r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 81dd5c5cc5b3278876cb44dcb520a60f
c0511a59e9eccdcdda98717b87c89c5d59974808
41736c303afdb3d31e48724b107dcb22883cae02f3562308eb52d9164001a2de
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "41736C303AFDB3D31E48724B107DCB22883CAE02F3562308EB52D9164001A2DE"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14585
Expires: Sat, 28 Jan 2023 12:20:18 GMT
Date: Sat, 28 Jan 2023 08:17:13 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9fbe85f42e8ae8ae41cc12df5f98b141
949fa36ff0f22f72565fd584bef094dd4de23037
184d3e4df4bce559b4d7c4836372f5fd2de9782a96b04d364230b7d695d737d8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "184D3E4DF4BCE559B4D7C4836372F5FD2DE9782A96B04D364230B7D695D737D8"
Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8362
Expires: Sat, 28 Jan 2023 10:36:35 GMT
Date: Sat, 28 Jan 2023 08:17:13 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash dcd75ca6daca51c5e39d431468511793
07f76d3bf23d65c9110d810fa71a994e39e085d3
73672a816da4450fe2c938b08d7ae002d9ca29fdcbd3e29cc97084d826f8b459
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Backoff, Content-Length, Alert, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 28 Jan 2023 07:35:29 GMT
content-type: application/json
age: 2504
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 03092d1a1bc7ac91ee342a1a7ab2a562
52db06ce1fd2c74ddd36b6a0a7aee1b5c891600a
03b8ff2629abac9fc30ebec059c2e2018fcbc41646ad5f71c965ff630fbf1ffd
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "03B8FF2629ABAC9FC30EBEC059C2E2018FCBC41646AD5F71C965FF630FBF1FFD"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8665
Expires: Sat, 28 Jan 2023 10:41:38 GMT
Date: Sat, 28 Jan 2023 08:17:13 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 6aYQ61Y9Vvw5aq4lI9jh80ctdnhEXSat5t+9hXdjwJAo7xj5zpbykSLGUhzmB8nQ/T+utQaLzp0=
x-amz-request-id: GTZN8016G6EZ14G2
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 28 Jan 2023 07:20:53 GMT
age: 3380
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 08:17:13 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
code.jquery.com/jquery-latest.min.js
200 OK 33 kB URL HTTP/2 code.jquery.com/jquery-latest.min.js
IP
File type ASCII text, with very long lines (32086)
Hash a39e9fcc2a78d5b1ed25b5f853c17a22
f1d1d30d35146a7adee855becba02b776366f169
a0581d3f2c05cfb302f81d2894c114da758e14a290bd4f240c7b63628469ee8d
GET /jquery-latest.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://alpacaranchhouse.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 28 Jan 2023 08:17:13 GMT
content-encoding: gzip
content-length: 33202
content-type: application/javascript; charset=utf-8
last-modified: Wed, 16 Feb 2022 10:50:39 GMT
accept-ranges: bytes
server: nginx
etag: W/"620cd6ff-1762a"
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-hw: 1674893833.dop023.sk1.t,1674893833.cds009.sk1.hn,1674893833.cds018.sk1.c
X-Firefox-Spdy: h2
ocsp.usertrust.com/
200 OK 2.2 kB IP
Hash 16f09f725c74a0adbf79ead3ecfa96c6
38624ae577298e44fc9eacb1329557ce8f70f2be
01edce14b61f8b8fd77c623ceddeab12438bf7b81c391130d1bb138c148fa18c
POST / HTTP/1.1
Host: ocsp.usertrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 08:17:13 GMT
Content-Type: application/ocsp-response
Content-Length: 2236
Connection: keep-alive
Last-Modified: Wed, 25 Jan 2023 10:12:16 GMT
Expires: Wed, 01 Feb 2023 10:12:15 GMT
Etag: "38624ae577298e44fc9eacb1329557ce8f70f2be"
Cache-Control: max-age=604015,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: HIT
Age: 1604
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79084a5aaee51c0a-OSL
ocsp.usertrust.com/
200 OK 2.2 kB IP
Hash 16f09f725c74a0adbf79ead3ecfa96c6
38624ae577298e44fc9eacb1329557ce8f70f2be
01edce14b61f8b8fd77c623ceddeab12438bf7b81c391130d1bb138c148fa18c
POST / HTTP/1.1
Host: ocsp.usertrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 08:17:13 GMT
Content-Type: application/ocsp-response
Content-Length: 2236
Connection: keep-alive
Last-Modified: Wed, 25 Jan 2023 10:12:16 GMT
Expires: Wed, 01 Feb 2023 10:12:15 GMT
Etag: "38624ae577298e44fc9eacb1329557ce8f70f2be"
Cache-Control: max-age=604015,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: HIT
Age: 1604
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79084a5ab942b50c-OSL
ocsp.sectigo.com/
200 OK 471 B IP
Hash f8bec35d197a37065fc341defd0ec38a
34c40b3fe1465cbdeb5ba15ae5473c87b7a6f6c8
9377f71b0108b0e1d371be20c9a53aa4cc6e3751d752f28bdbc165639fd55d29
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 08:17:13 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Wed, 25 Jan 2023 19:11:32 GMT
Expires: Wed, 01 Feb 2023 19:11:31 GMT
Etag: "34c40b3fe1465cbdeb5ba15ae5473c87b7a6f6c8"
Cache-Control: max-age=384257,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 79084a5acb5c0b51-OSL
digital.mps.it/cmn/assets/js/jquery-ext.js?vers=1131606
200 OK 11 kB URL HTTP/1.1 digital.mps.it/cmn/assets/js/jquery-ext.js?vers=1131606
IP
ASN #13018 Banca Monte Dei Paschi Di Siena S.P.A.
