r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash ec332b81a27117ce9c16b67a5a8e4fac
b6d2afa2c859d000ad830d3d8d73f57bac6ffce2
1dc32c78e4e850303813338fd4e9616a41c8c05d1063748a1e76a92c397a5e8f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1DC32C78E4E850303813338FD4E9616A41C8C05D1063748A1E76A92C397A5E8F"
Last-Modified: Mon, 20 Mar 2023 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10590
Expires: Tue, 21 Mar 2023 14:48:21 GMT
Date: Tue, 21 Mar 2023 11:51:51 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 28774b36cf8bb6b054329393a33f6239
728313ddff6d5ceb6db3eb8445f039779616a140
08378fe6a897ab5a9c8d3bc2748c9670659d0d0d164317fdfac88d23fee78fa0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "08378FE6A897AB5A9C8D3BC2748C9670659D0D0D164317FDFAC88D23FEE78FA0"
Last-Modified: Sun, 19 Mar 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10067
Expires: Tue, 21 Mar 2023 14:39:38 GMT
Date: Tue, 21 Mar 2023 11:51:51 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 4e6141892ec4705c6a0134f3157b969d
4169fdea42b0fa9cb565e14b8e8fdb293575c78e
905537ef3e3a4a9030391b44bd6ac6bb5d7c9ec752b1821d683dfbf483096163
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "905537EF3E3A4A9030391B44BD6AC6BB5D7C9EC752B1821D683DFBF483096163"
Last-Modified: Sun, 19 Mar 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8703
Expires: Tue, 21 Mar 2023 14:16:54 GMT
Date: Tue, 21 Mar 2023 11:51:51 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 4ad6984a756720fbfff47b37a75513a2
355e35258114452af8b9638985ed9d8ef3bf0aca
43181fccb10652c68cae86e5e32b4e8f426fb5ad49d8125cb99e072cff573cf5
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Length, Alert, Content-Type, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 21 Mar 2023 11:27:24 GMT
content-type: application/json
age: 1467
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash e7bace7c1e04d44012e37ddffe36e5d5
3ac8d7c0a9d3e3f0b28b2530c7b8d8407b4042c2
6b4f80f2e95b26f6122ea8dcd0ef8d762299be822c69e839fc37581ca2bcb5f2
GET /chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: w+4pYOd32GAj2+AGs5wNWadHT4Y/he82wBGHnAFgNXDMj82h7Ckcx2VsbGaSD1pNyr86KQDI18U=
x-amz-request-id: 3CSTJ5SB27M4JY7Z
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 21 Mar 2023 10:59:05 GMT
age: 3166
last-modified: Sat, 11 Mar 2023 16:53:15 GMT
etag: "e7bace7c1e04d44012e37ddffe36e5d5"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 21 Mar 2023 11:51:51 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
code.jquery.com/jquery-latest.min.js
69.16.175.10200 OK 33 kB URL HTTP/2 code.jquery.com/jquery-latest.min.js
IP 69.16.175.10:0
File type ASCII text, with very long lines (32086)
Hash a39e9fcc2a78d5b1ed25b5f853c17a22
f1d1d30d35146a7adee855becba02b776366f169
a0581d3f2c05cfb302f81d2894c114da758e14a290bd4f240c7b63628469ee8d
GET /jquery-latest.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://psharp.com.au/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 21 Mar 2023 11:51:52 GMT
content-encoding: gzip
content-length: 33202
content-type: application/javascript; charset=utf-8
last-modified: Wed, 16 Feb 2022 10:50:39 GMT
accept-ranges: bytes
server: nginx
etag: W/"620cd6ff-1762a"
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-hw: 1679399512.dop014.sk1.t,1679399512.cds229.sk1.hn,1679399512.cds256.sk1.c
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Last-Modified, Content-Length, Pragma, Expires, ETag, Backoff, Alert, Cache-Control
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Tue, 21 Mar 2023 11:17:22 GMT
age: 2070
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.usertrust.com/
172.64.155.188200 OK 2.2 kB IP 172.64.155.188:0
Hash 8d8656d097d1d9c614e3e2d0e0a3404d
39c4a814aaf99967c9efa1abc84ec98c129736f0
a6af0174ad89c1848c28e2ce80ac0ee92eb33feca183f38e5fe91d282a02fa23
POST / HTTP/1.1
Host: ocsp.usertrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 21 Mar 2023 11:51:52 GMT
Content-Type: application/ocsp-response
Content-Length: 2236
Connection: keep-alive
Last-Modified: Sat, 18 Mar 2023 22:12:16 GMT
Expires: Sat, 25 Mar 2023 22:12:15 GMT
Etag: "39c4a814aaf99967c9efa1abc84ec98c129736f0"
Cache-Control: max-age=604097,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: HIT
Age: 322
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7ab5fc47fc29069b-OSL
ocsp.usertrust.com/
172.64.155.188200 OK 2.2 kB IP 172.64.155.188:0
Hash 8d8656d097d1d9c614e3e2d0e0a3404d
39c4a814aaf99967c9efa1abc84ec98c129736f0
a6af0174ad89c1848c28e2ce80ac0ee92eb33feca183f38e5fe91d282a02fa23
POST / HTTP/1.1
Host: ocsp.usertrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 21 Mar 2023 11:51:52 GMT
Content-Type: application/ocsp-response
Content-Length: 2236
Connection: keep-alive
Last-Modified: Sat, 18 Mar 2023 22:12:16 GMT
Expires: Sat, 25 Mar 2023 22:12:15 GMT
Etag: "39c4a814aaf99967c9efa1abc84ec98c129736f0"
Cache-Control: max-age=604097,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: HIT
Age: 322
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7ab5fc47fbb81c0a-OSL
ocsp.sectigo.com/
104.18.32.68200 OK 471 B IP 104.18.32.68:0
Hash b735d49f7ad8c452d51a1a637423d5ee
6b78328d3fda9934c86c2109d5f4d5a45900454c
2b339aa34bc7c1a46052e0bc448a84001e88e48ef8033956b6e1b7a0c683cd48
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 21 Mar 2023 11:51:52 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 19 Mar 2023 07:11:35 GMT
Expires: Sun, 26 Mar 2023 07:11:34 GMT
Etag: "6b78328d3fda9934c86c2109d5f4d5a45900454c"
Cache-Control: max-age=414581,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7ab5fc483943b4fa-OSL
digital.mps.it/cmn/assets/js/jquery-ext.js?vers=1131606
81.26.193.203200 OK 11 kB URL HTTP/1.1 digital.mps.it/cmn/assets/js/jquery-ext.js?vers=1131606
IP 81.26.193.203:0
ASN #13018 Banca Monte Dei Paschi Di Siena S.P.A.
