504 B IP
ASN #20940 Akamai International B.V.
Hash aadf4023fd478bb51576a5f2358b225e
a9d7b5d1e6a9d4f3fd800815a784607563dae142
cc1e53796ec8c93a6a4cf66399a32249a405bd6ec1bd7399d5926c11657868a9
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "CC1E53796EC8C93A6A4CF66399A32249A405BD6EC1BD7399D5926C11657868A9"
Last-Modified: Sat, 03 Aug 2024 18:56:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11936
Expires: Mon, 05 Aug 2024 17:45:41 GMT
Date: Mon, 05 Aug 2024 14:26:45 GMT
Connection: keep-alive
504 B IP
ASN #20940 Akamai International B.V.
Hash 084406a853d82fa208410ee4bc78b67c
1c6276ec2e9a0fa10937dc34d821a64633c7d16a
6d567507b5502a9e553e77b519b679e83b3a8a01896731cec08bd1da0699b379
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "6D567507B5502A9E553E77B519B679E83B3A8A01896731CEC08BD1DA0699B379"
Last-Modified: Sat, 03 Aug 2024 18:27:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11667
Expires: Mon, 05 Aug 2024 17:41:12 GMT
Date: Mon, 05 Aug 2024 14:26:45 GMT
Connection: keep-alive
504 B IP
ASN #20940 Akamai International B.V.
Hash 8bd7201be8d12c4b511d2c5643b45dbc
f2ecb2ebafbf4f8d92f92007753001befcedc634
25cb2e6ad29d4503f32121fbe37e2b0f4ce64a7f6cb57233ebf16df5d6b78d53
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "25CB2E6AD29D4503F32121FBE37E2B0F4CE64A7F6CB57233EBF16DF5D6B78D53"
Last-Modified: Sat, 03 Aug 2024 18:58:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13152
Expires: Mon, 05 Aug 2024 18:05:57 GMT
Date: Mon, 05 Aug 2024 14:26:45 GMT
Connection: keep-alive
504 B IP
ASN #20940 Akamai International B.V.
Hash 71b019447c9eba62e5b3832380ade6ca
b17d8edb7d3dfce491e5a755e039bdd053785bca
995bc9a324d9b737b723bdbe0ab3c624d8975a9894e8fcd4582f4e6acb147302
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "995BC9A324D9B737B723BDBE0AB3C624D8975A9894E8FCD4582F4E6ACB147302"
Last-Modified: Sat, 03 Aug 2024 19:27:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=1998
Expires: Mon, 05 Aug 2024 15:00:03 GMT
Date: Mon, 05 Aug 2024 14:26:45 GMT
Connection: keep-alive
0 B URL everydaysi.com/r/v2?d=https://web.axerve.com/payment-page/a/4317a7473f2e46d292be0925e5e7e637/b/152fd58aa54773a8dac7ed8b9af456c9ff663d3f85cd0f5950ac0f41a6dc4b2a9f4ea87f-35cd-4618-ac9f-7f6da26c49ffQ59aYEzf30OiTKRWTZ38dMoZbTPxoYdjBQcVwHh9vcFFoZsgAHOdhumjBkgxG90IYJ0CbSEF4io6b8ldwzGMD6kXeM1eO5CCGycIILvASPbRdy2YAHNFt27ZKf2VT0seMvxXgyTqNiJPstkKrdM35VB3F5Sk?e=s&token=42X931020Y573841R&PayerID=2RLPZHBPWNGYW&s1=161-1-4&s2=&u=b5f838762a5c97e5cefe851004b32dba
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /r/v2?d=https://web.axerve.com/payment-page/a/4317a7473f2e46d292be0925e5e7e637/b/152fd58aa54773a8dac7ed8b9af456c9ff663d3f85cd0f5950ac0f41a6dc4b2a9f4ea87f-35cd-4618-ac9f-7f6da26c49ffQ59aYEzf30OiTKRWTZ38dMoZbTPxoYdjBQcVwHh9vcFFoZsgAHOdhumjBkgxG90IYJ0CbSEF4io6b8ldwzGMD6kXeM1eO5CCGycIILvASPbRdy2YAHNFt27ZKf2VT0seMvxXgyTqNiJPstkKrdM35VB3F5Sk?e=s&token=42X931020Y573841R&PayerID=2RLPZHBPWNGYW&s1=161-1-4&s2=&u=b5f838762a5c97e5cefe851004b32dba HTTP/1.1
Host: everydaysi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Date: Mon, 05 Aug 2024 14:26:45 GMT
Server: Apache/2.4.37 (CentOS Stream) OpenSSL/1.1.1k
Referrer-Policy: no-referrer
Location: https://web.axerve.com/payment-page/a/4317a7473f2e46d292be0925e5e7e637/b/152fd58aa54773a8dac7ed8b9af456c9ff663d3f85cd0f5950ac0f41a6dc4b2a9f4ea87f-35cd-4618-ac9f-7f6da26c49ffQ59aYEzf30OiTKRWTZ38dMoZbTPxoYdjBQcVwHh9vcFFoZsgAHOdhumjBkgxG90IYJ0CbSEF4io6b8ldwzGMD6kXeM1eO5CCGycIILvASPbRdy2YAHNFt27ZKf2VT0seMvxXgyTqNiJPstkKrdM35VB3F5Sk?e=s
Content-Length: 0
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
504 B IP
ASN #20940 Akamai International B.V.
Hash 4aab8b9db0f379b02d66f4ce6df210bf
0ed3615dac0685fd4523238922cd048516d3b433
a6819092c4abb65d46bea25a3ea4f57dea4a46b2173eb92aa3f6a50f2f6aa840
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "A6819092C4ABB65D46BEA25A3EA4F57DEA4A46B2173EB92AA3F6A50F2F6AA840"
Last-Modified: Sat, 03 Aug 2024 18:57:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5456
Expires: Mon, 05 Aug 2024 15:57:41 GMT
Date: Mon, 05 Aug 2024 14:26:45 GMT
Connection: keep-alive
2.5 kB URL web.axerve.com/payment-page/a/4317a7473f2e46d292be0925e5e7e637/b/152fd58aa54773a8dac7ed8b9af456c9ff663d3f85cd0f5950ac0f41a6dc4b2a9f4ea87f-35cd-4618-ac9f-7f6da26c49ffQ59aYEzf30OiTKRWTZ38dMoZbTPxoYdjBQcVwHh9vcFFoZsgAHOdhumjBkgxG90IYJ0CbSEF4io6b8ldwzGMD6kXeM1eO5CCGycIILvASPbRdy2YAHNFt27ZKf2VT0seMvxXgyTqNiJPstkKrdM35VB3F5Sk?e=s
IP
ASN #21451 Banca Sella Holding S.p.A.
File type HTML document, ASCII text
Hash 93ebe607d189b400f238d117e6fe00db
c52463e8572209369c3442da49d49003981fe09b
59d9f13a16fc3d724d0297aa079e1bd5c1a7664fb9a2d924c61513895c065572
GET /payment-page/a/4317a7473f2e46d292be0925e5e7e637/b/152fd58aa54773a8dac7ed8b9af456c9ff663d3f85cd0f5950ac0f41a6dc4b2a9f4ea87f-35cd-4618-ac9f-7f6da26c49ffQ59aYEzf30OiTKRWTZ38dMoZbTPxoYdjBQcVwHh9vcFFoZsgAHOdhumjBkgxG90IYJ0CbSEF4io6b8ldwzGMD6kXeM1eO5CCGycIILvASPbRdy2YAHNFt27ZKf2VT0seMvxXgyTqNiJPstkKrdM35VB3F5Sk?e=s HTTP/1.1
Host: web.axerve.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Date: Mon, 05 Aug 2024 14:26:45 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
reporting-endpoints: csp-report="https://web.axerve.com/payment-page/api/csp-report"
content-security-policy: upgrade-insecure-requests; object-src 'none'; base-uri 'self'; default-src 'self'; script-src 'self' 'nonce-011d6134-6ba7-4a13-8099-477cfb61b4cd' 'strict-dynamic' 'unsafe-inline' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com fonts.gstatic.com *.cdn-apple.com; font-src 'self' fonts.googleapis.com fonts.gstatic.com *.cdn-apple.com; child-src 'self' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com; img-src 'self' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com *.gstatic.com; connect-src 'self' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com; report-to csp-report
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
accept-ranges: bytes
etag: W/"2396-1721370704000"
last-modified: Fri, 19 Jul 2024 06:31:44 GMT
content-type: text/html;charset=UTF-8
content-length: 2536
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
472 B IP
Hash 577d66d28f849b68ec73ff9bc07b794d
fc2ea9adfa38e9451679173b4af4d878f47a671f
8466169b3bbfe3c2dece8ebf4739b5c2f88e920ed6c252e1c26c29c25c83add2
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Aug 2024 14:26:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
472 B IP
Hash 577d66d28f849b68ec73ff9bc07b794d
fc2ea9adfa38e9451679173b4af4d878f47a671f
8466169b3bbfe3c2dece8ebf4739b5c2f88e920ed6c252e1c26c29c25c83add2
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Aug 2024 14:26:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
472 B IP
Hash 577d66d28f849b68ec73ff9bc07b794d
fc2ea9adfa38e9451679173b4af4d878f47a671f
8466169b3bbfe3c2dece8ebf4739b5c2f88e920ed6c252e1c26c29c25c83add2
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Aug 2024 14:26:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
35 kB URL web.axerve.com/payment-page/polyfills-6KKHS2JQ.js
IP
ASN #21451 Banca Sella Holding S.p.A.
File type JavaScript source, ASCII text, with very long lines (29455)
Hash 42b5100980af9c68e15d60739bb3275d
06a31de63e386f89c7a4376dcbc9c1aebedf2d8b
73e38502c2d9509c1c4d2079e5bc29dfd5b9cc1f2cefbadea247bf23b2ef6572
GET /payment-page/polyfills-6KKHS2JQ.js HTTP/1.1
Host: web.axerve.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://web.axerve.com/payment-page/a/4317a7473f2e46d292be0925e5e7e637/b/152fd58aa54773a8dac7ed8b9af456c9ff663d3f85cd0f5950ac0f41a6dc4b2a9f4ea87f-35cd-4618-ac9f-7f6da26c49ffQ59aYEzf30OiTKRWTZ38dMoZbTPxoYdjBQcVwHh9vcFFoZsgAHOdhumjBkgxG90IYJ0CbSEF4io6b8ldwzGMD6kXeM1eO5CCGycIILvASPbRdy2YAHNFt27ZKf2VT0seMvxXgyTqNiJPstkKrdM35VB3F5Sk?e=s
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Date: Mon, 05 Aug 2024 14:26:46 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
reporting-endpoints: csp-report="https://web.axerve.com/payment-page/api/csp-report"
content-security-policy: upgrade-insecure-requests; object-src 'none'; base-uri 'self'; default-src 'self'; script-src 'self' 'nonce-291648d9-b2a1-487a-bebf-fdd8880a28d0' 'strict-dynamic' 'unsafe-inline' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com fonts.gstatic.com *.cdn-apple.com; font-src 'self' fonts.googleapis.com fonts.gstatic.com *.cdn-apple.com; child-src 'self' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com; img-src 'self' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com *.gstatic.com; connect-src 'self' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com; report-to csp-report
accept-ranges: bytes
etag: W/"34703-1721370704000"
last-modified: Fri, 19 Jul 2024 06:31:44 GMT
content-type: application/javascript;charset=UTF-8
content-length: 34703
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
96 kB URL web.axerve.com/payment-page/main-FSZCUDWR.js
IP
ASN #21451 Banca Sella Holding S.p.A.
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Hash eba0b36b0d87490041510be5f534866c
6c59049eefc2efaa8aeafc013d67c27697d1ff79
a39ec0fd8242e2ccb54c85a59b6942e0bc6ef9bdeadff2d92b8f4a296635058b
GET /payment-page/main-FSZCUDWR.js HTTP/1.1
Host: web.axerve.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://web.axerve.com/payment-page/a/4317a7473f2e46d292be0925e5e7e637/b/152fd58aa54773a8dac7ed8b9af456c9ff663d3f85cd0f5950ac0f41a6dc4b2a9f4ea87f-35cd-4618-ac9f-7f6da26c49ffQ59aYEzf30OiTKRWTZ38dMoZbTPxoYdjBQcVwHh9vcFFoZsgAHOdhumjBkgxG90IYJ0CbSEF4io6b8ldwzGMD6kXeM1eO5CCGycIILvASPbRdy2YAHNFt27ZKf2VT0seMvxXgyTqNiJPstkKrdM35VB3F5Sk?e=s
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Date: Mon, 05 Aug 2024 14:26:46 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
reporting-endpoints: csp-report="https://web.axerve.com/payment-page/api/csp-report"
content-security-policy: upgrade-insecure-requests; object-src 'none'; base-uri 'self'; default-src 'self'; script-src 'self' 'nonce-55f2a57b-e0e6-4b4c-afb7-47b42bd51ecb' 'strict-dynamic' 'unsafe-inline' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com fonts.gstatic.com *.cdn-apple.com; font-src 'self' fonts.googleapis.com fonts.gstatic.com *.cdn-apple.com; child-src 'self' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com; img-src 'self' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com *.gstatic.com; connect-src 'self' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com; report-to csp-report
accept-ranges: bytes
etag: W/"96248-1721370704000"
last-modified: Fri, 19 Jul 2024 06:31:44 GMT
content-type: application/javascript;charset=UTF-8
content-length: 96248
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
591 B URL web.axerve.com/payment-page/chunk-JVJGXW6V.js
IP
ASN #21451 Banca Sella Holding S.p.A.
File type Java source, ASCII text, with very long lines (590)
Hash fd00889a91f5a4cff757cfc7d3d787ee
ac728539bc36f3cee1a7a27e41f181c8a1c931e5
5051498ceb9a218966fab6621c3cb64bdf76529c2f066c5228c00f387a66dd60
GET /payment-page/chunk-JVJGXW6V.js HTTP/1.1
Host: web.axerve.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://web.axerve.com/payment-page/main-FSZCUDWR.js
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Date: Mon, 05 Aug 2024 14:26:46 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
reporting-endpoints: csp-report="https://web.axerve.com/payment-page/api/csp-report"
content-security-policy: upgrade-insecure-requests; object-src 'none'; base-uri 'self'; default-src 'self'; script-src 'self' 'nonce-30580ee8-6d59-474a-8056-7425ed05e5d3' 'strict-dynamic' 'unsafe-inline' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com fonts.gstatic.com *.cdn-apple.com; font-src 'self' fonts.googleapis.com fonts.gstatic.com *.cdn-apple.com; child-src 'self' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com; img-src 'self' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com *.gstatic.com; connect-src 'self' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com; report-to csp-report
accept-ranges: bytes
etag: W/"591-1721370704000"
last-modified: Fri, 19 Jul 2024 06:31:44 GMT
content-type: application/javascript;charset=UTF-8
content-length: 591
Keep-Alive: timeout=15, max=99
Connection: Keep-Alive
2.2 kB URL web.axerve.com/payment-page/chunk-4EOFCR6K.js
IP
ASN #21451 Banca Sella Holding S.p.A.
File type Java source, ASCII text, with very long lines (2226)
Hash 9d0d44c402e983d8adbc9fe0ec28f563
3bf9f75a5ccb8e4ded2bdc16d4a6e8d22c99c6bb
6921f70aa3dd1574a18a15bd84a29439d4bde6fc64e91298b07df12ee6e9b657
GET /payment-page/chunk-4EOFCR6K.js HTTP/1.1
Host: web.axerve.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://web.axerve.com/payment-page/main-FSZCUDWR.js
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Date: Mon, 05 Aug 2024 14:26:46 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
reporting-endpoints: csp-report="https://web.axerve.com/payment-page/api/csp-report"
content-security-policy: upgrade-insecure-requests; object-src 'none'; base-uri 'self'; default-src 'self'; script-src 'self' 'nonce-c779bb54-3d76-426e-95a1-a93aa602c32d' 'strict-dynamic' 'unsafe-inline' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com fonts.gstatic.com *.cdn-apple.com; font-src 'self' fonts.googleapis.com fonts.gstatic.com *.cdn-apple.com; child-src 'self' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com; img-src 'self' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com *.gstatic.com; connect-src 'self' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com; report-to csp-report
accept-ranges: bytes
etag: W/"2227-1721370704000"
last-modified: Fri, 19 Jul 2024 06:31:44 GMT
content-type: application/javascript;charset=UTF-8
content-length: 2227
Keep-Alive: timeout=15, max=99
Connection: Keep-Alive
1.7 kB URL web.axerve.com/payment-page/chunk-KTMRKMJA.js
IP
ASN #21451 Banca Sella Holding S.p.A.
File type Java source, ASCII text, with very long lines (1717)
Hash 038c2283eb32ccd8f3bd7142423be001
e20b4a003cfb3b8347bda4150be3039a507877a8
9c9172ca7ce25bd713a275658022e461ea05e8bd755b0a1d1c66dfea45298b54
GET /payment-page/chunk-KTMRKMJA.js HTTP/1.1
Host: web.axerve.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://web.axerve.com/payment-page/main-FSZCUDWR.js
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Date: Mon, 05 Aug 2024 14:26:46 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
reporting-endpoints: csp-report="https://web.axerve.com/payment-page/api/csp-report"
content-security-policy: upgrade-insecure-requests; object-src 'none'; base-uri 'self'; default-src 'self'; script-src 'self' 'nonce-9585bdb7-0ebb-4324-be2a-5f93ae00087a' 'strict-dynamic' 'unsafe-inline' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com fonts.gstatic.com *.cdn-apple.com; font-src 'self' fonts.googleapis.com fonts.gstatic.com *.cdn-apple.com; child-src 'self' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com; img-src 'self' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com *.gstatic.com; connect-src 'self' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com; report-to csp-report
accept-ranges: bytes
etag: W/"1718-1721370704000"
last-modified: Fri, 19 Jul 2024 06:31:44 GMT
content-type: application/javascript;charset=UTF-8
content-length: 1718
Keep-Alive: timeout=15, max=98
Connection: Keep-Alive
607 kB URL web.axerve.com/payment-page/styles-FIGGIBFG.css
IP
ASN #21451 Banca Sella Holding S.p.A.
File type ASCII text, with very long lines (65536), with no line terminators
Size 607 kB (607432 bytes)
Hash c93670cbf6c25addd8607f89a9bd1e48
8a0ad2a0eed037d98d8f2305b6564a85f817ff71
7f34eaf3c7bfd51e6ad2514c960c60d5ab95028d231b75ca86841a65736c9baa
GET /payment-page/styles-FIGGIBFG.css HTTP/1.1
Host: web.axerve.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://web.axerve.com/payment-page/a/4317a7473f2e46d292be0925e5e7e637/b/152fd58aa54773a8dac7ed8b9af456c9ff663d3f85cd0f5950ac0f41a6dc4b2a9f4ea87f-35cd-4618-ac9f-7f6da26c49ffQ59aYEzf30OiTKRWTZ38dMoZbTPxoYdjBQcVwHh9vcFFoZsgAHOdhumjBkgxG90IYJ0CbSEF4io6b8ldwzGMD6kXeM1eO5CCGycIILvASPbRdy2YAHNFt27ZKf2VT0seMvxXgyTqNiJPstkKrdM35VB3F5Sk?e=s
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Date: Mon, 05 Aug 2024 14:26:46 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
reporting-endpoints: csp-report="https://web.axerve.com/payment-page/api/csp-report"
content-security-policy: upgrade-insecure-requests; object-src 'none'; base-uri 'self'; default-src 'self'; script-src 'self' 'nonce-23407a47-5789-4e4c-8ceb-4e120c0b27d6' 'strict-dynamic' 'unsafe-inline' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com fonts.gstatic.com *.cdn-apple.com; font-src 'self' fonts.googleapis.com fonts.gstatic.com *.cdn-apple.com; child-src 'self' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com; img-src 'self' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com *.gstatic.com; connect-src 'self' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com; report-to csp-report
accept-ranges: bytes
etag: W/"607432-1721370704000"
last-modified: Fri, 19 Jul 2024 06:31:44 GMT
content-type: text/css;charset=UTF-8
content-length: 607432
Keep-Alive: timeout=15, max=99
Connection: Keep-Alive
504 B IP
ASN #20940 Akamai International B.V.
Hash 78be19d93b8add0d8f3c63b67e490038
2ed9c5d656a70a78ced84cd8fedbf0dcceb35bd6
b8a162cbf6a846ccd9bd65a8744c313d48c66700352346c24777bdc1c2358726
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "B8A162CBF6A846CCD9BD65A8744C313D48C66700352346C24777BDC1C2358726"
Last-Modified: Sat, 03 Aug 2024 18:58:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9395
Expires: Mon, 05 Aug 2024 17:03:22 GMT
Date: Mon, 05 Aug 2024 14:26:47 GMT
Connection: keep-alive
504 B IP
ASN #20940 Akamai International B.V.
Hash 78be19d93b8add0d8f3c63b67e490038
2ed9c5d656a70a78ced84cd8fedbf0dcceb35bd6
b8a162cbf6a846ccd9bd65a8744c313d48c66700352346c24777bdc1c2358726
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "B8A162CBF6A846CCD9BD65A8744C313D48C66700352346C24777BDC1C2358726"
Last-Modified: Sat, 03 Aug 2024 18:58:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9395
Expires: Mon, 05 Aug 2024 17:03:22 GMT
Date: Mon, 05 Aug 2024 14:26:47 GMT
Connection: keep-alive
504 B IP
ASN #20940 Akamai International B.V.
Hash 78be19d93b8add0d8f3c63b67e490038
2ed9c5d656a70a78ced84cd8fedbf0dcceb35bd6
b8a162cbf6a846ccd9bd65a8744c313d48c66700352346c24777bdc1c2358726
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "B8A162CBF6A846CCD9BD65A8744C313D48C66700352346C24777BDC1C2358726"
Last-Modified: Sat, 03 Aug 2024 18:58:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9401
Expires: Mon, 05 Aug 2024 17:03:28 GMT
Date: Mon, 05 Aug 2024 14:26:47 GMT
Connection: keep-alive
504 B IP
ASN #20940 Akamai International B.V.
Hash 78be19d93b8add0d8f3c63b67e490038
2ed9c5d656a70a78ced84cd8fedbf0dcceb35bd6
b8a162cbf6a846ccd9bd65a8744c313d48c66700352346c24777bdc1c2358726
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "B8A162CBF6A846CCD9BD65A8744C313D48C66700352346C24777BDC1C2358726"
Last-Modified: Sat, 03 Aug 2024 18:58:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9395
Expires: Mon, 05 Aug 2024 17:03:22 GMT
Date: Mon, 05 Aug 2024 14:26:47 GMT
Connection: keep-alive
4.2 kB URL web.axerve.com/payment-page/chunk-GUWLQ4CI.js
IP
ASN #21451 Banca Sella Holding S.p.A.
File type Java source, ASCII text, with very long lines (4197)
Hash 3a9245cba5c193d4ce9683fa9d62c9ea
6ce211270e8a84bf66e0aed32cfa8748c6f59346
2d70cb69409dbc0722e976b98e0d10c8cc0b5e9428f9047dba5e1f201b251a0a
GET /payment-page/chunk-GUWLQ4CI.js HTTP/1.1
Host: web.axerve.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://web.axerve.com/payment-page/main-FSZCUDWR.js
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Date: Mon, 05 Aug 2024 14:26:46 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
reporting-endpoints: csp-report="https://web.axerve.com/payment-page/api/csp-report"
content-security-policy: upgrade-insecure-requests; object-src 'none'; base-uri 'self'; default-src 'self'; script-src 'self' 'nonce-b33bcb57-f86d-45a1-933f-44f368afa17d' 'strict-dynamic' 'unsafe-inline' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com fonts.gstatic.com *.cdn-apple.com; font-src 'self' fonts.googleapis.com fonts.gstatic.com *.cdn-apple.com; child-src 'self' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com; img-src 'self' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com *.gstatic.com; connect-src 'self' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com; report-to csp-report
accept-ranges: bytes
etag: W/"4198-1721370704000"
last-modified: Fri, 19 Jul 2024 06:31:44 GMT
content-type: application/javascript;charset=UTF-8
content-length: 4198
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
91 kB URL web.axerve.com/payment-page/assets/fonts/AvertaPE-Regular.woff2
IP
ASN #21451 Banca Sella Holding S.p.A.
File type Web Open Font Format (Version 2), TrueType, length 90712, version 1.0
Hash 5b8726e30b29ae9196aae4485f020dbd
03129678b118469ac76dcc00f29400399442c0e1
27e40c596debd80701a4116a56e3cb53cd390f5cc47bd589835df2366ec9b089
GET /payment-page/assets/fonts/AvertaPE-Regular.woff2 HTTP/1.1
Host: web.axerve.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://web.axerve.com/payment-page/styles-FIGGIBFG.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Date: Mon, 05 Aug 2024 14:26:46 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
reporting-endpoints: csp-report="https://web.axerve.com/payment-page/api/csp-report"
content-security-policy: upgrade-insecure-requests; object-src 'none'; base-uri 'self'; default-src 'self'; script-src 'self' 'nonce-1b579609-91e2-40d6-8848-62e8ed52dee4' 'strict-dynamic' 'unsafe-inline' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com fonts.gstatic.com *.cdn-apple.com; font-src 'self' fonts.googleapis.com fonts.gstatic.com *.cdn-apple.com; child-src 'self' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com; img-src 'self' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com *.gstatic.com; connect-src 'self' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com; report-to csp-report
accept-ranges: bytes
etag: W/"90712-1721370704000"
last-modified: Fri, 19 Jul 2024 06:31:44 GMT
content-type: application/font-woff2;charset=UTF-8
content-length: 90712
Keep-Alive: timeout=15, max=98
Connection: Keep-Alive
315 B URL web.axerve.com/favicon.ico
IP
ASN #21451 Banca Sella Holding S.p.A.
File type HTML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
GET /favicon.ico HTTP/1.1
Host: web.axerve.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://web.axerve.com/payment-page/a/4317a7473f2e46d292be0925e5e7e637/b/152fd58aa54773a8dac7ed8b9af456c9ff663d3f85cd0f5950ac0f41a6dc4b2a9f4ea87f-35cd-4618-ac9f-7f6da26c49ffQ59aYEzf30OiTKRWTZ38dMoZbTPxoYdjBQcVwHh9vcFFoZsgAHOdhumjBkgxG90IYJ0CbSEF4io6b8ldwzGMD6kXeM1eO5CCGycIILvASPbRdy2YAHNFt27ZKf2VT0seMvxXgyTqNiJPstkKrdM35VB3F5Sk?e=s
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Mon, 05 Aug 2024 14:26:48 GMT
Server:
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Content-Length: 315
Keep-Alive: timeout=15, max=97
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
1.6 MB URL web.axerve.com/payment-page/chunk-7Z5SPNAD.js
IP
ASN #21451 Banca Sella Holding S.p.A.
File type JavaScript source, ASCII text, with very long lines (24934)
Size 1.6 MB (1632123 bytes)
Hash 38f8cb4400fe473719c5393a6299949d
97475eacad1cb5f636c9adc21c387e8769202f84
151007de83265c0c3db4c1d78a4a81cd8e9339832f0f635a6e2824944c0179d3
GET /payment-page/chunk-7Z5SPNAD.js HTTP/1.1
Host: web.axerve.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://web.axerve.com/payment-page/main-FSZCUDWR.js
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Date: Mon, 05 Aug 2024 14:26:46 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
reporting-endpoints: csp-report="https://web.axerve.com/payment-page/api/csp-report"
content-security-policy: upgrade-insecure-requests; object-src 'none'; base-uri 'self'; default-src 'self'; script-src 'self' 'nonce-c354935a-9f22-475e-8395-5d5b953e8d4d' 'strict-dynamic' 'unsafe-inline' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com fonts.gstatic.com *.cdn-apple.com; font-src 'self' fonts.googleapis.com fonts.gstatic.com *.cdn-apple.com; child-src 'self' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com; img-src 'self' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com *.gstatic.com; connect-src 'self' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com; report-to csp-report
accept-ranges: bytes
etag: W/"1632123-1721370704000"
last-modified: Fri, 19 Jul 2024 06:31:44 GMT
content-type: application/javascript;charset=UTF-8
content-length: 1632123
Keep-Alive: timeout=15, max=98
Connection: Keep-Alive
11 kB URL web.axerve.com/payment-page/assets/fabrick.css?v=2.2.2
IP
ASN #21451 Banca Sella Holding S.p.A.
Hash a337b7e9e15daad47ad9f8b127697d93
dc0907eac3566ff24bff4e35ed09f818c0fe322b
ba0a52239b36a59449095389024eecc9601087333733aa729a10321990d66695
GET /payment-page/assets/fabrick.css?v=2.2.2 HTTP/1.1
Host: web.axerve.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://web.axerve.com/payment-page/a/4317a7473f2e46d292be0925e5e7e637/b/152fd58aa54773a8dac7ed8b9af456c9ff663d3f85cd0f5950ac0f41a6dc4b2a9f4ea87f-35cd-4618-ac9f-7f6da26c49ffQ59aYEzf30OiTKRWTZ38dMoZbTPxoYdjBQcVwHh9vcFFoZsgAHOdhumjBkgxG90IYJ0CbSEF4io6b8ldwzGMD6kXeM1eO5CCGycIILvASPbRdy2YAHNFt27ZKf2VT0seMvxXgyTqNiJPstkKrdM35VB3F5Sk?e=s
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Date: Mon, 05 Aug 2024 14:26:49 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
reporting-endpoints: csp-report="https://web.axerve.com/payment-page/api/csp-report"
content-security-policy: upgrade-insecure-requests; object-src 'none'; base-uri 'self'; default-src 'self'; script-src 'self' 'nonce-b13f9f23-72ff-4d0b-9db3-da05e4df23d6' 'strict-dynamic' 'unsafe-inline' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com fonts.gstatic.com *.cdn-apple.com; font-src 'self' fonts.googleapis.com fonts.gstatic.com *.cdn-apple.com; child-src 'self' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com; img-src 'self' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com *.gstatic.com; connect-src 'self' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com; report-to csp-report
accept-ranges: bytes
etag: W/"10778-1721370704000"
last-modified: Fri, 19 Jul 2024 06:31:44 GMT
content-type: text/css;charset=UTF-8
content-length: 10778
Keep-Alive: timeout=15, max=97
Connection: Keep-Alive
2.8 kB URL web.axerve.com/payment-page/assets/i18n/ax-lib/it-IT.json?v=3.0.11
IP
ASN #21451 Banca Sella Holding S.p.A.
Hash 78aa88b77c016069d6132924e009b1a3
a1e2193cb0f4573191a04d62f8242203b1b0184a
c50b1f8cd2a7cbcd6f1de551426990ba5a6d11f455722b60179f3956ee9c0fcb
GET /payment-page/assets/i18n/ax-lib/it-IT.json?v=3.0.11 HTTP/1.1
Host: web.axerve.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://web.axerve.com/payment-page/a/4317a7473f2e46d292be0925e5e7e637/b/152fd58aa54773a8dac7ed8b9af456c9ff663d3f85cd0f5950ac0f41a6dc4b2a9f4ea87f-35cd-4618-ac9f-7f6da26c49ffQ59aYEzf30OiTKRWTZ38dMoZbTPxoYdjBQcVwHh9vcFFoZsgAHOdhumjBkgxG90IYJ0CbSEF4io6b8ldwzGMD6kXeM1eO5CCGycIILvASPbRdy2YAHNFt27ZKf2VT0seMvxXgyTqNiJPstkKrdM35VB3F5Sk?e=s
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Date: Mon, 05 Aug 2024 14:26:49 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
reporting-endpoints: csp-report="https://web.axerve.com/payment-page/api/csp-report"
content-security-policy: upgrade-insecure-requests; object-src 'none'; base-uri 'self'; default-src 'self'; script-src 'self' 'nonce-1c9232ab-b90f-497e-b0ab-f7d58c5c5cd4' 'strict-dynamic' 'unsafe-inline' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com fonts.gstatic.com *.cdn-apple.com; font-src 'self' fonts.googleapis.com fonts.gstatic.com *.cdn-apple.com; child-src 'self' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com; img-src 'self' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com *.gstatic.com; connect-src 'self' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com; report-to csp-report
accept-ranges: bytes
etag: W/"2839-1721370704000"
last-modified: Fri, 19 Jul 2024 06:31:44 GMT
content-type: application/json;charset=UTF-8
content-length: 2839
Keep-Alive: timeout=15, max=96
Connection: Keep-Alive
23 kB URL web.axerve.com/payment-page/assets/i18n/it-IT.json?v=3.0.14
IP
ASN #21451 Banca Sella Holding S.p.A.
Hash 94e69d63f016d073de647cfa3c1258e3
13e4b5c61b04a8b08b796d18caecc7cd40f03949
a97a2e4141e2834907bd833be258885bc713a94483e5019b0553120e4df6328f
GET /payment-page/assets/i18n/it-IT.json?v=3.0.14 HTTP/1.1
Host: web.axerve.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://web.axerve.com/payment-page/a/4317a7473f2e46d292be0925e5e7e637/b/152fd58aa54773a8dac7ed8b9af456c9ff663d3f85cd0f5950ac0f41a6dc4b2a9f4ea87f-35cd-4618-ac9f-7f6da26c49ffQ59aYEzf30OiTKRWTZ38dMoZbTPxoYdjBQcVwHh9vcFFoZsgAHOdhumjBkgxG90IYJ0CbSEF4io6b8ldwzGMD6kXeM1eO5CCGycIILvASPbRdy2YAHNFt27ZKf2VT0seMvxXgyTqNiJPstkKrdM35VB3F5Sk?e=s
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Date: Mon, 05 Aug 2024 14:26:49 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
reporting-endpoints: csp-report="https://web.axerve.com/payment-page/api/csp-report"
content-security-policy: upgrade-insecure-requests; object-src 'none'; base-uri 'self'; default-src 'self'; script-src 'self' 'nonce-136e8256-656d-4653-aa8b-b92fd8573aaa' 'strict-dynamic' 'unsafe-inline' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com fonts.gstatic.com *.cdn-apple.com; font-src 'self' fonts.googleapis.com fonts.gstatic.com *.cdn-apple.com; child-src 'self' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com; img-src 'self' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com *.gstatic.com; connect-src 'self' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com; report-to csp-report
accept-ranges: bytes
etag: W/"23412-1721370704000"
last-modified: Fri, 19 Jul 2024 06:31:44 GMT
content-type: application/json;charset=UTF-8
content-length: 23412
Keep-Alive: timeout=15, max=97
Connection: Keep-Alive
27 kB URL web.axerve.com/payment-page/assets/fonts/SpaceGrotesk-Regular.woff2
IP
ASN #21451 Banca Sella Holding S.p.A.
File type Web Open Font Format (Version 2), TrueType, length 26816, version 1.0
Hash 29a12c79c73e740628dd0f05e48fa0b8
115503983fcc8a23b638a3d7b3db01827c66377a
7130a88416adce8839e2914e4fd824b702842666d04d91c02b2799d693945ea1
GET /payment-page/assets/fonts/SpaceGrotesk-Regular.woff2 HTTP/1.1
Host: web.axerve.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://web.axerve.com/payment-page/styles-FIGGIBFG.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Date: Mon, 05 Aug 2024 14:26:49 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
reporting-endpoints: csp-report="https://web.axerve.com/payment-page/api/csp-report"
content-security-policy: upgrade-insecure-requests; object-src 'none'; base-uri 'self'; default-src 'self'; script-src 'self' 'nonce-9245670e-370e-4ea1-8feb-479ac04cf229' 'strict-dynamic' 'unsafe-inline' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com fonts.gstatic.com *.cdn-apple.com; font-src 'self' fonts.googleapis.com fonts.gstatic.com *.cdn-apple.com; child-src 'self' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com; img-src 'self' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com *.gstatic.com; connect-src 'self' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com; report-to csp-report
accept-ranges: bytes
etag: W/"26816-1721370704000"
last-modified: Fri, 19 Jul 2024 06:31:44 GMT
content-type: application/font-woff2;charset=UTF-8
content-length: 26816
Keep-Alive: timeout=15, max=96
Connection: Keep-Alive
2.8 kB URL web.axerve.com/payment-page/assets/i18n/ax-lib/en-US.json?v=3.0.11
IP
ASN #21451 Banca Sella Holding S.p.A.
Hash 1d07e8fd8c7638dad13f65b27051a8cc
204750479aedacc8450e64258342d3f2e79d0802
303b69db1c19826dbf9e93ab631d12c55029959c9f7efbb0a1d8e2bf2f42de81
GET /payment-page/assets/i18n/ax-lib/en-US.json?v=3.0.11 HTTP/1.1
Host: web.axerve.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://web.axerve.com/payment-page/a/4317a7473f2e46d292be0925e5e7e637/b/152fd58aa54773a8dac7ed8b9af456c9ff663d3f85cd0f5950ac0f41a6dc4b2a9f4ea87f-35cd-4618-ac9f-7f6da26c49ffQ59aYEzf30OiTKRWTZ38dMoZbTPxoYdjBQcVwHh9vcFFoZsgAHOdhumjBkgxG90IYJ0CbSEF4io6b8ldwzGMD6kXeM1eO5CCGycIILvASPbRdy2YAHNFt27ZKf2VT0seMvxXgyTqNiJPstkKrdM35VB3F5Sk?e=s
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Date: Mon, 05 Aug 2024 14:26:48 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
reporting-endpoints: csp-report="https://web.axerve.com/payment-page/api/csp-report"
content-security-policy: upgrade-insecure-requests; object-src 'none'; base-uri 'self'; default-src 'self'; script-src 'self' 'nonce-4c0e3e2c-84d5-4780-9c92-7720a0c9fc09' 'strict-dynamic' 'unsafe-inline' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com fonts.gstatic.com *.cdn-apple.com; font-src 'self' fonts.googleapis.com fonts.gstatic.com *.cdn-apple.com; child-src 'self' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com; img-src 'self' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com *.gstatic.com; connect-src 'self' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com; report-to csp-report
accept-ranges: bytes
etag: W/"2822-1721370704000"
last-modified: Fri, 19 Jul 2024 06:31:44 GMT
content-type: application/json;charset=UTF-8
content-length: 2822
Keep-Alive: timeout=15, max=95
Connection: Keep-Alive
22 kB URL web.axerve.com/payment-page/assets/i18n/en-US.json?v=3.0.14
IP
ASN #21451 Banca Sella Holding S.p.A.
Hash 63e6d5163b06a088c3a8c3f3f47ddee4
cf7feb47257fcc3b7449fe1e297b378c5e4602e1
d270e638895171166b6a0ebe3e50035fb585dc3d0f3b584905013762a6cc397d
GET /payment-page/assets/i18n/en-US.json?v=3.0.14 HTTP/1.1
Host: web.axerve.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://web.axerve.com/payment-page/a/4317a7473f2e46d292be0925e5e7e637/b/152fd58aa54773a8dac7ed8b9af456c9ff663d3f85cd0f5950ac0f41a6dc4b2a9f4ea87f-35cd-4618-ac9f-7f6da26c49ffQ59aYEzf30OiTKRWTZ38dMoZbTPxoYdjBQcVwHh9vcFFoZsgAHOdhumjBkgxG90IYJ0CbSEF4io6b8ldwzGMD6kXeM1eO5CCGycIILvASPbRdy2YAHNFt27ZKf2VT0seMvxXgyTqNiJPstkKrdM35VB3F5Sk?e=s
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Date: Mon, 05 Aug 2024 14:26:48 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
reporting-endpoints: csp-report="https://web.axerve.com/payment-page/api/csp-report"
content-security-policy: upgrade-insecure-requests; object-src 'none'; base-uri 'self'; default-src 'self'; script-src 'self' 'nonce-57dc7449-1b7b-410d-aa8a-e8a8128bd5dc' 'strict-dynamic' 'unsafe-inline' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com fonts.gstatic.com *.cdn-apple.com; font-src 'self' fonts.googleapis.com fonts.gstatic.com *.cdn-apple.com; child-src 'self' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com; img-src 'self' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com *.gstatic.com; connect-src 'self' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com; report-to csp-report
accept-ranges: bytes
etag: W/"22017-1721370704000"
last-modified: Fri, 19 Jul 2024 06:31:44 GMT
content-type: application/json;charset=UTF-8
content-length: 22017
Keep-Alive: timeout=15, max=96
Connection: Keep-Alive
10 kB URL web.axerve.com/payment-page/assets/axerve.css?v=2.2.2
IP
ASN #21451 Banca Sella Holding S.p.A.
Hash 8334fb413f70f56d105473c8e0c3c3d0
2d87007040a0e142ca0c463cb09d00dae386a8d7
c259239957f05825ec1478760d09d139276e60783761bcbbe099b9f7ddc7efb1
GET /payment-page/assets/axerve.css?v=2.2.2 HTTP/1.1
Host: web.axerve.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://web.axerve.com/payment-page/a/4317a7473f2e46d292be0925e5e7e637/b/152fd58aa54773a8dac7ed8b9af456c9ff663d3f85cd0f5950ac0f41a6dc4b2a9f4ea87f-35cd-4618-ac9f-7f6da26c49ffQ59aYEzf30OiTKRWTZ38dMoZbTPxoYdjBQcVwHh9vcFFoZsgAHOdhumjBkgxG90IYJ0CbSEF4io6b8ldwzGMD6kXeM1eO5CCGycIILvASPbRdy2YAHNFt27ZKf2VT0seMvxXgyTqNiJPstkKrdM35VB3F5Sk?e=s
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Date: Mon, 05 Aug 2024 14:26:49 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
reporting-endpoints: csp-report="https://web.axerve.com/payment-page/api/csp-report"
content-security-policy: upgrade-insecure-requests; object-src 'none'; base-uri 'self'; default-src 'self'; script-src 'self' 'nonce-e0276cb2-f904-4b19-ac3f-467705a427f4' 'strict-dynamic' 'unsafe-inline' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com fonts.gstatic.com *.cdn-apple.com; font-src 'self' fonts.googleapis.com fonts.gstatic.com *.cdn-apple.com; child-src 'self' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com; img-src 'self' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com *.gstatic.com; connect-src 'self' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com; report-to csp-report
accept-ranges: bytes
etag: W/"10094-1721370704000"
last-modified: Fri, 19 Jul 2024 06:31:44 GMT
content-type: text/css;charset=UTF-8
content-length: 10094
Keep-Alive: timeout=15, max=99
Connection: Keep-Alive
20 kB URL web.axerve.com/payment-page/chunk-5WBGEDYB.js
IP
ASN #21451 Banca Sella Holding S.p.A.
File type ASCII text, with very long lines (19469)
Hash c58dc6bb597c2c07c95a30b339839688
7f6f756d44d0a1d2a40554a13e8d718778bb9e9b
81913e5595afb946287b7219320a4cc101f280b43489320a02d890262dd299c9
GET /payment-page/chunk-5WBGEDYB.js HTTP/1.1
Host: web.axerve.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://web.axerve.com/payment-page/main-FSZCUDWR.js
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Date: Mon, 05 Aug 2024 14:26:49 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
reporting-endpoints: csp-report="https://web.axerve.com/payment-page/api/csp-report"
content-security-policy: upgrade-insecure-requests; object-src 'none'; base-uri 'self'; default-src 'self'; script-src 'self' 'nonce-344ce5f6-15cd-4b8d-81c0-bc0b9f55b1cc' 'strict-dynamic' 'unsafe-inline' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com fonts.gstatic.com *.cdn-apple.com; font-src 'self' fonts.googleapis.com fonts.gstatic.com *.cdn-apple.com; child-src 'self' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com; img-src 'self' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com *.gstatic.com; connect-src 'self' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com; report-to csp-report
accept-ranges: bytes
etag: W/"19470-1721370704000"
last-modified: Fri, 19 Jul 2024 06:31:44 GMT
content-type: application/javascript;charset=UTF-8
content-length: 19470
Keep-Alive: timeout=15, max=94
Connection: Keep-Alive
8.2 kB URL web.axerve.com/payment-page/chunk-6CIMQLG2.js
IP
ASN #21451 Banca Sella Holding S.p.A.
