r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 150792cfc458af013998f4ef6bdf5f74
d5179b2dcb11d06f82606bf6eb6648319998d63e
72937c756d3feeae6d04a6f445398b0436bdf559f8c7437e3a3233263943900e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "72937C756D3FEEAE6D04A6F445398B0436BDF559F8C7437E3A3233263943900E"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8205
Expires: Mon, 28 Nov 2022 19:05:06 GMT
Date: Mon, 28 Nov 2022 16:48:21 GMT
Connection: keep-alive
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 9408cc0694fcbea57966c3a3ba906092
fddcee1fdcf3209298e41a4b1b5560357fa165f0
6ef7120d9463f56e3ddfadd5766d02da8523f34061b13bdba54bf9ab72a1e979
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3894
Cache-Control: max-age=154074
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 16:48:21 GMT
Etag: "63848df9-1d7"
Expires: Wed, 30 Nov 2022 11:36:15 GMT
Last-Modified: Mon, 28 Nov 2022 10:31:21 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 471
firefox.settings.services.mozilla.com/v1/
34.102.187.140200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash d130218d0e2841f39c99610fe1a2ab90
29fbe1e177ee55c7a61ae0a206afff271cf5f945
6b6d74dccf10c2bc98a91c3388280d7ba1d9596bf8cadd7db0e2f63720b3d152
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Alert, Content-Type, Retry-After, Content-Length
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Mon, 28 Nov 2022 16:17:48 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 1833
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 71f9c681a82440fd55e76c780a20e55d
3147768cfbcdd06e0c6e69684292e68e99917a80
5ea71ce6dd9e927f9bb3f97f59cc1ac7dc25a949024815965b29bc5835614786
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5EA71CE6DD9E927F9BB3F97F59CC1AC7DC25A949024815965B29BC5835614786"
Last-Modified: Sat, 26 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10336
Expires: Mon, 28 Nov 2022 19:40:37 GMT
Date: Mon, 28 Nov 2022 16:48:21 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: w+93YNLgddg1s/nzIXjr64d6jJQc95JgxOMzBfkYtp/R2VxGMWYzLHje9KSfbDv6MiWT3JqDzKU=
x-amz-request-id: HSAR3Y9KCYXK8G2Q
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 28 Nov 2022 16:42:08 GMT
age: 373
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 16:48:21 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
www.ilportoappartamenti.com/info-offerte
89.46.108.76301 Moved Permanently 0 B URL HTTP/1.1 www.ilportoappartamenti.com/info-offerte
IP 89.46.108.76:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Malware
GET /info-offerte HTTP/1.1
Host: www.ilportoappartamenti.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: aruba-proxy
Date: Mon, 28 Nov 2022 16:48:21 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Pingback: http://www.ilportoappartamenti.com/xmlrpc.php
Location: http://www.ilportoappartamenti.com/info-offerte/
X-ServerName: ipvsproxy166.ad.aruba.it
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
34.102.187.140200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Pragma, Alert, Content-Type, ETag, Retry-After, Last-Modified, Content-Length, Cache-Control, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Mon, 28 Nov 2022 16:08:55 GMT
cache-control: public,max-age=3600
age: 2366
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 7ab2ef968cb6a3078f4b9cb2dda813d4
e669116047ca058a2c1b2999ff0ea8682719162c
6ddecf0b21c44f3851da8efeb6ecdc6c8e9b83d7681153c31952b4ec8c23c940
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2675
Cache-Control: max-age=147788
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 16:48:22 GMT
Etag: "63847a2f-1d7"
Expires: Wed, 30 Nov 2022 09:51:30 GMT
Last-Modified: Mon, 28 Nov 2022 09:06:55 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
52.89.136.7101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 52.89.136.7:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: GjmbWYhIQqx6trw452z04A==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: XKorKwa0XLxMtWwd0dZEnnTh+i0=
www.ilportoappartamenti.com/info-offerte/
89.46.108.76200 OK 9.3 kB URL HTTP/1.1 www.ilportoappartamenti.com/info-offerte/
IP 89.46.108.76:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (981), with CRLF, LF line terminators
Hash 2634ae31acfb1e67de39cbb6d5ec693c
563bb031f1d4aa0f2e1265446df0bea28242f301
c6d45ccb46ff1bf28e8054271619fb66924b00133a8abee0761178e32e4b5509
Analyzer Verdict Alert fortinet Malware
GET /info-offerte/ HTTP/1.1
Host: www.ilportoappartamenti.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: aruba-proxy
Date: Mon, 28 Nov 2022 16:48:22 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Pingback: http://www.ilportoappartamenti.com/xmlrpc.php
Link: <http://www.ilportoappartamenti.com/?p=510>; rel=shortlink
X-ServerName: ipvsproxy166.ad.aruba.it
Content-Encoding: gzip
fonts.googleapis.com/css?family=Lato|Lato:300|Vollkorn:400italic
142.250.74.10200 OK 609 B URL HTTP/1.1 fonts.googleapis.com/css?family=Lato|Lato:300|Vollkorn:400italic
IP 142.250.74.10:0
Hash e83a96ae54b158932c3317ab56fdfcfe
980dadad927c38474def48a37ecd4e704406db35
2a65392bab323ce024f8bca305702a79deb86e6914e67e9d697af2c414235a1d
GET /css?family=Lato|Lato:300|Vollkorn:400italic HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ilportoappartamenti.com/
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Link: <http://fonts.gstatic.com>; rel=preconnect; crossorigin
Expires: Mon, 28 Nov 2022 16:48:22 GMT
Date: Mon, 28 Nov 2022 16:48:22 GMT
Cache-Control: private, max-age=86400
Cross-Origin-Opener-Policy: same-origin-allow-popups
Cross-Origin-Resource-Policy: cross-origin
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
www.ilportoappartamenti.com/wp-content/plugins/cookie-notice/css/front.min.css?ver=3.5.2
89.46.108.76200 OK 778 B URL HTTP/1.1 www.ilportoappartamenti.com/wp-content/plugins/cookie-notice/css/front.min.css?ver=3.5.2
IP 89.46.108.76:0
File type ASCII text, with very long lines (2177), with no line terminators
Hash 71173b8d061368e09b0617058e4c1f9b
82a3cab7b51c0608dcb4540c1cdf46549f1c9bac
df496c902e392eec98bf0ab7b309eb3f084db0046d2f01e5ecff73f8c6b285e0
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/cookie-notice/css/front.min.css?ver=3.5.2 HTTP/1.1
Host: www.ilportoappartamenti.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ilportoappartamenti.com/info-offerte/
HTTP/1.1 200 OK
Server: aruba-proxy
Date: Mon, 28 Nov 2022 16:48:22 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Fri, 17 Nov 2017 09:56:57 GMT
X-ServerName: ipvsproxy166.ad.aruba.it
Content-Encoding: gzip
maps.google.com/maps/api/js?sensor=false&v=3.5&ver=3.5.2
216.58.211.14200 OK 53 kB URL HTTP/1.1 maps.google.com/maps/api/js?sensor=false&v=3.5&ver=3.5.2
IP 216.58.211.14:0
File type ASCII text, with very long lines (2498)
Hash dc201a3c6e1bcf514e730fe1028da848
89c676f11e2a6b0970c3e08ce715881607957c12
d71c6624530e02af0823c2a65da6552b9692d6584e2138632cabc605707c08f1
GET /maps/api/js?sensor=false&v=3.5&ver=3.5.2 HTTP/1.1
Host: maps.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ilportoappartamenti.com/
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
Date: Mon, 28 Nov 2022 16:48:22 GMT
Expires: Mon, 28 Nov 2022 17:18:22 GMT
Cache-Control: public, max-age=1800
Vary: Accept-Language
Cross-Origin-Resource-Policy: cross-origin
Timing-Allow-Origin: *
Content-Encoding: gzip
Server: mafe
Content-Length: 53397
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Server-Timing: gfet4t7; dur=11
x.translateth.is/translate-this.js
151.101.65.195301 Moved Permanently 0 B URL HTTP/1.1 x.translateth.is/translate-this.js
IP 151.101.65.195:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /translate-this.js HTTP/1.1
Host: x.translateth.is
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ilportoappartamenti.com/
HTTP/1.1 301 Moved Permanently
Connection: close
Content-Length: 0
Server: Varnish
Retry-After: 0
Location: https://x.translateth.is/translate-this.js
Accept-Ranges: bytes
Date: Mon, 28 Nov 2022 16:48:22 GMT
X-Served-By: cache-bma1667-BMA
X-Cache: HIT
X-Cache-Hits: 0
X-Timer: S1669654103.644283,VS0,VE0
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
www.ilportoappartamenti.com/wp-content/plugins/fancybox-for-wordpress/fancybox/fancybox.css?ver=3.5.2
89.46.108.76200 OK 1.8 kB URL HTTP/1.1 www.ilportoappartamenti.com/wp-content/plugins/fancybox-for-wordpress/fancybox/fancybox.css?ver=3.5.2
IP 89.46.108.76:0
Hash 2dd710c2b5f2bb0d0f743d5127e81ec9
7a2cb7fc84d25389292d4a195851318d2b4b2670
1eba6a6bd738ecc38f0ed1d667374b98917a029e6c354f676567eabd68234b44
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/fancybox-for-wordpress/fancybox/fancybox.css?ver=3.5.2 HTTP/1.1
Host: www.ilportoappartamenti.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ilportoappartamenti.com/info-offerte/
HTTP/1.1 200 OK
Server: aruba-proxy
Date: Mon, 28 Nov 2022 16:48:22 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Mon, 15 Jul 2013 05:31:36 GMT
X-ServerName: ipvsproxy166.ad.aruba.it
Content-Encoding: gzip
www.ilportoappartamenti.com/wp-content/plugins/nextgen-gallery/css/nggallery.css?ver=1.0.0
89.46.108.76200 OK 1.8 kB URL HTTP/1.1 www.ilportoappartamenti.com/wp-content/plugins/nextgen-gallery/css/nggallery.css?ver=1.0.0
IP 89.46.108.76:0
Hash 72e064ea383473dbc4e4ffb0260ecce7
7cd7442d9fe2c68edac723749011fb1b4d1b0c87
324732fd0245587df0292536ba6bb30ba45a0050300135860d9b267a5cb8dbc3
GET /wp-content/plugins/nextgen-gallery/css/nggallery.css?ver=1.0.0 HTTP/1.1
Host: www.ilportoappartamenti.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ilportoappartamenti.com/info-offerte/
HTTP/1.1 200 OK
Server: aruba-proxy
Date: Mon, 28 Nov 2022 16:48:22 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Mon, 15 Jul 2013 05:32:27 GMT
X-ServerName: ipvsproxy166.ad.aruba.it
Content-Encoding: gzip
www.ilportoappartamenti.com/wp-content/themes/Lamoon/css/skeleton.css?ver=1.1
89.46.108.76200 OK 1.6 kB URL HTTP/1.1 www.ilportoappartamenti.com/wp-content/themes/Lamoon/css/skeleton.css?ver=1.1
IP 89.46.108.76:0
Hash 752a298014a1fb5cc7a6874b82220718
4c07ecda921b8b0a36aeca2eda44961a84f043dd
c742c6a4f6d0d068fbaacd913474ac73fe35957f8be2ce5ded0d4221e317565a
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/Lamoon/css/skeleton.css?ver=1.1 HTTP/1.1
Host: www.ilportoappartamenti.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ilportoappartamenti.com/info-offerte/
HTTP/1.1 200 OK
Server: aruba-proxy
Date: Mon, 28 Nov 2022 16:48:22 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Mon, 15 Jul 2013 05:34:11 GMT
X-ServerName: ipvsproxy166.ad.aruba.it
Content-Encoding: gzip
www.ilportoappartamenti.com/wp-includes/js/thickbox/thickbox.css?ver=20121105
89.46.108.76200 OK 1.2 kB URL HTTP/1.1 www.ilportoappartamenti.com/wp-includes/js/thickbox/thickbox.css?ver=20121105