File type ASCII text, with very long lines (25288), with no line terminators
Hash e2d5f519dd40e9810a29a66491cadf74
ffd8a2874172accd96d6b6439f696d7f37517cab
a0b72acb9248731929ff167146fce054eec1085fc11905a565c780cc1e770038
GET /cmn/assets/js/jquery-ext.js?vers=1131606 HTTP/1.1
Host: digital.mps.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://psharp.com.au/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Tue, 21 Mar 2023 11:51:52 GMT
Content-Length: 11361
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1; mode=block
Last-Modified: Mon, 13 Feb 2023 11:34:00 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Cache-Control: max-age=2592000
Expires: Thu, 20 Apr 2023 10:36:20 GMT
Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.gstatic.com https://www.googletagmanager.com https://www.google.com https://ajax.googleapis.com https://maps.googleapis.com www.google-analytics.com https://8294890.fls.doubleclick.net https://secure.adnxs.com https://white.mynsystems.com https://blue.mynsystems.com/ https://privacy.mynsystems.com https://ib.adnxs.com https://yellow.mynsystems.com https://zna4cciryw9kzle8d-mps.siteintercept.qualtrics.com https://siteintercept.qualtrics.com https://connect.facebook.net https://zn9nahtxma7dxxjqe-mps.siteintercept.qualtrics.com https://zn5j9lftsu1lqzb1k-mps.siteintercept.qualtrics.com https://zncveh3lu3fyce1re-mps.siteintercept.qualtrics.com;
Access-Control-Allow-Headers: Content-Type
Server-Timing: dtSInfo;desc="1"
Etag: W/"PSA-2jPy1yEKjj"
X-Original-Content-Length: 25288
X-Content-Type-Options: nosniff, nosniff
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: application/javascript
Set-Cookie: dtCookie=v_4_srv_3_sn_4CE4A49B7D464A5C39B1A1EA097307AC_perc_100000_ol_0_mul_1_app-3A07e31ae0c92b1b0b_0; Path=/; Domain=.mps.it
TS01d2b0ab=01eaad23898f552fdbcb3345143b119a54e911f588a2200aa884a2167bc298f653f97b7be489c7f5d305af577283a5445eca148244; Path=/; Secure; HTTPOnly
TS01802bdf=01eaad238923d1bb792b2b313c34772a68eaa00326a2200aa884a2167bc298f653f97b7be434401e1e2e54c922c9d9c82ba1a6a3d7ccf8f83aee06bb7bf56181f637457bef; path=/; domain=.mps.it; HTTPonly; Secure
Content-Encoding: gzip
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 4c195a3fc0c2abb831630cef1dcfa770
eda338de3063640556177b9db364c33193d7f6dc
c22eb0537cd79666b82fe61dd77fe9b0b3c059a4c65d405412acfc2c6800b444
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C22EB0537CD79666B82FE61DD77FE9B0B3C059A4C65D405412ACFC2C6800B444"
Last-Modified: Sun, 19 Mar 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4227
Expires: Tue, 21 Mar 2023 13:02:19 GMT
Date: Tue, 21 Mar 2023 11:51:52 GMT
Connection: keep-alive
ocsp.sectigo.com/
104.18.32.68200 OK 471 B IP 104.18.32.68:0
Hash b735d49f7ad8c452d51a1a637423d5ee
6b78328d3fda9934c86c2109d5f4d5a45900454c
2b339aa34bc7c1a46052e0bc448a84001e88e48ef8033956b6e1b7a0c683cd48
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 21 Mar 2023 11:51:52 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 19 Mar 2023 07:11:35 GMT
Expires: Sun, 26 Mar 2023 07:11:34 GMT
Etag: "6b78328d3fda9934c86c2109d5f4d5a45900454c"
Cache-Control: max-age=414581,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7ab5fc488a5bb4f3-OSL
digital.mps.it/cmn/assets/css/catalogo/w.login.digitalBanking.min.css?vers=1131606
81.26.193.203200 OK 11 kB URL HTTP/1.1 digital.mps.it/cmn/assets/css/catalogo/w.login.digitalBanking.min.css?vers=1131606
IP 81.26.193.203:0
ASN #13018 Banca Monte Dei Paschi Di Siena S.P.A.
File type ASCII text, with very long lines (47635)
Hash ef1675b320b987135de036859cc0351a
ce48a3b5427a63ae16c0384525d1ca2483a5a8dc
48dfbcef93cc3ab6309e135e8f290815ce31bfd0069b0280b84da659635846a7
GET /cmn/assets/css/catalogo/w.login.digitalBanking.min.css?vers=1131606 HTTP/1.1
Host: digital.mps.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://psharp.com.au/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Tue, 21 Mar 2023 11:51:52 GMT
Content-Length: 10619
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1; mode=block
Last-Modified: Mon, 13 Feb 2023 11:33:22 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Cache-Control: max-age=2592000
Expires: Thu, 20 Apr 2023 09:59:34 GMT
Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.gstatic.com https://www.googletagmanager.com https://www.google.com https://ajax.googleapis.com https://maps.googleapis.com www.google-analytics.com https://8294890.fls.doubleclick.net https://secure.adnxs.com https://white.mynsystems.com https://blue.mynsystems.com/ https://privacy.mynsystems.com https://ib.adnxs.com https://yellow.mynsystems.com https://zna4cciryw9kzle8d-mps.siteintercept.qualtrics.com https://siteintercept.qualtrics.com https://connect.facebook.net https://zn9nahtxma7dxxjqe-mps.siteintercept.qualtrics.com https://zn5j9lftsu1lqzb1k-mps.siteintercept.qualtrics.com https://zncveh3lu3fyce1re-mps.siteintercept.qualtrics.com;
Access-Control-Allow-Headers: Content-Type
Server-Timing: dtSInfo;desc="1"
Etag: W/"PSA-FVzCgDKGRW"
X-Original-Content-Length: 47636
X-Content-Type-Options: nosniff, nosniff
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: text/css
Set-Cookie: dtCookie=v_4_srv_2_sn_62A4A6E0D83704FD965E3FA964D8852B_perc_100000_ol_0_mul_1_app-3A07e31ae0c92b1b0b_0; Path=/; Domain=.mps.it
TS01d2b0ab=01eaad23897b64ad1642038c938a70d357c89dd4ea5f1dc252099226224f68dae02aa6d6f120655f500c4ec185781cbbd8797f4ffc; Path=/; Secure; HTTPOnly
TS01802bdf=01eaad238971b214b88f44c1e4c46b675fda0cd4f35f1dc252099226224f68dae02aa6d6f1e0da2aaf093f160ea0eb60b7b22a2f600e2691015d9cc2939ca17a7229f5fdbd; path=/; domain=.mps.it; HTTPonly; Secure
Content-Encoding: gzip
digital.mps.it/login.html
81.26.193.203200 OK 13 B URL HTTP/1.1 digital.mps.it/login.html
IP 81.26.193.203:0
ASN #13018 Banca Monte Dei Paschi Di Siena S.P.A.