File type ASCII text, with very long lines (25288), with no line terminators
Hash e2d5f519dd40e9810a29a66491cadf74
ffd8a2874172accd96d6b6439f696d7f37517cab
a0b72acb9248731929ff167146fce054eec1085fc11905a565c780cc1e770038
GET /cmn/assets/js/jquery-ext.js?vers=1131606 HTTP/1.1
Host: digital.mps.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://alpacaranchhouse.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 08:17:13 GMT
Content-Length: 11361
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1; mode=block
Last-Modified: Tue, 22 Nov 2022 14:48:16 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Cache-Control: max-age=2592000
Expires: Sun, 19 Feb 2023 19:45:31 GMT
Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.gstatic.com https://www.googletagmanager.com https://www.google.com https://ajax.googleapis.com https://maps.googleapis.com www.google-analytics.com https://8294890.fls.doubleclick.net https://secure.adnxs.com https://white.mynsystems.com https://blue.mynsystems.com/ https://privacy.mynsystems.com https://ib.adnxs.com https://yellow.mynsystems.com https://zna4cciryw9kzle8d-mps.siteintercept.qualtrics.com https://siteintercept.qualtrics.com https://connect.facebook.net https://zn9nahtxma7dxxjqe-mps.siteintercept.qualtrics.com https://zn5j9lftsu1lqzb1k-mps.siteintercept.qualtrics.com https://zncveh3lu3fyce1re-mps.siteintercept.qualtrics.com;
Access-Control-Allow-Headers: Content-Type
Server-Timing: dtSInfo;desc="0", dtRpid;desc="70809780"
Etag: W/"PSA-2jPy1yEKjj"
X-Original-Content-Length: 25288
X-Content-Type-Options: nosniff, nosniff
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: application/javascript
Set-Cookie: dtCookie=v_4_srv_3_sn_B9974F287FFE11B21B6B7D544F814904_perc_100000_ol_0_mul_1_app-3A07e31ae0c92b1b0b_0; Path=/; Domain=.mps.it
TS01d2b0ab=01eaad23895a0bbb10720e2acc054580985b2b741b9747583c84364962ffeb5369ac697e8810d5e8e47969117488bab8921f09ece1; Path=/; Secure; HTTPOnly
TS01802bdf=01eaad2389c47c2e30a5bae009794c38ebae627f8d9747583c84364962ffeb5369ac697e882cbdd8025d384585e3a5fcbe79d3b7aab1e58a0e9969c1ef0d13d987e13fe3da; path=/; domain=.mps.it; HTTPonly; Secure
Content-Encoding: gzip
alpacaranchhouse.com/
200 OK 186 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 (with BOM) text, with very long lines (447), with CRLF line terminators
Size 186 kB (185840 bytes)
Hash a21c182a17e9b8b79617c15397df7f2e
8c133b56d7e1043c5191decad9380064204a2378
13f241ffa8e1721a40d1ac8c5345212831e7eb3ef760cc810ebba5c770e03d10
Analyzer Verdict Alert openphish Monte dei Paschi Di Siena
phishtank Other
fortinet Phishing
quad9 Sinkholed
GET / HTTP/1.1
Host: alpacaranchhouse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 08:17:12 GMT
Server: Apache/2.4.55 (cPanel) OpenSSL/1.1.1s mod_bwlimited/1.4 PHP/5.6.40
Last-Modified: Wed, 11 Nov 2020 05:10:12 GMT
ETag: "6382d25-2d5f0-5b3cdcf59f500"
Accept-Ranges: bytes
Content-Length: 185840
Keep-Alive: timeout=2, max=100
Connection: Keep-Alive
Content-Type: text/html
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Last-Modified, ETag, Expires, Backoff, Content-Length, Cache-Control, Alert, Retry-After, Pragma
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 28 Jan 2023 07:49:03 GMT
age: 1690
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 16a7b6a7128312e2f985d30df18c4487
6017bff79ffb525d9c7f9f32b999b74b5dc69602
663fd12209627f08e759c2ed1c76278a5da79dae1e0b46082dd1bb44775f7a16
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "663FD12209627F08E759C2ED1C76278A5DA79DAE1E0B46082DD1BB44775F7A16"
Last-Modified: Fri, 27 Jan 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12450
Expires: Sat, 28 Jan 2023 11:44:43 GMT
Date: Sat, 28 Jan 2023 08:17:13 GMT
Connection: keep-alive
ocsp.sectigo.com/
200 OK 471 B IP
Hash f8bec35d197a37065fc341defd0ec38a
34c40b3fe1465cbdeb5ba15ae5473c87b7a6f6c8
9377f71b0108b0e1d371be20c9a53aa4cc6e3751d752f28bdbc165639fd55d29
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 08:17:13 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Wed, 25 Jan 2023 19:11:32 GMT
Expires: Wed, 01 Feb 2023 19:11:31 GMT
Etag: "34c40b3fe1465cbdeb5ba15ae5473c87b7a6f6c8"
Cache-Control: max-age=384257,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 79084a5accaab50b-OSL
digital.mps.it/cmn/assets/css/catalogo/w.login.digitalBanking.min.css?vers=1131606
200 OK 11 kB URL HTTP/1.1 digital.mps.it/cmn/assets/css/catalogo/w.login.digitalBanking.min.css?vers=1131606
IP
ASN #13018 Banca Monte Dei Paschi Di Siena S.P.A.
File type ASCII text, with very long lines (47635)
Hash ef1675b320b987135de036859cc0351a
ce48a3b5427a63ae16c0384525d1ca2483a5a8dc
48dfbcef93cc3ab6309e135e8f290815ce31bfd0069b0280b84da659635846a7
GET /cmn/assets/css/catalogo/w.login.digitalBanking.min.css?vers=1131606 HTTP/1.1
Host: digital.mps.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://alpacaranchhouse.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 08:17:13 GMT
Content-Length: 10619
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1; mode=block
Last-Modified: Tue, 22 Nov 2022 14:47:18 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Cache-Control: max-age=2592000
Expires: Sun, 19 Feb 2023 19:45:29 GMT
Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.gstatic.com https://www.googletagmanager.com https://www.google.com https://ajax.googleapis.com https://maps.googleapis.com www.google-analytics.com https://8294890.fls.doubleclick.net https://secure.adnxs.com https://white.mynsystems.com https://blue.mynsystems.com/ https://privacy.mynsystems.com https://ib.adnxs.com https://yellow.mynsystems.com https://zna4cciryw9kzle8d-mps.siteintercept.qualtrics.com https://siteintercept.qualtrics.com https://connect.facebook.net https://zn9nahtxma7dxxjqe-mps.siteintercept.qualtrics.com https://zn5j9lftsu1lqzb1k-mps.siteintercept.qualtrics.com https://zncveh3lu3fyce1re-mps.siteintercept.qualtrics.com;
Access-Control-Allow-Headers: Content-Type
Server-Timing: dtSInfo;desc="0", dtRpid;desc="-1376920673"
Etag: W/"PSA-FVzCgDKGRW"
X-Original-Content-Length: 47636
X-Content-Type-Options: nosniff, nosniff
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: text/css
Set-Cookie: dtCookie=v_4_srv_1_sn_7B1851043EE53C335D0108F6D41A2C65_perc_100000_ol_0_mul_1_app-3A07e31ae0c92b1b0b_0; Path=/; Domain=.mps.it
TS01d2b0ab=01eaad238941cdff54308d8fd78016d5683c4a3fd203f1ec2dc85190111280af29aaf0959d4980977a03c894b827a4dee2799f79a2; Path=/; Secure; HTTPOnly
TS01802bdf=01eaad2389931cacac1a3be92ff80be751478c1b7603f1ec2dc85190111280af29aaf0959dfaed5ad1407f761e7232f6aab4a21b1cbd124235195a0fe658dc28b54d983360; path=/; domain=.mps.it; HTTPonly; Secure
Content-Encoding: gzip
digital.mps.it/libs/img/loginBI/iconaSpeechAssistantred.png
200 OK 2.4 kB URL HTTP/1.1 digital.mps.it/libs/img/loginBI/iconaSpeechAssistantred.png
IP
ASN #13018 Banca Monte Dei Paschi Di Siena S.P.A.