IP 89.46.108.76:0
Hash dbcc1e9f9eb40f9e560f03845744b138
ff723f54a454177b1fa73514d38f7ffa47e4795e
066c9c8550e1b0f609c2041cd4b7c114ab22ad6c804a0d2d13b389fac1c96579
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/thickbox/thickbox.css?ver=20121105 HTTP/1.1
Host: www.ilportoappartamenti.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ilportoappartamenti.com/info-offerte/
HTTP/1.1 200 OK
Server: aruba-proxy
Date: Mon, 28 Nov 2022 16:48:22 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Mon, 15 Jul 2013 05:29:56 GMT
X-ServerName: ipvsproxy166.ad.aruba.it
Content-Encoding: gzip
www.ilportoappartamenti.com/wp-content/themes/Lamoon/css/flexslider.css?ver=1.1
89.46.108.76200 OK 1.4 kB URL HTTP/1.1 www.ilportoappartamenti.com/wp-content/themes/Lamoon/css/flexslider.css?ver=1.1
IP 89.46.108.76:0
File type ASCII text, with very long lines (366)
Hash 00747ad53f9928838d083cfa72e0aee5
5d505deb5bd6e0d3611683dae64af143fb96daf8
25e1d6916640256c55c6affc846c92257a8465303a6e5465e8f900ed231a8c95
GET /wp-content/themes/Lamoon/css/flexslider.css?ver=1.1 HTTP/1.1
Host: www.ilportoappartamenti.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ilportoappartamenti.com/info-offerte/
HTTP/1.1 200 OK
Server: aruba-proxy
Date: Mon, 28 Nov 2022 16:48:22 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Mon, 15 Jul 2013 05:34:08 GMT
X-ServerName: ipvsproxy166.ad.aruba.it
Content-Encoding: gzip
www.ilportoappartamenti.com/wp-content/themes/Lamoon/css/jquery.fancybox-1.3.4.css?ver=1.1
89.46.108.76200 OK 1.8 kB URL HTTP/1.1 www.ilportoappartamenti.com/wp-content/themes/Lamoon/css/jquery.fancybox-1.3.4.css?ver=1.1
IP 89.46.108.76:0
Hash ced83c9aa694884c651693f6a04c7acf
1ca2a1c71173ffcd828dfad854da4eddaf4e1a56
f2f2c32616539cf0ddc0a22f541504811a44d87de8289a08717811e02a0d7c70
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/Lamoon/css/jquery.fancybox-1.3.4.css?ver=1.1 HTTP/1.1
Host: www.ilportoappartamenti.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ilportoappartamenti.com/info-offerte/
HTTP/1.1 200 OK
Server: aruba-proxy
Date: Mon, 28 Nov 2022 16:48:22 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Mon, 15 Jul 2013 05:34:09 GMT
X-ServerName: ipvsproxy166.ad.aruba.it
Content-Encoding: gzip
www.ilportoappartamenti.com/wp-content/themes/Lamoon/css/smoothness/jquery-ui-1.8.22.custom.css?ver=1.1
89.46.108.76200 OK 4.1 kB URL HTTP/1.1 www.ilportoappartamenti.com/wp-content/themes/Lamoon/css/smoothness/jquery-ui-1.8.22.custom.css?ver=1.1
IP 89.46.108.76:0
File type ASCII text, with very long lines (1399)
Hash 2a6a0ee81e1b0f31b638021ab68728fb
5e30fd2cf30cafff7056f7f776de90d495ff51f8
05284265b77a499e563fffbfa8f9c260b2d69485592df0ed4120f37330054bc7
GET /wp-content/themes/Lamoon/css/smoothness/jquery-ui-1.8.22.custom.css?ver=1.1 HTTP/1.1
Host: www.ilportoappartamenti.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ilportoappartamenti.com/info-offerte/
HTTP/1.1 200 OK
Server: aruba-proxy
Date: Mon, 28 Nov 2022 16:48:22 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Mon, 15 Jul 2013 05:37:26 GMT
X-ServerName: ipvsproxy166.ad.aruba.it
Content-Encoding: gzip
www.ilportoappartamenti.com/wp-content/themes/Lamoon/css/validationEngine.jquery.css?ver=1.1
89.46.108.76200 OK 791 B URL HTTP/1.1 www.ilportoappartamenti.com/wp-content/themes/Lamoon/css/validationEngine.jquery.css?ver=1.1
IP 89.46.108.76:0
Hash 2d2c9bb086e19f83f0fe0995e7fbeb71
2b46c81584568be110df113557be58a859c2999e
4ef9bcba541345f1873b9d3f735d453882b413255982e7f40de98594a55e33e2
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/Lamoon/css/validationEngine.jquery.css?ver=1.1 HTTP/1.1
Host: www.ilportoappartamenti.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ilportoappartamenti.com/info-offerte/
HTTP/1.1 200 OK
Server: aruba-proxy
Date: Mon, 28 Nov 2022 16:48:22 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Mon, 15 Jul 2013 05:34:11 GMT
X-ServerName: ipvsproxy166.ad.aruba.it
Content-Encoding: gzip
www.ilportoappartamenti.com/wp-content/themes/Lamoon/css/ui.spinner.css?ver=1.1
89.46.108.76200 OK 139 B URL HTTP/1.1 www.ilportoappartamenti.com/wp-content/themes/Lamoon/css/ui.spinner.css?ver=1.1
IP 89.46.108.76:0
Hash c49afc06b6c043c50f81cafbd7f10c66
d9d77934ad456b88b4dcab5bc0035b8cfd9537ab
c2f3a047b6bfa18aa871e59d1a9ce502babe98c3b142582510d4954adcde5109
GET /wp-content/themes/Lamoon/css/ui.spinner.css?ver=1.1 HTTP/1.1
Host: www.ilportoappartamenti.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ilportoappartamenti.com/info-offerte/
HTTP/1.1 200 OK
Server: aruba-proxy
Date: Mon, 28 Nov 2022 16:48:22 GMT
Content-Type: text/css
Content-Length: 139
Connection: keep-alive
Last-Modified: Mon, 15 Jul 2013 05:34:11 GMT
Accept-Ranges: bytes
X-ServerName: ipvsproxy166.ad.aruba.it
x.translateth.is/translate-this.js
151.101.65.195200 OK 575 B URL HTTP/2 x.translateth.is/translate-this.js
IP 151.101.65.195:0
File type ASCII text, with very long lines (950), with no line terminators
Hash 61dac455f05a76bc2e45d9c2dd3570e0
ea41688b76d4164ba361c4bec3a40635980a8f7c
66bf6c5ab717b6bcddb1615de9fd1c5181902fd09ec3dab21995d0ec5ca24805
GET /translate-this.js HTTP/1.1
Host: x.translateth.is
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.ilportoappartamenti.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: gzip
content-type: text/javascript; charset=utf-8
etag: "66bf6c5ab717b6bcddb1615de9fd1c5181902fd09ec3dab21995d0ec5ca24805"
last-modified: Fri, 13 Apr 2018 20:36:56 GMT
strict-transport-security: max-age=31556926
accept-ranges: bytes
date: Mon, 28 Nov 2022 16:48:22 GMT
x-served-by: cache-bma1682-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669654103.706592,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 575
X-Firefox-Spdy: h2
www.ilportoappartamenti.com/wp-content/themes/Lamoon/css/font-awesome.min.css?ver=1.1
89.46.108.76200 OK 3.5 kB URL HTTP/1.1 www.ilportoappartamenti.com/wp-content/themes/Lamoon/css/font-awesome.min.css?ver=1.1
IP 89.46.108.76:0
File type ASCII text, with very long lines (14278)
Hash 2fdd461e550d1dc14c5689e8e586d2b6
b152af27813044b74cd5aae7713178ac71ce7633
eff7ad053ca2f238ea28218e75b405faa4fdf8561cbab9dad8bbc8c536e6460b
GET /wp-content/themes/Lamoon/css/font-awesome.min.css?ver=1.1 HTTP/1.1
Host: www.ilportoappartamenti.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ilportoappartamenti.com/info-offerte/
HTTP/1.1 200 OK
Server: aruba-proxy
Date: Mon, 28 Nov 2022 16:48:22 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Mon, 15 Jul 2013 05:34:09 GMT
X-ServerName: ipvsproxy166.ad.aruba.it
Content-Encoding: gzip
www.ilportoappartamenti.com/wp-content/themes/Lamoon/style.css?ver=1.4
89.46.108.76200 OK 11 kB URL HTTP/1.1 www.ilportoappartamenti.com/wp-content/themes/Lamoon/style.css?ver=1.4
IP 89.46.108.76:0
File type ASCII text, with very long lines (772)
Hash 15e54664b36ec57eea6ddd0f5f02b3a2
91178ac1b7b8d4e22fd802c31e7853251a378a38
3fc25ade49fe2992993707961178ef2ebcc7f0bb020f9f50cdef8bc86ef10c27
GET /wp-content/themes/Lamoon/style.css?ver=1.4 HTTP/1.1
Host: www.ilportoappartamenti.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ilportoappartamenti.com/info-offerte/
HTTP/1.1 200 OK
Server: aruba-proxy
Date: Mon, 28 Nov 2022 16:48:22 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Mon, 15 Jul 2013 05:28:40 GMT
X-ServerName: ipvsproxy166.ad.aruba.it
Content-Encoding: gzip
www.ilportoappartamenti.com/wp-content/themes/Lamoon/css/colors/blue.css?ver=1.1
89.46.108.76200 OK 336 B URL HTTP/1.1 www.ilportoappartamenti.com/wp-content/themes/Lamoon/css/colors/blue.css?ver=1.1
IP 89.46.108.76:0
Hash 88bb45b9793aa6f79f9abaac968269c5
1edbd27dd9bf7537340e98cbb8fd1e1eda4ce8e1
7a5269322ff32a50ed4ca7c5c6cbd997d97c3310023a6bfc6251b3805d673787
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/Lamoon/css/colors/blue.css?ver=1.1 HTTP/1.1
Host: www.ilportoappartamenti.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ilportoappartamenti.com/info-offerte/
HTTP/1.1 200 OK
Server: aruba-proxy
Date: Mon, 28 Nov 2022 16:48:22 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Mon, 15 Jul 2013 05:37:24 GMT
X-ServerName: ipvsproxy166.ad.aruba.it
Content-Encoding: gzip
www.ilportoappartamenti.com/wp-includes/js/comment-reply.min.js?ver=3.5.2
89.46.108.76200 OK 412 B URL HTTP/1.1 www.ilportoappartamenti.com/wp-includes/js/comment-reply.min.js?ver=3.5.2
IP 89.46.108.76:0
File type ASCII text, with very long lines (786), with no line terminators
Hash 87818ceb3510914586339269c23ece39
b8a843b89bc5f4b45b47b1f04a2cdcd5d8ced9d6
4e8eaf3cbd3c394a0200c47660f6d2f8bebee1fdd025024e5ef2590203d7c9ba
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/comment-reply.min.js?ver=3.5.2 HTTP/1.1
Host: www.ilportoappartamenti.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ilportoappartamenti.com/info-offerte/
HTTP/1.1 200 OK
Server: aruba-proxy
Date: Mon, 28 Nov 2022 16:48:22 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Mon, 15 Jul 2013 05:25:15 GMT
X-ServerName: ipvsproxy166.ad.aruba.it
Content-Encoding: gzip
www.ilportoappartamenti.com/wp-content/themes/Lamoon/includes/addons/LayerSlider/css/layerslider.css?ver=4.5.5
89.46.108.76200 OK 2.9 kB URL HTTP/1.1 www.ilportoappartamenti.com/wp-content/themes/Lamoon/includes/addons/LayerSlider/css/layerslider.css?ver=4.5.5
IP 89.46.108.76:0
Hash b9d7d71e261b3e60f7a7f65c7044265b
5fbb95390d87cbf3ca53ff5bc31bf26606116413
b67349e48ebdbbc807e2424e6dd0a58429a062c876848f8e611e31b91a9d4db5
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/Lamoon/includes/addons/LayerSlider/css/layerslider.css?ver=4.5.5 HTTP/1.1
Host: www.ilportoappartamenti.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ilportoappartamenti.com/info-offerte/
HTTP/1.1 200 OK
Server: aruba-proxy
Date: Mon, 28 Nov 2022 16:48:22 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Mon, 15 Jul 2013 05:40:18 GMT
X-ServerName: ipvsproxy166.ad.aruba.it
Content-Encoding: gzip
www.ilportoappartamenti.com/wp-content/themes/Lamoon/css/ui.totop.css?ver=1.1
89.46.108.76200 OK 341 B URL HTTP/1.1 www.ilportoappartamenti.com/wp-content/themes/Lamoon/css/ui.totop.css?ver=1.1
IP 89.46.108.76:0
Hash ac757998c0d4fd339a64a01c0ed2187a
c85b5958be8faad74a665cee1f7a9645c28c2ede
7acae1fe50451f429048c7bf4b59a35389e73bcf845a300695a8747c195e3511
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/Lamoon/css/ui.totop.css?ver=1.1 HTTP/1.1
Host: www.ilportoappartamenti.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ilportoappartamenti.com/info-offerte/
HTTP/1.1 200 OK
Server: aruba-proxy
Date: Mon, 28 Nov 2022 16:48:22 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Mon, 15 Jul 2013 05:34:11 GMT
X-ServerName: ipvsproxy166.ad.aruba.it
Content-Encoding: gzip
www.ilportoappartamenti.com/wp-content/plugins/cookie-notice/js/front.min.js?ver=1.2.40