File type HTML document, ASCII text, with no line terminators
Hash c83301425b2ad1d496473a5ff3d9ecca
941efb7368e46b27b937d34b07fc4d41da01b002
b633a587c652d02386c4f16f8c6f6aab7352d97f16367c3c40576214372dd628
GET /login.html HTTP/1.1
Host: digital.mps.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://psharp.com.au/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Tue, 21 Mar 2023 11:51:52 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1; mode=block
Accept-Ranges: bytes
X-OneAgent-JS-Injection: true
X-ruxit-JS-Agent: true
Cache-Control: max-age=0, no-cache
X-Content-Type-Options: nosniff
Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.gstatic.com https://www.googletagmanager.com https://www.google.com https://ajax.googleapis.com https://maps.googleapis.com www.google-analytics.com https://8294890.fls.doubleclick.net https://secure.adnxs.com https://white.mynsystems.com https://blue.mynsystems.com/ https://privacy.mynsystems.com https://ib.adnxs.com https://yellow.mynsystems.com https://zna4cciryw9kzle8d-mps.siteintercept.qualtrics.com https://siteintercept.qualtrics.com https://connect.facebook.net https://zn9nahtxma7dxxjqe-mps.siteintercept.qualtrics.com https://zn5j9lftsu1lqzb1k-mps.siteintercept.qualtrics.com https://zncveh3lu3fyce1re-mps.siteintercept.qualtrics.com;
Access-Control-Allow-Headers: Content-Type
Server-Timing: dtSInfo;desc="0", dtRpid;desc="1900281901"
Content-Length: 13
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
Set-Cookie: dtCookie=v_4_srv_1_sn_B22B3C7D5D9AADA2B5988585C35D9C9F_perc_100000_ol_0_mul_1_app-3A07e31ae0c92b1b0b_0; Path=/; Domain=.mps.it
TS01d2b0ab=01eaad238918420a02330050497df82283bf4560d7f40e6b7cd1c7f982250bdd84e9174930361e99f4adb8648e5926bf7c92ff448c; Path=/; Secure; HTTPOnly
TS01802bdf=01eaad23893a3be026d3f9f347191c228392715d02f40e6b7cd1c7f982250bdd84e9174930f23d1060eda89a3342f0946f02d316d9f7ce97c9b5ec39be968b326f3493d926; path=/; domain=.mps.it; HTTPonly; Secure
Vary: Accept-Encoding
digital.mps.it/libs/img/montedeipaschi_logo_hd.png
81.26.193.203200 OK 11 kB URL HTTP/1.1 digital.mps.it/libs/img/montedeipaschi_logo_hd.png
IP 81.26.193.203:0
ASN #13018 Banca Monte Dei Paschi Di Siena S.P.A.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 241x88, components 3\012- data
Hash 234af05aa100bac0bd183b7e8bf02179
5d467e25cf91aa9e5a90c1ed6e4ba4a8c471f451
0a0c6433b58c72136375414d6f7a6a511932eeaac396f7c0991a2b953fa2eaaa
GET /libs/img/montedeipaschi_logo_hd.png HTTP/1.1
Host: digital.mps.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://psharp.com.au/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Tue, 21 Mar 2023 11:51:52 GMT
Content-Length: 10960
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1; mode=block
Accept-Ranges: bytes
Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.gstatic.com https://www.googletagmanager.com https://www.google.com https://ajax.googleapis.com https://maps.googleapis.com www.google-analytics.com https://8294890.fls.doubleclick.net https://secure.adnxs.com https://white.mynsystems.com https://blue.mynsystems.com/ https://privacy.mynsystems.com https://ib.adnxs.com https://yellow.mynsystems.com https://zna4cciryw9kzle8d-mps.siteintercept.qualtrics.com https://siteintercept.qualtrics.com https://connect.facebook.net https://zn9nahtxma7dxxjqe-mps.siteintercept.qualtrics.com https://zn5j9lftsu1lqzb1k-mps.siteintercept.qualtrics.com https://zncveh3lu3fyce1re-mps.siteintercept.qualtrics.com;
Access-Control-Allow-Headers: Content-Type
Server-Timing: dtSInfo;desc="1"
Etag: W/"PSA-aj-I0rwWqEAus"
Expires: Thu, 20 Apr 2023 11:51:37 GMT
Cache-Control: max-age=2591984
X-Content-Type-Options: nosniff, nosniff
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: image/jpeg
Set-Cookie: dtCookie=v_4_srv_1_sn_3FE3AC4041986DF7BBC236C28294BA89_perc_100000_ol_0_mul_1_app-3A07e31ae0c92b1b0b_0; Path=/; Domain=.mps.it
TS01d2b0ab=01eaad23898314e86f21b66a70d426a1f960ae95139396bcc1a5a5e20b4de7872f029aaed8c07969628b15176257c012e78658abbf; Path=/; Secure; HTTPOnly
TS01802bdf=01eaad2389b3ae5937e1875b92c9780b20b68e4a179396bcc1a5a5e20b4de7872f029aaed8318e0c8b92e284a1122d2bad56bc2c06b2bea79d7758b33d4e23d64045d243cf; path=/; domain=.mps.it; HTTPonly; Secure
psharp.com.au/index.html
203.26.41.132200 OK 186 kB IP 203.26.41.132:0
ASN #38719 Dreamscape Networks Limited
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 (with BOM) text, with very long lines (447), with CRLF line terminators
Size 186 kB (185840 bytes)
Hash a21c182a17e9b8b79617c15397df7f2e
8c133b56d7e1043c5191decad9380064204a2378
13f241ffa8e1721a40d1ac8c5345212831e7eb3ef760cc810ebba5c770e03d10
Analyzer Verdict Alert openphish Monte dei Paschi Di Siena
fortinet Phishing
GET /index.html HTTP/1.1
Host: psharp.com.au
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Tue, 21 Mar 2023 11:51:51 GMT
Server: Apache
Last-Modified: Tue, 10 Nov 2020 13:10:12 GMT
Accept-Ranges: bytes
Content-Length: 185840
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html
push.services.mozilla.com/
52.35.120.40101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 52.35.120.40:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: oCYgF9RRk7XZkoQY7+BodA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: dxkBHnPfg+r3RuPzYpGhzpaIzLY=
digital.mps.it/libs/img/loginBI/iconaSpeechAssistantred.png
81.26.193.203200 OK 2.4 kB URL HTTP/1.1 digital.mps.it/libs/img/loginBI/iconaSpeechAssistantred.png
IP 81.26.193.203:0
ASN #13018 Banca Monte Dei Paschi Di Siena S.P.A.