File type PNG image data, 224 x 224, 8-bit colormap, non-interlaced\012- data
Hash ca6d989b4aed15bc09f589876a4697b6
c1b3afd98683383d7dacf66164d0e875f752bc3f
d46dda2fab1d8fe763cec3ef41291116c4df2667bdb89448b37fbc342249924a
GET /libs/img/loginBI/iconaSpeechAssistantred.png HTTP/1.1
Host: digital.mps.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://alpacaranchhouse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 08:17:13 GMT
Content-Length: 2394
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1; mode=block
Accept-Ranges: bytes
Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.gstatic.com https://www.googletagmanager.com https://www.google.com https://ajax.googleapis.com https://maps.googleapis.com www.google-analytics.com https://8294890.fls.doubleclick.net https://secure.adnxs.com https://white.mynsystems.com https://blue.mynsystems.com/ https://privacy.mynsystems.com https://ib.adnxs.com https://yellow.mynsystems.com https://zna4cciryw9kzle8d-mps.siteintercept.qualtrics.com https://siteintercept.qualtrics.com https://connect.facebook.net https://zn9nahtxma7dxxjqe-mps.siteintercept.qualtrics.com https://zn5j9lftsu1lqzb1k-mps.siteintercept.qualtrics.com https://zncveh3lu3fyce1re-mps.siteintercept.qualtrics.com;
Access-Control-Allow-Headers: Content-Type
Server-Timing: dtSInfo;desc="0", dtRpid;desc="1455799322"
Etag: W/"PSA-aj-ym2Ym0rtFb"
Expires: Sun, 19 Feb 2023 23:36:06 GMT
Cache-Control: max-age=1955932
X-Content-Type-Options: nosniff, nosniff
Keep-Alive: timeout=15, max=99
Connection: Keep-Alive
Content-Type: image/png
Set-Cookie: dtCookie=v_4_srv_3_sn_408A235E35B32269413F968384560B0E_perc_100000_ol_0_mul_1_app-3A07e31ae0c92b1b0b_0; Path=/; Domain=.mps.it
TS01d2b0ab=01eaad238984afaa9a3d11b7e3dc2a3f001f678f880a4166e5704ac2d6a3972c7abba0d113590b87fcb6f9698a07a79d9f8b139b39; Path=/; Secure; HTTPOnly
TS01802bdf=01eaad238935d3acdf81bfb877970725457300b72e0a4166e5704ac2d6a3972c7abba0d113c13984862e54e0231282de86f17d5eb137c6823c8b1d72a92a2bc5e56d3985d9; path=/; domain=.mps.it; HTTPonly; Secure
digital.mps.it/login.html
200 OK 13 B URL HTTP/1.1 digital.mps.it/login.html
IP
ASN #13018 Banca Monte Dei Paschi Di Siena S.P.A.
File type HTML document, ASCII text, with no line terminators
Hash c83301425b2ad1d496473a5ff3d9ecca
941efb7368e46b27b937d34b07fc4d41da01b002
b633a587c652d02386c4f16f8c6f6aab7352d97f16367c3c40576214372dd628
GET /login.html HTTP/1.1
Host: digital.mps.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://alpacaranchhouse.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 08:17:13 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1; mode=block
Accept-Ranges: bytes
X-OneAgent-JS-Injection: true
X-ruxit-JS-Agent: true
Cache-Control: max-age=0, no-cache
X-Content-Type-Options: nosniff
Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.gstatic.com https://www.googletagmanager.com https://www.google.com https://ajax.googleapis.com https://maps.googleapis.com www.google-analytics.com https://8294890.fls.doubleclick.net https://secure.adnxs.com https://white.mynsystems.com https://blue.mynsystems.com/ https://privacy.mynsystems.com https://ib.adnxs.com https://yellow.mynsystems.com https://zna4cciryw9kzle8d-mps.siteintercept.qualtrics.com https://siteintercept.qualtrics.com https://connect.facebook.net https://zn9nahtxma7dxxjqe-mps.siteintercept.qualtrics.com https://zn5j9lftsu1lqzb1k-mps.siteintercept.qualtrics.com https://zncveh3lu3fyce1re-mps.siteintercept.qualtrics.com;
Access-Control-Allow-Headers: Content-Type
Server-Timing: dtSInfo;desc="0", dtRpid;desc="1797804038"
Content-Length: 13
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
Set-Cookie: dtCookie=v_4_srv_3_sn_3318952D1FA8CE862F0C3D7A3EB26512_perc_100000_ol_0_mul_1_app-3A07e31ae0c92b1b0b_0; Path=/; Domain=.mps.it
TS01d2b0ab=01eaad2389fd8e891381f5514693d65a33df9dd5e08a47c89bec6e7de17b20e377ac2b74552b510dec92df5064cdf0e67698c52766; Path=/; Secure; HTTPOnly
TS01802bdf=01eaad23891ed3a953f638ecc8646bb275a96f87968a47c89bec6e7de17b20e377ac2b7455e2e6a12eee1c66366e2a8c814debb353b82d31be844c7edb64f9a6a2134972e8; path=/; domain=.mps.it; HTTPonly; Secure
Vary: Accept-Encoding
digital.mps.it/libs/img/montedeipaschi_logo_hd.png
200 OK 11 kB URL HTTP/1.1 digital.mps.it/libs/img/montedeipaschi_logo_hd.png
IP
ASN #13018 Banca Monte Dei Paschi Di Siena S.P.A.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 241x88, components 3\012- data
Hash 234af05aa100bac0bd183b7e8bf02179
5d467e25cf91aa9e5a90c1ed6e4ba4a8c471f451
0a0c6433b58c72136375414d6f7a6a511932eeaac396f7c0991a2b953fa2eaaa
GET /libs/img/montedeipaschi_logo_hd.png HTTP/1.1
Host: digital.mps.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://alpacaranchhouse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 08:17:14 GMT
Content-Length: 10960
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1; mode=block
Accept-Ranges: bytes
Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.gstatic.com https://www.googletagmanager.com https://www.google.com https://ajax.googleapis.com https://maps.googleapis.com www.google-analytics.com https://8294890.fls.doubleclick.net https://secure.adnxs.com https://white.mynsystems.com https://blue.mynsystems.com/ https://privacy.mynsystems.com https://ib.adnxs.com https://yellow.mynsystems.com https://zna4cciryw9kzle8d-mps.siteintercept.qualtrics.com https://siteintercept.qualtrics.com https://connect.facebook.net https://zn9nahtxma7dxxjqe-mps.siteintercept.qualtrics.com https://zn5j9lftsu1lqzb1k-mps.siteintercept.qualtrics.com https://zncveh3lu3fyce1re-mps.siteintercept.qualtrics.com;
Access-Control-Allow-Headers: Content-Type
Server-Timing: dtSInfo;desc="0", dtRpid;desc="2039244780"
Etag: W/"PSA-aj-I0rwWqEAus"
Expires: Sun, 19 Feb 2023 22:45:04 GMT
Cache-Control: max-age=1952869
X-Content-Type-Options: nosniff, nosniff
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: image/jpeg
Set-Cookie: dtCookie=v_4_srv_1_sn_A0D10EA18BBDF77A3B9EEAF170B577D3_perc_100000_ol_0_mul_1_app-3A07e31ae0c92b1b0b_0; Path=/; Domain=.mps.it
TS01d2b0ab=01eaad23895dc75729a3bfe63b863b7c4b877b4747558a6f2b3d07f21f6b7c9e0b0cbc3f84b2c95ba24ad96b3d54b8c9661a7db1fb; Path=/; Secure; HTTPOnly
TS01802bdf=01eaad23892c0785ac835c1b510c7c98f812cba41c558a6f2b3d07f21f6b7c9e0b0cbc3f8497ca2182ccc14cb224ee8ed8757c06564b153c4091a9ef60e5eca85ce9827f1d; path=/; domain=.mps.it; HTTPonly; Secure
digital.mps.it/cmn/assets/icons/catalogo/info%20tooltip_UI.svg
200 OK 999 B URL HTTP/1.1 digital.mps.it/cmn/assets/icons/catalogo/info%20tooltip_UI.svg
IP
ASN #13018 Banca Monte Dei Paschi Di Siena S.P.A.
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 12c7d3bc84dcbc9bf6f4f8c0bc62a03c
9fa0f5c8c6b269a02baf4615895766e024de984c
9c9b26055379437522e81d6ad02ec43de51199f7ee3ad2fb8a7f6ab3a44efccf
GET /cmn/assets/icons/catalogo/info%20tooltip_UI.svg HTTP/1.1
Host: digital.mps.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://alpacaranchhouse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 08:17:14 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1; mode=block
Last-Modified: Tue, 22 Nov 2022 14:47:04 GMT
Accept-Ranges: bytes
Content-Length: 999
Vary: Accept-Encoding
Cache-Control: max-age=2592000
Expires: Mon, 27 Feb 2023 08:17:14 GMT
X-Content-Type-Options: nosniff
Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.gstatic.com https://www.googletagmanager.com https://www.google.com https://ajax.googleapis.com https://maps.googleapis.com www.google-analytics.com https://8294890.fls.doubleclick.net https://secure.adnxs.com https://white.mynsystems.com https://blue.mynsystems.com/ https://privacy.mynsystems.com https://ib.adnxs.com https://yellow.mynsystems.com https://zna4cciryw9kzle8d-mps.siteintercept.qualtrics.com https://siteintercept.qualtrics.com https://connect.facebook.net https://zn9nahtxma7dxxjqe-mps.siteintercept.qualtrics.com https://zn5j9lftsu1lqzb1k-mps.siteintercept.qualtrics.com https://zncveh3lu3fyce1re-mps.siteintercept.qualtrics.com;
Access-Control-Allow-Headers: Content-Type
Server-Timing: dtSInfo;desc="1"
Keep-Alive: timeout=15, max=99
Connection: Keep-Alive
Content-Type: image/svg+xml
Set-Cookie: dtCookie=v_4_srv_3_sn_2F4B620542778E7E726F37FA6697194B_perc_100000_ol_0_mul_1_app-3A07e31ae0c92b1b0b_0; Path=/; Domain=.mps.it
TS01d2b0ab=01eaad2389a834721647c4e86d5edbb4a04a422cdf3e7fd210c385093150dca65f78972e547e10a0d8a4bf34734f001bc89c62c612; Path=/; Secure; HTTPOnly
TS01802bdf=01eaad2389f653259379a99799c973e365e3009b113e7fd210c385093150dca65f78972e54af91c90c7ae0dbec7ee4939beabe6659eff2984947d4b0adf2a16d01e3dc4678; path=/; domain=.mps.it; HTTPonly; Secure
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: RWr4Ie70vCWjbALl+Eix4g==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 4MgCwgiTJN+6m7DTLk2b/sQ9Q8w=
alpacaranchhouse.com/favicon.ico
200 OK 1.2 kB URL HTTP/1.1 alpacaranchhouse.com/favicon.ico
IP
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash 756b5102ba5f5f62045174f1e0e24f2e
da960cdb4f405c110d956b286915426a2c08689f
23063090027d06c463ca3fcf7b5c19b715051dff25da99f3c0b505fa20fbfe11
Analyzer Verdict Alert openphish Monte dei Paschi Di Siena
phishtank Other
quad9 Sinkholed
GET /favicon.ico HTTP/1.1
Host: alpacaranchhouse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alpacaranchhouse.com/
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 08:17:14 GMT
Server: Apache/2.4.55 (cPanel) OpenSSL/1.1.1s mod_bwlimited/1.4 PHP/5.6.40
Last-Modified: Wed, 11 Nov 2020 05:10:12 GMT
ETag: "6382d23-47e-5b3cdcf59f500"
Accept-Ranges: bytes
Content-Length: 1150
Keep-Alive: timeout=2, max=100
Connection: Keep-Alive
Content-Type: image/x-icon
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 4f1eee6add4a8e79b4f17ef102d852c4
124d25472b38630493e37530b816450fdb8807ee
04906aedcdb0a89fcb568d7698207811383366e2a0c9f35293cb1ccd23e5053e
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Sat, 28 Jan 2023 08:17:14 GMT
Last-Modified: Sat, 28 Jan 2023 07:18:13 GMT
Server: ECS (nyb/1D12)
X-Cache: Miss from cloudfront
Via: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: GEA0MRJ1ZIWp8VUtarJGK94dAk57C4utzAQJJFRtIS6slXL_faL22Q==
Age: 3541
digital.mps.it/libs/img/loginBI/ico_carte.svg
200 OK 1.3 kB URL HTTP/1.1 digital.mps.it/libs/img/loginBI/ico_carte.svg
IP
ASN #13018 Banca Monte Dei Paschi Di Siena S.P.A.
