login-utente.gettrials.com/
200 OK 120 B URL HTTP/1.1 login-utente.gettrials.com/
IP
ASN #133398 Tele Asia Limited
File type ASCII text, with no line terminators
Hash 7c0bde3a8f9710465f306038610055b9
965b90ce1eb8c916cfe84bd3bc9bb59245834b50
cfd6c7b91ed696996645b99b8355cf692c193b8f201d645c8a9667e6f9d6781e
Analyzer Verdict Alert urlquery DynDNS domain detected
fortinet Phishing
quad9 Sinkholed
GET / HTTP/1.1
Host: login-utente.gettrials.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Tue, 13 Sep 2022 20:18:49 GMT
Server: Apache/2.4.18 (Ubuntu)
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 120
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash b593eb39329cfe060d55be5e4a5405e2
78e46c1028e9f94f8569303ad2d90d7df13a059a
08a810103557efe55ca4425ff0cf82593f1f54633df899127eaec9bee05d4d04
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, Alert, Content-Length, Content-Type, Backoff
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Tue, 13 Sep 2022 20:08:53 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 095562e8748e634f880ee3c4ada2b6d0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: Ci1udHdHg_7lp5Tr_8bL7kg7WGi4PXWcYRl84CyEoc7kv_uQt8ubTA==
Age: 596
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash be88d3e043e3b95b52e41812e50fb634
0318ba1ce487817ea7cba61dd9413bed29213800
b5f178d23e633283f226cca7a9ae79b01e6cab2299ff7065c980d3a9953212fd
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B5F178D23E633283F226CCA7A9AE79B01E6CAB2299FF7065C980D3A9953212FD"
Last-Modified: Tue, 13 Sep 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7766
Expires: Tue, 13 Sep 2022 22:28:15 GMT
Date: Tue, 13 Sep 2022 20:18:49 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
IP
File type PEM certificate\012- , ASCII text
Hash 742edb4038f38bc533514982f3d2e861
cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1
b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Tue, 13 Sep 2022 07:17:13 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 a2b4f68a89fc87406bff22c95fc07fba.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: _USP4ePzuqOhAJcl1h_IomYJe3IlQ7Qs4GxT0yg-MPtbIiOzPQCWxA==
age: 56615
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 13 Sep 2022 20:18:49 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600
Date: Tue, 13 Sep 2022 20:03:22 GMT
Expires: Tue, 13 Sep 2022 20:52:25 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 410f51195842d9b592b15d6588c36654.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: MgZe2gMLk9lSpGYaZ_prcTQxPgQELR3vxyquAt-UqNS7jZLpCXPqQQ==
Age: 928
ocsp.globalsign.com/gsrsaovsslca2018
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsrsaovsslca2018
IP
Hash 201a161e6d26d2cc8ed6c7818e810445
e523696d31b76aee7a88637d4a4ea6f9505443fe
13126cd106fb188111e5e7858daf003a8a9e37ead6f9902ecc2b840d8dd56922
POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 13 Sep 2022 20:18:50 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Sat, 17 Sep 2022 17:21:43 GMT
ETag: "e523696d31b76aee7a88637d4a4ea6f9505443fe"
Last-Modified: Tue, 13 Sep 2022 17:21:44 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: EXPIRED
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74a3930778110b39-OSL
ocsp.digicert.com/
200 OK 471 B IP
Hash e96dbe1b54932c8f447bbbfc9d31cfb0
b15d4a54fbdf95b0af8bd34b6f8ef03055eef0cd
427326963ac1ef6ddeeaf52ab07807c694b82effa6111671ada8270b1faecdae
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 721
Cache-Control: max-age=129606
Content-Type: application/ocsp-response
Date: Tue, 13 Sep 2022 20:18:50 GMT
Etag: "63203a1f-1d7"
Expires: Thu, 15 Sep 2022 08:18:56 GMT
Last-Modified: Tue, 13 Sep 2022 08:06:55 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
assets.adobedtm.com/9dd8bdfc74c3/cd37bd923e2c/launch-a40afd213c32.min.js
200 OK 71 kB URL HTTP/2 assets.adobedtm.com/9dd8bdfc74c3/cd37bd923e2c/launch-a40afd213c32.min.js
IP
File type ASCII text, with very long lines (32746)
Hash b3eb0d3a836e484762db3bf7ef3458c3
c6c2817370be9a81191d96ad2e5b7ce108fc86e3
1dba577a90c44faa7488c7d16b69d3d08457723dc29b7acf61acb240782b1129
GET /9dd8bdfc74c3/cd37bd923e2c/launch-a40afd213c32.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nexi.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "8ea4dd166972a807f089f169e8c4d349:1649164291.270241"
last-modified: Tue, 05 Apr 2022 13:11:31 GMT
server: AkamaiNetStorage
unused62: 8096267
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=3600
expires: Tue, 13 Sep 2022 21:18:50 GMT
date: Tue, 13 Sep 2022 20:18:50 GMT
content-length: 70944
access-control-allow-origin: https://www.nexi.it
timing-allow-origin: *
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash c79a6d9219e52788c0288a4288601f0b
a55c74c35279d08872bb4b0805d3f8ff684bc322
345482ec25a567e189a52a824fa13f6bbcfa8ce636c40f3619232b9cff65fa6a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 13 Sep 2022 20:18:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtm.js?id=GTM-MVCHKSD
200 OK 91 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-MVCHKSD
IP
File type ASCII text, with very long lines (36044)
Hash 68d593bf66d9512da836b3ea6dcbd92f
3bb6a8873b0a9101a0c31295cb8015926172f2ba
0e95caaf00079249a63526ff24e9bae715233bdaf135a17db3935089cceb396b
GET /gtm.js?id=GTM-MVCHKSD HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nexi.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 13 Sep 2022 20:18:50 GMT
expires: Tue, 13 Sep 2022 20:18:50 GMT
cache-control: private, max-age=900
last-modified: Tue, 13 Sep 2022 18:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 90923
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash c79a6d9219e52788c0288a4288601f0b
a55c74c35279d08872bb4b0805d3f8ff684bc322
345482ec25a567e189a52a824fa13f6bbcfa8ce636c40f3619232b9cff65fa6a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 13 Sep 2022 20:18:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 471 B IP
Hash 4ac6343060e6c23c10fb5c692632af18
524fa4777dc2ca6ebd6a307819c582281303ff8c
39f24a63ebc17e2b8b7e3ee141954b8ef21fb805c761130803e7bc5995daad82
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5170
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 13 Sep 2022 20:18:50 GMT
Last-Modified: Tue, 13 Sep 2022 18:52:40 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: yNC5gQHuM3xWRCbwmSd5vA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: Ue3uBy5IXGWMLUCcScKKnCO5eO0=
dpm.demdex.net/id?d_visid_ver=5.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=6A724E255ED5F2A60A495E0E%40AdobeOrg&d_nsid=0&ts=1663100317462
200 OK 312 B URL HTTP/1.1 dpm.demdex.net/id?d_visid_ver=5.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=6A724E255ED5F2A60A495E0E%40AdobeOrg&d_nsid=0&ts=1663100317462
IP
File type JSON data\012- , ASCII text, with very long lines (371), with no line terminators
Hash 291fe667a4f1ebbc45ad73cedc046eec
52954f48cdad3873c8356e58e2484509c7482769
f2ad944b4ae94b5a3e04ebecaf1f7544951840845b1f783ae09288c934942cf3
GET /id?d_visid_ver=5.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=6A724E255ED5F2A60A495E0E%40AdobeOrg&d_nsid=0&ts=1663100317462 HTTP/1.1
Host: dpm.demdex.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Origin: https://www.nexi.it
Connection: keep-alive
Referer: https://www.nexi.it/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://www.nexi.it
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
content-encoding: gzip
Content-Type: application/json;charset=utf-8
DCS: dcs-prod-irl1-1-v039-04504ed26.edge-irl1.demdex.com 3 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
set-cookie: demdex=75565927238606721712923302692344293694; Max-Age=15552000; Expires=Sun, 12 Mar 2023 20:18:50 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin
X-TID: n8xtj/mpQME=
Content-Length: 312
Connection: keep-alive
www.nexi.it/etc/designs/icbpi-common/libs/jquery-3.5.1.min.js
200 OK 90 kB URL HTTP/1.1 www.nexi.it/etc/designs/icbpi-common/libs/jquery-3.5.1.min.js
IP
ASN #35051 Nexi Payments S.P.A.
File type ASCII text, with very long lines (65450), with CRLF line terminators
Hash 9ac39dc31635a363e377eda0f6fbe03f
29fa5ad995e9ec866ece1d3d0b698fc556580eee
9a2723c21fb1b7dff0e2aa5dc6be24a9670220a17ae21f70fdbc602d1f8acd38
GET /etc/designs/icbpi-common/libs/jquery-3.5.1.min.js HTTP/1.1
Host: www.nexi.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nexi.it/login-titolari.html?https://www.nexi.it/privati/servizi/area-personale.html
Cookie: lb_cookie2="faa7f7358a641e95cfaf1e92bce5195b7cf88a9165f2974909f85ac391e9e420 pero"; ncsi=e6f6c1f6a59f30ede255b567e9b8a04c; binc=6bc9120ef54b0c2885bd4dfc61f5c443; TS01a05a0f=01d37309fcd6fdd0f034f16f443628fa30dab5539dd55672e2f38ce004918bfe63bd5fccf6a0203ee99833ea3ecd23407f8f97904117ddb5fe2bf41c88f86df05b7b944a18; TS019ca071=01d37309fca1bab364766e2adc0a17d79d4eab4034d55672e2f38ce004918bfe63bd5fccf639a0e4355757311db3efdd2a28d0d88d3e9e4bf62e2b19ebf65b0fefc412c1a6c65ac200212fe44a02d24ba241816666
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 13 Sep 2022 20:18:50 GMT
Last-Modified: Wed, 07 Sep 2022 07:52:48 GMT
ETag: "15d84-5e8119954c8bc"
Accept-Ranges: bytes
Vary: Accept-Encoding
Access-Control-Allow-Methods: GET, HEAD
Cache-Control: max-age=300, public
Keep-Alive: timeout=5, max=82
Connection: Keep-Alive
Content-Type: application/javascript
P3P: policyref="/w3c/p3p.xml", CP="IDC DSP COR NID DEVi OUR BUS INT"
Set-Cookie: TS01a05a0f=01d37309fcd6fdd0f034f16f443628fa30dab5539dd55672e2f38ce004918bfe63bd5fccf6a0203ee99833ea3ecd23407f8f97904117ddb5fe2bf41c88f86df05b7b944a18; Path=/; Domain=.www.nexi.it
Transfer-Encoding: chunked
www.nexi.it/etc/designs/nexi/clientlib-node/style.css
200 OK 129 kB URL HTTP/1.1 www.nexi.it/etc/designs/nexi/clientlib-node/style.css
IP
ASN #35051 Nexi Payments S.P.A.
File type ASCII text, with very long lines (56247), with CRLF, LF line terminators
Size 129 kB (128899 bytes)
Hash 4cd1ee565f99c87d020072625bcba28b
701cfaa342313111ea30f137aab625a68f1bbefa
20c1536c08f9e5d3849e77d63dde9b90d4d944b82d08208cdd83a397e279ec86
GET /etc/designs/nexi/clientlib-node/style.css HTTP/1.1
Host: www.nexi.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nexi.it/login-titolari.html?https://www.nexi.it/privati/servizi/area-personale.html
Cookie: lb_cookie2="faa7f7358a641e95cfaf1e92bce5195b7cf88a9165f2974909f85ac391e9e420 pero"; ncsi=e6f6c1f6a59f30ede255b567e9b8a04c; binc=6bc9120ef54b0c2885bd4dfc61f5c443; TS01a05a0f=01d37309fcd6fdd0f034f16f443628fa30dab5539dd55672e2f38ce004918bfe63bd5fccf6a0203ee99833ea3ecd23407f8f97904117ddb5fe2bf41c88f86df05b7b944a18; TS019ca071=01d37309fca1bab364766e2adc0a17d79d4eab4034d55672e2f38ce004918bfe63bd5fccf639a0e4355757311db3efdd2a28d0d88d3e9e4bf62e2b19ebf65b0fefc412c1a6c65ac200212fe44a02d24ba241816666
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 13 Sep 2022 20:18:50 GMT
Last-Modified: Wed, 07 Sep 2022 07:52:51 GMT
ETag: "8647c-5e81199877d4e"
Accept-Ranges: bytes
Vary: Accept-Encoding
Access-Control-Allow-Methods: GET, HEAD
Cache-Control: max-age=300, public
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: text/css
P3P: policyref="/w3c/p3p.xml", CP="IDC DSP COR NID DEVi OUR BUS INT"
Set-Cookie: TS01a05a0f=01d37309fcd6fdd0f034f16f443628fa30dab5539dd55672e2f38ce004918bfe63bd5fccf6a0203ee99833ea3ecd23407f8f97904117ddb5fe2bf41c88f86df05b7b944a18; Path=/; Domain=.www.nexi.it
Content-Encoding: gzip
Transfer-Encoding: chunked
www.nexi.it/login-titolari.html?https://www.nexi.it/privati/servizi/area-personale.html
200 OK 942 kB URL HTTP/1.1 www.nexi.it/login-titolari.html?https://www.nexi.it/privati/servizi/area-personale.html
IP
ASN #35051 Nexi Payments S.P.A.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (2795), with CRLF, LF line terminators
Size 942 kB (941789 bytes)
Hash 8299a921cd3cb8bbf70710cb1dfe2c26
05a8dd17f8b18ef4684b4cb16e79f5ab836ce5cf
ad9973c1686e1e89c4afef0c4b2f7e3ed0860761e7ee9f407151ea4b76f32677
GET /login-titolari.html?https://www.nexi.it/privati/servizi/area-personale.html HTTP/1.1
Host: www.nexi.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Tue, 13 Sep 2022 20:18:50 GMT
Last-Modified: Fri, 09 Sep 2022 07:21:33 GMT
ETag: "e5e00-5e839654dad78"
Accept-Ranges: bytes
Vary: Accept-Encoding
Access-Control-Allow-Methods: GET, HEAD
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
P3P: policyref="/w3c/p3p.xml", CP="IDC DSP COR NID DEVi OUR BUS INT"
Set-Cookie: lb_cookie2="faa7f7358a641e95cfaf1e92bce5195b7cf88a9165f2974909f85ac391e9e420 pero"; Path=/; Domain=.nexi.it; Expires=Tue, 13-Sep-2022 22:18:50 GMT
ncsi=e6f6c1f6a59f30ede255b567e9b8a04c; Path=/; Domain=nexi.it; Expires=Tue, 13-Sep-2022 20:48:50 GMT
binc=6bc9120ef54b0c2885bd4dfc61f5c443; Path=/; Domain=nexi.it; Expires=Wed, 13-Sep-2023 20:18:50 GMT
TS01a05a0f=01d37309fcd6fdd0f034f16f443628fa30dab5539dd55672e2f38ce004918bfe63bd5fccf6a0203ee99833ea3ecd23407f8f97904117ddb5fe2bf41c88f86df05b7b944a18; Path=/; Domain=.www.nexi.it
TS019ca071=01d37309fca1bab364766e2adc0a17d79d4eab4034d55672e2f38ce004918bfe63bd5fccf639a0e4355757311db3efdd2a28d0d88d3e9e4bf62e2b19ebf65b0fefc412c1a6c65ac200212fe44a02d24ba241816666; path=/; domain=nexi.it
uniqueid: c0d1a067e07e50aae032e9837bef95b1
Transfer-Encoding: chunked
www.nexi.it/content/dam/nexi/new-login-2019/loghi/logo--light-double.svg
200 OK 1.5 kB URL HTTP/1.1 www.nexi.it/content/dam/nexi/new-login-2019/loghi/logo--light-double.svg
IP
ASN #35051 Nexi Payments S.P.A.