File type PNG image data, 224 x 224, 8-bit colormap, non-interlaced\012- data
Hash ca6d989b4aed15bc09f589876a4697b6
c1b3afd98683383d7dacf66164d0e875f752bc3f
d46dda2fab1d8fe763cec3ef41291116c4df2667bdb89448b37fbc342249924a
GET /libs/img/loginBI/iconaSpeechAssistantred.png HTTP/1.1
Host: digital.mps.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://psharp.com.au/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Tue, 21 Mar 2023 11:51:52 GMT
Content-Length: 2394
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1; mode=block
Accept-Ranges: bytes
Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.gstatic.com https://www.googletagmanager.com https://www.google.com https://ajax.googleapis.com https://maps.googleapis.com www.google-analytics.com https://8294890.fls.doubleclick.net https://secure.adnxs.com https://white.mynsystems.com https://blue.mynsystems.com/ https://privacy.mynsystems.com https://ib.adnxs.com https://yellow.mynsystems.com https://zna4cciryw9kzle8d-mps.siteintercept.qualtrics.com https://siteintercept.qualtrics.com https://connect.facebook.net https://zn9nahtxma7dxxjqe-mps.siteintercept.qualtrics.com https://zn5j9lftsu1lqzb1k-mps.siteintercept.qualtrics.com https://zncveh3lu3fyce1re-mps.siteintercept.qualtrics.com;
Access-Control-Allow-Headers: Content-Type
Server-Timing: dtSInfo;desc="1"
Etag: W/"PSA-aj-ym2Ym0rtFb"
Expires: Thu, 20 Apr 2023 11:34:41 GMT
Cache-Control: max-age=2590968
X-Content-Type-Options: nosniff, nosniff
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: image/png
Set-Cookie: dtCookie=v_4_srv_3_sn_7E4361526250A8717676556F37A4DB16_perc_100000_ol_0_mul_1_app-3A07e31ae0c92b1b0b_0; Path=/; Domain=.mps.it
TS01d2b0ab=01eaad2389648f0b6c9cea3c2a1afa0fa0d79cea70a4cf8d0f6de2b72cacedea2a75eb163cf49105ad834b684f27f265ddc61ae9b7; Path=/; Secure; HTTPOnly
TS01802bdf=01eaad2389f5a13dc5bd04764c254d3892f4ddf961a4cf8d0f6de2b72cacedea2a75eb163c3e74f5233a712e26300a99be8f4aa124715df78c70bebfbe0a0aabf4244902d7; path=/; domain=.mps.it; HTTPonly; Secure
digital.mps.it/cmn/font/text-security-disc.woff2
81.26.193.203200 OK 2.3 kB URL HTTP/1.1 digital.mps.it/cmn/font/text-security-disc.woff2
IP 81.26.193.203:0
ASN #13018 Banca Monte Dei Paschi Di Siena S.P.A.
File type Web Open Font Format (Version 2), TrueType, length 2280, version 1.0\012- data
Hash db2e9ff14caa4e15f4e39ef4e10d34b8
16a11d60fd4b69f3fe7bf7bfb09475a5967124d9
9dd630e7cbf1a068b89a5a134e248ff63f2d452081bf86684aeb4b7f73712b76
GET /cmn/font/text-security-disc.woff2 HTTP/1.1
Host: digital.mps.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://psharp.com.au
Connection: keep-alive
Referer: https://digital.mps.it/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Tue, 21 Mar 2023 11:51:52 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1; mode=block
Last-Modified: Mon, 13 Feb 2023 11:33:13 GMT
Accept-Ranges: bytes
Content-Length: 2280
Cache-Control: max-age=2592000
Expires: Thu, 20 Apr 2023 11:51:52 GMT
X-Content-Type-Options: nosniff
Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.gstatic.com https://www.googletagmanager.com https://www.google.com https://ajax.googleapis.com https://maps.googleapis.com www.google-analytics.com https://8294890.fls.doubleclick.net https://secure.adnxs.com https://white.mynsystems.com https://blue.mynsystems.com/ https://privacy.mynsystems.com https://ib.adnxs.com https://yellow.mynsystems.com https://zna4cciryw9kzle8d-mps.siteintercept.qualtrics.com https://siteintercept.qualtrics.com https://connect.facebook.net https://zn9nahtxma7dxxjqe-mps.siteintercept.qualtrics.com https://zn5j9lftsu1lqzb1k-mps.siteintercept.qualtrics.com https://zncveh3lu3fyce1re-mps.siteintercept.qualtrics.com;
Access-Control-Allow-Headers: Content-Type
Timing-Allow-Origin: *
Server-Timing: dtSInfo;desc="1", dtTao;desc="1"
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Set-Cookie: dtCookie=v_4_srv_1_sn_BF686C8838CDECFCDFF13A5B8A6758F3_perc_100000_ol_0_mul_1_app-3A07e31ae0c92b1b0b_0; Path=/; Domain=.mps.it
TS01d2b0ab=01eaad23891f47a67ecd86a85aa2cad259d5eb6eb23c9de6458bc5db99323bbefe5ce13991d91c90a9d66a719cee3d1be810a4258e; Path=/; Secure; HTTPOnly
TS01802bdf=01eaad23895e4711b84a1c8e8c42b438993725539a3c9de6458bc5db99323bbefe5ce13991c5cc5449a20e8d02fbcba6474ad5bb60c8659de0798942e5773d436632d68635; path=/; domain=.mps.it; HTTPonly; Secure
Vary: Accept-Encoding
digital.mps.it/cmn/assets/icons/catalogo/info%20tooltip_UI.svg
81.26.193.203200 OK 999 B URL HTTP/1.1 digital.mps.it/cmn/assets/icons/catalogo/info%20tooltip_UI.svg
IP 81.26.193.203:0
ASN #13018 Banca Monte Dei Paschi Di Siena S.P.A.
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 12c7d3bc84dcbc9bf6f4f8c0bc62a03c
9fa0f5c8c6b269a02baf4615895766e024de984c
9c9b26055379437522e81d6ad02ec43de51199f7ee3ad2fb8a7f6ab3a44efccf
GET /cmn/assets/icons/catalogo/info%20tooltip_UI.svg HTTP/1.1
Host: digital.mps.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://psharp.com.au/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Tue, 21 Mar 2023 11:51:52 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1; mode=block
Last-Modified: Mon, 13 Feb 2023 11:33:08 GMT
Accept-Ranges: bytes
Content-Length: 999
Vary: Accept-Encoding
Cache-Control: max-age=2592000
Expires: Thu, 20 Apr 2023 11:51:52 GMT
X-Content-Type-Options: nosniff
Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.gstatic.com https://www.googletagmanager.com https://www.google.com https://ajax.googleapis.com https://maps.googleapis.com www.google-analytics.com https://8294890.fls.doubleclick.net https://secure.adnxs.com https://white.mynsystems.com https://blue.mynsystems.com/ https://privacy.mynsystems.com https://ib.adnxs.com https://yellow.mynsystems.com https://zna4cciryw9kzle8d-mps.siteintercept.qualtrics.com https://siteintercept.qualtrics.com https://connect.facebook.net https://zn9nahtxma7dxxjqe-mps.siteintercept.qualtrics.com https://zn5j9lftsu1lqzb1k-mps.siteintercept.qualtrics.com https://zncveh3lu3fyce1re-mps.siteintercept.qualtrics.com;
Access-Control-Allow-Headers: Content-Type
Server-Timing: dtSInfo;desc="1"
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: image/svg+xml
Set-Cookie: dtCookie=v_4_srv_2_sn_3F03E2B6096D959C10CF878D44394102_perc_100000_ol_0_mul_1_app-3A07e31ae0c92b1b0b_0; Path=/; Domain=.mps.it
TS01d2b0ab=01eaad2389ad67d3b76ef5d846735f0ed23e48cfaaf7db268bf651f392ea3b0ea9ee83df6b15b14bd310739e2cce7e442c75959927; Path=/; Secure; HTTPOnly
TS01802bdf=01eaad238931fe78d33bd6cbe82e73490ba04560fff7db268bf651f392ea3b0ea9ee83df6bea8ec10b8f506f236c021e4c68e3fc39c4ffc923deb3482111f773bece24a3d2; path=/; domain=.mps.it; HTTPonly; Secure
digital.mps.it/libs/img/loginBI/ico_carte.svg
81.26.193.203200 OK 1.3 kB URL HTTP/1.1 digital.mps.it/libs/img/loginBI/ico_carte.svg
IP 81.26.193.203:0
ASN #13018 Banca Monte Dei Paschi Di Siena S.P.A.