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 6a713d495a6a62bc4cecb91676fe25f2
54818deb2f386ad9f7f8aa831391b6fc2c59464a
b989e87444353500fa31829b5814b69d053f5e5553bfff4fcb26a38f76e0f08e
GET /libs/img/loginBI/ico_carte.svg HTTP/1.1
Host: digital.mps.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://alpacaranchhouse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 08:17:15 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1; mode=block
Last-Modified: Tue, 22 Nov 2022 14:46:12 GMT
Accept-Ranges: bytes
Content-Length: 1330
Vary: Accept-Encoding
Cache-Control: max-age=2592000
Expires: Mon, 27 Feb 2023 08:17:15 GMT
X-Content-Type-Options: nosniff
Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.gstatic.com https://www.googletagmanager.com https://www.google.com https://ajax.googleapis.com https://maps.googleapis.com www.google-analytics.com https://8294890.fls.doubleclick.net https://secure.adnxs.com https://white.mynsystems.com https://blue.mynsystems.com/ https://privacy.mynsystems.com https://ib.adnxs.com https://yellow.mynsystems.com https://zna4cciryw9kzle8d-mps.siteintercept.qualtrics.com https://siteintercept.qualtrics.com https://connect.facebook.net https://zn9nahtxma7dxxjqe-mps.siteintercept.qualtrics.com https://zn5j9lftsu1lqzb1k-mps.siteintercept.qualtrics.com https://zncveh3lu3fyce1re-mps.siteintercept.qualtrics.com;
Access-Control-Allow-Headers: Content-Type
Server-Timing: dtSInfo;desc="1"
Keep-Alive: timeout=15, max=98
Connection: Keep-Alive
Content-Type: image/svg+xml
Set-Cookie: dtCookie=v_4_srv_3_sn_2953145A71F4EB601567C63B07C8E15E_perc_100000_ol_0_mul_1_app-3A07e31ae0c92b1b0b_0; Path=/; Domain=.mps.it
TS01d2b0ab=01eaad2389af1cdc8582410aa7de002f3a94b2110b4730bb0f183fc17eb967659208884ec25278b6fbf01da94c79029f5433689c50; Path=/; Secure; HTTPOnly
TS01802bdf=01eaad23890a8ad4612c2b8005af4d68ad235c7d4d4730bb0f183fc17eb967659208884ec2d7d38418076f829bf73cc3c41f734dca2030abc84018dc6606251bc30ef5164b; path=/; domain=.mps.it; HTTPonly; Secure
digital.mps.it/libs/img/loginBI/ico_informazioni.svg
200 OK 2.4 kB URL HTTP/1.1 digital.mps.it/libs/img/loginBI/ico_informazioni.svg
IP
ASN #13018 Banca Monte Dei Paschi Di Siena S.P.A.
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 671e7303796ce8cccd6f8f98f192fb1c
6680a2f5f75ddd3fbfa15f36445759ebef52b48e
0723be3bac2e41d6d7aa267af24f45a7240d74ead82a130765f83fc6fbf19723
GET /libs/img/loginBI/ico_informazioni.svg HTTP/1.1
Host: digital.mps.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://alpacaranchhouse.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 08:17:15 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1; mode=block
Last-Modified: Tue, 22 Nov 2022 14:46:12 GMT
Accept-Ranges: bytes
Content-Length: 2448
Vary: Accept-Encoding
Cache-Control: max-age=2592000
Expires: Mon, 27 Feb 2023 08:17:15 GMT
X-Content-Type-Options: nosniff
Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.gstatic.com https://www.googletagmanager.com https://www.google.com https://ajax.googleapis.com https://maps.googleapis.com www.google-analytics.com https://8294890.fls.doubleclick.net https://secure.adnxs.com https://white.mynsystems.com https://blue.mynsystems.com/ https://privacy.mynsystems.com https://ib.adnxs.com https://yellow.mynsystems.com https://zna4cciryw9kzle8d-mps.siteintercept.qualtrics.com https://siteintercept.qualtrics.com https://connect.facebook.net https://zn9nahtxma7dxxjqe-mps.siteintercept.qualtrics.com https://zn5j9lftsu1lqzb1k-mps.siteintercept.qualtrics.com https://zncveh3lu3fyce1re-mps.siteintercept.qualtrics.com;
Access-Control-Allow-Headers: Content-Type
Server-Timing: dtSInfo;desc="1"
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: image/svg+xml
Set-Cookie: dtCookie=v_4_srv_3_sn_413A0BD096857AD52C30E6B43B985BC7_perc_100000_ol_0_mul_1_app-3A07e31ae0c92b1b0b_0; Path=/; Domain=.mps.it
TS01d2b0ab=01eaad2389608902e077d5265ceb3bb02e674af843c9574b52c2506536eac7c07127e2e63999d8ff376d332e3db2ef24c0f53ee52e; Path=/; Secure; HTTPOnly
TS01802bdf=01eaad238935140a5090f19c0a6b020b136b561927c9574b52c2506536eac7c07127e2e6393c27e5ffdac23f8c75ae570283a44a407ac855c1230df12c4ca7bcbcab582c07; path=/; domain=.mps.it; HTTPonly; Secure
digital.mps.it/cmn/font/text-security-disc.woff2
200 OK 2.3 kB URL HTTP/1.1 digital.mps.it/cmn/font/text-security-disc.woff2
IP
ASN #13018 Banca Monte Dei Paschi Di Siena S.P.A.