File type ASCII text, with very long lines (8204)
Hash ccb62610e800c646a995eb4b451466ce
096ca8a6345b3064b6c8869458caa7f993ed5809
bb57f616c2b32cd7a5e8cff0e7f34d8b295d4a1590ac894a4c8b0ff9cec8a76b
GET /payment-page/chunk-6CIMQLG2.js HTTP/1.1
Host: web.axerve.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://web.axerve.com/payment-page/main-FSZCUDWR.js
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Date: Mon, 05 Aug 2024 14:26:49 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
reporting-endpoints: csp-report="https://web.axerve.com/payment-page/api/csp-report"
content-security-policy: upgrade-insecure-requests; object-src 'none'; base-uri 'self'; default-src 'self'; script-src 'self' 'nonce-083115db-10b3-4736-8844-c6eabbd97ea2' 'strict-dynamic' 'unsafe-inline' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com fonts.gstatic.com *.cdn-apple.com; font-src 'self' fonts.googleapis.com fonts.gstatic.com *.cdn-apple.com; child-src 'self' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com; img-src 'self' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com *.gstatic.com; connect-src 'self' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com; report-to csp-report
accept-ranges: bytes
etag: W/"8205-1721370704000"
last-modified: Fri, 19 Jul 2024 06:31:44 GMT
content-type: application/javascript;charset=UTF-8
content-length: 8205
Keep-Alive: timeout=15, max=95
Connection: Keep-Alive
0 B URL web.axerve.com/payment-page/api/flows/4317a7473f2e46d292be0925e5e7e637/trace
IP
ASN #21451 Banca Sella Holding S.p.A.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /payment-page/api/flows/4317a7473f2e46d292be0925e5e7e637/trace HTTP/1.1
Host: web.axerve.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-client-version: 3.0.14
X-ua-browser: {"name":"Firefox","version":"96.0","major":"96"}
X-ua-os: {"name":"Linux","version":"x86_64"}
X-ua-device: {}
X-flow-trace-id: ff0a91ef-c2be-9ec9-bcae-c3b109b38a0d
X-flow-session-id: b5650024-cf0a-86bc-31cc-323c33324098
X-flow-locale: it-IT
Auth-Token: 152fd58aa54773a8dac7ed8b9af456c9ff663d3f85cd0f5950ac0f41a6dc4b2a9f4ea87f-35cd-4618-ac9f-7f6da26c49ffQ59aYEzf30OiTKRWTZ38dMoZbTPxoYdjBQcVwHh9vcFFoZsgAHOdhumjBkgxG90IYJ0CbSEF4io6b8ldwzGMD6kXeM1eO5CCGycIILvASPbRdy2YAHNFt27ZKf2VT0seMvxXgyTqNiJPstkKrdM35VB3F5Sk
Auth-Schema: S2S-AUTH
Content-Type: application/json
Content-Length: 391
Origin: https://web.axerve.com
DNT: 1
Connection: keep-alive
Referer: https://web.axerve.com/payment-page/a/4317a7473f2e46d292be0925e5e7e637/b/152fd58aa54773a8dac7ed8b9af456c9ff663d3f85cd0f5950ac0f41a6dc4b2a9f4ea87f-35cd-4618-ac9f-7f6da26c49ffQ59aYEzf30OiTKRWTZ38dMoZbTPxoYdjBQcVwHh9vcFFoZsgAHOdhumjBkgxG90IYJ0CbSEF4io6b8ldwzGMD6kXeM1eO5CCGycIILvASPbRdy2YAHNFt27ZKf2VT0seMvxXgyTqNiJPstkKrdM35VB3F5Sk?e=s
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 05 Aug 2024 14:26:49 GMT
Server:
Strict-Transport-Security: max-age=31536000; includeSubDomains
Access-Control-Allow-Origin: https://web.axerve.com
Access-Control-Expose-Headers: x-correlationid
Max-Forwards: 20
X-CorrelationID: Id-29e1b06692c2c09999f30033 0
cache-control: no-cache, no-store, max-age=0, must-revalidate
expires: 0
pragma: no-cache
vary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers
X-Content-Type-Options: nosniff, nosniff
X-Frame-Options: SAMEORIGIN, DENY
X-XSS-Protection: 1; mode=block, 1; mode=block
Content-Length: 0
Keep-Alive: timeout=15, max=95
Connection: Keep-Alive
2.8 kB URL web.axerve.com/payment-page/assets/icons/svg/logo-axerve.svg
IP
ASN #21451 Banca Sella Holding S.p.A.
File type SVG Scalable Vector Graphics image
Hash 98edd23bb7730d7d3fd203bdfc1f3bf4
169d97f1ad2d01a5cca6d326cd62f1ae09f98f70
6d1a54f9fb41dc5b396d2a9880aa7adf89eec045124debca9b13d507f09368c8
GET /payment-page/assets/icons/svg/logo-axerve.svg HTTP/1.1
Host: web.axerve.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://web.axerve.com/payment-page/a/4317a7473f2e46d292be0925e5e7e637/b/152fd58aa54773a8dac7ed8b9af456c9ff663d3f85cd0f5950ac0f41a6dc4b2a9f4ea87f-35cd-4618-ac9f-7f6da26c49ffQ59aYEzf30OiTKRWTZ38dMoZbTPxoYdjBQcVwHh9vcFFoZsgAHOdhumjBkgxG90IYJ0CbSEF4io6b8ldwzGMD6kXeM1eO5CCGycIILvASPbRdy2YAHNFt27ZKf2VT0seMvxXgyTqNiJPstkKrdM35VB3F5Sk?e=s
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Date: Mon, 05 Aug 2024 14:26:49 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
reporting-endpoints: csp-report="https://web.axerve.com/payment-page/api/csp-report"
content-security-policy: upgrade-insecure-requests; object-src 'none'; base-uri 'self'; default-src 'self'; script-src 'self' 'nonce-17449948-8cdf-408f-8e30-bf6810d554aa' 'strict-dynamic' 'unsafe-inline' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com fonts.gstatic.com *.cdn-apple.com; font-src 'self' fonts.googleapis.com fonts.gstatic.com *.cdn-apple.com; child-src 'self' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com; img-src 'self' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com *.gstatic.com; connect-src 'self' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com; report-to csp-report
accept-ranges: bytes
etag: W/"2769-1721370704000"
last-modified: Fri, 19 Jul 2024 06:31:44 GMT
content-type: image/svg+xml;charset=UTF-8
content-length: 2769
Keep-Alive: timeout=15, max=93
Connection: Keep-Alive
6.5 kB URL web.axerve.com/payment-page/chunk-2WQ3WUNW.js
IP
ASN #21451 Banca Sella Holding S.p.A.
File type Java source, ASCII text, with very long lines (6490)
Hash 2a7700391ecff7c1c37048dc594295fc
9860932ee786ad91e24411faad7b40a06189872b
97a8099b39e46b111294ea1aabc35a1b21249bb20e54a03779263fd65740eb8b
GET /payment-page/chunk-2WQ3WUNW.js HTTP/1.1
Host: web.axerve.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://web.axerve.com/payment-page/chunk-5WBGEDYB.js
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Date: Mon, 05 Aug 2024 14:26:49 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
reporting-endpoints: csp-report="https://web.axerve.com/payment-page/api/csp-report"
content-security-policy: upgrade-insecure-requests; object-src 'none'; base-uri 'self'; default-src 'self'; script-src 'self' 'nonce-efd842cc-dd49-4091-bed9-0344686c9961' 'strict-dynamic' 'unsafe-inline' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com fonts.gstatic.com *.cdn-apple.com; font-src 'self' fonts.googleapis.com fonts.gstatic.com *.cdn-apple.com; child-src 'self' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com; img-src 'self' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com *.gstatic.com; connect-src 'self' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com; report-to csp-report
accept-ranges: bytes
etag: W/"6491-1721370704000"
last-modified: Fri, 19 Jul 2024 06:31:44 GMT
content-type: application/javascript;charset=UTF-8
content-length: 6491
Keep-Alive: timeout=15, max=94
Connection: Keep-Alive
2.8 kB URL web.axerve.com/payment-page/chunk-M7SB4MSB.js
IP
ASN #21451 Banca Sella Holding S.p.A.
File type Java source, ASCII text, with very long lines (2813)
Hash 61a0fddecbea65dc74068bccfb616c30
d0c797eaaacc6b56d243b2b2ac095f6ddc42b578
d9cfad438964ccb2971e63a0ef7d250ef80de5aced09ea590cf21e3313e07008
GET /payment-page/chunk-M7SB4MSB.js HTTP/1.1
Host: web.axerve.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://web.axerve.com/payment-page/chunk-5WBGEDYB.js
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Date: Mon, 05 Aug 2024 14:26:48 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
reporting-endpoints: csp-report="https://web.axerve.com/payment-page/api/csp-report"
content-security-policy: upgrade-insecure-requests; object-src 'none'; base-uri 'self'; default-src 'self'; script-src 'self' 'nonce-29228e60-cee4-4d5a-af99-167cf0e1655d' 'strict-dynamic' 'unsafe-inline' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com fonts.gstatic.com *.cdn-apple.com; font-src 'self' fonts.googleapis.com fonts.gstatic.com *.cdn-apple.com; child-src 'self' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com; img-src 'self' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com *.gstatic.com; connect-src 'self' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com; report-to csp-report
accept-ranges: bytes
etag: W/"2814-1721370704000"
last-modified: Fri, 19 Jul 2024 06:31:44 GMT
content-type: application/javascript;charset=UTF-8
content-length: 2814
Keep-Alive: timeout=15, max=98
Connection: Keep-Alive
2.9 kB URL web.axerve.com/payment-page/chunk-YQFCQOLA.js
IP
ASN #21451 Banca Sella Holding S.p.A.
File type Java source, ASCII text, with very long lines (2947)
Hash 157788c5bb7732353f80a62f38834101
e5bfec18a83ef9db3de345c305a53278eece4f42
89b72d81595dbd9a305eec7a631094210224ea0ba20a75947eef33e2c226c6f0
GET /payment-page/chunk-YQFCQOLA.js HTTP/1.1
Host: web.axerve.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://web.axerve.com/payment-page/chunk-5WBGEDYB.js
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Date: Mon, 05 Aug 2024 14:26:48 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
reporting-endpoints: csp-report="https://web.axerve.com/payment-page/api/csp-report"
content-security-policy: upgrade-insecure-requests; object-src 'none'; base-uri 'self'; default-src 'self'; script-src 'self' 'nonce-6c2216bb-9a54-49e3-831a-e87a5299f119' 'strict-dynamic' 'unsafe-inline' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com fonts.gstatic.com *.cdn-apple.com; font-src 'self' fonts.googleapis.com fonts.gstatic.com *.cdn-apple.com; child-src 'self' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com; img-src 'self' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com *.gstatic.com; connect-src 'self' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com; report-to csp-report
accept-ranges: bytes
etag: W/"2948-1721370704000"
last-modified: Fri, 19 Jul 2024 06:31:44 GMT
content-type: application/javascript;charset=UTF-8
content-length: 2948
Keep-Alive: timeout=15, max=94
Connection: Keep-Alive
1.2 kB URL web.axerve.com/payment-page/api/flows/4317a7473f2e46d292be0925e5e7e637
IP
ASN #21451 Banca Sella Holding S.p.A.
Hash 1cb625e82ebe41e78db5d82ed45210c9
472b0d6c7e62d01a2cbd14dc5476ce386191fbe8
10da737f26c66c99c195ce7921513da936f1df810390d9f804bd25d3b678e878
GET /payment-page/api/flows/4317a7473f2e46d292be0925e5e7e637 HTTP/1.1
Host: web.axerve.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-client-version: 3.0.14
X-ua-browser: {"name":"Firefox","version":"96.0","major":"96"}
X-ua-os: {"name":"Linux","version":"x86_64"}
X-ua-device: {}
X-flow-trace-id: acdfd16c-ddd0-7e64-a0a1-9cb3b9d2e8cc
X-flow-session-id: b5650024-cf0a-86bc-31cc-323c33324098
X-flow-locale: it-IT
Auth-Token: 152fd58aa54773a8dac7ed8b9af456c9ff663d3f85cd0f5950ac0f41a6dc4b2a9f4ea87f-35cd-4618-ac9f-7f6da26c49ffQ59aYEzf30OiTKRWTZ38dMoZbTPxoYdjBQcVwHh9vcFFoZsgAHOdhumjBkgxG90IYJ0CbSEF4io6b8ldwzGMD6kXeM1eO5CCGycIILvASPbRdy2YAHNFt27ZKf2VT0seMvxXgyTqNiJPstkKrdM35VB3F5Sk
Auth-Schema: S2S-AUTH
Content-Type: application/json
DNT: 1
Connection: keep-alive
Referer: https://web.axerve.com/payment-page/a/4317a7473f2e46d292be0925e5e7e637/b/152fd58aa54773a8dac7ed8b9af456c9ff663d3f85cd0f5950ac0f41a6dc4b2a9f4ea87f-35cd-4618-ac9f-7f6da26c49ffQ59aYEzf30OiTKRWTZ38dMoZbTPxoYdjBQcVwHh9vcFFoZsgAHOdhumjBkgxG90IYJ0CbSEF4io6b8ldwzGMD6kXeM1eO5CCGycIILvASPbRdy2YAHNFt27ZKf2VT0seMvxXgyTqNiJPstkKrdM35VB3F5Sk?e=s
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 05 Aug 2024 14:26:49 GMT
Server:
Strict-Transport-Security: max-age=31536000; includeSubDomains
Max-Forwards: 20
X-CorrelationID: Id-29e1b066b7de1a3f0ef90961 0
cache-control: no-cache, no-store, max-age=0, must-revalidate
expires: 0
pragma: no-cache
vary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers
X-Content-Type-Options: nosniff, nosniff
X-Frame-Options: SAMEORIGIN, DENY
X-XSS-Protection: 1; mode=block, 1; mode=block
content-type: application/json;charset=UTF-8
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
4.1 kB URL web.axerve.com/payment-page/chunk-TK3RFTME.js
IP
ASN #21451 Banca Sella Holding S.p.A.
File type Java source, ASCII text, with very long lines (4145)
Hash 81c443644e151c04ca25b499b6ca4fd2
f24520ef1d54d04f4547809ea3f97e498c2e87e6
5ffb7b059b291181f092093d8e6e3a343716e60e96fd797d4dc33dff24cdee84
GET /payment-page/chunk-TK3RFTME.js HTTP/1.1
Host: web.axerve.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://web.axerve.com/payment-page/chunk-2WQ3WUNW.js
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Date: Mon, 05 Aug 2024 14:26:49 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
reporting-endpoints: csp-report="https://web.axerve.com/payment-page/api/csp-report"
content-security-policy: upgrade-insecure-requests; object-src 'none'; base-uri 'self'; default-src 'self'; script-src 'self' 'nonce-e7d09963-e61d-4bd3-bb05-9eb5f18fa482' 'strict-dynamic' 'unsafe-inline' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com fonts.gstatic.com *.cdn-apple.com; font-src 'self' fonts.googleapis.com fonts.gstatic.com *.cdn-apple.com; child-src 'self' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com; img-src 'self' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com *.gstatic.com; connect-src 'self' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com; report-to csp-report
accept-ranges: bytes
etag: W/"4146-1721370704000"
last-modified: Fri, 19 Jul 2024 06:31:44 GMT
content-type: application/javascript;charset=UTF-8
content-length: 4146
Keep-Alive: timeout=15, max=93
Connection: Keep-Alive
16 kB URL web.axerve.com/payment-page/chunk-JZUXR2NJ.js
IP
ASN #21451 Banca Sella Holding S.p.A.
File type ASCII text, with very long lines (15564)
Hash c3e1f9bace17a4d3b3bcbb8b2c00e034
bdd6f2f85dfbc9f17013f116beb12c604725662b
fa5e3ea2f56fa73de6ad6398d5b3337ea4671083c4e9809d833fc664ddb7a0cf
GET /payment-page/chunk-JZUXR2NJ.js HTTP/1.1
Host: web.axerve.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://web.axerve.com/payment-page/chunk-2WQ3WUNW.js
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Date: Mon, 05 Aug 2024 14:26:49 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
reporting-endpoints: csp-report="https://web.axerve.com/payment-page/api/csp-report"
content-security-policy: upgrade-insecure-requests; object-src 'none'; base-uri 'self'; default-src 'self'; script-src 'self' 'nonce-1bc218bf-e212-44fe-b716-69d950e8b783' 'strict-dynamic' 'unsafe-inline' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com fonts.gstatic.com *.cdn-apple.com; font-src 'self' fonts.googleapis.com fonts.gstatic.com *.cdn-apple.com; child-src 'self' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com; img-src 'self' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com *.gstatic.com; connect-src 'self' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com; report-to csp-report
accept-ranges: bytes
etag: W/"15565-1721370704000"
last-modified: Fri, 19 Jul 2024 06:31:44 GMT
content-type: application/javascript;charset=UTF-8
content-length: 15565
Keep-Alive: timeout=15, max=93
Connection: Keep-Alive
665 B URL web.axerve.com/payment-page/api/flows/4317a7473f2e46d292be0925e5e7e637/configurations
IP
ASN #21451 Banca Sella Holding S.p.A.
Hash dadfed1781a0c2a4a2955acb7ccb5cee
0b808f0c915634d781074656117746c5e5deb694
b50639b9f951a2d8c4858867ce86079a14695034e1a0d3f3076fef7e19f06ee4
GET /payment-page/api/flows/4317a7473f2e46d292be0925e5e7e637/configurations HTTP/1.1
Host: web.axerve.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-client-version: 3.0.14
X-ua-browser: {"name":"Firefox","version":"96.0","major":"96"}
X-ua-os: {"name":"Linux","version":"x86_64"}
X-ua-device: {}
X-flow-trace-id: f2d97239-eae2-bcc3-bfcc-abd639a3d7c6
X-flow-session-id: b5650024-cf0a-86bc-31cc-323c33324098
X-flow-locale: it-IT
Auth-Token: 152fd58aa54773a8dac7ed8b9af456c9ff663d3f85cd0f5950ac0f41a6dc4b2a9f4ea87f-35cd-4618-ac9f-7f6da26c49ffQ59aYEzf30OiTKRWTZ38dMoZbTPxoYdjBQcVwHh9vcFFoZsgAHOdhumjBkgxG90IYJ0CbSEF4io6b8ldwzGMD6kXeM1eO5CCGycIILvASPbRdy2YAHNFt27ZKf2VT0seMvxXgyTqNiJPstkKrdM35VB3F5Sk
Auth-Schema: S2S-AUTH
Content-Type: application/json
DNT: 1
Connection: keep-alive
Referer: https://web.axerve.com/payment-page/a/4317a7473f2e46d292be0925e5e7e637/b/152fd58aa54773a8dac7ed8b9af456c9ff663d3f85cd0f5950ac0f41a6dc4b2a9f4ea87f-35cd-4618-ac9f-7f6da26c49ffQ59aYEzf30OiTKRWTZ38dMoZbTPxoYdjBQcVwHh9vcFFoZsgAHOdhumjBkgxG90IYJ0CbSEF4io6b8ldwzGMD6kXeM1eO5CCGycIILvASPbRdy2YAHNFt27ZKf2VT0seMvxXgyTqNiJPstkKrdM35VB3F5Sk?e=s
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 05 Aug 2024 14:26:49 GMT
Server:
Strict-Transport-Security: max-age=31536000; includeSubDomains
Max-Forwards: 20
X-CorrelationID: Id-29e1b0664acea0574143ae58 0
cache-control: no-cache, no-store, max-age=0, must-revalidate
expires: 0
pragma: no-cache
vary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers
X-Content-Type-Options: nosniff, nosniff
X-Frame-Options: SAMEORIGIN, DENY
X-XSS-Protection: 1; mode=block, 1; mode=block
content-type: application/json;charset=UTF-8
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
88 kB URL web.axerve.com/payment-page/assets/fonts/AvertaPE-Semibold.woff2
IP
ASN #21451 Banca Sella Holding S.p.A.
File type Web Open Font Format (Version 2), TrueType, length 87928, version 1.0
Hash d169de5df57202d846df0a0f879f3500
3ee3c750ea2290961b005f599968130ec752ac43
f448b369e0c6a1f1637e8c84a059208f2c01a90e3cf6bdd250c9d952a905c550
GET /payment-page/assets/fonts/AvertaPE-Semibold.woff2 HTTP/1.1
Host: web.axerve.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://web.axerve.com/payment-page/styles-FIGGIBFG.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Date: Mon, 05 Aug 2024 14:26:49 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
reporting-endpoints: csp-report="https://web.axerve.com/payment-page/api/csp-report"
content-security-policy: upgrade-insecure-requests; object-src 'none'; base-uri 'self'; default-src 'self'; script-src 'self' 'nonce-08a90ecb-43c4-43e2-b891-b6a7585f6b0a' 'strict-dynamic' 'unsafe-inline' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com fonts.gstatic.com *.cdn-apple.com; font-src 'self' fonts.googleapis.com fonts.gstatic.com *.cdn-apple.com; child-src 'self' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com; img-src 'self' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com *.gstatic.com; connect-src 'self' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com; report-to csp-report
accept-ranges: bytes
etag: W/"87928-1721370704000"
last-modified: Fri, 19 Jul 2024 06:31:44 GMT
content-type: application/font-woff2;charset=UTF-8
content-length: 87928
Keep-Alive: timeout=15, max=92
Connection: Keep-Alive
1.8 kB URL web.axerve.com/payment-page/chunk-VCDYDWTQ.js
IP
ASN #21451 Banca Sella Holding S.p.A.
File type Java source, ASCII text, with very long lines (1770)
Hash 26acdeb13eabf84f7da67311a5553848
bc888266251d754884521082f1d66be94b0bb970
e95b2cd8df34bbe3b572419bc05d38101d883bbbdbffd72d40d464bcde18a2da
GET /payment-page/chunk-VCDYDWTQ.js HTTP/1.1
Host: web.axerve.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://web.axerve.com/payment-page/chunk-5WBGEDYB.js
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Date: Mon, 05 Aug 2024 14:26:48 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
reporting-endpoints: csp-report="https://web.axerve.com/payment-page/api/csp-report"
content-security-policy: upgrade-insecure-requests; object-src 'none'; base-uri 'self'; default-src 'self'; script-src 'self' 'nonce-b0b69cbc-e68b-4964-98ce-1367c184d9e7' 'strict-dynamic' 'unsafe-inline' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com fonts.gstatic.com *.cdn-apple.com; font-src 'self' fonts.googleapis.com fonts.gstatic.com *.cdn-apple.com; child-src 'self' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com; img-src 'self' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com *.gstatic.com; connect-src 'self' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com; report-to csp-report
accept-ranges: bytes
etag: W/"1771-1721370704000"
last-modified: Fri, 19 Jul 2024 06:31:44 GMT
content-type: application/javascript;charset=UTF-8
content-length: 1771
Keep-Alive: timeout=15, max=91
Connection: Keep-Alive
0 B URL web.axerve.com/payment-page/api/flows/4317a7473f2e46d292be0925e5e7e637/trace
IP
ASN #21451 Banca Sella Holding S.p.A.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /payment-page/api/flows/4317a7473f2e46d292be0925e5e7e637/trace HTTP/1.1
Host: web.axerve.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-client-version: 3.0.14
X-ua-browser: {"name":"Firefox","version":"96.0","major":"96"}
X-ua-os: {"name":"Linux","version":"x86_64"}
X-ua-device: {}
X-flow-selected-payment-method: PAYPAL
X-flow-trace-id: bc549548-d791-d873-e4bd-eed590049f80
X-flow-session-id: b5650024-cf0a-86bc-31cc-323c33324098
X-flow-locale: en-US
Auth-Token: 152fd58aa54773a8dac7ed8b9af456c9ff663d3f85cd0f5950ac0f41a6dc4b2a9f4ea87f-35cd-4618-ac9f-7f6da26c49ffQ59aYEzf30OiTKRWTZ38dMoZbTPxoYdjBQcVwHh9vcFFoZsgAHOdhumjBkgxG90IYJ0CbSEF4io6b8ldwzGMD6kXeM1eO5CCGycIILvASPbRdy2YAHNFt27ZKf2VT0seMvxXgyTqNiJPstkKrdM35VB3F5Sk
Auth-Schema: S2S-AUTH
Content-Type: application/json
Content-Length: 118
Origin: https://web.axerve.com
DNT: 1
Connection: keep-alive
Referer: https://web.axerve.com/payment-page/a/4317a7473f2e46d292be0925e5e7e637/b/152fd58aa54773a8dac7ed8b9af456c9ff663d3f85cd0f5950ac0f41a6dc4b2a9f4ea87f-35cd-4618-ac9f-7f6da26c49ffQ59aYEzf30OiTKRWTZ38dMoZbTPxoYdjBQcVwHh9vcFFoZsgAHOdhumjBkgxG90IYJ0CbSEF4io6b8ldwzGMD6kXeM1eO5CCGycIILvASPbRdy2YAHNFt27ZKf2VT0seMvxXgyTqNiJPstkKrdM35VB3F5Sk?e=s
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 05 Aug 2024 14:26:49 GMT
Server:
Strict-Transport-Security: max-age=31536000; includeSubDomains
Access-Control-Allow-Origin: https://web.axerve.com
Access-Control-Expose-Headers: x-correlationid
Max-Forwards: 20
X-CorrelationID: Id-29e1b066a9c2174975230b25 0
cache-control: no-cache, no-store, max-age=0, must-revalidate
expires: 0
pragma: no-cache
vary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers
X-Content-Type-Options: nosniff, nosniff
X-Frame-Options: SAMEORIGIN, DENY
X-XSS-Protection: 1; mode=block, 1; mode=block
Content-Length: 0
Keep-Alive: timeout=15, max=92
Connection: Keep-Alive
2.8 kB URL web.axerve.com/payment-page/assets/i18n/ax-lib/en-US.json?v=3.0.11
IP
ASN #21451 Banca Sella Holding S.p.A.
Hash 1d07e8fd8c7638dad13f65b27051a8cc
204750479aedacc8450e64258342d3f2e79d0802
303b69db1c19826dbf9e93ab631d12c55029959c9f7efbb0a1d8e2bf2f42de81
GET /payment-page/assets/i18n/ax-lib/en-US.json?v=3.0.11 HTTP/1.1
Host: web.axerve.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://web.axerve.com/payment-page/payment-methods/PAYPAL
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Date: Mon, 05 Aug 2024 14:26:49 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
reporting-endpoints: csp-report="https://web.axerve.com/payment-page/api/csp-report"
content-security-policy: upgrade-insecure-requests; object-src 'none'; base-uri 'self'; default-src 'self'; script-src 'self' 'nonce-8d8e45ba-8077-429d-84be-29565cfa2c9d' 'strict-dynamic' 'unsafe-inline' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com fonts.gstatic.com *.cdn-apple.com; font-src 'self' fonts.googleapis.com fonts.gstatic.com *.cdn-apple.com; child-src 'self' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com; img-src 'self' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com *.gstatic.com; connect-src 'self' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com; report-to csp-report
accept-ranges: bytes
etag: W/"2822-1721370704000"
last-modified: Fri, 19 Jul 2024 06:31:44 GMT
content-type: application/json;charset=UTF-8
content-length: 2822
Keep-Alive: timeout=15, max=90
Connection: Keep-Alive
22 kB URL web.axerve.com/payment-page/assets/i18n/en-US.json?v=3.0.14
IP
ASN #21451 Banca Sella Holding S.p.A.
Hash 63e6d5163b06a088c3a8c3f3f47ddee4
cf7feb47257fcc3b7449fe1e297b378c5e4602e1
d270e638895171166b6a0ebe3e50035fb585dc3d0f3b584905013762a6cc397d
GET /payment-page/assets/i18n/en-US.json?v=3.0.14 HTTP/1.1
Host: web.axerve.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://web.axerve.com/payment-page/payment-methods/PAYPAL
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Date: Mon, 05 Aug 2024 14:26:49 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
reporting-endpoints: csp-report="https://web.axerve.com/payment-page/api/csp-report"
content-security-policy: upgrade-insecure-requests; object-src 'none'; base-uri 'self'; default-src 'self'; script-src 'self' 'nonce-2de81d64-7350-4952-8aaf-9e55afe78192' 'strict-dynamic' 'unsafe-inline' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com fonts.gstatic.com *.cdn-apple.com; font-src 'self' fonts.googleapis.com fonts.gstatic.com *.cdn-apple.com; child-src 'self' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com; img-src 'self' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com *.gstatic.com; connect-src 'self' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com; report-to csp-report
accept-ranges: bytes
etag: W/"22017-1721370704000"
last-modified: Fri, 19 Jul 2024 06:31:44 GMT
content-type: application/json;charset=UTF-8
content-length: 22017
Keep-Alive: timeout=15, max=92
Connection: Keep-Alive
88 kB URL web.axerve.com/payment-page/assets/icons/ico/favicon-axerve.ico
IP
ASN #21451 Banca Sella Holding S.p.A.
File type MS Windows icon resource - 1 icon, -106x-115, 32 bits/pixel
Hash ff1be051e774979eb158ed922c6306b0
6e8d170b9aa309e9c901ce295b3b3152b823f7a6
fdf1abe4fb06f7159972d26f1ed98ecc38783ebd235d5cb5211989bde37206ac
GET /payment-page/assets/icons/ico/favicon-axerve.ico HTTP/1.1
Host: web.axerve.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://web.axerve.com/payment-page/a/4317a7473f2e46d292be0925e5e7e637/b/152fd58aa54773a8dac7ed8b9af456c9ff663d3f85cd0f5950ac0f41a6dc4b2a9f4ea87f-35cd-4618-ac9f-7f6da26c49ffQ59aYEzf30OiTKRWTZ38dMoZbTPxoYdjBQcVwHh9vcFFoZsgAHOdhumjBkgxG90IYJ0CbSEF4io6b8ldwzGMD6kXeM1eO5CCGycIILvASPbRdy2YAHNFt27ZKf2VT0seMvxXgyTqNiJPstkKrdM35VB3F5Sk?e=s
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Date: Mon, 05 Aug 2024 14:26:49 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
reporting-endpoints: csp-report="https://web.axerve.com/payment-page/api/csp-report"
content-security-policy: upgrade-insecure-requests; object-src 'none'; base-uri 'self'; default-src 'self'; script-src 'self' 'nonce-d8e3e0b5-516b-4750-ab3d-74461cc3fe43' 'strict-dynamic' 'unsafe-inline' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com fonts.gstatic.com *.cdn-apple.com; font-src 'self' fonts.googleapis.com fonts.gstatic.com *.cdn-apple.com; child-src 'self' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com; img-src 'self' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com *.gstatic.com; connect-src 'self' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com; report-to csp-report
accept-ranges: bytes
etag: W/"87482-1721370704000"
last-modified: Fri, 19 Jul 2024 06:31:44 GMT
content-type: image/x-icon;charset=UTF-8
content-length: 87482
Keep-Alive: timeout=15, max=91
Connection: Keep-Alive
23 kB URL web.axerve.com/payment-page/assets/icons/svg/icon-14.svg
IP
ASN #21451 Banca Sella Holding S.p.A.
File type SVG Scalable Vector Graphics image
Hash 161dac048f7e4110b89b4b488de7bee5
d378f0fea168c0e59b758a0a1ba9d5233f0c6525
776fe33ee169895900a760b45ad43118ebe3cefc43ac661662ada0e42669b0b9
GET /payment-page/assets/icons/svg/icon-14.svg HTTP/1.1
Host: web.axerve.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://web.axerve.com/payment-page/payment-methods/PAYPAL
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Date: Mon, 05 Aug 2024 14:26:49 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
reporting-endpoints: csp-report="https://web.axerve.com/payment-page/api/csp-report"
content-security-policy: upgrade-insecure-requests; object-src 'none'; base-uri 'self'; default-src 'self'; script-src 'self' 'nonce-def7b9f2-20b5-4230-b0a3-48c88d03992d' 'strict-dynamic' 'unsafe-inline' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com fonts.gstatic.com *.cdn-apple.com; font-src 'self' fonts.googleapis.com fonts.gstatic.com *.cdn-apple.com; child-src 'self' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com; img-src 'self' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com *.gstatic.com; connect-src 'self' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com; report-to csp-report
accept-ranges: bytes
etag: W/"23258-1721370704000"
last-modified: Fri, 19 Jul 2024 06:31:44 GMT
content-type: image/svg+xml;charset=UTF-8
content-length: 23258
Keep-Alive: timeout=15, max=90
Connection: Keep-Alive
52 kB URL web.axerve.com/payment-page/assets/icons/svg/icon-16.svg
IP
ASN #21451 Banca Sella Holding S.p.A.
File type SVG Scalable Vector Graphics image
Hash 778e9e39853bc6981870bdc301d46365
edeedb28c17d5d138bddfeb11e1c0c71888b03d6
49a7463f1f6f85fba493ab7e11f860d5b36a967a8bab27d119fda8feded7f10a
GET /payment-page/assets/icons/svg/icon-16.svg HTTP/1.1
Host: web.axerve.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://web.axerve.com/payment-page/payment-methods/PAYPAL
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Date: Mon, 05 Aug 2024 14:26:49 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
reporting-endpoints: csp-report="https://web.axerve.com/payment-page/api/csp-report"
content-security-policy: upgrade-insecure-requests; object-src 'none'; base-uri 'self'; default-src 'self'; script-src 'self' 'nonce-733c2d6a-d016-4703-9dc5-fc4436ce4074' 'strict-dynamic' 'unsafe-inline' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com fonts.gstatic.com *.cdn-apple.com; font-src 'self' fonts.googleapis.com fonts.gstatic.com *.cdn-apple.com; child-src 'self' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com; img-src 'self' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com *.gstatic.com; connect-src 'self' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com; report-to csp-report
accept-ranges: bytes
etag: W/"51776-1721370704000"
last-modified: Fri, 19 Jul 2024 06:31:44 GMT
content-type: image/svg+xml;charset=UTF-8
content-length: 51776
Keep-Alive: timeout=15, max=89
Connection: Keep-Alive
92 kB URL web.axerve.com/payment-page/assets/fonts/AvertaPE-Bold.woff2
IP
ASN #21451 Banca Sella Holding S.p.A.
File type Web Open Font Format (Version 2), TrueType, length 91492, version 1.0
Hash b56e488ae25baa7f70f558c03c1f9c60
e6155c0d73fa23aea6e54cc02a3a656708ee42b6
5ef8114a8f55dc3c19f71ffa94b78b8c7ed3c07b4c640dfdaf23825f76aaf423
GET /payment-page/assets/fonts/AvertaPE-Bold.woff2 HTTP/1.1
Host: web.axerve.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://web.axerve.com/payment-page/styles-FIGGIBFG.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Date: Mon, 05 Aug 2024 14:26:49 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
reporting-endpoints: csp-report="https://web.axerve.com/payment-page/api/csp-report"
content-security-policy: upgrade-insecure-requests; object-src 'none'; base-uri 'self'; default-src 'self'; script-src 'self' 'nonce-9838621a-a14a-4792-a059-4cf73691c063' 'strict-dynamic' 'unsafe-inline' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com fonts.gstatic.com *.cdn-apple.com; font-src 'self' fonts.googleapis.com fonts.gstatic.com *.cdn-apple.com; child-src 'self' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com; img-src 'self' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com *.gstatic.com; connect-src 'self' *.mastercard.com *.visa.com *.staticv.me *.aexp-static.com *.americanexpress.com *.discover.com *.discovercard.com *.cdn-apple.com *.apple.com *.google.com google.com; report-to csp-report
accept-ranges: bytes
etag: W/"91492-1721370704000"
last-modified: Fri, 19 Jul 2024 06:31:44 GMT
content-type: application/font-woff2;charset=UTF-8
content-length: 91492
Keep-Alive: timeout=15, max=91
Connection: Keep-Alive
999 B URL ecomm.sella.it/pagam/Ax_Acceptance_Return.aspx?PaymentMethod=PAYPAL&acceptanceTransactionLogId=4629268&AlternateID=10002&IsSinglePaymentCall=True&IsLightBox=False&IsOrchestraHPP=False&transaction=a2a1c22fcda242529e0aeacbce0be209&transactionId=a2a1c22fcda242529e0aeacbce0be209
IP
ASN #21451 Banca Sella Holding S.p.A.