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 6a713d495a6a62bc4cecb91676fe25f2
54818deb2f386ad9f7f8aa831391b6fc2c59464a
b989e87444353500fa31829b5814b69d053f5e5553bfff4fcb26a38f76e0f08e
GET /libs/img/loginBI/ico_carte.svg HTTP/1.1
Host: digital.mps.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://psharp.com.au/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Tue, 21 Mar 2023 11:51:52 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1; mode=block
Last-Modified: Mon, 13 Feb 2023 11:32:42 GMT
Accept-Ranges: bytes
Content-Length: 1330
Vary: Accept-Encoding
Cache-Control: max-age=2592000
Expires: Thu, 20 Apr 2023 11:51:52 GMT
X-Content-Type-Options: nosniff
Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.gstatic.com https://www.googletagmanager.com https://www.google.com https://ajax.googleapis.com https://maps.googleapis.com www.google-analytics.com https://8294890.fls.doubleclick.net https://secure.adnxs.com https://white.mynsystems.com https://blue.mynsystems.com/ https://privacy.mynsystems.com https://ib.adnxs.com https://yellow.mynsystems.com https://zna4cciryw9kzle8d-mps.siteintercept.qualtrics.com https://siteintercept.qualtrics.com https://connect.facebook.net https://zn9nahtxma7dxxjqe-mps.siteintercept.qualtrics.com https://zn5j9lftsu1lqzb1k-mps.siteintercept.qualtrics.com https://zncveh3lu3fyce1re-mps.siteintercept.qualtrics.com;
Access-Control-Allow-Headers: Content-Type
Server-Timing: dtSInfo;desc="0", dtRpid;desc="1657426957"
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: image/svg+xml
Set-Cookie: dtCookie=v_4_srv_1_sn_6C5CC86B36EE792E148D9A06B89170D3_perc_100000_ol_0_mul_1_app-3A07e31ae0c92b1b0b_0; Path=/; Domain=.mps.it
TS01d2b0ab=01eaad2389c554be2d1cf987f33ae5afcdbe309838ee7dd7c59eef5d52ab2ab58ef1cf933d0faf45e82bd1faba65cd1286d62b6dd5; Path=/; Secure; HTTPOnly
TS01802bdf=01eaad2389d78c9ccf8e55efd42bac7cc261f1879eee7dd7c59eef5d52ab2ab58ef1cf933ddf30b10a6d1b9a5b6a7aaa7ff57c6e33d3c260e04ef2669b4fb01e8f701a063d; path=/; domain=.mps.it; HTTPonly; Secure
www.smartsuppchat.com/loader.js?
185.76.9.18200 OK 8.5 kB URL HTTP/2 www.smartsuppchat.com/loader.js?
IP 185.76.9.18:0
ASN #60068 Datacamp Limited
Hash a5dc50291cd38586e12d70238e035f0f
3f6b52bbd210e68ee500a5837d40ab9e25a64d65
3bc49171a11672d8b7cbc082883124afade9abb651f761c6de3071c13bbe1dd7
GET /loader.js? HTTP/1.1
Host: www.smartsuppchat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://psharp.com.au/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 21 Mar 2023 11:51:52 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Mon, 13 Mar 2023 07:47:07 GMT
etag: W/"640ed4fb-4a0b"
expires: Mon, 13 Mar 2023 07:55:03 GMT
cache-control: max-age=300, public, s-maxage=60
server: CDN77-Turbo
x-77-nzt: AblMCQ28SVP/OQAAAA
x-77-nzt-ray: c0a4cc2831e629a0589a196449899a36
x-accel-expires: @1679399515
x-cache: HIT
x-age: 57
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
digital.mps.it/libs/img/loginBI/ico_informazioni.svg
81.26.193.203200 OK 2.4 kB URL HTTP/1.1 digital.mps.it/libs/img/loginBI/ico_informazioni.svg
IP 81.26.193.203:0
ASN #13018 Banca Monte Dei Paschi Di Siena S.P.A.
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 671e7303796ce8cccd6f8f98f192fb1c
6680a2f5f75ddd3fbfa15f36445759ebef52b48e
0723be3bac2e41d6d7aa267af24f45a7240d74ead82a130765f83fc6fbf19723
GET /libs/img/loginBI/ico_informazioni.svg HTTP/1.1
Host: digital.mps.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://psharp.com.au/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Tue, 21 Mar 2023 11:51:53 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1; mode=block
Last-Modified: Mon, 13 Feb 2023 11:32:42 GMT
Accept-Ranges: bytes
Content-Length: 2448
Vary: Accept-Encoding
Cache-Control: max-age=2592000
Expires: Thu, 20 Apr 2023 11:51:53 GMT
X-Content-Type-Options: nosniff
Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.gstatic.com https://www.googletagmanager.com https://www.google.com https://ajax.googleapis.com https://maps.googleapis.com www.google-analytics.com https://8294890.fls.doubleclick.net https://secure.adnxs.com https://white.mynsystems.com https://blue.mynsystems.com/ https://privacy.mynsystems.com https://ib.adnxs.com https://yellow.mynsystems.com https://zna4cciryw9kzle8d-mps.siteintercept.qualtrics.com https://siteintercept.qualtrics.com https://connect.facebook.net https://zn9nahtxma7dxxjqe-mps.siteintercept.qualtrics.com https://zn5j9lftsu1lqzb1k-mps.siteintercept.qualtrics.com https://zncveh3lu3fyce1re-mps.siteintercept.qualtrics.com;
Access-Control-Allow-Headers: Content-Type
Server-Timing: dtSInfo;desc="1"
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: image/svg+xml
Set-Cookie: dtCookie=v_4_srv_3_sn_D62D3E17E53DFAE212CE599EA174E1F2_perc_100000_ol_0_mul_1_app-3A07e31ae0c92b1b0b_0; Path=/; Domain=.mps.it
TS01d2b0ab=01eaad2389ef434c56f34b0095868d3a406bb721a24ba968a0b1e378a5314adbc931b0e2be290a21e4e3ae5bc1b786a36eae2420e1; Path=/; Secure; HTTPOnly
TS01802bdf=01eaad2389c3ab0b80cb453490a8a29059b4a2ae684ba968a0b1e378a5314adbc931b0e2be208bd2f4451de67a50ea75a91a3ada1e0058a74c6fd2d74bc6f4694367a749ee; path=/; domain=.mps.it; HTTPonly; Secure
digital.mps.it/cmn/font/text-security-disc.ttf
81.26.193.203200 OK 12 kB URL HTTP/1.1 digital.mps.it/cmn/font/text-security-disc.ttf
IP 81.26.193.203:0
ASN #13018 Banca Monte Dei Paschi Di Siena S.P.A.
