK 2.4 kB URL HTTP/1.1 digital.mps.it/libs/img/loginBI/iconaSpeechAssistantred.png
IP
ASN #13018 Banca Monte Dei Paschi Di Siena S.P.A.
File type PNG image data, 224 x 224, 8-bit colormap, non-interlaced\012- data
Hash ca6d989b4aed15bc09f589876a4697b6
c1b3afd98683383d7dacf66164d0e875f752bc3f
d46dda2fab1d8fe763cec3ef41291116c4df2667bdb89448b37fbc342249924a
GET /libs/img/loginBI/iconaSpeechAssistantred.png HTTP/1.1
Host: digital.mps.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ucfzfqp8.gq/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Fri, 23 Sep 2022 00:32:26 GMT
Content-Length: 2394
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1; mode=block
Accept-Ranges: bytes
Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.gstatic.com https://www.googletagmanager.com https://www.google.com https://ajax.googleapis.com https://maps.googleapis.com www.google-analytics.com https://8294890.fls.doubleclick.net https://secure.adnxs.com https://white.mynsystems.com https://blue.mynsystems.com/ https://privacy.mynsystems.com https://ib.adnxs.com https://yellow.mynsystems.com https://zna4cciryw9kzle8d-mps.siteintercept.qualtrics.com https://siteintercept.qualtrics.com https://connect.facebook.net https://zn9nahtxma7dxxjqe-mps.siteintercept.qualtrics.com https://zn5j9lftsu1lqzb1k-mps.siteintercept.qualtrics.com https://zncveh3lu3fyce1re-mps.siteintercept.qualtrics.com;
Access-Control-Allow-Headers: Content-Type
Server-Timing: dtSInfo;desc="0", dtRpid;desc="1676425236"
Etag: W/"PSA-aj-ym2Ym0rtFb"
Expires: Sat, 22 Oct 2022 19:56:22 GMT
Cache-Control: max-age=2575435
X-Content-Type-Options: nosniff, nosniff
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: image/png
Set-Cookie: dtCookie=v_4_srv_2_sn_0E6FD697B81C39A7CCCBAD867885B40A_perc_100000_ol_0_mul_1_app-3A07e31ae0c92b1b0b_0; Path=/; Domain=.mps.it
TS01d2b0ab=01eaad238911171c7a3f662a2eac0e3db7046e66f8afb013b1c89f1801d579b0e2542ccd1aea635213f6e9798a6b8e49e8c28fc139; Path=/; Secure; HTTPOnly
TS01802bdf=01eaad238976abb958a70bbdcfc6180128c1fdd5fdafb013b1c89f1801d579b0e2542ccd1a0695f1a6cc9efc4cf2d70b783eb84144ce88386ff750014de720f8509b162db5; path=/; domain=.mps.it; HTTPonly; Secure
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Fri, 23 Sep 2022 00:03:22 GMT
Cache-Control: max-age=3600, max-age=3600
Expires: Fri, 23 Sep 2022 00:13:10 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: Nakjoy_Oewhr3dWiSf13yy4fBu9IT57U2Q8BVqUI1C28nD4O2Lkm6A==
Age: 1744
digital.mps.it/login.html
200 OK 13 B URL HTTP/1.1 digital.mps.it/login.html
IP
ASN #13018 Banca Monte Dei Paschi Di Siena S.P.A.
File type HTML document, ASCII text, with no line terminators
Hash c83301425b2ad1d496473a5ff3d9ecca
941efb7368e46b27b937d34b07fc4d41da01b002
b633a587c652d02386c4f16f8c6f6aab7352d97f16367c3c40576214372dd628
GET /login.html HTTP/1.1
Host: digital.mps.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ucfzfqp8.gq/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Fri, 23 Sep 2022 00:32:26 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1; mode=block
Accept-Ranges: bytes
X-OneAgent-JS-Injection: true
X-ruxit-JS-Agent: true
Cache-Control: max-age=0, no-cache
X-Content-Type-Options: nosniff
Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.gstatic.com https://www.googletagmanager.com https://www.google.com https://ajax.googleapis.com https://maps.googleapis.com www.google-analytics.com https://8294890.fls.doubleclick.net https://secure.adnxs.com https://white.mynsystems.com https://blue.mynsystems.com/ https://privacy.mynsystems.com https://ib.adnxs.com https://yellow.mynsystems.com https://zna4cciryw9kzle8d-mps.siteintercept.qualtrics.com https://siteintercept.qualtrics.com https://connect.facebook.net https://zn9nahtxma7dxxjqe-mps.siteintercept.qualtrics.com https://zn5j9lftsu1lqzb1k-mps.siteintercept.qualtrics.com https://zncveh3lu3fyce1re-mps.siteintercept.qualtrics.com;
Access-Control-Allow-Headers: Content-Type
Server-Timing: dtSInfo;desc="0", dtRpid;desc="2022776312"
Content-Length: 13
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
Set-Cookie: dtCookie=v_4_srv_3_sn_F47733EACEE2D2D4327A407A27DF489C_perc_100000_ol_0_mul_1_app-3A07e31ae0c92b1b0b_0; Path=/; Domain=.mps.it
TS01d2b0ab=01eaad238989928435b05c9086cb5af6521cc22efe368af86cc27a48d69d798e0d501ec9ce86b705c61ba401ace585a82a37fd6798; Path=/; Secure; HTTPOnly
TS01802bdf=01eaad2389f26bf5b15a1b38b5c7d4da518d2e606f368af86cc27a48d69d798e0d501ec9ce5f03848b502da3063120de4daff954f08e3b201128097737c7c850ad07f86d0e; path=/; domain=.mps.it; HTTPonly; Secure
Vary: Accept-Encoding
ocsp.digicert.com/
200 OK 471 B IP
Hash 1901e8e922c08250a5ed39fcc7db3d9d
b7ee166079e67f2a12d38a0d4e5ae1f5b9a5f696
3906673ef3b489edaf6ba79ef336d017b872867b7d30e572c2f40cf7750eada2
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3135