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 77ef18d95472ac80e6e86cf40daf8d4e
9289a4e6397fb8374db9532c00b684d0568c9e2c
c37a1253313f01ecf7b8d5ac83025a8059d161d955ecbe5254c99d4edf6989fc
GET /content/dam/nexi/new-login-2019/loghi/logo--light-double.svg HTTP/1.1
Host: www.nexi.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nexi.it/login-titolari.html?https://www.nexi.it/privati/servizi/area-personale.html
Cookie: lb_cookie2="faa7f7358a641e95cfaf1e92bce5195b7cf88a9165f2974909f85ac391e9e420 pero"; ncsi=e6f6c1f6a59f30ede255b567e9b8a04c; binc=6bc9120ef54b0c2885bd4dfc61f5c443; TS01a05a0f=01d37309fcd6fdd0f034f16f443628fa30dab5539dd55672e2f38ce004918bfe63bd5fccf6a0203ee99833ea3ecd23407f8f97904117ddb5fe2bf41c88f86df05b7b944a18; TS019ca071=01d37309fca1bab364766e2adc0a17d79d4eab4034d55672e2f38ce004918bfe63bd5fccf639a0e4355757311db3efdd2a28d0d88d3e9e4bf62e2b19ebf65b0fefc412c1a6c65ac200212fe44a02d24ba241816666
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 13 Sep 2022 20:18:51 GMT
Last-Modified: Wed, 07 Sep 2022 07:52:42 GMT
ETag: "5c4-5e811990197f6"
Accept-Ranges: bytes
Content-Length: 1476
Vary: Accept-Encoding
Access-Control-Allow-Methods: GET, HEAD
Cache-Control: max-age=300, public
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/svg+xml
P3P: policyref="/w3c/p3p.xml", CP="IDC DSP COR NID DEVi OUR BUS INT"
Set-Cookie: TS01a05a0f=01d37309fcd6fdd0f034f16f443628fa30dab5539dd55672e2f38ce004918bfe63bd5fccf6a0203ee99833ea3ecd23407f8f97904117ddb5fe2bf41c88f86df05b7b944a18; Path=/; Domain=.www.nexi.it
www.nexi.it/content/dam/nexi/img/icone/svg/icon-close-white.svg
200 OK 1.6 kB URL HTTP/1.1 www.nexi.it/content/dam/nexi/img/icone/svg/icon-close-white.svg
IP
ASN #35051 Nexi Payments S.P.A.
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash e61ea756f9b2ae7f774048dfbc85f1df
d50555f8f6e6882e1031332a76a48ab9709f13b1
32cde70fcb4ed6949904cec5ef9065adce2196b3e8216bb5874019a9efe96edd
GET /content/dam/nexi/img/icone/svg/icon-close-white.svg HTTP/1.1
Host: www.nexi.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nexi.it/login-titolari.html?https://www.nexi.it/privati/servizi/area-personale.html
Cookie: lb_cookie2="faa7f7358a641e95cfaf1e92bce5195b7cf88a9165f2974909f85ac391e9e420 pero"; ncsi=e6f6c1f6a59f30ede255b567e9b8a04c; binc=6bc9120ef54b0c2885bd4dfc61f5c443; TS01a05a0f=01d37309fcd6fdd0f034f16f443628fa30dab5539dd55672e2f38ce004918bfe63bd5fccf6a0203ee99833ea3ecd23407f8f97904117ddb5fe2bf41c88f86df05b7b944a18; TS019ca071=01d37309fca1bab364766e2adc0a17d79d4eab4034d55672e2f38ce004918bfe63bd5fccf639a0e4355757311db3efdd2a28d0d88d3e9e4bf62e2b19ebf65b0fefc412c1a6c65ac200212fe44a02d24ba241816666; AMCV_6A724E255ED5F2A60A495E0E%40AdobeOrg=1176715910%7CMCIDTS%7C19249%7CvVersion%7C5.4.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 13 Sep 2022 20:18:51 GMT
Last-Modified: Wed, 07 Sep 2022 07:52:38 GMT
ETag: "637-5e81198c4d62d"
Accept-Ranges: bytes
Content-Length: 1591
Vary: Accept-Encoding
Access-Control-Allow-Methods: GET, HEAD
Cache-Control: max-age=300, public
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/svg+xml
P3P: policyref="/w3c/p3p.xml", CP="IDC DSP COR NID DEVi OUR BUS INT"
Set-Cookie: TS01a05a0f=01d37309fcd6fdd0f034f16f443628fa30dab5539dd55672e2f38ce004918bfe63bd5fccf6a0203ee99833ea3ecd23407f8f97904117ddb5fe2bf41c88f86df05b7b944a18; Path=/; Domain=.www.nexi.it
www.nexi.it/content/dam/nexi/new-login-2019/icons/huawei-store.svg
200 OK 22 kB URL HTTP/1.1 www.nexi.it/content/dam/nexi/new-login-2019/icons/huawei-store.svg
IP
ASN #35051 Nexi Payments S.P.A.
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document, ASCII text, with very long lines (18654)
Hash c26df35adcfe9f354a77777ea613f41d
45f3282c28ae184c6a1811c21e08526c6c7dc45f
a22ea2c13b8179c675566ef9ce7a77c663056b6147674c851d898b21f6c68ee6
GET /content/dam/nexi/new-login-2019/icons/huawei-store.svg HTTP/1.1
Host: www.nexi.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nexi.it/login-titolari.html?https://www.nexi.it/privati/servizi/area-personale.html
Cookie: lb_cookie2="faa7f7358a641e95cfaf1e92bce5195b7cf88a9165f2974909f85ac391e9e420 pero"; ncsi=e6f6c1f6a59f30ede255b567e9b8a04c; binc=6bc9120ef54b0c2885bd4dfc61f5c443; TS01a05a0f=01d37309fcd6fdd0f034f16f443628fa30dab5539dd55672e2f38ce004918bfe63bd5fccf6a0203ee99833ea3ecd23407f8f97904117ddb5fe2bf41c88f86df05b7b944a18; TS019ca071=01d37309fca1bab364766e2adc0a17d79d4eab4034d55672e2f38ce004918bfe63bd5fccf639a0e4355757311db3efdd2a28d0d88d3e9e4bf62e2b19ebf65b0fefc412c1a6c65ac200212fe44a02d24ba241816666
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 13 Sep 2022 20:18:51 GMT
Last-Modified: Wed, 07 Sep 2022 07:52:40 GMT
ETag: "5675-5e81198e4a31e"
Accept-Ranges: bytes
Content-Length: 22133
Vary: Accept-Encoding
Access-Control-Allow-Methods: GET, HEAD
Cache-Control: max-age=300, public
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/svg+xml
P3P: policyref="/w3c/p3p.xml", CP="IDC DSP COR NID DEVi OUR BUS INT"
Set-Cookie: TS01a05a0f=01d37309fcd6fdd0f034f16f443628fa30dab5539dd55672e2f38ce004918bfe63bd5fccf6a0203ee99833ea3ecd23407f8f97904117ddb5fe2bf41c88f86df05b7b944a18; Path=/; Domain=.www.nexi.it
www.nexi.it/content/dam/nexi/new-login-2019/icons/app_store.svg
200 OK 16 kB URL HTTP/1.1 www.nexi.it/content/dam/nexi/new-login-2019/icons/app_store.svg
IP
ASN #35051 Nexi Payments S.P.A.
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1295)
Hash d11b30ed05c8b249efe85b47532305c4
e2be0738062a412e6a31b6bc67ea983b1db98732
5e3c6b5c51b5fbf7691fa5d0adbcd05be694548d5f03aee7d59d7a8b092b5d27
GET /content/dam/nexi/new-login-2019/icons/app_store.svg HTTP/1.1
Host: www.nexi.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nexi.it/login-titolari.html?https://www.nexi.it/privati/servizi/area-personale.html
Cookie: lb_cookie2="faa7f7358a641e95cfaf1e92bce5195b7cf88a9165f2974909f85ac391e9e420 pero"; ncsi=e6f6c1f6a59f30ede255b567e9b8a04c; binc=6bc9120ef54b0c2885bd4dfc61f5c443; TS01a05a0f=01d37309fcd6fdd0f034f16f443628fa30dab5539dd55672e2f38ce004918bfe63bd5fccf6a0203ee99833ea3ecd23407f8f97904117ddb5fe2bf41c88f86df05b7b944a18; TS019ca071=01d37309fca1bab364766e2adc0a17d79d4eab4034d55672e2f38ce004918bfe63bd5fccf639a0e4355757311db3efdd2a28d0d88d3e9e4bf62e2b19ebf65b0fefc412c1a6c65ac200212fe44a02d24ba241816666
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 13 Sep 2022 20:18:51 GMT
Last-Modified: Wed, 07 Sep 2022 07:52:42 GMT
ETag: "3dc8-5e81198fa198c"
Accept-Ranges: bytes
Content-Length: 15816
Vary: Accept-Encoding
Access-Control-Allow-Methods: GET, HEAD
Cache-Control: max-age=300, public
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/svg+xml
P3P: policyref="/w3c/p3p.xml", CP="IDC DSP COR NID DEVi OUR BUS INT"
Set-Cookie: TS01a05a0f=01d37309fcd6fdd0f034f16f443628fa30dab5539dd55672e2f38ce004918bfe63bd5fccf6a0203ee99833ea3ecd23407f8f97904117ddb5fe2bf41c88f86df05b7b944a18; Path=/; Domain=.www.nexi.it
www.nexi.it/content/dam/nexi/img/icone/svg/icon-phone.svg
200 OK 4.0 kB URL HTTP/1.1 www.nexi.it/content/dam/nexi/img/icone/svg/icon-phone.svg
IP
ASN #35051 Nexi Payments S.P.A.
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash ba155a06b6ed2efff975f38208ca03a7
e75f40d95197f19c38d900ac7c749857fbdb93f7
7e6f9ccce4ea514b53fb258d72b5682c74d1e81ef9148d3c406fbd03cfd56919
GET /content/dam/nexi/img/icone/svg/icon-phone.svg HTTP/1.1
Host: www.nexi.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nexi.it/login-titolari.html?https://www.nexi.it/privati/servizi/area-personale.html
Cookie: lb_cookie2="faa7f7358a641e95cfaf1e92bce5195b7cf88a9165f2974909f85ac391e9e420 pero"; ncsi=e6f6c1f6a59f30ede255b567e9b8a04c; binc=6bc9120ef54b0c2885bd4dfc61f5c443; TS01a05a0f=01d37309fcd6fdd0f034f16f443628fa30dab5539dd55672e2f38ce004918bfe63bd5fccf6a0203ee99833ea3ecd23407f8f97904117ddb5fe2bf41c88f86df05b7b944a18; TS019ca071=01d37309fca1bab364766e2adc0a17d79d4eab4034d55672e2f38ce004918bfe63bd5fccf639a0e4355757311db3efdd2a28d0d88d3e9e4bf62e2b19ebf65b0fefc412c1a6c65ac200212fe44a02d24ba241816666; AMCV_6A724E255ED5F2A60A495E0E%40AdobeOrg=1176715910%7CMCIDTS%7C19249%7CvVersion%7C5.4.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 13 Sep 2022 20:18:51 GMT
Last-Modified: Wed, 07 Sep 2022 07:52:42 GMT
ETag: "fb0-5e81198f87806"
Accept-Ranges: bytes
Content-Length: 4016
Vary: Accept-Encoding
Access-Control-Allow-Methods: GET, HEAD
Cache-Control: max-age=300, public
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/svg+xml
P3P: policyref="/w3c/p3p.xml", CP="IDC DSP COR NID DEVi OUR BUS INT"
Set-Cookie: TS01a05a0f=01d37309fcd6fdd0f034f16f443628fa30dab5539dd55672e2f38ce004918bfe63bd5fccf6a0203ee99833ea3ecd23407f8f97904117ddb5fe2bf41c88f86df05b7b944a18; Path=/; Domain=.www.nexi.it
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 78f8bae58862d8be3437cfe9e927011d
fb01a9cfd346f2c9b7694276c72a76e213887b06
389d233aa4b3ea23315c9d6e8d72d96fb2f802e227d24199c788a5a89e96a19e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 13 Sep 2022 20:18:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.nexi.it/content/dam/nexi/new-login-2019/icons/google_play.svg
200 OK 25 kB URL HTTP/1.1 www.nexi.it/content/dam/nexi/new-login-2019/icons/google_play.svg
IP
ASN #35051 Nexi Payments S.P.A.
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (24914)
Hash 9f366adad75cc2c3bf7d704939967a7b
54264a40ad66760e85e4a7407f78a94ccfe754d1
ed313341bbd73a61ddacf268f494c9f85cb84e46f8954bde8a5260e21174f340
GET /content/dam/nexi/new-login-2019/icons/google_play.svg HTTP/1.1
Host: www.nexi.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nexi.it/login-titolari.html?https://www.nexi.it/privati/servizi/area-personale.html
Cookie: lb_cookie2="faa7f7358a641e95cfaf1e92bce5195b7cf88a9165f2974909f85ac391e9e420 pero"; ncsi=e6f6c1f6a59f30ede255b567e9b8a04c; binc=6bc9120ef54b0c2885bd4dfc61f5c443; TS01a05a0f=01d37309fcd6fdd0f034f16f443628fa30dab5539dd55672e2f38ce004918bfe63bd5fccf6a0203ee99833ea3ecd23407f8f97904117ddb5fe2bf41c88f86df05b7b944a18; TS019ca071=01d37309fca1bab364766e2adc0a17d79d4eab4034d55672e2f38ce004918bfe63bd5fccf639a0e4355757311db3efdd2a28d0d88d3e9e4bf62e2b19ebf65b0fefc412c1a6c65ac200212fe44a02d24ba241816666
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 13 Sep 2022 20:18:51 GMT
Last-Modified: Wed, 07 Sep 2022 07:52:44 GMT
ETag: "62ff-5e811991d665e"
Accept-Ranges: bytes
Content-Length: 25343
Vary: Accept-Encoding
Access-Control-Allow-Methods: GET, HEAD
Cache-Control: max-age=300, public
Keep-Alive: timeout=5, max=81
Connection: Keep-Alive
Content-Type: image/svg+xml
P3P: policyref="/w3c/p3p.xml", CP="IDC DSP COR NID DEVi OUR BUS INT"
Set-Cookie: TS01a05a0f=01d37309fcd6fdd0f034f16f443628fa30dab5539dd55672e2f38ce004918bfe63bd5fccf6a0203ee99833ea3ecd23407f8f97904117ddb5fe2bf41c88f86df05b7b944a18; Path=/; Domain=.www.nexi.it
www.google.com/recaptcha/api.js
200 OK 557 B URL HTTP/2 www.google.com/recaptcha/api.js
IP
File type ASCII text, with very long lines (850), with no line terminators
Hash 2ccc89f867610ca13b2456db03928f05
d9816baef3ded701d95b61e184d8b7fe2f473c09
fb834adb29f4d3ba0653177176a82a136a06fd8cf8c55583372eabf7212eb25b
GET /recaptcha/api.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nexi.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expires: Tue, 13 Sep 2022 20:18:51 GMT
date: Tue, 13 Sep 2022 20:18:51 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 557
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.nexi.it/g78f9/in/c0d1a067e07e50aae032e9837bef95b1/2/1?t=1663100330
200 OK 5.3 kB URL HTTP/1.1 www.nexi.it/g78f9/in/c0d1a067e07e50aae032e9837bef95b1/2/1?t=1663100330
IP
ASN #35051 Nexi Payments S.P.A.
File type ASCII text, with very long lines (11179), with no line terminators
Hash cf56ad7525c3976a45276053c2e8187b
305637781ba73e14d9961629d576b7a2fb57639a
63a6cc6ab455f50b681c4be19a7e8e8d700d2bd2814536406ff0d64722755fa8
GET /g78f9/in/c0d1a067e07e50aae032e9837bef95b1/2/1?t=1663100330 HTTP/1.1
Host: www.nexi.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nexi.it/login-titolari.html?https://www.nexi.it/privati/servizi/area-personale.html
Cookie: lb_cookie2="faa7f7358a641e95cfaf1e92bce5195b7cf88a9165f2974909f85ac391e9e420 pero"; ncsi=e6f6c1f6a59f30ede255b567e9b8a04c; binc=6bc9120ef54b0c2885bd4dfc61f5c443; TS01a05a0f=01d37309fcd6fdd0f034f16f443628fa30dab5539dd55672e2f38ce004918bfe63bd5fccf6a0203ee99833ea3ecd23407f8f97904117ddb5fe2bf41c88f86df05b7b944a18; TS019ca071=01d37309fca1bab364766e2adc0a17d79d4eab4034d55672e2f38ce004918bfe63bd5fccf639a0e4355757311db3efdd2a28d0d88d3e9e4bf62e2b19ebf65b0fefc412c1a6c65ac200212fe44a02d24ba241816666; AMCV_6A724E255ED5F2A60A495E0E%40AdobeOrg=1176715910%7CMCIDTS%7C19249%7CMCMID%7C69922899272009973962397704871722624897%7CMCAAMLH-1663705117%7C6%7CMCAAMB-1663705117%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1663107517s%7CNONE%7CvVersion%7C5.4.0; AMCVS_6A724E255ED5F2A60A495E0E%40AdobeOrg=1; _ga_2EQBRC1CMY=GS1.1.1663100317.1.0.1663100317.0.0.0; _ga=GA1.1.540140703.1663100318
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 13 Sep 2022 20:18:51 GMT
Content-Type: text/javascript; charset=utf-8
Cache-Control: no-cache, no-store, proxy-revalidate, no-transform, must-revalidate
Pragma: no-cache
Expires: 0
Vary: Accept-Encoding
P3P: policyref="/w3c/p3p.xml", CP="IDC DSP COR NID DEVi OUR BUS INT"
Set-Cookie: TS01a05a0f=01d37309fcd6fdd0f034f16f443628fa30dab5539dd55672e2f38ce004918bfe63bd5fccf6a0203ee99833ea3ecd23407f8f97904117ddb5fe2bf41c88f86df05b7b944a18; Path=/; Domain=.www.nexi.it
Content-Encoding: gzip
Transfer-Encoding: chunked
www.nexi.it/cookieservice/nexi-it/style.css
200 OK 6.8 kB URL HTTP/1.1 www.nexi.it/cookieservice/nexi-it/style.css
IP
ASN #35051 Nexi Payments S.P.A.