File type Web Open Font Format (Version 2), TrueType, length 2280, version 1.0\012- data
Hash db2e9ff14caa4e15f4e39ef4e10d34b8
16a11d60fd4b69f3fe7bf7bfb09475a5967124d9
9dd630e7cbf1a068b89a5a134e248ff63f2d452081bf86684aeb4b7f73712b76
GET /cmn/font/text-security-disc.woff2 HTTP/1.1
Host: digital.mps.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://alpacaranchhouse.com
Connection: keep-alive
Referer: https://digital.mps.it/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 08:17:15 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1; mode=block
Last-Modified: Tue, 22 Nov 2022 14:46:59 GMT
Accept-Ranges: bytes
Content-Length: 2280
Cache-Control: max-age=2592000
Expires: Mon, 27 Feb 2023 08:17:15 GMT
X-Content-Type-Options: nosniff
Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.gstatic.com https://www.googletagmanager.com https://www.google.com https://ajax.googleapis.com https://maps.googleapis.com www.google-analytics.com https://8294890.fls.doubleclick.net https://secure.adnxs.com https://white.mynsystems.com https://blue.mynsystems.com/ https://privacy.mynsystems.com https://ib.adnxs.com https://yellow.mynsystems.com https://zna4cciryw9kzle8d-mps.siteintercept.qualtrics.com https://siteintercept.qualtrics.com https://connect.facebook.net https://zn9nahtxma7dxxjqe-mps.siteintercept.qualtrics.com https://zn5j9lftsu1lqzb1k-mps.siteintercept.qualtrics.com https://zncveh3lu3fyce1re-mps.siteintercept.qualtrics.com;
Access-Control-Allow-Headers: Content-Type
Timing-Allow-Origin: *
Server-Timing: dtSInfo;desc="1", dtTao;desc="1"
Keep-Alive: timeout=15, max=97
Connection: Keep-Alive
Set-Cookie: dtCookie=v_4_srv_2_sn_BA24EA2B0940C02C0A54292661E60F9D_perc_100000_ol_0_mul_1_app-3A07e31ae0c92b1b0b_0; Path=/; Domain=.mps.it
TS01d2b0ab=01eaad238902ed140f18990c311da4c750583af7012dfcb7d93a150037fe78d62014cf21eae11b36c14f3c7da6743fc65c3b911c11; Path=/; Secure; HTTPOnly
TS01802bdf=01eaad23899edada9135bc925973173d8a10951f742dfcb7d93a150037fe78d62014cf21eacdeb530beb94e2e4f8a27c86a8669af295299abb873442ba5cb82b2d7c4ccab2; path=/; domain=.mps.it; HTTPonly; Secure
Vary: Accept-Encoding
bootstrap.smartsuppchat.com/widget/76c55fb536a8a3965c8cd8c28546bd2c38f6704f.json
200 OK 5.1 kB URL HTTP/2 bootstrap.smartsuppchat.com/widget/76c55fb536a8a3965c8cd8c28546bd2c38f6704f.json
IP
File type JSON data\012- , ASCII text, with very long lines (1155), with no line terminators
Hash 80d9481e3831e962a7ff1b45a2e6a1cc
39ba502c5cd9d22ba1f8a3f8c37cdd54c9722fc9
e4b1686449dd79b10ea7987147b15c006d044c0f4b71d862481556d17b816a66
GET /widget/76c55fb536a8a3965c8cd8c28546bd2c38f6704f.json HTTP/1.1
Host: bootstrap.smartsuppchat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: http://alpacaranchhouse.com
Connection: keep-alive
Referer: http://alpacaranchhouse.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 28 Jan 2023 08:17:14 GMT
content-type: application/json; charset=utf-8
x-version: 53ea911f61896be6992922257e82b4783f6cf210
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: private, max-age=0, must-revalidate
x-hit: redis
etag: "483-ssa2tOamPh0rVtXsaUJ2RJEk0BU"
content-encoding: br
X-Firefox-Spdy: h2
digital.mps.it/cmn/font/text-security-disc.ttf
200 OK 12 kB URL HTTP/1.1 digital.mps.it/cmn/font/text-security-disc.ttf
IP
ASN #13018 Banca Monte Dei Paschi Di Siena S.P.A.
File type TrueType Font data, 11 tables, 1st "GSUB", 16 names, Macintosh, type 1 string, text-security-discRegulartext-security-disctext-security-discVersion 1.0text-security-discGenera\012- data
Hash 7c83ea2ac4879abaee1d9e85d996b00c
f2edb568b2b37d9fa0d694ba2776e88441c2aac2
45db43564f0403a0df50caa810df6e9ee61dca5127cb3682f27d37b4f595f25a
GET /cmn/font/text-security-disc.ttf HTTP/1.1
Host: digital.mps.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://alpacaranchhouse.com
Connection: keep-alive
Referer: https://digital.mps.it/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 08:17:15 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1; mode=block
Last-Modified: Tue, 22 Nov 2022 14:46:59 GMT
Accept-Ranges: bytes
Content-Length: 12392
Cache-Control: max-age=2592000
Expires: Mon, 27 Feb 2023 08:17:15 GMT
X-Content-Type-Options: nosniff
Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.gstatic.com https://www.googletagmanager.com https://www.google.com https://ajax.googleapis.com https://maps.googleapis.com www.google-analytics.com https://8294890.fls.doubleclick.net https://secure.adnxs.com https://white.mynsystems.com https://blue.mynsystems.com/ https://privacy.mynsystems.com https://ib.adnxs.com https://yellow.mynsystems.com https://zna4cciryw9kzle8d-mps.siteintercept.qualtrics.com https://siteintercept.qualtrics.com https://connect.facebook.net https://zn9nahtxma7dxxjqe-mps.siteintercept.qualtrics.com https://zn5j9lftsu1lqzb1k-mps.siteintercept.qualtrics.com https://zncveh3lu3fyce1re-mps.siteintercept.qualtrics.com;
Access-Control-Allow-Headers: Content-Type
Timing-Allow-Origin: *
Server-Timing: dtSInfo;desc="1", dtTao;desc="1"
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: application/font-sfnt
Set-Cookie: dtCookie=v_4_srv_3_sn_DEE20B1B5E11AF3B2F87F9B97CABAA16_perc_100000_ol_0_mul_1_app-3A07e31ae0c92b1b0b_0; Path=/; Domain=.mps.it
TS01d2b0ab=01eaad23891af5cbb61f54b991f79e0442280d4da7e144b4e08d1e03507bb01f697f18b5d0ec28634f85a2ff2e81b22dbc92318746; Path=/; Secure; HTTPOnly
TS01802bdf=01eaad23898381ad1b1443276bdfad8e40ecc7e7eee144b4e08d1e03507bb01f697f18b5d0c4eeb72f2e4dbd15e0e2482261308b87534f8e50b744387739535f0079487fa0; path=/; domain=.mps.it; HTTPonly; Secure
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash dcde2339c621aa49933e3e19ddb9ba88
635ad9677b50022d0f63236a0c26039be5073279
e743ee293fad78b4dbc698d8b828a752fda4906aef823ff29711ac256ace9be4
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=104475
Date: Sat, 28 Jan 2023 08:17:15 GMT
Etag: "63d3ba20-1d7"
Expires: Sun, 29 Jan 2023 13:18:30 GMT
Last-Modified: Fri, 27 Jan 2023 11:48:48 GMT
Server: ECS (nyb/1D28)
X-Cache: Miss from cloudfront