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 23 Sep 2022 00:32:26 GMT
Last-Modified: Thu, 22 Sep 2022 23:40:11 GMT
Server: ECS (ska/F71B)
X-Cache: HIT
Content-Length: 471
digital.mps.it/libs/img/montedeipaschi_logo_hd.png
200 OK 11 kB URL HTTP/1.1 digital.mps.it/libs/img/montedeipaschi_logo_hd.png
IP
ASN #13018 Banca Monte Dei Paschi Di Siena S.P.A.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 241x88, components 3\012- data
Hash 234af05aa100bac0bd183b7e8bf02179
5d467e25cf91aa9e5a90c1ed6e4ba4a8c471f451
0a0c6433b58c72136375414d6f7a6a511932eeaac396f7c0991a2b953fa2eaaa
GET /libs/img/montedeipaschi_logo_hd.png HTTP/1.1
Host: digital.mps.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ucfzfqp8.gq/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Fri, 23 Sep 2022 00:32:26 GMT
Content-Length: 10960
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1; mode=block
Accept-Ranges: bytes
Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.gstatic.com https://www.googletagmanager.com https://www.google.com https://ajax.googleapis.com https://maps.googleapis.com www.google-analytics.com https://8294890.fls.doubleclick.net https://secure.adnxs.com https://white.mynsystems.com https://blue.mynsystems.com/ https://privacy.mynsystems.com https://ib.adnxs.com https://yellow.mynsystems.com https://zna4cciryw9kzle8d-mps.siteintercept.qualtrics.com https://siteintercept.qualtrics.com https://connect.facebook.net https://zn9nahtxma7dxxjqe-mps.siteintercept.qualtrics.com https://zn5j9lftsu1lqzb1k-mps.siteintercept.qualtrics.com https://zncveh3lu3fyce1re-mps.siteintercept.qualtrics.com;
Access-Control-Allow-Headers: Content-Type
Server-Timing: dtSInfo;desc="0", dtRpid;desc="-1382419402"
Etag: W/"PSA-aj-I0rwWqEAus"
Expires: Sat, 22 Oct 2022 18:57:01 GMT
Cache-Control: max-age=2571874
X-Content-Type-Options: nosniff, nosniff
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: image/jpeg
Set-Cookie: dtCookie=v_4_srv_2_sn_758AB1A091372E36C0DB5C6340A1AEE2_perc_100000_ol_0_mul_1_app-3A07e31ae0c92b1b0b_0; Path=/; Domain=.mps.it
TS01d2b0ab=01eaad238995c0956b1c5a43a081015ab3828916d51d7d169e4afc8949fd3309829413091bbd832c9f340a281ab54fcaddd15e0359; Path=/; Secure; HTTPOnly
TS01802bdf=01eaad2389bec1b0840b21086a363be5847208f55e1d7d169e4afc8949fd3309829413091b02d54c38b53540d31b13de413246e6a9d0311fac94a3671ee73f22d679b672f6; path=/; domain=.mps.it; HTTPonly; Secure
digital.mps.it/cmn/assets/icons/catalogo/info%20tooltip_UI.svg
200 OK 999 B URL HTTP/1.1 digital.mps.it/cmn/assets/icons/catalogo/info%20tooltip_UI.svg
IP
ASN #13018 Banca Monte Dei Paschi Di Siena S.P.A.
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 12c7d3bc84dcbc9bf6f4f8c0bc62a03c
9fa0f5c8c6b269a02baf4615895766e024de984c
9c9b26055379437522e81d6ad02ec43de51199f7ee3ad2fb8a7f6ab3a44efccf
GET /cmn/assets/icons/catalogo/info%20tooltip_UI.svg HTTP/1.1
Host: digital.mps.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ucfzfqp8.gq/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Fri, 23 Sep 2022 00:32:26 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1; mode=block
Last-Modified: Mon, 18 Jul 2022 07:31:32 GMT
Accept-Ranges: bytes
Content-Length: 999
Vary: Accept-Encoding
Cache-Control: max-age=2592000
Expires: Sun, 23 Oct 2022 00:32:26 GMT
X-Content-Type-Options: nosniff
Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.gstatic.com https://www.googletagmanager.com https://www.google.com https://ajax.googleapis.com https://maps.googleapis.com www.google-analytics.com https://8294890.fls.doubleclick.net https://secure.adnxs.com https://white.mynsystems.com https://blue.mynsystems.com/ https://privacy.mynsystems.com https://ib.adnxs.com https://yellow.mynsystems.com https://zna4cciryw9kzle8d-mps.siteintercept.qualtrics.com https://siteintercept.qualtrics.com https://connect.facebook.net https://zn9nahtxma7dxxjqe-mps.siteintercept.qualtrics.com https://zn5j9lftsu1lqzb1k-mps.siteintercept.qualtrics.com https://zncveh3lu3fyce1re-mps.siteintercept.qualtrics.com;
Access-Control-Allow-Headers: Content-Type
Server-Timing: dtSInfo;desc="0", dtRpid;desc="1837692216"
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: image/svg+xml
Set-Cookie: dtCookie=v_4_srv_1_sn_0EE8A0836A0D8EA5847786F2736E3766_perc_100000_ol_0_mul_1_app-3A07e31ae0c92b1b0b_0; Path=/; Domain=.mps.it
TS01d2b0ab=01eaad23898af0b9fe3acab06eb3e41d9fbff2e5d2ea9a677ecb8d2fae10cca8810998bb9df0b8b1cb738963c24f1735922a316948; Path=/; Secure; HTTPOnly
TS01802bdf=01eaad2389f9c8155e36e5ab40478cc82311acb15bea9a677ecb8d2fae10cca8810998bb9da9afbce4daf2a76dba68e45e22fc48c4bea3a5c732c38e1711ee07934c02890c; path=/; domain=.mps.it; HTTPonly; Secure
digital.mps.it/libs/img/loginBI/ico_informazioni.svg
200 OK 2.4 kB URL HTTP/1.1 digital.mps.it/libs/img/loginBI/ico_informazioni.svg
IP
ASN #13018 Banca Monte Dei Paschi Di Siena S.P.A.