89.46.108.76200 OK 707 B URL HTTP/1.1 www.ilportoappartamenti.com/wp-content/plugins/cookie-notice/js/front.min.js?ver=1.2.40
IP 89.46.108.76:0
File type ASCII text, with very long lines (1768), with no line terminators
Hash 2de727235ffe2905397eaa9ba4c2af4c
96da1b7ad1589b1f42e09e05b4b3eaf1c7668b47
9339fdb1c011033693fa478152fc975f0505f74b92a9db628290150fd04b559e
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/cookie-notice/js/front.min.js?ver=1.2.40 HTTP/1.1
Host: www.ilportoappartamenti.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ilportoappartamenti.com/info-offerte/
HTTP/1.1 200 OK
Server: aruba-proxy
Date: Mon, 28 Nov 2022 16:48:22 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Fri, 17 Nov 2017 09:56:57 GMT
X-ServerName: ipvsproxy166.ad.aruba.it
Content-Encoding: gzip
www.ilportoappartamenti.com/wp-content/plugins/nextgen-gallery/js/ngg.slideshow.min.js?ver=1.06
89.46.108.76200 OK 810 B URL HTTP/1.1 www.ilportoappartamenti.com/wp-content/plugins/nextgen-gallery/js/ngg.slideshow.min.js?ver=1.06
IP 89.46.108.76:0
File type ASCII text, with very long lines (1791), with no line terminators
Hash 3c2a054a76782064f29c243c2b292e32
ad9f23b96fe1f99c5f8b674f9278050c6cf8680f
e95d8ff902ac7dd6ef277975f1cfb373414b74d75a68330afa5f796f9ae90a3d
GET /wp-content/plugins/nextgen-gallery/js/ngg.slideshow.min.js?ver=1.06 HTTP/1.1
Host: www.ilportoappartamenti.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ilportoappartamenti.com/info-offerte/
HTTP/1.1 200 OK
Server: aruba-proxy
Date: Mon, 28 Nov 2022 16:48:22 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Mon, 15 Jul 2013 05:32:33 GMT
X-ServerName: ipvsproxy166.ad.aruba.it
Content-Encoding: gzip
www.ilportoappartamenti.com/wp-content/plugins/nextgen-gallery/js/jquery.cycle.all.min.js?ver=2.9995
89.46.108.76200 OK 7.5 kB URL HTTP/1.1 www.ilportoappartamenti.com/wp-content/plugins/nextgen-gallery/js/jquery.cycle.all.min.js?ver=2.9995
IP 89.46.108.76:0
File type ASCII text, with very long lines (26590), with no line terminators
Hash c193c6cf6f5ad5ba66cb0f00690f0cce
33c7efc180712aafd32250755f41bececb3c661d
55c5bfe3f7edcc65c8a68388d77741b3d8a4f50e1e10eff2e6e88fed96b9f1f7
GET /wp-content/plugins/nextgen-gallery/js/jquery.cycle.all.min.js?ver=2.9995 HTTP/1.1
Host: www.ilportoappartamenti.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ilportoappartamenti.com/info-offerte/
HTTP/1.1 200 OK
Server: aruba-proxy
Date: Mon, 28 Nov 2022 16:48:22 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Mon, 15 Jul 2013 05:32:33 GMT
X-ServerName: ipvsproxy166.ad.aruba.it
Content-Encoding: gzip
www.ilportoappartamenti.com/wp-content/themes/Lamoon/includes/addons/LayerSlider/js/jquery-easing-1.3.js?ver=1.3.0
89.46.108.76200 OK 2.0 kB URL HTTP/1.1 www.ilportoappartamenti.com/wp-content/themes/Lamoon/includes/addons/LayerSlider/js/jquery-easing-1.3.js?ver=1.3.0
IP 89.46.108.76:0
Hash 35b78b363ceee12bffcd6293fb98fc75
1190552bb4359743def337a0ff72249b65363ee3
484acefa10389d1cdbfe8d645d32c74c22c25d27d6c92a78df97c9733b1dc7a6
GET /wp-content/themes/Lamoon/includes/addons/LayerSlider/js/jquery-easing-1.3.js?ver=1.3.0 HTTP/1.1
Host: www.ilportoappartamenti.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ilportoappartamenti.com/info-offerte/
HTTP/1.1 200 OK
Server: aruba-proxy
Date: Mon, 28 Nov 2022 16:48:22 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Mon, 15 Jul 2013 05:40:22 GMT
X-ServerName: ipvsproxy166.ad.aruba.it
Content-Encoding: gzip
www.ilportoappartamenti.com/wp-includes/js/jquery/jquery.js?ver=1.8.3
89.46.108.76200 OK 34 kB URL HTTP/1.1 www.ilportoappartamenti.com/wp-includes/js/jquery/jquery.js?ver=1.8.3
IP 89.46.108.76:0
File type ASCII text, with very long lines (65483)
Hash d6d85bc11bc8b8db1a24162a31ed9177
c127c8cc90cb3b8e340d758a969cba773e1374cb
52ef7cb72995c54330659a12564b752f5336b349978785f090c825ad706cb837
GET /wp-includes/js/jquery/jquery.js?ver=1.8.3 HTTP/1.1
Host: www.ilportoappartamenti.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ilportoappartamenti.com/info-offerte/
HTTP/1.1 200 OK
Server: aruba-proxy
Date: Mon, 28 Nov 2022 16:48:22 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Mon, 15 Jul 2013 05:29:30 GMT
X-ServerName: ipvsproxy166.ad.aruba.it
Content-Encoding: gzip
www.ilportoappartamenti.com/wp-content/themes/Lamoon/includes/addons/LayerSlider/js/jquerytransit.js?ver=0.9.9
89.46.108.76200 OK 3.3 kB URL HTTP/1.1 www.ilportoappartamenti.com/wp-content/themes/Lamoon/includes/addons/LayerSlider/js/jquerytransit.js?ver=0.9.9
IP 89.46.108.76:0
File type ASCII text, with very long lines (6299)
Hash 51df9f86b4abcdc38ceb32f7b81e914a
45fdf855800b096c339cf9da981586cc6597a8f0
234086a21e4c083748ccae2c87a10c4e1bcc3ce86a571aa8f67bd6273cc38c0e
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/Lamoon/includes/addons/LayerSlider/js/jquerytransit.js?ver=0.9.9 HTTP/1.1
Host: www.ilportoappartamenti.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ilportoappartamenti.com/info-offerte/
HTTP/1.1 200 OK
Server: aruba-proxy
Date: Mon, 28 Nov 2022 16:48:22 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Mon, 15 Jul 2013 05:40:22 GMT
X-ServerName: ipvsproxy166.ad.aruba.it
Content-Encoding: gzip
www.ilportoappartamenti.com/wp-content/themes/Lamoon/includes/addons/LayerSlider/js/layerslider.kreaturamedia.jquery.js?ver=4.5.5
89.46.108.76200 OK 17 kB URL HTTP/1.1 www.ilportoappartamenti.com/wp-content/themes/Lamoon/includes/addons/LayerSlider/js/layerslider.kreaturamedia.jquery.js?ver=4.5.5
IP 89.46.108.76:0
File type Unicode text, UTF-8 text, with very long lines (47527)
Hash 4ad54c10827b370871de55dbb8fa5c8c
b918e2f605387ae5fdaf07aad8c7021f479d4653
9a0c5bae78f5e0d06a342bf15dfa501dbcba2a3d2ff439e3744056f9025270cd
GET /wp-content/themes/Lamoon/includes/addons/LayerSlider/js/layerslider.kreaturamedia.jquery.js?ver=4.5.5 HTTP/1.1
Host: www.ilportoappartamenti.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ilportoappartamenti.com/info-offerte/
HTTP/1.1 200 OK
Server: aruba-proxy
Date: Mon, 28 Nov 2022 16:48:22 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Mon, 15 Jul 2013 05:40:23 GMT
X-ServerName: ipvsproxy166.ad.aruba.it
Content-Encoding: gzip
www.ilportoappartamenti.com/wp-content/themes/Lamoon/css/base.css?ver=1.1
89.46.108.76200 OK 2.9 kB URL HTTP/1.1 www.ilportoappartamenti.com/wp-content/themes/Lamoon/css/base.css?ver=1.1
IP 89.46.108.76:0
File type ASCII text, with very long lines (493)
Hash 776f0422f828df7291d396f8d994a06e
0ef5a2f83594a5d7c253d02568a92f031bf757ce
5b95154101c43b9b0595a7eb87a8899b3e2f89ffdcfa355086cea9738d4b5561
GET /wp-content/themes/Lamoon/css/base.css?ver=1.1 HTTP/1.1
Host: www.ilportoappartamenti.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ilportoappartamenti.com/info-offerte/
HTTP/1.1 200 OK
Server: aruba-proxy
Date: Mon, 28 Nov 2022 16:48:22 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Mon, 15 Jul 2013 05:34:07 GMT
X-ServerName: ipvsproxy166.ad.aruba.it
Content-Encoding: gzip
www.ilportoappartamenti.com/wp-content/plugins/pricing-table/css/site/tipTip.css?ver=3.5.2
89.46.108.76200 OK 763 B URL HTTP/1.1 www.ilportoappartamenti.com/wp-content/plugins/pricing-table/css/site/tipTip.css?ver=3.5.2
IP 89.46.108.76:0
Hash 94241b6d82bad82669eb826441d50cb1
efa69a80db3c4f0dac95f504e7fbab2878496985
57b61558e645c75d159f8ae10acf0f5f2086cc5478441a834b9cfff872331ed9
GET /wp-content/plugins/pricing-table/css/site/tipTip.css?ver=3.5.2 HTTP/1.1
Host: www.ilportoappartamenti.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ilportoappartamenti.com/info-offerte/
HTTP/1.1 200 OK
Server: aruba-proxy
Date: Mon, 28 Nov 2022 16:48:22 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Mon, 15 Jul 2013 05:36:41 GMT
X-ServerName: ipvsproxy166.ad.aruba.it
Content-Encoding: gzip
www.ilportoappartamenti.com/wp-content/themes/Lamoon/includes/addons/LayerSlider/js/layerslider.transitions.js?ver=4.5.5
89.46.108.76200 OK 3.2 kB URL HTTP/1.1 www.ilportoappartamenti.com/wp-content/themes/Lamoon/includes/addons/LayerSlider/js/layerslider.transitions.js?ver=4.5.5
IP 89.46.108.76:0
File type ASCII text, with very long lines (20943)
Hash a4942186e9e8f3d7f3b5894e2040eed0
3e125b4b72b5ecb126ebe4ed0b6537d3b130b21b
4aa061b855db86faf1d1a95e044a775b3a243e4e0c47132a98330701bbfa07c0
GET /wp-content/themes/Lamoon/includes/addons/LayerSlider/js/layerslider.transitions.js?ver=4.5.5 HTTP/1.1
Host: www.ilportoappartamenti.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ilportoappartamenti.com/info-offerte/
HTTP/1.1 200 OK
Server: aruba-proxy
Date: Mon, 28 Nov 2022 16:48:22 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Mon, 15 Jul 2013 05:40:25 GMT
X-ServerName: ipvsproxy166.ad.aruba.it
Content-Encoding: gzip
www.ilportoappartamenti.com/wp-content/plugins/fancybox-for-wordpress/fancybox/jquery.fancybox.js?ver=1.3.4
89.46.108.76200 OK 5.6 kB URL HTTP/1.1 www.ilportoappartamenti.com/wp-content/plugins/fancybox-for-wordpress/fancybox/jquery.fancybox.js?ver=1.3.4
IP 89.46.108.76:0
File type ASCII text, with very long lines (752)
Hash 7aaa8aa837f30bbbf8d09f530405583d
dc2f1a5a4eb5ba6c64784e9c5f7cf6b8a3a4dc0e
c0f1c59f9787e56e9ebcf13d0f47ad1667b9536164b55c2c68042a16c2507f0c
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/fancybox-for-wordpress/fancybox/jquery.fancybox.js?ver=1.3.4 HTTP/1.1
Host: www.ilportoappartamenti.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ilportoappartamenti.com/info-offerte/
HTTP/1.1 200 OK
Server: aruba-proxy
Date: Mon, 28 Nov 2022 16:48:22 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Mon, 15 Jul 2013 05:31:40 GMT
X-ServerName: ipvsproxy166.ad.aruba.it
Content-Encoding: gzip
www.ilportoappartamenti.com/wp-includes/js/thickbox/thickbox.js?ver=3.1-20121105
89.46.108.76200 OK 3.8 kB URL HTTP/1.1 www.ilportoappartamenti.com/wp-includes/js/thickbox/thickbox.js?ver=3.1-20121105
IP 89.46.108.76:0
File type HTML document, ASCII text, with very long lines (524)
Hash e8737b9b301d4ee8dfcf6f83dc626a44
c26ddc1f44ee95035a7d33d56d0db50cdbdad45d
21e9800c29f3ba561074ec0b2ec674e73297f06dfac8b040b922a7017ea90e6a
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/thickbox/thickbox.js?ver=3.1-20121105 HTTP/1.1
Host: www.ilportoappartamenti.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ilportoappartamenti.com/info-offerte/
HTTP/1.1 200 OK
Server: aruba-proxy
Date: Mon, 28 Nov 2022 16:48:22 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Mon, 15 Jul 2013 05:29:58 GMT
X-ServerName: ipvsproxy166.ad.aruba.it
Content-Encoding: gzip
www.ilportoappartamenti.com/wp-content/themes/Lamoon/scripts/supersubs.js?ver=1.1
89.46.108.76200 OK 1.6 kB URL HTTP/1.1 www.ilportoappartamenti.com/wp-content/themes/Lamoon/scripts/supersubs.js?ver=1.1
IP 89.46.108.76:0
Hash e1885a27bff139f05c8cf8ebdacf9cdf
94c96295cc0abf8cdb089003965ab4e3e7eb27cf