File type HTML document, ASCII text, with very long lines (927), with CRLF line terminators
Hash ba643d7dc289bb0188013aebd4666027
8729ada3c18f971ecb46cfe79160551c97ec9c4f
1cbc62c31c7299f7d9131b5ceeaeb3ac5a02a5df57243bd372aa1a1bf0808595
GET /pagam/Ax_Acceptance_Return.aspx?PaymentMethod=PAYPAL&acceptanceTransactionLogId=4629268&AlternateID=10002&IsSinglePaymentCall=True&IsLightBox=False&IsOrchestraHPP=False&transaction=a2a1c22fcda242529e0aeacbce0be209&transactionId=a2a1c22fcda242529e0aeacbce0be209 HTTP/1.1
Host: ecomm.sella.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://web.axerve.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Cache-Control: private
Content-Type: text/html; charset=utf-8
Location: https://biglietti.asroma.com/pay/romapay/complete.html?a=9098186&b=jLMiRiHTfRu_jUGX*jend1RksXhCeXIBzIm3vgro8iTr*Qkems4tFLC*VOudRagy8107bvkvIhFo23DqIaID6ckRRE57EDlPhJgPVnzZzyFG5g29wwWWw6Wyn5t9CyPryzhz6DLh3fW_p2cnFvLlnytHZR7iktJgCd7NlvzyykAXykQrEZkXmAadz3ZzSyHsm91jpnHOOpkcKkIFcg1FQmea8DjUozNKWOD*pb32tehMDZdUJVVWN5hyl646U4Agr2T6QdcJqn0LANazNtsR9rjKN8K7HMVkVAxP64ugQe92IwS8_DdWxvhDdDO3h6MIuTuVponpX9YU*kehdoL4FN0B9AMrISMTaOHb1lQPhQV13iil8G2VnZtuJJlE*RNF*QHfz5VD_SXJuWt85OpnVlIi5hbJ8fLQgHqn9I72DoDiwiqYGYvbpOpS_6H0b_OFLJ1anbta47XeNOLvXjEIvKkSL2X_jm9p_Ld_635iSkkCQXPSZqtBkwsa1ysKYxgzdOyBCrrxprDBb4HGbTqqfqZy7N76yemyiAnPNjEbbIO5wnqR9*0l0vSYn6AcaqhbcW6VRRswbkH3PKIRYpXpeAm*qbFNeiqlYa2FAoT3lY6UfYbOfSyd3aLhU8Hew3Kk3rP*p3ASCAfl8YFqCif9tq9OfhjY_qN9ZhUkyVrjUdbp1XNJBDm2e0AQA5YnrXC2y6u4xPaCyh89r_09mrDAFtM3u_T3Gakfth8E0Tk3u7PrZ2Mthx4xnLqwjhO60UXHJTMIyf2rR4bzf7S5Fgg58dEFTbBGnLG5vFb8nIDfj_E
Server: Microsoft-IIS/8.5
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
p3p: CP="ALL IND"
Date: Mon, 05 Aug 2024 14:26:51 GMT
Content-Length: 999
0 B URL biglietti.asroma.com/pay/romapay/complete.html?a=9098186&b=jLMiRiHTfRu_jUGX*jend1RksXhCeXIBzIm3vgro8iTr*Qkems4tFLC*VOudRagy8107bvkvIhFo23DqIaID6ckRRE57EDlPhJgPVnzZzyFG5g29wwWWw6Wyn5t9CyPryzhz6DLh3fW_p2cnFvLlnytHZR7iktJgCd7NlvzyykAXykQrEZkXmAadz3ZzSyHsm91jpnHOOpkcKkIFcg1FQmea8DjUozNKWOD*pb32tehMDZdUJVVWN5hyl646U4Agr2T6QdcJqn0LANazNtsR9rjKN8K7HMVkVAxP64ugQe92IwS8_DdWxvhDdDO3h6MIuTuVponpX9YU*kehdoL4FN0B9AMrISMTaOHb1lQPhQV13iil8G2VnZtuJJlE*RNF*QHfz5VD_SXJuWt85OpnVlIi5hbJ8fLQgHqn9I72DoDiwiqYGYvbpOpS_6H0b_OFLJ1anbta47XeNOLvXjEIvKkSL2X_jm9p_Ld_635iSkkCQXPSZqtBkwsa1ysKYxgzdOyBCrrxprDBb4HGbTqqfqZy7N76yemyiAnPNjEbbIO5wnqR9*0l0vSYn6AcaqhbcW6VRRswbkH3PKIRYpXpeAm*qbFNeiqlYa2FAoT3lY6UfYbOfSyd3aLhU8Hew3Kk3rP*p3ASCAfl8YFqCif9tq9OfhjY_qN9ZhUkyVrjUdbp1XNJBDm2e0AQA5YnrXC2y6u4xPaCyh89r_09mrDAFtM3u_T3Gakfth8E0Tk3u7PrZ2Mthx4xnLqwjhO60UXHJTMIyf2rR4bzf7S5Fgg58dEFTbBGnLG5vFb8nIDfj_E
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pay/romapay/complete.html?a=9098186&b=jLMiRiHTfRu_jUGX*jend1RksXhCeXIBzIm3vgro8iTr*Qkems4tFLC*VOudRagy8107bvkvIhFo23DqIaID6ckRRE57EDlPhJgPVnzZzyFG5g29wwWWw6Wyn5t9CyPryzhz6DLh3fW_p2cnFvLlnytHZR7iktJgCd7NlvzyykAXykQrEZkXmAadz3ZzSyHsm91jpnHOOpkcKkIFcg1FQmea8DjUozNKWOD*pb32tehMDZdUJVVWN5hyl646U4Agr2T6QdcJqn0LANazNtsR9rjKN8K7HMVkVAxP64ugQe92IwS8_DdWxvhDdDO3h6MIuTuVponpX9YU*kehdoL4FN0B9AMrISMTaOHb1lQPhQV13iil8G2VnZtuJJlE*RNF*QHfz5VD_SXJuWt85OpnVlIi5hbJ8fLQgHqn9I72DoDiwiqYGYvbpOpS_6H0b_OFLJ1anbta47XeNOLvXjEIvKkSL2X_jm9p_Ld_635iSkkCQXPSZqtBkwsa1ysKYxgzdOyBCrrxprDBb4HGbTqqfqZy7N76yemyiAnPNjEbbIO5wnqR9*0l0vSYn6AcaqhbcW6VRRswbkH3PKIRYpXpeAm*qbFNeiqlYa2FAoT3lY6UfYbOfSyd3aLhU8Hew3Kk3rP*p3ASCAfl8YFqCif9tq9OfhjY_qN9ZhUkyVrjUdbp1XNJBDm2e0AQA5YnrXC2y6u4xPaCyh89r_09mrDAFtM3u_T3Gakfth8E0Tk3u7PrZ2Mthx4xnLqwjhO60UXHJTMIyf2rR4bzf7S5Fgg58dEFTbBGnLG5vFb8nIDfj_E HTTP/1.1
Host: biglietti.asroma.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://web.axerve.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Mon, 05 Aug 2024 14:26:52 GMT
server: Apache
location: https://biglietti.asroma.com/tickets/gestpay/complete.html?a=9098186&b=jLMiRiHTfRu_jUGX*jend1RksXhCeXIBzIm3vgro8iTr*Qkems4tFLC*VOudRagy8107bvkvIhFo23DqIaID6ckRRE57EDlPhJgPVnzZzyFG5g29wwWWw6Wyn5t9CyPryzhz6DLh3fW_p2cnFvLlnytHZR7iktJgCd7NlvzyykAXykQrEZkXmAadz3ZzSyHsm91jpnHOOpkcKkIFcg1FQmea8DjUozNKWOD*pb32tehMDZdUJVVWN5hyl646U4Agr2T6QdcJqn0LANazNtsR9rjKN8K7HMVkVAxP64ugQe92IwS8_DdWxvhDdDO3h6MIuTuVponpX9YU*kehdoL4FN0B9AMrISMTaOHb1lQPhQV13iil8G2VnZtuJJlE*RNF*QHfz5VD_SXJuWt85OpnVlIi5hbJ8fLQgHqn9I72DoDiwiqYGYvbpOpS_6H0b_OFLJ1anbta47XeNOLvXjEIvKkSL2X_jm9p_Ld_635iSkkCQXPSZqtBkwsa1ysKYxgzdOyBCrrxprDBb4HGbTqqfqZy7N76yemyiAnPNjEbbIO5wnqR9*0l0vSYn6AcaqhbcW6VRRswbkH3PKIRYpXpeAm*qbFNeiqlYa2FAoT3lY6UfYbOfSyd3aLhU8Hew3Kk3rP*p3ASCAfl8YFqCif9tq9OfhjY_qN9ZhUkyVrjUdbp1XNJBDm2e0AQA5YnrXC2y6u4xPaCyh89r_09mrDAFtM3u_T3Gakfth8E0Tk3u7PrZ2Mthx4xnLqwjhO60UXHJTMIyf2rR4bzf7S5Fgg58dEFTbBGnLG5vFb8nIDfj_E
content-language: en
content-length: 0
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: deny
x-permitted-cross-domain-policies: master-only
content-type: text/html
set-cookie: nlbi_2063869=iSvYInbUsEhpVFlqlOn80gAAAADejPaUbAjNFA4CfwbN5lrv; path=/; Domain=.asroma.com
visid_incap_2063869=cc5B4e7+S0m4zJP2yQZpsSvhsGYAAAAAQUIPAAAAAADve1E8U1oXCtvdMx3KYtYc; expires=Tue, 05 Aug 2025 00:56:08 GMT; HttpOnly; path=/; Domain=.asroma.com
incap_ses_633_2063869=00+TD0+bCDo8moAIRt7ICCzhsGYAAAAAcjtysQMUIRnoTX3NLplBFw==; path=/; Domain=.asroma.com
x-cdn: Imperva
x-iinfo: 4-7301633-7301635 nNNY RT(1722868011921 28) q(0 0 0 0) r(0 1) U11
X-Firefox-Spdy: h2
0 B URL biglietti.asroma.com/tickets/gestpay/complete.html?a=9098186&b=jLMiRiHTfRu_jUGX*jend1RksXhCeXIBzIm3vgro8iTr*Qkems4tFLC*VOudRagy8107bvkvIhFo23DqIaID6ckRRE57EDlPhJgPVnzZzyFG5g29wwWWw6Wyn5t9CyPryzhz6DLh3fW_p2cnFvLlnytHZR7iktJgCd7NlvzyykAXykQrEZkXmAadz3ZzSyHsm91jpnHOOpkcKkIFcg1FQmea8DjUozNKWOD*pb32tehMDZdUJVVWN5hyl646U4Agr2T6QdcJqn0LANazNtsR9rjKN8K7HMVkVAxP64ugQe92IwS8_DdWxvhDdDO3h6MIuTuVponpX9YU*kehdoL4FN0B9AMrISMTaOHb1lQPhQV13iil8G2VnZtuJJlE*RNF*QHfz5VD_SXJuWt85OpnVlIi5hbJ8fLQgHqn9I72DoDiwiqYGYvbpOpS_6H0b_OFLJ1anbta47XeNOLvXjEIvKkSL2X_jm9p_Ld_635iSkkCQXPSZqtBkwsa1ysKYxgzdOyBCrrxprDBb4HGbTqqfqZy7N76yemyiAnPNjEbbIO5wnqR9*0l0vSYn6AcaqhbcW6VRRswbkH3PKIRYpXpeAm*qbFNeiqlYa2FAoT3lY6UfYbOfSyd3aLhU8Hew3Kk3rP*p3ASCAfl8YFqCif9tq9OfhjY_qN9ZhUkyVrjUdbp1XNJBDm2e0AQA5YnrXC2y6u4xPaCyh89r_09mrDAFtM3u_T3Gakfth8E0Tk3u7PrZ2Mthx4xnLqwjhO60UXHJTMIyf2rR4bzf7S5Fgg58dEFTbBGnLG5vFb8nIDfj_E
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tickets/gestpay/complete.html?a=9098186&b=jLMiRiHTfRu_jUGX*jend1RksXhCeXIBzIm3vgro8iTr*Qkems4tFLC*VOudRagy8107bvkvIhFo23DqIaID6ckRRE57EDlPhJgPVnzZzyFG5g29wwWWw6Wyn5t9CyPryzhz6DLh3fW_p2cnFvLlnytHZR7iktJgCd7NlvzyykAXykQrEZkXmAadz3ZzSyHsm91jpnHOOpkcKkIFcg1FQmea8DjUozNKWOD*pb32tehMDZdUJVVWN5hyl646U4Agr2T6QdcJqn0LANazNtsR9rjKN8K7HMVkVAxP64ugQe92IwS8_DdWxvhDdDO3h6MIuTuVponpX9YU*kehdoL4FN0B9AMrISMTaOHb1lQPhQV13iil8G2VnZtuJJlE*RNF*QHfz5VD_SXJuWt85OpnVlIi5hbJ8fLQgHqn9I72DoDiwiqYGYvbpOpS_6H0b_OFLJ1anbta47XeNOLvXjEIvKkSL2X_jm9p_Ld_635iSkkCQXPSZqtBkwsa1ysKYxgzdOyBCrrxprDBb4HGbTqqfqZy7N76yemyiAnPNjEbbIO5wnqR9*0l0vSYn6AcaqhbcW6VRRswbkH3PKIRYpXpeAm*qbFNeiqlYa2FAoT3lY6UfYbOfSyd3aLhU8Hew3Kk3rP*p3ASCAfl8YFqCif9tq9OfhjY_qN9ZhUkyVrjUdbp1XNJBDm2e0AQA5YnrXC2y6u4xPaCyh89r_09mrDAFtM3u_T3Gakfth8E0Tk3u7PrZ2Mthx4xnLqwjhO60UXHJTMIyf2rR4bzf7S5Fgg58dEFTbBGnLG5vFb8nIDfj_E HTTP/1.1
Host: biglietti.asroma.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://web.axerve.com/
DNT: 1
Connection: keep-alive
Cookie: nlbi_2063869=iSvYInbUsEhpVFlqlOn80gAAAADejPaUbAjNFA4CfwbN5lrv; visid_incap_2063869=cc5B4e7+S0m4zJP2yQZpsSvhsGYAAAAAQUIPAAAAAADve1E8U1oXCtvdMx3KYtYc; incap_ses_633_2063869=00+TD0+bCDo8moAIRt7ICCzhsGYAAAAAcjtysQMUIRnoTX3NLplBFw==
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
date: Mon, 05 Aug 2024 14:26:52 GMT
server: Apache
location: https://biglietti.asroma.com/tickets/confirmation?paymentRef=66b0de88319f0d45e3e3bf72
content-language: en
content-length: 0
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: deny
x-permitted-cross-domain-policies: master-only
set-cookie: JSESSIONID=MTZjMjlhM2ItZGMzZS00MTE0LThjMzgtYWUwNTVlM2FiNThh; Path=/tickets/; Secure; HttpOnly;Secure;Secure
content-type: text/html
x-cdn: Imperva
x-iinfo: 4-7301633-7301635 pNNy RT(1722868011921 176) q(0 0 0 -1) r(34 34) U11
X-Firefox-Spdy: h2
0 B URL biglietti.asroma.com/tickets/confirmation?paymentRef=66b0de88319f0d45e3e3bf72
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tickets/confirmation?paymentRef=66b0de88319f0d45e3e3bf72 HTTP/1.1
Host: biglietti.asroma.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://web.axerve.com/
DNT: 1
Connection: keep-alive
Cookie: JSESSIONID=MTZjMjlhM2ItZGMzZS00MTE0LThjMzgtYWUwNTVlM2FiNThh; nlbi_2063869=iSvYInbUsEhpVFlqlOn80gAAAADejPaUbAjNFA4CfwbN5lrv; visid_incap_2063869=cc5B4e7+S0m4zJP2yQZpsSvhsGYAAAAAQUIPAAAAAADve1E8U1oXCtvdMx3KYtYc; incap_ses_633_2063869=00+TD0+bCDo8moAIRt7ICCzhsGYAAAAAcjtysQMUIRnoTX3NLplBFw==
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
date: Mon, 05 Aug 2024 14:26:55 GMT
server: Apache
location: https://biglietti.asroma.com/tickets/confirmation?paymentRef=66b0de88319f0d45e3e3bf72&lang=it
content-language: en
content-length: 0
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: deny
x-permitted-cross-domain-policies: master-only
x-cdn: Imperva
x-iinfo: 4-7301633-7301635 pNNy RT(1722868011921 3543) q(0 0 0 -1) r(1 1) U11
X-Firefox-Spdy: h2
23 kB URL cdn.jsdelivr.net/npm/bootstrap@4.1.3/dist/css/bootstrap.min.css
IP
File type ASCII text, with very long lines (65324)
Hash 04aca1f4cd3ec3c05a75a879f3be75a3
675fcf28f9fbf37139d3b2c0b676f96f601a4203
7928b5ab63c6e89ee0ee26f5ef201a58c72baf91abb688580a1aa26eb57b3c11
GET /npm/bootstrap@4.1.3/dist/css/bootstrap.min.css HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://biglietti.asroma.com
DNT: 1
Connection: keep-alive
Referer: https://biglietti.asroma.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 05 Aug 2024 14:26:57 GMT
content-type: text/css; charset=utf-8
content-length: 23347
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-jsd-version: 4.1.3
x-jsd-version-type: version
etag: W/"22688-Z1/PKPn783E507LAtnb5b2AaQgM"
content-encoding: br
x-served-by: cache-fra-eddf8230071-FRA, cache-lga21965-LGA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 2695173
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1LX2X2gud%2BaVrCSG%2FcrNU1zqwCRsx%2FzYFMrRZ%2BZNAFzKZqwIr%2F1Y7QSFznlyWW41rcX2jqPogPjvupQY1qCQBrk0OPgrI2DdYs6ubJHKgi79kFXkMUnNBLfQORC47YtEqMA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8ae777124bb71c02-OSL
X-Firefox-Spdy: h2
1.7 kB URL cdn.jsdelivr.net/npm/bootstrap@4.1.3/dist/css/bootstrap-reboot.min.css
IP
File type ASCII text, with very long lines (3638)
Hash 5469e5527b70efcd51fb0deb1e213c63
e106d138af12e0006eb148d02112e1f7cd2609bd
c6894294a4d8269c2d3fbdaac7e99840eff52c0904b1181306bed515f5ac04dc
GET /npm/bootstrap@4.1.3/dist/css/bootstrap-reboot.min.css HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://biglietti.asroma.com
DNT: 1
Connection: keep-alive
Referer: https://biglietti.asroma.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Aug 2024 14:26:57 GMT
content-type: text/css; charset=utf-8
content-length: 1682
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-jsd-version: 4.1.3
x-jsd-version-type: version
etag: W/"fb3-4QbROK8S4ABusUjQIRLh980mCb0"
content-encoding: br
x-served-by: cache-fra-etou8220049-FRA, cache-lga21971-LGA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 1570300
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=t4%2FcfHq54a2BkYZaPpXEmkfzrE969I2VkdWXY1qkrvumBJStqK%2FIBFCSqSvVOAo%2BUdLsTw4B3XwjX5ZX%2FMlmSd8AuHjRnFCAePGsAl%2BDtUoCiSuJwmx%2BzeONhPnxbk%2Fxn6w%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8ae777124bbc1c02-OSL
X-Firefox-Spdy: h2
4.0 kB URL cdn.jsdelivr.net/npm/bootstrap@4.1.3/dist/css/bootstrap-grid.min.css
IP
File type ASCII text, with very long lines (28709)
Hash 71671e5000bc7347d6080c92b0bfeeb4
0560593b3d9210132122afec4bfada6c83d809bc
be5fb4a7f676f11715bc2f9ca1f52221e62eb0674e73809793fb5aaa0436fd75
GET /npm/bootstrap@4.1.3/dist/css/bootstrap-grid.min.css HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://biglietti.asroma.com
DNT: 1
Connection: keep-alive
Referer: https://biglietti.asroma.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Aug 2024 14:26:57 GMT
content-type: text/css; charset=utf-8
content-length: 4041
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-jsd-version: 4.1.3
x-jsd-version-type: version
etag: W/"7131-BWBZOz2SEBMhIq/sS/rabIPYCbw"
content-encoding: br
x-served-by: cache-fra-etou8220047-FRA, cache-lga21954-LGA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 2693487
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BE6v7AtF3u%2BQ%2FXIJyBw5WP1ekS%2BjoyE2J%2BXE1oQU15HdM0sckTFg%2BAtT6r%2Fvp7M%2BgJDdIIEqECkx%2BPxzMWsRKmTZ3qBYSDyD1YaxhbN4NGvELjlA%2BiBzYiMera98eglVQHE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8ae777124bbb1c02-OSL
X-Firefox-Spdy: h2
8.7 kB URL biglietti.asroma.com/tickets/js/fattura.js
IP
Hash 7617fb17cd4321ae1b921d7bf9bfd69f
75aebc722e6de2d23a87ca7e1d32f9ad7c26a2bc
6c10ddb76c7bc0c5ad914e10f36e2d9ac702651f9f52aec20b69b3d7dd2e7ee0
GET /tickets/js/fattura.js HTTP/1.1
Host: biglietti.asroma.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://biglietti.asroma.com/tickets/confirmation?paymentRef=66b0de88319f0d45e3e3bf72&lang=it
Cookie: JSESSIONID=MTZjMjlhM2ItZGMzZS00MTE0LThjMzgtYWUwNTVlM2FiNThh; nlbi_2063869=iSvYInbUsEhpVFlqlOn80gAAAADejPaUbAjNFA4CfwbN5lrv; visid_incap_2063869=cc5B4e7+S0m4zJP2yQZpsSvhsGYAAAAAQUIPAAAAAADve1E8U1oXCtvdMx3KYtYc; incap_ses_633_2063869=00+TD0+bCDo8moAIRt7ICCzhsGYAAAAAcjtysQMUIRnoTX3NLplBFw==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
etag: "ced02e11"
last-modified: Fri, 02 Aug 2024 10:48:43 GMT
content-type: application/javascript
content-length: 8733
content-encoding: gzip
cache-control: max-age=0
date: Mon, 05 Aug 2024 14:26:56 GMT
x-cdn: Imperva
x-iinfo: 4-7301633-0 0CNN RT(1722868011921 4882) q(0 -1 -1 -1) r(0 -1)
X-Firefox-Spdy: h2
9.7 kB URL fonts.googleapis.com/css?family=Roboto:300,400,500
IP
File type gzip compressed data, max compression
Hash 68bb3e33c979063468451c60c1dd29e8
54fcacfd97daaecad15348a0b382f1f04a9130d7
3528dd53df5d0c10e324a5c83599bb984903d30dd46866e67cdde7f7a51d0572
GET /css?family=Roboto:300,400,500 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://web.axerve.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 05 Aug 2024 14:26:46 GMT
date: Mon, 05 Aug 2024 14:26:46 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
68 kB URL cdn.jsdelivr.net/npm/moment@2.22.2/min/moment-with-locales.min.js
IP
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Hash a79a8710a3517e497846aca9179f8d81
a84840cafc097fbcfaab6c49d5fcfaa598e0ec6d
56b9ad34701d1b38cdb1436d5981b9e71c44f710d3cf8805eb7c7fa6b297287d
GET /npm/moment@2.22.2/min/moment-with-locales.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://biglietti.asroma.com
DNT: 1
Connection: keep-alive
Referer: https://biglietti.asroma.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Aug 2024 14:26:57 GMT
content-type: application/javascript; charset=utf-8
content-length: 67950
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-jsd-version: 2.22.2
x-jsd-version-type: version
etag: W/"4fc01-qEhAyvwJf7z6q2xJ1fz6pZjg7G0"
content-encoding: gzip
x-served-by: cache-fra-etou8220116-FRA, cache-lga21966-LGA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 4586777
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3cFFChJ0dWMdGUZrf2LxD8OWIFerFdLlfBkithpA3R6JY0zs4qSyGf369%2FCbW4xrp5%2F6z%2BSiCEtEKByHRVAFVLumEZuecTkYAREymEoSQzRoAhR3UNa%2B%2FjfnsCczi1%2BZO74%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8ae777125bcc1c02-OSL
X-Firefox-Spdy: h2
3.4 kB URL biglietti.asroma.com/tickets/js/datalayer.js
IP
File type JavaScript source, Unicode text, UTF-8 text
Hash c892ade23a79bebbe778b3ee5e4bc724
4244614b80c9032b0f5153cd33d39e25b91b0fee
a251007c77f65e3f1bccd0d10753169026219ef4c9426765cc347ea3006f5c04
GET /tickets/js/datalayer.js HTTP/1.1
Host: biglietti.asroma.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://biglietti.asroma.com/tickets/confirmation?paymentRef=66b0de88319f0d45e3e3bf72&lang=it
Cookie: JSESSIONID=MTZjMjlhM2ItZGMzZS00MTE0LThjMzgtYWUwNTVlM2FiNThh; nlbi_2063869=iSvYInbUsEhpVFlqlOn80gAAAADejPaUbAjNFA4CfwbN5lrv; visid_incap_2063869=cc5B4e7+S0m4zJP2yQZpsSvhsGYAAAAAQUIPAAAAAADve1E8U1oXCtvdMx3KYtYc; incap_ses_633_2063869=00+TD0+bCDo8moAIRt7ICCzhsGYAAAAAcjtysQMUIRnoTX3NLplBFw==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
etag: "f2686880"
last-modified: Fri, 02 Aug 2024 10:48:43 GMT
content-type: application/javascript
content-length: 3422
content-encoding: gzip
cache-control: max-age=0
date: Mon, 05 Aug 2024 14:26:56 GMT
x-cdn: Imperva
x-iinfo: 4-7301633-7301329 2VNN RT(1722868011921 4770) q(0 0 0 -1) r(2 2)
X-Firefox-Spdy: h2
2.2 kB URL cdn.jsdelivr.net/npm/select2@4.0.5/dist/css/select2.min.css
IP
File type ASCII text, with very long lines (15195)
Hash d44571114a90b9226cd654d3c7d9442c
83b595db66fbf173436fbca475b8b695ef48eb8e
c493991dfa712d1fee861d41c18152e5f8663807484506a23ae97917f6fbbf7b
GET /npm/select2@4.0.5/dist/css/select2.min.css HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://biglietti.asroma.com
DNT: 1
Connection: keep-alive
Referer: https://biglietti.asroma.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 05 Aug 2024 14:26:57 GMT
content-type: text/css; charset=utf-8
content-length: 2239
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-jsd-version: 4.0.5
x-jsd-version-type: version
etag: W/"3b5c-g7WV22b78XNDb7ykdbi2le9I644"
content-encoding: br
x-served-by: cache-fra-eddf8230112-FRA, cache-lga21958-LGA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 1630860
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GfVeEhshVJow0nkv58aqYJLIcKkhewFJZIWoljGkWCJGSwogHZ2huLOuxlVAxXNW%2FAooWkSv%2FjvoogMvvLuNrqEgw4AF3ce3WK48BB4hMo0iSUeriOP9GImbRx9UmGrAACc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8ae77712ac1d1c02-OSL
X-Firefox-Spdy: h2
30 kB URL cdn.jsdelivr.net/npm/jquery@3.3.1/dist/jquery.min.js
IP
File type JavaScript source, ASCII text, with very long lines (65451)
Hash a09e13ee94d51c524b7e2a728c7d4039
0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae
160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef
GET /npm/jquery@3.3.1/dist/jquery.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://biglietti.asroma.com
DNT: 1
Connection: keep-alive
Referer: https://biglietti.asroma.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Aug 2024 14:26:57 GMT
content-type: application/javascript; charset=utf-8
content-length: 30349
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-jsd-version: 3.3.1
x-jsd-version-type: version
etag: W/"1538f-DcMttKqcXwPzs4xH2IPb1P7ROq4"
content-encoding: gzip
x-served-by: cache-fra-eddf8230090-FRA, cache-lga21970-LGA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 4590007
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=C07LQsZZ%2BfqrU3rdrRW2WDHT58rBOpI%2BjGS4m%2FOFdvEOaI6rN1tZNLfGJ%2BUFHVEyxMacFzJQd0aUAC1V6G8JzByZ4LPzOxwrsb7Aopetzc%2FBd8XNq5WbZ44EHx4fntR9Hzg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8ae77712ac261c02-OSL
X-Firefox-Spdy: h2
5.3 kB URL biglietti.asroma.com/tickets/css/sharonMobile.css
IP
Hash 240c4ad4b5e38edc71b9fdc57827ed8e
40b4cdd74a00cceabfcefe3ea310a994b5d73a6e
aa00cce55949699cb53d5c99c556404f57d8ff3c714fa5dc1f8adcda1dc275c5
GET /tickets/css/sharonMobile.css HTTP/1.1
Host: biglietti.asroma.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://biglietti.asroma.com/tickets/confirmation?paymentRef=66b0de88319f0d45e3e3bf72&lang=it
Cookie: JSESSIONID=MTZjMjlhM2ItZGMzZS00MTE0LThjMzgtYWUwNTVlM2FiNThh; nlbi_2063869=iSvYInbUsEhpVFlqlOn80gAAAADejPaUbAjNFA4CfwbN5lrv; visid_incap_2063869=cc5B4e7+S0m4zJP2yQZpsSvhsGYAAAAAQUIPAAAAAADve1E8U1oXCtvdMx3KYtYc; incap_ses_633_2063869=00+TD0+bCDo8moAIRt7ICCzhsGYAAAAAcjtysQMUIRnoTX3NLplBFw==
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
etag: "34557a58"
last-modified: Fri, 02 Aug 2024 10:48:43 GMT
content-type: text/css
content-length: 5296
content-encoding: gzip
cache-control: max-age=0
date: Mon, 05 Aug 2024 14:26:56 GMT
x-cdn: Imperva
x-iinfo: 4-7301633-7301307 2VNN RT(1722868011921 4773) q(0 0 0 -1) r(2 2)
X-Firefox-Spdy: h2
72 kB URL cdn.jsdelivr.net/npm/jquery-ui-dist@1.12.1/jquery-ui.min.js
IP
File type JavaScript source, ASCII text, with very long lines (32074)
Hash c15b1008dec3c8967ea657a7bb4baaec
78489e580adaef931e6e5b131dab556c397e4a1a
28ce75d953678c4942df47a11707a15e3c756021cf89090e3e6aa7ad6b6971c3
GET /npm/jquery-ui-dist@1.12.1/jquery-ui.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://biglietti.asroma.com
DNT: 1
Connection: keep-alive
Referer: https://biglietti.asroma.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Aug 2024 14:26:57 GMT
content-type: application/javascript; charset=utf-8
content-length: 71465
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-jsd-version: 1.12.1
x-jsd-version-type: version
etag: W/"3dee5-eEieWAra75MeblsTHatVbDl+Sho"
content-encoding: br
x-served-by: cache-fra-eddf8230073-FRA, cache-lga21980-LGA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 4579070
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8yMjjjoI%2BRfULRbK%2FW0QfMtVfdxmRblYrbFc7AS2J3GDs1pk4d7R8uD41hke1wMIppq68W3avuZqlb5bqWaiymbypxREas9WvrVsPzM%2FXweS9xBEVeMfw5wwLrBkrf%2BSQZQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8ae777130c781c02-OSL
X-Firefox-Spdy: h2
32 kB URL biglietti.asroma.com/tickets/css/override.css
IP
Hash d4beece6fce974ac34d496dd490e7a8c
bda3e565d28dc51275530d0c427f8e17e3d3db1e
35772928be4cc7f02758221921b5887fe8e5de6b73347c7f18df0639357ccbf9
GET /tickets/css/override.css HTTP/1.1
Host: biglietti.asroma.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://biglietti.asroma.com/tickets/confirmation?paymentRef=66b0de88319f0d45e3e3bf72&lang=it
Cookie: JSESSIONID=MTZjMjlhM2ItZGMzZS00MTE0LThjMzgtYWUwNTVlM2FiNThh; nlbi_2063869=iSvYInbUsEhpVFlqlOn80gAAAADejPaUbAjNFA4CfwbN5lrv; visid_incap_2063869=cc5B4e7+S0m4zJP2yQZpsSvhsGYAAAAAQUIPAAAAAADve1E8U1oXCtvdMx3KYtYc; incap_ses_633_2063869=00+TD0+bCDo8moAIRt7ICCzhsGYAAAAAcjtysQMUIRnoTX3NLplBFw==
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
etag: "69b94395"
last-modified: Fri, 02 Aug 2024 10:48:43 GMT
content-type: text/css
content-length: 31801
content-encoding: gzip
cache-control: max-age=0
date: Mon, 05 Aug 2024 14:26:56 GMT
x-cdn: Imperva
x-iinfo: 4-7301633-7294189 2VNN RT(1722868011921 4816) q(0 0 0 -1) r(1 1)
X-Firefox-Spdy: h2
22 kB URL cdn.jsdelivr.net/npm/bootstrap@4.1.3/dist/js/bootstrap.bundle.min.js
IP
File type JavaScript source, ASCII text, with very long lines (65297)
Hash ef58fee438cd2da2c3b33ff6f1cfeebf
41a4836fc0253324e7e583905f47ba7194bac91d
13f578716138aaf01e3b930e863b46b6a0f33e77513b52c193c949fcf47b080e
GET /npm/bootstrap@4.1.3/dist/js/bootstrap.bundle.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://biglietti.asroma.com
DNT: 1
Connection: keep-alive
Referer: https://biglietti.asroma.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Aug 2024 14:26:57 GMT
content-type: application/javascript; charset=utf-8
content-length: 21798
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-jsd-version: 4.1.3
x-jsd-version-type: version
etag: W/"11536-QaSDb8AlMyTn5YOQX0e6cZS6yR0"
content-encoding: br
x-served-by: cache-fra-eddf8230020-FRA, cache-lga21968-LGA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 195950
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KaN3jOun8nGMuU0LFYUcR2cZWA4rVwLbJj%2FZJhNOBJBS9biumSJu%2FgXIUwuGJ1DweXagkxvmH%2F7lQh%2Fbsj68ZjUq7G8QPHmbAmVpQbcaxIlnyst26xWm%2Bq68rbtXhIowcfs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8ae777131c7d1c02-OSL
X-Firefox-Spdy: h2
198 B URL biglietti.asroma.com/tickets/css/override-bootstrap.css
IP
Hash e5581e67d738ea206f789521490d1abc
cdbf5464e04cad1bceef2edff6fef44a5150d391
ea94b4963e06e040d23295b8a536f40a0eb20e104c7ceb5ca16c1878a5994b82
GET /tickets/css/override-bootstrap.css HTTP/1.1
Host: biglietti.asroma.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://biglietti.asroma.com/tickets/confirmation?paymentRef=66b0de88319f0d45e3e3bf72&lang=it
Cookie: JSESSIONID=MTZjMjlhM2ItZGMzZS00MTE0LThjMzgtYWUwNTVlM2FiNThh; nlbi_2063869=iSvYInbUsEhpVFlqlOn80gAAAADejPaUbAjNFA4CfwbN5lrv; visid_incap_2063869=cc5B4e7+S0m4zJP2yQZpsSvhsGYAAAAAQUIPAAAAAADve1E8U1oXCtvdMx3KYtYc; incap_ses_633_2063869=00+TD0+bCDo8moAIRt7ICCzhsGYAAAAAcjtysQMUIRnoTX3NLplBFw==
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
etag: "8ef50890"
last-modified: Fri, 02 Aug 2024 10:48:43 GMT
content-type: text/css
content-length: 198
content-encoding: gzip
cache-control: max-age=0
date: Mon, 05 Aug 2024 14:26:56 GMT
x-cdn: Imperva
x-iinfo: 4-7301633-7299023 2VNN RT(1722868011921 4821) q(0 0 0 -1) r(1 1)
X-Firefox-Spdy: h2
20 kB URL cdn.jsdelivr.net/npm/select2@4.0.5/dist/js/select2.min.js
IP
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (64217), with no line terminators
Hash 26abb17f4b7260ea8c912313e2c80fef
42fe805a338908436c5c326dbf7e9aec0c8484c7
140d78b4123cbfeff506d707f57b49a5c35b0a898112975ac14640e813d7455c
GET /npm/select2@4.0.5/dist/js/select2.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://biglietti.asroma.com
DNT: 1
Connection: keep-alive
Referer: https://biglietti.asroma.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Aug 2024 14:26:57 GMT
content-type: application/javascript; charset=utf-8
content-length: 20057
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-jsd-version: 4.0.5
x-jsd-version-type: version
etag: W/"1042e-Qv6AWjOJCENsXDJtv36a7AyEhMc"
content-encoding: br
x-served-by: cache-fra-etou8220053-FRA, cache-lga21923-LGA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 1570300
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4WLooDoHu9We7hNSmhRCdifAX83EL5xrGuOtO6TFvqgAquKVnuce4Yqgxsb24N8Qc5Afj34WqAUS2MeJKE3AotatPoRfyC4%2FSpRAy%2Bai%2BXHRmpZ1d848TOwjyT4sObpNKxQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8ae777131c911c02-OSL
X-Firefox-Spdy: h2
446 B URL biglietti.asroma.com/tickets/images/paidwith-check.svg
IP
File type SVG Scalable Vector Graphics image
Hash 10794f5d7c37dc1001a2b5c294adf541
74779afddebaa8ffbb2831afaeffcd20d2611108
a02b9fe93bac8a2792c4e1c366142d52448e64ad8626cebae07270316e348b9c
GET /tickets/images/paidwith-check.svg HTTP/1.1
Host: biglietti.asroma.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://biglietti.asroma.com/tickets/confirmation?paymentRef=66b0de88319f0d45e3e3bf72&lang=it
Cookie: JSESSIONID=MTZjMjlhM2ItZGMzZS00MTE0LThjMzgtYWUwNTVlM2FiNThh; nlbi_2063869=iSvYInbUsEhpVFlqlOn80gAAAADejPaUbAjNFA4CfwbN5lrv; visid_incap_2063869=cc5B4e7+S0m4zJP2yQZpsSvhsGYAAAAAQUIPAAAAAADve1E8U1oXCtvdMx3KYtYc; incap_ses_633_2063869=00+TD0+bCDo8moAIRt7ICCzhsGYAAAAAcjtysQMUIRnoTX3NLplBFw==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
etag: "119683da"
last-modified: Fri, 02 Aug 2024 10:48:43 GMT
content-type: image/svg+xml
content-length: 446
content-encoding: gzip
cache-control: max-age=0
date: Mon, 05 Aug 2024 14:26:56 GMT
x-cdn: Imperva
x-iinfo: 4-7301633-0 0CNN RT(1722868011921 4963) q(0 -1 -1 -1) r(0 -1)
X-Firefox-Spdy: h2
11 kB URL cdn.jsdelivr.net/npm/bootstrap-datepicker@1.8.0/dist/js/bootstrap-datepicker.min.js
IP
File type JavaScript source, ASCII text, with very long lines (32084)
Hash 241a419bd65535b6569f46797779c43e
fedbca6ccfe569995315c4f599c981cd8f6a503e
b56e4bcc40bb423846d02880bf196c78c4ecdaa252eeedc344f6ae0e3149df3a
GET /npm/bootstrap-datepicker@1.8.0/dist/js/bootstrap-datepicker.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://biglietti.asroma.com
DNT: 1
Connection: keep-alive
Referer: https://biglietti.asroma.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Aug 2024 14:26:57 GMT
content-type: application/javascript; charset=utf-8
content-length: 10804
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-jsd-version: 1.8.0
x-jsd-version-type: version
etag: W/"833f-/tvKbM/laZlTFcT1mcmBzY9qUD4"
content-encoding: br
x-served-by: cache-fra-etou8220120-FRA, cache-lga21962-LGA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 286337
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9H%2BpnI%2BHdfJbX7988Pnvh5BTNjREBIAwRDxVZenTQg7vhihQSke9ZieVH476I0hyo%2FOJymEAR7Ojgfjf%2F1XwV19Eln4QxwrLUUl2V5b7Ln2KN%2Biwh9AkJYE7ciPx%2FawJXgU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8ae777131c961c02-OSL
X-Firefox-Spdy: h2
304 kB URL biglietti.asroma.com/tickets/images/banner-tour-it.png
IP
File type PNG image data, 830 x 250, 8-bit/color RGB, non-interlaced
Size 304 kB (304335 bytes)
Hash 8670122cdf7c124a36956be54a46dde1
0cd4bcc93efc0d68fe5ea6bf1a044762bd423084
175be12341fabf5b6af369198212977327073d5d3870611863f8b0adc534a301
GET /tickets/images/banner-tour-it.png HTTP/1.1
Host: biglietti.asroma.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://biglietti.asroma.com/tickets/confirmation?paymentRef=66b0de88319f0d45e3e3bf72&lang=it
Cookie: JSESSIONID=MTZjMjlhM2ItZGMzZS00MTE0LThjMzgtYWUwNTVlM2FiNThh; nlbi_2063869=iSvYInbUsEhpVFlqlOn80gAAAADejPaUbAjNFA4CfwbN5lrv; visid_incap_2063869=cc5B4e7+S0m4zJP2yQZpsSvhsGYAAAAAQUIPAAAAAADve1E8U1oXCtvdMx3KYtYc; incap_ses_633_2063869=00+TD0+bCDo8moAIRt7ICCzhsGYAAAAAcjtysQMUIRnoTX3NLplBFw==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
etag: "e2519548"
last-modified: Fri, 02 Aug 2024 10:48:43 GMT
content-type: image/png
content-length: 304335
cache-control: max-age=0
date: Mon, 05 Aug 2024 14:26:56 GMT
x-cdn: Imperva
x-iinfo: 4-7301633-0 0CNN RT(1722868011921 4965) q(0 -1 -1 -1) r(0 -1)
X-Firefox-Spdy: h2
8.1 kB URL cdn.jsdelivr.net/npm/jquery-validation@1.17.0/dist/jquery.validate.min.js
IP
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (23122)
Hash 93c1dd8416ac2af1850652d5b620a142
6a76e4c7db479053350580469aa010febfdcacd0
17a879e50c3ab3078afaded288e257fb66e94806b76ff7e796b54226f9848f50
GET /npm/jquery-validation@1.17.0/dist/jquery.validate.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://biglietti.asroma.com
DNT: 1
Connection: keep-alive
Referer: https://biglietti.asroma.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Aug 2024 14:26:57 GMT
content-type: application/javascript; charset=utf-8
content-length: 8057
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-jsd-version: 1.17.0
x-jsd-version-type: version
etag: W/"5add-anbkx9tHkFM1BYBGmqAQ/r/crNA"
content-encoding: br
x-served-by: cache-fra-eddf8230098-FRA, cache-lga21955-LGA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 2695170
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DPgUvay%2F8BcI34W2TSU05whFeWWKRJp114XGH%2FXySyP7y6PMIxz1E0tBYvkQ3HN4UulKnyrYV0i6sSKHFB0azvIvxX8PnuIDQZ10iUXZKxvLWPQN4dsyVjLfhmbX0nztBMk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8ae777133cce1c02-OSL
X-Firefox-Spdy: h2
1.8 kB URL biglietti.asroma.com/tickets/js/device/current-device.min.js
IP
File type JavaScript source, ASCII text, with very long lines (5517)
Hash 1a576a7b802f3c1ea4075633b899564c
0c6fee471f92b1a81612ef2c593afaa2d2d23d4d
71dc3578244148add4adcdfee6a3d56233eca67d894ad24dbbe9dcb9b9a2ca3b
GET /tickets/js/device/current-device.min.js HTTP/1.1
Host: biglietti.asroma.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://biglietti.asroma.com/tickets/confirmation?paymentRef=66b0de88319f0d45e3e3bf72&lang=it
Cookie: JSESSIONID=MTZjMjlhM2ItZGMzZS00MTE0LThjMzgtYWUwNTVlM2FiNThh; nlbi_2063869=iSvYInbUsEhpVFlqlOn80gAAAADejPaUbAjNFA4CfwbN5lrv; visid_incap_2063869=cc5B4e7+S0m4zJP2yQZpsSvhsGYAAAAAQUIPAAAAAADve1E8U1oXCtvdMx3KYtYc; incap_ses_633_2063869=00+TD0+bCDo8moAIRt7ICCzhsGYAAAAAcjtysQMUIRnoTX3NLplBFw==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
etag: "8bd0e0ae"
last-modified: Fri, 02 Aug 2024 10:48:43 GMT
content-type: application/javascript
content-length: 1844
content-encoding: gzip
cache-control: max-age=0
date: Mon, 05 Aug 2024 14:26:56 GMT
x-cdn: Imperva
x-iinfo: 4-7301633-7301336 2VNN RT(1722868011921 4877) q(0 0 0 -1) r(2 2)
X-Firefox-Spdy: h2
5.9 kB URL cdn.jsdelivr.net/npm/jquery-validation@1.17.0/dist/additional-methods.min.js
IP
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (18268)
Hash 8463bb62911dec6fc8be54535c794a77
908677621b793fc493a9d780010e2d4bb42c426a
614c00f1a5ecdfdd4ad2d478c757ca5bce0a62840ef778bdb5c4d12d180d4fd9
GET /npm/jquery-validation@1.17.0/dist/additional-methods.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://biglietti.asroma.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Aug 2024 14:26:57 GMT
content-type: application/javascript; charset=utf-8
content-length: 5949
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-jsd-version: 1.17.0
x-jsd-version-type: version
etag: W/"495c-kIZ3Yht5P8STqdeAAQ4tS7QsQmo"
content-encoding: br
x-served-by: cache-fra-etou8220122-FRA, cache-lga21952-LGA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 2695038
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7PNm18%2BFHVE2ZCVfRqOzcG8VeteC69RAXCdwfW6sSh%2FpFixJpmeusQr1A0qaUBQvkBe7dltOtCaLARhe3I30Vi9M71XOC78T9Y6MybKrzLcfrh6PMo2xw8BHeYxVLBCt0ec%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8ae777146de71c02-OSL
X-Firefox-Spdy: h2
6.4 kB URL cdnjs.cloudflare.com/ajax/libs/jquery-confirm/3.3.2/jquery-confirm.min.js
IP
File type JavaScript source, ASCII text, with very long lines (27605)
Hash 7cb6c13bd7fe931f3d0321a83267941c
bdacca6dc640c5ab14653119b26379547a71a174
d14cf552496ba4036ec2a27b334679e2388e13f199c25a76101482eac970ea3f
GET /ajax/libs/jquery-confirm/3.3.2/jquery-confirm.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://biglietti.asroma.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Aug 2024 14:26:57 GMT
content-type: application/javascript; charset=utf-8
content-length: 6362
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec1-6cf8"
last-modified: Mon, 04 May 2020 16:11:45 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 2697081
expires: Sat, 26 Jul 2025 14:26:57 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bFrilH8hUVhRV8186NM0Jq6KmTQ%2BGWyNIVgiIsKi5HlX0ib17PPev1DJPykhm9pvhasMpKL%2FqMmkqP19KMzwo0W10J4HqlJj0AqeazF4AM89x9Np4zs4ll%2BBag5qZVYJz39Xh%2F8Q"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8ae7771478b70b06-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
12 kB URL biglietti.asroma.com/tickets/js/analytics.js
IP
Hash 1c4eae63378cf6c0dbad67e2803a0941
fc9b96ce24564dd1e90ad0e35fe07921dd54ab08
9f1c666f62e3e1aa85273cc0cc3b033a3bd3af95b7f65dc3a3ec58fae12cb572
GET /tickets/js/analytics.js HTTP/1.1
Host: biglietti.asroma.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://biglietti.asroma.com/tickets/confirmation?paymentRef=66b0de88319f0d45e3e3bf72&lang=it
Cookie: JSESSIONID=MTZjMjlhM2ItZGMzZS00MTE0LThjMzgtYWUwNTVlM2FiNThh; nlbi_2063869=iSvYInbUsEhpVFlqlOn80gAAAADejPaUbAjNFA4CfwbN5lrv; visid_incap_2063869=cc5B4e7+S0m4zJP2yQZpsSvhsGYAAAAAQUIPAAAAAADve1E8U1oXCtvdMx3KYtYc; incap_ses_633_2063869=00+TD0+bCDo8moAIRt7ICCzhsGYAAAAAcjtysQMUIRnoTX3NLplBFw==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
etag: "da55c8e4"
last-modified: Fri, 02 Aug 2024 10:48:43 GMT
content-type: application/javascript
content-length: 12500
content-encoding: gzip
cache-control: max-age=0
date: Mon, 05 Aug 2024 14:26:56 GMT
x-cdn: Imperva
x-iinfo: 4-7301633-7294025 2VNN RT(1722868011921 4879) q(0 1 1 -1) r(2 2)
X-Firefox-Spdy: h2
24 kB URL cdn.jsdelivr.net/npm/lodash@4.17.10/lodash.min.js
IP
File type JavaScript source, ASCII text, with very long lines (4234)
Hash 19b988e43053f61d1be63a6dc5bc120e
dd8b9afe5f897730a8ac47fcaea7c4964273b544
fc62b2274050243f1cf146207fbce206bb3f420722912ec5bff49a02b8017042
GET /npm/lodash@4.17.10/lodash.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://biglietti.asroma.com
DNT: 1
Connection: keep-alive
Referer: https://biglietti.asroma.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Aug 2024 14:26:57 GMT
content-type: application/javascript; charset=utf-8
content-length: 24371
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-jsd-version: 4.17.10
x-jsd-version-type: version
etag: W/"11dc5-3Yua/l+JdzCorEf8rqfElkJztUQ"
content-encoding: gzip
x-served-by: cache-fra-etou8220047-FRA, cache-lga21970-LGA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 2694210
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Zaykb59fvIhHUl%2B2ea5IqdU2eAqbyFs2Bl6VqZp%2FRs9QXPC%2Fm46rUwS%2FkD6zeZpYqjNfvCF6hW71dCoOPSvIwp7HGKLVuKBSzH8jSZFCACqBhzvpVPISUNDlf4yzTCUElzA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8ae777146deb1c02-OSL
X-Firefox-Spdy: h2
2.9 kB URL cdnjs.cloudflare.com/ajax/libs/jquery-confirm/3.3.2/jquery-confirm.min.css
IP
File type ASCII text, with very long lines (22251)
Hash c2b359a37a11f61270eb852fc4b8f16b
60ec61824be457ed0c33e829b1da3068cf92fd06
9809a9d6fe844649e678fda81d91b9dd6d4bfb339d495b0cdb95af999e14f9f5