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 671e7303796ce8cccd6f8f98f192fb1c
6680a2f5f75ddd3fbfa15f36445759ebef52b48e
0723be3bac2e41d6d7aa267af24f45a7240d74ead82a130765f83fc6fbf19723
GET /libs/img/loginBI/ico_informazioni.svg HTTP/1.1
Host: digital.mps.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ucfzfqp8.gq/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Fri, 23 Sep 2022 00:32:26 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1; mode=block
Last-Modified: Mon, 18 Jul 2022 07:31:02 GMT
Accept-Ranges: bytes
Content-Length: 2448
Vary: Accept-Encoding
Cache-Control: max-age=2592000
Expires: Sun, 23 Oct 2022 00:32:26 GMT
X-Content-Type-Options: nosniff
Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.gstatic.com https://www.googletagmanager.com https://www.google.com https://ajax.googleapis.com https://maps.googleapis.com www.google-analytics.com https://8294890.fls.doubleclick.net https://secure.adnxs.com https://white.mynsystems.com https://blue.mynsystems.com/ https://privacy.mynsystems.com https://ib.adnxs.com https://yellow.mynsystems.com https://zna4cciryw9kzle8d-mps.siteintercept.qualtrics.com https://siteintercept.qualtrics.com https://connect.facebook.net https://zn9nahtxma7dxxjqe-mps.siteintercept.qualtrics.com https://zn5j9lftsu1lqzb1k-mps.siteintercept.qualtrics.com https://zncveh3lu3fyce1re-mps.siteintercept.qualtrics.com;
Access-Control-Allow-Headers: Content-Type
Server-Timing: dtSInfo;desc="0", dtRpid;desc="600248524"
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: image/svg+xml
Set-Cookie: dtCookie=v_4_srv_1_sn_6186AEBE9BBE52272906CF69A2F0B1AB_perc_100000_ol_0_mul_1_app-3A07e31ae0c92b1b0b_0; Path=/; Domain=.mps.it
TS01d2b0ab=01eaad23892875a2914a2232df037035ec8aca9cd7c442262e815b63b1e3d302044c82292afefb0ffea5cd3ac7a6506e3f25d05ca7; Path=/; Secure; HTTPOnly
TS01802bdf=01eaad23891f6540e67a101b0e81402c9bb17adc6ac442262e815b63b1e3d302044c82292ac57064cba67229dd5568a94d523662714f392cc1fe47f6d95112bf5bd613806e; path=/; domain=.mps.it; HTTPonly; Secure
www.smartsuppchat.com/loader.js?
200 OK 5.6 kB URL HTTP/2 www.smartsuppchat.com/loader.js?
IP
ASN #60068 Datacamp Limited
File type ASCII text, with very long lines (18249)
Hash b41543b82bea606e9a21c5db796f7499
45e3f51affc62669d8b9ff62aadf605977d9dd7e
c1b6b6ab2f371e898d18bb9c90ee3fef936bd0442b323cb176654c12bb7a203a
GET /loader.js? HTTP/1.1
Host: www.smartsuppchat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ucfzfqp8.gq/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 23 Sep 2022 00:32:26 GMT
content-type: application/javascript
last-modified: Tue, 22 Mar 2022 17:52:27 GMT
etag: W/"623a0cdb-4792"
expires: Mon, 23 May 2022 11:09:44 GMT
cache-control: max-age=300, public, s-maxage=60
x-accel-expires: @1663893171
server: CDN77-Turbo
x-77-nzt: AblMCQ1ubHz/IwAAAA
x-77-nzt-ray: 8bMHPCq7FJg
x-cache: HIT
x-age: 35
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
digital.mps.it/libs/img/loginBI/ico_carte.svg
200 OK 1.3 kB URL HTTP/1.1 digital.mps.it/libs/img/loginBI/ico_carte.svg
IP
ASN #13018 Banca Monte Dei Paschi Di Siena S.P.A.