acc79c1e139476cb5f3908a7b0038fb11e4f299d0b1dcc0feaa3c031d3c28fa4
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/Lamoon/scripts/supersubs.js?ver=1.1 HTTP/1.1
Host: www.ilportoappartamenti.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ilportoappartamenti.com/info-offerte/
HTTP/1.1 200 OK
Server: aruba-proxy
Date: Mon, 28 Nov 2022 16:48:22 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Mon, 15 Jul 2013 05:34:34 GMT
X-ServerName: ipvsproxy166.ad.aruba.it
Content-Encoding: gzip
www.ilportoappartamenti.com/wp-content/themes/Lamoon/scripts/jquery.hoverIntent.minified.js?ver=1.1
89.46.108.76200 OK 1.7 kB URL HTTP/1.1 www.ilportoappartamenti.com/wp-content/themes/Lamoon/scripts/jquery.hoverIntent.minified.js?ver=1.1
IP 89.46.108.76:0
Hash 38daf2f187378aefc5951fec3bceb18b
28cc7ef726a200c3d8814f35fed496b6e837cfd6
bab0dc8906ee2e25cbb433deca85d2f558ab352906167a10adc4be6765d7f539
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/Lamoon/scripts/jquery.hoverIntent.minified.js?ver=1.1 HTTP/1.1
Host: www.ilportoappartamenti.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ilportoappartamenti.com/info-offerte/
HTTP/1.1 200 OK
Server: aruba-proxy
Date: Mon, 28 Nov 2022 16:48:22 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Mon, 15 Jul 2013 05:34:30 GMT
X-ServerName: ipvsproxy166.ad.aruba.it
Content-Encoding: gzip
www.ilportoappartamenti.com/wp-content/themes/Lamoon/scripts/superfish.js?ver=1.1
89.46.108.76200 OK 2.2 kB URL HTTP/1.1 www.ilportoappartamenti.com/wp-content/themes/Lamoon/scripts/superfish.js?ver=1.1
IP 89.46.108.76:0
Hash 751d15f12415f5832576570399d651c3
9a56deb198fd61565d4cfd0434a93a02fd3eb584
f9a114a811a8a55846acf7fd38150ff9f2d4dc3cf9b934c3e334b8c304fa6aeb
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/Lamoon/scripts/superfish.js?ver=1.1 HTTP/1.1
Host: www.ilportoappartamenti.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ilportoappartamenti.com/info-offerte/
HTTP/1.1 200 OK
Server: aruba-proxy
Date: Mon, 28 Nov 2022 16:48:22 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Mon, 15 Jul 2013 05:34:33 GMT
X-ServerName: ipvsproxy166.ad.aruba.it
Content-Encoding: gzip
www.ilportoappartamenti.com/wp-content/themes/Lamoon/scripts/jquery.easing.1.3.js?ver=1.1
89.46.108.76200 OK 2.0 kB URL HTTP/1.1 www.ilportoappartamenti.com/wp-content/themes/Lamoon/scripts/jquery.easing.1.3.js?ver=1.1
IP 89.46.108.76:0
Hash dd81079af9f93aa59ac2123ef84e8380
f5ca316505f470f64368a5a0707392f5e1f23244
8bbd1597804c86bae536ba15e7129d40c9ce115432c675e14f2d3aa08fca95ea
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/Lamoon/scripts/jquery.easing.1.3.js?ver=1.1 HTTP/1.1
Host: www.ilportoappartamenti.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ilportoappartamenti.com/info-offerte/
HTTP/1.1 200 OK
Server: aruba-proxy
Date: Mon, 28 Nov 2022 16:48:22 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Mon, 15 Jul 2013 05:34:26 GMT
X-ServerName: ipvsproxy166.ad.aruba.it
Content-Encoding: gzip
www.ilportoappartamenti.com/wp-content/themes/Lamoon/scripts/jquery.cycle.lite.js?ver=1.1
89.46.108.76200 OK 2.4 kB URL HTTP/1.1 www.ilportoappartamenti.com/wp-content/themes/Lamoon/scripts/jquery.cycle.lite.js?ver=1.1
IP 89.46.108.76:0
Hash 11433eacbe94d22ad783833b81a330de
457536e2fed6f97d8ad022a5d1b0e10e3763237c
39cc1778ee8696c709c46c47bfee8d408cd3536d2f814e5e6bb28d17b09eeffd
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/Lamoon/scripts/jquery.cycle.lite.js?ver=1.1 HTTP/1.1
Host: www.ilportoappartamenti.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ilportoappartamenti.com/info-offerte/
HTTP/1.1 200 OK
Server: aruba-proxy
Date: Mon, 28 Nov 2022 16:48:22 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Mon, 15 Jul 2013 05:34:26 GMT
X-ServerName: ipvsproxy166.ad.aruba.it
Content-Encoding: gzip
www.ilportoappartamenti.com/wp-content/themes/Lamoon/scripts/jquery.flexslider-min.js?ver=1.1
89.46.108.76200 OK 5.1 kB URL HTTP/1.1 www.ilportoappartamenti.com/wp-content/themes/Lamoon/scripts/jquery.flexslider-min.js?ver=1.1
IP 89.46.108.76:0
File type ASCII text, with very long lines (554)
Hash 9afd1b9bcfafd95d02eaaa0afdb0c480
a84c1cd53eeb2c859dee28019a6bc9a5d6fce6b7
c73b7352f4a2bdfd0e69965a2e3809e12b75d4a9baeb84c831b0668edd6f1e33
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/Lamoon/scripts/jquery.flexslider-min.js?ver=1.1 HTTP/1.1
Host: www.ilportoappartamenti.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ilportoappartamenti.com/info-offerte/
HTTP/1.1 200 OK
Server: aruba-proxy
Date: Mon, 28 Nov 2022 16:48:22 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Mon, 15 Jul 2013 05:34:28 GMT
X-ServerName: ipvsproxy166.ad.aruba.it
Content-Encoding: gzip
www.ilportoappartamenti.com/wp-includes/js/jquery/ui/jquery.ui.core.min.js?ver=1.9.2
89.46.108.76200 OK 2.1 kB URL HTTP/1.1 www.ilportoappartamenti.com/wp-includes/js/jquery/ui/jquery.ui.core.min.js?ver=1.9.2
IP 89.46.108.76:0
File type ASCII text, with very long lines (4530)
Hash fea07057aa37635d57f9291931d5cec6
b4f04191aca68a0de8e36d2f01d42b9867983a8d
3f91f12d193bee3352c23900fbfcbeacacff789165e7415f05176352a9f76f11
GET /wp-includes/js/jquery/ui/jquery.ui.core.min.js?ver=1.9.2 HTTP/1.1
Host: www.ilportoappartamenti.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ilportoappartamenti.com/info-offerte/
HTTP/1.1 200 OK
Server: aruba-proxy
Date: Mon, 28 Nov 2022 16:48:22 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Mon, 15 Jul 2013 05:36:16 GMT
X-ServerName: ipvsproxy166.ad.aruba.it
Content-Encoding: gzip
www.ilportoappartamenti.com/wp-includes/js/jquery/ui/jquery.ui.widget.min.js?ver=1.9.2
89.46.108.76200 OK 2.6 kB URL HTTP/1.1 www.ilportoappartamenti.com/wp-includes/js/jquery/ui/jquery.ui.widget.min.js?ver=1.9.2
IP 89.46.108.76:0
File type ASCII text, with very long lines (6594)
Hash 56786640d2b80db63369aaa8ec622864
2203f9904cb390ca8ce22e7e4bc911549343b64e
b14299c97ac46b6708073cb1188c4512a23ece6eb83492e75a0fce6e18ea4aa5
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/jquery/ui/jquery.ui.widget.min.js?ver=1.9.2 HTTP/1.1
Host: www.ilportoappartamenti.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ilportoappartamenti.com/info-offerte/
HTTP/1.1 200 OK
Server: aruba-proxy
Date: Mon, 28 Nov 2022 16:48:22 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Mon, 15 Jul 2013 05:36:24 GMT
X-ServerName: ipvsproxy166.ad.aruba.it
Content-Encoding: gzip
www.ilportoappartamenti.com/wp-content/themes/Lamoon/scripts/jquery.validationEngine.js?ver=1.1
89.46.108.76200 OK 13 kB URL HTTP/1.1 www.ilportoappartamenti.com/wp-content/themes/Lamoon/scripts/jquery.validationEngine.js?ver=1.1
IP 89.46.108.76:0
File type ASCII text, with very long lines (474)
Hash 8d0ae82cc23e535f039fecff59f16bb4
079e4bf5298e8a3f07d799e3c2ce793448605aed
68c1c302e4da308b327dffeb5d962a5ef275993456ca5606a2217527e73739a3
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/Lamoon/scripts/jquery.validationEngine.js?ver=1.1 HTTP/1.1
Host: www.ilportoappartamenti.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ilportoappartamenti.com/info-offerte/
HTTP/1.1 200 OK
Server: aruba-proxy
Date: Mon, 28 Nov 2022 16:48:22 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Mon, 15 Jul 2013 05:34:30 GMT
X-ServerName: ipvsproxy166.ad.aruba.it
Content-Encoding: gzip
www.ilportoappartamenti.com/wp-includes/js/jquery/ui/jquery.ui.button.min.js?ver=1.9.2
89.46.108.76200 OK 2.0 kB URL HTTP/1.1 www.ilportoappartamenti.com/wp-includes/js/jquery/ui/jquery.ui.button.min.js?ver=1.9.2
IP 89.46.108.76:0
File type ASCII text, with very long lines (7057)
Hash 1139d091477419302724411e16a1d878
486d473a0279d8f2f5c9a8e230f2ad3e42271c92
d7dd4121334470bf86939148a9dda4fd2ef437376fa832e96491992d572ce64e
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/jquery/ui/jquery.ui.button.min.js?ver=1.9.2 HTTP/1.1
Host: www.ilportoappartamenti.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ilportoappartamenti.com/info-offerte/
HTTP/1.1 200 OK
Server: aruba-proxy
Date: Mon, 28 Nov 2022 16:48:22 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Mon, 15 Jul 2013 05:36:15 GMT
X-ServerName: ipvsproxy166.ad.aruba.it
Content-Encoding: gzip
www.ilportoappartamenti.com/wp-content/themes/Lamoon/scripts/ui.spinner.min.js?ver=1.2
89.46.108.76200 OK 3.2 kB URL HTTP/1.1 www.ilportoappartamenti.com/wp-content/themes/Lamoon/scripts/ui.spinner.min.js?ver=1.2
IP 89.46.108.76:0
File type ASCII text, with very long lines (535)
Hash 8bf9e919a6c8cc65f99162429647e839
eb377bb3387591032ef27edb435b94a72b63e539
92371b528fc4bb964c85949a4e9623bd2772a9c69f8a892e5a27f6fbd4585e17
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/Lamoon/scripts/ui.spinner.min.js?ver=1.2 HTTP/1.1
Host: www.ilportoappartamenti.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ilportoappartamenti.com/info-offerte/
HTTP/1.1 200 OK
Server: aruba-proxy
Date: Mon, 28 Nov 2022 16:48:23 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Mon, 15 Jul 2013 05:34:33 GMT
X-ServerName: ipvsproxy166.ad.aruba.it
Content-Encoding: gzip
www.ilportoappartamenti.com/wp-includes/js/jquery/ui/jquery.ui.datepicker.min.js?ver=1.9.2
89.46.108.76200 OK 11 kB URL HTTP/1.1 www.ilportoappartamenti.com/wp-includes/js/jquery/ui/jquery.ui.datepicker.min.js?ver=1.9.2
IP 89.46.108.76:0
File type ASCII text, with very long lines (37460)
Hash 9465d54c2a8f38050416b0ce1ff41290
38216bc5dbd3e40fe6aafbba436a08f894ba250b
3a2107968096e9b0cceb6f6061a73ca622bc98bb7b3be53ee2257f2268922c0b
GET /wp-includes/js/jquery/ui/jquery.ui.datepicker.min.js?ver=1.9.2 HTTP/1.1
Host: www.ilportoappartamenti.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ilportoappartamenti.com/info-offerte/
HTTP/1.1 200 OK
Server: aruba-proxy
Date: Mon, 28 Nov 2022 16:48:23 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Mon, 15 Jul 2013 05:36:17 GMT
X-ServerName: ipvsproxy166.ad.aruba.it
Content-Encoding: gzip
www.ilportoappartamenti.com/wp-includes/js/jquery/ui/jquery.ui.accordion.min.js?ver=1.9.2
89.46.108.76200 OK 3.2 kB URL HTTP/1.1 www.ilportoappartamenti.com/wp-includes/js/jquery/ui/jquery.ui.accordion.min.js?ver=1.9.2
IP 89.46.108.76:0
File type ASCII text, with very long lines (10286)
Hash 67731ec6dbb1c3ab536c4138030eb92d
e19da5657b275435c2a391dbf846ed1bb9463f86
fd01fd7aa08ad2818bbe66819b6b4427bbf37c188f5ee9ac0e0275b31c370834
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/jquery/ui/jquery.ui.accordion.min.js?ver=1.9.2 HTTP/1.1
Host: www.ilportoappartamenti.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ilportoappartamenti.com/info-offerte/
HTTP/1.1 200 OK
Server: aruba-proxy
Date: Mon, 28 Nov 2022 16:48:23 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Mon, 15 Jul 2013 05:36:13 GMT
X-ServerName: ipvsproxy166.ad.aruba.it
Content-Encoding: gzip