Hash a44e7ee77847a1fc51c3d4fd03121997
38c8466690ee68cf72ade2deb45bbd6eb50848fe
a16ecf05a07718b0abed8aa88376dc930fad915ca41e0565048d74741b431eaf
GET /cookieservice/nexi-it/style.css HTTP/1.1
Host: www.nexi.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nexi.it/login-titolari.html?https://www.nexi.it/privati/servizi/area-personale.html
Cookie: lb_cookie2="faa7f7358a641e95cfaf1e92bce5195b7cf88a9165f2974909f85ac391e9e420 pero"; ncsi=e6f6c1f6a59f30ede255b567e9b8a04c; binc=6bc9120ef54b0c2885bd4dfc61f5c443; TS01a05a0f=01d37309fcd6fdd0f034f16f443628fa30dab5539dd55672e2f38ce004918bfe63bd5fccf6a0203ee99833ea3ecd23407f8f97904117ddb5fe2bf41c88f86df05b7b944a18; TS019ca071=01d37309fca1bab364766e2adc0a17d79d4eab4034d55672e2f38ce004918bfe63bd5fccf639a0e4355757311db3efdd2a28d0d88d3e9e4bf62e2b19ebf65b0fefc412c1a6c65ac200212fe44a02d24ba241816666; AMCV_6A724E255ED5F2A60A495E0E%40AdobeOrg=1176715910%7CMCIDTS%7C19249%7CMCMID%7C69922899272009973962397704871722624897%7CMCAAMLH-1663705117%7C6%7CMCAAMB-1663705117%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1663107517s%7CNONE%7CvVersion%7C5.4.0; AMCVS_6A724E255ED5F2A60A495E0E%40AdobeOrg=1; _ga_2EQBRC1CMY=GS1.1.1663100317.1.0.1663100317.0.0.0; _ga=GA1.1.540140703.1663100318
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 13 Sep 2022 20:18:51 GMT
Last-Modified: Wed, 07 Sep 2022 07:52:44 GMT
ETag: "52c6-5e81199211676"
Accept-Ranges: bytes
Content-Length: 6775
Vary: Accept-Encoding
Access-Control-Allow-Methods: GET, HEAD
Cache-Control: max-age=300, public
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css
P3P: policyref="/w3c/p3p.xml", CP="IDC DSP COR NID DEVi OUR BUS INT"
Set-Cookie: TS01a05a0f=01d37309fcd6fdd0f034f16f443628fa30dab5539dd55672e2f38ce004918bfe63bd5fccf6a0203ee99833ea3ecd23407f8f97904117ddb5fe2bf41c88f86df05b7b944a18; Path=/; Domain=.www.nexi.it
Content-Encoding: gzip
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash b743089bdff5635e2f7c38d20c1910f6
f1874493bc88c2d9ba4a95a43e810da1cb452abd
3a60895d54c86a3e46a3dbcacfc07f3fae4ba79add296b16d0938baacc8d462a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 13 Sep 2022 20:18:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.nexi.it/content/dam/nexi/img/icone/svg/icon-blocked.svg
200 OK 935 B URL HTTP/1.1 www.nexi.it/content/dam/nexi/img/icone/svg/icon-blocked.svg
IP
ASN #35051 Nexi Payments S.P.A.
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash c3034188332fd8391df588c244a10a55
8a95344a40342edf303b04b994f1787dd2207efb
92751c1749c593c1ad2a7b61ff640b0dbb1a4c32db1981a523e5432cc35a029f
GET /content/dam/nexi/img/icone/svg/icon-blocked.svg HTTP/1.1
Host: www.nexi.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nexi.it/login-titolari.html?https://www.nexi.it/privati/servizi/area-personale.html
Cookie: lb_cookie2="faa7f7358a641e95cfaf1e92bce5195b7cf88a9165f2974909f85ac391e9e420 pero"; ncsi=e6f6c1f6a59f30ede255b567e9b8a04c; binc=6bc9120ef54b0c2885bd4dfc61f5c443; TS01a05a0f=01d37309fcd6fdd0f034f16f443628fa30dab5539dd55672e2f38ce004918bfe63bd5fccf6a0203ee99833ea3ecd23407f8f97904117ddb5fe2bf41c88f86df05b7b944a18; TS019ca071=01d37309fca1bab364766e2adc0a17d79d4eab4034d55672e2f38ce004918bfe63bd5fccf639a0e4355757311db3efdd2a28d0d88d3e9e4bf62e2b19ebf65b0fefc412c1a6c65ac200212fe44a02d24ba241816666; AMCV_6A724E255ED5F2A60A495E0E%40AdobeOrg=1176715910%7CMCIDTS%7C19249%7CvVersion%7C5.4.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 13 Sep 2022 20:18:51 GMT
Last-Modified: Wed, 07 Sep 2022 07:52:40 GMT
ETag: "3a7-5e81198e6d1b6"
Accept-Ranges: bytes
Vary: Accept-Encoding
Access-Control-Allow-Methods: GET, HEAD
Cache-Control: max-age=300, public
Keep-Alive: timeout=5, max=63
Connection: Keep-Alive
Content-Type: image/svg+xml
P3P: policyref="/w3c/p3p.xml", CP="IDC DSP COR NID DEVi OUR BUS INT"
Set-Cookie: TS01a05a0f=01d37309fcd6fdd0f034f16f443628fa30dab5539dd55672e2f38ce004918bfe63bd5fccf6a0203ee99833ea3ecd23407f8f97904117ddb5fe2bf41c88f86df05b7b944a18; Path=/; Domain=.www.nexi.it
Transfer-Encoding: chunked
www.nexi.it/cookieservice/nexi-it/content.ckscript.js
200 OK 81 kB URL HTTP/1.1 www.nexi.it/cookieservice/nexi-it/content.ckscript.js
IP
ASN #35051 Nexi Payments S.P.A.
File type Unicode text, UTF-8 text, with very long lines (9056)
Hash 0086b1d5a24deda2c6948cf98c1204c2
482b164ae2967c8dd8dbb622a29b49e9cc347d00
985d09a4efadc95d6807e63c203ebac79f5d7533de4109adf07dbc6ba9d2b72e
GET /cookieservice/nexi-it/content.ckscript.js HTTP/1.1
Host: www.nexi.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nexi.it/login-titolari.html?https://www.nexi.it/privati/servizi/area-personale.html
Cookie: lb_cookie2="faa7f7358a641e95cfaf1e92bce5195b7cf88a9165f2974909f85ac391e9e420 pero"; ncsi=e6f6c1f6a59f30ede255b567e9b8a04c; binc=6bc9120ef54b0c2885bd4dfc61f5c443; TS01a05a0f=01d37309fcd6fdd0f034f16f443628fa30dab5539dd55672e2f38ce004918bfe63bd5fccf6a0203ee99833ea3ecd23407f8f97904117ddb5fe2bf41c88f86df05b7b944a18; TS019ca071=01d37309fca1bab364766e2adc0a17d79d4eab4034d55672e2f38ce004918bfe63bd5fccf639a0e4355757311db3efdd2a28d0d88d3e9e4bf62e2b19ebf65b0fefc412c1a6c65ac200212fe44a02d24ba241816666; AMCV_6A724E255ED5F2A60A495E0E%40AdobeOrg=1176715910%7CMCIDTS%7C19249%7CMCMID%7C69922899272009973962397704871722624897%7CMCAAMLH-1663705117%7C6%7CMCAAMB-1663705117%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1663107517s%7CNONE%7CvVersion%7C5.4.0; AMCVS_6A724E255ED5F2A60A495E0E%40AdobeOrg=1; _ga_2EQBRC1CMY=GS1.1.1663100317.1.0.1663100317.0.0.0; _ga=GA1.1.540140703.1663100318
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 13 Sep 2022 20:18:51 GMT
Last-Modified: Wed, 07 Sep 2022 07:52:41 GMT
ETag: "13da0-5e81198f669e6"
Accept-Ranges: bytes
Content-Length: 81312
Vary: Accept-Encoding
Access-Control-Allow-Methods: GET, HEAD
Cache-Control: max-age=300, public
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript
P3P: policyref="/w3c/p3p.xml", CP="IDC DSP COR NID DEVi OUR BUS INT"
Set-Cookie: TS01a05a0f=01d37309fcd6fdd0f034f16f443628fa30dab5539dd55672e2f38ce004918bfe63bd5fccf6a0203ee99833ea3ecd23407f8f97904117ddb5fe2bf41c88f86df05b7b944a18; Path=/; Domain=.www.nexi.it
www.nexi.it/content/dam/nexi/img/icone/svg/ico-down-blue.svg
200 OK 898 B URL HTTP/1.1 www.nexi.it/content/dam/nexi/img/icone/svg/ico-down-blue.svg
IP
ASN #35051 Nexi Payments S.P.A.
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 1b2dba4a014e4d4c5a8eec84e206663f
256506879ea3d3c18b65439a36611fb759893283
d5ded7a91066c885b90252eb9849575a6c2f2e9c87d8748c496af886b731d3f8
GET /content/dam/nexi/img/icone/svg/ico-down-blue.svg HTTP/1.1
Host: www.nexi.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nexi.it/login-titolari.html?https://www.nexi.it/privati/servizi/area-personale.html
Cookie: lb_cookie2="faa7f7358a641e95cfaf1e92bce5195b7cf88a9165f2974909f85ac391e9e420 pero"; ncsi=e6f6c1f6a59f30ede255b567e9b8a04c; binc=6bc9120ef54b0c2885bd4dfc61f5c443; TS01a05a0f=01d37309fcd6fdd0f034f16f443628fa30dab5539dd55672e2f38ce004918bfe63bd5fccf6a0203ee99833ea3ecd23407f8f97904117ddb5fe2bf41c88f86df05b7b944a18; TS019ca071=01d37309fca1bab364766e2adc0a17d79d4eab4034d55672e2f38ce004918bfe63bd5fccf639a0e4355757311db3efdd2a28d0d88d3e9e4bf62e2b19ebf65b0fefc412c1a6c65ac200212fe44a02d24ba241816666; AMCV_6A724E255ED5F2A60A495E0E%40AdobeOrg=1176715910%7CMCIDTS%7C19249%7CvVersion%7C5.4.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 13 Sep 2022 20:18:51 GMT
Last-Modified: Wed, 07 Sep 2022 07:52:40 GMT
ETag: "382-5e81198e72e24"
Accept-Ranges: bytes
Vary: Accept-Encoding
Access-Control-Allow-Methods: GET, HEAD
Cache-Control: max-age=300, public
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/svg+xml
P3P: policyref="/w3c/p3p.xml", CP="IDC DSP COR NID DEVi OUR BUS INT"
Set-Cookie: TS01a05a0f=01d37309fcd6fdd0f034f16f443628fa30dab5539dd55672e2f38ce004918bfe63bd5fccf6a0203ee99833ea3ecd23407f8f97904117ddb5fe2bf41c88f86df05b7b944a18; Path=/; Domain=.www.nexi.it
Transfer-Encoding: chunked
www.nexi.it/content/dam/nexi/new-login-2019/loghi/logo--dark-double.svg
200 OK 1.5 kB URL HTTP/1.1 www.nexi.it/content/dam/nexi/new-login-2019/loghi/logo--dark-double.svg
IP
ASN #35051 Nexi Payments S.P.A.
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash ad5bc83de3f4aad3b6447bf24ef7c1a1
fc47fd659f9a887177992e39bdaefda20e9ae65f
64e35e6e3e1969550eda7af80ded7e8e7ffdc15dd6a2bfdc4ed9bf1cb82cc762
GET /content/dam/nexi/new-login-2019/loghi/logo--dark-double.svg HTTP/1.1
Host: www.nexi.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nexi.it/login-titolari.html?https://www.nexi.it/privati/servizi/area-personale.html
Cookie: lb_cookie2="faa7f7358a641e95cfaf1e92bce5195b7cf88a9165f2974909f85ac391e9e420 pero"; ncsi=e6f6c1f6a59f30ede255b567e9b8a04c; binc=6bc9120ef54b0c2885bd4dfc61f5c443; TS01a05a0f=01d37309fcd6fdd0f034f16f443628fa30dab5539dd55672e2f38ce004918bfe63bd5fccf6a0203ee99833ea3ecd23407f8f97904117ddb5fe2bf41c88f86df05b7b944a18; TS019ca071=01d37309fca1bab364766e2adc0a17d79d4eab4034d55672e2f38ce004918bfe63bd5fccf639a0e4355757311db3efdd2a28d0d88d3e9e4bf62e2b19ebf65b0fefc412c1a6c65ac200212fe44a02d24ba241816666; AMCV_6A724E255ED5F2A60A495E0E%40AdobeOrg=1176715910%7CMCIDTS%7C19249%7CMCMID%7C69922899272009973962397704871722624897%7CMCAAMLH-1663705117%7C6%7CMCAAMB-1663705117%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1663107517s%7CNONE%7CvVersion%7C5.4.0; AMCVS_6A724E255ED5F2A60A495E0E%40AdobeOrg=1; _ga_2EQBRC1CMY=GS1.1.1663100317.1.0.1663100317.0.0.0; _ga=GA1.1.540140703.1663100318
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 13 Sep 2022 20:18:51 GMT
Last-Modified: Wed, 07 Sep 2022 07:52:40 GMT
ETag: "5c8-5e81198e47c0e"
Accept-Ranges: bytes
Content-Length: 1480
Vary: Accept-Encoding
Access-Control-Allow-Methods: GET, HEAD
Cache-Control: max-age=300, public
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/svg+xml
P3P: policyref="/w3c/p3p.xml", CP="IDC DSP COR NID DEVi OUR BUS INT"
Set-Cookie: TS01a05a0f=01d37309fcd6fdd0f034f16f443628fa30dab5539dd55672e2f38ce004918bfe63bd5fccf6a0203ee99833ea3ecd23407f8f97904117ddb5fe2bf41c88f86df05b7b944a18; Path=/; Domain=.www.nexi.it
www.nexi.it/content/dam/nexi/img/icone/svg/icon-phone-warning-white.svg
200 OK 3.9 kB URL HTTP/1.1 www.nexi.it/content/dam/nexi/img/icone/svg/icon-phone-warning-white.svg
IP
ASN #35051 Nexi Payments S.P.A.