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 6a713d495a6a62bc4cecb91676fe25f2
54818deb2f386ad9f7f8aa831391b6fc2c59464a
b989e87444353500fa31829b5814b69d053f5e5553bfff4fcb26a38f76e0f08e
GET /libs/img/loginBI/ico_carte.svg HTTP/1.1
Host: digital.mps.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ucfzfqp8.gq/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Fri, 23 Sep 2022 00:32:26 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1; mode=block
Last-Modified: Mon, 18 Jul 2022 07:31:02 GMT
Accept-Ranges: bytes
Content-Length: 1330
Vary: Accept-Encoding
Cache-Control: max-age=2592000
Expires: Sun, 23 Oct 2022 00:32:26 GMT
X-Content-Type-Options: nosniff
Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.gstatic.com https://www.googletagmanager.com https://www.google.com https://ajax.googleapis.com https://maps.googleapis.com www.google-analytics.com https://8294890.fls.doubleclick.net https://secure.adnxs.com https://white.mynsystems.com https://blue.mynsystems.com/ https://privacy.mynsystems.com https://ib.adnxs.com https://yellow.mynsystems.com https://zna4cciryw9kzle8d-mps.siteintercept.qualtrics.com https://siteintercept.qualtrics.com https://connect.facebook.net https://zn9nahtxma7dxxjqe-mps.siteintercept.qualtrics.com https://zn5j9lftsu1lqzb1k-mps.siteintercept.qualtrics.com https://zncveh3lu3fyce1re-mps.siteintercept.qualtrics.com;
Access-Control-Allow-Headers: Content-Type
Server-Timing: dtSInfo;desc="0", dtRpid;desc="462644558"
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: image/svg+xml
Set-Cookie: dtCookie=v_4_srv_2_sn_600EE10DE82CE97A0F1A0AC1DD0EED71_perc_100000_ol_0_mul_1_app-3A07e31ae0c92b1b0b_0; Path=/; Domain=.mps.it
TS01d2b0ab=01eaad23892a571ac3cf1a8edce86ae8216fd67a11ad7c9c7e60a7ced417c0102792baed50eeb60e2bc5b0659284ab057767e311e1; Path=/; Secure; HTTPOnly
TS01802bdf=01eaad2389ccd23f26b371744f4b99e15e0594a165ad7c9c7e60a7ced417c0102792baed50ffe7130c183fb82a3094589da046dedc00ca76d280cf4d44ea60b4e6ac815d66; path=/; domain=.mps.it; HTTPonly; Secure
digital.mps.it/cmn/font/text-security-disc.woff2
200 OK 2.3 kB URL HTTP/1.1 digital.mps.it/cmn/font/text-security-disc.woff2
IP
ASN #13018 Banca Monte Dei Paschi Di Siena S.P.A.
File type Web Open Font Format (Version 2), TrueType, length 2280, version 1.0\012- data
Hash db2e9ff14caa4e15f4e39ef4e10d34b8
16a11d60fd4b69f3fe7bf7bfb09475a5967124d9
9dd630e7cbf1a068b89a5a134e248ff63f2d452081bf86684aeb4b7f73712b76
GET /cmn/font/text-security-disc.woff2 HTTP/1.1
Host: digital.mps.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://ucfzfqp8.gq
Connection: keep-alive
Referer: https://digital.mps.it/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Fri, 23 Sep 2022 00:32:26 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1; mode=block
Last-Modified: Mon, 18 Jul 2022 07:31:27 GMT
Accept-Ranges: bytes
Content-Length: 2280
Cache-Control: max-age=2592000
Expires: Sun, 23 Oct 2022 00:32:26 GMT
X-Content-Type-Options: nosniff
Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.gstatic.com https://www.googletagmanager.com https://www.google.com https://ajax.googleapis.com https://maps.googleapis.com www.google-analytics.com https://8294890.fls.doubleclick.net https://secure.adnxs.com https://white.mynsystems.com https://blue.mynsystems.com/ https://privacy.mynsystems.com https://ib.adnxs.com https://yellow.mynsystems.com https://zna4cciryw9kzle8d-mps.siteintercept.qualtrics.com https://siteintercept.qualtrics.com https://connect.facebook.net https://zn9nahtxma7dxxjqe-mps.siteintercept.qualtrics.com https://zn5j9lftsu1lqzb1k-mps.siteintercept.qualtrics.com https://zncveh3lu3fyce1re-mps.siteintercept.qualtrics.com;
Access-Control-Allow-Headers: Content-Type
Timing-Allow-Origin: *
Server-Timing: dtSInfo;desc="0", dtRpid;desc="-483117217", dtTao;desc="1"
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Set-Cookie: dtCookie=v_4_srv_3_sn_B89B5FD653106A4DDAC05D46F20DDB6D_perc_100000_ol_0_mul_1_app-3A07e31ae0c92b1b0b_0; Path=/; Domain=.mps.it
TS01d2b0ab=01eaad238988cb6d44d8953a0a00144652955e4b2b2e3f8514b463ea06f2530582359218814ac3cad5e1de346bfa6ae8a34176cca2; Path=/; Secure; HTTPOnly
TS01802bdf=01eaad2389c9a2cb7536b04ed6ff97f9c92353fd762e3f8514b463ea06f2530582359218815df6b9db15a61d6d52ea4941ac18607505f9ae7e4addbe4c3431438812671b8a; path=/; domain=.mps.it; HTTPonly; Secure
Vary: Accept-Encoding
digital.mps.it/cmn/font/text-security-disc.woff
200 OK 3.0 kB URL HTTP/1.1 digital.mps.it/cmn/font/text-security-disc.woff
IP
ASN #13018 Banca Monte Dei Paschi Di Siena S.P.A.