aff.bstatic.com/images/affiliate/330843/booknow_it.gif
54.230.111.114301 Moved Permanently 167 B URL HTTP/1.1 aff.bstatic.com/images/affiliate/330843/booknow_it.gif
IP 54.230.111.114:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /images/affiliate/330843/booknow_it.gif HTTP/1.1
Host: aff.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ilportoappartamenti.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 28 Nov 2022 16:48:23 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://aff.bstatic.com/images/affiliate/330843/booknow_it.gif
X-Cache: Redirect from cloudfront
Via: 1.1 c2b101e67ac25a2f0013450d56ecac38.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 5ecljHUFl5a7ZN7AmBDGYHi_35u_ocQfCbuDdFqxsyv5-VhCXKaa4g==
www.ilportoappartamenti.com/wp-content/themes/Lamoon/scripts/lamoon.js?ver=1.1
89.46.108.76200 OK 5.3 kB URL HTTP/1.1 www.ilportoappartamenti.com/wp-content/themes/Lamoon/scripts/lamoon.js?ver=1.1
IP 89.46.108.76:0
File type ASCII text, with very long lines (370)
Hash cc4456e12d1a133e93b6e9fdd61ec6e5
f5c57e7b8ee8da04e69b4ea7dbe7d5d339df4222
8c7d69ced2d79540d31786fd23689e88da0eee9371211ae835a20d87ff82a8f4
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/Lamoon/scripts/lamoon.js?ver=1.1 HTTP/1.1
Host: www.ilportoappartamenti.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ilportoappartamenti.com/info-offerte/
HTTP/1.1 200 OK
Server: aruba-proxy
Date: Mon, 28 Nov 2022 16:48:23 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Mon, 15 Jul 2013 05:34:32 GMT
X-ServerName: ipvsproxy166.ad.aruba.it
Content-Encoding: gzip
www.ilportoappartamenti.com/wp-content/themes/Lamoon/scripts/jquery.validationEngine-en.js?ver=1.2
89.46.108.76200 OK 2.2 kB URL HTTP/1.1 www.ilportoappartamenti.com/wp-content/themes/Lamoon/scripts/jquery.validationEngine-en.js?ver=1.2
IP 89.46.108.76:0
File type ASCII text, with very long lines (1219)
Hash 235a6e507a74a848431f8ac11e99f8da
29c7574953f6b7f9fdb733c2fffadfe6e0484691
5c53a582a0e0d4090aaeb98cc4325cbfc820f39b2a2eaf01d8478292b1bfe60c
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/Lamoon/scripts/jquery.validationEngine-en.js?ver=1.2 HTTP/1.1
Host: www.ilportoappartamenti.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ilportoappartamenti.com/info-offerte/
HTTP/1.1 200 OK
Server: aruba-proxy
Date: Mon, 28 Nov 2022 16:48:22 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Mon, 15 Jul 2013 05:34:31 GMT
X-ServerName: ipvsproxy166.ad.aruba.it
Content-Encoding: gzip
ocsp.pki.goog/s/gts1d4/Tx6aREmafpE
142.250.74.3200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/Tx6aREmafpE
IP 142.250.74.3:0
Hash 472120ee5dc7a87333461d78f4223af4
913c4d12793ef9a89a7535c41e3d5f0368e44f6b
0684243dc10a12941e5f23ead8a11e4192f3129fed3534dec22bc311dc742dbb
POST /s/gts1d4/Tx6aREmafpE HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 16:48:23 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.ilportoappartamenti.com/wp-content/themes/Lamoon/scripts/jquery.ui.totop.min.js?ver=1.1
89.46.108.76200 OK 602 B URL HTTP/1.1 www.ilportoappartamenti.com/wp-content/themes/Lamoon/scripts/jquery.ui.totop.min.js?ver=1.1
IP 89.46.108.76:0
File type HTML document, ASCII text, with very long lines (1091)
Hash 2939dd2cb8d73617cebcaa903fa466ec
e43259e5c9eb343e2ff7176af61870aeaa684f23
0d1fa03e29e105a5c31d424a67c355c4a5a2aaec85d03dd2f7de144cf81c83ac
GET /wp-content/themes/Lamoon/scripts/jquery.ui.totop.min.js?ver=1.1 HTTP/1.1
Host: www.ilportoappartamenti.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ilportoappartamenti.com/info-offerte/
HTTP/1.1 200 OK
Server: aruba-proxy
Date: Mon, 28 Nov 2022 16:48:23 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Mon, 15 Jul 2013 05:34:30 GMT
X-ServerName: ipvsproxy166.ad.aruba.it
Content-Encoding: gzip
www.ilportoappartamenti.com/wp-content/themes/Lamoon/scripts/jquery-migrate-1.1.0.min.js?ver=1.1
89.46.108.76200 OK 3.0 kB URL HTTP/1.1 www.ilportoappartamenti.com/wp-content/themes/Lamoon/scripts/jquery-migrate-1.1.0.min.js?ver=1.1
IP 89.46.108.76:0
File type ASCII text, with very long lines (6805)
Hash 3dfeeebf734424caa54e13b9f6fc1082
fb21ff920de41f227976c6b1e0d1a0d5878b6cef
3cc93037de507d5d6c70163a9bcb69d3c8ea9ba263206666ef0fc18986c3e593
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/Lamoon/scripts/jquery-migrate-1.1.0.min.js?ver=1.1 HTTP/1.1
Host: www.ilportoappartamenti.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ilportoappartamenti.com/info-offerte/
HTTP/1.1 200 OK
Server: aruba-proxy
Date: Mon, 28 Nov 2022 16:48:23 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Mon, 15 Jul 2013 05:34:25 GMT
X-ServerName: ipvsproxy166.ad.aruba.it
Content-Encoding: gzip
www.ilportoappartamenti.com/wp-content/plugins/pricing-table/js/site/jquery.tipTip.minified.js?ver=3.5.2
89.46.108.76200 OK 1.7 kB URL HTTP/1.1 www.ilportoappartamenti.com/wp-content/plugins/pricing-table/js/site/jquery.tipTip.minified.js?ver=3.5.2
IP 89.46.108.76:0
File type ASCII text, with very long lines (4420)
Hash d807d55654486b2ed58a6e05c6cafa1d
e8aef0916f3ac1f6d0ebf184a0dde5b46bd6e774
f876c826458cfb2b9fd042e3ec4c318a6f125f38f88d7ab8248693bd813fb382
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/pricing-table/js/site/jquery.tipTip.minified.js?ver=3.5.2 HTTP/1.1
Host: www.ilportoappartamenti.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ilportoappartamenti.com/info-offerte/
HTTP/1.1 200 OK
Server: aruba-proxy
Date: Mon, 28 Nov 2022 16:48:23 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Mon, 15 Jul 2013 05:36:45 GMT
X-ServerName: ipvsproxy166.ad.aruba.it
Content-Encoding: gzip
fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2
216.58.207.195200 OK 24 kB URL HTTP/1.1 fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2
IP 216.58.207.195:0
File type Web Open Font Format (Version 2), TrueType, length 23580, version 1.0\012- data
Hash e1b3b5908c9cf23dfb2b9c52b9a023ab
fcd4136085f2a03481d9958cc6793a5ed98e714c
918b7dc3e2e2d015c16ce08b57bcb64d2253bafc1707658f361e72865498e537
GET /s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.ilportoappartamenti.com
Connection: keep-alive
Referer: http://fonts.googleapis.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 23580
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Tue, 22 Nov 2022 18:20:17 GMT
Expires: Wed, 22 Nov 2023 18:20:17 GMT
Cache-Control: public, max-age=31536000
Age: 512886
Last-Modified: Tue, 26 Apr 2022 15:48:56 GMT
Content-Type: font/woff2
www.ilportoappartamenti.com/wp-content/plugins/social-media-widget/images/default/32/rss.png
89.46.108.76200 OK 1.7 kB URL HTTP/1.1 www.ilportoappartamenti.com/wp-content/plugins/social-media-widget/images/default/32/rss.png
IP 89.46.108.76:0
File type PNG image data, 32 x 32, 8-bit colormap, non-interlaced\012- data
Hash 9749e50bdf8da88aa490b16c1e180709
a09df4dd861b8e8f2e0dceaf68934a6a5404d986
e9e999fe97c5e10e60b9529047d90f4e5be1129be09b8623928ec75d2d742015
GET /wp-content/plugins/social-media-widget/images/default/32/rss.png HTTP/1.1
Host: www.ilportoappartamenti.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ilportoappartamenti.com/info-offerte/
HTTP/1.1 200 OK
Server: aruba-proxy
Date: Mon, 28 Nov 2022 16:48:23 GMT
Content-Type: image/png
Content-Length: 1746
Connection: keep-alive
Last-Modified: Mon, 15 Jul 2013 05:38:25 GMT
Accept-Ranges: bytes
X-ServerName: ipvsproxy166.ad.aruba.it
www.ilportoappartamenti.com/wp-content/plugins/social-media-widget/images/default/32/email.png
89.46.108.76200 OK 1.6 kB URL HTTP/1.1 www.ilportoappartamenti.com/wp-content/plugins/social-media-widget/images/default/32/email.png
IP 89.46.108.76:0
File type PNG image data, 32 x 32, 8-bit colormap, non-interlaced\012- data
Hash e106d0a4b2bdb95851fbd8b663086533
f4bbdd428f22c58bf20b7972a91cc36543d4bdc5
a420501515ea2a54aea2b3821779ee0974976a88dd7717276b029c885494ba75
GET /wp-content/plugins/social-media-widget/images/default/32/email.png HTTP/1.1
Host: www.ilportoappartamenti.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ilportoappartamenti.com/info-offerte/
HTTP/1.1 200 OK
Server: aruba-proxy
Date: Mon, 28 Nov 2022 16:48:23 GMT
Content-Type: image/png
Content-Length: 1649
Connection: keep-alive
Last-Modified: Mon, 15 Jul 2013 05:38:24 GMT
Accept-Ranges: bytes
X-ServerName: ipvsproxy166.ad.aruba.it
www.ilportoappartamenti.com/wp-content/plugins/social-media-widget/images/default/32/facebook.png
89.46.108.76200 OK 634 B URL HTTP/1.1 www.ilportoappartamenti.com/wp-content/plugins/social-media-widget/images/default/32/facebook.png
IP 89.46.108.76:0
File type PNG image data, 32 x 32, 8-bit colormap, non-interlaced\012- data
Hash 82378b10a9b16af6fc2e089037660e4b
3b41821a2c28b414a727e477484d6f8ab219705c
81480cebe2ddeedde1af2e2a6f9eab352094abd78c75464705be2bcbb6e91b54
GET /wp-content/plugins/social-media-widget/images/default/32/facebook.png HTTP/1.1
Host: www.ilportoappartamenti.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ilportoappartamenti.com/info-offerte/
HTTP/1.1 200 OK
Server: aruba-proxy
Date: Mon, 28 Nov 2022 16:48:23 GMT
Content-Type: image/png
Content-Length: 634
Connection: keep-alive
Last-Modified: Mon, 15 Jul 2013 05:38:24 GMT
Accept-Ranges: bytes
X-ServerName: ipvsproxy166.ad.aruba.it
aff.bstatic.com/images/affiliate/330843/booknow_it.gif
54.230.111.114200 OK 681 B URL HTTP/2 aff.bstatic.com/images/affiliate/330843/booknow_it.gif
IP 54.230.111.114:0
File type GIF image data, version 89a, 169 x 36\012- data
Hash 507e683ee64f29989b891889a31d9fee
da70c1f476a44dd62ab4bc2f67b55ed7e77a51ee
da38fe11aeef649c70e8ee4a4f608b5ef5cbe500e52850421d68d22f4ddd478e
GET /images/affiliate/330843/booknow_it.gif HTTP/1.1
Host: aff.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.ilportoappartamenti.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/gif
content-length: 681
server: nginx
date: Fri, 11 Nov 2022 01:49:14 GMT
last-modified: Tue, 09 Apr 2019 16:16:19 GMT
etag: "5cacc553-2a9"
expires: Sun, 11 Dec 2022 01:49:14 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
accept-ranges: bytes
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: X1fa6EyV8XZ7K0-YwpAxHHfWSyLw7F9VUtvXpFaRhrbBC0AtqaqeUQ==
age: 1522749
X-Firefox-Spdy: h2
www.ilportoappartamenti.com/wp-content/plugins/social-media-widget/images/default/32/youtube.png
89.46.108.76200 OK 1.7 kB URL HTTP/1.1 www.ilportoappartamenti.com/wp-content/plugins/social-media-widget/images/default/32/youtube.png
IP 89.46.108.76:0
File type PNG image data, 32 x 32, 8-bit colormap, non-interlaced\012- data
Hash a7f629359e02e7f5486c0a3d0de2bc2d
62a7ebd75d59a0fa06341a51be2f0836e98ccb18
78b5e23c32c684bc9079e0cadb39fd15335ad90e2cca9b3109d6aed244a3ab97
GET /wp-content/plugins/social-media-widget/images/default/32/youtube.png HTTP/1.1
Host: www.ilportoappartamenti.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ilportoappartamenti.com/info-offerte/