GET /ajax/libs/jquery-confirm/3.3.2/jquery-confirm.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://biglietti.asroma.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 05 Aug 2024 14:26:57 GMT
content-type: text/css; charset=utf-8
content-length: 2884
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec1-580a"
last-modified: Mon, 04 May 2020 16:11:45 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1094634
expires: Sat, 26 Jul 2025 14:26:57 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Dy%2Bq3x5ZQziET0V3hEFKnnIsc62xGSLbS3mCH0hXUcb8efHas4jtiR%2FGZnppKzHoXh57GpZSWRBK%2F3vdamRDMIOL9GDqYB60%2BiqZnTc8pEnaWSjWg%2B%2F6fHF2StpxHXovHLCnhMUi"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8ae7771478b60b06-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
2.9 kB URL biglietti.asroma.com/tickets/js/app.js
IP
Hash 47ba15a6ec0bb598c2fecff664b98a1e
306f90439447f68c052eae9726a7f5bb2c83ad43
b35d2bb8b97927ff0e36696bd0acac035138b0a98c52907d91af7df45f91c337
GET /tickets/js/app.js HTTP/1.1
Host: biglietti.asroma.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://biglietti.asroma.com/tickets/confirmation?paymentRef=66b0de88319f0d45e3e3bf72&lang=it
Cookie: JSESSIONID=MTZjMjlhM2ItZGMzZS00MTE0LThjMzgtYWUwNTVlM2FiNThh; nlbi_2063869=iSvYInbUsEhpVFlqlOn80gAAAADejPaUbAjNFA4CfwbN5lrv; visid_incap_2063869=cc5B4e7+S0m4zJP2yQZpsSvhsGYAAAAAQUIPAAAAAADve1E8U1oXCtvdMx3KYtYc; incap_ses_633_2063869=00+TD0+bCDo8moAIRt7ICCzhsGYAAAAAcjtysQMUIRnoTX3NLplBFw==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
etag: "b31a044f"
last-modified: Fri, 02 Aug 2024 10:48:43 GMT
content-type: application/javascript
content-length: 2875
content-encoding: gzip
cache-control: max-age=0
date: Mon, 05 Aug 2024 14:26:56 GMT
x-cdn: Imperva
x-iinfo: 4-7301633-7301329 2VNN RT(1722868011921 4967) q(0 0 0 -1) r(1 1)
X-Firefox-Spdy: h2
1.3 kB URL cdn.jsdelivr.net/npm/js-cookie@2.2.0/src/js.cookie.min.js
IP
File type JavaScript source, ASCII text, with very long lines (1694)
Hash dd816adf50a32aab66ad79f564953350
1f5d9b68ec42623bf05ea4774fc85279875816af
ee6093da938a662ef5645dc30f0a19e3fae225d7857fa0dcc49a44167bf7cca9
GET /npm/js-cookie@2.2.0/src/js.cookie.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://biglietti.asroma.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Aug 2024 14:26:57 GMT
content-type: application/javascript; charset=utf-8
content-length: 1258
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-jsd-version: 2.2.0
x-jsd-version-type: version
etag: W/"88f-H12baOxCYjvwXqR3T8hSeYdYFq8"
content-encoding: br
x-served-by: cache-fra-etou8220062-FRA, cache-lga21958-LGA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 4589861
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=urD8Ubg%2Ba7M3cLusZLS3knYqCiz9FQ6hjBOhOXebUlYmFOodWLLjLvosLORf1DtMQ0%2F%2BN4ErpZvQm8GcRF%2B%2BeAN7cMCM3BxemqIhbRvcU%2F5pujHLO9Odd5j5TFVv9vfMBok%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8ae777146ded1c02-OSL
X-Firefox-Spdy: h2
1.1 kB URL biglietti.asroma.com/tickets/js/form.js
IP
File type JavaScript source, Unicode text, UTF-8 text
Hash 41235ad9b443c2eea531b1d8c791280e
b28903e0734bfe203ba9c26cbbfbe94d595f618a
954fe6a668a69499466ce2a74805b5e322d521ae1ef8861b03fa82c7c2c000ed
GET /tickets/js/form.js HTTP/1.1
Host: biglietti.asroma.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://biglietti.asroma.com/tickets/confirmation?paymentRef=66b0de88319f0d45e3e3bf72&lang=it
Cookie: JSESSIONID=MTZjMjlhM2ItZGMzZS00MTE0LThjMzgtYWUwNTVlM2FiNThh; nlbi_2063869=iSvYInbUsEhpVFlqlOn80gAAAADejPaUbAjNFA4CfwbN5lrv; visid_incap_2063869=cc5B4e7+S0m4zJP2yQZpsSvhsGYAAAAAQUIPAAAAAADve1E8U1oXCtvdMx3KYtYc; incap_ses_633_2063869=00+TD0+bCDo8moAIRt7ICCzhsGYAAAAAcjtysQMUIRnoTX3NLplBFw==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
etag: "91c31d59"
last-modified: Fri, 02 Aug 2024 10:48:43 GMT
content-type: application/javascript
content-length: 1055
content-encoding: gzip
cache-control: max-age=0
date: Mon, 05 Aug 2024 14:26:57 GMT
x-cdn: Imperva
x-iinfo: 4-7301633-0 0CNN RT(1722868011921 5183) q(0 -1 -1 -1) r(0 -1)
X-Firefox-Spdy: h2
2.5 kB URL cdn.jsdelivr.net/npm/bootstrap-datepicker@1.8.0/dist/css/bootstrap-datepicker3.min.css
IP
File type ASCII text, with very long lines (20912)
Hash 9a3db8bd91a81212baa4ac44c241dfad
c0c6d1e38b1e9277fbb49d894949e0a1b7933f4e
9a52891414b58db670c03ad90f50293bb6054ba300d570cddfb8d9f460c50bae
GET /npm/bootstrap-datepicker@1.8.0/dist/css/bootstrap-datepicker3.min.css HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://biglietti.asroma.com
DNT: 1
Connection: keep-alive
Referer: https://biglietti.asroma.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 05 Aug 2024 14:26:57 GMT
content-type: text/css; charset=utf-8
content-length: 2534
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-jsd-version: 1.8.0
x-jsd-version-type: version
etag: W/"526c-wMbR44seknf7tJ2JSUngobeTP04"
content-encoding: br
x-served-by: cache-fra-etou8220126-FRA, cache-lga21977-LGA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 1570300
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Qbw1S%2FVBYbC2Xc1wI%2FnD3G4rimkB6eZbKAq%2Fisk2LiiLhhct0F9uwq8iH%2FThM%2BwFtf9BQEk3QwLQr5HENY99I1D2f7auBgHhGYYFMYFUDvQ31ikhnip8Jt5PXbmBHMJRgDI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8ae77714fee61c02-OSL
X-Firefox-Spdy: h2
1.3 kB URL biglietti.asroma.com/tickets/js/fee.js
IP
Hash 63666539ab1ace8083b033e81a69faf8
dcc084cd214c5902b4e32b4e17352fb02f994368
782014c3d67dfc3c55f952cd18690a03eeb94eba17c598fb76a7685fd01f13cf
GET /tickets/js/fee.js HTTP/1.1
Host: biglietti.asroma.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://biglietti.asroma.com/tickets/confirmation?paymentRef=66b0de88319f0d45e3e3bf72&lang=it
Cookie: JSESSIONID=MTZjMjlhM2ItZGMzZS00MTE0LThjMzgtYWUwNTVlM2FiNThh; nlbi_2063869=iSvYInbUsEhpVFlqlOn80gAAAADejPaUbAjNFA4CfwbN5lrv; visid_incap_2063869=cc5B4e7+S0m4zJP2yQZpsSvhsGYAAAAAQUIPAAAAAADve1E8U1oXCtvdMx3KYtYc; incap_ses_633_2063869=00+TD0+bCDo8moAIRt7ICCzhsGYAAAAAcjtysQMUIRnoTX3NLplBFw==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
etag: "4c5ab8b6"
last-modified: Fri, 02 Aug 2024 10:48:43 GMT
content-type: application/javascript
content-length: 1306
content-encoding: gzip
cache-control: max-age=0
date: Mon, 05 Aug 2024 14:26:57 GMT
x-cdn: Imperva
x-iinfo: 4-7301633-7299023 2VNN RT(1722868011921 5167) q(0 0 0 -1) r(1 1)
X-Firefox-Spdy: h2
18 kB URL biglietti.asroma.com/_Incapsula_Resource?SWJIYLWA=719d34d31c8e3a6e6fffd425f7e032f3&ns=4&cb=141005502
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 74936467bddc54c7123fffae0dd82817
553a16e2eb7d8016a9910ad8dfb7524f6f96b343
41d9fe7c0ac4525ad395a2e823db6f3a3ca1d59acaea7c83b36000191fbe31d6
GET /_Incapsula_Resource?SWJIYLWA=719d34d31c8e3a6e6fffd425f7e032f3&ns=4&cb=141005502 HTTP/1.1
Host: biglietti.asroma.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://biglietti.asroma.com/tickets/confirmation?paymentRef=66b0de88319f0d45e3e3bf72&lang=it
Cookie: nlbi_2063869=iSvYInbUsEhpVFlqlOn80gAAAADejPaUbAjNFA4CfwbN5lrv; visid_incap_2063869=cc5B4e7+S0m4zJP2yQZpsSvhsGYAAAAAQUIPAAAAAADve1E8U1oXCtvdMx3KYtYc; incap_ses_633_2063869=00+TD0+bCDo8moAIRt7ICCzhsGYAAAAAcjtysQMUIRnoTX3NLplBFw==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache, no-store
content-type: application/javascript
content-encoding: gzip
x-robots-tag: noindex
content-length: 18068
X-Firefox-Spdy: h2
179 kB URL cdns.eu1.gigya.com/js/gigya.js?apikey=4_CgW8FMardcX-NyY8M3p6Wg&lang=it
IP
ASN #7545 TPG Telecom Limited
File type JavaScript source, ASCII text, with very long lines (52002), with CRLF line terminators
Size 179 kB (179398 bytes)
Hash 636aa028d188fb47b568c6f12488fe23
cc778215cfb28d05755a5da6e2b2e54ca0cce6f4
9f3a8fcba69aa1d3990b4a3aab82cbe8f94e051dcac767b9c151ec421ee6f9d3
GET /js/gigya.js?apikey=4_CgW8FMardcX-NyY8M3p6Wg&lang=it HTTP/1.1
Host: cdns.eu1.gigya.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://biglietti.asroma.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 179398
content-type: text/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, s-maxage=3600, max-age=900
content-encoding: gzip
vary: Accept-Encoding
p3p: CP="IDC COR PSA DEV ADM OUR IND ONL"
x-error-code: 0
x-soa: true, Gator
x-server: us1d-nomad-t5
x-callid: 7969f6b2f7a4145d0388fac01ad7cb87
x-robots-tag: none
date: Mon, 05 Aug 2024 14:26:57 GMT
X-Firefox-Spdy: h2
472 B IP
Hash 577d66d28f849b68ec73ff9bc07b794d
fc2ea9adfa38e9451679173b4af4d878f47a671f
8466169b3bbfe3c2dece8ebf4739b5c2f88e920ed6c252e1c26c29c25c83add2
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Aug 2024 14:26:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
493 B URL cdnjs.cloudflare.com/ajax/libs/jqueryui-touch-punch/0.2.3/jquery.ui.touch-punch.min.js
IP
File type Unicode text, UTF-8 text, with very long lines (1090)
Hash 700b877cd3ade98ce6cd4be349d81a5c
c1c36e6927436231eb20474356b29667c4c648aa
000854d782781aff1b16ea5451c1da3d07efadd35ab911ccb7e4b851571a25bd
GET /ajax/libs/jqueryui-touch-punch/0.2.3/jquery.ui.touch-punch.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://biglietti.asroma.com
DNT: 1
Connection: keep-alive
Referer: https://biglietti.asroma.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 05 Aug 2024 14:26:57 GMT
content-type: application/javascript; charset=utf-8
content-length: 493
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec4-50b"
last-modified: Mon, 04 May 2020 16:11:48 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 377401
expires: Sat, 26 Jul 2025 14:26:57 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=djj9HduIs57Z0Ixy7lC%2FWFh0ReyxnVsKXEUkhvNs9kXjfQa02BZ%2Fe%2BbQTjlrM9ooF2nsXkrQFro94g4plBuSmpsWN1o65w2Azx1%2BlTRccZ1NO9nJYBRYj96%2FJH2acyaIX8FC3yom"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8ae77717b866b518-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
52 kB URL momentjs.com/downloads/moment-timezone-with-data.js
IP
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (6530)
Hash 80966a6123064683d43c677d618784ac
74f6c5dc19fb20f0a7da9fc1acba9e119a9457cf
c05c6086aa185613925f46feab5418c68255c0825c661fd9dd38a27a711070ca
GET /downloads/moment-timezone-with-data.js HTTP/1.1
Host: momentjs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://biglietti.asroma.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 05 Aug 2024 14:26:57 GMT
content-type: application/javascript; charset=utf-8
content-length: 51473
x-origin-cache: HIT
last-modified: Thu, 18 Apr 2024 09:36:42 GMT
access-control-allow-origin: *
etag: W/"6620e9aa-c2f9a"
expires: Mon, 05 Aug 2024 18:26:57 GMT
cache-control: public, max-age=14400
content-encoding: gzip
x-proxy-cache: MISS
x-github-request-id: B0F4:28A741:27003D6:27D97BD:6620EAB5
via: 1.1 varnish
x-served-by: cache-bma1677-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1713433270.891618,VS0,VE139
vary: Accept-Encoding
x-fastly-request-id: 9a9ad95578bebe5d11fa9a094c0529fba2dada04
cf-cache-status: HIT
accept-ranges: bytes
server: cloudflare
cf-ray: 8ae77717b870b518-OSL
X-Firefox-Spdy: h2
1.7 kB URL showcdn.vivaticket.com/soccer/asr/logos/desktop/logo_01.png
IP
File type PNG image data, 66 x 26, 8-bit gray+alpha, non-interlaced
Hash c00e8a32a452a95329862c77a7d30f76
330d7127a2fcaec4db339296c93acbfad79910b1
465c14abd74b4b6a99d7ff713790498c79dec9a38086b53daaff0f66cbe08ef7
GET /soccer/asr/logos/desktop/logo_01.png HTTP/1.1
Host: showcdn.vivaticket.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://biglietti.asroma.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 1724
last-modified: Tue, 30 Jul 2024 15:38:14 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Sun, 04 Aug 2024 15:39:45 GMT
etag: "c00e8a32a452a95329862c77a7d30f76"
x-cache: Hit from cloudfront
via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ZKOXNm7grNqrlmyTJoydtUERDRLFCQY0YUUxOhFWTaaxIPVnTsFnZg==
age: 82033
X-Firefox-Spdy: h2
1.1 kB URL showcdn.vivaticket.com/soccer/asr/logos/mobile/logo_01.png
IP
File type PNG image data, 40 x 16, 8-bit gray+alpha, non-interlaced
Hash 86eeb27c2cf9c10c064ce9058e3fe388
ef67b14a0f811b591e58486556cb990888d95e3d
592f192b1ff2a878e27ad43094c530e0cb6814dbf020aaaa3d8a7f22fb25027c
GET /soccer/asr/logos/mobile/logo_01.png HTTP/1.1
Host: showcdn.vivaticket.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://biglietti.asroma.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 1109
last-modified: Tue, 30 Jul 2024 15:50:50 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Sun, 04 Aug 2024 15:52:24 GMT
etag: "86eeb27c2cf9c10c064ce9058e3fe388"
x-cache: Hit from cloudfront
via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: bJekv3d3YeNNmg0snL4h36vWOeEzFi4i076iGYRjtkZDGyfma1UqNQ==
age: 81274
X-Firefox-Spdy: h2
640 B URL showcdn.vivaticket.com/soccer/asr/logos/mobile/logo_02.png
IP
File type PNG image data, 23 x 15, 8-bit gray+alpha, non-interlaced
Hash 0be38713cb78d56fab02496e3935d933
4d19c9d0cee8d483e8d926e4c6420d3ca4e20738
9dcec5d8d08679207fe28639c3733a642acfe5c3ab59614cf7fd97d67c061dfa
GET /soccer/asr/logos/mobile/logo_02.png HTTP/1.1
Host: showcdn.vivaticket.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://biglietti.asroma.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 640
last-modified: Thu, 22 Feb 2024 14:14:26 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Mon, 05 Aug 2024 14:15:09 GMT
etag: "0be38713cb78d56fab02496e3935d933"
x-cache: Hit from cloudfront
via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: kwc94cyW18UUMZgRCI0o4FCoLMDYl162qejJX271AFpLyXUeNfxdEg==
age: 31114
X-Firefox-Spdy: h2
120 B URL showcdn.vivaticket.com/soccer/asr/logos/mobile/logo_03.png
IP
File type PNG image data, 4 x 4, 8-bit/color RGBA, non-interlaced
Hash 15395f4b930dffe7a307f595b40f6287
98a6c891edeeac8564fb2e0a5297d65f5fd1f969
ece8422c7dc7b66a346eff2abf55156c4e7eedab4f5f22a4bd0b1ce4c3ccc29c
GET /soccer/asr/logos/mobile/logo_03.png HTTP/1.1
Host: showcdn.vivaticket.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://biglietti.asroma.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 120
last-modified: Wed, 21 Feb 2024 10:57:45 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Mon, 05 Aug 2024 14:15:10 GMT
etag: "15395f4b930dffe7a307f595b40f6287"
x-cache: Hit from cloudfront
via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 9RmQ0KwRyh5M0MF0YoX79BZAzdYwoNHPMHxpvEsngNKZMX5ALxF0Mw==
age: 31114
X-Firefox-Spdy: h2
120 B URL showcdn.vivaticket.com/soccer/asr/logos/desktop/logo_03.png
IP
File type PNG image data, 4 x 4, 8-bit/color RGBA, non-interlaced
Hash 15395f4b930dffe7a307f595b40f6287
98a6c891edeeac8564fb2e0a5297d65f5fd1f969
ece8422c7dc7b66a346eff2abf55156c4e7eedab4f5f22a4bd0b1ce4c3ccc29c
GET /soccer/asr/logos/desktop/logo_03.png HTTP/1.1
Host: showcdn.vivaticket.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://biglietti.asroma.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 120
last-modified: Mon, 29 Jul 2024 06:06:45 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Mon, 05 Aug 2024 14:15:09 GMT
etag: "15395f4b930dffe7a307f595b40f6287"
x-cache: Hit from cloudfront
via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 3LD4G0R4uTge9rr2cQdNZTFwqf5HulnrbnUXlC3rUYG8ZFLZ3dJuRg==
age: 29755
X-Firefox-Spdy: h2
807 B URL showcdn.vivaticket.com/soccer/asr/logos/desktop/logo_02.png
IP
File type PNG image data, 39 x 25, 8-bit gray+alpha, non-interlaced
Hash a9531ff8e3a03e33e84176586a473e8d
bd890a959d8bc83f45283dfdcbad551c635a2e22
9604f433daa2f10e141123b344e0e5727e2ddfdc4ffb3151dcaba70db9cfb326
GET /soccer/asr/logos/desktop/logo_02.png HTTP/1.1
Host: showcdn.vivaticket.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://biglietti.asroma.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 807
last-modified: Fri, 23 Feb 2024 10:46:40 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Mon, 05 Aug 2024 04:25:00 GMT
etag: "a9531ff8e3a03e33e84176586a473e8d"
x-cache: Hit from cloudfront
via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Z_gCSL4D-k0_nZuWXcHAz55vnmQZnkUoI7n5Qqf96BE2tBvmJrj5oQ==
age: 36118
X-Firefox-Spdy: h2
3.0 kB URL momentjs.com/downloads/moment-timezone.min.js
IP
File type JavaScript source, ASCII text, with very long lines (7249), with no line terminators
Hash cec638fb4c4f4c65c140088d6ba7b4c2
654ce0ea1d64cc03630288dcaabf8532e9253e7b
fd83b6ec6339eab2299d706b656c15f6d12c7fce7aca613d8769f41195473354
GET /downloads/moment-timezone.min.js HTTP/1.1
Host: momentjs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://biglietti.asroma.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 05 Aug 2024 14:26:57 GMT
content-type: application/javascript; charset=utf-8
content-length: 3035
x-origin-cache: HIT
last-modified: Thu, 18 Apr 2024 09:36:42 GMT
access-control-allow-origin: *
etag: W/"6620e9aa-1c51"
expires: Mon, 05 Aug 2024 18:26:57 GMT
cache-control: public, max-age=14400
content-encoding: gzip
x-proxy-cache: MISS
x-github-request-id: ACBB:0DBD:1A6FE81:1AFB8F5:6682081F
via: 1.1 varnish
x-served-by: cache-bma1660-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1719797792.053404,VS0,VE129
vary: Accept-Encoding
x-fastly-request-id: 24454512abb64e897435f3bd94e29f1afcd62d96
cf-cache-status: HIT
accept-ranges: bytes
server: cloudflare
cf-ray: 8ae777182906b518-OSL
X-Firefox-Spdy: h2
19 kB URL momentjs.com/downloads/moment.min.js
IP
File type JavaScript source, ASCII text, with very long lines (58851)
Hash d65dc6d2e619406d105656424573214e
20bd76acf8e950e5cf7243f60e1192705dacca7d
845c524969edd5b3af9aa6d8718d29fe92e8dbe25b955214a8e064a05a9a5027
GET /downloads/moment.min.js HTTP/1.1
Host: momentjs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://biglietti.asroma.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 05 Aug 2024 14:26:57 GMT
content-type: application/javascript; charset=utf-8
content-length: 18952
x-origin-cache: HIT
last-modified: Thu, 18 Apr 2024 09:36:42 GMT
access-control-allow-origin: *
etag: W/"6620e9aa-e60a"
expires: Mon, 05 Aug 2024 18:26:57 GMT
cache-control: public, max-age=14400
content-encoding: gzip
x-proxy-cache: HIT
x-github-request-id: B0E6:2C0AE3:531E383:54FE06F:6620EA65
via: 1.1 varnish
x-served-by: cache-bma1637-BMA
x-cache: HIT
x-cache-hits: 2
x-timer: S1713433442.108292,VS0,VE1
vary: Accept-Encoding
x-fastly-request-id: 2e7b1d2170a30c90fd44090acae4936476bb84b5
cf-cache-status: HIT
accept-ranges: bytes
server: cloudflare
cf-ray: 8ae777183921b518-OSL
X-Firefox-Spdy: h2
12 kB URL momentjs.com/downloads/moment-timezone-with-data-10-year-range.min.js
IP
File type JavaScript source, ASCII text, with very long lines (42325), with no line terminators
Hash abfffa6339038e5d81a2fa555cf255cf
be0fa5bca6e3fdbc4fdeb691cc79f53e41bd88dd
e63db076f981057ebc2c875905f3ef76117054049b23f4f2d8508186978c180d
GET /downloads/moment-timezone-with-data-10-year-range.min.js HTTP/1.1
Host: momentjs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://biglietti.asroma.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 05 Aug 2024 14:26:57 GMT
content-type: application/javascript; charset=utf-8
content-length: 11959
x-origin-cache: HIT
last-modified: Thu, 18 Apr 2024 09:36:42 GMT
access-control-allow-origin: *
etag: W/"6620e9aa-a555"
expires: Mon, 05 Aug 2024 18:26:57 GMT
cache-control: public, max-age=14400
content-encoding: gzip
x-proxy-cache: HIT
x-github-request-id: 641A:156FBE:2F9BBB4:30B39F1:6620EA1D
via: 1.1 varnish
x-served-by: cache-bma1644-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1713433174.764865,VS0,VE126
vary: Accept-Encoding
x-fastly-request-id: c4c5516cb32aca6fe87ced4b15122a7623022dd1
cf-cache-status: HIT
accept-ranges: bytes
server: cloudflare
cf-ray: 8ae777184936b518-OSL
X-Firefox-Spdy: h2
471 B IP
Hash 46fa722b2b4a1b5ddb4452d095c47dee
f79aaeaa7450311bc12c582a37a127f9c51d2a39
1f141b88df7b90bd5634dee7715b19bfbff39a445628b8dbfa72f9a5674cf6c6
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Aug 2024 14:26:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
471 B IP
Hash 46fa722b2b4a1b5ddb4452d095c47dee
f79aaeaa7450311bc12c582a37a127f9c51d2a39
1f141b88df7b90bd5634dee7715b19bfbff39a445628b8dbfa72f9a5674cf6c6
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Aug 2024 14:26:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
72 kB URL www.googletagmanager.com/gtag/js?id=UA-69545180-1
IP
File type JavaScript source, ASCII text, with very long lines (2345)
Hash 6c12dce8beba174146507b791252e1a6
8eb8ac5cae8c46f0c4e019c8dbdd83026350a879
9d718e900552f40feea2512d4de79d36c9b3382d0a1b4813f95992bbf9b9ddc4
GET /gtag/js?id=UA-69545180-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://biglietti.asroma.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 05 Aug 2024 14:26:58 GMT
expires: Mon, 05 Aug 2024 14:26:58 GMT
cache-control: private, max-age=900
last-modified: Mon, 05 Aug 2024 12:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 72425
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
8.4 kB URL showcdn.vivaticket.com/soccer/asr/logos/roma-logo-2023.png
IP
File type PNG image data, 68 x 84, 8-bit/color RGBA, non-interlaced
Hash 43a878548c78f6e87c79676d9eb0a1d7
080aba4226f5c73c20bdcb93554d12f17e7302d9
c1d173f3ad3a2d5cc9b6a6127f4387f59daa31317fc58ad4a2fe00857e0d3fcb
GET /soccer/asr/logos/roma-logo-2023.png HTTP/1.1
Host: showcdn.vivaticket.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://biglietti.asroma.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 8373
last-modified: Tue, 09 May 2023 13:52:13 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Sun, 04 Aug 2024 22:39:55 GMT
etag: "43a878548c78f6e87c79676d9eb0a1d7"
x-cache: Hit from cloudfront
via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Yvx8H23OAVcdNbJ-IsyIjcKcNlG7xIPPeEGN-_Vom-uUujh5Kyf52Q==
age: 56824
X-Firefox-Spdy: h2
31 kB URL showcdn.vivaticket.com/soccer/asr/fonts/ASRoma-Regular.woff2
IP
File type Web Open Font Format (Version 2), CFF, length 30552, version 2.6553
Hash af4e486e6fcba6a40f526e45bf45c67e
f17db22014bac217b6c2fa59200513afbabc2339
954ef73207b434a85c878af74449e9ea7d5271dff93114f3e93bbaba9aeadf68
GET /soccer/asr/fonts/ASRoma-Regular.woff2 HTTP/1.1
Host: showcdn.vivaticket.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://biglietti.asroma.com
DNT: 1
Connection: keep-alive
Referer: https://biglietti.asroma.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 30552
date: Mon, 05 Aug 2024 10:02:08 GMT
access-control-allow-origin: https://biglietti.asroma.com
access-control-allow-methods: HEAD, GET
access-control-allow-credentials: true
last-modified: Thu, 28 Oct 2021 14:44:26 GMT
etag: "af4e486e6fcba6a40f526e45bf45c67e"
accept-ranges: bytes
server: AmazonS3
vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Hit from cloudfront
via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: SA68VW0irpGJ4YNVxtM2HJUuxjXSNca4jyTNpBVL_P8861uaBjD9Ng==
age: 15891
X-Firefox-Spdy: h2
471 B IP
Hash 46fa722b2b4a1b5ddb4452d095c47dee
f79aaeaa7450311bc12c582a37a127f9c51d2a39
1f141b88df7b90bd5634dee7715b19bfbff39a445628b8dbfa72f9a5674cf6c6
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Aug 2024 14:26:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
68 kB URL cdn.jsdelivr.net/npm/moment@2.22.2/min/moment-with-locales.min.js
IP
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Hash a79a8710a3517e497846aca9179f8d81
a84840cafc097fbcfaab6c49d5fcfaa598e0ec6d
56b9ad34701d1b38cdb1436d5981b9e71c44f710d3cf8805eb7c7fa6b297287d
GET /npm/moment@2.22.2/min/moment-with-locales.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://biglietti.asroma.com
DNT: 1
Connection: keep-alive
Referer: https://biglietti.asroma.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Aug 2024 14:26:58 GMT
content-type: application/javascript; charset=utf-8
content-length: 67950
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-jsd-version: 2.22.2
x-jsd-version-type: version
etag: W/"4fc01-qEhAyvwJf7z6q2xJ1fz6pZjg7G0"
content-encoding: gzip
x-served-by: cache-fra-etou8220116-FRA, cache-lga21966-LGA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 4586778
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HbV9sn4keinDJkXXgLvDls4nRvVqWPTN4HA4gIiPcJJqE139jMYmihpNM2c%2FjOsvexFpBHGZv%2BzruMh4G1pSST3HdvtHlcZf1BlCgJiHOGrCnNxQILbnyYO13pLTeMKUr%2FM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8ae7771a6dea1c02-OSL
X-Firefox-Spdy: h2
GET www.googletagmanager.com/gtm.js?id=GTM-KX8NQP9
200 OK 121 kB URL GET HTTP/3 www.googletagmanager.com/gtm.js?id=GTM-KX8NQP9
IP
Requested by https://account.asroma.com/?gig_ssoToken=eu1_tk1.RDYODGH_CySD7oR-wVK77RP2dM7qGZjdiBtIejn_cF0&gig_source=asroma.com
Certificate IssuerGoogle Trust Services
Subject*.google-analytics.com
Fingerprint27:BF:6E:8E:D6:51:1C:C5:B2:CF:E2:E9:0F:87:D0:F3:33:23:E7:37
ValidityTue, 30 Jul 2024 12:32:47 GMT - Tue, 22 Oct 2024 12:32:46 GMT
File type JavaScript source, ASCII text, with very long lines (37007)
Size 121 kB (121379 bytes)
Hash 5fa772063599351add21ef5e668ec51c
31ca7d98f33b063644e4a81e223ef159c219c36a
4c0575c2bca11887e9424d52d798c2b1b5f001db8d1b7e7693ca07922d07211e
GET /gtm.js?id=GTM-KX8NQP9 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://biglietti.asroma.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 05 Aug 2024 14:26:58 GMT
expires: Mon, 05 Aug 2024 14:26:58 GMT
cache-control: private, max-age=900
last-modified: Mon, 05 Aug 2024 12:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 121379
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
3.0 kB URL momentjs.com/downloads/moment-timezone.min.js
IP
File type JavaScript source, ASCII text, with very long lines (7249), with no line terminators
Hash cec638fb4c4f4c65c140088d6ba7b4c2
654ce0ea1d64cc03630288dcaabf8532e9253e7b
fd83b6ec6339eab2299d706b656c15f6d12c7fce7aca613d8769f41195473354
GET /downloads/moment-timezone.min.js HTTP/1.1
Host: momentjs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://biglietti.asroma.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Aug 2024 14:26:58 GMT
content-type: application/javascript; charset=utf-8
content-length: 3035
x-origin-cache: HIT
last-modified: Thu, 18 Apr 2024 09:36:42 GMT
access-control-allow-origin: *
etag: W/"6620e9aa-1c51"
expires: Mon, 05 Aug 2024 18:26:58 GMT
cache-control: public, max-age=14400
content-encoding: gzip
x-proxy-cache: MISS
x-github-request-id: ACBB:0DBD:1A6FE81:1AFB8F5:6682081F
via: 1.1 varnish
x-served-by: cache-bma1660-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1719797792.053404,VS0,VE129
vary: Accept-Encoding
x-fastly-request-id: 24454512abb64e897435f3bd94e29f1afcd62d96
cf-cache-status: HIT
accept-ranges: bytes
server: cloudflare
cf-ray: 8ae7771b5ef3b518-OSL
X-Firefox-Spdy: h2
GET app3.salesmanago.pl/static/sm.js
200 OK 49 kB URL GET HTTP/2 app3.salesmanago.pl/static/sm.js
IP
Requested by https://account.asroma.com/?gig_ssoToken=eu1_tk1.RDYODGH_CySD7oR-wVK77RP2dM7qGZjdiBtIejn_cF0&gig_source=asroma.com
Certificate IssuerDigiCert Inc
Subject*.salesmanago.pl
FingerprintDF:0D:88:9C:56:45:E8:7B:24:52:6E:1B:FA:A8:E8:72:20:98:10:E1
ValidityFri, 02 Aug 2024 00:00:00 GMT - Tue, 19 Aug 2025 23:59:59 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (65508), with no line terminators
Hash 629005b32fe0aec23be0c3922a26b4d0
fc823bed76816228bb36153e342c4b94933d829b
47e0eacb43751a7d7e75a6fd169be57f6562701bb742b2549a75cf2b1e58b251
GET /static/sm.js HTTP/1.1
Host: app3.salesmanago.pl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://biglietti.asroma.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 05 Aug 2024 14:26:58 GMT
server: Apache
last-modified: Mon, 22 Jul 2024 04:35:01 GMT
etag: "20b35-61dce917a27d7-gzip"
accept-ranges: bytes
cache-control: max-age=3600
expires: Mon, 05 Aug 2024 15:26:58 GMT
vary: Accept-Encoding
content-encoding: gzip
content-length: 48858
content-type: application/javascript
strict-transport-security: max-age=31540000
set-cookie: SERVERID=A; path=/; HttpOnly; Secure
X-Firefox-Spdy: h2
1 B URL biglietti.asroma.com/_Incapsula_Resource?SWKMTFSR=1&e=0.506437120727084
IP
File type very short file (no magic)
Hash c4ca4238a0b923820dcc509a6f75849b
356a192b7913b04c54574d18c28d46e6395428ab
6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
GET /_Incapsula_Resource?SWKMTFSR=1&e=0.506437120727084 HTTP/1.1
Host: biglietti.asroma.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://biglietti.asroma.com/tickets/confirmation?paymentRef=66b0de88319f0d45e3e3bf72&lang=it
Cookie: nlbi_2063869=iSvYInbUsEhpVFlqlOn80gAAAADejPaUbAjNFA4CfwbN5lrv; visid_incap_2063869=cc5B4e7+S0m4zJP2yQZpsSvhsGYAAAAAQUIPAAAAAADve1E8U1oXCtvdMx3KYtYc; incap_ses_633_2063869=00+TD0+bCDo8moAIRt7ICCzhsGYAAAAAcjtysQMUIRnoTX3NLplBFw==; gig_canary=false; gig_canary_ver=16174-3-28714455; ___utmvc=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
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache, no-store
content-type: text/plain
x-robots-tag: noindex
content-length: 1
set-cookie: ___utmvc=a; Max-Age=0; path=/; expires=Thu, 01 Aug 2024 00:41:03 GMT
X-Firefox-Spdy: h2
15 kB URL biglietti.asroma.com/tickets/favicon.ico
IP
File type MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel
Hash c63a5b334bc4c8f350b1f526d4028174
462034485582c711c53c392c0eaca9b35e0c78e6
2feee0d10ed84f221b6a0d053ac3c2bfecd8c0144fc852ca5953d620f03a91b6
GET /tickets/favicon.ico HTTP/1.1
Host: biglietti.asroma.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://biglietti.asroma.com/tickets/confirmation?paymentRef=66b0de88319f0d45e3e3bf72&lang=it
Cookie: JSESSIONID=MTZjMjlhM2ItZGMzZS00MTE0LThjMzgtYWUwNTVlM2FiNThh; nlbi_2063869=iSvYInbUsEhpVFlqlOn80gAAAADejPaUbAjNFA4CfwbN5lrv; visid_incap_2063869=cc5B4e7+S0m4zJP2yQZpsSvhsGYAAAAAQUIPAAAAAADve1E8U1oXCtvdMx3KYtYc; incap_ses_633_2063869=00+TD0+bCDo8moAIRt7ICCzhsGYAAAAAcjtysQMUIRnoTX3NLplBFw==; gig_canary=false; gig_canary_ver=16174-3-28714455
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
etag: "78606e65"
last-modified: Fri, 02 Aug 2024 10:48:43 GMT
content-type: image/x-icon
content-length: 15086
cache-control: max-age=0
date: Mon, 05 Aug 2024 14:26:58 GMT
x-cdn: Imperva
x-iinfo: 4-7301633-0 0CNN RT(1722868011921 6512) q(0 -1 -1 -1) r(0 -1)
X-Firefox-Spdy: h2
471 B URL ocsp.r2m03.amazontrust.com/
IP
Hash 5c40dec7d04c324f84c433387af930af
595588e51cd5e72ef2eebbb7a6f3febee76d02b5
dbbc323e84ef6e4c13d1468935c53d9f877d65aa29a78a3604296fa3242df9b5
POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Mon, 05 Aug 2024 14:26:58 GMT
Last-Modified: Mon, 05 Aug 2024 13:16:25 GMT
Server: ECAcc (amb/6AD2)
X-Cache: Miss from cloudfront
Via: 1.1 c2b101e67ac25a2f0013450d56ecac38.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: qif8ct1f_ALg-PBE1erYM_v4HSGuE8oN1ymkYfmZ3V7-E_X5PrVUnA==
Age: 4233
2.0 kB URL identity.asroma.com/sdk.config.get?apiKey=4_CgW8FMardcX-NyY8M3p6Wg&httpStatusCodes=true
IP
Hash 6e5adb9644acead2e0281d3af474aac8
ac7a3088d9a195b6b3aae8229deea8680ae16c30
69376b8c6946fa62ffa266d40953c8188078a9306ca6e6bbe1afe305020fb189
GET /sdk.config.get?apiKey=4_CgW8FMardcX-NyY8M3p6Wg&httpStatusCodes=true HTTP/1.1
Host: identity.asroma.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://biglietti.asroma.com/
Origin: https://biglietti.asroma.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
content-length: 1985
access-control-allow-origin: *
cache-control: public, s-maxage=120, max-age=60
content-encoding: gzip
edge-cache-tag: siteid_652763596923
p3p: CP="IDC COR PSA DEV ADM OUR IND ONL"
x-error-code: 0
x-soa: true, Gator
x-server: eu1a-nomad-t29
x-callid: ebce696bbacac6a977db29cb8a633877
date: Mon, 05 Aug 2024 14:25:01 GMT
accept-ranges: bytes
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: AVjtv6IV_pWPuDwxoe1HkgiyUtXrhOQAf6qEzrM_ufP0m7XPpf6c1w==
age: 117
X-Firefox-Spdy: h2
GET www.googletagmanager.com/gtag/js?id=G-PE68Q1GB3Q&l=dataLayer&cx=c
200 OK 111 kB URL GET HTTP/3 www.googletagmanager.com/gtag/js?id=G-PE68Q1GB3Q&l=dataLayer&cx=c
IP
Requested by https://account.asroma.com/?gig_ssoToken=eu1_tk1.RDYODGH_CySD7oR-wVK77RP2dM7qGZjdiBtIejn_cF0&gig_source=asroma.com
Certificate IssuerGoogle Trust Services
Subject*.google-analytics.com
Fingerprint27:BF:6E:8E:D6:51:1C:C5:B2:CF:E2:E9:0F:87:D0:F3:33:23:E7:37
ValidityTue, 30 Jul 2024 12:32:47 GMT - Tue, 22 Oct 2024 12:32:46 GMT
File type JavaScript source, ASCII text, with very long lines (8752)
Size 111 kB (111185 bytes)
Hash 1b1c6f10edbb2991a7e4a449e90ff62f
b67ba5672aac2d0a4bab01952d57ff5cc7acc9dd
c39f56a42fd0f39a5760028c2e90eab1ef18dd53d8fc54367c7e6cbfbf5f1bbe
GET /gtag/js?id=G-PE68Q1GB3Q&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://biglietti.asroma.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 05 Aug 2024 14:26:58 GMT
expires: Mon, 05 Aug 2024 14:26:58 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 111185
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET www.googletagmanager.com/gtag/destination?id=AW-322753360&l=dataLayer&cx=c
200 OK 92 kB URL GET HTTP/3 www.googletagmanager.com/gtag/destination?id=AW-322753360&l=dataLayer&cx=c
IP
Requested by https://account.asroma.com/?gig_ssoToken=eu1_tk1.RDYODGH_CySD7oR-wVK77RP2dM7qGZjdiBtIejn_cF0&gig_source=asroma.com
Certificate IssuerGoogle Trust Services
Subject*.google-analytics.com
Fingerprint27:BF:6E:8E:D6:51:1C:C5:B2:CF:E2:E9:0F:87:D0:F3:33:23:E7:37
ValidityTue, 30 Jul 2024 12:32:47 GMT - Tue, 22 Oct 2024 12:32:46 GMT
File type JavaScript source, ASCII text, with very long lines (4179)
Hash 4724d797d54544134350e9b9da5af88f
283849441c52dd2c84edf02146f5764426797c29
c859daddeef9b2e246b7f753c6caccc61316a82be1f0078d12f0695ad11f8677
GET /gtag/destination?id=AW-322753360&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://biglietti.asroma.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 05 Aug 2024 14:26:58 GMT
expires: Mon, 05 Aug 2024 14:26:58 GMT
cache-control: private, max-age=900
last-modified: Mon, 05 Aug 2024 12:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 92104
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET www.googletagmanager.com/gtag/js?id=G-ML4VH113QE&l=dataLayer&cx=c
200 OK 107 kB URL GET HTTP/3 www.googletagmanager.com/gtag/js?id=G-ML4VH113QE&l=dataLayer&cx=c
IP
Requested by https://account.asroma.com/?gig_ssoToken=eu1_tk1.RDYODGH_CySD7oR-wVK77RP2dM7qGZjdiBtIejn_cF0&gig_source=asroma.com
Certificate IssuerGoogle Trust Services
Subject*.google-analytics.com
Fingerprint27:BF:6E:8E:D6:51:1C:C5:B2:CF:E2:E9:0F:87:D0:F3:33:23:E7:37
ValidityTue, 30 Jul 2024 12:32:47 GMT - Tue, 22 Oct 2024 12:32:46 GMT
File type JavaScript source, ASCII text, with very long lines (7711)
Size 107 kB (107315 bytes)
Hash 6ca21cf45c6f6cce827c56ad44705bdf
ddbc0c11e201174e6888a048e83b1bc307e2daea
267c8248fdb32155e9037bed35fcceb0d9f385d801bcba1ce4bf65697129d84a
GET /gtag/js?id=G-ML4VH113QE&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://biglietti.asroma.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 05 Aug 2024 14:26:58 GMT
expires: Mon, 05 Aug 2024 14:26:58 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 107315
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET app3.salesmanago.pl/static/sm.js
200 OK 49 kB URL GET HTTP/2 app3.salesmanago.pl/static/sm.js
IP
Requested by https://account.asroma.com/?gig_ssoToken=eu1_tk1.RDYODGH_CySD7oR-wVK77RP2dM7qGZjdiBtIejn_cF0&gig_source=asroma.com
Certificate IssuerDigiCert Inc
Subject*.salesmanago.pl
FingerprintDF:0D:88:9C:56:45:E8:7B:24:52:6E:1B:FA:A8:E8:72:20:98:10:E1
ValidityFri, 02 Aug 2024 00:00:00 GMT - Tue, 19 Aug 2025 23:59:59 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (65508), with no line terminators
Hash 629005b32fe0aec23be0c3922a26b4d0
fc823bed76816228bb36153e342c4b94933d829b
47e0eacb43751a7d7e75a6fd169be57f6562701bb742b2549a75cf2b1e58b251
GET /static/sm.js HTTP/1.1
Host: app3.salesmanago.pl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://biglietti.asroma.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Aug 2024 14:26:58 GMT
server: Apache
last-modified: Mon, 22 Jul 2024 04:46:33 GMT
etag: "20b35-61dcebabac567-gzip"
accept-ranges: bytes
cache-control: max-age=3600
expires: Mon, 05 Aug 2024 15:26:58 GMT
vary: Accept-Encoding
content-encoding: gzip
content-length: 48858
content-type: application/javascript
strict-transport-security: max-age=31540000
set-cookie: SERVERID=B; path=/; HttpOnly; Secure
X-Firefox-Spdy: h2
131 kB URL biglietti.asroma.com/tickets/confirmation?paymentRef=66b0de88319f0d45e3e3bf72&lang=it
IP
File type HTML document, Unicode text, UTF-8 text, with very long lines (15033)
Size 131 kB (130620 bytes)
Hash 0f43ea9d69443c0b30188b5433e6b268
6286e9c7e91cb5278b21bd1339f62280f6c51095
cb5de2b88bc81e5d07023dbf3f3f2c9ee26e70b29f493fc0282eb9a69e24ae90
GET /tickets/confirmation?paymentRef=66b0de88319f0d45e3e3bf72&lang=it HTTP/1.1
Host: biglietti.asroma.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://web.axerve.com/