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 8ca4186994be106eea6423d4f2d9af10
4963eaacbdf6ba1cf7c529694ec488eea950bc92
c8e1f312e86564f3d293bb04806f55d4296cc3342321655bb738d7d61eeeef22
GET /content/dam/nexi/img/icone/svg/icon-phone-warning-white.svg HTTP/1.1
Host: www.nexi.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nexi.it/login-titolari.html?https://www.nexi.it/privati/servizi/area-personale.html
Cookie: lb_cookie2="faa7f7358a641e95cfaf1e92bce5195b7cf88a9165f2974909f85ac391e9e420 pero"; ncsi=e6f6c1f6a59f30ede255b567e9b8a04c; binc=6bc9120ef54b0c2885bd4dfc61f5c443; TS01a05a0f=01d37309fcd6fdd0f034f16f443628fa30dab5539dd55672e2f38ce004918bfe63bd5fccf6a0203ee99833ea3ecd23407f8f97904117ddb5fe2bf41c88f86df05b7b944a18; TS019ca071=01d37309fca1bab364766e2adc0a17d79d4eab4034d55672e2f38ce004918bfe63bd5fccf639a0e4355757311db3efdd2a28d0d88d3e9e4bf62e2b19ebf65b0fefc412c1a6c65ac200212fe44a02d24ba241816666; AMCV_6A724E255ED5F2A60A495E0E%40AdobeOrg=1176715910%7CMCIDTS%7C19249%7CvVersion%7C5.4.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 13 Sep 2022 20:18:51 GMT
Last-Modified: Wed, 07 Sep 2022 07:52:49 GMT
ETag: "f29-5e81199673723"
Accept-Ranges: bytes
Content-Length: 3881
Vary: Accept-Encoding
Access-Control-Allow-Methods: GET, HEAD
Cache-Control: max-age=300, public
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/svg+xml
P3P: policyref="/w3c/p3p.xml", CP="IDC DSP COR NID DEVi OUR BUS INT"
Set-Cookie: TS01a05a0f=01d37309fcd6fdd0f034f16f443628fa30dab5539dd55672e2f38ce004918bfe63bd5fccf6a0203ee99833ea3ecd23407f8f97904117ddb5fe2bf41c88f86df05b7b944a18; Path=/; Domain=.www.nexi.it
www.nexi.it/etc/designs/nexi/clientlib-node/fonts/karbon-semibold-webfont.woff
200 OK 25 kB URL HTTP/1.1 www.nexi.it/etc/designs/nexi/clientlib-node/fonts/karbon-semibold-webfont.woff
IP
ASN #35051 Nexi Payments S.P.A.
File type Web Open Font Format, TrueType, length 25032, version 1.0\012- data
Hash 4e893a43d47ba798763b8990f9e07180
9ac339e30beac18d0a4aaecce5b66a723ec46532
0696904b24ea3bdaf9ee857ded71391ccd44d40b84334571a5c5e71f93b4a0c6
GET /etc/designs/nexi/clientlib-node/fonts/karbon-semibold-webfont.woff HTTP/1.1
Host: www.nexi.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.nexi.it/etc/designs/nexi/clientlib-node/style.css
Cookie: lb_cookie2="faa7f7358a641e95cfaf1e92bce5195b7cf88a9165f2974909f85ac391e9e420 pero"; ncsi=e6f6c1f6a59f30ede255b567e9b8a04c; binc=6bc9120ef54b0c2885bd4dfc61f5c443; TS01a05a0f=01d37309fcd6fdd0f034f16f443628fa30dab5539dd55672e2f38ce004918bfe63bd5fccf6a0203ee99833ea3ecd23407f8f97904117ddb5fe2bf41c88f86df05b7b944a18; TS019ca071=01d37309fca1bab364766e2adc0a17d79d4eab4034d55672e2f38ce004918bfe63bd5fccf639a0e4355757311db3efdd2a28d0d88d3e9e4bf62e2b19ebf65b0fefc412c1a6c65ac200212fe44a02d24ba241816666; AMCV_6A724E255ED5F2A60A495E0E%40AdobeOrg=1176715910%7CMCIDTS%7C19249%7CMCMID%7C69922899272009973962397704871722624897%7CMCAAMLH-1663705117%7C6%7CMCAAMB-1663705117%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1663107517s%7CNONE%7CvVersion%7C5.4.0; AMCVS_6A724E255ED5F2A60A495E0E%40AdobeOrg=1; _ga_2EQBRC1CMY=GS1.1.1663100317.1.0.1663100317.0.0.0; _ga=GA1.1.540140703.1663100318
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 13 Sep 2022 20:18:51 GMT
Last-Modified: Wed, 07 Sep 2022 07:52:44 GMT
ETag: "61c8-5e81199218126"
Accept-Ranges: bytes
Access-Control-Allow-Methods: GET, HEAD
Cache-Control: max-age=300, public
Keep-Alive: timeout=5, max=39
Connection: Keep-Alive
Content-Type: application/font-woff
P3P: policyref="/w3c/p3p.xml", CP="IDC DSP COR NID DEVi OUR BUS INT"
Set-Cookie: TS01a05a0f=01d37309fcd6fdd0f034f16f443628fa30dab5539dd55672e2f38ce004918bfe63bd5fccf6a0203ee99833ea3ecd23407f8f97904117ddb5fe2bf41c88f86df05b7b944a18; Path=/; Domain=.www.nexi.it
Transfer-Encoding: chunked
www.nexi.it/etc/designs/nexi/clientlib-node/fonts/karbon-regular-webfont.woff
200 OK 24 kB URL HTTP/1.1 www.nexi.it/etc/designs/nexi/clientlib-node/fonts/karbon-regular-webfont.woff
IP
ASN #35051 Nexi Payments S.P.A.
File type Web Open Font Format, TrueType, length 24308, version 1.0\012- data
Hash e6b850dccbd545df306ea2f25452a124
08bdf0f61b8316130f85a2725dcbd7eb5a6dc750
ade827343407a2a81168acb91cabc1ed7d83de7010966dd1b7f06f4e0344b9e6
GET /etc/designs/nexi/clientlib-node/fonts/karbon-regular-webfont.woff HTTP/1.1
Host: www.nexi.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.nexi.it/etc/designs/nexi/clientlib-node/style.css
Cookie: lb_cookie2="faa7f7358a641e95cfaf1e92bce5195b7cf88a9165f2974909f85ac391e9e420 pero"; ncsi=e6f6c1f6a59f30ede255b567e9b8a04c; binc=6bc9120ef54b0c2885bd4dfc61f5c443; TS01a05a0f=01d37309fcd6fdd0f034f16f443628fa30dab5539dd55672e2f38ce004918bfe63bd5fccf6a0203ee99833ea3ecd23407f8f97904117ddb5fe2bf41c88f86df05b7b944a18; TS019ca071=01d37309fca1bab364766e2adc0a17d79d4eab4034d55672e2f38ce004918bfe63bd5fccf639a0e4355757311db3efdd2a28d0d88d3e9e4bf62e2b19ebf65b0fefc412c1a6c65ac200212fe44a02d24ba241816666; AMCV_6A724E255ED5F2A60A495E0E%40AdobeOrg=1176715910%7CMCIDTS%7C19249%7CMCMID%7C69922899272009973962397704871722624897%7CMCAAMLH-1663705117%7C6%7CMCAAMB-1663705117%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1663107517s%7CNONE%7CvVersion%7C5.4.0; AMCVS_6A724E255ED5F2A60A495E0E%40AdobeOrg=1; _ga_2EQBRC1CMY=GS1.1.1663100317.1.0.1663100317.0.0.0; _ga=GA1.1.540140703.1663100318
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 13 Sep 2022 20:18:51 GMT
Last-Modified: Wed, 07 Sep 2022 07:52:46 GMT
ETag: "5ef4-5e811993949ac"
Accept-Ranges: bytes
Access-Control-Allow-Methods: GET, HEAD
Cache-Control: max-age=300, public
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: application/font-woff
P3P: policyref="/w3c/p3p.xml", CP="IDC DSP COR NID DEVi OUR BUS INT"
Set-Cookie: TS01a05a0f=01d37309fcd6fdd0f034f16f443628fa30dab5539dd55672e2f38ce004918bfe63bd5fccf6a0203ee99833ea3ecd23407f8f97904117ddb5fe2bf41c88f86df05b7b944a18; Path=/; Domain=.www.nexi.it
Transfer-Encoding: chunked
www.nexi.it/etc/designs/nexi/clientlib-node/fonts/karbon-medium-webfont.woff
200 OK 25 kB URL HTTP/1.1 www.nexi.it/etc/designs/nexi/clientlib-node/fonts/karbon-medium-webfont.woff
IP
ASN #35051 Nexi Payments S.P.A.
File type Web Open Font Format, TrueType, length 24956, version 1.0\012- data
Hash 034fa219154a0eed22d6ef6ebd89c3a9
c8574cf3bfc69f53392d916aef929ccc882a9386
4061275193aa1a5245941f7768b307219fc0f86f44dc1cf4d293168b93a72259
GET /etc/designs/nexi/clientlib-node/fonts/karbon-medium-webfont.woff HTTP/1.1
Host: www.nexi.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.nexi.it/etc/designs/nexi/clientlib-node/style.css
Cookie: lb_cookie2="faa7f7358a641e95cfaf1e92bce5195b7cf88a9165f2974909f85ac391e9e420 pero"; ncsi=e6f6c1f6a59f30ede255b567e9b8a04c; binc=6bc9120ef54b0c2885bd4dfc61f5c443; TS01a05a0f=01d37309fcd6fdd0f034f16f443628fa30dab5539dd55672e2f38ce004918bfe63bd5fccf6a0203ee99833ea3ecd23407f8f97904117ddb5fe2bf41c88f86df05b7b944a18; TS019ca071=01d37309fca1bab364766e2adc0a17d79d4eab4034d55672e2f38ce004918bfe63bd5fccf639a0e4355757311db3efdd2a28d0d88d3e9e4bf62e2b19ebf65b0fefc412c1a6c65ac200212fe44a02d24ba241816666; AMCV_6A724E255ED5F2A60A495E0E%40AdobeOrg=1176715910%7CMCIDTS%7C19249%7CMCMID%7C69922899272009973962397704871722624897%7CMCAAMLH-1663705117%7C6%7CMCAAMB-1663705117%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1663107517s%7CNONE%7CvVersion%7C5.4.0; AMCVS_6A724E255ED5F2A60A495E0E%40AdobeOrg=1; _ga_2EQBRC1CMY=GS1.1.1663100317.1.0.1663100317.0.0.0; _ga=GA1.1.540140703.1663100318
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 13 Sep 2022 20:18:51 GMT
Last-Modified: Wed, 07 Sep 2022 07:52:44 GMT
ETag: "617c-5e81199227f0e"
Accept-Ranges: bytes
Content-Length: 24956
Access-Control-Allow-Methods: GET, HEAD
Cache-Control: max-age=300, public
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: application/font-woff
P3P: policyref="/w3c/p3p.xml", CP="IDC DSP COR NID DEVi OUR BUS INT"
Set-Cookie: TS01a05a0f=01d37309fcd6fdd0f034f16f443628fa30dab5539dd55672e2f38ce004918bfe63bd5fccf6a0203ee99833ea3ecd23407f8f97904117ddb5fe2bf41c88f86df05b7b944a18; Path=/; Domain=.www.nexi.it
nexipayments.demdex.net/dest5.html?d_nsid=0
200 OK 2.8 kB URL HTTP/1.1 nexipayments.demdex.net/dest5.html?d_nsid=0
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (550)
Hash ccbdcb1e84c241950763ec4cd516cdfc
55dfa8d4b09c5c3a80fcd101152f6ebed3d27a2c
de9ccb9b168945a24f20edc28c39be4135b328129ba8ee378401a7aedc925d12
GET /dest5.html?d_nsid=0 HTTP/1.1
Host: nexipayments.demdex.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nexi.it/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
content-encoding: gzip
Content-Type: text/html;charset=UTF-8
date: Tue, 13 Sep 2022 20:18:51 GMT
DCS: dcs-prod-irl1-1-v039-0d5a37ed3.edge-irl1.demdex.com 0 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
last-modified: Tue, 6 Sep 2022 11:03:24 GMT
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
Strict-Transport-Security: max-age=31536000; includeSubDomains
vary: accept-encoding
X-TID: dPc1Ka/URAI=
Content-Length: 2791
Connection: keep-alive
region1.google-analytics.com/g/collect?v=2&tid=G-2EQBRC1CMY>m=2oe9c0&_p=1968760664&tt=external&cid=540140703.1663100318&ul=en-us&sr=1280x1024&_z=ccd.v9B&_s=1&dt=%2Flogin-titolari.html&sid=1663100317&sct=1&seg=0&dl=https%3A%2F%2Fwww.nexi.it%2Flogin-titolari.html%3Fhttps%3A%2F%2Fwww.nexi.it%2Fprivati%2Fservizi%2Farea-personale.html&en=page_view&_fv=1&_nsi=1&_ss=1&epn.is_internal_traffic=0&epn.device_pixel_ratio=1&ep.cookie_policy_acceptance=not%20accepted&ep.container_id=GTM-MVCHKSD&epn.is_nb_customer=0
204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-2EQBRC1CMY>m=2oe9c0&_p=1968760664&tt=external&cid=540140703.1663100318&ul=en-us&sr=1280x1024&_z=ccd.v9B&_s=1&dt=%2Flogin-titolari.html&sid=1663100317&sct=1&seg=0&dl=https%3A%2F%2Fwww.nexi.it%2Flogin-titolari.html%3Fhttps%3A%2F%2Fwww.nexi.it%2Fprivati%2Fservizi%2Farea-personale.html&en=page_view&_fv=1&_nsi=1&_ss=1&epn.is_internal_traffic=0&epn.device_pixel_ratio=1&ep.cookie_policy_acceptance=not%20accepted&ep.container_id=GTM-MVCHKSD&epn.is_nb_customer=0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-2EQBRC1CMY>m=2oe9c0&_p=1968760664&tt=external&cid=540140703.1663100318&ul=en-us&sr=1280x1024&_z=ccd.v9B&_s=1&dt=%2Flogin-titolari.html&sid=1663100317&sct=1&seg=0&dl=https%3A%2F%2Fwww.nexi.it%2Flogin-titolari.html%3Fhttps%3A%2F%2Fwww.nexi.it%2Fprivati%2Fservizi%2Farea-personale.html&en=page_view&_fv=1&_nsi=1&_ss=1&epn.is_internal_traffic=0&epn.device_pixel_ratio=1&ep.cookie_policy_acceptance=not%20accepted&ep.container_id=GTM-MVCHKSD&epn.is_nb_customer=0 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.nexi.it
Connection: keep-alive
Referer: https://www.nexi.it/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://www.nexi.it
date: Tue, 13 Sep 2022 20:18:51 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.nexi.it/content/dam/nexi/new-login-2019/img/placeholder_login_portale_privati.png
200 OK 1.3 MB URL HTTP/1.1 www.nexi.it/content/dam/nexi/new-login-2019/img/placeholder_login_portale_privati.png
IP
ASN #35051 Nexi Payments S.P.A.
File type PNG image data, 1440 x 1024, 8-bit/color RGBA, non-interlaced\012- data
Size 1.3 MB (1294068 bytes)
Hash 9b4f08a7eada2bd2112e81a742f5130d
f571a9a391a86bc0046aa9a299592a65e44cf4f1
4e78d7ff08366ee22738a94a7c0777add9bfa2363548916d32da8387e1c81a1e
GET /content/dam/nexi/new-login-2019/img/placeholder_login_portale_privati.png HTTP/1.1
Host: www.nexi.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nexi.it/login-titolari.html?https://www.nexi.it/privati/servizi/area-personale.html
Cookie: lb_cookie2="faa7f7358a641e95cfaf1e92bce5195b7cf88a9165f2974909f85ac391e9e420 pero"; ncsi=e6f6c1f6a59f30ede255b567e9b8a04c; binc=6bc9120ef54b0c2885bd4dfc61f5c443; TS01a05a0f=01d37309fcd6fdd0f034f16f443628fa30dab5539dd55672e2f38ce004918bfe63bd5fccf6a0203ee99833ea3ecd23407f8f97904117ddb5fe2bf41c88f86df05b7b944a18; TS019ca071=01d37309fca1bab364766e2adc0a17d79d4eab4034d55672e2f38ce004918bfe63bd5fccf639a0e4355757311db3efdd2a28d0d88d3e9e4bf62e2b19ebf65b0fefc412c1a6c65ac200212fe44a02d24ba241816666; AMCV_6A724E255ED5F2A60A495E0E%40AdobeOrg=1176715910%7CMCIDTS%7C19249%7CMCMID%7C69922899272009973962397704871722624897%7CMCAAMLH-1663705117%7C6%7CMCAAMB-1663705117%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1663107517s%7CNONE%7CvVersion%7C5.4.0; AMCVS_6A724E255ED5F2A60A495E0E%40AdobeOrg=1; _ga_2EQBRC1CMY=GS1.1.1663100317.1.0.1663100317.0.0.0; _ga=GA1.1.540140703.1663100318
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 13 Sep 2022 20:18:51 GMT
Last-Modified: Wed, 07 Sep 2022 07:53:00 GMT
ETag: "13bef4-5e8119a183bfd"
Accept-Ranges: bytes
Content-Length: 1294068
Access-Control-Allow-Methods: GET, HEAD
Cache-Control: max-age=300, public
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/png
P3P: policyref="/w3c/p3p.xml", CP="IDC DSP COR NID DEVi OUR BUS INT"
Set-Cookie: TS01a05a0f=01d37309fcd6fdd0f034f16f443628fa30dab5539dd55672e2f38ce004918bfe63bd5fccf6a0203ee99833ea3ecd23407f8f97904117ddb5fe2bf41c88f86df05b7b944a18; Path=/; Domain=.www.nexi.it
www.nexi.it/etc/designs/nexi/clientlib-node/bundle.js
200 OK 1.1 MB URL HTTP/1.1 www.nexi.it/etc/designs/nexi/clientlib-node/bundle.js
IP
ASN #35051 Nexi Payments S.P.A.