HTTP/1.1 200 OK
Server: aruba-proxy
Date: Mon, 28 Nov 2022 16:48:23 GMT
Content-Type: image/png
Content-Length: 1715
Connection: keep-alive
Last-Modified: Mon, 15 Jul 2013 05:38:26 GMT
Accept-Ranges: bytes
X-ServerName: ipvsproxy166.ad.aruba.it
www.ilportoappartamenti.com/wp-content/plugins/social-media-widget/images/default/32/twitter.png
89.46.108.76200 OK 877 B URL HTTP/1.1 www.ilportoappartamenti.com/wp-content/plugins/social-media-widget/images/default/32/twitter.png
IP 89.46.108.76:0
File type PNG image data, 32 x 32, 8-bit colormap, non-interlaced\012- data
Hash e41e7fc39e2b5888b3fc8e79788e27f6
c36704f196aef77534fabd1752443ab49cd82feb
0e2160fefe0b02729a87a03ef7f21fe2003b7054a7bbb5c11011c11a51a4156f
GET /wp-content/plugins/social-media-widget/images/default/32/twitter.png HTTP/1.1
Host: www.ilportoappartamenti.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ilportoappartamenti.com/info-offerte/
HTTP/1.1 200 OK
Server: aruba-proxy
Date: Mon, 28 Nov 2022 16:48:23 GMT
Content-Type: image/png
Content-Length: 877
Connection: keep-alive
Last-Modified: Mon, 15 Jul 2013 05:38:25 GMT
Accept-Ranges: bytes
X-ServerName: ipvsproxy166.ad.aruba.it
www.ilportoappartamenti.com/wp-content/themes/Lamoon/images/content-bg.gif
89.46.108.76200 OK 9.6 kB URL HTTP/1.1 www.ilportoappartamenti.com/wp-content/themes/Lamoon/images/content-bg.gif
IP 89.46.108.76:0
File type GIF image data, version 89a, 140 x 140\012- data
Hash e0e391cbef918221c8b96f8e468df53d
31734c63f8d2c3377a7623268d9544e27fbaa6db
7e68a461b80bfaa0390c659f1479b50cfe2f0b9d373de32dba01b2e2b454fa8e
GET /wp-content/themes/Lamoon/images/content-bg.gif HTTP/1.1
Host: www.ilportoappartamenti.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ilportoappartamenti.com/wp-content/themes/Lamoon/style.css?ver=1.4
HTTP/1.1 200 OK
Server: aruba-proxy
Date: Mon, 28 Nov 2022 16:48:23 GMT
Content-Type: image/gif
Content-Length: 9600
Connection: keep-alive
Last-Modified: Mon, 15 Jul 2013 05:34:16 GMT
Accept-Ranges: bytes
X-ServerName: ipvsproxy166.ad.aruba.it
www.ilportoappartamenti.com/wp-content/themes/Lamoon/images/viola-menu-bg.png
89.46.108.76200 OK 979 B URL HTTP/1.1 www.ilportoappartamenti.com/wp-content/themes/Lamoon/images/viola-menu-bg.png
IP 89.46.108.76:0
File type PNG image data, 15 x 53, 8-bit/color RGB, non-interlaced\012- data
Hash 9c95c11bbe910d6a3c8745c9ceaf7f22
e4c05fe5d4a17ea361e84c9232f0d4d35fe48a54
74bdca5ccfa161cd5496c41e21a581bcfe1f46fd83020cbfa478fc90656f5923
GET /wp-content/themes/Lamoon/images/viola-menu-bg.png HTTP/1.1
Host: www.ilportoappartamenti.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ilportoappartamenti.com/wp-content/themes/Lamoon/css/colors/blue.css?ver=1.1
HTTP/1.1 200 OK
Server: aruba-proxy
Date: Mon, 28 Nov 2022 16:48:23 GMT
Content-Type: image/png
Content-Length: 979
Connection: keep-alive
Last-Modified: Mon, 15 Jul 2013 05:34:17 GMT
Accept-Ranges: bytes
X-ServerName: ipvsproxy166.ad.aruba.it
www.ilportoappartamenti.com/wp-content/themes/Lamoon/images/gray-button.jpg
89.46.108.76200 OK 8.3 kB URL HTTP/1.1 www.ilportoappartamenti.com/wp-content/themes/Lamoon/images/gray-button.jpg
IP 89.46.108.76:0
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS5 Windows, datetime=2012:07:25 01:20:50], baseline, precision 8, 5x35, components 1\012- data
Hash d3676b9eb323ba14ebf84e0f530b22a2
bc8a97f118b92052bff9c1ef164241cc3163ae5e
8bd691cce42cee8c4f021dd7792c108517f813e3e336ec8953093046db036f41
GET /wp-content/themes/Lamoon/images/gray-button.jpg HTTP/1.1
Host: www.ilportoappartamenti.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ilportoappartamenti.com/wp-content/themes/Lamoon/style.css?ver=1.4
HTTP/1.1 200 OK
Server: aruba-proxy
Date: Mon, 28 Nov 2022 16:48:23 GMT
Content-Type: image/jpeg
Content-Length: 8341
Connection: keep-alive
Last-Modified: Mon, 15 Jul 2013 05:34:14 GMT
Accept-Ranges: bytes
X-ServerName: ipvsproxy166.ad.aruba.it
www.ilportoappartamenti.com/wp-content/uploads/2014/10/wi-fi-zone.png
89.46.108.76200 OK 7.7 kB URL HTTP/1.1 www.ilportoappartamenti.com/wp-content/uploads/2014/10/wi-fi-zone.png
IP 89.46.108.76:0
File type PNG image data, 117 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash b823a36fd83670c2ef896f66fd56aa1c
9d6e820fbf7495add1c3f23dcc678f6eb65123de
ed7d2151f3bc621bcc75a4968406c2df0632eecbc67e507be1ca790b51230fb1
GET /wp-content/uploads/2014/10/wi-fi-zone.png HTTP/1.1
Host: www.ilportoappartamenti.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ilportoappartamenti.com/info-offerte/
HTTP/1.1 200 OK
Server: aruba-proxy
Date: Mon, 28 Nov 2022 16:48:23 GMT
Content-Type: image/png
Content-Length: 7716
Connection: keep-alive
Last-Modified: Fri, 03 Oct 2014 17:09:46 GMT
Accept-Ranges: bytes
X-ServerName: ipvsproxy166.ad.aruba.it
www.ilportoappartamenti.com/wp-content/themes/Lamoon/images/social/author/email.png
89.46.108.76200 OK 458 B URL HTTP/1.1 www.ilportoappartamenti.com/wp-content/themes/Lamoon/images/social/author/email.png
IP 89.46.108.76:0
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash da21c7e9153f1e24b931789ded5eea16
8db9f70156f75de19525e0dbd14f27bc46134789
066108946ebf098c62ee1e2cb5d690f8297fb7bd395be4ccb8d697937190eb7f
GET /wp-content/themes/Lamoon/images/social/author/email.png HTTP/1.1
Host: www.ilportoappartamenti.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ilportoappartamenti.com/info-offerte/
HTTP/1.1 200 OK
Server: aruba-proxy
Date: Mon, 28 Nov 2022 16:48:23 GMT
Content-Type: image/png
Content-Length: 458
Connection: keep-alive
Last-Modified: Mon, 15 Jul 2013 05:39:23 GMT
Accept-Ranges: bytes
X-ServerName: ipvsproxy166.ad.aruba.it
www.ilportoappartamenti.com/wp-includes/js/thickbox/loadingAnimation.gif
89.46.108.76200 OK 15 kB URL HTTP/1.1 www.ilportoappartamenti.com/wp-includes/js/thickbox/loadingAnimation.gif
IP 89.46.108.76:0
File type GIF image data, version 89a, 416 x 26\012- data
Hash ce2268030dd2151b63cdf4ffc2f626ba
15280f21eb43f5fa7838dcf011f67d79e301b15f
6a486bb6036ea984d293ab009566e99e522abc19f8833c5fd49630be7eba0135
GET /wp-includes/js/thickbox/loadingAnimation.gif HTTP/1.1
Host: www.ilportoappartamenti.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ilportoappartamenti.com/info-offerte/
HTTP/1.1 200 OK
Server: aruba-proxy
Date: Mon, 28 Nov 2022 16:48:23 GMT
Content-Type: image/gif
Content-Length: 15238
Connection: keep-alive
Last-Modified: Mon, 15 Jul 2013 05:29:54 GMT
Accept-Ranges: bytes
X-ServerName: ipvsproxy166.ad.aruba.it
www.ilportoappartamenti.com/wp-content/uploads/2013/07/offerte-940x220.jpg
89.46.108.76200 OK 61 kB URL HTTP/1.1 www.ilportoappartamenti.com/wp-content/uploads/2013/07/offerte-940x220.jpg
IP 89.46.108.76:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 940x220, components 3\012- data
Hash 9b9ed27d6a4d3f859c99c83d608d74b7
76ae64de465b9a5555577e93d81b7e22a888b56c
de86a9115eda091e44f6011fe732b469008188b0e486729fafea2d06de910ff1
GET /wp-content/uploads/2013/07/offerte-940x220.jpg HTTP/1.1
Host: www.ilportoappartamenti.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ilportoappartamenti.com/info-offerte/
HTTP/1.1 200 OK
Server: aruba-proxy
Date: Mon, 28 Nov 2022 16:48:23 GMT
Content-Type: image/jpeg
Content-Length: 60879
Connection: keep-alive
Last-Modified: Mon, 15 Jul 2013 05:35:46 GMT
Accept-Ranges: bytes
X-ServerName: ipvsproxy166.ad.aruba.it
www.ilportoappartamenti.com/wp-content/uploads/2013/06/logo-2.png
89.46.108.76200 OK 39 kB URL HTTP/1.1 www.ilportoappartamenti.com/wp-content/uploads/2013/06/logo-2.png
IP 89.46.108.76:0
File type PNG image data, 250 x 161, 8-bit/color RGBA, non-interlaced\012- data
Hash ee5eb2395ee2d1ef9ac40233ee016f7c
a74268e8edc884288efdb2fa5696d956d7f19cc3
edb72d036a9a6e8c78e3ddcd8793bcb116f76753939dc579845e913b8ba9e787
GET /wp-content/uploads/2013/06/logo-2.png HTTP/1.1
Host: www.ilportoappartamenti.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ilportoappartamenti.com/info-offerte/
HTTP/1.1 200 OK
Server: aruba-proxy
Date: Mon, 28 Nov 2022 16:48:23 GMT
Content-Type: image/png
Content-Length: 39274
Connection: keep-alive
Last-Modified: Mon, 15 Jul 2013 05:35:20 GMT
Accept-Ranges: bytes
X-ServerName: ipvsproxy166.ad.aruba.it
www.google-analytics.com/ga.js
142.250.74.174200 OK 17 kB URL HTTP/1.1 www.google-analytics.com/ga.js
IP 142.250.74.174:0
File type ASCII text, with very long lines (1305)
Hash 01d5892e6e243b52998310c2925b9f3a
58180151b6a6ee4af73583a214b68efb9e8844d4
7e90efb4620a78e8869796d256bcddbde90b853c8c15c5cc116cb11d3d17bc4d
GET /ga.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ilportoappartamenti.com/
HTTP/1.1 200 OK
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
Cross-Origin-Resource-Policy: cross-origin
Server: Golfe2
Content-Length: 17168
Date: Mon, 28 Nov 2022 15:05:59 GMT
Expires: Mon, 28 Nov 2022 17:05:59 GMT
Cache-Control: public, max-age=7200
Age: 6144
Last-Modified: Tue, 27 Sep 2022 22:01:05 GMT
Content-Type: text/javascript
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash b64cf9bc1b2f7188451bdeae2696fabe
24537125f11cef2918be33a55a5eb39ea12dfc56
b4d0eb0f30419d8e50fcc4eb71051c4e9a9b68f4e45dfcf5ebd5e4fb6d4e9901
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B4D0EB0F30419D8E50FCC4EB71051C4E9A9B68F4E45DFCF5EBD5E4FB6D4E9901"
Last-Modified: Mon, 28 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Mon, 28 Nov 2022 22:48:23 GMT
Date: Mon, 28 Nov 2022 16:48:23 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 8bb181e3f5ca898c6e31a8efc2e28291
eda3a91f8e2cbc5467da08ad85e6f6a30702b66c
0e943aacb4a46480ab031ef294a0e089976ec125c331c15116b6c79f6b0f2ff0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E943AACB4A46480AB031EF294A0E089976EC125C331C15116B6C79F6B0F2FF0"
Last-Modified: Sat, 26 Nov 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6345
Expires: Mon, 28 Nov 2022 18:34:08 GMT
Date: Mon, 28 Nov 2022 16:48:23 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 8bb181e3f5ca898c6e31a8efc2e28291
eda3a91f8e2cbc5467da08ad85e6f6a30702b66c
0e943aacb4a46480ab031ef294a0e089976ec125c331c15116b6c79f6b0f2ff0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E943AACB4A46480AB031EF294A0E089976EC125C331C15116B6C79F6B0F2FF0"
Last-Modified: Sat, 26 Nov 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6345
Expires: Mon, 28 Nov 2022 18:34:08 GMT
Date: Mon, 28 Nov 2022 16:48:23 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 8bb181e3f5ca898c6e31a8efc2e28291
eda3a91f8e2cbc5467da08ad85e6f6a30702b66c
0e943aacb4a46480ab031ef294a0e089976ec125c331c15116b6c79f6b0f2ff0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E943AACB4A46480AB031EF294A0E089976EC125C331C15116B6C79F6B0F2FF0"
Last-Modified: Sat, 26 Nov 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6345
Expires: Mon, 28 Nov 2022 18:34:08 GMT