File type TrueType Font data, 11 tables, 1st "GSUB", 16 names, Macintosh, type 1 string, text-security-discRegulartext-security-disctext-security-discVersion 1.0text-security-discGenera\012- data
Hash 7c83ea2ac4879abaee1d9e85d996b00c
f2edb568b2b37d9fa0d694ba2776e88441c2aac2
45db43564f0403a0df50caa810df6e9ee61dca5127cb3682f27d37b4f595f25a
GET /cmn/font/text-security-disc.ttf HTTP/1.1
Host: digital.mps.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://psharp.com.au
Connection: keep-alive
Referer: https://digital.mps.it/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Tue, 21 Mar 2023 11:51:53 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1; mode=block
Last-Modified: Mon, 13 Feb 2023 11:33:13 GMT
Accept-Ranges: bytes
Content-Length: 12392
Cache-Control: max-age=2592000
Expires: Thu, 20 Apr 2023 11:51:53 GMT
X-Content-Type-Options: nosniff
Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.gstatic.com https://www.googletagmanager.com https://www.google.com https://ajax.googleapis.com https://maps.googleapis.com www.google-analytics.com https://8294890.fls.doubleclick.net https://secure.adnxs.com https://white.mynsystems.com https://blue.mynsystems.com/ https://privacy.mynsystems.com https://ib.adnxs.com https://yellow.mynsystems.com https://zna4cciryw9kzle8d-mps.siteintercept.qualtrics.com https://siteintercept.qualtrics.com https://connect.facebook.net https://zn9nahtxma7dxxjqe-mps.siteintercept.qualtrics.com https://zn5j9lftsu1lqzb1k-mps.siteintercept.qualtrics.com https://zncveh3lu3fyce1re-mps.siteintercept.qualtrics.com;
Access-Control-Allow-Headers: Content-Type
Timing-Allow-Origin: *
Server-Timing: dtSInfo;desc="1", dtTao;desc="1"
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: application/font-sfnt
Set-Cookie: dtCookie=v_4_srv_3_sn_CD1F7B2AB23365ECEB0CAF6F5250B76D_perc_100000_ol_0_mul_1_app-3A07e31ae0c92b1b0b_0; Path=/; Domain=.mps.it
TS01d2b0ab=01eaad23899c24a9dd1755459c6ff3a656aed92e315e4661ccce93c48ce4e0baef60f24be9662805f3b81e241aa534518a1b4b16bf; Path=/; Secure; HTTPOnly
TS01802bdf=01eaad23899185926d37b0243d9ee8f6b3bd2e5a8f5e4661ccce93c48ce4e0baef60f24be97b9f52c2cafe009dc82506c54f229a3aa79ffc34deb48bf43e86205267efe779; path=/; domain=.mps.it; HTTPonly; Secure
ocsp.r2m02.amazontrust.com/
54.230.80.227200 OK 471 B URL HTTP/1.1 ocsp.r2m02.amazontrust.com/
IP 54.230.80.227:0
Hash 3d82da165abd64dedee6cc73dac3b1c1
1aa3894c5186a9737a007c9fadb48b56a8aab27e
609d2664563d87b79d81b5303817b1f6a8fb4464bb11f9a79ca2efd166a76c22
POST / HTTP/1.1
Host: ocsp.r2m02.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=94284
Date: Tue, 21 Mar 2023 11:51:53 GMT
Etag: "6418616f-1d7"
Expires: Wed, 22 Mar 2023 14:03:17 GMT
Last-Modified: Mon, 20 Mar 2023 13:36:47 GMT
Server: ECAcc (bsa/EA9D)
X-Cache: Miss from cloudfront
Via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 82HT9bBllAu1byFsYqgObZoDmS_wcaKHH3uXGTc1WXnK2Jg1K7b0AQ==
Age: 1590
psharp.com.au/favicon.ico
203.26.41.132200 OK 1.2 kB URL HTTP/1.1 psharp.com.au/favicon.ico
IP 203.26.41.132:0
ASN #38719 Dreamscape Networks Limited
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash 756b5102ba5f5f62045174f1e0e24f2e
da960cdb4f405c110d956b286915426a2c08689f
23063090027d06c463ca3fcf7b5c19b715051dff25da99f3c0b505fa20fbfe11
GET /favicon.ico HTTP/1.1
Host: psharp.com.au
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://psharp.com.au/index.html
HTTP/1.1 200 OK
Date: Tue, 21 Mar 2023 11:51:53 GMT
Server: Apache
Last-Modified: Tue, 10 Nov 2020 13:10:12 GMT
Accept-Ranges: bytes
Content-Length: 1150
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/x-icon
widget-v2.smartsuppcdn.com/static/js/6.80b8e19c.chunk.js
185.76.9.26200 OK 163 kB URL HTTP/2 widget-v2.smartsuppcdn.com/static/js/6.80b8e19c.chunk.js
IP 185.76.9.26:0
ASN #60068 Datacamp Limited
Size 163 kB (162800 bytes)
Hash 35d317b3f60ea9eb96e672ac58e36608
76b0f42e6dac2e02fa62644c0d6d925d808ee904
706acc2dd527977c95a2209c08bc580914ef835424f0f438bff4e10a70cfceb5
GET /static/js/6.80b8e19c.chunk.js HTTP/1.1
Host: widget-v2.smartsuppcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 21 Mar 2023 11:51:53 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Mon, 13 Feb 2023 08:33:32 GMT
etag: W/"63e9f5dc-8338c"
expires: Tue, 13 Feb 2024 09:21:29 GMT
cache-control: max-age=31536000, public, immutable
access-control-allow-origin: *
server: CDN77-Turbo
x-77-nzt: AblMCRQFwIX/QJkvAA
x-77-nzt-ray: af585630f65ab038599a1964952ed01a
x-accel-expires: @1707816089
x-cache: HIT
x-age: 3119424
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash de95776582936b8e129e876cf6d80fa8
0233251e1cf0123f1260d980d7c8ef92718723f9
49c07da2ab4ebd66bd166bf0e20dd084b38973cd40c79f85eb283d15a1ccac36
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "49C07DA2AB4EBD66BD166BF0E20DD084B38973CD40C79F85EB283D15A1CCAC36"
Last-Modified: Sun, 19 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10996
Expires: Tue, 21 Mar 2023 14:55:09 GMT
Date: Tue, 21 Mar 2023 11:51:53 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash de95776582936b8e129e876cf6d80fa8
0233251e1cf0123f1260d980d7c8ef92718723f9
49c07da2ab4ebd66bd166bf0e20dd084b38973cd40c79f85eb283d15a1ccac36
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "49C07DA2AB4EBD66BD166BF0E20DD084B38973CD40C79F85EB283D15A1CCAC36"
Last-Modified: Sun, 19 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10996
Expires: Tue, 21 Mar 2023 14:55:09 GMT
Date: Tue, 21 Mar 2023 11:51:53 GMT
Connection: keep-alive
bootstrap.smartsuppchat.com/widget/76c55fb536a8a3965c8cd8c28546bd2c38f6704f.json