Via: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: MUzAWEQIWaIPOhFvRF_4ymB04UK3EyXFws95eChVq3aHzi2n6O889Q==
Age: 5382
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2e21811f62c077f45a93d7c3b543998d
3e890a73bb51d9dd1021d5339271aa40833ba258
c6b77371a50390fd68d44ff05e080f064c16c3095df8856b330ab0c6685cd3d1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C6B77371A50390FD68D44FF05E080F064C16C3095DF8856B330AB0C6685CD3D1"
Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8699
Expires: Sat, 28 Jan 2023 10:42:14 GMT
Date: Sat, 28 Jan 2023 08:17:15 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2e21811f62c077f45a93d7c3b543998d
3e890a73bb51d9dd1021d5339271aa40833ba258
c6b77371a50390fd68d44ff05e080f064c16c3095df8856b330ab0c6685cd3d1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C6B77371A50390FD68D44FF05E080F064C16C3095DF8856B330AB0C6685CD3D1"
Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8699
Expires: Sat, 28 Jan 2023 10:42:14 GMT
Date: Sat, 28 Jan 2023 08:17:15 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2e21811f62c077f45a93d7c3b543998d
3e890a73bb51d9dd1021d5339271aa40833ba258
c6b77371a50390fd68d44ff05e080f064c16c3095df8856b330ab0c6685cd3d1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C6B77371A50390FD68D44FF05E080F064C16C3095DF8856B330AB0C6685CD3D1"
Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8699
Expires: Sat, 28 Jan 2023 10:42:14 GMT
Date: Sat, 28 Jan 2023 08:17:15 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F22cc3f55-9811-4ec2-a57e-a3e71a3f0554.jpeg
200 OK 7.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F22cc3f55-9811-4ec2-a57e-a3e71a3f0554.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ea24bcba583bd8bd139559448a343e68
b9d37c2b14f890d41983a59f352e8f7caa9c94bb
e5ef5975eec964ae1684deb424f00833f2d217bdc7e6c385320ed3adeb6bc1c4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F22cc3f55-9811-4ec2-a57e-a3e71a3f0554.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7585
x-amzn-requestid: bfb52acb-e0d7-482d-8be9-be5db1c16cac
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fa_vkE5roAMF0Hw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d44663-2d38d314177e0ac40d4c8240;Sampled=0
x-amzn-remapped-date: Fri, 27 Jan 2023 21:47:15 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 1WE1zQwrCGVy8HLT9_BFkAr6rQE_ROyttMOByR32KeT0w2Hd_ylvYQ==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google
date: Fri, 27 Jan 2023 22:16:00 GMT
age: 36075
etag: "b9d37c2b14f890d41983a59f352e8f7caa9c94bb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdfb887e5-87fa-4855-b0ee-712d39779fa0.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdfb887e5-87fa-4855-b0ee-712d39779fa0.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b7a0759c043594fbe85af422b59b8227
a05cfaad16078f42218dae233da38f6f5dff8487
e898d6ef1b3998fb9322a8fc190069ec5f7b3582bfe8397a2367497d84a27549
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdfb887e5-87fa-4855-b0ee-712d39779fa0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11568
x-amzn-requestid: 2e85f75e-ab9d-4d45-adad-7313950a9647
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fSWbxGwnoAMFejw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d0d117-68f1a9e71a07a0453311fd32;Sampled=0
x-amzn-remapped-date: Wed, 25 Jan 2023 06:49:59 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: dbz3wXGNaetf6xvRE98rshyHy-FVfDo8co-4VDL0a4Qe3E4U8A82Og==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 2bedbeaa49b4a77447d30097858cb81a.cloudfront.net (CloudFront), 1.1 google
date: Fri, 27 Jan 2023 18:36:01 GMT
age: 49274
etag: "a05cfaad16078f42218dae233da38f6f5dff8487"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F33ce0741-fcf6-4205-8b3a-016953553eaf.jpeg
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F33ce0741-fcf6-4205-8b3a-016953553eaf.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 195316042e7f798eeeb7993fecb3a383
4aeca24ad4702f87feaf9674ea0c1ff6d71826a3
b7e0a61060455241fce844d2c91eca500d409804361063ddb61053cbc9c7b1c1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F33ce0741-fcf6-4205-8b3a-016953553eaf.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13376
x-amzn-requestid: 64d0092e-1f1a-4183-a4a6-805e0bf37d32
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fa-DvHIyoAMF6fA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d443b1-6387770232ddca74531bce91;Sampled=0
x-amzn-remapped-date: Fri, 27 Jan 2023 21:35:45 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Jqb6G21QeTDiI0HWT9Fd87D-HkAOiesyfN9vr7vMxrOUADBxV-_Fug==
via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 324a68a6c25ee50d774953f3e15a611c.cloudfront.net (CloudFront), 1.1 google
date: Fri, 27 Jan 2023 21:55:42 GMT
age: 37293
etag: "4aeca24ad4702f87feaf9674ea0c1ff6d71826a3"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5f0097a6-af00-4a1c-8faa-f9516e27b31a.jpeg
200 OK 4.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5f0097a6-af00-4a1c-8faa-f9516e27b31a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4205d8106659e00fff1cbe9262918b8c
ab4f6528594a1725934727dc7d834c028a79c609
31f1a28602a194bd0856495d4d81d5c72cd7ff4e5bad6bdd1a31ec3041f4a2cc
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5f0097a6-af00-4a1c-8faa-f9516e27b31a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4475
x-amzn-requestid: b7b272d6-3089-4f33-89b5-5cb388640e10
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fa_e6HsaIAMF5Lg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d445f8-1789f7f4264270916da323db;Sampled=0
x-amzn-remapped-date: Fri, 27 Jan 2023 21:45:28 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: hAzO-IMqc1CFpiBAlRl8seIYL9UonyrBMATibovyFq5kEuaweY_VyA==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 112d82578d402a38d8d02e8b857617e0.cloudfront.net (CloudFront), 1.1 google
date: Fri, 27 Jan 2023 21:56:46 GMT
age: 37229
etag: "ab4f6528594a1725934727dc7d834c028a79c609"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F238effff-cb43-479f-8853-06086fff1bd5.jpeg