Date: Mon, 28 Nov 2022 16:48:23 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash c81653e99cfdfb43236c8d50248b2e51
a33bc0cb7d3bb714b7ef23b059bb304cf23d464f
e75fa0ce568755990d6949ef93e3e5c29213a5a11887f697af901f41b14e0274
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 16:48:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdee4f5d4-5a5e-4a39-9681-50795cecc0f4.jpeg
34.120.237.76200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdee4f5d4-5a5e-4a39-9681-50795cecc0f4.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2cd887044e91d7ed0f1a8d7119ff7dd0
ae8aa4ce6ddaccba771fe65446926b60fc5628da
bad283c15531000b7a8c126d442154b64a880cc26196a46cbd2e6266a526db67
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdee4f5d4-5a5e-4a39-9681-50795cecc0f4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10199
x-amzn-requestid: baee3bbe-7ded-425a-ae39-fccfc8169217
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cOo4iF1VIAMF09g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63828836-5522727b2f09b27e63b23270;Sampled=0
x-amzn-remapped-date: Sat, 26 Nov 2022 21:42:14 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: CXOqm7bjsSV0aJBTkTI7LsMovjgPeISPt3sZotEc7CjZnUL_y4_OoQ==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 21:51:43 GMT
age: 68200
etag: "ae8aa4ce6ddaccba771fe65446926b60fc5628da"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
maps.googleapis.com/maps/api/mapsjs/gen_204?csp_test=true
142.250.74.138403 Forbidden 132 B URL HTTP/1.1 maps.googleapis.com/maps/api/mapsjs/gen_204?csp_test=true
IP 142.250.74.138:0
File type JSON data\012- , ASCII text
Hash 3c954b0fdf7d56714cf712d02e0bf056
5c5acb630475cc6198b7191ba1adf49d72dd82f9
effda9280db937a1b47807f746c2797cdd1d44ffc3af3e1eee40306d7a9fe632
GET /maps/api/mapsjs/gen_204?csp_test=true HTTP/1.1
Host: maps.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Origin: http://www.ilportoappartamenti.com
Connection: keep-alive
Referer: http://www.ilportoappartamenti.com/
HTTP/1.1 403 Forbidden
Vary: Origin, X-Origin, Referer
Content-Type: application/json; charset=UTF-8
Content-Encoding: gzip
Date: Mon, 28 Nov 2022 16:48:23 GMT
Server: scaffolding on HTTPServer2
Cache-Control: private
Content-Length: 132
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Access-Control-Allow-Origin: http://www.ilportoappartamenti.com
Access-Control-Expose-Headers: vary,vary,vary,content-encoding,date,server,content-length
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 8bb181e3f5ca898c6e31a8efc2e28291
eda3a91f8e2cbc5467da08ad85e6f6a30702b66c
0e943aacb4a46480ab031ef294a0e089976ec125c331c15116b6c79f6b0f2ff0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E943AACB4A46480AB031EF294A0E089976EC125C331C15116B6C79F6B0F2FF0"
Last-Modified: Sat, 26 Nov 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6345
Expires: Mon, 28 Nov 2022 18:34:08 GMT
Date: Mon, 28 Nov 2022 16:48:23 GMT
Connection: keep-alive
www.google-analytics.com/analytics.js
142.250.74.174200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP 142.250.74.174:0
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.ilportoappartamenti.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Mon, 28 Nov 2022 16:41:08 GMT
expires: Mon, 28 Nov 2022 18:41:08 GMT
cache-control: public, max-age=7200
age: 435
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcfaef414-0c01-4bb9-800d-29da0ef5607d.jpeg
34.120.237.76200 OK 8.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcfaef414-0c01-4bb9-800d-29da0ef5607d.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4e97baa4851785eac92c719abf481c64
c32a57038d3cdbc514c9081c9938eca6a04fb481
adb59e982648082e5421f58899a5331b2747e9d45be33c495fbe3ab8cc872b22
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcfaef414-0c01-4bb9-800d-29da0ef5607d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8387
x-amzn-requestid: e4ce369f-7654-4c1a-94c2-70c913eb1a01
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cFL0tEcqIAMFXHw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637ec01d-37bd969f4cdfe220096b8c1f;Sampled=0
x-amzn-remapped-date: Thu, 24 Nov 2022 00:51:41 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: __2hrJIdzCKzhuJ_YfbSSfz-WwyIqnPugk7P6SuYSjn6b2wwm0otCw==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 20:58:19 GMT
age: 71404
etag: "c32a57038d3cdbc514c9081c9938eca6a04fb481"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F165667de-df17-4cc6-832c-94f49703bdf2.jpeg
34.120.237.76200 OK 9.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F165667de-df17-4cc6-832c-94f49703bdf2.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1f434933b5bd6377d299ada22d1ae7ef
075531f525e625b117b2497f31139c9824d0e9c5
b587a3249e4f20112088608e3651c2ccbc44225a5c9d88d3bf5884d7f0e9029c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F165667de-df17-4cc6-832c-94f49703bdf2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9430
x-amzn-requestid: 454ca8bd-a256-45f2-8b41-feee86c5af82
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cR7wyGCIIAMFhgw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6383d99e-1488f8ce71a91ebc3ad6b7e0;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 21:41:50 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: ibLuLI6j9EWh0dgk51O7kiPBRyURZ0UdNtlgbBD-SXnDg_GT_tJm8Q==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 22:01:16 GMT
age: 67627
etag: "075531f525e625b117b2497f31139c9824d0e9c5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fba57ea10-c30b-4188-bb72-b589f3564094.jpeg
34.120.237.76200 OK 8.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fba57ea10-c30b-4188-bb72-b589f3564094.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 741ddfb19764ac9a77509e7e87cfbfb2
308c08784ce4a0757cbd112807555b83e17a1d56
e9271a76da94d8b655860c3b00d111396c5d3a227fd2f19e0ef400fd5e84d87e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fba57ea10-c30b-4188-bb72-b589f3564094.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8817
x-amzn-requestid: 31bd21c7-1d75-4159-af51-52035da16da4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b-krGE6AIAMF2Kg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637c1b13-32a7b9c6642592c70783a0cf;Sampled=0
x-amzn-remapped-date: Tue, 22 Nov 2022 00:42:59 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ZJu4cMNnQTavxqB1MnRFluzfZC59BcUnIHgXh9h6LJWYgsFL83rHoQ==
via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 82ea95080f526df99896343fb7269b06.cloudfront.net (CloudFront), 1.1 google
date: Mon, 28 Nov 2022 16:15:25 GMT
age: 1978
etag: "308c08784ce4a0757cbd112807555b83e17a1d56"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa78e81d9-dbc4-4911-9711-219f64026531.jpeg
34.120.237.76200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa78e81d9-dbc4-4911-9711-219f64026531.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5e586c141835f4ac8819c55dcb811b4d
a23fd98701ac35cd8740d1f7a832118c770e20c8
4296f391f755a649897a2211f9072c69a0510e43a313674908bb0a771b12650e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa78e81d9-dbc4-4911-9711-219f64026531.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10944
x-amzn-requestid: 8f48c27c-bbec-46f5-9c08-1cc804b9aff7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cIbJ_FyvIAMFhrQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63800bd9-2ffa8521241a5e5b0afc0935;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 00:27:05 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 4YiBUU3kS0VrcVOwKXUHgIRygLLeXGp1TjBYDi6WwWWm6WMKktzfHg==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 f9d716a351f14a0ac1fac2449734849a.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 22:36:32 GMT
age: 65511
etag: "a23fd98701ac35cd8740d1f7a832118c770e20c8"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.ilportoappartamenti.com/wp-content/uploads/2013/07/sfondo-3.jpg
89.46.108.76200 OK 490 kB URL HTTP/1.1 www.ilportoappartamenti.com/wp-content/uploads/2013/07/sfondo-3.jpg
IP 89.46.108.76:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1920x1440, components 3\012- data
Size 490 kB (489789 bytes)
Hash c5773c9494213ecb42bd073ef21c6174
a23cc469722150c8881fa132ca95607fd37266f3
b06099a697e1ee122c95f39492581e690a546c5b509af89a9efdb33df97754db
GET /wp-content/uploads/2013/07/sfondo-3.jpg HTTP/1.1
Host: www.ilportoappartamenti.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ilportoappartamenti.com/info-offerte/
HTTP/1.1 200 OK
Server: aruba-proxy
Date: Mon, 28 Nov 2022 16:48:23 GMT
Content-Type: image/jpeg
Content-Length: 489789
Connection: keep-alive
Last-Modified: Thu, 18 Jul 2013 15:53:12 GMT
Accept-Ranges: bytes
X-ServerName: ipvsproxy166.ad.aruba.it
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F36d8942f-c540-4112-a5a9-c7ac53a00a23.jpeg
34.120.237.76200 OK 6.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F36d8942f-c540-4112-a5a9-c7ac53a00a23.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 78b1389f425425d0450c94d900404dc4
53b12a8702f7c5b7cc697e2a24da824d9434be65
0c1659ab3afc6e45f9e3acb12f8865bb99e4668f7df4501b1cc740e53f5b62ed
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F36d8942f-c540-4112-a5a9-c7ac53a00a23.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6376
x-amzn-requestid: 25b82353-9c15-44c0-ada5-55f4697de935
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cR6_KGeaoAMFb_Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6383d860-71711cca7c063030292c5e47;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 21:36:32 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: odmAWkNyUMevvXStu7zRJyckokhyBjUwu7-JSvj8by-JWJ9eAm9P5Q==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 64f86ae1c24221f3a2e4d653d6dbc416.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 22:01:26 GMT
age: 67617
etag: "53b12a8702f7c5b7cc697e2a24da824d9434be65"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.ilportoappartamenti.com/favicon.ico
89.46.108.76200 OK 0 B URL HTTP/1.1 www.ilportoappartamenti.com/favicon.ico
IP 89.46.108.76:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: www.ilportoappartamenti.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ilportoappartamenti.com/info-offerte/
HTTP/1.1 200 OK
Server: aruba-proxy
Date: Mon, 28 Nov 2022 16:48:23 GMT
Content-Type: image/vnd.microsoft.icon
Content-Length: 0
Connection: keep-alive
X-ServerName: ipvsproxy166.ad.aruba.it
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash c81653e99cfdfb43236c8d50248b2e51
a33bc0cb7d3bb714b7ef23b059bb304cf23d464f
e75fa0ce568755990d6949ef93e3e5c29213a5a11887f697af901f41b14e0274
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 16:48:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
1.gravatar.com/avatar/3c4258b204722f4ad957d25f48ca6147?s=90&d=http%3A%2F%2F1.gravatar.com%2Favatar%2Fad516503a11cd5ca435acc9bb6523536%3Fs%3D90&r=G