File type Web Open Font Format, TrueType, length 2988, version 1.0\012- data
Hash 4fa38d775a1f6b9179bc7c425ecaf7f4
999363e7db078097dd06c303a4fd09839da7cc6e
6252319c96777a4ce3952f63ec70735230c1c5c9392e81a9b3f9a8b2bc06c164
GET /cmn/font/text-security-disc.woff HTTP/1.1
Host: digital.mps.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://ucfzfqp8.gq
Connection: keep-alive
Referer: https://digital.mps.it/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Fri, 23 Sep 2022 00:32:26 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1; mode=block
Last-Modified: Mon, 18 Jul 2022 07:31:27 GMT
Accept-Ranges: bytes
Content-Length: 2988
Cache-Control: max-age=2592000
Expires: Sun, 23 Oct 2022 00:32:26 GMT
X-Content-Type-Options: nosniff
Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.gstatic.com https://www.googletagmanager.com https://www.google.com https://ajax.googleapis.com https://maps.googleapis.com www.google-analytics.com https://8294890.fls.doubleclick.net https://secure.adnxs.com https://white.mynsystems.com https://blue.mynsystems.com/ https://privacy.mynsystems.com https://ib.adnxs.com https://yellow.mynsystems.com https://zna4cciryw9kzle8d-mps.siteintercept.qualtrics.com https://siteintercept.qualtrics.com https://connect.facebook.net https://zn9nahtxma7dxxjqe-mps.siteintercept.qualtrics.com https://zn5j9lftsu1lqzb1k-mps.siteintercept.qualtrics.com https://zncveh3lu3fyce1re-mps.siteintercept.qualtrics.com;
Access-Control-Allow-Headers: Content-Type
Timing-Allow-Origin: *
Server-Timing: dtSInfo;desc="0", dtRpid;desc="522248244", dtTao;desc="1"
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: application/font-woff
Set-Cookie: dtCookie=v_4_srv_3_sn_634E9BA4A2560CA6289AD275F485CDAF_perc_100000_ol_0_mul_1_app-3A07e31ae0c92b1b0b_0; Path=/; Domain=.mps.it
TS01d2b0ab=01eaad238995236f1c6bd25a817b40b1cb0a7a8dc25a31ad6b74e87684e83abf2610c79a52e5756839a424c342f3feaf2db8609cfd; Path=/; Secure; HTTPOnly
TS01802bdf=01eaad2389400024c9776ab153827bca5dac9aaf705a31ad6b74e87684e83abf2610c79a52ff10ab41e041f2056241e73e0e1837e24d518afbafbed72c52f10e24ebe2e591; path=/; domain=.mps.it; HTTPonly; Secure
ucfzfqp8.gq/favicon.ico
200 OK 1.2 kB IP
ASN #46606 UNIFIEDLAYER-AS-1
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash 756b5102ba5f5f62045174f1e0e24f2e
da960cdb4f405c110d956b286915426a2c08689f
23063090027d06c463ca3fcf7b5c19b715051dff25da99f3c0b505fa20fbfe11
Analyzer Verdict Alert openphish Monte dei Paschi Di Siena
GET /favicon.ico HTTP/1.1
Host: ucfzfqp8.gq
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ucfzfqp8.gq/
HTTP/1.1 200 OK
Date: Fri, 23 Sep 2022 00:32:25 GMT
Server: Apache
Last-Modified: Wed, 11 Nov 2020 05:10:12 GMT
Accept-Ranges: bytes
Content-Length: 1150
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/x-icon
digital.mps.it/cmn/font/text-security-disc.ttf
200 OK 12 kB URL HTTP/1.1 digital.mps.it/cmn/font/text-security-disc.ttf
IP
ASN #13018 Banca Monte Dei Paschi Di Siena S.P.A.