File type ASCII text, with very long lines (65472)
Size 1.1 MB (1089869 bytes)
Hash 9d606006ec09aaf52ef34c1f5c3450e9
3066ccde6c8e2b8c26ec50ff374e0868c82d5ff7
37e18042907560da2dc851e4958ccf7d6d52ff930cadc7607956110fd796fe5c
GET /etc/designs/nexi/clientlib-node/bundle.js HTTP/1.1
Host: www.nexi.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nexi.it/login-titolari.html?https://www.nexi.it/privati/servizi/area-personale.html
Cookie: lb_cookie2="faa7f7358a641e95cfaf1e92bce5195b7cf88a9165f2974909f85ac391e9e420 pero"; ncsi=e6f6c1f6a59f30ede255b567e9b8a04c; binc=6bc9120ef54b0c2885bd4dfc61f5c443; TS01a05a0f=01d37309fcd6fdd0f034f16f443628fa30dab5539dd55672e2f38ce004918bfe63bd5fccf6a0203ee99833ea3ecd23407f8f97904117ddb5fe2bf41c88f86df05b7b944a18; TS019ca071=01d37309fca1bab364766e2adc0a17d79d4eab4034d55672e2f38ce004918bfe63bd5fccf639a0e4355757311db3efdd2a28d0d88d3e9e4bf62e2b19ebf65b0fefc412c1a6c65ac200212fe44a02d24ba241816666; AMCV_6A724E255ED5F2A60A495E0E%40AdobeOrg=1176715910%7CMCIDTS%7C19249%7CMCMID%7C69922899272009973962397704871722624897%7CMCAAMLH-1663705117%7C6%7CMCAAMB-1663705117%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1663107517s%7CNONE%7CvVersion%7C5.4.0; AMCVS_6A724E255ED5F2A60A495E0E%40AdobeOrg=1; _ga_2EQBRC1CMY=GS1.1.1663100317.1.0.1663100317.0.0.0; _ga=GA1.1.540140703.1663100318
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 13 Sep 2022 20:18:51 GMT
Last-Modified: Wed, 07 Sep 2022 07:52:47 GMT
ETag: "10a14d-5e811994cb36d"
Accept-Ranges: bytes
Content-Length: 1089869
Vary: Accept-Encoding
Access-Control-Allow-Methods: GET, HEAD
Cache-Control: max-age=300, public
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript
P3P: policyref="/w3c/p3p.xml", CP="IDC DSP COR NID DEVi OUR BUS INT"
Set-Cookie: TS01a05a0f=01d37309fcd6fdd0f034f16f443628fa30dab5539dd55672e2f38ce004918bfe63bd5fccf6a0203ee99833ea3ecd23407f8f97904117ddb5fe2bf41c88f86df05b7b944a18; Path=/; Domain=.www.nexi.it
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash fe792a43fbfd72d158215bb5fa087c19
5b28cebdebfdd33871fa4982f39a89f5ce3cbf99
ec9ddd9d47e4cd14bd7471042ce3060c1d119038dac5d1f02a4040c617228b0d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EC9DDD9D47E4CD14BD7471042CE3060C1D119038DAC5D1F02A4040C617228B0D"
Last-Modified: Mon, 12 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7576
Expires: Tue, 13 Sep 2022 22:25:08 GMT
Date: Tue, 13 Sep 2022 20:18:52 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash fe792a43fbfd72d158215bb5fa087c19
5b28cebdebfdd33871fa4982f39a89f5ce3cbf99
ec9ddd9d47e4cd14bd7471042ce3060c1d119038dac5d1f02a4040c617228b0d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EC9DDD9D47E4CD14BD7471042CE3060C1D119038DAC5D1F02A4040C617228B0D"
Last-Modified: Mon, 12 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7576
Expires: Tue, 13 Sep 2022 22:25:08 GMT
Date: Tue, 13 Sep 2022 20:18:52 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash fe792a43fbfd72d158215bb5fa087c19
5b28cebdebfdd33871fa4982f39a89f5ce3cbf99
ec9ddd9d47e4cd14bd7471042ce3060c1d119038dac5d1f02a4040c617228b0d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EC9DDD9D47E4CD14BD7471042CE3060C1D119038DAC5D1F02A4040C617228B0D"
Last-Modified: Mon, 12 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7576
Expires: Tue, 13 Sep 2022 22:25:08 GMT
Date: Tue, 13 Sep 2022 20:18:52 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash fe792a43fbfd72d158215bb5fa087c19
5b28cebdebfdd33871fa4982f39a89f5ce3cbf99
ec9ddd9d47e4cd14bd7471042ce3060c1d119038dac5d1f02a4040c617228b0d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EC9DDD9D47E4CD14BD7471042CE3060C1D119038DAC5D1F02A4040C617228B0D"
Last-Modified: Mon, 12 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7576
Expires: Tue, 13 Sep 2022 22:25:08 GMT
Date: Tue, 13 Sep 2022 20:18:52 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc9a2dff5-4864-4430-8c54-6b68d2bbd35a.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc9a2dff5-4864-4430-8c54-6b68d2bbd35a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 838f709437b2dfbede4ee15307afe217
2ab2ee20e720b78be6deb55f967ac0d8b7dad048
a3b47ce595b475f2aab6f7378888d15ba3e98453d6c8a3d88946efc5d65eedba
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc9a2dff5-4864-4430-8c54-6b68d2bbd35a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10849
x-amzn-requestid: 722d8d75-0911-4b59-af65-2b408bc09d80
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YXbx6E9-oAMFT8w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631fa672-74ea9343619d4a1865e34818;Sampled=0
x-amzn-remapped-date: Mon, 12 Sep 2022 21:36:50 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 4rpwcrZLDlgcwBtH7wpoHMOb8hhFbKbZSQpjWqUqbt_Sl4ud3dm9Vg==
via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 707e733794d52100fde0ab21bf0b1462.cloudfront.net (CloudFront), 1.1 google
date: Mon, 12 Sep 2022 21:42:18 GMT
age: 81394
etag: "2ab2ee20e720b78be6deb55f967ac0d8b7dad048"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F75931920-737e-40b5-8dd6-d2070639ea2d.jpeg
200 OK 8.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F75931920-737e-40b5-8dd6-d2070639ea2d.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c14088c4ca0d576e087feed41b7f1565
172b23f2ef39b6c3fdebb5441b10a95712206d0a
2699efa811ceac5420f5bd26c35a6f48b51854e29cbce7cbb62efb613db7d6b9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F75931920-737e-40b5-8dd6-d2070639ea2d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8799
x-amzn-requestid: 1bcdf387-9ad2-449a-861e-3352b1744d23
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YUI-0G6vIAMFgbA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631e552b-42aa46af6315148106c4fdee;Sampled=0
x-amzn-remapped-date: Sun, 11 Sep 2022 21:37:47 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: g2mxKK8L5T4YkeD8JqNUuV_KfsIq8ypRMvxhsyzSZSEIP4gDl4zLVQ==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Mon, 12 Sep 2022 21:41:55 GMT
age: 81417
etag: "172b23f2ef39b6c3fdebb5441b10a95712206d0a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a6b50df-cdcd-4b44-9ed3-90a502ea29ad.jpeg
200 OK 9.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a6b50df-cdcd-4b44-9ed3-90a502ea29ad.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 239262b6ab17cb19414c35cd4f761092
48eddcf9838e980e67cc8f9cbb05b475df2f0331
cd27cbce632d769288d9c33c5c8e887ba02df5677f10f7a6d03139b590ba24b4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a6b50df-cdcd-4b44-9ed3-90a502ea29ad.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9815
x-amzn-requestid: 89243e57-94eb-4c6b-903f-aa01df030ecc
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YUIxnEAjoAMF_Ig=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631e54d6-199403e2695b214711f5117f;Sampled=0
x-amzn-remapped-date: Sun, 11 Sep 2022 21:36:23 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: gUhO_jZ9W_10cAK-2lOVSmQ9r1DIZvNDaqpJs5oc6lt85qAkWbBcXg==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 73cb83fe6699afc2791b5c690c1ff8c6.cloudfront.net (CloudFront), 1.1 google
date: Mon, 12 Sep 2022 21:48:14 GMT
age: 81038
etag: "48eddcf9838e980e67cc8f9cbb05b475df2f0331"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5bb76515-eb77-4f38-aae2-75a885833991.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5bb76515-eb77-4f38-aae2-75a885833991.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 557695ec8ffeebb0272c099542a14ace
ad627b434e1c3b693d8636675bcea0f8794e0dc2
4d79c7830caa73b921d6abaa97771ab1f4dc8fd709597f01ba04c268c03b6157
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5bb76515-eb77-4f38-aae2-75a885833991.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10407
x-amzn-requestid: 85df5ad9-f229-4d33-90b9-5dd28c77578a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YH396F2SIAMFnGA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63196d25-3ee08f1e27cd37e96dba0f40;Sampled=0
x-amzn-remapped-date: Thu, 08 Sep 2022 04:18:45 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: Oep2UJdadBnTBuCy7CexUcezT0cCvm_9hroZnV-UrC9lQQxwUc4rkw==
via: 1.1 07c02ae6c53d85283eb15380264d9998.cloudfront.net (CloudFront), 1.1 559326ad73233233a9e52cb9e8601ede.cloudfront.net (CloudFront), 1.1 google
date: Tue, 13 Sep 2022 06:18:57 GMT
age: 50395
etag: "ad627b434e1c3b693d8636675bcea0f8794e0dc2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F81f9b0a3-fe8f-4665-9e54-9dfaf5d4876b.jpeg
200 OK 9.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F81f9b0a3-fe8f-4665-9e54-9dfaf5d4876b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6174529fff57758e958da5432344962f
05ec2076b32398d60ee77fab8c14345bc7dfe647
65284a76355864efa944dff5033575013c6d74a019a7b731e0236603f2f656a7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F81f9b0a3-fe8f-4665-9e54-9dfaf5d4876b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9466
x-amzn-requestid: ba3f7eac-61c9-4b5f-ae8a-b372906a25ba
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YOTeoHMKoAMFr5Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631bff90-1e70e2c444242a2d46387986;Sampled=0
x-amzn-remapped-date: Sat, 10 Sep 2022 03:08:00 GMT
x-amz-cf-pop: SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: -SwaUjMInlOaGpH6yK1W1a57QCQMgY-l43RdUfKVtZA1zJzMrLzC6g==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 f7283f3fe2c258cf54f8b7d3dd272e0e.cloudfront.net (CloudFront), 1.1 google
date: Tue, 13 Sep 2022 04:49:30 GMT
age: 55762
etag: "05ec2076b32398d60ee77fab8c14345bc7dfe647"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2830e2cb-8887-441e-8c0c-906b8fbb2366.jpeg
200 OK 9.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2830e2cb-8887-441e-8c0c-906b8fbb2366.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c9ab2ec10c79b91d15edb1d1e3dc763c
744fee4a0baa22ba3aa352d60620a916972b47dd
f7bb66f5bb572d73f936fc74823f51ede1f2c4e309a939b39d9529ff8f757fbe
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2830e2cb-8887-441e-8c0c-906b8fbb2366.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9945
x-amzn-requestid: a347749f-a63a-4533-a274-7151b9f235ff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YXcX8HAKoAMF5EQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631fa765-56cff18515b2a5b3397231df;Sampled=0
x-amzn-remapped-date: Mon, 12 Sep 2022 21:40:53 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: lZ3FmD1gM8YBgZNt97kuYSol1kj0GQqRjyLT_7715VtH9GR1WpMDxA==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 989017835f43d594873bde5a7ee7fe5e.cloudfront.net (CloudFront), 1.1 google
date: Mon, 12 Sep 2022 21:42:20 GMT
age: 81392
etag: "744fee4a0baa22ba3aa352d60620a916972b47dd"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 56f5d7f608e25d64207135f045f988cb
901eb59372ae330ae85e1384da93479b21ae1082
1910daea79e5a9d04829a91e432dfa56f45a80a3e14a8cf667fec73af9fd3d29
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nexi.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20006
date: Tue, 13 Sep 2022 18:41:12 GMT
expires: Tue, 13 Sep 2022 20:41:12 GMT
cache-control: public, max-age=7200
age: 5860
last-modified: Wed, 13 Apr 2022 21:02:38 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b7e665b6b70fa840ee6a1417da402132
658fa05afcf7752e8cb02979c28874efb0f4ddd8
9905cee109c441b937300b368ceccd186877a0923164bf3e1eb0971a2a224400
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 13 Sep 2022 20:18:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.nexi.it/etc/designs/nexi/favicon/favicon-196x196.png
200 OK 25 kB URL HTTP/1.1 www.nexi.it/etc/designs/nexi/favicon/favicon-196x196.png
IP
ASN #35051 Nexi Payments S.P.A.
File type PNG image data, 196 x 196, 8-bit/color RGBA, non-interlaced\012- data
Hash 3a0ce25384d4ea5734d25779bc8bd41a
62b5bd3bdeac213d075f7de99a2b96283717574e
77d497a3c716b3fb900f01e92bc5b6f0928c6040d30a3d88eb8a95df71c625cf
GET /etc/designs/nexi/favicon/favicon-196x196.png HTTP/1.1
Host: www.nexi.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nexi.it/login-titolari.html?https://www.nexi.it/privati/servizi/area-personale.html
Cookie: lb_cookie2="faa7f7358a641e95cfaf1e92bce5195b7cf88a9165f2974909f85ac391e9e420 pero"; ncsi=e6f6c1f6a59f30ede255b567e9b8a04c; binc=6bc9120ef54b0c2885bd4dfc61f5c443; TS01a05a0f=01d37309fcd6fdd0f034f16f443628fa30dab5539dd55672e2f38ce004918bfe63bd5fccf6a0203ee99833ea3ecd23407f8f97904117ddb5fe2bf41c88f86df05b7b944a18; TS019ca071=01d37309fca1bab364766e2adc0a17d79d4eab4034d55672e2f38ce004918bfe63bd5fccf639a0e4355757311db3efdd2a28d0d88d3e9e4bf62e2b19ebf65b0fefc412c1a6c65ac200212fe44a02d24ba241816666; AMCV_6A724E255ED5F2A60A495E0E%40AdobeOrg=1176715910%7CMCIDTS%7C19249%7CMCMID%7C69922899272009973962397704871722624897%7CMCAAMLH-1663705117%7C6%7CMCAAMB-1663705117%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1663107517s%7CNONE%7CvVersion%7C5.4.0; AMCVS_6A724E255ED5F2A60A495E0E%40AdobeOrg=1; _ga_2EQBRC1CMY=GS1.1.1663100317.1.0.1663100317.0.0.0; _ga=GA1.1.540140703.1663100318
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 13 Sep 2022 20:18:52 GMT
Last-Modified: Wed, 07 Sep 2022 07:52:57 GMT
ETag: "627f-5e81199ea74ca"
Accept-Ranges: bytes
Content-Length: 25215
Access-Control-Allow-Methods: GET, HEAD
Cache-Control: max-age=300, public
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: image/png
P3P: policyref="/w3c/p3p.xml", CP="IDC DSP COR NID DEVi OUR BUS INT"
Set-Cookie: TS01a05a0f=01d37309fcd6fdd0f034f16f443628fa30dab5539dd55672e2f38ce004918bfe63bd5fccf6a0203ee99833ea3ecd23407f8f97904117ddb5fe2bf41c88f86df05b7b944a18; Path=/; Domain=.www.nexi.it
www.nexi.it/etc/designs/nexi/favicon/favicon-16x16.png
200 OK 300 B URL HTTP/1.1 www.nexi.it/etc/designs/nexi/favicon/favicon-16x16.png
IP
ASN #35051 Nexi Payments S.P.A.