3.124.105.122200 OK 965 B URL HTTP/2 bootstrap.smartsuppchat.com/widget/76c55fb536a8a3965c8cd8c28546bd2c38f6704f.json
IP 3.124.105.122:0
File type JSON data\012- , ASCII text, with very long lines (1255), with no line terminators
Hash 1d5db04a0dc4cb5e3a9730df7a92aa3e
7c5311028c8f7d985ecdc70870a62753173db565
0535a4f74314c32ebb6d0d14d9271b76d2f7ad8547770bf2d3759fdcd042d4aa
GET /widget/76c55fb536a8a3965c8cd8c28546bd2c38f6704f.json HTTP/1.1
Host: bootstrap.smartsuppchat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: http://psharp.com.au
Connection: keep-alive
Referer: http://psharp.com.au/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 21 Mar 2023 11:51:53 GMT
content-type: application/json; charset=utf-8
x-version: b320280dbaf559c71e48a1dd6c0a783124d40cac
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: private, max-age=0, must-revalidate
x-hit: redis
etag: "4e7-1H3HCwKlJYR54xn+jrgS7gFC2ZU"
content-encoding: br
X-Firefox-Spdy: h2
ocsp.r2m01.amazontrust.com/
54.230.80.227200 OK 471 B URL HTTP/1.1 ocsp.r2m01.amazontrust.com/
IP 54.230.80.227:0
Hash b7d791698209233b548dfa35d1aaf703
48ff1cfb1fec55da6363f2122a5f882d88831a0e
443c734f12605594e7ab8410d88fb0864ea0590859c0ad30a4917568f476a5d2
POST / HTTP/1.1
Host: ocsp.r2m01.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Tue, 21 Mar 2023 11:51:53 GMT
Last-Modified: Tue, 21 Mar 2023 11:26:00 GMT
Server: ECAcc (bsa/EAE4)
X-Cache: Miss from cloudfront
Via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 0YCM-fL3qLI5Ym8IUHs6Z8nUvqWgb4biqHUOiaw2ZC0a9VE8GVKKoA==
Age: 1553
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F38bb12d7-f954-4d00-8df4-529b55100544.jpeg
34.120.237.76200 OK 6.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F38bb12d7-f954-4d00-8df4-529b55100544.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8f5a12c7beb240250d70bf6049cdd80f
7d44ba70f3e2ed0efeb22312550a49f2eb3d8857
077bb80f575533f541b809cc99fab53278c161be6077cceef77d6fd649f274e4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F38bb12d7-f954-4d00-8df4-529b55100544.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6608
x-amzn-requestid: c996ce16-31c3-4019-8b10-c10e6bcfd1b2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CDFZyGKrIAMF-dQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641782a4-1f5079bd367eee3967348203;Sampled=0
x-amzn-remapped-date: Sun, 19 Mar 2023 21:46:12 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: QdVJspl0oGNiVJSKYLsglPe0qmIVUIUXzTuSGmDhVQEhMPkmo8RuEw==
via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 7545e37b10b5fcf5e3df98185c85194a.cloudfront.net (CloudFront), 1.1 google
date: Tue, 21 Mar 2023 08:09:04 GMT
age: 13369
etag: "7d44ba70f3e2ed0efeb22312550a49f2eb3d8857"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6943b819-ab3e-4698-a81d-266be026b4b8.jpeg
34.120.237.76200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6943b819-ab3e-4698-a81d-266be026b4b8.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f73dbc0fc3d196647ddc1e30450989d4
75d0a1414a5d350ba426dc37333a6ea131f66753
2a6954b3ccf01567c0c0c2911dd8b02c1cd264fc78178cef2eef6a6796c16c3f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6943b819-ab3e-4698-a81d-266be026b4b8.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10855
x-amzn-requestid: bb845712-834d-49b1-97f0-f3750f132741
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CEZD0GCHIAMFq6A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6418087e-4361bbd40ec5f0d10dabdf85;Sampled=0
x-amzn-remapped-date: Mon, 20 Mar 2023 07:17:18 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: d81ObS_T4QBMAr1KU_lJ1hJC4FMqpJNCreDNuU481S4RZo3aQxMkaQ==
via: 1.1 446313511980eb02f28ff5a9a4147c0a.cloudfront.net (CloudFront), 1.1 6bdc2963c9ed59b475ec36c35e5932a4.cloudfront.net (CloudFront), 1.1 google
date: Tue, 21 Mar 2023 07:20:22 GMT
age: 16291
etag: "75d0a1414a5d350ba426dc37333a6ea131f66753"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffc78f90b-41af-4ead-ad86-702e5fda80ad.jpeg
34.120.237.76200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffc78f90b-41af-4ead-ad86-702e5fda80ad.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2b8211ace94cc818c0b092a0f8c24c7e
785e7ca94d770a89c2d738d38c880d676bf14652
f14171e1bf278f881e63d81884e84b0395f37871bfdad187c57ee8b1c337602d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffc78f90b-41af-4ead-ad86-702e5fda80ad.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10326
x-amzn-requestid: 21739424-faef-436b-9024-5354854b622c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CGWI8E4poAMFsvg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6418d09f-1627c1db7ff0c2f05f9c4e6e;Sampled=0
x-amzn-remapped-date: Mon, 20 Mar 2023 21:31:11 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: RIABIQaX9GWt0kbVqf4YeCZOVYYZRq0I31xV_YXoi4TQKvAQqY7ftA==
via: 1.1 a20e81b65d2465c729ce2f6bfe539dd0.cloudfront.net (CloudFront), 1.1 31dfa94142c6eaf975b0e5454c00340a.cloudfront.net (CloudFront), 1.1 google
date: Mon, 20 Mar 2023 21:45:17 GMT
age: 50796
etag: "785e7ca94d770a89c2d738d38c880d676bf14652"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb2ad5022-7f23-468e-8e1f-6388d8cc9db8.jpeg
34.120.237.76200 OK 6.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb2ad5022-7f23-468e-8e1f-6388d8cc9db8.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4e5f234aedfabd736b50fef3017380f9
71672a6c3523d9999522e005091863d07ea0e94a
3314df7a93e317d509aeffc1cde69ec450ddad116a27dc197db1abce966da344