DNT: 1
Connection: keep-alive
Cookie: JSESSIONID=MTZjMjlhM2ItZGMzZS00MTE0LThjMzgtYWUwNTVlM2FiNThh; nlbi_2063869=iSvYInbUsEhpVFlqlOn80gAAAADejPaUbAjNFA4CfwbN5lrv; visid_incap_2063869=cc5B4e7+S0m4zJP2yQZpsSvhsGYAAAAAQUIPAAAAAADve1E8U1oXCtvdMx3KYtYc; incap_ses_633_2063869=00+TD0+bCDo8moAIRt7ICCzhsGYAAAAAcjtysQMUIRnoTX3NLplBFw==
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Aug 2024 14:26:55 GMT
server: Apache
content-type: text/html;charset=UTF-8
content-language: it
vary: Accept-Encoding
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: deny
x-permitted-cross-domain-policies: master-only
x-cdn: Imperva
x-iinfo: 4-7301633-7301635 pNNy RT(1722868011921 3665) q(0 0 0 -1) r(6 6) U12
X-Firefox-Spdy: h2
471 B IP
Hash 033d55bc9c47af915b169d16fc1de878
08ae8196d4db5be455f7457ae960b75810d91323
3dc7c64b96f25648c159e15401a773621d51982fd3742f88d9b9286ca3b90173
POST /s/wr3/EwA HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Aug 2024 14:26:59 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
GET vc-service.salesmanago.pl/api/vc.json?s=4zxdzbcdqqq46j4b&i=5
200 OK 1.2 kB URL GET HTTP/2 vc-service.salesmanago.pl/api/vc.json?s=4zxdzbcdqqq46j4b&i=5
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
Requested by https://account.asroma.com/?gig_ssoToken=eu1_tk1.RDYODGH_CySD7oR-wVK77RP2dM7qGZjdiBtIejn_cF0&gig_source=asroma.com
Certificate IssuerGoogle Trust Services
Subjectvc-service.salesmanago.pl
Fingerprint9C:52:E5:7B:8F:DD:FC:77:D6:F0:17:9A:1A:C6:CF:B9:0E:C8:C2:60
ValidityWed, 19 Jun 2024 19:21:15 GMT - Tue, 17 Sep 2024 20:01:59 GMT
Hash ea890d23ab99f4a61ec1765fb5710056
700fa576822d0428af24ac42518d7c5e3bed365a
082cd0c8bcba488baf4407b14f43984badeb85480969e9ff8899e6c8cd0db0b7
GET /api/vc.json?s=4zxdzbcdqqq46j4b&i=5 HTTP/1.1
Host: vc-service.salesmanago.pl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://biglietti.asroma.com
DNT: 1
Connection: keep-alive
Referer: https://biglietti.asroma.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-origin: *
content-type: application/json;charset=utf-8
content-length: 1215
date: Mon, 05 Aug 2024 14:26:58 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
2.2 kB URL app3.salesmanago.pl/api/vs?location=biglietti.asroma.com&referrer=https%3A%2F%2Fweb.axerve.com%2F
IP
Certificate IssuerDigiCert Inc
Subject*.salesmanago.pl
FingerprintDF:0D:88:9C:56:45:E8:7B:24:52:6E:1B:FA:A8:E8:72:20:98:10:E1
ValidityFri, 02 Aug 2024 00:00:00 GMT - Tue, 19 Aug 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (5482), with no line terminators
Hash 976c9b6c7a204d15820e957134eeba8e
fe70924ad6b8e239247cf259ba0ebe705f3f3420
dc2507b95bc0217986a516a51de8be12f41658ed7f62452edf73c457f117b953
GET /api/vs?location=biglietti.asroma.com&referrer=https%3A%2F%2Fweb.axerve.com%2F HTTP/1.1
Host: app3.salesmanago.pl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://biglietti.asroma.com
DNT: 1
Connection: keep-alive
Referer: https://biglietti.asroma.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Aug 2024 14:26:58 GMT
server: Apache
access-control-allow-origin: *
cache-control: max-age=1
expires: Mon, 05 Aug 2024 14:26:59 GMT
vary: Accept-Encoding
content-encoding: gzip
content-type: application/json;charset=UTF-8
strict-transport-security: max-age=31540000
set-cookie: SERVERID=A; path=/; HttpOnly; Secure
X-Firefox-Spdy: h2
526 B URL app3.salesmanago.pl/api/err.gif?m=Second%20SALESmanago%20code%20detected.%20Remove%20duplicated%20code.&u=https%3A%2F%2Fbiglietti.asroma.com%2Ftickets%2Fconfirmation%3FpaymentRef%3D66b0de88319f0d45e3e3bf72%26lang%3Dit&v=4zxdzbcdqqq46j4b
IP
Certificate IssuerDigiCert Inc
Subject*.salesmanago.pl
FingerprintDF:0D:88:9C:56:45:E8:7B:24:52:6E:1B:FA:A8:E8:72:20:98:10:E1
ValidityFri, 02 Aug 2024 00:00:00 GMT - Tue, 19 Aug 2025 23:59:59 GMT
File type gzip compressed data, max speed, from Unix
Hash 4b8d5f9a8d9fab313cd91687f97981d6
db63c6f3abe329145142d46cee5cf46594607f4c
4d090bf6c49b0032881c7fad49e0339ae5a965d4b6f36b4805e93e15582d2c7b
GET /api/err.gif?m=Second%20SALESmanago%20code%20detected.%20Remove%20duplicated%20code.&u=https%3A%2F%2Fbiglietti.asroma.com%2Ftickets%2Fconfirmation%3FpaymentRef%3D66b0de88319f0d45e3e3bf72%26lang%3Dit&v=4zxdzbcdqqq46j4b HTTP/1.1
Host: app3.salesmanago.pl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://biglietti.asroma.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Aug 2024 14:26:59 GMT
server: Apache
cache-control: max-age=0
expires: Mon, 05 Aug 2024 14:26:59 GMT
content-type: image/gif;charset=UTF-8
strict-transport-security: max-age=31540000
set-cookie: SERVERID=C; path=/; HttpOnly; Secure
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
45 kB URL identity.asroma.com/gs/webSdk/Api.aspx?apiKey=4_CgW8FMardcX-NyY8M3p6Wg&version=latest&build=16174
IP
File type HTML document, ASCII text, with very long lines (64704), with CRLF line terminators
Hash 7080c1a8c812c9c2af1b8fd53795452b
d27f63d868c002763332349380208b2b388ecd57
4391a7d340906d09d67e7f938f1c0a5036d9671b5acbb639875673cfe5c41afd
GET /gs/webSdk/Api.aspx?apiKey=4_CgW8FMardcX-NyY8M3p6Wg&version=latest&build=16174 HTTP/1.1
Host: identity.asroma.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://biglietti.asroma.com/
Cookie: nlbi_2063869=iSvYInbUsEhpVFlqlOn80gAAAADejPaUbAjNFA4CfwbN5lrv; visid_incap_2063869=cc5B4e7+S0m4zJP2yQZpsSvhsGYAAAAAQUIPAAAAAADve1E8U1oXCtvdMx3KYtYc; incap_ses_633_2063869=00+TD0+bCDo8moAIRt7ICCzhsGYAAAAAcjtysQMUIRnoTX3NLplBFw==
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html; charset=utf-8
content-length: 45000
access-control-allow-origin: *
cache-control: public, s-maxage=3600, max-age=900
content-encoding: gzip
edge-cache-tag: siteid_652763596923,ver_latest
strict-transport-security: max-age=63072000; includeSubDomains; preload
p3p: CP="IDC COR PSA DEV ADM OUR IND ONL"
x-error-code: 0
x-soa: true, Gator
x-server: eu1a-nomad-t2
x-callid: b0d58bb430f11eea899f570c2bd59e28
date: Mon, 05 Aug 2024 14:24:52 GMT
accept-ranges: bytes
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: xRmwwJjHeV750W6XFqaueV_vfqB1dFTEHILAtFicgNTBH7S4Fu54ng==
age: 127
X-Firefox-Spdy: h2
2.0 kB URL identity.asroma.com/sdk.config.get?apiKey=4_CgW8FMardcX-NyY8M3p6Wg&httpStatusCodes=true
IP
Hash 6e5adb9644acead2e0281d3af474aac8
ac7a3088d9a195b6b3aae8229deea8680ae16c30
69376b8c6946fa62ffa266d40953c8188078a9306ca6e6bbe1afe305020fb189
GET /sdk.config.get?apiKey=4_CgW8FMardcX-NyY8M3p6Wg&httpStatusCodes=true HTTP/1.1
Host: identity.asroma.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://identity.asroma.com/gs/webSdk/Api.aspx?apiKey=4_CgW8FMardcX-NyY8M3p6Wg&version=latest&build=16174
DNT: 1
Connection: keep-alive
Cookie: nlbi_2063869=iSvYInbUsEhpVFlqlOn80gAAAADejPaUbAjNFA4CfwbN5lrv; visid_incap_2063869=cc5B4e7+S0m4zJP2yQZpsSvhsGYAAAAAQUIPAAAAAADve1E8U1oXCtvdMx3KYtYc; incap_ses_633_2063869=00+TD0+bCDo8moAIRt7ICCzhsGYAAAAAcjtysQMUIRnoTX3NLplBFw==
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
content-length: 1985
access-control-allow-origin: *
cache-control: public, s-maxage=120, max-age=60
content-encoding: gzip
edge-cache-tag: siteid_652763596923
p3p: CP="IDC COR PSA DEV ADM OUR IND ONL"
x-error-code: 0
x-soa: true, Gator
x-server: eu1a-nomad-t29
x-callid: ebce696bbacac6a977db29cb8a633877
date: Mon, 05 Aug 2024 14:25:01 GMT
accept-ranges: bytes
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: oIsJSd621vOw-U04IffcT7v9pr1t_M6lI9QoJvEQhosEtQHWB9unWA==
age: 118
X-Firefox-Spdy: h2
5.8 kB URL biglietti.asroma.com/tickets/form/nazioni?date=05/08/2024
IP
File type Unicode text, UTF-8 text, with very long lines (42802), with CRLF line terminators
Hash 1a353370e583791f8e1ca145fcf5ed7f
d1ce7ac4fedb07afad9d294a97a26a4e37e39088
926d022aecbbec8ae6545b7f8c041d2a5022753feab9aa1c6396216f9228825f
GET /tickets/form/nazioni?date=05/08/2024 HTTP/1.1
Host: biglietti.asroma.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://biglietti.asroma.com/tickets/confirmation?paymentRef=66b0de88319f0d45e3e3bf72&lang=it
Cookie: JSESSIONID=MTZjMjlhM2ItZGMzZS00MTE0LThjMzgtYWUwNTVlM2FiNThh; nlbi_2063869=iSvYInbUsEhpVFlqlOn80gAAAADejPaUbAjNFA4CfwbN5lrv; visid_incap_2063869=cc5B4e7+S0m4zJP2yQZpsSvhsGYAAAAAQUIPAAAAAADve1E8U1oXCtvdMx3KYtYc; incap_ses_633_2063869=00+TD0+bCDo8moAIRt7ICCzhsGYAAAAAcjtysQMUIRnoTX3NLplBFw==; gig_canary=false; gig_canary_ver=16174-3-28714455; smvr=eyJ2aXNpdHMiOjEsInZpZXdzIjoxLCJ0cyI6MTcyMjg2ODAxODgzNCwiaXNOZXdTZXNzaW9uIjp0cnVlfQ==; smuuid=19122efae92-bd22ac7b5b31-e8a6a8d4-54e274de-36014177-64ad3b7ce0b2
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Aug 2024 14:26:59 GMT
server: Apache
content-type: application/json;charset=UTF-8
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: deny
x-permitted-cross-domain-policies: master-only
x-cdn: Imperva
content-encoding: gzip
x-iinfo: 4-7301633-7301635 pNYy RT(1722868011921 7012) q(0 0 0 -1) r(2 2) U12
X-Firefox-Spdy: h2
33 kB URL identity.asroma.com/gs/sso.htm?APIKey=3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5&ssoSegment=&version=latest&build=16174
IP
File type HTML document, ASCII text, with very long lines (64578), with CRLF, LF line terminators
Hash 59583711fb1712a19e6b3270ad89425a
09a7b1dd5a9dd3e9fcf6aaa7eb708b0889323cb8
5771324b5811ebd55ef0fd7c5a512a4ec4324e3162591c561c039dbedc6df906
GET /gs/sso.htm?APIKey=3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5&ssoSegment=&version=latest&build=16174 HTTP/1.1
Host: identity.asroma.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://biglietti.asroma.com/
Cookie: nlbi_2063869=iSvYInbUsEhpVFlqlOn80gAAAADejPaUbAjNFA4CfwbN5lrv; visid_incap_2063869=cc5B4e7+S0m4zJP2yQZpsSvhsGYAAAAAQUIPAAAAAADve1E8U1oXCtvdMx3KYtYc; incap_ses_633_2063869=00+TD0+bCDo8moAIRt7ICCzhsGYAAAAAcjtysQMUIRnoTX3NLplBFw==; apiDomain_3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5=identity.asroma.com; gig3pctest=true; gmid=gmid.ver4.AtLtbKsfSQ.Fg8k3zJwci2J6_deVcYyzyNKfNsOK6gSIgUkuVGZfXF7Aspdn7qhsDTQpxwNpbIq.dPiq38ozEvcC3Pbzs5BeDW_BF3FdYbcDyRl_PkDT8-ByLjlHrwyynERTTpvkwwce4l76mciLDQUoUGGeKXtNUg.sc3; ucid=ZkmVv_WPsKvHFzdnqte4Ow; hasGmid=ver4; gig_bootstrap_4_CgW8FMardcX-NyY8M3p6Wg=identity_ver4
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/html; charset=utf-8
content-length: 33407
access-control-allow-origin: *
cache-control: public, s-maxage=3600, max-age=900
content-encoding: gzip
edge-cache-tag: siteid_759736734723,ver_latest
strict-transport-security: max-age=63072000; includeSubDomains; preload
p3p: CP="IDC COR PSA DEV ADM OUR IND ONL"
x-error-code: 0
x-soa: true, Gator
x-server: eu1a-nomad-t22
x-callid: ed9434121970b628c9f8aebddcc591ac
date: Mon, 05 Aug 2024 13:36:45 GMT
accept-ranges: bytes
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: KGr-cbDYw2JuxtYLmAL1qmye_PvqlfbU5dBbYt9Vs7-5fkj01LyhFQ==
age: 3014
X-Firefox-Spdy: h2
35 kB URL biglietti.asroma.com/tickets/form/province
IP
File type JavaScript source, ASCII text, with very long lines (52738), with CRLF, LF line terminators
Hash 8627b3e478d325fc4381bd2be99bf532
faf82968744c21f79f5b9f8ac4712892f3d538e5
1c4b9bcdbb3f62f7852c872fe3b21b9ac648848ada2dc35fd60f4c2d60112a54
GET /tickets/form/province HTTP/1.1
Host: biglietti.asroma.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://biglietti.asroma.com/tickets/confirmation?paymentRef=66b0de88319f0d45e3e3bf72&lang=it
Cookie: JSESSIONID=MTZjMjlhM2ItZGMzZS00MTE0LThjMzgtYWUwNTVlM2FiNThh; nlbi_2063869=iSvYInbUsEhpVFlqlOn80gAAAADejPaUbAjNFA4CfwbN5lrv; visid_incap_2063869=cc5B4e7+S0m4zJP2yQZpsSvhsGYAAAAAQUIPAAAAAADve1E8U1oXCtvdMx3KYtYc; incap_ses_633_2063869=00+TD0+bCDo8moAIRt7ICCzhsGYAAAAAcjtysQMUIRnoTX3NLplBFw==; gig_canary=false; gig_canary_ver=16174-3-28714455; smvr=eyJ2aXNpdHMiOjEsInZpZXdzIjoxLCJ0cyI6MTcyMjg2ODAxODgzNCwiaXNOZXdTZXNzaW9uIjp0cnVlfQ==; smuuid=19122efae92-bd22ac7b5b31-e8a6a8d4-54e274de-36014177-64ad3b7ce0b2; _smvs=OTHER
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Aug 2024 14:26:59 GMT
server: Apache
content-type: application/json;charset=UTF-8
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: deny
x-permitted-cross-domain-policies: master-only
x-cdn: Imperva
content-encoding: gzip
x-iinfo: 4-7301633-7301635 pNYy RT(1722868011921 7269) q(0 0 0 -1) r(2 2) U12
X-Firefox-Spdy: h2
GET identity.asroma.com/sdk.config.get?apiKey=3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5&httpStatusCodes=true
200 OK 2.0 kB URL GET HTTP/2 identity.asroma.com/sdk.config.get?apiKey=3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5&httpStatusCodes=true
IP
Requested by https://account.asroma.com/?gig_ssoToken=eu1_tk1.RDYODGH_CySD7oR-wVK77RP2dM7qGZjdiBtIejn_cF0&gig_source=asroma.com
Certificate IssuerAmazon
Subjectidentity.asroma.com
Fingerprint7A:76:DF:A0:1D:77:22:B0:3B:F1:0B:5F:E1:72:43:DF:66:42:03:E8
ValiditySun, 26 Nov 2023 00:00:00 GMT - Tue, 24 Dec 2024 23:59:59 GMT
Hash a6da378c87efc09789eaf9dc90ebd8ca
6fa4ba4ce2105e25f840a74588ebf19f58613a83
8d2c5bb4161a6e8ddd38aeaa25986fcbefdf441843b34a13fa5abaac38908b49
GET /sdk.config.get?apiKey=3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5&httpStatusCodes=true HTTP/1.1
Host: identity.asroma.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://identity.asroma.com/gs/sso.htm?APIKey=3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5&ssoSegment=&version=latest&build=16174
DNT: 1
Connection: keep-alive
Cookie: nlbi_2063869=iSvYInbUsEhpVFlqlOn80gAAAADejPaUbAjNFA4CfwbN5lrv; visid_incap_2063869=cc5B4e7+S0m4zJP2yQZpsSvhsGYAAAAAQUIPAAAAAADve1E8U1oXCtvdMx3KYtYc; incap_ses_633_2063869=00+TD0+bCDo8moAIRt7ICCzhsGYAAAAAcjtysQMUIRnoTX3NLplBFw==; apiDomain_3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5=identity.asroma.com; gig3pctest=true; gmid=gmid.ver4.AtLtbKsfSQ.Fg8k3zJwci2J6_deVcYyzyNKfNsOK6gSIgUkuVGZfXF7Aspdn7qhsDTQpxwNpbIq.dPiq38ozEvcC3Pbzs5BeDW_BF3FdYbcDyRl_PkDT8-ByLjlHrwyynERTTpvkwwce4l76mciLDQUoUGGeKXtNUg.sc3; ucid=ZkmVv_WPsKvHFzdnqte4Ow; hasGmid=ver4; gig_bootstrap_4_CgW8FMardcX-NyY8M3p6Wg=identity_ver4
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
content-length: 1992
access-control-allow-origin: *
cache-control: public, s-maxage=120, max-age=60
content-encoding: gzip
edge-cache-tag: siteid_759736734723
p3p: CP="IDC COR PSA DEV ADM OUR IND ONL"
x-error-code: 0
x-soa: true, Gator
x-server: eu1a-nomad-t23
x-callid: d81636d63c4d1aaa7291de22e8384128
date: Mon, 05 Aug 2024 14:25:34 GMT
accept-ranges: bytes
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: hEboMJpT0C6zCDVutBf8p4IafpLdivBSUydfv8srGDhvfu8aWm5AqA==
age: 85
X-Firefox-Spdy: h2
GET identity.asroma.com/sdk.config.get?apiKey=3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5&httpStatusCodes=true
200 OK 2.0 kB URL GET HTTP/2 identity.asroma.com/sdk.config.get?apiKey=3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5&httpStatusCodes=true
IP
Requested by https://account.asroma.com/?gig_ssoToken=eu1_tk1.RDYODGH_CySD7oR-wVK77RP2dM7qGZjdiBtIejn_cF0&gig_source=asroma.com
Certificate IssuerAmazon
Subjectidentity.asroma.com
Fingerprint7A:76:DF:A0:1D:77:22:B0:3B:F1:0B:5F:E1:72:43:DF:66:42:03:E8
ValiditySun, 26 Nov 2023 00:00:00 GMT - Tue, 24 Dec 2024 23:59:59 GMT
Hash a6da378c87efc09789eaf9dc90ebd8ca
6fa4ba4ce2105e25f840a74588ebf19f58613a83
8d2c5bb4161a6e8ddd38aeaa25986fcbefdf441843b34a13fa5abaac38908b49
GET /sdk.config.get?apiKey=3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5&httpStatusCodes=true HTTP/1.1
Host: identity.asroma.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://identity.asroma.com/gs/sso.htm?APIKey=3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5&ssoSegment=&version=latest&build=16174
DNT: 1
Connection: keep-alive
Cookie: nlbi_2063869=iSvYInbUsEhpVFlqlOn80gAAAADejPaUbAjNFA4CfwbN5lrv; visid_incap_2063869=cc5B4e7+S0m4zJP2yQZpsSvhsGYAAAAAQUIPAAAAAADve1E8U1oXCtvdMx3KYtYc; incap_ses_633_2063869=00+TD0+bCDo8moAIRt7ICCzhsGYAAAAAcjtysQMUIRnoTX3NLplBFw==; apiDomain_3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5=identity.asroma.com; gig3pctest=true; gmid=gmid.ver4.AtLtbKsfSQ.Fg8k3zJwci2J6_deVcYyzyNKfNsOK6gSIgUkuVGZfXF7Aspdn7qhsDTQpxwNpbIq.dPiq38ozEvcC3Pbzs5BeDW_BF3FdYbcDyRl_PkDT8-ByLjlHrwyynERTTpvkwwce4l76mciLDQUoUGGeKXtNUg.sc3; ucid=ZkmVv_WPsKvHFzdnqte4Ow; hasGmid=ver4; gig_bootstrap_4_CgW8FMardcX-NyY8M3p6Wg=identity_ver4
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
content-length: 1992
access-control-allow-origin: *
cache-control: public, s-maxage=120, max-age=60
content-encoding: gzip
edge-cache-tag: siteid_759736734723
p3p: CP="IDC COR PSA DEV ADM OUR IND ONL"
x-error-code: 0
x-soa: true, Gator
x-server: eu1a-nomad-t23
x-callid: d81636d63c4d1aaa7291de22e8384128
date: Mon, 05 Aug 2024 14:25:34 GMT
accept-ranges: bytes
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 72XWLVgImjOpZnY0BecNgYs63buGq132POenq8nXx5NrlRYb4SNcCg==
age: 85
X-Firefox-Spdy: h2
GET identity.asroma.com/accounts.sso.login?APIKey=4_CgW8FMardcX-NyY8M3p6Wg&redirectURL=https%3A%2F%2Fbiglietti.asroma.com%2Ftickets%2Fconfirmation%3FpaymentRef%3D66b0de88319f0d45e3e3bf72%26lang%3Dit&authFlow=redirect&sdk=js_latest&state=%7B%22domain%22%3A%22https%3A%2F%2Fbiglietti.asroma.com%2Ftickets%2Fconfirmation%22%2C%22lid%22%3A%22flid1722868018023%22%2C%22messaging%22%3A1%2C%22id%22%3A%22accounts_sso_login_17228680201451722868020145%22%2C%22context%22%3A%7B%22source%22%3A%22asroma.com%22%7D%2C%22gig_actions%22%3A%22sso.login%22%2C%22authFlow%22%3A%22redirect%22%7D&authMode=cookie
302 Found 0 B URL User Request GET HTTP/2 identity.asroma.com/accounts.sso.login?APIKey=4_CgW8FMardcX-NyY8M3p6Wg&redirectURL=https%3A%2F%2Fbiglietti.asroma.com%2Ftickets%2Fconfirmation%3FpaymentRef%3D66b0de88319f0d45e3e3bf72%26lang%3Dit&authFlow=redirect&sdk=js_latest&state=%7B%22domain%22%3A%22https%3A%2F%2Fbiglietti.asroma.com%2Ftickets%2Fconfirmation%22%2C%22lid%22%3A%22flid1722868018023%22%2C%22messaging%22%3A1%2C%22id%22%3A%22accounts_sso_login_17228680201451722868020145%22%2C%22context%22%3A%7B%22source%22%3A%22asroma.com%22%7D%2C%22gig_actions%22%3A%22sso.login%22%2C%22authFlow%22%3A%22redirect%22%7D&authMode=cookie
IP
Certificate IssuerAmazon
Subjectidentity.asroma.com
Fingerprint7A:76:DF:A0:1D:77:22:B0:3B:F1:0B:5F:E1:72:43:DF:66:42:03:E8
ValiditySun, 26 Nov 2023 00:00:00 GMT - Tue, 24 Dec 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /accounts.sso.login?APIKey=4_CgW8FMardcX-NyY8M3p6Wg&redirectURL=https%3A%2F%2Fbiglietti.asroma.com%2Ftickets%2Fconfirmation%3FpaymentRef%3D66b0de88319f0d45e3e3bf72%26lang%3Dit&authFlow=redirect&sdk=js_latest&state=%7B%22domain%22%3A%22https%3A%2F%2Fbiglietti.asroma.com%2Ftickets%2Fconfirmation%22%2C%22lid%22%3A%22flid1722868018023%22%2C%22messaging%22%3A1%2C%22id%22%3A%22accounts_sso_login_17228680201451722868020145%22%2C%22context%22%3A%7B%22source%22%3A%22asroma.com%22%7D%2C%22gig_actions%22%3A%22sso.login%22%2C%22authFlow%22%3A%22redirect%22%7D&authMode=cookie HTTP/1.1
Host: identity.asroma.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://biglietti.asroma.com/
Cookie: nlbi_2063869=iSvYInbUsEhpVFlqlOn80gAAAADejPaUbAjNFA4CfwbN5lrv; visid_incap_2063869=cc5B4e7+S0m4zJP2yQZpsSvhsGYAAAAAQUIPAAAAAADve1E8U1oXCtvdMx3KYtYc; incap_ses_633_2063869=00+TD0+bCDo8moAIRt7ICCzhsGYAAAAAcjtysQMUIRnoTX3NLplBFw==; apiDomain_3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5=identity.asroma.com; gmid=gmid.ver4.AtLtbKsfSQ.Fg8k3zJwci2J6_deVcYyzyNKfNsOK6gSIgUkuVGZfXF7Aspdn7qhsDTQpxwNpbIq.dPiq38ozEvcC3Pbzs5BeDW_BF3FdYbcDyRl_PkDT8-ByLjlHrwyynERTTpvkwwce4l76mciLDQUoUGGeKXtNUg.sc3; ucid=ZkmVv_WPsKvHFzdnqte4Ow; hasGmid=ver4; gig_bootstrap_4_CgW8FMardcX-NyY8M3p6Wg=identity_ver4; gig_canary_3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5=false; gig_canary_ver_3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5=16174-3-28714455
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
content-length: 0
location: https://account.asroma.com/?gig_ssoToken=eu1_tk1.RDYODGH_CySD7oR-wVK77RP2dM7qGZjdiBtIejn_cF0&gig_source=asroma.com
date: Mon, 05 Aug 2024 14:27:00 GMT
cache-control: private
p3p: CP="IDC COR PSA DEV ADM OUR IND ONL"
x-error-code: 0
x-soa: true, Gator
x-server: eu1a-nomad-t8
x-callid: 49408148d3b253e5b2e1128037363f43
x-robots-tag: none
x-cache: Miss from cloudfront
via: 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: UewrC5IySqq7z2WojSY9Ur6g_LacYha4oY0I9eX2C1kPOUNonws3aQ==
X-Firefox-Spdy: h2
GET account.asroma.com/?gig_ssoToken=eu1_tk1.RDYODGH_CySD7oR-wVK77RP2dM7qGZjdiBtIejn_cF0&gig_source=asroma.com
200 OK 52 kB URL User Request GET HTTP/2 account.asroma.com/?gig_ssoToken=eu1_tk1.RDYODGH_CySD7oR-wVK77RP2dM7qGZjdiBtIejn_cF0&gig_source=asroma.com
IP
Certificate IssuerGoDaddy.com, Inc.
Subjectaccount.asroma.com
FingerprintF5:AA:BE:E1:B8:54:11:A9:3C:52:BC:61:B6:A7:AA:64:EE:6E:8F:8C
ValiditySun, 25 Feb 2024 08:15:27 GMT - Mon, 24 Feb 2025 10:54:20 GMT
File type HTML document, Unicode text, UTF-8 text
Hash f576251eeece6046ca10066bdc9d0fb7
055103e6cf7500e706d5df74f20cc3a78455b7c1
f98a72e89f9831c8733a4bb43bab2577fa55484fe0f9377310883f7f12caafb7
GET /?gig_ssoToken=eu1_tk1.RDYODGH_CySD7oR-wVK77RP2dM7qGZjdiBtIejn_cF0&gig_source=asroma.com HTTP/1.1
Host: account.asroma.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://biglietti.asroma.com/
DNT: 1
Connection: keep-alive
Cookie: nlbi_2063869=iSvYInbUsEhpVFlqlOn80gAAAADejPaUbAjNFA4CfwbN5lrv; visid_incap_2063869=cc5B4e7+S0m4zJP2yQZpsSvhsGYAAAAAQUIPAAAAAADve1E8U1oXCtvdMx3KYtYc; incap_ses_633_2063869=00+TD0+bCDo8moAIRt7ICCzhsGYAAAAAcjtysQMUIRnoTX3NLplBFw==; gig_bootstrap_4_CgW8FMardcX-NyY8M3p6Wg=identity_ver4
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html
content-length: 52077
last-modified: Mon, 25 Sep 2023 15:26:43 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Mon, 05 Aug 2024 13:36:07 GMT
etag: "f576251eeece6046ca10066bdc9d0fb7"
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: SSaibYMrZOY40kKhBiEW5MxkHlcdc0GoxuUDQ8tg6RKC5XMlBry9IA==
age: 3054
X-Firefox-Spdy: h2
GET account.asroma.com/css/owl.carousel.min.css
200 OK 3.4 kB URL GET HTTP/2 account.asroma.com/css/owl.carousel.min.css
IP
Requested by https://account.asroma.com/?gig_ssoToken=eu1_tk1.RDYODGH_CySD7oR-wVK77RP2dM7qGZjdiBtIejn_cF0&gig_source=asroma.com
Certificate IssuerGoDaddy.com, Inc.
Subjectaccount.asroma.com
FingerprintF5:AA:BE:E1:B8:54:11:A9:3C:52:BC:61:B6:A7:AA:64:EE:6E:8F:8C
ValiditySun, 25 Feb 2024 08:15:27 GMT - Mon, 24 Feb 2025 10:54:20 GMT
File type ASCII text, with very long lines (3184)
Hash b2752a850d44f50036628eeaef3bfcfa
fba46353cf90450ef3d362a123f1e7af3e8c561e
521410e1fc44780061e09adc980275fb5ea277fd5d9e538454214ec4379ff4bc
GET /css/owl.carousel.min.css HTTP/1.1
Host: account.asroma.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://account.asroma.com/?gig_ssoToken=eu1_tk1.RDYODGH_CySD7oR-wVK77RP2dM7qGZjdiBtIejn_cF0&gig_source=asroma.com
Cookie: nlbi_2063869=iSvYInbUsEhpVFlqlOn80gAAAADejPaUbAjNFA4CfwbN5lrv; visid_incap_2063869=cc5B4e7+S0m4zJP2yQZpsSvhsGYAAAAAQUIPAAAAAADve1E8U1oXCtvdMx3KYtYc; incap_ses_633_2063869=00+TD0+bCDo8moAIRt7ICCzhsGYAAAAAcjtysQMUIRnoTX3NLplBFw==; gig_bootstrap_4_CgW8FMardcX-NyY8M3p6Wg=identity_ver4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-length: 3351
date: Mon, 05 Aug 2024 14:26:44 GMT
last-modified: Mon, 25 Sep 2023 15:27:15 GMT
etag: "b2752a850d44f50036628eeaef3bfcfa"
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: gE7Lg645rUTjT_jXlZyh6QJKszKBLRyWxM4rGPJu8e7F8wRQgtIumQ==
age: 17
X-Firefox-Spdy: h2
GET account.asroma.com/css/owl.theme.default.min.css
200 OK 1.0 kB URL GET HTTP/2 account.asroma.com/css/owl.theme.default.min.css
IP
Requested by https://account.asroma.com/?gig_ssoToken=eu1_tk1.RDYODGH_CySD7oR-wVK77RP2dM7qGZjdiBtIejn_cF0&gig_source=asroma.com
Certificate IssuerGoDaddy.com, Inc.
Subjectaccount.asroma.com
FingerprintF5:AA:BE:E1:B8:54:11:A9:3C:52:BC:61:B6:A7:AA:64:EE:6E:8F:8C
ValiditySun, 25 Feb 2024 08:15:27 GMT - Mon, 24 Feb 2025 10:54:20 GMT
File type ASCII text, with very long lines (846)
Hash 594b81805a98b267e47c70a8fad30d9f
684d84ec40b305ca14efc88c91f12972cb6342b4
924b0dc630d1c5dff9fa31aead9509775b1d476bfe0a5ac2977b2f11205a26ac
GET /css/owl.theme.default.min.css HTTP/1.1
Host: account.asroma.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://account.asroma.com/?gig_ssoToken=eu1_tk1.RDYODGH_CySD7oR-wVK77RP2dM7qGZjdiBtIejn_cF0&gig_source=asroma.com
Cookie: nlbi_2063869=iSvYInbUsEhpVFlqlOn80gAAAADejPaUbAjNFA4CfwbN5lrv; visid_incap_2063869=cc5B4e7+S0m4zJP2yQZpsSvhsGYAAAAAQUIPAAAAAADve1E8U1oXCtvdMx3KYtYc; incap_ses_633_2063869=00+TD0+bCDo8moAIRt7ICCzhsGYAAAAAcjtysQMUIRnoTX3NLplBFw==; gig_bootstrap_4_CgW8FMardcX-NyY8M3p6Wg=identity_ver4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-length: 1013
date: Mon, 05 Aug 2024 14:26:44 GMT
last-modified: Mon, 25 Sep 2023 15:27:16 GMT
etag: "594b81805a98b267e47c70a8fad30d9f"
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: oRXMjX2tmj8wfQmZsgLOc_2XWbkkpEAYPp4W9MP_DzASgDOav0JRhw==
age: 17
X-Firefox-Spdy: h2
GET account.asroma.com/css/main.css
200 OK 102 kB URL GET HTTP/2 account.asroma.com/css/main.css
IP
Requested by https://account.asroma.com/?gig_ssoToken=eu1_tk1.RDYODGH_CySD7oR-wVK77RP2dM7qGZjdiBtIejn_cF0&gig_source=asroma.com
Certificate IssuerGoDaddy.com, Inc.
Subjectaccount.asroma.com
FingerprintF5:AA:BE:E1:B8:54:11:A9:3C:52:BC:61:B6:A7:AA:64:EE:6E:8F:8C
ValiditySun, 25 Feb 2024 08:15:27 GMT - Mon, 24 Feb 2025 10:54:20 GMT
File type ASCII text, with very long lines (1338)
Size 102 kB (101556 bytes)
Hash b6c3095f1763bf65ca25a9f52f346f21
fd5ea17dadfbd7aad1a8b6f08e4d312654132d1f
16eb12b5d9be635d22afb67925c2a59fbde396a0fb883d41a05e4e397b4c3a4d
GET /css/main.css HTTP/1.1
Host: account.asroma.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://account.asroma.com/?gig_ssoToken=eu1_tk1.RDYODGH_CySD7oR-wVK77RP2dM7qGZjdiBtIejn_cF0&gig_source=asroma.com
Cookie: nlbi_2063869=iSvYInbUsEhpVFlqlOn80gAAAADejPaUbAjNFA4CfwbN5lrv; visid_incap_2063869=cc5B4e7+S0m4zJP2yQZpsSvhsGYAAAAAQUIPAAAAAADve1E8U1oXCtvdMx3KYtYc; incap_ses_633_2063869=00+TD0+bCDo8moAIRt7ICCzhsGYAAAAAcjtysQMUIRnoTX3NLplBFw==; gig_bootstrap_4_CgW8FMardcX-NyY8M3p6Wg=identity_ver4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-length: 101556
date: Mon, 05 Aug 2024 14:26:44 GMT
last-modified: Mon, 25 Sep 2023 15:27:15 GMT
etag: "b6c3095f1763bf65ca25a9f52f346f21"
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: UVbKHNrnrc-FIC9BronvOiiXHiyQa3fc2AknPr_sbp21p4lm9oY6aQ==
age: 17
X-Firefox-Spdy: h2
385 kB URL use.fontawesome.com/releases/v5.5.0/js/all.js
IP
File type JavaScript source, ASCII text, with very long lines (65351)
Size 385 kB (385344 bytes)
Hash 02dc00e986773a2294d5ce33ef02e442
d0f4ff24480d518ca8301e4d7df51cd9f1b1b9ae
16e8f08eb363930ccc9f0e91f33ded7905fed943045a040078196294db8a9b17
GET /releases/v5.5.0/js/all.js HTTP/1.1
Host: use.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://biglietti.asroma.com
DNT: 1
Connection: keep-alive
Referer: https://biglietti.asroma.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 05 Aug 2024 14:26:57 GMT
content-type: application/javascript
access-control-allow-origin: *
cache-control: max-age=31556926
etag: W/"02dc00e986773a2294d5ce33ef02e442"
last-modified: Fri, 22 Sep 2023 01:45:36 GMT
vary: Origin, Accept-Encoding
cf-cache-status: HIT
age: 33926
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=l3ngD6cQIfTMwP6ZRKi8qEybONpyjU62eLZqicnKfy2WeKCw7qZEqdh5IzgYKBDT6qsCcY4ACaJxVdUznYhqiMzotoc0fZXPnD5WZPLJP9PfaVyGqfVo0dCNxsKa9T%2FTUCNnKxmj"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8ae77717ab4f7128-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET account.asroma.com/img/logo_asRoma.png
200 OK 7.1 kB URL GET HTTP/2 account.asroma.com/img/logo_asRoma.png
IP
Requested by https://account.asroma.com/?gig_ssoToken=eu1_tk1.RDYODGH_CySD7oR-wVK77RP2dM7qGZjdiBtIejn_cF0&gig_source=asroma.com
Certificate IssuerGoDaddy.com, Inc.
Subjectaccount.asroma.com
FingerprintF5:AA:BE:E1:B8:54:11:A9:3C:52:BC:61:B6:A7:AA:64:EE:6E:8F:8C
ValiditySun, 25 Feb 2024 08:15:27 GMT - Mon, 24 Feb 2025 10:54:20 GMT
File type PNG image data, 336 x 120, 8-bit/color RGBA, non-interlaced
Hash 594a3b4464ab991da7c034c3f8b9ccce
897205b5c615f84d9e21628af67f5b15db7aa36e
6f3dab7b78b6ebe3cdb6f997372e9b178ef0cff95476a95919cd52a82e72411e
GET /img/logo_asRoma.png HTTP/1.1
Host: account.asroma.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://account.asroma.com/?gig_ssoToken=eu1_tk1.RDYODGH_CySD7oR-wVK77RP2dM7qGZjdiBtIejn_cF0&gig_source=asroma.com
Cookie: nlbi_2063869=iSvYInbUsEhpVFlqlOn80gAAAADejPaUbAjNFA4CfwbN5lrv; visid_incap_2063869=cc5B4e7+S0m4zJP2yQZpsSvhsGYAAAAAQUIPAAAAAADve1E8U1oXCtvdMx3KYtYc; incap_ses_633_2063869=00+TD0+bCDo8moAIRt7ICCzhsGYAAAAAcjtysQMUIRnoTX3NLplBFw==; gig_bootstrap_4_CgW8FMardcX-NyY8M3p6Wg=identity_ver4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 7108
date: Mon, 05 Aug 2024 14:26:44 GMT
last-modified: Mon, 25 Sep 2023 15:27:04 GMT
etag: "594a3b4464ab991da7c034c3f8b9ccce"
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Nn3N4KO_VTxnOAyoVNxZm4UWK4jkqHP9LWpC_giq0NiMFqZ0Ht2LAA==
age: 17
X-Firefox-Spdy: h2
GET account.asroma.com/img/ASROMA.png
200 OK 14 kB URL GET HTTP/2 account.asroma.com/img/ASROMA.png
IP
Requested by https://account.asroma.com/?gig_ssoToken=eu1_tk1.RDYODGH_CySD7oR-wVK77RP2dM7qGZjdiBtIejn_cF0&gig_source=asroma.com
Certificate IssuerGoDaddy.com, Inc.
Subjectaccount.asroma.com
FingerprintF5:AA:BE:E1:B8:54:11:A9:3C:52:BC:61:B6:A7:AA:64:EE:6E:8F:8C
ValiditySun, 25 Feb 2024 08:15:27 GMT - Mon, 24 Feb 2025 10:54:20 GMT
File type PNG image data, 151 x 196, 8-bit/color RGBA, non-interlaced
Hash a156918b745eb08d7c2d55853e75c2a0
bfbee68dea03269a8c0fa43d5eabdbe20281a709
bcc12591cc57ea926d86b96c06167e63b6694b3b4cb8a1f27c554401dd18d37b
GET /img/ASROMA.png HTTP/1.1
Host: account.asroma.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://account.asroma.com/?gig_ssoToken=eu1_tk1.RDYODGH_CySD7oR-wVK77RP2dM7qGZjdiBtIejn_cF0&gig_source=asroma.com
Cookie: nlbi_2063869=iSvYInbUsEhpVFlqlOn80gAAAADejPaUbAjNFA4CfwbN5lrv; visid_incap_2063869=cc5B4e7+S0m4zJP2yQZpsSvhsGYAAAAAQUIPAAAAAADve1E8U1oXCtvdMx3KYtYc; incap_ses_633_2063869=00+TD0+bCDo8moAIRt7ICCzhsGYAAAAAcjtysQMUIRnoTX3NLplBFw==; gig_bootstrap_4_CgW8FMardcX-NyY8M3p6Wg=identity_ver4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 13729
date: Mon, 05 Aug 2024 14:26:44 GMT
last-modified: Mon, 25 Sep 2023 15:26:49 GMT
etag: "a156918b745eb08d7c2d55853e75c2a0"
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: beze2Nwfs1qLjgxWCjgQzZa9aedo9McWtz5rj9Xb1R9aCTT4-bMd3Q==
age: 17
X-Firefox-Spdy: h2
GET cdns.eu1.gigya.com/js/gigya.js?apikey=3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5
200 OK 179 kB URL GET HTTP/2 cdns.eu1.gigya.com/js/gigya.js?apikey=3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5
IP
ASN #7545 TPG Telecom Limited
Requested by https://account.asroma.com/?gig_ssoToken=eu1_tk1.RDYODGH_CySD7oR-wVK77RP2dM7qGZjdiBtIejn_cF0&gig_source=asroma.com
Certificate IssuerDigiCert Inc
Subjectcdns.gigya.com
Fingerprint69:D8:CB:78:FA:70:07:D3:1E:F0:BA:B8:44:0F:10:29:01:99:F4:5E
ValidityWed, 25 Oct 2023 00:00:00 GMT - Thu, 24 Oct 2024 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (51140), with CRLF line terminators
Size 179 kB (179431 bytes)
Hash c7c8a1c60a24cc84f8ecd238a89a6d19
b702b3bb8ed8a1ffcdd0cf79b0bfe1a5b8ce155e
119acd6a94d74d352225e1bd37f04d26700b7bbbf6c8cc9e3d4924aad100ac76
GET /js/gigya.js?apikey=3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5 HTTP/1.1
Host: cdns.eu1.gigya.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://account.asroma.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 179431
content-type: text/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, s-maxage=3600, max-age=900
content-encoding: gzip
vary: Accept-Encoding
p3p: CP="IDC COR PSA DEV ADM OUR IND ONL"
x-error-code: 0
x-soa: true, Gator
x-server: us1d-nomad-t19
x-callid: a74bccbdf3b700fdd4041de48bea83bc
x-robots-tag: none
date: Mon, 05 Aug 2024 14:27:00 GMT
X-Firefox-Spdy: h2
GET account.asroma.com/img/logo.png
200 OK 3.2 kB URL GET HTTP/2 account.asroma.com/img/logo.png
IP
Requested by https://account.asroma.com/?gig_ssoToken=eu1_tk1.RDYODGH_CySD7oR-wVK77RP2dM7qGZjdiBtIejn_cF0&gig_source=asroma.com
Certificate IssuerGoDaddy.com, Inc.
Subjectaccount.asroma.com
FingerprintF5:AA:BE:E1:B8:54:11:A9:3C:52:BC:61:B6:A7:AA:64:EE:6E:8F:8C
ValiditySun, 25 Feb 2024 08:15:27 GMT - Mon, 24 Feb 2025 10:54:20 GMT
File type PNG image data, 122 x 40, 8-bit/color RGBA, non-interlaced
Hash db70bc3c12a09f7bb2df7b5a64ffebeb
e194031a0ad5ae3d78b49c9380a13d6d7233a3f6
ccbaa6d2fc99d73fc5265bafd4691759cafd8e009aafe0e54b63d6ea0715d261
GET /img/logo.png HTTP/1.1
Host: account.asroma.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://account.asroma.com/?gig_ssoToken=eu1_tk1.RDYODGH_CySD7oR-wVK77RP2dM7qGZjdiBtIejn_cF0&gig_source=asroma.com
Cookie: nlbi_2063869=iSvYInbUsEhpVFlqlOn80gAAAADejPaUbAjNFA4CfwbN5lrv; visid_incap_2063869=cc5B4e7+S0m4zJP2yQZpsSvhsGYAAAAAQUIPAAAAAADve1E8U1oXCtvdMx3KYtYc; incap_ses_633_2063869=00+TD0+bCDo8moAIRt7ICCzhsGYAAAAAcjtysQMUIRnoTX3NLplBFw==; gig_bootstrap_4_CgW8FMardcX-NyY8M3p6Wg=identity_ver4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 3222
last-modified: Mon, 25 Sep 2023 15:27:03 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Mon, 05 Aug 2024 13:36:07 GMT
etag: "db70bc3c12a09f7bb2df7b5a64ffebeb"
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: VdGOICUJpf6Ld-w6Wj-Li1NszwISOfDuzpWZR7Ebi_LLwAoyRYA4uw==
age: 3054
X-Firefox-Spdy: h2
GET account.asroma.com/img/Subtract.png
200 OK 411 B URL GET HTTP/2 account.asroma.com/img/Subtract.png
IP
Requested by https://account.asroma.com/?gig_ssoToken=eu1_tk1.RDYODGH_CySD7oR-wVK77RP2dM7qGZjdiBtIejn_cF0&gig_source=asroma.com
Certificate IssuerGoDaddy.com, Inc.
Subjectaccount.asroma.com
FingerprintF5:AA:BE:E1:B8:54:11:A9:3C:52:BC:61:B6:A7:AA:64:EE:6E:8F:8C
ValiditySun, 25 Feb 2024 08:15:27 GMT - Mon, 24 Feb 2025 10:54:20 GMT
File type PNG image data, 22 x 25, 8-bit/color RGBA, non-interlaced
Hash 4207c16e7343ea7ce861e2aa4fc5df36
467467dc64d47bf3f93040366b4ac01a51c9c5e2
f12406701c838efb9b9549f0d144df58c7260536f65e3866c5a3243daa1a5115
GET /img/Subtract.png HTTP/1.1
Host: account.asroma.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://account.asroma.com/?gig_ssoToken=eu1_tk1.RDYODGH_CySD7oR-wVK77RP2dM7qGZjdiBtIejn_cF0&gig_source=asroma.com
Cookie: nlbi_2063869=iSvYInbUsEhpVFlqlOn80gAAAADejPaUbAjNFA4CfwbN5lrv; visid_incap_2063869=cc5B4e7+S0m4zJP2yQZpsSvhsGYAAAAAQUIPAAAAAADve1E8U1oXCtvdMx3KYtYc; incap_ses_633_2063869=00+TD0+bCDo8moAIRt7ICCzhsGYAAAAAcjtysQMUIRnoTX3NLplBFw==; gig_bootstrap_4_CgW8FMardcX-NyY8M3p6Wg=identity_ver4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 411
date: Mon, 05 Aug 2024 14:26:44 GMT
last-modified: Mon, 25 Sep 2023 15:27:12 GMT
etag: "4207c16e7343ea7ce861e2aa4fc5df36"
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ITnODdDbOiscoM_vd9Iu3BQ3HEeIJ2p-jt8QcRbLJ2wjcWb2ptSL8w==
age: 17
X-Firefox-Spdy: h2
GET account.asroma.com/img/icon.png
200 OK 367 B URL GET HTTP/2 account.asroma.com/img/icon.png
IP
Requested by https://account.asroma.com/?gig_ssoToken=eu1_tk1.RDYODGH_CySD7oR-wVK77RP2dM7qGZjdiBtIejn_cF0&gig_source=asroma.com
Certificate IssuerGoDaddy.com, Inc.
Subjectaccount.asroma.com
FingerprintF5:AA:BE:E1:B8:54:11:A9:3C:52:BC:61:B6:A7:AA:64:EE:6E:8F:8C
ValiditySun, 25 Feb 2024 08:15:27 GMT - Mon, 24 Feb 2025 10:54:20 GMT
File type PNG image data, 25 x 25, 8-bit/color RGBA, non-interlaced
Hash f7eb40702bb9aac33e356b860b89f40e
f41d41a0b30c4f72c6a801283c719f19c51438fa
2551498d98bf4f7fb3c9cceaa29ef16f47a8c0a9374ce55852b4f140575e2016
GET /img/icon.png HTTP/1.1
Host: account.asroma.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://account.asroma.com/?gig_ssoToken=eu1_tk1.RDYODGH_CySD7oR-wVK77RP2dM7qGZjdiBtIejn_cF0&gig_source=asroma.com
Cookie: nlbi_2063869=iSvYInbUsEhpVFlqlOn80gAAAADejPaUbAjNFA4CfwbN5lrv; visid_incap_2063869=cc5B4e7+S0m4zJP2yQZpsSvhsGYAAAAAQUIPAAAAAADve1E8U1oXCtvdMx3KYtYc; incap_ses_633_2063869=00+TD0+bCDo8moAIRt7ICCzhsGYAAAAAcjtysQMUIRnoTX3NLplBFw==; gig_bootstrap_4_CgW8FMardcX-NyY8M3p6Wg=identity_ver4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 367
date: Mon, 05 Aug 2024 14:26:44 GMT
last-modified: Mon, 25 Sep 2023 15:27:02 GMT
etag: "f7eb40702bb9aac33e356b860b89f40e"
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: IIEGP9h73QI9ozBu1zeaPAQCnNpkb5cR3W08E9vBsg0rvRCKUbDswQ==
age: 17
X-Firefox-Spdy: h2
GET account.asroma.com/js/owl.carousel.min.js
200 OK 44 kB URL GET HTTP/2 account.asroma.com/js/owl.carousel.min.js
IP
Requested by https://account.asroma.com/?gig_ssoToken=eu1_tk1.RDYODGH_CySD7oR-wVK77RP2dM7qGZjdiBtIejn_cF0&gig_source=asroma.com
Certificate IssuerGoDaddy.com, Inc.