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash 200029b5e4fb2ebe6681acdc3c54f558
8f2eda5c64a7cfde221947a29fc6ffb57b11b772
b6a9125da73f90564107299c92997b40c2ddba9bd37272c960b16932d5854e4d
GET /etc/designs/nexi/favicon/favicon-16x16.png HTTP/1.1
Host: www.nexi.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nexi.it/login-titolari.html?https://www.nexi.it/privati/servizi/area-personale.html
Cookie: lb_cookie2="faa7f7358a641e95cfaf1e92bce5195b7cf88a9165f2974909f85ac391e9e420 pero"; ncsi=e6f6c1f6a59f30ede255b567e9b8a04c; binc=6bc9120ef54b0c2885bd4dfc61f5c443; TS01a05a0f=01d37309fcd6fdd0f034f16f443628fa30dab5539dd55672e2f38ce004918bfe63bd5fccf6a0203ee99833ea3ecd23407f8f97904117ddb5fe2bf41c88f86df05b7b944a18; TS019ca071=01d37309fca1bab364766e2adc0a17d79d4eab4034d55672e2f38ce004918bfe63bd5fccf639a0e4355757311db3efdd2a28d0d88d3e9e4bf62e2b19ebf65b0fefc412c1a6c65ac200212fe44a02d24ba241816666; AMCV_6A724E255ED5F2A60A495E0E%40AdobeOrg=1176715910%7CMCIDTS%7C19249%7CMCMID%7C69922899272009973962397704871722624897%7CMCAAMLH-1663705117%7C6%7CMCAAMB-1663705117%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1663107517s%7CNONE%7CvVersion%7C5.4.0; AMCVS_6A724E255ED5F2A60A495E0E%40AdobeOrg=1; _ga_2EQBRC1CMY=GS1.1.1663100317.1.0.1663100317.0.0.0; _ga=GA1.1.540140703.1663100318
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 13 Sep 2022 20:18:52 GMT
Last-Modified: Wed, 07 Sep 2022 07:53:00 GMT
ETag: "12c-5e8119a0a94cc"
Accept-Ranges: bytes
Content-Length: 300
Access-Control-Allow-Methods: GET, HEAD
Cache-Control: max-age=300, public
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/png
P3P: policyref="/w3c/p3p.xml", CP="IDC DSP COR NID DEVi OUR BUS INT"
Set-Cookie: TS01a05a0f=01d37309fcd6fdd0f034f16f443628fa30dab5539dd55672e2f38ce004918bfe63bd5fccf6a0203ee99833ea3ecd23407f8f97904117ddb5fe2bf41c88f86df05b7b944a18; Path=/; Domain=.www.nexi.it
Vary: Accept-Encoding
www.gstatic.com/recaptcha/releases/g8G8cw32bNQPGUVoDvt680GA/recaptcha__en.js
200 OK 157 kB URL HTTP/2 www.gstatic.com/recaptcha/releases/g8G8cw32bNQPGUVoDvt680GA/recaptcha__en.js
IP
File type ASCII text, with very long lines (539)
Size 157 kB (157166 bytes)
Hash 026df0dfed2314af108e700900288961
51c2a55bca7d65c549ef138d1294cac2aa98dd96
24eefc59f5d298ce40bdd33c8157ad14631984159fca8e5980037366c44c2b34
GET /recaptcha/releases/g8G8cw32bNQPGUVoDvt680GA/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.nexi.it
Connection: keep-alive
Referer: https://www.nexi.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 157166
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 13 Sep 2022 17:23:20 GMT
expires: Wed, 13 Sep 2023 17:23:20 GMT
cache-control: public, max-age=31536000
age: 10532
last-modified: Tue, 06 Sep 2022 00:04:24 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b7e665b6b70fa840ee6a1417da402132
658fa05afcf7752e8cb02979c28874efb0f4ddd8
9905cee109c441b937300b368ceccd186877a0923164bf3e1eb0971a2a224400
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 13 Sep 2022 20:18:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.nexi.it/g78f9/in/c0d1a067e07e50aae032e9837bef95b1/3/1
200 OK 43 B URL HTTP/1.1 www.nexi.it/g78f9/in/c0d1a067e07e50aae032e9837bef95b1/3/1
IP
ASN #35051 Nexi Payments S.P.A.
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /g78f9/in/c0d1a067e07e50aae032e9837bef95b1/3/1 HTTP/1.1
Host: www.nexi.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nexi.it/login-titolari.html?https://www.nexi.it/privati/servizi/area-personale.html
Cookie: lb_cookie2="faa7f7358a641e95cfaf1e92bce5195b7cf88a9165f2974909f85ac391e9e420 pero"; ncsi=e6f6c1f6a59f30ede255b567e9b8a04c; binc=6bc9120ef54b0c2885bd4dfc61f5c443; TS01a05a0f=01d37309fcd6fdd0f034f16f443628fa30dab5539dd55672e2f38ce004918bfe63bd5fccf6a0203ee99833ea3ecd23407f8f97904117ddb5fe2bf41c88f86df05b7b944a18; TS019ca071=01d37309fca1bab364766e2adc0a17d79d4eab4034d55672e2f38ce004918bfe63bd5fccf639a0e4355757311db3efdd2a28d0d88d3e9e4bf62e2b19ebf65b0fefc412c1a6c65ac200212fe44a02d24ba241816666; AMCV_6A724E255ED5F2A60A495E0E%40AdobeOrg=1176715910%7CMCIDTS%7C19249%7CMCMID%7C69922899272009973962397704871722624897%7CMCAAMLH-1663705117%7C6%7CMCAAMB-1663705117%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1663107517s%7CNONE%7CvVersion%7C5.4.0; AMCVS_6A724E255ED5F2A60A495E0E%40AdobeOrg=1; _ga_2EQBRC1CMY=GS1.1.1663100317.1.0.1663100317.0.0.0; _ga=GA1.1.540140703.1663100318
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 13 Sep 2022 20:18:52 GMT
Content-Type: image/gif
Cache-Control: no-cache, no-store, proxy-revalidate, no-transform, must-revalidate
Pragma: no-cache
Expires: 0
Content-Length: 43
P3P: policyref="/w3c/p3p.xml", CP="IDC DSP COR NID DEVi OUR BUS INT"
Set-Cookie: TS01a05a0f=01d37309fcd6fdd0f034f16f443628fa30dab5539dd55672e2f38ce004918bfe63bd5fccf6a0203ee99833ea3ecd23407f8f97904117ddb5fe2bf41c88f86df05b7b944a18; Path=/; Domain=.www.nexi.it
Vary: Accept-Encoding
static.hotjar.com/c/hotjar-653229.js?sv=7
200 OK 4.1 kB URL HTTP/2 static.hotjar.com/c/hotjar-653229.js?sv=7
IP
File type Unicode text, UTF-8 text, with very long lines (10263)
Hash 222c794d16863f96d0bc8c277c47a1ec
b1954e8b1d461940f2116aa629220462d3b6110a
0f3da7903d9a710ccb1a505e3f9dbcb8e93a04d745ed83c403aec83c5b314b53
GET /c/hotjar-653229.js?sv=7 HTTP/1.1
Host: static.hotjar.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nexi.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
content-encoding: br
cross-origin-resource-policy: cross-origin
strict-transport-security: max-age=604800; includeSubDomains
x-cache-hit: 1
x-content-type-options: nosniff
date: Tue, 13 Sep 2022 20:18:44 GMT
cache-control: max-age=60
etag: W/f9c4c5bfc12dcd5ee0fc9a2e7dbddf20
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: rPK1m-Vxb7vC0TQXFRBPHeYSygSr0MSxqECheHpcEkXH6gx2dBDRIQ==
age: 8
X-Firefox-Spdy: h2
cm.everesttech.net/cm/dd?d_uuid=75565927238606721712923302692344293694
302 0 B URL HTTP/1.1 cm.everesttech.net/cm/dd?d_uuid=75565927238606721712923302692344293694
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cm/dd?d_uuid=75565927238606721712923302692344293694 HTTP/1.1
Host: cm.everesttech.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nexi.it/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302
Date: Tue, 13 Sep 2022 20:18:52 GMT
Content-Length: 0
Connection: keep-alive
Set-Cookie: everest_g_v2=g_surferid~YyDlrAAAAIE2GAOY; Domain=.everesttech.net; Expires=Wed, 13-Sep-2023 20:18:52 GMT; Path=/
everest_session_v2=YyDlrAAAAIE2GQOY; Domain=.everesttech.net; Path=/
P3P: CP="NOI NID DEVa PSAa PSDa OUR IND PUR COM NAV INT DEM"
Cache-Control: no-cache
Location: https://dpm.demdex.net/ibs:dpid=411&dpuuid=YyDlrAAAAIE2GAOY
Server: AMO-cookiemap/1.1
www.nexi.it/api/services/nexi-utilities-service/prelogin/retrieve-cookie-policy
200 OK 4.7 kB URL HTTP/1.1 www.nexi.it/api/services/nexi-utilities-service/prelogin/retrieve-cookie-policy
IP
ASN #35051 Nexi Payments S.P.A.
File type JSON data\012- , ASCII text, with very long lines (4693), with no line terminators
Hash 87e16f6b4ba9e9e7290bdd493f5c752c
767e1cfed76427d5fa028b234973da78def3811e
f788e376e14be4b187702e7cbdb6d14710e4e84247b430fc0bf83046f21f4e88
POST /api/services/nexi-utilities-service/prelogin/retrieve-cookie-policy HTTP/1.1
Host: www.nexi.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
pragma: no-cache
cache-control: no-cache
cookie-origin: https://www.nexi.it
Application: sp
Env: PRODUCTION
Client-Version: web
Channel: web
Locale: it
X-Requested-With: XMLHttpRequest
Content-Length: 60
Origin: https://www.nexi.it
Connection: keep-alive
Referer: https://www.nexi.it/login-titolari.html?https://www.nexi.it/privati/servizi/area-personale.html
Cookie: lb_cookie2="faa7f7358a641e95cfaf1e92bce5195b7cf88a9165f2974909f85ac391e9e420 pero"; ncsi=e6f6c1f6a59f30ede255b567e9b8a04c; binc=6bc9120ef54b0c2885bd4dfc61f5c443; TS01a05a0f=01d37309fcd6fdd0f034f16f443628fa30dab5539dd55672e2f38ce004918bfe63bd5fccf6a0203ee99833ea3ecd23407f8f97904117ddb5fe2bf41c88f86df05b7b944a18; TS019ca071=01d37309fca1bab364766e2adc0a17d79d4eab4034d55672e2f38ce004918bfe63bd5fccf639a0e4355757311db3efdd2a28d0d88d3e9e4bf62e2b19ebf65b0fefc412c1a6c65ac200212fe44a02d24ba241816666; AMCV_6A724E255ED5F2A60A495E0E%40AdobeOrg=1176715910%7CMCIDTS%7C19249%7CMCMID%7C69922899272009973962397704871722624897%7CMCAAMLH-1663705117%7C6%7CMCAAMB-1663705117%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1663107517s%7CNONE%7CvVersion%7C5.4.0; AMCVS_6A724E255ED5F2A60A495E0E%40AdobeOrg=1; _ga_2EQBRC1CMY=GS1.1.1663100317.1.0.1663100317.0.0.0; _ga=GA1.1.540140703.1663100318
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://www.nexi.it
X-Application-Context: zuul-gateway:production:4000
Content-Type: application/json;charset=UTF-8
Content-Length: 4693
Date: Tue, 13 Sep 2022 20:18:51 GMT
Set-Cookie: wpamm_cookie=22878729981300713697532000000000000000000000; Max-Age=2147483647; Path=/CHP/api/services/nexi-utilities-service/prelogin; HttpOnly; Domain=www.nexi.it
lb_cookie=rd7o00000000000000000000ffff0a0a010co8443; expires=Wed, 14-Sep-2022 20:18:52 GMT; path=/
TS01a05a0f=01d37309fca6c14d00b626c92aea0f34f0676f4aacd55672e2f38ce004918bfe63bd5fccf6a0203ee99833ea3ecd23407f8f9790416b31e2745d452e2e625c28d2ba5dd5c0ae306ce7600a7861d859cb896e61aa39; Path=/; Domain=.www.nexi.it
TS0154e360=01d37309fc4b2386a862ddbb2480b2a30f12153a2ad55672e2f38ce004918bfe63bd5fccf6a0203ee99833ea3ecd23407f8f97904125df21ef27c127c6383ce2d8e051fc06a86b559af5a260cbb8333b47d2a16b59; path=/CHP/api/services/nexi-utilities-service/prelogin
P3P: policyref="/w3c/p3p.xml", CP="IDC DSP COR NID DEVi OUR BUS INT"
www.cloudflare.com/cdn-cgi/trace
200 OK 1.3 kB URL HTTP/2 www.cloudflare.com/cdn-cgi/trace
IP
Hash ecdfb561ea7b1395f4640f78b4a8e629
e8282bd175bf8ad28254c02954d226f3feddd374
1036d6a3553cbd1474f2fffa01d0b34b2e23775a19fcaa8a09fcb5b2433fa4ac
GET /cdn-cgi/trace HTTP/1.1
Host: www.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.nexi.it
Connection: keep-alive
Referer: https://www.nexi.it/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 13 Sep 2022 20:18:52 GMT
content-type: text/plain
access-control-allow-origin: *
server: cloudflare
cf-ray: 74a39314dfbdb521-OSL
x-frame-options: DENY
x-content-type-options: nosniff
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
www.nexi.it/content/nexi/it.navs.json?_=1663100318808
200 OK 60 kB URL HTTP/1.1 www.nexi.it/content/nexi/it.navs.json?_=1663100318808
IP
ASN #35051 Nexi Payments S.P.A.
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (59645), with no line terminators
Hash 8fe60b3f1b7b713fd094f25a872e577a
f0e424a0b0c392ed638b1bb674e5e4bd2d6c44b0
a096d1bd981ad253bc8044e913724d139e06e9d9e2b4dc059702658d7b1e8758
GET /content/nexi/it.navs.json?_=1663100318808 HTTP/1.1
Host: www.nexi.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://www.nexi.it/login-titolari.html?https://www.nexi.it/privati/servizi/area-personale.html
Cookie: lb_cookie2="faa7f7358a641e95cfaf1e92bce5195b7cf88a9165f2974909f85ac391e9e420 pero"; ncsi=e6f6c1f6a59f30ede255b567e9b8a04c; binc=6bc9120ef54b0c2885bd4dfc61f5c443; TS01a05a0f=01d37309fcd6fdd0f034f16f443628fa30dab5539dd55672e2f38ce004918bfe63bd5fccf6a0203ee99833ea3ecd23407f8f97904117ddb5fe2bf41c88f86df05b7b944a18; TS019ca071=01d37309fca1bab364766e2adc0a17d79d4eab4034d55672e2f38ce004918bfe63bd5fccf639a0e4355757311db3efdd2a28d0d88d3e9e4bf62e2b19ebf65b0fefc412c1a6c65ac200212fe44a02d24ba241816666; AMCV_6A724E255ED5F2A60A495E0E%40AdobeOrg=1176715910%7CMCIDTS%7C19249%7CMCMID%7C69922899272009973962397704871722624897%7CMCAAMLH-1663705117%7C6%7CMCAAMB-1663705117%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1663107517s%7CNONE%7CvVersion%7C5.4.0; AMCVS_6A724E255ED5F2A60A495E0E%40AdobeOrg=1; _ga_2EQBRC1CMY=GS1.1.1663100317.1.0.1663100317.0.0.0; _ga=GA1.2.540140703.1663100318; _gid=GA1.2.1584673265.1663100319; _gat_UA-3681719-1=1; s_cc=true
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 13 Sep 2022 20:18:52 GMT
Last-Modified: Fri, 09 Sep 2022 15:03:41 GMT
ETag: "e96b-5e83fd9fb938a"
Accept-Ranges: bytes
Content-Length: 59755
Vary: Accept-Encoding
Access-Control-Allow-Methods: GET, HEAD
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: application/json
P3P: policyref="/w3c/p3p.xml", CP="IDC DSP COR NID DEVi OUR BUS INT"
Set-Cookie: ncsi=e6f6c1f6a59f30ede255b567e9b8a04c; Path=/; Domain=nexi.it; Expires=Tue, 13-Sep-2022 20:48:52 GMT
binc=6bc9120ef54b0c2885bd4dfc61f5c443; Path=/; Domain=nexi.it; Expires=Wed, 13-Sep-2023 20:18:52 GMT
TS01a05a0f=01d37309fcd6fdd0f034f16f443628fa30dab5539dd55672e2f38ce004918bfe63bd5fccf6a0203ee99833ea3ecd23407f8f97904117ddb5fe2bf41c88f86df05b7b944a18; Path=/; Domain=.www.nexi.it
TS019ca071=01d37309fca1bab364766e2adc0a17d79d4eab4034d55672e2f38ce004918bfe63bd5fccf639a0e4355757311db3efdd2a28d0d88d3e9e4bf62e2b19ebf65b0fefc412c1a6c65ac200212fe44a02d24ba241816666; path=/; domain=nexi.it
uniqueid: 1506921f4881844606fd11bf1f31c583
script.hotjar.com/modules.448392d04fd1e15c100a.js
200 OK 66 kB URL HTTP/2 script.hotjar.com/modules.448392d04fd1e15c100a.js
IP
File type Unicode text, UTF-8 text, with very long lines (48714)
Hash dda0289b22368ab84a40f8dab68ddb9e
bef03b9e4930e3fddeee2dbd16f79fb04a78e11d
114cd1432d8d08eb7625146120b27b7046f5c3f841c25ff7889bd56ab1cd19ff
GET /modules.448392d04fd1e15c100a.js HTTP/1.1
Host: script.hotjar.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nexi.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 65486
date: Wed, 07 Sep 2022 10:58:07 GMT
accept-ranges: bytes
access-control-allow-origin: *
cache-control: max-age=31536000
content-encoding: br
cross-origin-resource-policy: cross-origin
etag: "dda0289b22368ab84a40f8dab68ddb9e"
last-modified: Wed, 07 Sep 2022 10:57:54 GMT
strict-transport-security: max-age=604800; includeSubDomains
x-content-type-options: nosniff
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 bcd5dadccb0831729969c938747ff79a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: iS1CwrNhDlym-STcWZePVxxDr_yGvC3CqkQCxDd2BQtBh279EJa1qQ==
age: 552045
X-Firefox-Spdy: h2
dpm.demdex.net/ibs:dpid=411&dpuuid=YyDlrAAAAIE2GAOY
302 Found 0 B URL HTTP/1.1 dpm.demdex.net/ibs:dpid=411&dpuuid=YyDlrAAAAIE2GAOY
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ibs:dpid=411&dpuuid=YyDlrAAAAIE2GAOY HTTP/1.1
Host: dpm.demdex.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nexi.it/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
DCS: dcs-prod-irl1-2-v039-0ab670d66.edge-irl1.demdex.com 0 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
Location: https://dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=411&dpuuid=YyDlrAAAAIE2GAOY
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
set-cookie: demdex=87951924297815359514569085860709396084; Max-Age=15552000; Expires=Sun, 12 Mar 2023 20:18:52 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-TID: wbNLifXLQf0=
Content-Length: 0
Connection: keep-alive
ocsp.digicert.com/
200 OK 312 B IP
Hash 29b523ff83ad576941b560255bacf8f7
c734717bf892916ad8c98e952a5c83bfa2ef0afc
a282cebd407869e37c4d6c24d988aed2b2ac9038c0bee479fc09d66e933849ec
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2235
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 13 Sep 2022 20:18:52 GMT
Last-Modified: Tue, 13 Sep 2022 19:41:38 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 312
www.nexi.it/g78f9/in/1506921f4881844606fd11bf1f31c583/8/c0d1a067e07e50aae032e9837bef95b1
200 OK 43 B URL HTTP/1.1 www.nexi.it/g78f9/in/1506921f4881844606fd11bf1f31c583/8/c0d1a067e07e50aae032e9837bef95b1
IP
ASN #35051 Nexi Payments S.P.A.