200 OK 9.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F238effff-cb43-479f-8853-06086fff1bd5.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f185f0b4f90d06dbb397b44ed9c73dbe
a48e2c369a048447e0e25e4791eb603859391c1c
b466060fc132cc8d23fcb83001206606e2d5502118c65e9f55795b5adbff2fa6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F238effff-cb43-479f-8853-06086fff1bd5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9364
x-amzn-requestid: e556be7b-567a-4c9a-931e-ff6fee42d3a7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fa_T8GbFoAMFySg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d445b2-6f4476e9388c77a057153277;Sampled=0
x-amzn-remapped-date: Fri, 27 Jan 2023 21:44:18 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: LPkLrx7l9Qf_GKdtJq_77RUkvgnKZlCaDN34xsB5bEO8c9VQEJPAew==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 6172bb1a5d00a3b06ae3700570ebe116.cloudfront.net (CloudFront), 1.1 google
date: Fri, 27 Jan 2023 21:56:38 GMT
age: 37237
etag: "a48e2c369a048447e0e25e4791eb603859391c1c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1ed7c466-ac98-4e05-89cf-f0abf56e8d98.jpeg
200 OK 5.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1ed7c466-ac98-4e05-89cf-f0abf56e8d98.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c982569d070f24dba1259603091c22e3
0f93acb5bee53670cc4ef486922f7333d96a2f4e
9a5a2d8a181a763ee6f60c27b396a0e3d7b1527e5177b2aff8d511db250753ed
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1ed7c466-ac98-4e05-89cf-f0abf56e8d98.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4975
x-amzn-requestid: 633350b7-4686-40d5-8c9d-3c097f8e2d34
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fa-EBGuaoAMFbSw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d443b3-4201212c1a0eb2a65d3f494c;Sampled=0
x-amzn-remapped-date: Fri, 27 Jan 2023 21:35:47 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: XRAeWdoEkbnzXKOs_EdgQ1r9BGOeDNh4FRXm-fv0KiCz4juqk8UKIw==
via: 1.1 010c0731b9775a983eceaec0f5fa6a2e.cloudfront.net (CloudFront), 1.1 ee8246c5442dace7525c74f6a799bb46.cloudfront.net (CloudFront), 1.1 google
date: Fri, 27 Jan 2023 21:59:35 GMT
age: 37060
etag: "0f93acb5bee53670cc4ef486922f7333d96a2f4e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
websocket-visitors.smartsupp.com/socket/?EIO=3&transport=websocket
101 Switching Protocols 0 B URL HTTP/1.1 websocket-visitors.smartsupp.com/socket/?EIO=3&transport=websocket
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /socket/?EIO=3&transport=websocket HTTP/1.1
Host: websocket-visitors.smartsupp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: http://alpacaranchhouse.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: qfz6rpcEgs65kmrwWruRcw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Date: Sat, 28 Jan 2023 08:17:16 GMT
Connection: upgrade
Upgrade: websocket
Sec-WebSocket-Accept: XuegaUY/L5JX6aWEuMy7G+a+oCQ=
Sec-WebSocket-Version: 13
WebSocket-Server: uWebSockets
www.smartsuppchat.com/loader.js?
200 OK 0 B URL HTTP/2 www.smartsuppchat.com/loader.js?
IP
ASN #60068 Datacamp Limited
GET /loader.js? HTTP/1.1
Host: www.smartsuppchat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://alpacaranchhouse.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 28 Jan 2023 08:17:14 GMT
content-type: application/javascript
last-modified: Wed, 28 Dec 2022 13:18:33 GMT
etag: W/"63ac4229-4b9b"
expires: Wed, 28 Dec 2022 13:26:03 GMT
cache-control: max-age=300, public, s-maxage=60
x-accel-expires: @1674893880
server: CDN77-Turbo
x-77-nzt: AblMCQ1LIYb/DgAAAA
x-77-nzt-ray: c0a4cc28474287670adad463eb3b3a03
x-cache: HIT
x-age: 14
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
translations.smartsuppcdn.com/api/v1/widget/translations/lang/it/defaults
200 OK 0 B URL HTTP/2 translations.smartsuppcdn.com/api/v1/widget/translations/lang/it/defaults
IP
ASN #60068 Datacamp Limited
GET /api/v1/widget/translations/lang/it/defaults HTTP/1.1
Host: translations.smartsuppcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://alpacaranchhouse.com/
Origin: http://alpacaranchhouse.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 28 Jan 2023 08:17:15 GMT
content-type: application/json; charset=utf-8
x-version: 78e493457cacc39802378b86cc0dd22811aade7e
vary: Origin
access-control-allow-origin: *
cache-control: max-age=600
x-response-time: 0ms
x-accel-expires: @1674893845
server: CDN77-Turbo
x-77-nzt: AblMCRT1upz/TgIAAA
x-77-nzt-ray: af585630311ae3e50bdad4634916ea0e
x-cache: HIT
x-age: 590
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
widget-v2.smartsuppcdn.com/static/js/main.a3c0c1de.chunk.js
200 OK 0 B URL HTTP/2 widget-v2.smartsuppcdn.com/static/js/main.a3c0c1de.chunk.js
IP
ASN #60068 Datacamp Limited
GET /static/js/main.a3c0c1de.chunk.js HTTP/1.1
Host: widget-v2.smartsuppcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 28 Jan 2023 08:17:15 GMT
content-type: application/javascript
last-modified: Tue, 17 Jan 2023 07:36:57 GMT
etag: W/"63c65019-1cc88"
expires: Wed, 17 Jan 2024 09:19:35 GMT
cache-control: max-age=31536000, public, immutable
access-control-allow-origin: *
x-accel-expires: @1705483175
server: CDN77-Turbo
x-77-nzt: AblMCQ2aaUr/5HEOAA
x-77-nzt-ray: c0a4cc28c74af5720bdad463b5704301
x-cache: HIT
x-age: 946660
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
widget-v2.smartsuppcdn.com/static/js/6.84dd967b.chunk.js
200 OK 0 B URL HTTP/2 widget-v2.smartsuppcdn.com/static/js/6.84dd967b.chunk.js
IP
ASN #60068 Datacamp Limited
GET /static/js/6.84dd967b.chunk.js HTTP/1.1
Host: widget-v2.smartsuppcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 28 Jan 2023 08:17:15 GMT
content-type: application/javascript
last-modified: Tue, 17 Jan 2023 07:36:57 GMT
etag: W/"63c65019-8312d"
expires: Wed, 17 Jan 2024 09:18:34 GMT
cache-control: max-age=31536000, public, immutable
access-control-allow-origin: *
x-accel-expires: @1705483114
server: CDN77-Turbo
x-77-nzt: AblMCQ0uatj/IXIOAA
x-77-nzt-ray: c0a4cc28c74af5720bdad463df326e01
x-cache: HIT
x-age: 946721
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
192.252.216.194
104.18.32.68
185.76.9.23
81.26.193.203
18.197.28.138
23.33.119.27