File type TrueType Font data, 11 tables, 1st "GSUB", 16 names, Macintosh, type 1 string, text-security-discRegulartext-security-disctext-security-discVersion 1.0text-security-discGenera\012- data
Hash 7c83ea2ac4879abaee1d9e85d996b00c
f2edb568b2b37d9fa0d694ba2776e88441c2aac2
45db43564f0403a0df50caa810df6e9ee61dca5127cb3682f27d37b4f595f25a
GET /cmn/font/text-security-disc.ttf HTTP/1.1
Host: digital.mps.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ucfzfqp8.gq
Connection: keep-alive
Referer: https://digital.mps.it/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Fri, 23 Sep 2022 00:32:26 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1; mode=block
Last-Modified: Mon, 18 Jul 2022 07:31:27 GMT
Accept-Ranges: bytes
Content-Length: 12392
Cache-Control: max-age=2592000
Expires: Sun, 23 Oct 2022 00:32:26 GMT
X-Content-Type-Options: nosniff
Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.gstatic.com https://www.googletagmanager.com https://www.google.com https://ajax.googleapis.com https://maps.googleapis.com www.google-analytics.com https://8294890.fls.doubleclick.net https://secure.adnxs.com https://white.mynsystems.com https://blue.mynsystems.com/ https://privacy.mynsystems.com https://ib.adnxs.com https://yellow.mynsystems.com https://zna4cciryw9kzle8d-mps.siteintercept.qualtrics.com https://siteintercept.qualtrics.com https://connect.facebook.net https://zn9nahtxma7dxxjqe-mps.siteintercept.qualtrics.com https://zn5j9lftsu1lqzb1k-mps.siteintercept.qualtrics.com https://zncveh3lu3fyce1re-mps.siteintercept.qualtrics.com;
Access-Control-Allow-Headers: Content-Type
Timing-Allow-Origin: *
Server-Timing: dtSInfo;desc="0", dtRpid;desc="-1410211526", dtTao;desc="1"
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: application/font-sfnt
Set-Cookie: dtCookie=v_4_srv_3_sn_589214A1A97A80AD1EA4E7BD20478E28_perc_100000_ol_0_mul_1_app-3A07e31ae0c92b1b0b_0; Path=/; Domain=.mps.it
TS01d2b0ab=01eaad2389447ac9fe07d710cfa704ae92e0436b6f81cb26467c92c7bf8c2b1737c9eedd550d3ce0675f87fd6651bbddc446ab0931; Path=/; Secure; HTTPOnly
TS01802bdf=01eaad2389fce867af361719c63f67928b979c17e081cb26467c92c7bf8c2b1737c9eedd5518e1da9f556010e1f7f3e0393c30c80f796c84dae10ea700d95235a8dad45da3; path=/; domain=.mps.it; HTTPonly; Secure
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: K9cfXFsQZfhd98yjDFmbjg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: iWBBlcz8oQZ8+I9oYf5lMSjAFLk=
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 13cf7399e566a6646c3d468c9fcecdff
7d58b2cb7d8e29987c5276828931c3c9288f18fa
4b9263fb0142cf94e98d03d030875159a2bf37b37ba2d997b52e9f58927d76ed
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Fri, 23 Sep 2022 00:32:26 GMT
Last-Modified: Thu, 22 Sep 2022 23:11:57 GMT
Server: ECS (nyb/1D04)
X-Cache: Miss from cloudfront
Via: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: x4W0hzTSVenLTgq881w-9rt9gj05q95721jxIF3ZKwZWVmsgGubdWw==
Age: 4829
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash eb1556c0633d4dddada6053d01cfb357
c7304fdbe0c885f2d64850e8384055fd153dc670
ab821413c5141d72094205e8d17b3b29494ac55b47acf48230d9cee67d01f855
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Fri, 23 Sep 2022 00:32:27 GMT
Last-Modified: Thu, 22 Sep 2022 23:49:38 GMT
Server: ECS (bsa/EB12)
X-Cache: Miss from cloudfront
Via: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: eImG-a7XOBsjjESzx7A_UzNjll-nt_LOGUVwXoCyLdIadfGeJ6weMA==
Age: 2569
widget-v2.smartsuppcdn.com/asset-manifest.json
200 OK 3.2 kB URL HTTP/2 widget-v2.smartsuppcdn.com/asset-manifest.json
IP
ASN #60068 Datacamp Limited
File type JSON data\012- , ASCII text
Hash 7b036242a2357f8ffc131757564441c2
98bafb8e9ff2b392358100375c43b7436250dfa5
122ef4c7505eff1c7393681c518f9a17fba90c4461ff9c4f8324a2df78ce09bf
GET /asset-manifest.json HTTP/1.1
Host: widget-v2.smartsuppcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: http://ucfzfqp8.gq
Connection: keep-alive
Referer: http://ucfzfqp8.gq/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 23 Sep 2022 00:32:26 GMT
content-type: application/json
last-modified: Tue, 13 Sep 2022 08:22:15 GMT
etag: W/"63203db7-6ce"
expires: Tue, 13 Sep 2022 08:56:12 GMT
cache-control: max-age=300, public, s-maxage=60
access-control-allow-origin: *
x-accel-expires: @1663893193
server: CDN77-Turbo
x-77-nzt: AblMCQ23TkX/DQAAAA
x-77-nzt-ray: k/lTVW5zclo
x-cache: HIT
x-age: 13
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8ebb267e443b81854ef9a01b3eb6489d
b932e9e5679da5a9160da5429458041765509b52
4ac5aa5b4fb4a85282b825c5c0ed7b1aaf2b39ffe77d69dec5123a84709f3fe2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4AC5AA5B4FB4A85282B825C5C0ED7B1AAF2B39FFE77D69DEC5123A84709F3FE2"
Last-Modified: Tue, 20 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11217
Expires: Fri, 23 Sep 2022 03:39:24 GMT
Date: Fri, 23 Sep 2022 00:32:27 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8ebb267e443b81854ef9a01b3eb6489d
b932e9e5679da5a9160da5429458041765509b52
4ac5aa5b4fb4a85282b825c5c0ed7b1aaf2b39ffe77d69dec5123a84709f3fe2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4AC5AA5B4FB4A85282B825C5C0ED7B1AAF2B39FFE77D69DEC5123A84709F3FE2"