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /g78f9/in/1506921f4881844606fd11bf1f31c583/8/c0d1a067e07e50aae032e9837bef95b1 HTTP/1.1
Host: www.nexi.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nexi.it/login-titolari.html?https://www.nexi.it/privati/servizi/area-personale.html
Cookie: lb_cookie2="faa7f7358a641e95cfaf1e92bce5195b7cf88a9165f2974909f85ac391e9e420 pero"; ncsi=e6f6c1f6a59f30ede255b567e9b8a04c; binc=6bc9120ef54b0c2885bd4dfc61f5c443; TS01a05a0f=01d37309fcd6fdd0f034f16f443628fa30dab5539dd55672e2f38ce004918bfe63bd5fccf6a0203ee99833ea3ecd23407f8f97904117ddb5fe2bf41c88f86df05b7b944a18; TS019ca071=01d37309fca1bab364766e2adc0a17d79d4eab4034d55672e2f38ce004918bfe63bd5fccf639a0e4355757311db3efdd2a28d0d88d3e9e4bf62e2b19ebf65b0fefc412c1a6c65ac200212fe44a02d24ba241816666; AMCV_6A724E255ED5F2A60A495E0E%40AdobeOrg=1176715910%7CMCIDTS%7C19249%7CMCMID%7C69922899272009973962397704871722624897%7CMCAAMLH-1663705117%7C6%7CMCAAMB-1663705117%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1663107517s%7CNONE%7CvVersion%7C5.4.0; AMCVS_6A724E255ED5F2A60A495E0E%40AdobeOrg=1; _ga_2EQBRC1CMY=GS1.1.1663100317.1.0.1663100317.0.0.0; _ga=GA1.2.540140703.1663100318; _gid=GA1.2.1584673265.1663100319; _gat_UA-3681719-1=1; s_cc=true; lb_cookie=rd7o00000000000000000000ffff0a0a010co8443
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 13 Sep 2022 20:18:52 GMT
Content-Type: image/gif
Cache-Control: no-cache, no-store, proxy-revalidate, no-transform, must-revalidate
Pragma: no-cache
Expires: 0
Content-Length: 43
P3P: policyref="/w3c/p3p.xml", CP="IDC DSP COR NID DEVi OUR BUS INT"
Set-Cookie: TS01a05a0f=01d37309fcd6fdd0f034f16f443628fa30dab5539dd55672e2f38ce004918bfe63bd5fccf6a0203ee99833ea3ecd23407f8f97904117ddb5fe2bf41c88f86df05b7b944a18; Path=/; Domain=.www.nexi.it
Vary: Accept-Encoding
nexipayments.sc.omtrdc.net/b/ss/nexipayments.production/1/JS-2.22.4-LCS4/s0458983520442?AQB=1&ndh=1&pf=1&t=13%2F8%2F2022%2020%3A18%3A39%202%200&mid=69922899272009973962397704871722624897&aamlh=6&ce=UTF-8&pageName=%2Flogin-titolari.html&g=https%3A%2F%2Fwww.nexi.it%2Flogin-titolari.html%3Fhttps%3A%2F%2Fwww.nexi.it%2Fprivati%2Fservizi%2Farea-personale.html&cc=EUR&aamb=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&v4=%2Flogin-titolari.html&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=939&mcorgid=6A724E255ED5F2A60A495E0E%40AdobeOrg&AQE=1
200 OK 43 B URL HTTP/2 nexipayments.sc.omtrdc.net/b/ss/nexipayments.production/1/JS-2.22.4-LCS4/s0458983520442?AQB=1&ndh=1&pf=1&t=13%2F8%2F2022%2020%3A18%3A39%202%200&mid=69922899272009973962397704871722624897&aamlh=6&ce=UTF-8&pageName=%2Flogin-titolari.html&g=https%3A%2F%2Fwww.nexi.it%2Flogin-titolari.html%3Fhttps%3A%2F%2Fwww.nexi.it%2Fprivati%2Fservizi%2Farea-personale.html&cc=EUR&aamb=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&v4=%2Flogin-titolari.html&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=939&mcorgid=6A724E255ED5F2A60A495E0E%40AdobeOrg&AQE=1
IP
File type GIF image data, version 89a, 2 x 2\012- data
Hash ad480fd0732d0f6f1a8b06359e3a42bb
a544538683a2dfe574eeb2e358ac8fcc78289d50
a1ecbaed793a1f564c49c671f2dd0ce36f858534ef6d26b55783a06b884cc506
GET /b/ss/nexipayments.production/1/JS-2.22.4-LCS4/s0458983520442?AQB=1&ndh=1&pf=1&t=13%2F8%2F2022%2020%3A18%3A39%202%200&mid=69922899272009973962397704871722624897&aamlh=6&ce=UTF-8&pageName=%2Flogin-titolari.html&g=https%3A%2F%2Fwww.nexi.it%2Flogin-titolari.html%3Fhttps%3A%2F%2Fwww.nexi.it%2Fprivati%2Fservizi%2Farea-personale.html&cc=EUR&aamb=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&v4=%2Flogin-titolari.html&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=939&mcorgid=6A724E255ED5F2A60A495E0E%40AdobeOrg&AQE=1 HTTP/1.1
Host: nexipayments.sc.omtrdc.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nexi.it/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
date: Tue, 13 Sep 2022 20:18:52 GMT
expires: Mon, 12 Sep 2022 20:18:52 GMT
last-modified: Wed, 14 Sep 2022 20:18:52 GMT
pragma: no-cache
p3p: CP="This is not a P3P policy"
server: jag
etag: 3571480767980240896-4619588791594277911
vary: *
content-type: image/gif;charset=utf-8
content-length: 43
cache-control: no-cache, no-store, max-age=0, no-transform, private
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.nexi.it/g78f9/in/c0d1a067e07e50aae032e9837bef95b1/1
200 OK 0 B URL HTTP/1.1 www.nexi.it/g78f9/in/c0d1a067e07e50aae032e9837bef95b1/1
IP
ASN #35051 Nexi Payments S.P.A.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g78f9/in/c0d1a067e07e50aae032e9837bef95b1/1 HTTP/1.1
Host: www.nexi.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
x-as-transport: 6
Content-Length: 291940
Origin: https://www.nexi.it
Connection: keep-alive
Referer: https://www.nexi.it/login-titolari.html?https://www.nexi.it/privati/servizi/area-personale.html
Cookie: lb_cookie2="faa7f7358a641e95cfaf1e92bce5195b7cf88a9165f2974909f85ac391e9e420 pero"; ncsi=e6f6c1f6a59f30ede255b567e9b8a04c; binc=6bc9120ef54b0c2885bd4dfc61f5c443; TS01a05a0f=01d37309fcd6fdd0f034f16f443628fa30dab5539dd55672e2f38ce004918bfe63bd5fccf6a0203ee99833ea3ecd23407f8f97904117ddb5fe2bf41c88f86df05b7b944a18; TS019ca071=01d37309fca1bab364766e2adc0a17d79d4eab4034d55672e2f38ce004918bfe63bd5fccf639a0e4355757311db3efdd2a28d0d88d3e9e4bf62e2b19ebf65b0fefc412c1a6c65ac200212fe44a02d24ba241816666; AMCV_6A724E255ED5F2A60A495E0E%40AdobeOrg=1176715910%7CMCIDTS%7C19249%7CMCMID%7C69922899272009973962397704871722624897%7CMCAAMLH-1663705117%7C6%7CMCAAMB-1663705117%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1663107517s%7CNONE%7CvVersion%7C5.4.0; AMCVS_6A724E255ED5F2A60A495E0E%40AdobeOrg=1; _ga_2EQBRC1CMY=GS1.1.1663100317.1.0.1663100317.0.0.0; _ga=GA1.1.540140703.1663100318
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 13 Sep 2022 20:18:52 GMT
Access-Control-Allow-Origin: https://www.nexi.it
Vary: Origin
Access-Control-Allow-Credentials: true
Content-Type: text/plain
Cache-Control: no-cache, no-store, proxy-revalidate, no-transform, must-revalidate
Pragma: no-cache
Expires: 0
Content-Length: 0
P3P: policyref="/w3c/p3p.xml", CP="IDC DSP COR NID DEVi OUR BUS INT"
Set-Cookie: TS01a05a0f=01d37309fcd6fdd0f034f16f443628fa30dab5539dd55672e2f38ce004918bfe63bd5fccf6a0203ee99833ea3ecd23407f8f97904117ddb5fe2bf41c88f86df05b7b944a18; Path=/; Domain=.www.nexi.it
www.nexi.it/g78f9/in/1506921f4881844606fd11bf1f31c583/2
200 OK 0 B URL HTTP/1.1 www.nexi.it/g78f9/in/1506921f4881844606fd11bf1f31c583/2
IP
ASN #35051 Nexi Payments S.P.A.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g78f9/in/1506921f4881844606fd11bf1f31c583/2 HTTP/1.1
Host: www.nexi.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
x-as-transport: 6
Content-Length: 20096
Origin: https://www.nexi.it
Connection: keep-alive
Referer: https://www.nexi.it/login-titolari.html?https://www.nexi.it/privati/servizi/area-personale.html
Cookie: lb_cookie2="faa7f7358a641e95cfaf1e92bce5195b7cf88a9165f2974909f85ac391e9e420 pero"; ncsi=e6f6c1f6a59f30ede255b567e9b8a04c; binc=6bc9120ef54b0c2885bd4dfc61f5c443; TS01a05a0f=01d37309fcd6fdd0f034f16f443628fa30dab5539dd55672e2f38ce004918bfe63bd5fccf6a0203ee99833ea3ecd23407f8f97904117ddb5fe2bf41c88f86df05b7b944a18; TS019ca071=01d37309fca1bab364766e2adc0a17d79d4eab4034d55672e2f38ce004918bfe63bd5fccf639a0e4355757311db3efdd2a28d0d88d3e9e4bf62e2b19ebf65b0fefc412c1a6c65ac200212fe44a02d24ba241816666; AMCV_6A724E255ED5F2A60A495E0E%40AdobeOrg=1176715910%7CMCIDTS%7C19249%7CMCMID%7C69922899272009973962397704871722624897%7CMCAAMLH-1663705117%7C6%7CMCAAMB-1663705117%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1663107517s%7CNONE%7CvVersion%7C5.4.0; AMCVS_6A724E255ED5F2A60A495E0E%40AdobeOrg=1; _ga_2EQBRC1CMY=GS1.1.1663100317.1.0.1663100317.0.0.0; _ga=GA1.2.540140703.1663100318; _gid=GA1.2.1584673265.1663100319; _gat_UA-3681719-1=1; s_cc=true; lb_cookie=rd7o00000000000000000000ffff0a0a010co8443
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 13 Sep 2022 20:18:52 GMT
Access-Control-Allow-Origin: https://www.nexi.it
Vary: Origin
Access-Control-Allow-Credentials: true
Content-Type: text/plain
Cache-Control: no-cache, no-store, proxy-revalidate, no-transform, must-revalidate
Pragma: no-cache
Expires: 0
Content-Length: 0
P3P: policyref="/w3c/p3p.xml", CP="IDC DSP COR NID DEVi OUR BUS INT"
Set-Cookie: TS01a05a0f=01d37309fcd6fdd0f034f16f443628fa30dab5539dd55672e2f38ce004918bfe63bd5fccf6a0203ee99833ea3ecd23407f8f97904117ddb5fe2bf41c88f86df05b7b944a18; Path=/; Domain=.www.nexi.it
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 15 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 10 Sep 2022 12:31:58 GMT
expires: Sun, 10 Sep 2023 12:31:58 GMT
cache-control: public, max-age=31536000
age: 287214
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=411&dpuuid=YyDlrAAAAIE2GAOY
200 OK 59 B URL HTTP/1.1 dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=411&dpuuid=YyDlrAAAAIE2GAOY
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 1251cd5e5c2def4c046309375f87c1c1
e02d6b0c6a5c495c15985e2832e335eda8528c80
4e7010cc46fa361c88e57e3346d27421cf3b8a8bf5f39b43fc45997c60cb1c13
GET /demconf.jpg?et:ibs%7cdata:dpid=411&dpuuid=YyDlrAAAAIE2GAOY HTTP/1.1
Host: dpm.demdex.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nexi.it/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
content-encoding: gzip
Content-Type: image/gif
DCS: dcs-prod-irl1-1-v039-092e4c1c0.edge-irl1.demdex.com 0 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Content-Type-Options: nosniff
X-TID: P9WPQ/UdSJk=
Content-Length: 59
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 29296ed0597b554b2175dda23a08a874
d13ae703a94bf834a7fed39904d0fa3a9db7a655
8618b833f3d858a21eea8ac4a26988b1efc4192c1562da9d7b5351d6ca8afb6a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5753
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 13 Sep 2022 20:18:52 GMT
Last-Modified: Tue, 13 Sep 2022 18:42:59 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
ocsp.globalsign.com/gsrsaovsslca2018
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsrsaovsslca2018
IP
Hash a1551c8851e064545312db2439d893f5
2e3e85eacc4f3ba107f1ee9e6080e2ea56d07c4f
d70f868bcc64ae642635ba5352d8f7d20e039207f21960a3b8d1500a69bafd5c
POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 13 Sep 2022 20:18:53 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Sat, 17 Sep 2022 17:25:00 GMT
ETag: "2e3e85eacc4f3ba107f1ee9e6080e2ea56d07c4f"
Last-Modified: Tue, 13 Sep 2022 17:25:01 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: EXPIRED
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74a393190fb10b39-OSL
ocsp.globalsign.com/gsrsaovsslca2018
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsrsaovsslca2018
IP
Hash a1551c8851e064545312db2439d893f5
2e3e85eacc4f3ba107f1ee9e6080e2ea56d07c4f
d70f868bcc64ae642635ba5352d8f7d20e039207f21960a3b8d1500a69bafd5c
POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 13 Sep 2022 20:18:53 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Sat, 17 Sep 2022 17:25:00 GMT
ETag: "2e3e85eacc4f3ba107f1ee9e6080e2ea56d07c4f"
Last-Modified: Tue, 13 Sep 2022 17:25:01 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 0
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74a393191d62fac4-OSL
www.nexi.it/content/dam/nexi/portale-titolari/pagine-login/portale-titolari/login_pt_background_02.jpg
200 OK 432 kB URL HTTP/1.1 www.nexi.it/content/dam/nexi/portale-titolari/pagine-login/portale-titolari/login_pt_background_02.jpg
IP
ASN #35051 Nexi Payments S.P.A.