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb2ad5022-7f23-468e-8e1f-6388d8cc9db8.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6511
x-amzn-requestid: 82d12180-bdcb-4ce0-8588-4239ee27f236
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CGWI_E_eoAMF3sA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6418d09f-2f5df7cd5f6cee4762703d29;Sampled=0
x-amzn-remapped-date: Mon, 20 Mar 2023 21:31:11 GMT
x-amz-cf-pop: SEA19-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: sTt0-W1XE7yUFGFXg2nPnKw5tKKkrw-cH_TCIbQy8JL-k0QtCNZS8w==
via: 1.1 0a2ce08fa1ec3c33302a7547d3305978.cloudfront.net (CloudFront), 1.1 7545e37b10b5fcf5e3df98185c85194a.cloudfront.net (CloudFront), 1.1 google
date: Mon, 20 Mar 2023 21:52:08 GMT
age: 50385
etag: "71672a6c3523d9999522e005091863d07ea0e94a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3db1704b-1ecd-4198-a98e-0353d4671a5c.jpeg
34.120.237.76200 OK 8.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3db1704b-1ecd-4198-a98e-0353d4671a5c.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2a940b362660fdee25faaa51e08c439b
85fa91b5c4e6ddc1f3cf45eb6a4a3facfc6ad68c
18b99e3e890fdc959421c895ce343b8b3ed88819c83fa0009823e8ded23458f1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3db1704b-1ecd-4198-a98e-0353d4671a5c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8195
x-amzn-requestid: c6844a50-a6b2-4ef4-ad28-f1a0fbcec14f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CDFESEDGoAMFQ8A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6417821b-22fa560d4b7811c233fe07fa;Sampled=0
x-amzn-remapped-date: Sun, 19 Mar 2023 21:43:55 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: hZeMhs-Z5fNn0pvRUSkNcGau_K6EG9EQtDktbLUth0uEveafUgCxeQ==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 85ee490c179dc0af42b771f11421073e.cloudfront.net (CloudFront), 1.1 google
date: Mon, 20 Mar 2023 22:07:00 GMT
age: 49493
etag: "85fa91b5c4e6ddc1f3cf45eb6a4a3facfc6ad68c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbc7839c7-2b7e-47fa-a8d7-b001f2527406.jpeg
34.120.237.76200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbc7839c7-2b7e-47fa-a8d7-b001f2527406.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e7f3f5682ef230a0e5ead556ccbb9c8d
93bcb7e0d7f2e7648f2749060e0a58bca3a033b9
e63beb09275f78a899e992ce814b4a079aaf38a4932a32b9f9431552702224b8
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbc7839c7-2b7e-47fa-a8d7-b001f2527406.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11397
x-amzn-requestid: 9c96a37a-b2e6-46f1-94dd-1a299da61a02
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CGWw1HwVIAMF0Hg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6418d19e-0638254835be22cc17465cc2;Sampled=0
x-amzn-remapped-date: Mon, 20 Mar 2023 21:35:26 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: g2YNKMDYmcQl3rpt8G2tHJFrBf25_aNKA4v4WKBgpCQeEWEnwgbkYg==
via: 1.1 010c0731b9775a983eceaec0f5fa6a2e.cloudfront.net (CloudFront), 1.1 e11ee4e3208082d534c251b36bbee268.cloudfront.net (CloudFront), 1.1 google
date: Mon, 20 Mar 2023 21:45:17 GMT
etag: "93bcb7e0d7f2e7648f2749060e0a58bca3a033b9"
content-type: image/jpeg
age: 50796
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
websocket-visitors.smartsupp.com/socket/?EIO=3&transport=websocket
3.66.97.52101 Switching Protocols 0 B URL HTTP/1.1 websocket-visitors.smartsupp.com/socket/?EIO=3&transport=websocket
IP 3.66.97.52:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /socket/?EIO=3&transport=websocket HTTP/1.1
Host: websocket-visitors.smartsupp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: http://psharp.com.au
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: rxDY/6IfQcYCE5iIV40pZg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Date: Tue, 21 Mar 2023 11:51:54 GMT
Connection: upgrade
Upgrade: websocket
Sec-WebSocket-Accept: KTTcA9I4ZBnwlXyMyxM1RC0wOvo=
Sec-WebSocket-Version: 13
WebSocket-Server: uWebSockets
widget-v2.smartsuppcdn.com/asset-manifest.json
185.76.9.26200 OK 0 B URL HTTP/2 widget-v2.smartsuppcdn.com/asset-manifest.json
IP 185.76.9.26:0
ASN #60068 Datacamp Limited
GET /asset-manifest.json HTTP/1.1
Host: widget-v2.smartsuppcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: http://psharp.com.au
Connection: keep-alive
Referer: http://psharp.com.au/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 21 Mar 2023 11:51:53 GMT
content-type: application/json
vary: Accept-Encoding
last-modified: Mon, 13 Feb 2023 08:33:32 GMT
etag: W/"63e9f5dc-6ce"
expires: Mon, 13 Feb 2023 09:26:29 GMT
cache-control: max-age=300, public, s-maxage=60
access-control-allow-origin: *
server: CDN77-Turbo
x-77-nzt: AblMCRSZicv/GgAAAA
x-77-nzt-ray: af585630eb702a38599a196406112d18
x-accel-expires: @1679399547
x-cache: HIT
x-age: 26
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
widget-v2.smartsuppcdn.com/static/js/main.3c944932.chunk.js
185.76.9.26200 OK 0 B URL HTTP/2 widget-v2.smartsuppcdn.com/static/js/main.3c944932.chunk.js
IP 185.76.9.26:0
ASN #60068 Datacamp Limited
GET /static/js/main.3c944932.chunk.js HTTP/1.1
Host: widget-v2.smartsuppcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 21 Mar 2023 11:51:53 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Mon, 13 Feb 2023 08:33:32 GMT
etag: W/"63e9f5dc-1cc88"
expires: Tue, 13 Feb 2024 09:21:29 GMT
cache-control: max-age=31536000, public, immutable
access-control-allow-origin: *
server: CDN77-Turbo
x-77-nzt: AblMCRQ73KL/QJkvAA
x-77-nzt-ray: af585630f65ab038599a19649e43ab1a
x-accel-expires: @1707816089
x-cache: HIT
x-age: 3119424
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2