Last-Modified: Tue, 20 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11217
Expires: Fri, 23 Sep 2022 03:39:24 GMT
Date: Fri, 23 Sep 2022 00:32:27 GMT
Connection: keep-alive
widget-v2.smartsuppcdn.com/static/js/6.1f64fecd.chunk.js
200 OK 148 kB URL HTTP/2 widget-v2.smartsuppcdn.com/static/js/6.1f64fecd.chunk.js
IP
ASN #60068 Datacamp Limited
File type ASCII text, with very long lines (65462)
Size 148 kB (148081 bytes)
Hash f0ada3713a450163669181454ea58e90
ce2c8cec5d57e7f67c1eeb992a350555f62489e1
f7cfd87871e18156cfd0aba1509b298923ac461a9238119d9a3b2383ae643cdb
GET /static/js/6.1f64fecd.chunk.js HTTP/1.1
Host: widget-v2.smartsuppcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 23 Sep 2022 00:32:27 GMT
content-type: application/javascript
last-modified: Tue, 13 Sep 2022 08:22:15 GMT
etag: W/"63203db7-81c1d"
expires: Wed, 13 Sep 2023 08:52:14 GMT
cache-control: max-age=31536000, public, immutable
access-control-allow-origin: *
x-accel-expires: @1694595134
server: CDN77-Turbo
x-77-nzt: AblMCQ2yMZL/3bkMAA
x-77-nzt-ray: 4afhLPGhlsI
x-cache: HIT
x-age: 834013
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
widget-v2.smartsuppcdn.com/static/js/main.9ec99211.chunk.js
200 OK 28 kB URL HTTP/2 widget-v2.smartsuppcdn.com/static/js/main.9ec99211.chunk.js
IP
ASN #60068 Datacamp Limited
File type ASCII text, with very long lines (65536), with no line terminators
Hash b46c8d49b4a6abe536bfcdf5d42c06cf
bbaa9eb59e6b7894cfe64ed238d540420c07e3de
f4d1d92a4af5938d9a4f2e5ad3d0f5942945b639c5caa60bd6ef30d1de16bce6
GET /static/js/main.9ec99211.chunk.js HTTP/1.1
Host: widget-v2.smartsuppcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 23 Sep 2022 00:32:27 GMT
content-type: application/javascript
last-modified: Tue, 13 Sep 2022 08:22:15 GMT
etag: W/"63203db7-1cd79"
expires: Wed, 13 Sep 2023 08:51:13 GMT
cache-control: max-age=31536000, public, immutable
access-control-allow-origin: *
x-accel-expires: @1694595073
server: CDN77-Turbo
x-77-nzt: AblMCQ1WiTr/GroMAA
x-77-nzt-ray: zBcrFx3XoDY
x-cache: HIT
x-age: 834074
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8ebb267e443b81854ef9a01b3eb6489d
b932e9e5679da5a9160da5429458041765509b52
4ac5aa5b4fb4a85282b825c5c0ed7b1aaf2b39ffe77d69dec5123a84709f3fe2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4AC5AA5B4FB4A85282B825C5C0ED7B1AAF2B39FFE77D69DEC5123A84709F3FE2"
Last-Modified: Tue, 20 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11217
Expires: Fri, 23 Sep 2022 03:39:24 GMT
Date: Fri, 23 Sep 2022 00:32:27 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5ca56e32-b483-4063-a12c-be8fa8c3d85e.jpeg
200 OK 8.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5ca56e32-b483-4063-a12c-be8fa8c3d85e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7606ff88f05062b66970d9805f38987a
d47db5fcd83023b4a8de40a47d4510e183de387a
20f89dd859e5715e27c289040fac6a121248e5b6c06da0a7f186984ffb029eb2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5ca56e32-b483-4063-a12c-be8fa8c3d85e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8497
x-amzn-requestid: ab65ba93-aad5-4845-b471-c50c14057c47
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YvqujEsIoAMF8sQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632957f6-6d4635bf713fd25147948c7b;Sampled=0
x-amzn-remapped-date: Tue, 20 Sep 2022 06:04:38 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: SZ6p5NLxuGUoEOZujwPbDGwUO0dZgiITud8RWOaSW_VciGRgBidY2A==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 e95ec8f1dc02e32f0cb9e113963ceb4e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 22 Sep 2022 19:36:01 GMT
age: 17786
etag: "d47db5fcd83023b4a8de40a47d4510e183de387a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8b936e90-90ba-49d6-946e-b7cd524d23f9.jpeg
200 OK 7.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8b936e90-90ba-49d6-946e-b7cd524d23f9.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6243782119c18721ebfb39448a079e32
6131afd540498e8ead1b9937bc953fadbdb164f9
9f70c0b851ea5039eee2edf8d37f447946e2d2783d6ce257c0ccbcf9f262d289
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8b936e90-90ba-49d6-946e-b7cd524d23f9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7180
x-amzn-requestid: c08a48fa-b734-4ac7-aa76-a1225135b792
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YsS2qHbcIAMFgEQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6327fe90-4a5915de1b0da7a07efddf86;Sampled=0
x-amzn-remapped-date: Mon, 19 Sep 2022 05:30:56 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: vR0dXVmBUtMyvJBEYJmsekEBRZ0DS4hJQN6JDhTyP6HGf3LsYHN9WQ==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 1481cc55c02c3a782ad420b6bac2cb32.cloudfront.net (CloudFront), 1.1 google
date: Thu, 22 Sep 2022 09:08:11 GMT
age: 55456
etag: "6131afd540498e8ead1b9937bc953fadbdb164f9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb77ad616-c829-40b4-8b70-2be46252d64c.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb77ad616-c829-40b4-8b70-2be46252d64c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8ea5f06ad31f0cedd2cb5c6df82f35f4
60a83a1618ffae06e49ca3002bac1db9980dcfe8