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1440x1024, components 3\012- data
Size 432 kB (432515 bytes)
Hash b9a33ab5b99902deb7d1c2a80e087d3b
735b1f9129d66f768861a332dc0f6e0e0c8fc4fd
dc50ef7f80147b0a2407f5a560125db8b36c799d5a5a32b17d83fea8f03492e5
GET /content/dam/nexi/portale-titolari/pagine-login/portale-titolari/login_pt_background_02.jpg HTTP/1.1
Host: www.nexi.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nexi.it/login-titolari.html?https://www.nexi.it/privati/servizi/area-personale.html
Cookie: lb_cookie2="faa7f7358a641e95cfaf1e92bce5195b7cf88a9165f2974909f85ac391e9e420 pero"; ncsi=e6f6c1f6a59f30ede255b567e9b8a04c; binc=6bc9120ef54b0c2885bd4dfc61f5c443; TS01a05a0f=01d37309fcd6fdd0f034f16f443628fa30dab5539dd55672e2f38ce004918bfe63bd5fccf6a0203ee99833ea3ecd23407f8f97904117ddb5fe2bf41c88f86df05b7b944a18; TS019ca071=01d37309fca1bab364766e2adc0a17d79d4eab4034d55672e2f38ce004918bfe63bd5fccf639a0e4355757311db3efdd2a28d0d88d3e9e4bf62e2b19ebf65b0fefc412c1a6c65ac200212fe44a02d24ba241816666; AMCV_6A724E255ED5F2A60A495E0E%40AdobeOrg=1176715910%7CMCIDTS%7C19249%7CMCMID%7C69922899272009973962397704871722624897%7CMCAAMLH-1663705117%7C6%7CMCAAMB-1663705117%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1663107517s%7CNONE%7CMCSYNCSOP%7C411-19256%7CvVersion%7C5.4.0; AMCVS_6A724E255ED5F2A60A495E0E%40AdobeOrg=1; _ga_2EQBRC1CMY=GS1.1.1663100317.1.0.1663100319.0.0.0; _ga=GA1.2.540140703.1663100318; _gid=GA1.2.1584673265.1663100319; _gat_UA-3681719-1=1; s_cc=true; lb_cookie=rd7o00000000000000000000ffff0a0a010co8443; mbox=session#0fea4923b1f9407fa0a4853babd3801e#1663102180|PC#0fea4923b1f9407fa0a4853babd3801e.37_0#1726345120; at_check=true; _hjSessionUser_653229=eyJpZCI6ImE3NGJiYzU3LWFjYWYtNTM5Ny04Yjc3LWFjM2VhZTNkNjlmMyIsImNyZWF0ZWQiOjE2NjMxMDAzMTkzODYsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample=0; _hjSession_653229=eyJpZCI6IjgzMDMwYjFkLTA4YjYtNDdkNi05MDA4LWFlY2ViYzQxNjg0ZiIsImNyZWF0ZWQiOjE2NjMxMDAzMTk1MDgsImluU2FtcGxlIjpmYWxzZX0=; _hjAbsoluteSessionInProgress=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 13 Sep 2022 20:18:53 GMT
Last-Modified: Wed, 07 Sep 2022 07:52:41 GMT
ETag: "69983-5e81198f562dc"
Accept-Ranges: bytes
Access-Control-Allow-Methods: GET, HEAD
Cache-Control: max-age=300, public
Keep-Alive: timeout=5, max=88
Connection: Keep-Alive
Content-Type: image/jpeg
P3P: policyref="/w3c/p3p.xml", CP="IDC DSP COR NID DEVi OUR BUS INT"
Set-Cookie: TS01a05a0f=01d37309fcd6fdd0f034f16f443628fa30dab5539dd55672e2f38ce004918bfe63bd5fccf6a0203ee99833ea3ecd23407f8f97904117ddb5fe2bf41c88f86df05b7b944a18; Path=/; Domain=.www.nexi.it
Transfer-Encoding: chunked
privati.nexi.it/api/services/login/auth/prelogin/card-holder-name
200 OK 30 B URL HTTP/1.1 privati.nexi.it/api/services/login/auth/prelogin/card-holder-name
IP
ASN #35051 Nexi Payments S.P.A.
File type JSON data\012- , ASCII text
Hash 960d1cc4e1f7a974a962fb0b012852fc
dcd6c28c02b13f4a53c2f5369447afa209272d43
4d1a6db34f7312fa88cadb1bb9e8c7be442676877b46df4e8833066eb98797d8
OPTIONS /api/services/login/auth/prelogin/card-holder-name HTTP/1.1
Host: privati.nexi.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: application,cache-control,channel,client-version,content-type,env,locale,macro-context,micro-context,pragma
Referer: https://www.nexi.it/
Origin: https://www.nexi.it
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Access-Control-Allow-Methods: GET
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://www.nexi.it
Access-Control-Allow-Headers: application,cache-control,channel,client-version,content-type,env,locale,macro-context,micro-context,pragma
Content-Type: application/json
Content-Length: 30
Date: Tue, 13 Sep 2022 20:18:53 GMT
Set-Cookie: lb_cookie=rd7o00000000000000000000ffff0a0a010do8443; expires=Wed, 14-Sep-2022 20:18:53 GMT; path=/
lb_cookie_privati="d54a5373798302d6de145d97187c7196d67a27aabce3871c78210294350af54d pero"; Path=/; Domain=.nexi.it; Expires=Tue, 13-Sep-2022 22:18:53 GMT
ncsi=3cc07cab7cf4ad48965b6a0ffe7edf03; Path=/; Domain=nexi.it; Expires=Tue, 13-Sep-2022 20:48:53 GMT
binc=c8f8be1bc502567b39acf0e46fef87ff; Path=/; Domain=nexi.it; Expires=Wed, 13-Sep-2023 20:18:53 GMT
TS014ad647=01d37309fc59ded5fc192160f78fa7804c1c14acc775e90d4a41c8bac98ba811f46d48a091b295038d62c61376de2e65a69899261d; Path=/
TS01db9159=01d37309fc59ded5fc192160f78fa7804c1c14acc775e90d4a41c8bac98ba811f46d48a091b295038d62c61376de2e65a69899261d; path=/; domain=.nexi.it
TS01be1f7b=01d37309fc59ded5fc192160f78fa7804c1c14acc775e90d4a41c8bac98ba811f46d48a091b295038d62c61376de2e65a69899261d; path=/; domain=nexi.it
uniqueid: 62111bbeef3788fe99c90e9626840a0e
Strict-Transport-Security: max-age=16070400; includeSubDomains; preload
Vary: Accept-Encoding
privati.nexi.it/api/services/login/auth/prelogin/card-holder-name
200 OK 2 B URL HTTP/1.1 privati.nexi.it/api/services/login/auth/prelogin/card-holder-name
IP
ASN #35051 Nexi Payments S.P.A.
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
GET /api/services/login/auth/prelogin/card-holder-name HTTP/1.1
Host: privati.nexi.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.nexi.it/
Content-Type: application/json
pragma: no-cache
cache-control: no-cache
Application: pt
Env: PRODUCTION
Client-Version: [object Object]
Channel: web
Locale: it
Macro-Context:
Micro-Context:
Origin: https://www.nexi.it
Connection: keep-alive
Cookie: lb_cookie2="faa7f7358a641e95cfaf1e92bce5195b7cf88a9165f2974909f85ac391e9e420 pero"; ncsi=e6f6c1f6a59f30ede255b567e9b8a04c; binc=6bc9120ef54b0c2885bd4dfc61f5c443; TS019ca071=01d37309fca1bab364766e2adc0a17d79d4eab4034d55672e2f38ce004918bfe63bd5fccf639a0e4355757311db3efdd2a28d0d88d3e9e4bf62e2b19ebf65b0fefc412c1a6c65ac200212fe44a02d24ba241816666; AMCV_6A724E255ED5F2A60A495E0E%40AdobeOrg=1176715910%7CMCIDTS%7C19249%7CMCMID%7C69922899272009973962397704871722624897%7CMCAAMLH-1663705117%7C6%7CMCAAMB-1663705117%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1663107517s%7CNONE%7CMCSYNCSOP%7C411-19256%7CvVersion%7C5.4.0; AMCVS_6A724E255ED5F2A60A495E0E%40AdobeOrg=1; _ga_2EQBRC1CMY=GS1.1.1663100317.1.0.1663100317.0.0.0; _ga=GA1.2.540140703.1663100318; _gid=GA1.2.1584673265.1663100319; _gat_UA-3681719-1=1; s_cc=true; mbox=session#0fea4923b1f9407fa0a4853babd3801e#1663102180; at_check=true
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://www.nexi.it
X-Application-Context: zuul-gateway:production:4000
Content-Type: application/json;charset=UTF-8
Content-Length: 2
Date: Tue, 13 Sep 2022 20:18:52 GMT
Set-Cookie: wpamm_cookie=22878729982060713697532000000000000000000000; Max-Age=2147483647; Path=/CHP/api/services/login/auth/prelogin; HttpOnly; Domain=privati.nexi.it
lb_cookie=rd7o00000000000000000000ffff0a0a0128o8443; expires=Wed, 14-Sep-2022 20:18:53 GMT; path=/
lb_cookie_privati="804cecd5d49da7a45f138525fa692b799db6233987f4001ba34d17c9a770a51d pero"; Path=/; Domain=.nexi.it; Expires=Tue, 13-Sep-2022 22:18:53 GMT
ncsi=e6f6c1f6a59f30ede255b567e9b8a04c; Path=/; Domain=nexi.it; Expires=Tue, 13-Sep-2022 20:48:53 GMT
binc=6bc9120ef54b0c2885bd4dfc61f5c443; Path=/; Domain=nexi.it; Expires=Wed, 13-Sep-2023 20:18:53 GMT
TS014ad647=01d37309fcec9c55f89ae112f5f1bfada58ac70580ce4004e0126283e40d4aa7ace284d3c33f16ecd4aae1778b5169db57cee5a335; Path=/
TS013e2413=01d37309fcec9c55f89ae112f5f1bfada58ac70580ce4004e0126283e40d4aa7ace284d3c33f16ecd4aae1778b5169db57cee5a335; path=/CHP/api/services/login/auth/prelogin; domain=privati.nexi.it
TS01db9159=01d37309fcec9c55f89ae112f5f1bfada58ac70580ce4004e0126283e40d4aa7ace284d3c33f16ecd4aae1778b5169db57cee5a335; path=/; domain=.nexi.it
TS01be1f7b=01d37309fcec9c55f89ae112f5f1bfada58ac70580ce4004e0126283e40d4aa7ace284d3c33f16ecd4aae1778b5169db57cee5a335; path=/; domain=nexi.it
uniqueid: 59ec6a75374e12ccebba202a9dec9934
Strict-Transport-Security: max-age=16070400; includeSubDomains; preload
Vary: Accept-Encoding
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 89dc4294d8e50675a5cb111e84d38452
993b0be337e43de62b8a33bef20c972881c8a646
27e6f64589d2befddc951fc27b83d03e1113bcfe301c76a2e412a20d2558a0c3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 13 Sep 2022 20:18:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j96&tid=UA-3681719-1&cid=540140703.1663100318&jid=898504823&gjid=23687647&_gid=1584673265.1663100319&_u=YADAAEAAAAAAAC~&z=640802932
200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j96&tid=UA-3681719-1&cid=540140703.1663100318&jid=898504823&gjid=23687647&_gid=1584673265.1663100319&_u=YADAAEAAAAAAAC~&z=640802932
IP
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j96&tid=UA-3681719-1&cid=540140703.1663100318&jid=898504823&gjid=23687647&_gid=1584673265.1663100319&_u=YADAAEAAAAAAAC~&z=640802932 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://www.nexi.it
Connection: keep-alive
Referer: https://www.nexi.it/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.nexi.it
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Tue, 13 Sep 2022 20:18:53 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash a44521d3957cdba57b0fc21915252110
e04f70e8f3271d219d22be1a0c54f7a047abdd55
aaca825919de7c1d549ae107d482a8ac35cf518c1141ef3054018267a26067bd
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 13 Sep 2022 20:18:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 89dc4294d8e50675a5cb111e84d38452
993b0be337e43de62b8a33bef20c972881c8a646
27e6f64589d2befddc951fc27b83d03e1113bcfe301c76a2e412a20d2558a0c3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 13 Sep 2022 20:18:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j96&tid=UA-3681719-1&cid=540140703.1663100318&jid=898504823&_u=YADAAEAAAAAAAC~&z=1893812848
200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j96&tid=UA-3681719-1&cid=540140703.1663100318&jid=898504823&_u=YADAAEAAAAAAAC~&z=1893812848
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j96&tid=UA-3681719-1&cid=540140703.1663100318&jid=898504823&_u=YADAAEAAAAAAAC~&z=1893812848 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nexi.it/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 13 Sep 2022 20:18:53 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash a44521d3957cdba57b0fc21915252110
e04f70e8f3271d219d22be1a0c54f7a047abdd55
aaca825919de7c1d549ae107d482a8ac35cf518c1141ef3054018267a26067bd
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 13 Sep 2022 20:18:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fefa6ec5a-4e0b-4c94-b9da-4836fbaa107b.jpeg
200 OK 8.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fefa6ec5a-4e0b-4c94-b9da-4836fbaa107b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e407da4d97d497925b1ab523fd416787
166741631fb93d109b18dde6d316b3fa3276aa8f
707460c02438da6114e35e0b6569d42c0f3fb747f8cb51002f4d52bedbcffa61
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fefa6ec5a-4e0b-4c94-b9da-4836fbaa107b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 8485
x-amzn-requestid: a56c9282-2786-4ae7-9fc2-0468bcc820a8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YQ1k_FM1oAMFZ2Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631d02ec-753cc4f121c9b77d22bb82b5;Sampled=0
x-amzn-remapped-date: Sat, 10 Sep 2022 21:34:36 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 2jR7F56GE_qqbRBWjNDiDBgWbCYv-Ac6kvC1LI0HciQkKGTeNDYlyw==
via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 ee330666adf9f04c8c30094f8ddcd004.cloudfront.net (CloudFront), 1.1 google
date: Mon, 12 Sep 2022 22:16:59 GMT
age: 79319
etag: "166741631fb93d109b18dde6d316b3fa3276aa8f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
nexipayments.tt.omtrdc.net/rest/v1/delivery?client=nexipayments&sessionId=0fea4923b1f9407fa0a4853babd3801e&version=2.8.2
200 OK 0 B URL HTTP/2 nexipayments.tt.omtrdc.net/rest/v1/delivery?client=nexipayments&sessionId=0fea4923b1f9407fa0a4853babd3801e&version=2.8.2
IP
POST /rest/v1/delivery?client=nexipayments&sessionId=0fea4923b1f9407fa0a4853babd3801e&version=2.8.2 HTTP/1.1
Host: nexipayments.tt.omtrdc.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 1011
Origin: https://www.nexi.it
Connection: keep-alive
Referer: https://www.nexi.it/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 13 Sep 2022 20:18:52 GMT
content-type: application/json;charset=UTF-8
vary: origin,access-control-request-method,access-control-request-headers,accept-encoding
access-control-allow-origin: https://www.nexi.it
access-control-allow-credentials: true
x-request-id: b7c6358e0e95631960355f596494d18b
timing-allow-origin: *
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List
content-encoding: gzip
X-Firefox-Spdy: h2
45.125.66.85
54.230.111.39
104.16.124.96
23.33.119.27
95.101.172.23
52.215.56.149
185.198.117.136
15.188.95.229
93.184.220.29