Subjectaccount.asroma.com
FingerprintF5:AA:BE:E1:B8:54:11:A9:3C:52:BC:61:B6:A7:AA:64:EE:6E:8F:8C
ValiditySun, 25 Feb 2024 08:15:27 GMT - Mon, 24 Feb 2025 10:54:20 GMT
File type JavaScript source, ASCII text, with very long lines (31997)
Hash f416f9031fef25ae25ba9756e3eb6978
e2a600e433df72b4cfde93d7880e3114917a3cbe
a53c43f834b32309b084ea9314df8307e9c78cee2202c6e07f216ae4ae5b704d
GET /js/owl.carousel.min.js HTTP/1.1
Host: account.asroma.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://account.asroma.com/?gig_ssoToken=eu1_tk1.RDYODGH_CySD7oR-wVK77RP2dM7qGZjdiBtIejn_cF0&gig_source=asroma.com
Cookie: nlbi_2063869=iSvYInbUsEhpVFlqlOn80gAAAADejPaUbAjNFA4CfwbN5lrv; visid_incap_2063869=cc5B4e7+S0m4zJP2yQZpsSvhsGYAAAAAQUIPAAAAAADve1E8U1oXCtvdMx3KYtYc; incap_ses_633_2063869=00+TD0+bCDo8moAIRt7ICCzhsGYAAAAAcjtysQMUIRnoTX3NLplBFw==; gig_bootstrap_4_CgW8FMardcX-NyY8M3p6Wg=identity_ver4
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 44342
date: Mon, 05 Aug 2024 14:26:44 GMT
last-modified: Mon, 25 Sep 2023 15:26:45 GMT
etag: "f416f9031fef25ae25ba9756e3eb6978"
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: GU9BmqbJ8tZprF762BJklkx4abo_o18FSR6BAKIqDi3bGN3yWD05Tg==
age: 17
X-Firefox-Spdy: h2
GET account.asroma.com/js/main.js
200 OK 2.9 kB URL GET HTTP/2 account.asroma.com/js/main.js
IP
Requested by https://account.asroma.com/?gig_ssoToken=eu1_tk1.RDYODGH_CySD7oR-wVK77RP2dM7qGZjdiBtIejn_cF0&gig_source=asroma.com
Certificate IssuerGoDaddy.com, Inc.
Subjectaccount.asroma.com
FingerprintF5:AA:BE:E1:B8:54:11:A9:3C:52:BC:61:B6:A7:AA:64:EE:6E:8F:8C
ValiditySun, 25 Feb 2024 08:15:27 GMT - Mon, 24 Feb 2025 10:54:20 GMT
File type JavaScript source, ASCII text
Hash 97b034687ff6b271a1dc59fadec30559
890201601c4f0ff5a8f57206dea383f0ca10ec0b
db187041c4f3ab1d1e6fb1039992004d11cbbc5643077cc96721fd71604950b9
GET /js/main.js HTTP/1.1
Host: account.asroma.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://account.asroma.com/?gig_ssoToken=eu1_tk1.RDYODGH_CySD7oR-wVK77RP2dM7qGZjdiBtIejn_cF0&gig_source=asroma.com
Cookie: nlbi_2063869=iSvYInbUsEhpVFlqlOn80gAAAADejPaUbAjNFA4CfwbN5lrv; visid_incap_2063869=cc5B4e7+S0m4zJP2yQZpsSvhsGYAAAAAQUIPAAAAAADve1E8U1oXCtvdMx3KYtYc; incap_ses_633_2063869=00+TD0+bCDo8moAIRt7ICCzhsGYAAAAAcjtysQMUIRnoTX3NLplBFw==; gig_bootstrap_4_CgW8FMardcX-NyY8M3p6Wg=identity_ver4
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 2889
date: Mon, 05 Aug 2024 14:26:44 GMT
last-modified: Mon, 25 Sep 2023 15:26:45 GMT
etag: "97b034687ff6b271a1dc59fadec30559"
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: -L04uwPEY1TTj-gbB_azg-PE77cNQbpKK3hJ-x2wttoWGz6ZPLbtbw==
age: 17
X-Firefox-Spdy: h2
GET account.asroma.com/js/jquery.qrcode.min.js
200 OK 14 kB URL GET HTTP/2 account.asroma.com/js/jquery.qrcode.min.js
IP
Requested by https://account.asroma.com/?gig_ssoToken=eu1_tk1.RDYODGH_CySD7oR-wVK77RP2dM7qGZjdiBtIejn_cF0&gig_source=asroma.com
Certificate IssuerGoDaddy.com, Inc.
Subjectaccount.asroma.com
FingerprintF5:AA:BE:E1:B8:54:11:A9:3C:52:BC:61:B6:A7:AA:64:EE:6E:8F:8C
ValiditySun, 25 Feb 2024 08:15:27 GMT - Mon, 24 Feb 2025 10:54:20 GMT
File type JavaScript source, ASCII text, with very long lines (544)
Hash 05f0b1d7d4b9b0b4975870606d650e3c
f424bd339870510d1160d1c5da5d698aedbb452e
f4ccf02b69092819ac24575c717a080c3b6c6d6161f1b8d82bf0bb523075032d
GET /js/jquery.qrcode.min.js HTTP/1.1
Host: account.asroma.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://account.asroma.com/?gig_ssoToken=eu1_tk1.RDYODGH_CySD7oR-wVK77RP2dM7qGZjdiBtIejn_cF0&gig_source=asroma.com
Cookie: nlbi_2063869=iSvYInbUsEhpVFlqlOn80gAAAADejPaUbAjNFA4CfwbN5lrv; visid_incap_2063869=cc5B4e7+S0m4zJP2yQZpsSvhsGYAAAAAQUIPAAAAAADve1E8U1oXCtvdMx3KYtYc; incap_ses_633_2063869=00+TD0+bCDo8moAIRt7ICCzhsGYAAAAAcjtysQMUIRnoTX3NLplBFw==; gig_bootstrap_4_CgW8FMardcX-NyY8M3p6Wg=identity_ver4
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 13995
date: Mon, 05 Aug 2024 14:26:44 GMT
last-modified: Mon, 25 Sep 2023 15:26:44 GMT
etag: "05f0b1d7d4b9b0b4975870606d650e3c"
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 1vhMP89ViaDARRh6ykcmcMCpTA0PtATSwDDwAjNPm2M7tVqbgR3cbQ==
age: 17
X-Firefox-Spdy: h2
GET ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js
200 OK 31 kB URL GET HTTP/2 ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js
IP
Requested by https://account.asroma.com/?gig_ssoToken=eu1_tk1.RDYODGH_CySD7oR-wVK77RP2dM7qGZjdiBtIejn_cF0&gig_source=asroma.com
Certificate IssuerGoogle Trust Services
Subjectupload.video.google.com
FingerprintC4:3F:12:39:D2:EC:4C:2C:1C:0A:A6:18:8E:2A:97:2C:D8:C2:7E:AF
ValidityTue, 30 Jul 2024 12:49:45 GMT - Tue, 22 Oct 2024 12:49:44 GMT
File type JavaScript source, ASCII text, with very long lines (65451)
Hash dc5e7f18c8d36ac1d3d4753a87c98d0a
c8e1c8b386dc5b7a9184c763c88d19a346eb3342
f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d
GET /ajax/libs/jquery/3.5.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://account.asroma.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 31021
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 03 Aug 2024 03:11:18 GMT
expires: Sun, 03 Aug 2025 03:11:18 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Fri, 08 May 2020 07:05:03 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 213342
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
58 kB URL fonts.googleapis.com/css?family=Roboto:100,300,400,500,700,900
IP
File type gzip compressed data, max compression
Hash 82c0f1667e8a255ce43a87ef7d755176
181388afe61a16b6be90feceddcc4b0a7b14d987
3f9069c7b3e3141081bdff83bdc25c033d2e24b9657a0f9aa8dfc7a85d21d7c2
GET /css?family=Roboto:100,300,400,500,700,900 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://biglietti.asroma.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 05 Aug 2024 14:26:57 GMT
date: Mon, 05 Aug 2024 14:26:57 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET account.asroma.com/img/bg_notlogged.png
200 OK 2.5 MB URL GET HTTP/2 account.asroma.com/img/bg_notlogged.png
IP
Requested by https://account.asroma.com/?gig_ssoToken=eu1_tk1.RDYODGH_CySD7oR-wVK77RP2dM7qGZjdiBtIejn_cF0&gig_source=asroma.com
Certificate IssuerGoDaddy.com, Inc.
Subjectaccount.asroma.com
FingerprintF5:AA:BE:E1:B8:54:11:A9:3C:52:BC:61:B6:A7:AA:64:EE:6E:8F:8C
ValiditySun, 25 Feb 2024 08:15:27 GMT - Mon, 24 Feb 2025 10:54:20 GMT
File type PNG image data, 1920 x 1024, 8-bit/color RGBA, non-interlaced
Size 2.5 MB (2482006 bytes)
Hash a7daca4a319f0cf58dc9ec6bdced45e8
b86dfb8a20c92763fd511266e6ead4ea20d710a5
308aba33239f13c720c50341ca026f1461e89a90329282eefabafd67a8e26125
GET /img/bg_notlogged.png HTTP/1.1
Host: account.asroma.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://account.asroma.com/css/main.css
Cookie: nlbi_2063869=iSvYInbUsEhpVFlqlOn80gAAAADejPaUbAjNFA4CfwbN5lrv; visid_incap_2063869=cc5B4e7+S0m4zJP2yQZpsSvhsGYAAAAAQUIPAAAAAADve1E8U1oXCtvdMx3KYtYc; incap_ses_633_2063869=00+TD0+bCDo8moAIRt7ICCzhsGYAAAAAcjtysQMUIRnoTX3NLplBFw==; gig_bootstrap_4_CgW8FMardcX-NyY8M3p6Wg=identity_ver4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 2482006
date: Mon, 05 Aug 2024 14:26:44 GMT
last-modified: Mon, 25 Sep 2023 15:26:51 GMT
etag: "a7daca4a319f0cf58dc9ec6bdced45e8"
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 763vVeXyOhx96Eg442XTKIbs7lxp_vLGUlW3w4VkYvC2VzUE4_t94Q==
age: 18
X-Firefox-Spdy: h2
GET www.googletagmanager.com/gtm.js?id=GTM-KX8NQP9
200 OK 31 kB URL GET HTTP/3 www.googletagmanager.com/gtm.js?id=GTM-KX8NQP9
IP
Requested by https://account.asroma.com/?gig_ssoToken=eu1_tk1.RDYODGH_CySD7oR-wVK77RP2dM7qGZjdiBtIejn_cF0&gig_source=asroma.com
Certificate IssuerGoogle Trust Services
Subject*.google-analytics.com
Fingerprint27:BF:6E:8E:D6:51:1C:C5:B2:CF:E2:E9:0F:87:D0:F3:33:23:E7:37
ValidityTue, 30 Jul 2024 12:32:47 GMT - Tue, 22 Oct 2024 12:32:46 GMT
File type gzip compressed data, max compression
Hash 903bc7a7e510f87aa5d0201eb59a0832
ac9aa4dd94cde1bcba9037e94087138b127e41fc
41a7ac8150cc9f38421451d5143c1ffec7a1f1fafbf7a7fc0f51b98ad699cf8f
GET /gtm.js?id=GTM-KX8NQP9 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://account.asroma.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 05 Aug 2024 14:27:01 GMT
expires: Mon, 05 Aug 2024 14:27:01 GMT
cache-control: private, max-age=900
last-modified: Mon, 05 Aug 2024 12:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 121684
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET app3.salesmanago.pl/static/sm.js
200 OK 49 kB URL GET HTTP/2 app3.salesmanago.pl/static/sm.js
IP
Requested by https://account.asroma.com/?gig_ssoToken=eu1_tk1.RDYODGH_CySD7oR-wVK77RP2dM7qGZjdiBtIejn_cF0&gig_source=asroma.com
Certificate IssuerDigiCert Inc
Subject*.salesmanago.pl
FingerprintDF:0D:88:9C:56:45:E8:7B:24:52:6E:1B:FA:A8:E8:72:20:98:10:E1
ValidityFri, 02 Aug 2024 00:00:00 GMT - Tue, 19 Aug 2025 23:59:59 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (65508), with no line terminators
Hash 629005b32fe0aec23be0c3922a26b4d0
fc823bed76816228bb36153e342c4b94933d829b
47e0eacb43751a7d7e75a6fd169be57f6562701bb742b2549a75cf2b1e58b251
GET /static/sm.js HTTP/1.1
Host: app3.salesmanago.pl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://account.asroma.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Aug 2024 14:27:01 GMT
server: Apache
last-modified: Wed, 24 Jul 2024 12:29:16 GMT
etag: "20b35-61dfd6d3ccd49-gzip"
accept-ranges: bytes
cache-control: max-age=3600
expires: Mon, 05 Aug 2024 15:27:01 GMT
vary: Accept-Encoding
content-encoding: gzip
content-length: 48858
content-type: application/javascript
strict-transport-security: max-age=31540000
set-cookie: SERVERID=C; path=/; HttpOnly; Secure
X-Firefox-Spdy: h2
GET www.googletagmanager.com/gtag/js?id=G-ML4VH113QE&l=dataLayer&cx=c
200 OK 107 kB URL GET HTTP/3 www.googletagmanager.com/gtag/js?id=G-ML4VH113QE&l=dataLayer&cx=c
IP
Requested by https://account.asroma.com/?gig_ssoToken=eu1_tk1.RDYODGH_CySD7oR-wVK77RP2dM7qGZjdiBtIejn_cF0&gig_source=asroma.com
Certificate IssuerGoogle Trust Services
Subject*.google-analytics.com
Fingerprint27:BF:6E:8E:D6:51:1C:C5:B2:CF:E2:E9:0F:87:D0:F3:33:23:E7:37
ValidityTue, 30 Jul 2024 12:32:47 GMT - Tue, 22 Oct 2024 12:32:46 GMT
File type JavaScript source, ASCII text, with very long lines (7711)
Size 107 kB (107221 bytes)
Hash 6b3229c172cabe613e7dfa9489edaa25
bdb66e1b91d262b9d7c60faa6df0e1b3f53b51fd
1e6d9a6f45768be5999a5c0de20945c0f0cb673be4d7a682e8bcf870a26072e3
GET /gtag/js?id=G-ML4VH113QE&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://account.asroma.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 05 Aug 2024 14:27:01 GMT
expires: Mon, 05 Aug 2024 14:27:01 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 107221
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET account.asroma.com/?gig_ssoToken=eu1_tk1.RDYODGH_CySD7oR-wVK77RP2dM7qGZjdiBtIejn_cF0&gig_source=asroma.com
200 OK 52 kB URL User Request GET HTTP/2 account.asroma.com/?gig_ssoToken=eu1_tk1.RDYODGH_CySD7oR-wVK77RP2dM7qGZjdiBtIejn_cF0&gig_source=asroma.com
IP
Certificate IssuerGoDaddy.com, Inc.
Subjectaccount.asroma.com
FingerprintF5:AA:BE:E1:B8:54:11:A9:3C:52:BC:61:B6:A7:AA:64:EE:6E:8F:8C
ValiditySun, 25 Feb 2024 08:15:27 GMT - Mon, 24 Feb 2025 10:54:20 GMT
File type HTML document, Unicode text, UTF-8 text
Hash f576251eeece6046ca10066bdc9d0fb7
055103e6cf7500e706d5df74f20cc3a78455b7c1
f98a72e89f9831c8733a4bb43bab2577fa55484fe0f9377310883f7f12caafb7
GET /?gig_ssoToken=eu1_tk1.RDYODGH_CySD7oR-wVK77RP2dM7qGZjdiBtIejn_cF0&gig_source=asroma.com HTTP/1.1
Host: account.asroma.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://account.asroma.com/?gig_ssoToken=eu1_tk1.RDYODGH_CySD7oR-wVK77RP2dM7qGZjdiBtIejn_cF0&gig_source=asroma.com
Cookie: nlbi_2063869=iSvYInbUsEhpVFlqlOn80gAAAADejPaUbAjNFA4CfwbN5lrv; visid_incap_2063869=cc5B4e7+S0m4zJP2yQZpsSvhsGYAAAAAQUIPAAAAAADve1E8U1oXCtvdMx3KYtYc; incap_ses_633_2063869=00+TD0+bCDo8moAIRt7ICCzhsGYAAAAAcjtysQMUIRnoTX3NLplBFw==; gig_bootstrap_4_CgW8FMardcX-NyY8M3p6Wg=identity_ver4; gig_canary=false; gig_canary_ver=16174-3-28714470
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/html
content-length: 52077
date: Mon, 05 Aug 2024 14:26:44 GMT
last-modified: Mon, 25 Sep 2023 15:26:43 GMT
etag: "f576251eeece6046ca10066bdc9d0fb7"
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: IWjT5p40JxbLgIh1cKJznMMuPfM2omaJ7rC4vTcLaOmlHnIMMrj5Hw==
age: 18
X-Firefox-Spdy: h2
GET account.asroma.com/img/iconASROMA.png
200 OK 14 kB URL GET HTTP/2 account.asroma.com/img/iconASROMA.png
IP
Requested by https://account.asroma.com/?gig_ssoToken=eu1_tk1.RDYODGH_CySD7oR-wVK77RP2dM7qGZjdiBtIejn_cF0&gig_source=asroma.com
Certificate IssuerGoDaddy.com, Inc.
Subjectaccount.asroma.com
FingerprintF5:AA:BE:E1:B8:54:11:A9:3C:52:BC:61:B6:A7:AA:64:EE:6E:8F:8C
ValiditySun, 25 Feb 2024 08:15:27 GMT - Mon, 24 Feb 2025 10:54:20 GMT
File type PNG image data, 196 x 196, 8-bit/color RGBA, non-interlaced
Hash d8918b75b5720b63113e4e565e9f44cf
7713f5c2869371c3ef23e5f6f973d7bbf5eb5f57
896f6676d04afc905519166c9a92b0815634e595b14994bca323edc235fda806
GET /img/iconASROMA.png HTTP/1.1
Host: account.asroma.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://account.asroma.com/?gig_ssoToken=eu1_tk1.RDYODGH_CySD7oR-wVK77RP2dM7qGZjdiBtIejn_cF0&gig_source=asroma.com
Cookie: nlbi_2063869=iSvYInbUsEhpVFlqlOn80gAAAADejPaUbAjNFA4CfwbN5lrv; visid_incap_2063869=cc5B4e7+S0m4zJP2yQZpsSvhsGYAAAAAQUIPAAAAAADve1E8U1oXCtvdMx3KYtYc; incap_ses_633_2063869=00+TD0+bCDo8moAIRt7ICCzhsGYAAAAAcjtysQMUIRnoTX3NLplBFw==; gig_bootstrap_4_CgW8FMardcX-NyY8M3p6Wg=identity_ver4; gig_canary=false; gig_canary_ver=16174-3-28714470
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 14008
date: Mon, 05 Aug 2024 13:36:51 GMT
last-modified: Mon, 25 Sep 2023 15:27:03 GMT
etag: "d8918b75b5720b63113e4e565e9f44cf"
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: yYhRLj2Dme8Lb0-R4ubWPMRHcJA72Q5PLHiSOBhYecJ_G3bGOipvwQ==
age: 3011
X-Firefox-Spdy: h2
GET www.googletagmanager.com/gtag/destination?id=AW-322753360&l=dataLayer&cx=c
200 OK 2.1 kB URL GET HTTP/3 www.googletagmanager.com/gtag/destination?id=AW-322753360&l=dataLayer&cx=c
IP
Requested by https://account.asroma.com/?gig_ssoToken=eu1_tk1.RDYODGH_CySD7oR-wVK77RP2dM7qGZjdiBtIejn_cF0&gig_source=asroma.com
Certificate IssuerGoogle Trust Services
Subject*.google-analytics.com
Fingerprint27:BF:6E:8E:D6:51:1C:C5:B2:CF:E2:E9:0F:87:D0:F3:33:23:E7:37
ValidityTue, 30 Jul 2024 12:32:47 GMT - Tue, 22 Oct 2024 12:32:46 GMT
File type gzip compressed data, from Unix
Hash d6223fb27d35d52ac27dff5c6e7583e1
e4826eebf6744c3b850c03ceb120a0d3005e976d
39f8e62d7da7b80de954eec0d275a74d873b1c29f3c452cda0bbf2c6eb662c11
GET /gtag/destination?id=AW-322753360&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://account.asroma.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 05 Aug 2024 14:27:01 GMT
expires: Mon, 05 Aug 2024 14:27:01 GMT
cache-control: private, max-age=900
last-modified: Mon, 05 Aug 2024 12:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 92108
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET identity.asroma.com/accounts.sso.getContext?APIKey=3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5&ssoToken=eu1_tk1.RDYODGH_CySD7oR-wVK77RP2dM7qGZjdiBtIejn_cF0&format=json
200 OK 160 B URL GET HTTP/2 identity.asroma.com/accounts.sso.getContext?APIKey=3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5&ssoToken=eu1_tk1.RDYODGH_CySD7oR-wVK77RP2dM7qGZjdiBtIejn_cF0&format=json
IP
Requested by https://account.asroma.com/?gig_ssoToken=eu1_tk1.RDYODGH_CySD7oR-wVK77RP2dM7qGZjdiBtIejn_cF0&gig_source=asroma.com
Certificate IssuerAmazon
Subjectidentity.asroma.com
Fingerprint7A:76:DF:A0:1D:77:22:B0:3B:F1:0B:5F:E1:72:43:DF:66:42:03:E8
ValiditySun, 26 Nov 2023 00:00:00 GMT - Tue, 24 Dec 2024 23:59:59 GMT
Hash 9b44fc7e842f525ed42087e7800540b4
74f7b7ca8c867e8dc756617a47a5f4e83956a777
9fe9cb656d0fba66c83d6b1e604ffb479386e2699520bba94cb2f890992f0122
GET /accounts.sso.getContext?APIKey=3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5&ssoToken=eu1_tk1.RDYODGH_CySD7oR-wVK77RP2dM7qGZjdiBtIejn_cF0&format=json HTTP/1.1
Host: identity.asroma.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://account.asroma.com/
Origin: https://account.asroma.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
content-length: 160
date: Mon, 05 Aug 2024 14:27:01 GMT
access-control-allow-credentials: true
access-control-allow-methods: GET,PUT,DELETE,HEAD,OPTIONS,POST,PATCH
access-control-allow-origin: https://account.asroma.com
access-control-max-age: 86400
cache-control: private
content-encoding: gzip
vary: Origin, Accept-Encoding
p3p: CP="IDC COR PSA DEV ADM OUR IND ONL"
x-error-code: 0
x-soa: true, Gator
x-server: eu1b-nomad-t25
x-callid: 96435bbb6ab95bc3e9742d4bc029dccd
x-robots-tag: none
x-cache: Miss from cloudfront
via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: iVtaBOVqRk_OJmqYiZK75WQo8hoq8GvCgnmmvjSeNTFtsG7fO6Y9hg==
X-Firefox-Spdy: h2
GET vc-service.salesmanago.pl/api/vc.json?s=4zxdzbcdqqq46j4b&i=5
200 OK 1.2 kB URL GET HTTP/2 vc-service.salesmanago.pl/api/vc.json?s=4zxdzbcdqqq46j4b&i=5
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
Requested by https://account.asroma.com/?gig_ssoToken=eu1_tk1.RDYODGH_CySD7oR-wVK77RP2dM7qGZjdiBtIejn_cF0&gig_source=asroma.com
Certificate IssuerGoogle Trust Services
Subjectvc-service.salesmanago.pl
Fingerprint9C:52:E5:7B:8F:DD:FC:77:D6:F0:17:9A:1A:C6:CF:B9:0E:C8:C2:60
ValidityWed, 19 Jun 2024 19:21:15 GMT - Tue, 17 Sep 2024 20:01:59 GMT
Hash ea890d23ab99f4a61ec1765fb5710056
700fa576822d0428af24ac42518d7c5e3bed365a
082cd0c8bcba488baf4407b14f43984badeb85480969e9ff8899e6c8cd0db0b7
GET /api/vc.json?s=4zxdzbcdqqq46j4b&i=5 HTTP/1.1
Host: vc-service.salesmanago.pl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://account.asroma.com
DNT: 1
Connection: keep-alive
Referer: https://account.asroma.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-origin: *
content-type: application/json;charset=utf-8
content-length: 1215
date: Mon, 05 Aug 2024 14:27:01 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET identity.asroma.com/sdk.config.get?apiKey=3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5&httpStatusCodes=true
200 OK 2.0 kB URL GET HTTP/2 identity.asroma.com/sdk.config.get?apiKey=3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5&httpStatusCodes=true
IP
Requested by https://account.asroma.com/?gig_ssoToken=eu1_tk1.RDYODGH_CySD7oR-wVK77RP2dM7qGZjdiBtIejn_cF0&gig_source=asroma.com
Certificate IssuerAmazon
Subjectidentity.asroma.com
Fingerprint7A:76:DF:A0:1D:77:22:B0:3B:F1:0B:5F:E1:72:43:DF:66:42:03:E8
ValiditySun, 26 Nov 2023 00:00:00 GMT - Tue, 24 Dec 2024 23:59:59 GMT
Hash a6da378c87efc09789eaf9dc90ebd8ca
6fa4ba4ce2105e25f840a74588ebf19f58613a83
8d2c5bb4161a6e8ddd38aeaa25986fcbefdf441843b34a13fa5abaac38908b49
GET /sdk.config.get?apiKey=3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5&httpStatusCodes=true HTTP/1.1
Host: identity.asroma.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://account.asroma.com/
Origin: https://account.asroma.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
content-length: 1992
access-control-allow-origin: *
cache-control: public, s-maxage=120, max-age=60
content-encoding: gzip
edge-cache-tag: siteid_759736734723
p3p: CP="IDC COR PSA DEV ADM OUR IND ONL"
x-error-code: 0
x-soa: true, Gator
x-server: eu1a-nomad-t23
x-callid: d81636d63c4d1aaa7291de22e8384128
date: Mon, 05 Aug 2024 14:25:34 GMT
accept-ranges: bytes
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 4c3bf5cUJ7iuHnWqpE5_zLpM9bbVuGFECrQVAPS0WanVv_UC9YWEPg==
age: 88
X-Firefox-Spdy: h2
GET www.googletagmanager.com/gtag/js?id=G-PE68Q1GB3Q&l=dataLayer&cx=c
200 OK 45 kB URL GET HTTP/3 www.googletagmanager.com/gtag/js?id=G-PE68Q1GB3Q&l=dataLayer&cx=c
IP
Requested by https://account.asroma.com/?gig_ssoToken=eu1_tk1.RDYODGH_CySD7oR-wVK77RP2dM7qGZjdiBtIejn_cF0&gig_source=asroma.com
Certificate IssuerGoogle Trust Services
Subject*.google-analytics.com
Fingerprint27:BF:6E:8E:D6:51:1C:C5:B2:CF:E2:E9:0F:87:D0:F3:33:23:E7:37
ValidityTue, 30 Jul 2024 12:32:47 GMT - Tue, 22 Oct 2024 12:32:46 GMT
Hash 7c82b1889ecd77f9ee5da16247680fa2
d7ef9663d9d7317c2ce9aab7aae2469fcf5e8c59
1b15513c0f70f094eec2619b5feea437a3f230fd458b7263ad44b8d0ed694a36
GET /gtag/js?id=G-PE68Q1GB3Q&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://account.asroma.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 05 Aug 2024 14:27:01 GMT
expires: Mon, 05 Aug 2024 14:27:01 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 111185
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET identity.asroma.com/sdk.config.get?apiKey=3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5&httpStatusCodes=true
200 OK 2.0 kB URL GET HTTP/2 identity.asroma.com/sdk.config.get?apiKey=3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5&httpStatusCodes=true
IP
Requested by https://account.asroma.com/?gig_ssoToken=eu1_tk1.RDYODGH_CySD7oR-wVK77RP2dM7qGZjdiBtIejn_cF0&gig_source=asroma.com
Certificate IssuerAmazon
Subjectidentity.asroma.com
Fingerprint7A:76:DF:A0:1D:77:22:B0:3B:F1:0B:5F:E1:72:43:DF:66:42:03:E8
ValiditySun, 26 Nov 2023 00:00:00 GMT - Tue, 24 Dec 2024 23:59:59 GMT
Hash a6da378c87efc09789eaf9dc90ebd8ca
6fa4ba4ce2105e25f840a74588ebf19f58613a83
8d2c5bb4161a6e8ddd38aeaa25986fcbefdf441843b34a13fa5abaac38908b49
GET /sdk.config.get?apiKey=3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5&httpStatusCodes=true HTTP/1.1
Host: identity.asroma.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://identity.asroma.com/gs/webSdk/Api.aspx?apiKey=3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5&version=latest&build=16174
DNT: 1
Connection: keep-alive
Cookie: nlbi_2063869=iSvYInbUsEhpVFlqlOn80gAAAADejPaUbAjNFA4CfwbN5lrv; visid_incap_2063869=cc5B4e7+S0m4zJP2yQZpsSvhsGYAAAAAQUIPAAAAAADve1E8U1oXCtvdMx3KYtYc; incap_ses_633_2063869=00+TD0+bCDo8moAIRt7ICCzhsGYAAAAAcjtysQMUIRnoTX3NLplBFw==; apiDomain_3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5=identity.asroma.com; gmid=gmid.ver4.AtLtbKsfSQ.Fg8k3zJwci2J6_deVcYyzyNKfNsOK6gSIgUkuVGZfXF7Aspdn7qhsDTQpxwNpbIq.dPiq38ozEvcC3Pbzs5BeDW_BF3FdYbcDyRl_PkDT8-ByLjlHrwyynERTTpvkwwce4l76mciLDQUoUGGeKXtNUg.sc3; ucid=ZkmVv_WPsKvHFzdnqte4Ow; hasGmid=ver4; gig_bootstrap_4_CgW8FMardcX-NyY8M3p6Wg=identity_ver4; gig_canary_3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5=false; gig_canary_ver_3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5=16174-3-28714455
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
content-length: 1992
access-control-allow-origin: *
cache-control: public, s-maxage=120, max-age=60
content-encoding: gzip
edge-cache-tag: siteid_759736734723
p3p: CP="IDC COR PSA DEV ADM OUR IND ONL"
x-error-code: 0
x-soa: true, Gator
x-server: eu1a-nomad-t23
x-callid: d81636d63c4d1aaa7291de22e8384128
date: Mon, 05 Aug 2024 14:25:34 GMT
accept-ranges: bytes
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: fOyzYIQ6Tj9Eh0uyO01KJwhKFkK_Mkbir5hrPYgIKtg1gMf-D0V1tQ==
age: 88
X-Firefox-Spdy: h2
GET identity.asroma.com/accounts.webSdkBootstrap?apiKey=3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5&pageURL=https%3A%2F%2Faccount.asroma.com%2F%3Fgig_ssoToken%3Deu1_tk1.RDYODGH_CySD7oR-wVK77RP2dM7qGZjdiBtIejn_cF0%26gig_source%3Dasroma.com&sdk=js_latest&sdkBuild=16174&format=json
200 OK 175 B URL GET HTTP/2 identity.asroma.com/accounts.webSdkBootstrap?apiKey=3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5&pageURL=https%3A%2F%2Faccount.asroma.com%2F%3Fgig_ssoToken%3Deu1_tk1.RDYODGH_CySD7oR-wVK77RP2dM7qGZjdiBtIejn_cF0%26gig_source%3Dasroma.com&sdk=js_latest&sdkBuild=16174&format=json
IP
Requested by https://account.asroma.com/?gig_ssoToken=eu1_tk1.RDYODGH_CySD7oR-wVK77RP2dM7qGZjdiBtIejn_cF0&gig_source=asroma.com
Certificate IssuerAmazon
Subjectidentity.asroma.com
Fingerprint7A:76:DF:A0:1D:77:22:B0:3B:F1:0B:5F:E1:72:43:DF:66:42:03:E8
ValiditySun, 26 Nov 2023 00:00:00 GMT - Tue, 24 Dec 2024 23:59:59 GMT
Hash 8bf4b34d9ec4a1028f2c91392839162d
5dfbd99674ce06d4470845fd84ac63eddd2294f4
61b948b650902fd2c4beb2e451f522c1fc5d1e15152ce0cbbbac8214b4a1f95a
GET /accounts.webSdkBootstrap?apiKey=3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5&pageURL=https%3A%2F%2Faccount.asroma.com%2F%3Fgig_ssoToken%3Deu1_tk1.RDYODGH_CySD7oR-wVK77RP2dM7qGZjdiBtIejn_cF0%26gig_source%3Dasroma.com&sdk=js_latest&sdkBuild=16174&format=json HTTP/1.1
Host: identity.asroma.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://account.asroma.com
DNT: 1
Connection: keep-alive
Referer: https://account.asroma.com/
Cookie: nlbi_2063869=iSvYInbUsEhpVFlqlOn80gAAAADejPaUbAjNFA4CfwbN5lrv; visid_incap_2063869=cc5B4e7+S0m4zJP2yQZpsSvhsGYAAAAAQUIPAAAAAADve1E8U1oXCtvdMx3KYtYc; incap_ses_633_2063869=00+TD0+bCDo8moAIRt7ICCzhsGYAAAAAcjtysQMUIRnoTX3NLplBFw==; gmid=gmid.ver4.AtLtbKsfSQ.Fg8k3zJwci2J6_deVcYyzyNKfNsOK6gSIgUkuVGZfXF7Aspdn7qhsDTQpxwNpbIq.dPiq38ozEvcC3Pbzs5BeDW_BF3FdYbcDyRl_PkDT8-ByLjlHrwyynERTTpvkwwce4l76mciLDQUoUGGeKXtNUg.sc3; ucid=ZkmVv_WPsKvHFzdnqte4Ow; hasGmid=ver4; gig_bootstrap_4_CgW8FMardcX-NyY8M3p6Wg=identity_ver4; gig_canary_3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5=false; gig_canary_ver_3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5=16174-3-28714455; apiDomain_3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5=identity.asroma.com; gig3pctest=true
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
content-length: 175
date: Mon, 05 Aug 2024 14:27:02 GMT
access-control-allow-credentials: true
access-control-allow-methods: GET,PUT,DELETE,HEAD,OPTIONS,POST,PATCH
access-control-allow-origin: https://account.asroma.com
access-control-max-age: 86400
cache-control: private
content-encoding: gzip
set-cookie: gmid=gmid.ver4.AtLtbKsfSQ.Fg8k3zJwci2J6_deVcYyzyNKfNsOK6gSIgUkuVGZfXF7Aspdn7qhsDTQpxwNpbIq.dPiq38ozEvcC3Pbzs5BeDW_BF3FdYbcDyRl_PkDT8-ByLjlHrwyynERTTpvkwwce4l76mciLDQUoUGGeKXtNUg.sc3; expires=Tue, 05 Aug 2025 14:27:02 GMT; domain=.identity.asroma.com; path=/; secure; samesite=none; httponly
ucid=ZkmVv_WPsKvHFzdnqte4Ow; expires=Tue, 05 Aug 2025 14:27:02 GMT; domain=.identity.asroma.com; path=/; secure; samesite=none
hasGmid=ver4; expires=Wed, 05 Feb 2025 15:27:02 GMT; domain=.identity.asroma.com; path=/; secure; samesite=none
vary: Origin, Accept-Encoding
p3p: CP="IDC COR PSA DEV ADM OUR IND ONL"
x-error-code: 0
x-soa: true, Gator
x-server: eu1a-nomad-t16
x-callid: b6095ea18373cba078d5381c5f2a5bf8
x-robots-tag: none
x-cache: Miss from cloudfront
via: 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 7AsqapgJFf-aodebReeK28YtTd6RvGz-bKYANOvW4p7WjQWp6PKw-Q==
X-Firefox-Spdy: h2
33 kB URL identity.asroma.com/gs/sso.htm?APIKey=3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5&ssoSegment=&version=latest&build=16174
IP
File type HTML document, ASCII text, with very long lines (64578), with CRLF, LF line terminators
Hash 59583711fb1712a19e6b3270ad89425a
09a7b1dd5a9dd3e9fcf6aaa7eb708b0889323cb8
5771324b5811ebd55ef0fd7c5a512a4ec4324e3162591c561c039dbedc6df906
GET /gs/sso.htm?APIKey=3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5&ssoSegment=&version=latest&build=16174 HTTP/1.1
Host: identity.asroma.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://account.asroma.com/
Cookie: nlbi_2063869=iSvYInbUsEhpVFlqlOn80gAAAADejPaUbAjNFA4CfwbN5lrv; visid_incap_2063869=cc5B4e7+S0m4zJP2yQZpsSvhsGYAAAAAQUIPAAAAAADve1E8U1oXCtvdMx3KYtYc; incap_ses_633_2063869=00+TD0+bCDo8moAIRt7ICCzhsGYAAAAAcjtysQMUIRnoTX3NLplBFw==; gmid=gmid.ver4.AtLtbKsfSQ.Fg8k3zJwci2J6_deVcYyzyNKfNsOK6gSIgUkuVGZfXF7Aspdn7qhsDTQpxwNpbIq.dPiq38ozEvcC3Pbzs5BeDW_BF3FdYbcDyRl_PkDT8-ByLjlHrwyynERTTpvkwwce4l76mciLDQUoUGGeKXtNUg.sc3; ucid=ZkmVv_WPsKvHFzdnqte4Ow; hasGmid=ver4; gig_bootstrap_4_CgW8FMardcX-NyY8M3p6Wg=identity_ver4; gig_canary_3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5=false; gig_canary_ver_3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5=16174-3-28714455; apiDomain_3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5=identity.asroma.com; gig3pctest=true; gig_bootstrap_3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5=identity_ver4
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/html; charset=utf-8
content-length: 33407
access-control-allow-origin: *
cache-control: public, s-maxage=3600, max-age=900
content-encoding: gzip
edge-cache-tag: siteid_759736734723,ver_latest
strict-transport-security: max-age=63072000; includeSubDomains; preload
p3p: CP="IDC COR PSA DEV ADM OUR IND ONL"
x-error-code: 0
x-soa: true, Gator
x-server: eu1a-nomad-t22
x-callid: ed9434121970b628c9f8aebddcc591ac
date: Mon, 05 Aug 2024 13:36:45 GMT
accept-ranges: bytes
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: z5gFofxM3EcGvl2KTK2O4lJPZOfP8pzmGGo3skDPO388H-WfYNoJHQ==
age: 3017
X-Firefox-Spdy: h2
34 kB URL app3.salesmanago.pl/api/r.gif?uri=%2Ftickets%2Fconfirmation%3FpaymentRef%3D66b0de88319f0d45e3e3bf72%26lang%3Dit&location=biglietti.asroma.com&uuid=19122efae92-bd22ac7b5b31-e8a6a8d4-54e274de-36014177-64ad3b7ce0b2&referrer=https%3A%2F%2Fweb.axerve.com%2F&smid=4zxdzbcdqqq46j4b&time=2024-08-05T14%3A26%3A58Z×tamp=1722868018837&session=1&title=AS%20Roma%20%7C%20Buy%20Tickets&cp=1722868018837&ns=true&fp=97da93f8a25474007ab9eb1a503bdc68
IP
Certificate IssuerDigiCert Inc
Subject*.salesmanago.pl
FingerprintDF:0D:88:9C:56:45:E8:7B:24:52:6E:1B:FA:A8:E8:72:20:98:10:E1
ValidityFri, 02 Aug 2024 00:00:00 GMT - Tue, 19 Aug 2025 23:59:59 GMT
File type GIF image data, version 89a, 1 x 1
Hash 7bc52ec88319ce2eb39984810b747fb2
52be4e5810d3f8de82b06a3c46b276d886c99f70
555a3df36069a95696807228d72fafee2fba1db21fe5de0ca37d4c09b8fc6119
Analyzer Verdict Alert Public InfoSec YARA rules malware Identifies a webshell or backdoor in image files.
GET /api/r.gif?uri=%2Ftickets%2Fconfirmation%3FpaymentRef%3D66b0de88319f0d45e3e3bf72%26lang%3Dit&location=biglietti.asroma.com&uuid=19122efae92-bd22ac7b5b31-e8a6a8d4-54e274de-36014177-64ad3b7ce0b2&referrer=https%3A%2F%2Fweb.axerve.com%2F&smid=4zxdzbcdqqq46j4b&time=2024-08-05T14%3A26%3A58Z×tamp=1722868018837&session=1&title=AS%20Roma%20%7C%20Buy%20Tickets&cp=1722868018837&ns=true&fp=97da93f8a25474007ab9eb1a503bdc68 HTTP/1.1
Host: app3.salesmanago.pl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://biglietti.asroma.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Aug 2024 14:26:58 GMT
server: Apache
cache-control: max-age=0
expires: Mon, 05 Aug 2024 14:26:58 GMT
content-type: image/gif;charset=UTF-8
strict-transport-security: max-age=31540000
set-cookie: smg=21196341-2796-42a5-a257-aeafd690305a; Max-Age=315360000; Expires=Thu, 03 Aug 2034 14:26:58 GMT; Domain=salesmanago.pl; Path=/; Secure; HttpOnly
SERVERID=A; path=/; HttpOnly; Secure
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
GET identity.asroma.com/sdk.config.get?apiKey=3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5&httpStatusCodes=true
200 OK 2.0 kB URL GET HTTP/2 identity.asroma.com/sdk.config.get?apiKey=3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5&httpStatusCodes=true
IP
Requested by https://account.asroma.com/?gig_ssoToken=eu1_tk1.RDYODGH_CySD7oR-wVK77RP2dM7qGZjdiBtIejn_cF0&gig_source=asroma.com
Certificate IssuerAmazon
Subjectidentity.asroma.com
Fingerprint7A:76:DF:A0:1D:77:22:B0:3B:F1:0B:5F:E1:72:43:DF:66:42:03:E8
ValiditySun, 26 Nov 2023 00:00:00 GMT - Tue, 24 Dec 2024 23:59:59 GMT
Hash a6da378c87efc09789eaf9dc90ebd8ca
6fa4ba4ce2105e25f840a74588ebf19f58613a83
8d2c5bb4161a6e8ddd38aeaa25986fcbefdf441843b34a13fa5abaac38908b49
GET /sdk.config.get?apiKey=3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5&httpStatusCodes=true HTTP/1.1
Host: identity.asroma.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://identity.asroma.com/gs/sso.htm?APIKey=3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5&ssoSegment=&version=latest&build=16174
DNT: 1
Connection: keep-alive
Cookie: nlbi_2063869=iSvYInbUsEhpVFlqlOn80gAAAADejPaUbAjNFA4CfwbN5lrv; visid_incap_2063869=cc5B4e7+S0m4zJP2yQZpsSvhsGYAAAAAQUIPAAAAAADve1E8U1oXCtvdMx3KYtYc; incap_ses_633_2063869=00+TD0+bCDo8moAIRt7ICCzhsGYAAAAAcjtysQMUIRnoTX3NLplBFw==; gmid=gmid.ver4.AtLtbKsfSQ.Fg8k3zJwci2J6_deVcYyzyNKfNsOK6gSIgUkuVGZfXF7Aspdn7qhsDTQpxwNpbIq.dPiq38ozEvcC3Pbzs5BeDW_BF3FdYbcDyRl_PkDT8-ByLjlHrwyynERTTpvkwwce4l76mciLDQUoUGGeKXtNUg.sc3; ucid=ZkmVv_WPsKvHFzdnqte4Ow; hasGmid=ver4; gig_bootstrap_4_CgW8FMardcX-NyY8M3p6Wg=identity_ver4; gig_canary_3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5=false; gig_canary_ver_3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5=16174-3-28714455; apiDomain_3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5=identity.asroma.com; gig3pctest=true; gig_bootstrap_3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5=identity_ver4
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
content-length: 1992
access-control-allow-origin: *
cache-control: public, s-maxage=120, max-age=60
content-encoding: gzip
edge-cache-tag: siteid_759736734723
p3p: CP="IDC COR PSA DEV ADM OUR IND ONL"
x-error-code: 0
x-soa: true, Gator
x-server: eu1a-nomad-t23
x-callid: d81636d63c4d1aaa7291de22e8384128
date: Mon, 05 Aug 2024 14:25:34 GMT
accept-ranges: bytes
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: umZarjsmb3es6mgm4Nd-afMpHPgq60Ipi8IsdGV6_l3XtqhalHKZ9Q==
age: 88
X-Firefox-Spdy: h2
GET identity.asroma.com/sdk.config.get?apiKey=3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5&httpStatusCodes=true
200 OK 2.0 kB URL GET HTTP/2 identity.asroma.com/sdk.config.get?apiKey=3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5&httpStatusCodes=true
IP
Requested by https://account.asroma.com/?gig_ssoToken=eu1_tk1.RDYODGH_CySD7oR-wVK77RP2dM7qGZjdiBtIejn_cF0&gig_source=asroma.com
Certificate IssuerAmazon
Subjectidentity.asroma.com
Fingerprint7A:76:DF:A0:1D:77:22:B0:3B:F1:0B:5F:E1:72:43:DF:66:42:03:E8
ValiditySun, 26 Nov 2023 00:00:00 GMT - Tue, 24 Dec 2024 23:59:59 GMT
Hash a6da378c87efc09789eaf9dc90ebd8ca
6fa4ba4ce2105e25f840a74588ebf19f58613a83
8d2c5bb4161a6e8ddd38aeaa25986fcbefdf441843b34a13fa5abaac38908b49
GET /sdk.config.get?apiKey=3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5&httpStatusCodes=true HTTP/1.1
Host: identity.asroma.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://identity.asroma.com/gs/sso.htm?APIKey=3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5&ssoSegment=&version=latest&build=16174
DNT: 1
Connection: keep-alive
Cookie: nlbi_2063869=iSvYInbUsEhpVFlqlOn80gAAAADejPaUbAjNFA4CfwbN5lrv; visid_incap_2063869=cc5B4e7+S0m4zJP2yQZpsSvhsGYAAAAAQUIPAAAAAADve1E8U1oXCtvdMx3KYtYc; incap_ses_633_2063869=00+TD0+bCDo8moAIRt7ICCzhsGYAAAAAcjtysQMUIRnoTX3NLplBFw==; gmid=gmid.ver4.AtLtbKsfSQ.Fg8k3zJwci2J6_deVcYyzyNKfNsOK6gSIgUkuVGZfXF7Aspdn7qhsDTQpxwNpbIq.dPiq38ozEvcC3Pbzs5BeDW_BF3FdYbcDyRl_PkDT8-ByLjlHrwyynERTTpvkwwce4l76mciLDQUoUGGeKXtNUg.sc3; ucid=ZkmVv_WPsKvHFzdnqte4Ow; hasGmid=ver4; gig_bootstrap_4_CgW8FMardcX-NyY8M3p6Wg=identity_ver4; gig_canary_3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5=false; gig_canary_ver_3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5=16174-3-28714455; apiDomain_3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5=identity.asroma.com; gig_bootstrap_3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5=identity_ver4
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
content-length: 1992
access-control-allow-origin: *
cache-control: public, s-maxage=120, max-age=60
content-encoding: gzip
edge-cache-tag: siteid_759736734723
p3p: CP="IDC COR PSA DEV ADM OUR IND ONL"
x-error-code: 0
x-soa: true, Gator
x-server: eu1a-nomad-t23
x-callid: d81636d63c4d1aaa7291de22e8384128
date: Mon, 05 Aug 2024 14:25:34 GMT
accept-ranges: bytes
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 6kEWbTx-oTlJZYXie9s1_z99J-Fz4TLyupOxwIHmik6hvDhEShLP0g==
age: 89
X-Firefox-Spdy: h2
GET account.asroma.com/img/sfondo-fr.png
200 OK 42 kB URL GET HTTP/2 account.asroma.com/img/sfondo-fr.png
IP
Requested by https://account.asroma.com/?gig_ssoToken=eu1_tk1.RDYODGH_CySD7oR-wVK77RP2dM7qGZjdiBtIejn_cF0&gig_source=asroma.com
Certificate IssuerGoDaddy.com, Inc.