5f6a4cb92c016ef0f229b11d727e9680a15b10782b5bfe9e66ad9d100b458d8d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb77ad616-c829-40b4-8b70-2be46252d64c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10279
x-amzn-requestid: 2ff2c324-51c5-484d-b049-3eacbdc1024a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Yyj8THHdoAMF44g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632a804e-0f4da4ba2a84679b3fd297fc;Sampled=0
x-amzn-remapped-date: Wed, 21 Sep 2022 03:09:02 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 6uqNnpll2kgC_0_t5e9yp0AgFAvprQq_GF_jgwj2sX2TE9S1l023Aw==
via: 1.1 c21a0d27ceec21e266c9f962d0349438.cloudfront.net (CloudFront), 1.1 989017835f43d594873bde5a7ee7fe5e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 22 Sep 2022 05:29:48 GMT
age: 68559
etag: "60a83a1618ffae06e49ca3002bac1db9980dcfe8"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6ac88c56-4515-47b4-9c1e-7745782bd306.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6ac88c56-4515-47b4-9c1e-7745782bd306.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b877ead4a15221fdd278ef27f281a7ec
48c10714503e8dfdd3e3c3d39b919ef2792f0d15
f4a1d5abcfa4092828e004b6c0605a7a24e4133d275312f613dceff875971daf
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6ac88c56-4515-47b4-9c1e-7745782bd306.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10127
x-amzn-requestid: 456e3c6a-e173-433e-8d54-d787cb50b7e8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y4Y0sHmCoAMFVSg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632cd4ea-7a07b336571396533e48b4cb;Sampled=0
x-amzn-remapped-date: Thu, 22 Sep 2022 21:34:34 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: KKYAef15NoI3It5UfVcqhPx50Fr6IK7O2VFasuAILVN9PP8CH1_7Ng==
via: 1.1 5a1753718d8b33365e5f693dd338c510.cloudfront.net (CloudFront), 1.1 cd858042f70b416ca05e042acf3908a4.cloudfront.net (CloudFront), 1.1 google
date: Thu, 22 Sep 2022 21:58:25 GMT
age: 9242
etag: "48c10714503e8dfdd3e3c3d39b919ef2792f0d15"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F62dd28d6-72d9-4f9c-8eb7-cc97b6279d6b.jpeg
200 OK 9.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F62dd28d6-72d9-4f9c-8eb7-cc97b6279d6b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3056431736af42cc145a77dbc77c45a7
977068c1cfdf8dfb64cbe8fb8d917ebc8e3e970e
d299e38c678f4c4548cd2e7cf7ff1b07910b316bfc8b13c492b4fbee0a66b079
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F62dd28d6-72d9-4f9c-8eb7-cc97b6279d6b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9892
x-amzn-requestid: c492a572-0b9e-4176-91e9-a11fedf8c06e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Yyj8OE7nIAMFwQA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632a804e-0d6e804d4368880535f6c115;Sampled=0
x-amzn-remapped-date: Wed, 21 Sep 2022 03:09:02 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: Te1oX4iUxYNB19Uuk39k9DrhHiCVSwnNSpdYQDK_N5AYtXqJIe-ggg==
via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 cd64decb1403270c914848213601a674.cloudfront.net (CloudFront), 1.1 google
date: Thu, 22 Sep 2022 04:26:52 GMT
age: 72335
etag: "977068c1cfdf8dfb64cbe8fb8d917ebc8e3e970e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F56968ed0-3207-4af0-8229-5f3698c6c55f.jpeg
200 OK 5.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F56968ed0-3207-4af0-8229-5f3698c6c55f.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 61059307f07edc4e2ba9d07a258bca43
370d166426ad83fc04ccb6e300238d8cb6ab644a
55ec802097ab49f275686e99844ff4a3b554c8998213bb9c3f0380709297c55b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F56968ed0-3207-4af0-8229-5f3698c6c55f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5936
x-amzn-requestid: 39e79389-c158-4427-aae0-b1d0dc1d0377
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y4VowElZoAMF2Ow=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632ccfd1-2da28eb66f876af76158b090;Sampled=0
x-amzn-remapped-date: Thu, 22 Sep 2022 21:12:49 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: -DSp0__jaBzizsfagTtIpwhkPqkvjS1L6T17J0OS5W0QhZww03ywpw==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 02d90bf99fd6253b329a53c82f19e224.cloudfront.net (CloudFront), 1.1 google
date: Thu, 22 Sep 2022 22:42:39 GMT
age: 6588
etag: "370d166426ad83fc04ccb6e300238d8cb6ab644a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
bootstrap.smartsuppchat.com/widget/76c55fb536a8a3965c8cd8c28546bd2c38f6704f.json
200 OK 0 B URL HTTP/2 bootstrap.smartsuppchat.com/widget/76c55fb536a8a3965c8cd8c28546bd2c38f6704f.json
IP
GET /widget/76c55fb536a8a3965c8cd8c28546bd2c38f6704f.json HTTP/1.1
Host: bootstrap.smartsuppchat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: http://ucfzfqp8.gq
Connection: keep-alive
Referer: http://ucfzfqp8.gq/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 23 Sep 2022 00:32:26 GMT
content-type: application/json; charset=utf-8
x-version: 40abd74f2935f2a6d1a2667e53c08501d31c5c2e
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: private, max-age=0, must-revalidate
x-hit: redis
etag: "445-p9WsxWT8WEmwiLpvVdMb7vNP8Ws"
content-encoding: br
X-Firefox-Spdy: h2
69.49.231.177
185.76.9.15
3.73.251.220
81.26.195.203
23.36.77.32
93.184.220.29
0.0.0.0