Subjectaccount.asroma.com
FingerprintF5:AA:BE:E1:B8:54:11:A9:3C:52:BC:61:B6:A7:AA:64:EE:6E:8F:8C
ValiditySun, 25 Feb 2024 08:15:27 GMT - Mon, 24 Feb 2025 10:54:20 GMT
File type PNG image data, 375 x 185, 8-bit/color RGBA, non-interlaced
Hash 626010fefe249a70323f2e878a9b7839
790f93af6baf82643b475bc48dbfa89da2889c6b
8ecb68a98f2cfdf5dee9f5731d5ddf6193adef645db4b6729706595cd08974ca
GET /img/sfondo-fr.png HTTP/1.1
Host: account.asroma.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://account.asroma.com/css/main.css
Cookie: nlbi_2063869=iSvYInbUsEhpVFlqlOn80gAAAADejPaUbAjNFA4CfwbN5lrv; visid_incap_2063869=cc5B4e7+S0m4zJP2yQZpsSvhsGYAAAAAQUIPAAAAAADve1E8U1oXCtvdMx3KYtYc; incap_ses_633_2063869=00+TD0+bCDo8moAIRt7ICCzhsGYAAAAAcjtysQMUIRnoTX3NLplBFw==; gig_bootstrap_4_CgW8FMardcX-NyY8M3p6Wg=identity_ver4; gig_canary=false; gig_canary_ver=16174-3-28714470; smvr=eyJ2aXNpdHMiOjEsInZpZXdzIjoxLCJ0cyI6MTcyMjg2ODAyMTg4MCwiaXNOZXdTZXNzaW9uIjp0cnVlfQ==; smuuid=19122efba79-1a5804f53b0b-a3598f94-623ac5f5-981a1308-a59fdfcd1f67; _smvs=OTHER; gig_bootstrap_3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5=identity_ver4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 42342
date: Mon, 05 Aug 2024 13:36:52 GMT
last-modified: Mon, 25 Sep 2023 15:27:06 GMT
etag: "626010fefe249a70323f2e878a9b7839"
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: kIw66P8c7doDcp2jDL1oVntMyx6iGVNIvidE6sp9AzbfWpQUVdHwbA==
age: 3012
X-Firefox-Spdy: h2
GET account.asroma.com/css/font/ASRoma-ExtraBold.woff2
200 OK 29 kB URL GET HTTP/2 account.asroma.com/css/font/ASRoma-ExtraBold.woff2
IP
Requested by https://account.asroma.com/?gig_ssoToken=eu1_tk1.RDYODGH_CySD7oR-wVK77RP2dM7qGZjdiBtIejn_cF0&gig_source=asroma.com
Certificate IssuerGoDaddy.com, Inc.
Subjectaccount.asroma.com
FingerprintF5:AA:BE:E1:B8:54:11:A9:3C:52:BC:61:B6:A7:AA:64:EE:6E:8F:8C
ValiditySun, 25 Feb 2024 08:15:27 GMT - Mon, 24 Feb 2025 10:54:20 GMT
File type Web Open Font Format (Version 2), TrueType, length 29260, version 1.0
Hash 35b349974d210a85698560d679b1ea71
fd9a151f075a9a8304a5f237661fba928334e1ea
1a7a3a663bbb36054235df3273f735cc1db72b44adacd029913058465a5b84d9
GET /css/font/ASRoma-ExtraBold.woff2 HTTP/1.1
Host: account.asroma.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://account.asroma.com/css/main.css
Cookie: nlbi_2063869=iSvYInbUsEhpVFlqlOn80gAAAADejPaUbAjNFA4CfwbN5lrv; visid_incap_2063869=cc5B4e7+S0m4zJP2yQZpsSvhsGYAAAAAQUIPAAAAAADve1E8U1oXCtvdMx3KYtYc; incap_ses_633_2063869=00+TD0+bCDo8moAIRt7ICCzhsGYAAAAAcjtysQMUIRnoTX3NLplBFw==; gig_bootstrap_4_CgW8FMardcX-NyY8M3p6Wg=identity_ver4; gig_canary=false; gig_canary_ver=16174-3-28714470; smvr=eyJ2aXNpdHMiOjEsInZpZXdzIjoxLCJ0cyI6MTcyMjg2ODAyMTg4MCwiaXNOZXdTZXNzaW9uIjp0cnVlfQ==; smuuid=19122efba79-1a5804f53b0b-a3598f94-623ac5f5-981a1308-a59fdfcd1f67; _smvs=OTHER; gig_bootstrap_3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5=identity_ver4
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 29260
date: Mon, 05 Aug 2024 14:26:46 GMT
last-modified: Mon, 25 Sep 2023 15:27:17 GMT
etag: "35b349974d210a85698560d679b1ea71"
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: gIoG1DPssBFR6A1TZ7vWetd5wQku7-N3e3g8R5pAGB3GxxqaKhIiwA==
age: 18
X-Firefox-Spdy: h2
33 kB URL identity.asroma.com/gs/sso.htm?APIKey=3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5&ssoSegment=&version=latest&build=16174
IP
File type HTML document, ASCII text, with very long lines (64578), with CRLF, LF line terminators
Hash 59583711fb1712a19e6b3270ad89425a
09a7b1dd5a9dd3e9fcf6aaa7eb708b0889323cb8
5771324b5811ebd55ef0fd7c5a512a4ec4324e3162591c561c039dbedc6df906
GET /gs/sso.htm?APIKey=3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5&ssoSegment=&version=latest&build=16174 HTTP/1.1
Host: identity.asroma.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://account.asroma.com/
Cookie: nlbi_2063869=iSvYInbUsEhpVFlqlOn80gAAAADejPaUbAjNFA4CfwbN5lrv; visid_incap_2063869=cc5B4e7+S0m4zJP2yQZpsSvhsGYAAAAAQUIPAAAAAADve1E8U1oXCtvdMx3KYtYc; incap_ses_633_2063869=00+TD0+bCDo8moAIRt7ICCzhsGYAAAAAcjtysQMUIRnoTX3NLplBFw==; gmid=gmid.ver4.AtLtbKsfSQ.Fg8k3zJwci2J6_deVcYyzyNKfNsOK6gSIgUkuVGZfXF7Aspdn7qhsDTQpxwNpbIq.dPiq38ozEvcC3Pbzs5BeDW_BF3FdYbcDyRl_PkDT8-ByLjlHrwyynERTTpvkwwce4l76mciLDQUoUGGeKXtNUg.sc3; ucid=ZkmVv_WPsKvHFzdnqte4Ow; hasGmid=ver4; gig_bootstrap_4_CgW8FMardcX-NyY8M3p6Wg=identity_ver4; gig_canary_3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5=false; gig_canary_ver_3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5=16174-3-28714470; apiDomain_3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5=identity.asroma.com; gig_bootstrap_3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5=identity_ver4
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/html; charset=utf-8
content-length: 33407
access-control-allow-origin: *
cache-control: public, s-maxage=3600, max-age=900
content-encoding: gzip
edge-cache-tag: siteid_759736734723,ver_latest
strict-transport-security: max-age=63072000; includeSubDomains; preload
p3p: CP="IDC COR PSA DEV ADM OUR IND ONL"
x-error-code: 0
x-soa: true, Gator
x-server: eu1a-nomad-t22
x-callid: ed9434121970b628c9f8aebddcc591ac
date: Mon, 05 Aug 2024 13:36:45 GMT
accept-ranges: bytes
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 4zVDdYUGx0YzhSeNFHWale0hLj5uY6Zlh_64cbvgL5BzzMGrSEkARg==
age: 3018
X-Firefox-Spdy: h2
35 kB URL biglietti.asroma.com/tickets/form/province
IP
File type JavaScript source, ASCII text, with very long lines (52783), with CRLF, LF line terminators
Hash cffe00014bcb7bd79c885d151c4f27df
f4c0c228704cddfa79d7134bc9ca065f622263f9
0ad23374f22fbca5f80ecb3cc3a762787c5a72b94a333b256e31ddd67db61cb6
GET /tickets/form/province HTTP/1.1
Host: biglietti.asroma.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://biglietti.asroma.com/tickets/confirmation?paymentRef=66b0de88319f0d45e3e3bf72&lang=it
Cookie: JSESSIONID=MTZjMjlhM2ItZGMzZS00MTE0LThjMzgtYWUwNTVlM2FiNThh; nlbi_2063869=iSvYInbUsEhpVFlqlOn80gAAAADejPaUbAjNFA4CfwbN5lrv; visid_incap_2063869=cc5B4e7+S0m4zJP2yQZpsSvhsGYAAAAAQUIPAAAAAADve1E8U1oXCtvdMx3KYtYc; incap_ses_633_2063869=00+TD0+bCDo8moAIRt7ICCzhsGYAAAAAcjtysQMUIRnoTX3NLplBFw==; gig_canary=false; gig_canary_ver=16174-3-28714455; smvr=eyJ2aXNpdHMiOjEsInZpZXdzIjoxLCJ0cyI6MTcyMjg2ODAxODgzNCwiaXNOZXdTZXNzaW9uIjp0cnVlfQ==; smuuid=19122efae92-bd22ac7b5b31-e8a6a8d4-54e274de-36014177-64ad3b7ce0b2; _smvs=OTHER; gig_bootstrap_4_CgW8FMardcX-NyY8M3p6Wg=identity_ver4
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Aug 2024 14:27:00 GMT
server: Apache
content-type: application/json;charset=UTF-8
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: deny
x-permitted-cross-domain-policies: master-only
x-cdn: Imperva
content-encoding: gzip
x-iinfo: 4-7301633-7301635 pNYy RT(1722868011921 8015) q(0 0 0 -1) r(2 2) U12
X-Firefox-Spdy: h2
471 B IP
Hash 3a465be7c2805c533467bfc450daecd7
d68231c69002baf712cf878f0faea76d0c0f4a6e
f32616120425276898064879701325f072e1a7c18481e6da45f9a30b76c540ee
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Aug 2024 14:27:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
GET apis.google.com/js/client.js?onload=__gigya_handleClientLoad
200 OK 5.9 kB URL GET HTTP/2 apis.google.com/js/client.js?onload=__gigya_handleClientLoad
IP
Requested by https://account.asroma.com/?gig_ssoToken=eu1_tk1.RDYODGH_CySD7oR-wVK77RP2dM7qGZjdiBtIejn_cF0&gig_source=asroma.com
Certificate IssuerGoogle Trust Services
Subject*.apis.google.com
Fingerprint9E:C8:F3:EF:58:21:E5:16:5C:FD:85:C9:52:53:EE:3A:96:11:3F:BF
ValidityTue, 30 Jul 2024 12:52:29 GMT - Tue, 22 Oct 2024 12:52:28 GMT
File type JavaScript source, ASCII text, with very long lines (2051)
Hash 7615f2f1d40be86a9d28c8a13a76ba65
ca08f7a6544d30e6dd03ebe1513960c28eea16b3
54704a2faac7003b8c17fc33f738dc56b80917082e638d56fe6ba0646b10ef92
GET /js/client.js?onload=__gigya_handleClientLoad HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://account.asroma.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
content-length: 5928
date: Mon, 05 Aug 2024 14:27:03 GMT
expires: Mon, 05 Aug 2024 14:27:03 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "ffa18191e30e066e"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET cdns.eu1.gigya.com/js/gigya.services.plugins.base.min.js?services=gigya.services.accounts.plugins.screenSet&lang=en&version=latest
200 OK 224 kB URL GET HTTP/2 cdns.eu1.gigya.com/js/gigya.services.plugins.base.min.js?services=gigya.services.accounts.plugins.screenSet&lang=en&version=latest
IP
ASN #7545 TPG Telecom Limited
Requested by https://account.asroma.com/?gig_ssoToken=eu1_tk1.RDYODGH_CySD7oR-wVK77RP2dM7qGZjdiBtIejn_cF0&gig_source=asroma.com
Certificate IssuerDigiCert Inc
Subjectcdns.gigya.com
Fingerprint69:D8:CB:78:FA:70:07:D3:1E:F0:BA:B8:44:0F:10:29:01:99:F4:5E
ValidityWed, 25 Oct 2023 00:00:00 GMT - Thu, 24 Oct 2024 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (65446), with CRLF line terminators
Size 224 kB (224384 bytes)
Hash 5eb3cbbf984763533a60999ffa64c036
62bcea5301687202834163bbd11d8af577372c66
55d973997cd5d96c7aa01a535181e9d76342b784b815a295c7dab98df4f94fbc
GET /js/gigya.services.plugins.base.min.js?services=gigya.services.accounts.plugins.screenSet&lang=en&version=latest HTTP/1.1
Host: cdns.eu1.gigya.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://account.asroma.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 224384
content-type: text/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, s-maxage=3600, max-age=900
content-encoding: gzip
vary: Accept-Encoding
p3p: CP="IDC COR PSA DEV ADM OUR IND ONL"
x-error-code: 0
x-soa: true, Gator
x-server: us1d-nomad-t25
x-callid: fe4e61007f43168241c1cb647c715008
x-robots-tag: none
date: Mon, 05 Aug 2024 14:27:03 GMT
X-Firefox-Spdy: h2
GET identity.asroma.com/sdk.config.get?apiKey=3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5&httpStatusCodes=true
200 OK 2.0 kB URL GET HTTP/2 identity.asroma.com/sdk.config.get?apiKey=3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5&httpStatusCodes=true
IP
Requested by https://account.asroma.com/?gig_ssoToken=eu1_tk1.RDYODGH_CySD7oR-wVK77RP2dM7qGZjdiBtIejn_cF0&gig_source=asroma.com
Certificate IssuerAmazon
Subjectidentity.asroma.com
Fingerprint7A:76:DF:A0:1D:77:22:B0:3B:F1:0B:5F:E1:72:43:DF:66:42:03:E8
ValiditySun, 26 Nov 2023 00:00:00 GMT - Tue, 24 Dec 2024 23:59:59 GMT
Hash a6da378c87efc09789eaf9dc90ebd8ca
6fa4ba4ce2105e25f840a74588ebf19f58613a83
8d2c5bb4161a6e8ddd38aeaa25986fcbefdf441843b34a13fa5abaac38908b49
GET /sdk.config.get?apiKey=3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5&httpStatusCodes=true HTTP/1.1
Host: identity.asroma.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://identity.asroma.com/gs/sso.htm?APIKey=3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5&ssoSegment=&version=latest&build=16174
DNT: 1
Connection: keep-alive
Cookie: nlbi_2063869=iSvYInbUsEhpVFlqlOn80gAAAADejPaUbAjNFA4CfwbN5lrv; visid_incap_2063869=cc5B4e7+S0m4zJP2yQZpsSvhsGYAAAAAQUIPAAAAAADve1E8U1oXCtvdMx3KYtYc; incap_ses_633_2063869=00+TD0+bCDo8moAIRt7ICCzhsGYAAAAAcjtysQMUIRnoTX3NLplBFw==; gmid=gmid.ver4.AtLtbKsfSQ.Fg8k3zJwci2J6_deVcYyzyNKfNsOK6gSIgUkuVGZfXF7Aspdn7qhsDTQpxwNpbIq.dPiq38ozEvcC3Pbzs5BeDW_BF3FdYbcDyRl_PkDT8-ByLjlHrwyynERTTpvkwwce4l76mciLDQUoUGGeKXtNUg.sc3; ucid=ZkmVv_WPsKvHFzdnqte4Ow; hasGmid=ver4; gig_bootstrap_4_CgW8FMardcX-NyY8M3p6Wg=identity_ver4; gig_canary_3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5=false; gig_canary_ver_3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5=16174-3-28714470; apiDomain_3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5=identity.asroma.com; gig_bootstrap_3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5=identity_ver4
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
content-length: 1992
access-control-allow-origin: *
cache-control: public, s-maxage=120, max-age=60
content-encoding: gzip
edge-cache-tag: siteid_759736734723
p3p: CP="IDC COR PSA DEV ADM OUR IND ONL"
x-error-code: 0
x-soa: true, Gator
x-server: eu1a-nomad-t23
x-callid: d81636d63c4d1aaa7291de22e8384128
date: Mon, 05 Aug 2024 14:25:34 GMT
accept-ranges: bytes
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: JIjA2COsqlN8iTVfRg6PE0w8KngpZ1OooHeQQZTvyPbjhnimTLGE1w==
age: 89
X-Firefox-Spdy: h2
471 B IP
Hash 117df1712ab32c17ac208e45bfb1ff11
cd51a72693807e159486cb43f97064468c500459
a75fa66165465209b54d07f61fa6aae2d7adf0e6ac5a31509505a3813e57c0f8
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Aug 2024 14:27:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
GET identity.asroma.com/sdk.config.get?apiKey=3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5&httpStatusCodes=true
200 OK 2.0 kB URL GET HTTP/2 identity.asroma.com/sdk.config.get?apiKey=3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5&httpStatusCodes=true
IP
Requested by https://account.asroma.com/?gig_ssoToken=eu1_tk1.RDYODGH_CySD7oR-wVK77RP2dM7qGZjdiBtIejn_cF0&gig_source=asroma.com
Certificate IssuerAmazon
Subjectidentity.asroma.com
Fingerprint7A:76:DF:A0:1D:77:22:B0:3B:F1:0B:5F:E1:72:43:DF:66:42:03:E8
ValiditySun, 26 Nov 2023 00:00:00 GMT - Tue, 24 Dec 2024 23:59:59 GMT
Hash a6da378c87efc09789eaf9dc90ebd8ca
6fa4ba4ce2105e25f840a74588ebf19f58613a83
8d2c5bb4161a6e8ddd38aeaa25986fcbefdf441843b34a13fa5abaac38908b49
GET /sdk.config.get?apiKey=3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5&httpStatusCodes=true HTTP/1.1
Host: identity.asroma.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://identity.asroma.com/gs/sso.htm?APIKey=3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5&ssoSegment=&version=latest&build=16174
DNT: 1
Connection: keep-alive
Cookie: nlbi_2063869=iSvYInbUsEhpVFlqlOn80gAAAADejPaUbAjNFA4CfwbN5lrv; visid_incap_2063869=cc5B4e7+S0m4zJP2yQZpsSvhsGYAAAAAQUIPAAAAAADve1E8U1oXCtvdMx3KYtYc; incap_ses_633_2063869=00+TD0+bCDo8moAIRt7ICCzhsGYAAAAAcjtysQMUIRnoTX3NLplBFw==; gmid=gmid.ver4.AtLtbKsfSQ.Fg8k3zJwci2J6_deVcYyzyNKfNsOK6gSIgUkuVGZfXF7Aspdn7qhsDTQpxwNpbIq.dPiq38ozEvcC3Pbzs5BeDW_BF3FdYbcDyRl_PkDT8-ByLjlHrwyynERTTpvkwwce4l76mciLDQUoUGGeKXtNUg.sc3; ucid=ZkmVv_WPsKvHFzdnqte4Ow; hasGmid=ver4; gig_bootstrap_4_CgW8FMardcX-NyY8M3p6Wg=identity_ver4; gig_canary_3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5=false; gig_canary_ver_3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5=16174-3-28714470; apiDomain_3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5=identity.asroma.com; gig_bootstrap_3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5=identity_ver4
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
content-length: 1992
access-control-allow-origin: *
cache-control: public, s-maxage=120, max-age=60
content-encoding: gzip
edge-cache-tag: siteid_759736734723
p3p: CP="IDC COR PSA DEV ADM OUR IND ONL"
x-error-code: 0
x-soa: true, Gator
x-server: eu1a-nomad-t23
x-callid: d81636d63c4d1aaa7291de22e8384128
date: Mon, 05 Aug 2024 14:25:34 GMT
accept-ranges: bytes
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: SwJRVRscsATglbU_8swKLLQ3miv3gTzcDiTMeeZ-G2c8jSvoa7vDNA==
age: 89
X-Firefox-Spdy: h2
GET maxcdn.bootstrapcdn.com/bootstrap/4.3.1/js/bootstrap.min.js
200 OK 132 kB URL GET HTTP/2 maxcdn.bootstrapcdn.com/bootstrap/4.3.1/js/bootstrap.min.js
IP
Requested by https://account.asroma.com/?gig_ssoToken=eu1_tk1.RDYODGH_CySD7oR-wVK77RP2dM7qGZjdiBtIejn_cF0&gig_source=asroma.com
Certificate IssuerGoogle Trust Services
Subjectbootstrapcdn.com
FingerprintBE:14:2A:D4:32:CD:FF:FE:ED:79:48:4F:5C:7B:C4:52:09:C8:58:96
ValidityTue, 23 Jul 2024 01:50:30 GMT - Mon, 21 Oct 2024 01:50:29 GMT
File type JavaScript source, ASCII text, with very long lines (57791)
Size 132 kB (131537 bytes)
Hash a35105493dee04d5672a2456f015b137
8c397c3af27429a8888ddcca9c1dcff1b30a6856
cd4ad4d62d9bd161668d9f5f55215d3cc7fe1021ad1290516ec7efdd5f28c444
GET /bootstrap/4.3.1/js/bootstrap.min.js HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://account.asroma.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 05 Aug 2024 14:27:01 GMT
content-type: application/javascript; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: gzip
etag: W/"e1d98d47689e00f8ecbc5d9f61bdb42e"
last-modified: Mon, 25 Jan 2021 22:04:08 GMT
cdn-cachedat: 08/21/2023 18:50:34
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1079
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: bbb0de45f9aa0125514777855c6f9cdf
cdn-cache: HIT
cf-cache-status: HIT
age: 2698275
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8ae7772b39c3b503-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
33 kB URL identity.asroma.com/gs/sso.htm?APIKey=3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5&ssoSegment=&version=latest&build=16174
IP
File type HTML document, ASCII text, with very long lines (64578), with CRLF, LF line terminators
Hash 59583711fb1712a19e6b3270ad89425a
09a7b1dd5a9dd3e9fcf6aaa7eb708b0889323cb8
5771324b5811ebd55ef0fd7c5a512a4ec4324e3162591c561c039dbedc6df906
GET /gs/sso.htm?APIKey=3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5&ssoSegment=&version=latest&build=16174 HTTP/1.1
Host: identity.asroma.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://account.asroma.com/
Cookie: nlbi_2063869=iSvYInbUsEhpVFlqlOn80gAAAADejPaUbAjNFA4CfwbN5lrv; visid_incap_2063869=cc5B4e7+S0m4zJP2yQZpsSvhsGYAAAAAQUIPAAAAAADve1E8U1oXCtvdMx3KYtYc; incap_ses_633_2063869=00+TD0+bCDo8moAIRt7ICCzhsGYAAAAAcjtysQMUIRnoTX3NLplBFw==; gmid=gmid.ver4.AtLtbKsfSQ.Fg8k3zJwci2J6_deVcYyzyNKfNsOK6gSIgUkuVGZfXF7Aspdn7qhsDTQpxwNpbIq.dPiq38ozEvcC3Pbzs5BeDW_BF3FdYbcDyRl_PkDT8-ByLjlHrwyynERTTpvkwwce4l76mciLDQUoUGGeKXtNUg.sc3; ucid=ZkmVv_WPsKvHFzdnqte4Ow; hasGmid=ver4; gig_bootstrap_4_CgW8FMardcX-NyY8M3p6Wg=identity_ver4; gig_canary_3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5=false; gig_canary_ver_3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5=16174-3-28714470; apiDomain_3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5=identity.asroma.com; gig_bootstrap_3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5=identity_ver4
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/html; charset=utf-8
content-length: 33407
access-control-allow-origin: *
cache-control: public, s-maxage=3600, max-age=900
content-encoding: gzip
edge-cache-tag: siteid_759736734723,ver_latest
strict-transport-security: max-age=63072000; includeSubDomains; preload
p3p: CP="IDC COR PSA DEV ADM OUR IND ONL"
x-error-code: 0
x-soa: true, Gator
x-server: eu1a-nomad-t22
x-callid: ed9434121970b628c9f8aebddcc591ac
date: Mon, 05 Aug 2024 13:36:45 GMT
accept-ranges: bytes
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: LmqDNeAEFM_cCnRc3DTnqInpalwh_Yl0FhSoA1r4CYm8S1TgwXFJEQ==
age: 3018
X-Firefox-Spdy: h2
GET identity.asroma.com/accounts.getScreenSets?screenSetIDs=AsRoma-RegistrationLogin&include=html%2Ccss%2Cjavascript%2Ctranslations%2C&lang=en&APIKey=3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5&source=showScreenSet&sdk=js_latest&pageURL=https%3A%2F%2Faccount.asroma.com%2F%3Fgig_ssoToken%3Deu1_tk1.RDYODGH_CySD7oR-wVK77RP2dM7qGZjdiBtIejn_cF0%26gig_source%3Dasroma.com&sdkBuild=16174&format=json&httpStatusCodes=true
200 OK 74 kB URL GET HTTP/2 identity.asroma.com/accounts.getScreenSets?screenSetIDs=AsRoma-RegistrationLogin&include=html%2Ccss%2Cjavascript%2Ctranslations%2C&lang=en&APIKey=3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5&source=showScreenSet&sdk=js_latest&pageURL=https%3A%2F%2Faccount.asroma.com%2F%3Fgig_ssoToken%3Deu1_tk1.RDYODGH_CySD7oR-wVK77RP2dM7qGZjdiBtIejn_cF0%26gig_source%3Dasroma.com&sdkBuild=16174&format=json&httpStatusCodes=true
IP
Requested by https://account.asroma.com/?gig_ssoToken=eu1_tk1.RDYODGH_CySD7oR-wVK77RP2dM7qGZjdiBtIejn_cF0&gig_source=asroma.com
Certificate IssuerAmazon
Subjectidentity.asroma.com
Fingerprint7A:76:DF:A0:1D:77:22:B0:3B:F1:0B:5F:E1:72:43:DF:66:42:03:E8
ValiditySun, 26 Nov 2023 00:00:00 GMT - Tue, 24 Dec 2024 23:59:59 GMT
Hash bf2ea24d6b037671e788817f481d4e58
3a9a0bde13d5c8e95345056397fe6fff6023ef45
75f2fc534022bace5ad91e5ffb037b960b7f4d096dc56cffef144ff4e46ab774
GET /accounts.getScreenSets?screenSetIDs=AsRoma-RegistrationLogin&include=html%2Ccss%2Cjavascript%2Ctranslations%2C&lang=en&APIKey=3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5&source=showScreenSet&sdk=js_latest&pageURL=https%3A%2F%2Faccount.asroma.com%2F%3Fgig_ssoToken%3Deu1_tk1.RDYODGH_CySD7oR-wVK77RP2dM7qGZjdiBtIejn_cF0%26gig_source%3Dasroma.com&sdkBuild=16174&format=json&httpStatusCodes=true HTTP/1.1
Host: identity.asroma.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://account.asroma.com
DNT: 1
Connection: keep-alive
Referer: https://account.asroma.com/
Cookie: nlbi_2063869=iSvYInbUsEhpVFlqlOn80gAAAADejPaUbAjNFA4CfwbN5lrv; visid_incap_2063869=cc5B4e7+S0m4zJP2yQZpsSvhsGYAAAAAQUIPAAAAAADve1E8U1oXCtvdMx3KYtYc; incap_ses_633_2063869=00+TD0+bCDo8moAIRt7ICCzhsGYAAAAAcjtysQMUIRnoTX3NLplBFw==; gmid=gmid.ver4.AtLtbKsfSQ.Fg8k3zJwci2J6_deVcYyzyNKfNsOK6gSIgUkuVGZfXF7Aspdn7qhsDTQpxwNpbIq.dPiq38ozEvcC3Pbzs5BeDW_BF3FdYbcDyRl_PkDT8-ByLjlHrwyynERTTpvkwwce4l76mciLDQUoUGGeKXtNUg.sc3; ucid=ZkmVv_WPsKvHFzdnqte4Ow; hasGmid=ver4; gig_bootstrap_4_CgW8FMardcX-NyY8M3p6Wg=identity_ver4; gig_canary_3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5=false; gig_canary_ver_3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5=16174-3-28714470; apiDomain_3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5=identity.asroma.com; gig_bootstrap_3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5=identity_ver4
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
content-length: 74525
date: Mon, 05 Aug 2024 14:27:02 GMT
access-control-allow-credentials: true
access-control-allow-methods: GET,PUT,DELETE,HEAD,OPTIONS,POST,PATCH
access-control-allow-origin: https://account.asroma.com
access-control-max-age: 86400
cache-control: private
content-encoding: gzip
p3p: CP="IDC COR PSA DEV ADM OUR IND ONL"
x-error-code: 0
x-soa: true, Gator
x-server: eu1a-nomad-t1
x-callid: a2e9303dd84e0b934b22ea257dc7fb8a
x-robots-tag: none
vary: Origin,Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: h94-sq47oHzyjyClWO5xwAc38rYIy6ZjD-MIEZulmW8_9QfHShnmXA==
X-Firefox-Spdy: h2
GET app3.salesmanago.pl/api/vs?location=account.asroma.com&referrer=https%3A%2F%2Fbiglietti.asroma.com%2F
200 OK 2.0 kB URL GET HTTP/2 app3.salesmanago.pl/api/vs?location=account.asroma.com&referrer=https%3A%2F%2Fbiglietti.asroma.com%2F
IP
Requested by https://account.asroma.com/?gig_ssoToken=eu1_tk1.RDYODGH_CySD7oR-wVK77RP2dM7qGZjdiBtIejn_cF0&gig_source=asroma.com
Certificate IssuerDigiCert Inc
Subject*.salesmanago.pl
FingerprintDF:0D:88:9C:56:45:E8:7B:24:52:6E:1B:FA:A8:E8:72:20:98:10:E1
ValidityFri, 02 Aug 2024 00:00:00 GMT - Tue, 19 Aug 2025 23:59:59 GMT
File type New Line Delimited JSON text data
Hash 36cde220b1c2bd4eeccc39a19aaf30be
f60ed4c52501eb6b96db333b834cca0de78704b7
9713ec780a718b5765f94822b6447e30734d5a471ec4feeadfb7369e5e8a1058
GET /api/vs?location=account.asroma.com&referrer=https%3A%2F%2Fbiglietti.asroma.com%2F HTTP/1.1
Host: app3.salesmanago.pl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://account.asroma.com
DNT: 1
Connection: keep-alive
Referer: https://account.asroma.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Aug 2024 14:27:01 GMT
server: Apache
access-control-allow-origin: *
cache-control: max-age=1
expires: Mon, 05 Aug 2024 14:27:02 GMT
vary: Accept-Encoding
content-encoding: gzip
content-type: application/json;charset=UTF-8
strict-transport-security: max-age=31540000
set-cookie: SERVERID=B; path=/; HttpOnly; Secure
X-Firefox-Spdy: h2
GET identity.asroma.com/accounts.getScreenSets?screenSetIDs=AsRoma-RegistrationLogin&include=html%2Ccss%2Cjavascript%2Ctranslations%2C&lang=en&APIKey=3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5&source=showScreenSet&sdk=js_latest&pageURL=https%3A%2F%2Faccount.asroma.com%2F%3Fgig_ssoToken%3Deu1_tk1.RDYODGH_CySD7oR-wVK77RP2dM7qGZjdiBtIejn_cF0%26gig_source%3Dasroma.com&sdkBuild=16174&format=json&httpStatusCodes=true
200 OK 74 kB URL GET HTTP/2 identity.asroma.com/accounts.getScreenSets?screenSetIDs=AsRoma-RegistrationLogin&include=html%2Ccss%2Cjavascript%2Ctranslations%2C&lang=en&APIKey=3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5&source=showScreenSet&sdk=js_latest&pageURL=https%3A%2F%2Faccount.asroma.com%2F%3Fgig_ssoToken%3Deu1_tk1.RDYODGH_CySD7oR-wVK77RP2dM7qGZjdiBtIejn_cF0%26gig_source%3Dasroma.com&sdkBuild=16174&format=json&httpStatusCodes=true
IP
Requested by https://account.asroma.com/?gig_ssoToken=eu1_tk1.RDYODGH_CySD7oR-wVK77RP2dM7qGZjdiBtIejn_cF0&gig_source=asroma.com
Certificate IssuerAmazon
Subjectidentity.asroma.com
Fingerprint7A:76:DF:A0:1D:77:22:B0:3B:F1:0B:5F:E1:72:43:DF:66:42:03:E8
ValiditySun, 26 Nov 2023 00:00:00 GMT - Tue, 24 Dec 2024 23:59:59 GMT
Hash 3394c4f3071194bef2c86e48377a07c8
ff8f30b1a3013b5f134159b66f2b55b7389d2683
119a79ec50211609b93738077a687e050bee0f51a7473e45089cc8e7cfbe01b6
GET /accounts.getScreenSets?screenSetIDs=AsRoma-RegistrationLogin&include=html%2Ccss%2Cjavascript%2Ctranslations%2C&lang=en&APIKey=3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5&source=showScreenSet&sdk=js_latest&pageURL=https%3A%2F%2Faccount.asroma.com%2F%3Fgig_ssoToken%3Deu1_tk1.RDYODGH_CySD7oR-wVK77RP2dM7qGZjdiBtIejn_cF0%26gig_source%3Dasroma.com&sdkBuild=16174&format=json&httpStatusCodes=true HTTP/1.1
Host: identity.asroma.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://account.asroma.com
DNT: 1
Connection: keep-alive
Referer: https://account.asroma.com/
Cookie: nlbi_2063869=iSvYInbUsEhpVFlqlOn80gAAAADejPaUbAjNFA4CfwbN5lrv; visid_incap_2063869=cc5B4e7+S0m4zJP2yQZpsSvhsGYAAAAAQUIPAAAAAADve1E8U1oXCtvdMx3KYtYc; incap_ses_633_2063869=00+TD0+bCDo8moAIRt7ICCzhsGYAAAAAcjtysQMUIRnoTX3NLplBFw==; gmid=gmid.ver4.AtLtbKsfSQ.Fg8k3zJwci2J6_deVcYyzyNKfNsOK6gSIgUkuVGZfXF7Aspdn7qhsDTQpxwNpbIq.dPiq38ozEvcC3Pbzs5BeDW_BF3FdYbcDyRl_PkDT8-ByLjlHrwyynERTTpvkwwce4l76mciLDQUoUGGeKXtNUg.sc3; ucid=ZkmVv_WPsKvHFzdnqte4Ow; hasGmid=ver4; gig_bootstrap_4_CgW8FMardcX-NyY8M3p6Wg=identity_ver4; gig_canary_3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5=false; gig_canary_ver_3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5=16174-3-28714470; apiDomain_3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5=identity.asroma.com; gig_bootstrap_3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5=identity_ver4
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
content-length: 74523
date: Mon, 05 Aug 2024 14:27:03 GMT
access-control-allow-credentials: true
access-control-allow-methods: GET,PUT,DELETE,HEAD,OPTIONS,POST,PATCH
access-control-allow-origin: https://account.asroma.com
access-control-max-age: 86400
cache-control: private
content-encoding: gzip
p3p: CP="IDC COR PSA DEV ADM OUR IND ONL"
x-error-code: 0
x-soa: true, Gator
x-server: eu1a-nomad-t1
x-callid: 733af4f1044c977ac382670ebb13c7fe
x-robots-tag: none
vary: Origin,Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: osZhXxSEh6Vn0c6A2su3Co9YH1EkIh8Hzbx1GzCdJt-NW_JA-mMbNA==
X-Firefox-Spdy: h2
GET account.asroma.com/img/check_off.svg
200 OK 895 B URL GET HTTP/2 account.asroma.com/img/check_off.svg
IP
Requested by https://account.asroma.com/?gig_ssoToken=eu1_tk1.RDYODGH_CySD7oR-wVK77RP2dM7qGZjdiBtIejn_cF0&gig_source=asroma.com
Certificate IssuerGoDaddy.com, Inc.
Subjectaccount.asroma.com
FingerprintF5:AA:BE:E1:B8:54:11:A9:3C:52:BC:61:B6:A7:AA:64:EE:6E:8F:8C
ValiditySun, 25 Feb 2024 08:15:27 GMT - Mon, 24 Feb 2025 10:54:20 GMT
File type SVG Scalable Vector Graphics image
Hash 89809ae6ea327367f3f41c36726e0d78
21d996102d08ae71eb1478aa160bc2847e929e00
8d505cdd80049963d5eccefb671930971081c176b99ffe2f46ba270a1f13e7ba
GET /img/check_off.svg HTTP/1.1
Host: account.asroma.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://account.asroma.com/?gig_ssoToken=eu1_tk1.RDYODGH_CySD7oR-wVK77RP2dM7qGZjdiBtIejn_cF0&gig_source=asroma.com
Cookie: nlbi_2063869=iSvYInbUsEhpVFlqlOn80gAAAADejPaUbAjNFA4CfwbN5lrv; visid_incap_2063869=cc5B4e7+S0m4zJP2yQZpsSvhsGYAAAAAQUIPAAAAAADve1E8U1oXCtvdMx3KYtYc; incap_ses_633_2063869=00+TD0+bCDo8moAIRt7ICCzhsGYAAAAAcjtysQMUIRnoTX3NLplBFw==; gig_bootstrap_4_CgW8FMardcX-NyY8M3p6Wg=identity_ver4; gig_canary=false; gig_canary_ver=16174-3-28714470; smvr=eyJ2aXNpdHMiOjEsInZpZXdzIjoxLCJ0cyI6MTcyMjg2ODAyMTg4MCwiaXNOZXdTZXNzaW9uIjp0cnVlfQ==; smuuid=19122efba79-1a5804f53b0b-a3598f94-623ac5f5-981a1308-a59fdfcd1f67; _smvs=OTHER; gig_bootstrap_3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5=identity_ver4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 895
last-modified: Mon, 25 Sep 2023 15:26:56 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Mon, 05 Aug 2024 13:36:09 GMT
etag: "89809ae6ea327367f3f41c36726e0d78"
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: hQ_bq9dS0H5DV0VF3Rq-rPq6Dd6JW-eJvsdww8OjdTKqlj3hs0remA==
age: 3056
X-Firefox-Spdy: h2
GET cdns.eu1.gigya.com/js/gigya.services.socialize.plugins.login_v2.min.js?lang=en&version=latest
200 OK 19 kB URL GET HTTP/2 cdns.eu1.gigya.com/js/gigya.services.socialize.plugins.login_v2.min.js?lang=en&version=latest
IP
ASN #7545 TPG Telecom Limited
Requested by https://account.asroma.com/?gig_ssoToken=eu1_tk1.RDYODGH_CySD7oR-wVK77RP2dM7qGZjdiBtIejn_cF0&gig_source=asroma.com
Certificate IssuerDigiCert Inc
Subjectcdns.gigya.com
Fingerprint69:D8:CB:78:FA:70:07:D3:1E:F0:BA:B8:44:0F:10:29:01:99:F4:5E
ValidityWed, 25 Oct 2023 00:00:00 GMT - Thu, 24 Oct 2024 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (60899), with CRLF line terminators
Hash 5282f00f833e4e3cf16fc81a5ad20e63
46db151a71d55f09ffbd421ab4b53e3900a172f4
1cfecd3f2a582f06ef03b509defc3ce1393ca048f341e17a1399eb7560d9464c
GET /js/gigya.services.socialize.plugins.login_v2.min.js?lang=en&version=latest HTTP/1.1
Host: cdns.eu1.gigya.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://account.asroma.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 18854
content-type: text/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, s-maxage=3600, max-age=900
content-encoding: gzip
vary: Accept-Encoding
p3p: CP="IDC COR PSA DEV ADM OUR IND ONL"
x-error-code: 0
x-soa: true, Gator
x-server: us1d-nomad-t19
x-callid: 64c234883ea09b8c7b8f7300ebf263ec
x-robots-tag: none
date: Mon, 05 Aug 2024 14:27:04 GMT
X-Firefox-Spdy: h2
GET account.asroma.com/img/facebook@2x.png
200 OK 2.4 kB URL GET HTTP/2 account.asroma.com/img/facebook@2x.png
IP
Requested by https://account.asroma.com/?gig_ssoToken=eu1_tk1.RDYODGH_CySD7oR-wVK77RP2dM7qGZjdiBtIejn_cF0&gig_source=asroma.com
Certificate IssuerGoDaddy.com, Inc.
Subjectaccount.asroma.com
FingerprintF5:AA:BE:E1:B8:54:11:A9:3C:52:BC:61:B6:A7:AA:64:EE:6E:8F:8C
ValiditySun, 25 Feb 2024 08:15:27 GMT - Mon, 24 Feb 2025 10:54:20 GMT
File type PNG image data, 268 x 80, 8-bit/color RGBA, non-interlaced
Hash d5897c99c6c220467e0da3c3920dc79c
06e1923c96d07bb60069dc5f97851e93e66fef45
abbf80beb3c770de5b43e8167e20a60f07fb5684a97d39c85d1651ee0c9264cc
GET /img/facebook@2x.png HTTP/1.1
Host: account.asroma.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://account.asroma.com/?gig_ssoToken=eu1_tk1.RDYODGH_CySD7oR-wVK77RP2dM7qGZjdiBtIejn_cF0&gig_source=asroma.com
Cookie: nlbi_2063869=iSvYInbUsEhpVFlqlOn80gAAAADejPaUbAjNFA4CfwbN5lrv; visid_incap_2063869=cc5B4e7+S0m4zJP2yQZpsSvhsGYAAAAAQUIPAAAAAADve1E8U1oXCtvdMx3KYtYc; incap_ses_633_2063869=00+TD0+bCDo8moAIRt7ICCzhsGYAAAAAcjtysQMUIRnoTX3NLplBFw==; gig_bootstrap_4_CgW8FMardcX-NyY8M3p6Wg=identity_ver4; gig_canary=false; gig_canary_ver=16174-3-28714470; smvr=eyJ2aXNpdHMiOjEsInZpZXdzIjoxLCJ0cyI6MTcyMjg2ODAyMTg4MCwiaXNOZXdTZXNzaW9uIjp0cnVlfQ==; smuuid=19122efba79-1a5804f53b0b-a3598f94-623ac5f5-981a1308-a59fdfcd1f67; _smvs=OTHER; gig_bootstrap_3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5=identity_ver4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 2389
date: Mon, 05 Aug 2024 14:26:47 GMT
last-modified: Mon, 25 Sep 2023 15:26:58 GMT
etag: "d5897c99c6c220467e0da3c3920dc79c"
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: R1lSRrQHHD5uBsngXclG7i4q__o9CZjXqOL4pCHew9TR5bGjeUG5VQ==
age: 18
X-Firefox-Spdy: h2
GET account.asroma.com/img/google@2x.png
200 OK 2.5 kB URL GET HTTP/2 account.asroma.com/img/google@2x.png
IP
Requested by https://account.asroma.com/?gig_ssoToken=eu1_tk1.RDYODGH_CySD7oR-wVK77RP2dM7qGZjdiBtIejn_cF0&gig_source=asroma.com
Certificate IssuerGoDaddy.com, Inc.
Subjectaccount.asroma.com
FingerprintF5:AA:BE:E1:B8:54:11:A9:3C:52:BC:61:B6:A7:AA:64:EE:6E:8F:8C
ValiditySun, 25 Feb 2024 08:15:27 GMT - Mon, 24 Feb 2025 10:54:20 GMT
File type PNG image data, 268 x 80, 8-bit/color RGBA, non-interlaced
Hash 25e639f0f20b1c5da53fbdc2b7edcdfa
c57c39b472b7381a5aece16b3a7281fc984e2eb2
2b477a7064449ce92de9477445c37c63550332f15436138acc5cdcda1709d8a1
GET /img/google@2x.png HTTP/1.1
Host: account.asroma.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://account.asroma.com/?gig_ssoToken=eu1_tk1.RDYODGH_CySD7oR-wVK77RP2dM7qGZjdiBtIejn_cF0&gig_source=asroma.com
Cookie: nlbi_2063869=iSvYInbUsEhpVFlqlOn80gAAAADejPaUbAjNFA4CfwbN5lrv; visid_incap_2063869=cc5B4e7+S0m4zJP2yQZpsSvhsGYAAAAAQUIPAAAAAADve1E8U1oXCtvdMx3KYtYc; incap_ses_633_2063869=00+TD0+bCDo8moAIRt7ICCzhsGYAAAAAcjtysQMUIRnoTX3NLplBFw==; gig_bootstrap_4_CgW8FMardcX-NyY8M3p6Wg=identity_ver4; gig_canary=false; gig_canary_ver=16174-3-28714470; smvr=eyJ2aXNpdHMiOjEsInZpZXdzIjoxLCJ0cyI6MTcyMjg2ODAyMTg4MCwiaXNOZXdTZXNzaW9uIjp0cnVlfQ==; smuuid=19122efba79-1a5804f53b0b-a3598f94-623ac5f5-981a1308-a59fdfcd1f67; _smvs=OTHER; gig_bootstrap_3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5=identity_ver4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 2485
last-modified: Mon, 25 Sep 2023 15:27:01 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Mon, 05 Aug 2024 13:36:09 GMT
etag: "25e639f0f20b1c5da53fbdc2b7edcdfa"
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: S-54M6d74XjqS-dcxzPE4qwpu4dqRxX7tVBWt4QpbuhWekJp3bv4Og==
age: 3056
X-Firefox-Spdy: h2
GET account.asroma.com/img/apple@2x.png
200 OK 1.5 kB URL GET HTTP/2 account.asroma.com/img/apple@2x.png
IP
Requested by https://account.asroma.com/?gig_ssoToken=eu1_tk1.RDYODGH_CySD7oR-wVK77RP2dM7qGZjdiBtIejn_cF0&gig_source=asroma.com
Certificate IssuerGoDaddy.com, Inc.
Subjectaccount.asroma.com
FingerprintF5:AA:BE:E1:B8:54:11:A9:3C:52:BC:61:B6:A7:AA:64:EE:6E:8F:8C
ValiditySun, 25 Feb 2024 08:15:27 GMT - Mon, 24 Feb 2025 10:54:20 GMT
File type PNG image data, 268 x 80, 8-bit/color RGBA, non-interlaced
Hash d30a5502be15c973d72518cb81794157
9c85e590a8269bbbbead45d5dde81df0f173d807
d6006fd957b897800cd95dfc5084b9a3eb0bba316f6afbccc190dfabe026993e
GET /img/apple@2x.png HTTP/1.1
Host: account.asroma.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://account.asroma.com/?gig_ssoToken=eu1_tk1.RDYODGH_CySD7oR-wVK77RP2dM7qGZjdiBtIejn_cF0&gig_source=asroma.com
Cookie: nlbi_2063869=iSvYInbUsEhpVFlqlOn80gAAAADejPaUbAjNFA4CfwbN5lrv; visid_incap_2063869=cc5B4e7+S0m4zJP2yQZpsSvhsGYAAAAAQUIPAAAAAADve1E8U1oXCtvdMx3KYtYc; incap_ses_633_2063869=00+TD0+bCDo8moAIRt7ICCzhsGYAAAAAcjtysQMUIRnoTX3NLplBFw==; gig_bootstrap_4_CgW8FMardcX-NyY8M3p6Wg=identity_ver4; gig_canary=false; gig_canary_ver=16174-3-28714470; smvr=eyJ2aXNpdHMiOjEsInZpZXdzIjoxLCJ0cyI6MTcyMjg2ODAyMTg4MCwiaXNOZXdTZXNzaW9uIjp0cnVlfQ==; smuuid=19122efba79-1a5804f53b0b-a3598f94-623ac5f5-981a1308-a59fdfcd1f67; _smvs=OTHER; gig_bootstrap_3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5=identity_ver4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 1537
date: Mon, 05 Aug 2024 14:26:47 GMT
last-modified: Mon, 25 Sep 2023 15:26:49 GMT
etag: "d30a5502be15c973d72518cb81794157"
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: jSRgu3i-2IFPqQXiSIbxxd3TojqEExT-XqAmmu1dzZs1gZB3PZ0Nhw==
age: 18
X-Firefox-Spdy: h2
GET account.asroma.com/img/amazon@2x.png
200 OK 2.5 kB URL GET HTTP/2 account.asroma.com/img/amazon@2x.png
IP
Requested by https://account.asroma.com/?gig_ssoToken=eu1_tk1.RDYODGH_CySD7oR-wVK77RP2dM7qGZjdiBtIejn_cF0&gig_source=asroma.com
Certificate IssuerGoDaddy.com, Inc.
Subjectaccount.asroma.com
FingerprintF5:AA:BE:E1:B8:54:11:A9:3C:52:BC:61:B6:A7:AA:64:EE:6E:8F:8C
ValiditySun, 25 Feb 2024 08:15:27 GMT - Mon, 24 Feb 2025 10:54:20 GMT
File type PNG image data, 268 x 80, 8-bit/color RGBA, non-interlaced
Hash 8195d8bdd1ddee6660b5cd6c7b7cbfb2
8e7be4ce383bed88a6528df0b6ede5520f99dcbc
99348780cddac425bae8fbe35a56e55f49ebc84b29e74d7b017a90e65f66a9da
GET /img/amazon@2x.png HTTP/1.1
Host: account.asroma.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://account.asroma.com/?gig_ssoToken=eu1_tk1.RDYODGH_CySD7oR-wVK77RP2dM7qGZjdiBtIejn_cF0&gig_source=asroma.com
Cookie: nlbi_2063869=iSvYInbUsEhpVFlqlOn80gAAAADejPaUbAjNFA4CfwbN5lrv; visid_incap_2063869=cc5B4e7+S0m4zJP2yQZpsSvhsGYAAAAAQUIPAAAAAADve1E8U1oXCtvdMx3KYtYc; incap_ses_633_2063869=00+TD0+bCDo8moAIRt7ICCzhsGYAAAAAcjtysQMUIRnoTX3NLplBFw==; gig_bootstrap_4_CgW8FMardcX-NyY8M3p6Wg=identity_ver4; gig_canary=false; gig_canary_ver=16174-3-28714470; smvr=eyJ2aXNpdHMiOjEsInZpZXdzIjoxLCJ0cyI6MTcyMjg2ODAyMTg4MCwiaXNOZXdTZXNzaW9uIjp0cnVlfQ==; smuuid=19122efba79-1a5804f53b0b-a3598f94-623ac5f5-981a1308-a59fdfcd1f67; _smvs=OTHER; gig_bootstrap_3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5=identity_ver4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 2535
date: Mon, 05 Aug 2024 14:26:47 GMT
last-modified: Mon, 25 Sep 2023 15:26:47 GMT
etag: "8195d8bdd1ddee6660b5cd6c7b7cbfb2"
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 3_ezz6PrarZ20vOZdNvyi8daA9YwqsvCGS1GCqwjv4b0yNmeJV0kmg==
age: 18
X-Firefox-Spdy: h2
GET identity.asroma.com/gs/sso.htm?APIKey=3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5&ssoSegment=&version=latest&build=16174
200 OK 99 kB URL GET HTTP/2 identity.asroma.com/gs/sso.htm?APIKey=3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5&ssoSegment=&version=latest&build=16174
IP
Requested by https://account.asroma.com/?gig_ssoToken=eu1_tk1.RDYODGH_CySD7oR-wVK77RP2dM7qGZjdiBtIejn_cF0&gig_source=asroma.com
Certificate IssuerAmazon
Subjectidentity.asroma.com
Fingerprint7A:76:DF:A0:1D:77:22:B0:3B:F1:0B:5F:E1:72:43:DF:66:42:03:E8
ValiditySun, 26 Nov 2023 00:00:00 GMT - Tue, 24 Dec 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /gs/sso.htm?APIKey=3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5&ssoSegment=&version=latest&build=16174 HTTP/1.1
Host: identity.asroma.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://account.asroma.com/
Cookie: nlbi_2063869=iSvYInbUsEhpVFlqlOn80gAAAADejPaUbAjNFA4CfwbN5lrv; visid_incap_2063869=cc5B4e7+S0m4zJP2yQZpsSvhsGYAAAAAQUIPAAAAAADve1E8U1oXCtvdMx3KYtYc; incap_ses_633_2063869=00+TD0+bCDo8moAIRt7ICCzhsGYAAAAAcjtysQMUIRnoTX3NLplBFw==; gmid=gmid.ver4.AtLtbKsfSQ.Fg8k3zJwci2J6_deVcYyzyNKfNsOK6gSIgUkuVGZfXF7Aspdn7qhsDTQpxwNpbIq.dPiq38ozEvcC3Pbzs5BeDW_BF3FdYbcDyRl_PkDT8-ByLjlHrwyynERTTpvkwwce4l76mciLDQUoUGGeKXtNUg.sc3; ucid=ZkmVv_WPsKvHFzdnqte4Ow; hasGmid=ver4; gig_bootstrap_4_CgW8FMardcX-NyY8M3p6Wg=identity_ver4; gig_canary_3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5=false; gig_canary_ver_3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5=16174-3-28714470; apiDomain_3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5=identity.asroma.com; gig_bootstrap_3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5=identity_ver4
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html; charset=utf-8
content-length: 33407
access-control-allow-origin: *
cache-control: public, s-maxage=3600, max-age=900
content-encoding: gzip
edge-cache-tag: siteid_759736734723,ver_latest
strict-transport-security: max-age=63072000; includeSubDomains; preload
p3p: CP="IDC COR PSA DEV ADM OUR IND ONL"
x-error-code: 0
x-soa: true, Gator
x-server: eu1a-nomad-t22
x-callid: ed9434121970b628c9f8aebddcc591ac
date: Mon, 05 Aug 2024 13:36:45 GMT
accept-ranges: bytes
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 0Pcp_EBFFUYwhFGcE8UylevH1FIWiNwWa3uEgTqieDd3Imf_SArHvg==
age: 3018
X-Firefox-Spdy: h2
GET identity.asroma.com/gs/sso.htm?APIKey=3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5&ssoSegment=&version=latest&build=16174
200 OK 99 kB URL GET HTTP/2 identity.asroma.com/gs/sso.htm?APIKey=3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5&ssoSegment=&version=latest&build=16174
IP
Requested by https://account.asroma.com/?gig_ssoToken=eu1_tk1.RDYODGH_CySD7oR-wVK77RP2dM7qGZjdiBtIejn_cF0&gig_source=asroma.com
Certificate IssuerAmazon
Subjectidentity.asroma.com
Fingerprint7A:76:DF:A0:1D:77:22:B0:3B:F1:0B:5F:E1:72:43:DF:66:42:03:E8
ValiditySun, 26 Nov 2023 00:00:00 GMT - Tue, 24 Dec 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /gs/sso.htm?APIKey=3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5&ssoSegment=&version=latest&build=16174 HTTP/1.1
Host: identity.asroma.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://account.asroma.com/
Cookie: nlbi_2063869=iSvYInbUsEhpVFlqlOn80gAAAADejPaUbAjNFA4CfwbN5lrv; visid_incap_2063869=cc5B4e7+S0m4zJP2yQZpsSvhsGYAAAAAQUIPAAAAAADve1E8U1oXCtvdMx3KYtYc; incap_ses_633_2063869=00+TD0+bCDo8moAIRt7ICCzhsGYAAAAAcjtysQMUIRnoTX3NLplBFw==; gmid=gmid.ver4.AtLtbKsfSQ.Fg8k3zJwci2J6_deVcYyzyNKfNsOK6gSIgUkuVGZfXF7Aspdn7qhsDTQpxwNpbIq.dPiq38ozEvcC3Pbzs5BeDW_BF3FdYbcDyRl_PkDT8-ByLjlHrwyynERTTpvkwwce4l76mciLDQUoUGGeKXtNUg.sc3; ucid=ZkmVv_WPsKvHFzdnqte4Ow; hasGmid=ver4; gig_bootstrap_4_CgW8FMardcX-NyY8M3p6Wg=identity_ver4; gig_canary_3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5=false; gig_canary_ver_3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5=16174-3-28714470; apiDomain_3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5=identity.asroma.com; gig_bootstrap_3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5=identity_ver4
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html; charset=utf-8
content-length: 33407
access-control-allow-origin: *
cache-control: public, s-maxage=3600, max-age=900
content-encoding: gzip
edge-cache-tag: siteid_759736734723,ver_latest
strict-transport-security: max-age=63072000; includeSubDomains; preload
p3p: CP="IDC COR PSA DEV ADM OUR IND ONL"
x-error-code: 0
x-soa: true, Gator
x-server: eu1a-nomad-t22
x-callid: ed9434121970b628c9f8aebddcc591ac
date: Mon, 05 Aug 2024 13:36:45 GMT
accept-ranges: bytes
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: LmqDNeAEFM_cCnRc3DTnqInpalwh_Yl0FhSoA1r4CYm8S1TgwXFJEQ==
age: 3018
X-Firefox-Spdy: h2
GET identity.asroma.com/gs/sso.htm?APIKey=3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5&ssoSegment=&version=latest&build=16174
200 OK 99 kB URL GET HTTP/2 identity.asroma.com/gs/sso.htm?APIKey=3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5&ssoSegment=&version=latest&build=16174
IP
Requested by https://account.asroma.com/?gig_ssoToken=eu1_tk1.RDYODGH_CySD7oR-wVK77RP2dM7qGZjdiBtIejn_cF0&gig_source=asroma.com
Certificate IssuerAmazon
Subjectidentity.asroma.com
Fingerprint7A:76:DF:A0:1D:77:22:B0:3B:F1:0B:5F:E1:72:43:DF:66:42:03:E8
ValiditySun, 26 Nov 2023 00:00:00 GMT - Tue, 24 Dec 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /gs/sso.htm?APIKey=3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5&ssoSegment=&version=latest&build=16174 HTTP/1.1
Host: identity.asroma.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://account.asroma.com/
Cookie: nlbi_2063869=iSvYInbUsEhpVFlqlOn80gAAAADejPaUbAjNFA4CfwbN5lrv; visid_incap_2063869=cc5B4e7+S0m4zJP2yQZpsSvhsGYAAAAAQUIPAAAAAADve1E8U1oXCtvdMx3KYtYc; incap_ses_633_2063869=00+TD0+bCDo8moAIRt7ICCzhsGYAAAAAcjtysQMUIRnoTX3NLplBFw==; gmid=gmid.ver4.AtLtbKsfSQ.Fg8k3zJwci2J6_deVcYyzyNKfNsOK6gSIgUkuVGZfXF7Aspdn7qhsDTQpxwNpbIq.dPiq38ozEvcC3Pbzs5BeDW_BF3FdYbcDyRl_PkDT8-ByLjlHrwyynERTTpvkwwce4l76mciLDQUoUGGeKXtNUg.sc3; ucid=ZkmVv_WPsKvHFzdnqte4Ow; hasGmid=ver4; gig_bootstrap_4_CgW8FMardcX-NyY8M3p6Wg=identity_ver4; gig_canary_3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5=false; gig_canary_ver_3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5=16174-3-28714470; apiDomain_3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5=identity.asroma.com; gig_bootstrap_3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5=identity_ver4
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html; charset=utf-8
content-length: 33407
access-control-allow-origin: *
cache-control: public, s-maxage=3600, max-age=900
content-encoding: gzip
edge-cache-tag: siteid_759736734723,ver_latest
strict-transport-security: max-age=63072000; includeSubDomains; preload
p3p: CP="IDC COR PSA DEV ADM OUR IND ONL"
x-error-code: 0
x-soa: true, Gator
x-server: eu1a-nomad-t22
x-callid: ed9434121970b628c9f8aebddcc591ac
date: Mon, 05 Aug 2024 13:36:45 GMT
accept-ranges: bytes
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 4zVDdYUGx0YzhSeNFHWale0hLj5uY6Zlh_64cbvgL5BzzMGrSEkARg==
age: 3018
X-Firefox-Spdy: h2
GET account.asroma.com/icon.png
403 Forbidden 243 B URL GET HTTP/2 account.asroma.com/icon.png
IP
Requested by https://account.asroma.com/?gig_ssoToken=eu1_tk1.RDYODGH_CySD7oR-wVK77RP2dM7qGZjdiBtIejn_cF0&gig_source=asroma.com
Certificate IssuerGoDaddy.com, Inc.
Subjectaccount.asroma.com
FingerprintF5:AA:BE:E1:B8:54:11:A9:3C:52:BC:61:B6:A7:AA:64:EE:6E:8F:8C
ValiditySun, 25 Feb 2024 08:15:27 GMT - Mon, 24 Feb 2025 10:54:20 GMT
File type XML document, ASCII text, with no line terminators
Hash 37f01d15741a9d85e4db9ddd85892c47
a3835708960e59c81313bd73baf0a3504cf76252
3075385159edea2bbb41caa987c6e793a0d14eebade3d2d2ccfbc4f9b26b6038
GET /icon.png HTTP/1.1
Host: account.asroma.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://account.asroma.com/?gig_ssoToken=eu1_tk1.RDYODGH_CySD7oR-wVK77RP2dM7qGZjdiBtIejn_cF0&gig_source=asroma.com
Cookie: nlbi_2063869=iSvYInbUsEhpVFlqlOn80gAAAADejPaUbAjNFA4CfwbN5lrv; visid_incap_2063869=cc5B4e7+S0m4zJP2yQZpsSvhsGYAAAAAQUIPAAAAAADve1E8U1oXCtvdMx3KYtYc; incap_ses_633_2063869=00+TD0+bCDo8moAIRt7ICCzhsGYAAAAAcjtysQMUIRnoTX3NLplBFw==; gig_bootstrap_4_CgW8FMardcX-NyY8M3p6Wg=identity_ver4; gig_canary=false; gig_canary_ver=16174-3-28714470
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 403 Forbidden
content-type: application/xml
server: AmazonS3
date: Mon, 05 Aug 2024 14:27:00 GMT
x-cache: Error from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: A5kW2dtS59g3And_8eVz8rtj7C50niJ5Psb7OmTm92lI3BvXPqoE1Q==
X-Firefox-Spdy: h2
GET identity.asroma.com/gs/webSdk/Api.aspx?apiKey=3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5&version=latest&build=16174
200 OK 130 kB URL GET HTTP/2 identity.asroma.com/gs/webSdk/Api.aspx?apiKey=3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5&version=latest&build=16174
IP
Requested by https://account.asroma.com/?gig_ssoToken=eu1_tk1.RDYODGH_CySD7oR-wVK77RP2dM7qGZjdiBtIejn_cF0&gig_source=asroma.com
Certificate IssuerAmazon
Subjectidentity.asroma.com
Fingerprint7A:76:DF:A0:1D:77:22:B0:3B:F1:0B:5F:E1:72:43:DF:66:42:03:E8
ValiditySun, 26 Nov 2023 00:00:00 GMT - Tue, 24 Dec 2024 23:59:59 GMT
Size 130 kB (130087 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /gs/webSdk/Api.aspx?apiKey=3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5&version=latest&build=16174 HTTP/1.1
Host: identity.asroma.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://account.asroma.com/
Cookie: nlbi_2063869=iSvYInbUsEhpVFlqlOn80gAAAADejPaUbAjNFA4CfwbN5lrv; visid_incap_2063869=cc5B4e7+S0m4zJP2yQZpsSvhsGYAAAAAQUIPAAAAAADve1E8U1oXCtvdMx3KYtYc; incap_ses_633_2063869=00+TD0+bCDo8moAIRt7ICCzhsGYAAAAAcjtysQMUIRnoTX3NLplBFw==; apiDomain_3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5=identity.asroma.com; gmid=gmid.ver4.AtLtbKsfSQ.Fg8k3zJwci2J6_deVcYyzyNKfNsOK6gSIgUkuVGZfXF7Aspdn7qhsDTQpxwNpbIq.dPiq38ozEvcC3Pbzs5BeDW_BF3FdYbcDyRl_PkDT8-ByLjlHrwyynERTTpvkwwce4l76mciLDQUoUGGeKXtNUg.sc3; ucid=ZkmVv_WPsKvHFzdnqte4Ow; hasGmid=ver4; gig_bootstrap_4_CgW8FMardcX-NyY8M3p6Wg=identity_ver4; gig_canary_3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5=false; gig_canary_ver_3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5=16174-3-28714455
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html; charset=utf-8
content-length: 45004
access-control-allow-origin: *
cache-control: public, s-maxage=3600, max-age=900
content-encoding: gzip
edge-cache-tag: siteid_759736734723,ver_latest
strict-transport-security: max-age=63072000; includeSubDomains; preload
p3p: CP="IDC COR PSA DEV ADM OUR IND ONL"
x-error-code: 0
x-soa: true, Gator
x-server: eu1a-nomad-t3
x-callid: 2fad054272b4aa664ba9237db4a35d14
date: Mon, 05 Aug 2024 14:05:18 GMT
accept-ranges: bytes
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: -ijm0QVVUkJ3pm1A4FxWtsdSpUbgxH0idFqJOtPvatLLn5mJUryXJg==
age: 1304
X-Firefox-Spdy: h2
GET identity.asroma.com/gs/sso.htm?APIKey=3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5&ssoSegment=&version=latest&build=16174
200 OK 99 kB URL GET HTTP/2 identity.asroma.com/gs/sso.htm?APIKey=3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5&ssoSegment=&version=latest&build=16174
IP
Requested by https://account.asroma.com/?gig_ssoToken=eu1_tk1.RDYODGH_CySD7oR-wVK77RP2dM7qGZjdiBtIejn_cF0&gig_source=asroma.com
Certificate IssuerAmazon
Subjectidentity.asroma.com
Fingerprint7A:76:DF:A0:1D:77:22:B0:3B:F1:0B:5F:E1:72:43:DF:66:42:03:E8
ValiditySun, 26 Nov 2023 00:00:00 GMT - Tue, 24 Dec 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /gs/sso.htm?APIKey=3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5&ssoSegment=&version=latest&build=16174 HTTP/1.1
Host: identity.asroma.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://account.asroma.com/
Cookie: nlbi_2063869=iSvYInbUsEhpVFlqlOn80gAAAADejPaUbAjNFA4CfwbN5lrv; visid_incap_2063869=cc5B4e7+S0m4zJP2yQZpsSvhsGYAAAAAQUIPAAAAAADve1E8U1oXCtvdMx3KYtYc; incap_ses_633_2063869=00+TD0+bCDo8moAIRt7ICCzhsGYAAAAAcjtysQMUIRnoTX3NLplBFw==; gmid=gmid.ver4.AtLtbKsfSQ.Fg8k3zJwci2J6_deVcYyzyNKfNsOK6gSIgUkuVGZfXF7Aspdn7qhsDTQpxwNpbIq.dPiq38ozEvcC3Pbzs5BeDW_BF3FdYbcDyRl_PkDT8-ByLjlHrwyynERTTpvkwwce4l76mciLDQUoUGGeKXtNUg.sc3; ucid=ZkmVv_WPsKvHFzdnqte4Ow; hasGmid=ver4; gig_bootstrap_4_CgW8FMardcX-NyY8M3p6Wg=identity_ver4; gig_canary_3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5=false; gig_canary_ver_3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5=16174-3-28714455; apiDomain_3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5=identity.asroma.com; gig3pctest=true; gig_bootstrap_3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5=identity_ver4
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html; charset=utf-8
content-length: 33407
access-control-allow-origin: *
cache-control: public, s-maxage=3600, max-age=900
content-encoding: gzip
edge-cache-tag: siteid_759736734723,ver_latest
strict-transport-security: max-age=63072000; includeSubDomains; preload
p3p: CP="IDC COR PSA DEV ADM OUR IND ONL"
x-error-code: 0
x-soa: true, Gator
x-server: eu1a-nomad-t22
x-callid: ed9434121970b628c9f8aebddcc591ac
date: Mon, 05 Aug 2024 13:36:45 GMT
accept-ranges: bytes
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: z5gFofxM3EcGvl2KTK2O4lJPZOfP8pzmGGo3skDPO388H-WfYNoJHQ==
age: 3017
X-Firefox-Spdy: h2
GET stackpath.bootstrapcdn.com/bootstrap/4.3.1/css/bootstrap.min.css
200 OK 156 kB URL GET HTTP/2 stackpath.bootstrapcdn.com/bootstrap/4.3.1/css/bootstrap.min.css
IP
Requested by https://account.asroma.com/?gig_ssoToken=eu1_tk1.RDYODGH_CySD7oR-wVK77RP2dM7qGZjdiBtIejn_cF0&gig_source=asroma.com
Certificate IssuerGoogle Trust Services
Subjectbootstrapcdn.com
FingerprintBE:14:2A:D4:32:CD:FF:FE:ED:79:48:4F:5C:7B:C4:52:09:C8:58:96
ValidityTue, 23 Jul 2024 01:50:30 GMT - Mon, 21 Oct 2024 01:50:29 GMT
File type ASCII text, with very long lines (65324)
Size 156 kB (155758 bytes)
Hash a15c2ac3234aa8f6064ef9c1f7383c37
6e10354828454898fda80f55f3decb347fd9ed21
60b19e5da6a9234ff9220668a5ec1125c157a268513256188ee80f2d2c8d8d36
GET /bootstrap/4.3.1/css/bootstrap.min.css HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://account.asroma.com
DNT: 1
Connection: keep-alive
Referer: https://account.asroma.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 05 Aug 2024 14:27:00 GMT
content-type: text/css; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: W/"a15c2ac3234aa8f6064ef9c1f7383c37"
last-modified: Mon, 25 Jan 2021 22:04:08 GMT
cdn-cachedat: 03/18/2024 12:46:56
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1055
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: b0e2bb3d6c9f4cde2f98c600e0a6c019
cdn-cache: HIT
cf-cache-status: HIT
age: 2020251
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8ae7772b2e6456aa-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET identity.asroma.com/gs/sso.htm?APIKey=3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5&ssoSegment=&version=latest&build=16174
200 OK 99 kB URL GET HTTP/2 identity.asroma.com/gs/sso.htm?APIKey=3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5&ssoSegment=&version=latest&build=16174
IP
Requested by https://account.asroma.com/?gig_ssoToken=eu1_tk1.RDYODGH_CySD7oR-wVK77RP2dM7qGZjdiBtIejn_cF0&gig_source=asroma.com
Certificate IssuerAmazon
Subjectidentity.asroma.com
Fingerprint7A:76:DF:A0:1D:77:22:B0:3B:F1:0B:5F:E1:72:43:DF:66:42:03:E8
ValiditySun, 26 Nov 2023 00:00:00 GMT - Tue, 24 Dec 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /gs/sso.htm?APIKey=3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5&ssoSegment=&version=latest&build=16174 HTTP/1.1
Host: identity.asroma.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://account.asroma.com/
Cookie: nlbi_2063869=iSvYInbUsEhpVFlqlOn80gAAAADejPaUbAjNFA4CfwbN5lrv; visid_incap_2063869=cc5B4e7+S0m4zJP2yQZpsSvhsGYAAAAAQUIPAAAAAADve1E8U1oXCtvdMx3KYtYc; incap_ses_633_2063869=00+TD0+bCDo8moAIRt7ICCzhsGYAAAAAcjtysQMUIRnoTX3NLplBFw==; gmid=gmid.ver4.AtLtbKsfSQ.Fg8k3zJwci2J6_deVcYyzyNKfNsOK6gSIgUkuVGZfXF7Aspdn7qhsDTQpxwNpbIq.dPiq38ozEvcC3Pbzs5BeDW_BF3FdYbcDyRl_PkDT8-ByLjlHrwyynERTTpvkwwce4l76mciLDQUoUGGeKXtNUg.sc3; ucid=ZkmVv_WPsKvHFzdnqte4Ow; hasGmid=ver4; gig_bootstrap_4_CgW8FMardcX-NyY8M3p6Wg=identity_ver4; gig_canary_3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5=false; gig_canary_ver_3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5=16174-3-28714455; apiDomain_3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5=identity.asroma.com; gig3pctest=true; gig_bootstrap_3_gt294H9QAFy3KB3mMbUm6fhaIUoduC7ltfWeWRJlHuycDJjIgD_DjnCdjlziTe-5=identity_ver4
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html; charset=utf-8
content-length: 33407
access-control-allow-origin: *
cache-control: public, s-maxage=3600, max-age=900
content-encoding: gzip
edge-cache-tag: siteid_759736734723,ver_latest
strict-transport-security: max-age=63072000; includeSubDomains; preload
p3p: CP="IDC COR PSA DEV ADM OUR IND ONL"
x-error-code: 0
x-soa: true, Gator
x-server: eu1a-nomad-t22
x-callid: ed9434121970b628c9f8aebddcc591ac
date: Mon, 05 Aug 2024 13:36:45 GMT
accept-ranges: bytes
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: uC9kMHf_CmliK4Sy_s9YJpy8zMxmVTqoj8esgTpO3yLvlyqDadcw-Q==
age: 3017
X-Firefox-Spdy: h2
GET apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.pGGAptgAK4s.O/m=client/rt=j/sv=1/d=1/ed=1/am=AAAg/rs=AHpOoo-Cic-4VdRMZ7mFCYOA3wzpF7O-6g/cb=gapi.loaded_0?le=scs
200 OK 332 kB URL GET HTTP/3 apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.pGGAptgAK4s.O/m=client/rt=j/sv=1/d=1/ed=1/am=AAAg/rs=AHpOoo-Cic-4VdRMZ7mFCYOA3wzpF7O-6g/cb=gapi.loaded_0?le=scs
IP
Requested by https://account.asroma.com/?gig_ssoToken=eu1_tk1.RDYODGH_CySD7oR-wVK77RP2dM7qGZjdiBtIejn_cF0&gig_source=asroma.com
Certificate IssuerGoogle Trust Services
Subject*.google.com
FingerprintA9:52:08:E0:FC:37:B4:6B:5F:CF:C5:AB:C4:10:C7:D6:00:4D:DC:69
ValidityTue, 30 Jul 2024 12:32:53 GMT - Tue, 22 Oct 2024 12:32:52 GMT
File type JavaScript source, ASCII text, with very long lines (2141)
Size 332 kB (332357 bytes)
Hash eced6db395c8ef53a175b1702e30d015
78487075f4df4a76c2f38b775f9aaaddcf8e0d5c
3dfafdd876d82f0af3e9ca1a3603e69ec3814a81956426743f38f424af930f79
GET /_/scs/abc-static/_/js/k=gapi.lb.en.pGGAptgAK4s.O/m=client/rt=j/sv=1/d=1/ed=1/am=AAAg/rs=AHpOoo-Cic-4VdRMZ7mFCYOA3wzpF7O-6g/cb=gapi.loaded_0?le=scs HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://account.asroma.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="social-frontend-mpm-access"
report-to: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
content-length: 113460
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 05 Aug 2024 12:23:51 GMT
expires: Tue, 05 Aug 2025 12:23:51 GMT
cache-control: public, max-age=31536000
age: 7392
last-modified: Thu, 11 Jul 2024 18:55:26 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET biglietti.asroma.com/tickets/form/comuni?provincia=RA
0 B URL GET biglietti.asroma.com/tickets/form/comuni?provincia=RA
IP
Requested by https://biglietti.asroma.com/tickets/confirmation?paymentRef=66b0de88319f0d45e3e3bf72&lang=it
Certificate IssuerGoDaddy.com, Inc.
Subjectbiglietti.asroma.com
FingerprintC1:59:F5:D3:F4:C0:14:98:C3:1D:6F:8E:92:1D:E5:EC:4D:B3:72:5E
ValidityWed, 24 Jan 2024 10:42:18 GMT - Mon, 24 Feb 2025 10:42:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tickets/form/comuni?provincia=RA HTTP/1.1
Host: biglietti.asroma.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://biglietti.asroma.com/tickets/confirmation?paymentRef=66b0de88319f0d45e3e3bf72&lang=it
Cookie: JSESSIONID=MTZjMjlhM2ItZGMzZS00MTE0LThjMzgtYWUwNTVlM2FiNThh; nlbi_2063869=iSvYInbUsEhpVFlqlOn80gAAAADejPaUbAjNFA4CfwbN5lrv; visid_incap_2063869=cc5B4e7+S0m4zJP2yQZpsSvhsGYAAAAAQUIPAAAAAADve1E8U1oXCtvdMx3KYtYc; incap_ses_633_2063869=00+TD0+bCDo8moAIRt7ICCzhsGYAAAAAcjtysQMUIRnoTX3NLplBFw==; gig_canary=false; gig_canary_ver=16174-3-28714455; smvr=eyJ2aXNpdHMiOjEsInZpZXdzIjoxLCJ0cyI6MTcyMjg2ODAxODgzNCwiaXNOZXdTZXNzaW9uIjp0cnVlfQ==; smuuid=19122efae92-bd22ac7b5b31-e8a6a8d4-54e274de-36014177-64ad3b7ce0b2; _smvs=OTHER; gig_bootstrap_4_CgW8FMardcX-NyY8M3p6Wg=identity_ver4
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
GET account.asroma.com/img/this-is.png
200 OK 6.1 kB URL GET HTTP/2 account.asroma.com/img/this-is.png
IP
Requested by https://account.asroma.com/?gig_ssoToken=eu1_tk1.RDYODGH_CySD7oR-wVK77RP2dM7qGZjdiBtIejn_cF0&gig_source=asroma.com
Certificate IssuerGoDaddy.com, Inc.
Subjectaccount.asroma.com
FingerprintF5:AA:BE:E1:B8:54:11:A9:3C:52:BC:61:B6:A7:AA:64:EE:6E:8F:8C
ValiditySun, 25 Feb 2024 08:15:27 GMT - Mon, 24 Feb 2025 10:54:20 GMT
File type PNG image data, 344 x 78, 8-bit/color RGBA, non-interlaced
Hash 6454c6b206f039346e4bdbbe61d16cef
ec60c57f049ad018486bfb5abbe9790ff6f6b6f1
18f81b76d135f8e2f44e363649394456b8c3501be219c822baa3ac82805bc263
GET /img/this-is.png HTTP/1.1
Host: account.asroma.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://account.asroma.com/?gig_ssoToken=eu1_tk1.RDYODGH_CySD7oR-wVK77RP2dM7qGZjdiBtIejn_cF0&gig_source=asroma.com
Cookie: nlbi_2063869=iSvYInbUsEhpVFlqlOn80gAAAADejPaUbAjNFA4CfwbN5lrv; visid_incap_2063869=cc5B4e7+S0m4zJP2yQZpsSvhsGYAAAAAQUIPAAAAAADve1E8U1oXCtvdMx3KYtYc; incap_ses_633_2063869=00+TD0+bCDo8moAIRt7ICCzhsGYAAAAAcjtysQMUIRnoTX3NLplBFw==; gig_bootstrap_4_CgW8FMardcX-NyY8M3p6Wg=identity_ver4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
content-length: 6089
date: Mon, 05 Aug 2024 14:26:44 GMT
last-modified: Mon, 25 Sep 2023 15:27:13 GMT
etag: "6454c6b206f039346e4bdbbe61d16cef"
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 6g32OvHVhjZNY50wioxEDjYBgYbz4Og79b1VozNco7SJUG_PfhRu_A==
age: 17
X-Firefox-Spdy: h2
GET account.asroma.com/css/font/ASRoma-Regular.woff2
200 OK 30 kB URL GET HTTP/2 account.asroma.com/css/font/ASRoma-Regular.woff2
IP
Requested by https://account.asroma.com/?gig_ssoToken=eu1_tk1.RDYODGH_CySD7oR-wVK77RP2dM7qGZjdiBtIejn_cF0&gig_source=asroma.com
Certificate IssuerGoDaddy.com, Inc.
Subjectaccount.asroma.com
FingerprintF5:AA:BE:E1:B8:54:11:A9:3C:52:BC:61:B6:A7:AA:64:EE:6E:8F:8C
ValiditySun, 25 Feb 2024 08:15:27 GMT - Mon, 24 Feb 2025 10:54:20 GMT
File type Web Open Font Format (Version 2), TrueType, length 29988, version 1.0
Hash dafcf94e82b4e885690b183d86847d08
920275939d43294f7f0aef8f15509e62309d27a5
8ff30c0c1dd230957322a29644c02dcde77151d4b42d1e84f4a3babd642a1e50
GET /css/font/ASRoma-Regular.woff2 HTTP/1.1
Host: account.asroma.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://account.asroma.com/css/main.css
Cookie: nlbi_2063869=iSvYInbUsEhpVFlqlOn80gAAAADejPaUbAjNFA4CfwbN5lrv; visid_incap_2063869=cc5B4e7+S0m4zJP2yQZpsSvhsGYAAAAAQUIPAAAAAADve1E8U1oXCtvdMx3KYtYc; incap_ses_633_2063869=00+TD0+bCDo8moAIRt7ICCzhsGYAAAAAcjtysQMUIRnoTX3NLplBFw==; gig_bootstrap_4_CgW8FMardcX-NyY8M3p6Wg=identity_ver4
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 29988
date: Mon, 05 Aug 2024 14:26:44 GMT
last-modified: Mon, 25 Sep 2023 15:27:29 GMT
etag: "dafcf94e82b4e885690b183d86847d08"
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: bN8155uJiwt3PVkpDKQ1deX0qzejDrH3rzDu7kjaw-lthTSd5WyaJg==
age: 18
X-Firefox-Spdy: h2
GET app3.salesmanago.pl/api/r.gif?uri=%2F%3Fgig_ssoToken%3Deu1_tk1.RDYODGH_CySD7oR-wVK77RP2dM7qGZjdiBtIejn_cF0%26gig_source%3Dasroma.com&location=account.asroma.com&uuid=19122efba79-1a5804f53b0b-a3598f94-623ac5f5-981a1308-a59fdfcd1f67&referrer=https%3A%2F%2Fbiglietti.asroma.com%2F&smid=4zxdzbcdqqq46j4b&time=2024-08-05T14%3A27%3A01Z×tamp=1722868021885&session=1&title=myASR&cp=1722868021885&ns=true&fp=97da93f8a25474007ab9eb1a503bdc68
0 B URL GET app3.salesmanago.pl/api/r.gif?uri=%2F%3Fgig_ssoToken%3Deu1_tk1.RDYODGH_CySD7oR-wVK77RP2dM7qGZjdiBtIejn_cF0%26gig_source%3Dasroma.com&location=account.asroma.com&uuid=19122efba79-1a5804f53b0b-a3598f94-623ac5f5-981a1308-a59fdfcd1f67&referrer=https%3A%2F%2Fbiglietti.asroma.com%2F&smid=4zxdzbcdqqq46j4b&time=2024-08-05T14%3A27%3A01Z×tamp=1722868021885&session=1&title=myASR&cp=1722868021885&ns=true&fp=97da93f8a25474007ab9eb1a503bdc68
IP
Requested by https://account.asroma.com/?gig_ssoToken=eu1_tk1.RDYODGH_CySD7oR-wVK77RP2dM7qGZjdiBtIejn_cF0&gig_source=asroma.com
Certificate IssuerDigiCert Inc
Subject*.salesmanago.pl
FingerprintDF:0D:88:9C:56:45:E8:7B:24:52:6E:1B:FA:A8:E8:72:20:98:10:E1
ValidityFri, 02 Aug 2024 00:00:00 GMT - Tue, 19 Aug 2025 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/r.gif?uri=%2F%3Fgig_ssoToken%3Deu1_tk1.RDYODGH_CySD7oR-wVK77RP2dM7qGZjdiBtIejn_cF0%26gig_source%3Dasroma.com&location=account.asroma.com&uuid=19122efba79-1a5804f53b0b-a3598f94-623ac5f5-981a1308-a59fdfcd1f67&referrer=https%3A%2F%2Fbiglietti.asroma.com%2F&smid=4zxdzbcdqqq46j4b&time=2024-08-05T14%3A27%3A01Z×tamp=1722868021885&session=1&title=myASR&cp=1722868021885&ns=true&fp=97da93f8a25474007ab9eb1a503bdc68 HTTP/1.1
Host: app3.salesmanago.pl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://account.asroma.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 05 Aug 2024 14:27:01 GMT
server: Apache
cache-control: max-age=0
expires: Mon, 05 Aug 2024 14:27:01 GMT
content-type: image/gif;charset=UTF-8
strict-transport-security: max-age=31540000
set-cookie: smg=73ae3307-e4e6-4c5b-a256-6879513156bc; Max-Age=315360000; Expires=Thu, 03 Aug 2034 14:27:01 GMT; Domain=salesmanago.pl; Path=/; Secure; HttpOnly
SERVERID=B; path=/; HttpOnly; Secure
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
GET app3.salesmanago.pl/static/chunk/sm_war.d0232e31f9c0e4584434.js
200 OK 5.5 kB URL GET HTTP/2 app3.salesmanago.pl/static/chunk/sm_war.d0232e31f9c0e4584434.js
IP
Requested by https://account.asroma.com/?gig_ssoToken=eu1_tk1.RDYODGH_CySD7oR-wVK77RP2dM7qGZjdiBtIejn_cF0&gig_source=asroma.com
Certificate IssuerDigiCert Inc
Subject*.salesmanago.pl
FingerprintDF:0D:88:9C:56:45:E8:7B:24:52:6E:1B:FA:A8:E8:72:20:98:10:E1
ValidityFri, 02 Aug 2024 00:00:00 GMT - Tue, 19 Aug 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (5535), with no line terminators
Hash a2efe2b73c4a00af485d16a1dabf158c
2e0b6968ec04d1221fc47e9fb9eff0bfdbfb721e
f53b6d504d1cc9c512295cabfe1c779db684f0c80baede2734e3c713f7a66040
GET /static/chunk/sm_war.d0232e31f9c0e4584434.js HTTP/1.1
Host: app3.salesmanago.pl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://account.asroma.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 05 Aug 2024 14:27:01 GMT
server: Apache
last-modified: Mon, 22 Jul 2024 04:35:01 GMT
etag: "1553-61dce917a338f-gzip"
accept-ranges: bytes
cache-control: max-age=216000, public
expires: Mon, 05 Aug 2024 15:27:01 GMT
vary: Accept-Encoding
content-encoding: gzip
content-length: 2113
content-type: application/javascript
strict-transport-security: max-age=31540000
set-cookie: SERVERID=A; path=/; HttpOnly; Secure
X-Firefox-Spdy: h2
GET war.salesmanago.com/war/war.json?s=54zxdzbcdqqq46j4b&u=19122efba79-1a5804f53b0b-a3598f94-623ac5f5-981a1308-a59fdfcd1f67&d=account.asroma.com%2F
200 OK 45 B URL GET HTTP/2 war.salesmanago.com/war/war.json?s=54zxdzbcdqqq46j4b&u=19122efba79-1a5804f53b0b-a3598f94-623ac5f5-981a1308-a59fdfcd1f67&d=account.asroma.com%2F
IP
Requested by https://account.asroma.com/?gig_ssoToken=eu1_tk1.RDYODGH_CySD7oR-wVK77RP2dM7qGZjdiBtIejn_cF0&gig_source=asroma.com
Certificate IssuerDigiCert Inc
Subject*.salesmanago.com
Fingerprint4A:B8:01:2C:A4:F0:B9:E6:7B:38:E6:6F:48:93:69:B8:AB:FD:D8:CB
ValidityFri, 15 Sep 2023 00:00:00 GMT - Wed, 18 Sep 2024 23:59:59 GMT
File type troff or preprocessor input, ASCII text, with no line terminators
Hash ee1f422c8384d4974e3c29b3243b7c6f
81a21c3c70742e53657223c4cad6b2408197a7e1
e28dd90defbcf0121b2abdfa3f406403072debf226bf6041f07ab866624a7044
GET /war/war.json?s=54zxdzbcdqqq46j4b&u=19122efba79-1a5804f53b0b-a3598f94-623ac5f5-981a1308-a59fdfcd1f67&d=account.asroma.com%2F HTTP/1.1
Host: war.salesmanago.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://account.asroma.com
DNT: 1
Connection: keep-alive
Referer: https://account.asroma.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers,Accept-Encoding
access-control-allow-origin: *
content-type: application/json;charset=UTF-8
date: Mon, 05 Aug 2024 14:27:02 GMT
strict-transport-security: max-age=31540000
set-cookie: SERVERID=A; path=/
content-encoding: gzip
X-Firefox-Spdy: h2
5.9.85.57
142.250.74.106
104.17.63.214
91.227.202.129
23.44.45.66
23.33.119.57
213.218.53.1
0.0.0.0