192.0.73.2302 Found 0 B URL HTTP/1.1 1.gravatar.com/avatar/3c4258b204722f4ad957d25f48ca6147?s=90&d=http%3A%2F%2F1.gravatar.com%2Favatar%2Fad516503a11cd5ca435acc9bb6523536%3Fs%3D90&r=G
IP 192.0.73.2:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /avatar/3c4258b204722f4ad957d25f48ca6147?s=90&d=http%3A%2F%2F1.gravatar.com%2Favatar%2Fad516503a11cd5ca435acc9bb6523536%3Fs%3D90&r=G HTTP/1.1
Host: 1.gravatar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ilportoappartamenti.com/
HTTP/1.1 302 Found
Server: nginx
Date: Mon, 28 Nov 2022 16:48:23 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Last-Modified: Wed, 11 Jan 1984 08:00:00 GMT
Link: <https://www.gravatar.com/avatar/3c4258b204722f4ad957d25f48ca6147?s=90&d=http%3A%2F%2F1.gravatar.com%2Favatar%2Fad516503a11cd5ca435acc9bb6523536%3Fs%3D90&r=G>; rel="canonical"
Location: http://1.gravatar.com/avatar/ad516503a11cd5ca435acc9bb6523536?s=90
Expires: Mon, 28 Nov 2022 16:53:23 GMT
Cache-Control: max-age=300
X-nc: MISS arn 1
adsnet.work/scripts/placer.js
193.3.19.36200 OK 377 B URL HTTP/1.1 adsnet.work/scripts/placer.js
IP 193.3.19.36:0
ASN #50340 OOO Network of data-centers Selectel
Hash 4435b6168b6acda2edea1c16ab2d857a
eff2c42517e44a568b5011125b5cba022f27f67f
dcd5ff0b5118befd94a04b7bbc750b5a7b473e39fefd81e235f79bd848916569
Analyzer Verdict Alert fortinet Malware
GET /scripts/placer.js HTTP/1.1
Host: adsnet.work
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.ilportoappartamenti.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 16:48:23 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips mod_fcgid/2.3.9 PHP/5.4.16
X-Powered-By: PHP/7.4.26
Access-Control-Allow-Origin: *
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
1.gravatar.com/avatar/ad516503a11cd5ca435acc9bb6523536?s=90
192.0.73.2200 OK 1.4 kB URL HTTP/1.1 1.gravatar.com/avatar/ad516503a11cd5ca435acc9bb6523536?s=90
IP 192.0.73.2:0
File type PNG image data, 90 x 90, 8-bit/color RGBA, non-interlaced\012- data
Hash 4d8b99fd51185a556f7936e255f3207d
cb303b621a93b3dd93f32b783d8bab1f5f08a513
d372442fcc757c4c486a6258c75bf48701209c23e17b62d8febb5d76fc0913bd
GET /avatar/ad516503a11cd5ca435acc9bb6523536?s=90 HTTP/1.1
Host: 1.gravatar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.ilportoappartamenti.com/
Connection: keep-alive
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 28 Nov 2022 16:48:23 GMT
Content-Type: image/png
Content-Length: 1379
Connection: keep-alive
Last-Modified: Sat, 01 Mar 2008 02:44:06 GMT
Link: <https://www.gravatar.com/avatar/ad516503a11cd5ca435acc9bb6523536?s=90>; rel="canonical"
Content-Disposition: inline; filename="ad516503a11cd5ca435acc9bb6523536.png"
Access-Control-Allow-Origin: *
Expires: Mon, 28 Nov 2022 16:53:23 GMT
Cache-Control: max-age=300
X-nc: HIT arn 1
Accept-Ranges: bytes
www.google-analytics.com/r/__utm.gif?utmwv=5.7.2&utms=1&utmn=1529370432&utmhn=www.ilportoappartamenti.com&utmcs=UTF-8&utmsr=1280x1024&utmvp=1268x939&utmsc=24-bit&utmul=en-us&utmje=0&utmfl=-&utmdt=IL%20PORTO%20%E2%80%93%20info%20offerte%20e%20promozioni%20-%20Il%20Porto%20Appartamenti%20Vacanza&utmhid=754582120&utmr=-&utmp=%2Finfo-offerte%2F&utmht=1669654102965&utmac=UA-42166297-6&utmcc=__utma%3D43408125.1219902187.1669654103.1669654103.1669654103.1%3B%2B__utmz%3D43408125.1669654103.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmjid=1413576407&utmredir=1&utmu=qAAAAAAAAAAAAAAAAAAAAAAE~
142.250.74.174200 OK 35 B URL HTTP/1.1 www.google-analytics.com/r/__utm.gif?utmwv=5.7.2&utms=1&utmn=1529370432&utmhn=www.ilportoappartamenti.com&utmcs=UTF-8&utmsr=1280x1024&utmvp=1268x939&utmsc=24-bit&utmul=en-us&utmje=0&utmfl=-&utmdt=IL%20PORTO%20%E2%80%93%20info%20offerte%20e%20promozioni%20-%20Il%20Porto%20Appartamenti%20Vacanza&utmhid=754582120&utmr=-&utmp=%2Finfo-offerte%2F&utmht=1669654102965&utmac=UA-42166297-6&utmcc=__utma%3D43408125.1219902187.1669654103.1669654103.1669654103.1%3B%2B__utmz%3D43408125.1669654103.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmjid=1413576407&utmredir=1&utmu=qAAAAAAAAAAAAAAAAAAAAAAE~
IP 142.250.74.174:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28d6814f309ea289f847c69cf91194c6
0f4e929dd5bb2564f7ab9c76338e04e292a42ace
8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
GET /r/__utm.gif?utmwv=5.7.2&utms=1&utmn=1529370432&utmhn=www.ilportoappartamenti.com&utmcs=UTF-8&utmsr=1280x1024&utmvp=1268x939&utmsc=24-bit&utmul=en-us&utmje=0&utmfl=-&utmdt=IL%20PORTO%20%E2%80%93%20info%20offerte%20e%20promozioni%20-%20Il%20Porto%20Appartamenti%20Vacanza&utmhid=754582120&utmr=-&utmp=%2Finfo-offerte%2F&utmht=1669654102965&utmac=UA-42166297-6&utmcc=__utma%3D43408125.1219902187.1669654103.1669654103.1669654103.1%3B%2B__utmz%3D43408125.1669654103.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmjid=1413576407&utmredir=1&utmu=qAAAAAAAAAAAAAAAAAAAAAAE~ HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ilportoappartamenti.com/
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Date: Mon, 28 Nov 2022 16:48:23 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
X-Content-Type-Options: nosniff
Content-Type: image/gif
Cross-Origin-Resource-Policy: cross-origin
Server: Golfe2
Content-Length: 35
hydrahydra.kim/fetch.php?tracker=adsnet.work&site=aHR0cDovL3d3dy5pbHBvcnRvYXBwYXJ0YW1lbnRpLmNvbS9pbmZvLW9mZmVydGUv
193.3.19.36200 OK 0 B URL HTTP/1.1 hydrahydra.kim/fetch.php?tracker=adsnet.work&site=aHR0cDovL3d3dy5pbHBvcnRvYXBwYXJ0YW1lbnRpLmNvbS9pbmZvLW9mZmVydGUv
IP 193.3.19.36:0
ASN #50340 OOO Network of data-centers Selectel
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /fetch.php?tracker=adsnet.work&site=aHR0cDovL3d3dy5pbHBvcnRvYXBwYXJ0YW1lbnRpLmNvbS9pbmZvLW9mZmVydGUv HTTP/1.1
Host: hydrahydra.kim
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ilportoappartamenti.com/
HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 16:48:23 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips mod_fcgid/2.3.9 PHP/5.4.16
X-Powered-By: PHP/7.4.26
Access-Control-Allow-Origin: *
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash fb9963af5b3c525d68d5c87f0da8025b
c8d1f50313dddb0cea04745d762dac01718a026f
231ef2bc126d4f0cf0910147608f65ec32ee15f3cfdb6981f5fae66f33cfc519
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 16:48:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-89531391-50&cid=1219902187.1669654103&jid=405052825&gjid=1940880978&_gid=1509594298.1669654103&_u=IQBCAEAAAAAAACAAI~&z=690970256
142.251.1.157200 OK 1 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-89531391-50&cid=1219902187.1669654103&jid=405052825&gjid=1940880978&_gid=1509594298.1669654103&_u=IQBCAEAAAAAAACAAI~&z=690970256
IP 142.251.1.157:0
File type very short file (no magic)
Hash c4ca4238a0b923820dcc509a6f75849b
356a192b7913b04c54574d18c28d46e6395428ab
6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-89531391-50&cid=1219902187.1669654103&jid=405052825&gjid=1940880978&_gid=1509594298.1669654103&_u=IQBCAEAAAAAAACAAI~&z=690970256 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: http://www.ilportoappartamenti.com
Connection: keep-alive
Referer: http://www.ilportoappartamenti.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: http://www.ilportoappartamenti.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Mon, 28 Nov 2022 16:48:24 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 1
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash fb9963af5b3c525d68d5c87f0da8025b
c8d1f50313dddb0cea04745d762dac01718a026f
231ef2bc126d4f0cf0910147608f65ec32ee15f3cfdb6981f5fae66f33cfc519
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 16:48:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
maps.google.com/maps-api-v3/api/js/51/1/common.js
216.58.211.14200 OK 254 kB URL HTTP/1.1 maps.google.com/maps-api-v3/api/js/51/1/common.js
IP 216.58.211.14:0
File type ASCII text, with very long lines (581)
Size 254 kB (254250 bytes)
Hash e39ea0b6a59026e9c9a623f639661f9b
6dc69b58001aa7bde94cb7572fa14665e356c29b
db099e95eb910c80a88cff3a375d59c4533d74c328b5c94189fe32f0b0ae28a1
GET /maps-api-v3/api/js/51/1/common.js HTTP/1.1
Host: maps.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ilportoappartamenti.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Vary: Accept-Encoding, Origin
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/maps-api-js
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="maps-api-js"
Report-To: {"group":"maps-api-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/maps-api-js"}]}
Content-Length: 254250
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Tue, 22 Nov 2022 15:24:23 GMT
Expires: Wed, 22 Nov 2023 15:24:23 GMT
Cache-Control: public, max-age=31536000
Last-Modified: Mon, 14 Nov 2022 21:36:50 GMT
Content-Type: text/javascript
Age: 523444
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa57bc6cf-beaa-443b-9756-cf26e4fe3767.jpeg
34.120.237.76200 OK 7.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa57bc6cf-beaa-443b-9756-cf26e4fe3767.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2212cf75f99dc67fd45db47f7101d754
4b4a8c8e8aeccfff25d2748720dcef8fed287126
7b2d2e302faba8f273b51031fa48b444cb7839733b90e8c9d077ca63637320d8
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa57bc6cf-beaa-443b-9756-cf26e4fe3767.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 6954
x-amzn-requestid: 94a02687-72f2-4796-a7ea-d3f28b412566
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b1jHpGBVIAMFsSg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63787efd-22666b18283ae59b1348bf47;Sampled=0
x-amzn-remapped-date: Sat, 19 Nov 2022 07:00:13 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: feZayJeKq9jWHQ-rjutNr6buIjLVeIdY0A_ZeGo6NKgoQ6BBT3XQaw==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 0906d4887f6625f4a4467d8d4fd268d2.cloudfront.net (CloudFront), 1.1 google
date: Mon, 28 Nov 2022 08:55:37 GMT
age: 28373
etag: "4b4a8c8e8aeccfff25d2748720dcef8fed287126"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
maps.google.com/maps-api-v3/api/js/51/1/util.js
216.58.211.14200 OK 0 B URL HTTP/1.1 maps.google.com/maps-api-v3/api/js/51/1/util.js
IP 216.58.211.14:0
GET /maps-api-v3/api/js/51/1/util.js HTTP/1.1
Host: maps.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ilportoappartamenti.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Vary: Accept-Encoding, Origin
Content-Encoding: gzip
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/maps-api-js
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="maps-api-js"
Report-To: {"group":"maps-api-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/maps-api-js"}]}
Content-Length: 62575
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Tue, 22 Nov 2022 22:12:45 GMT
Expires: Wed, 22 Nov 2023 22:12:45 GMT
Cache-Control: public, max-age=31536000
Last-Modified: Mon, 14 Nov 2022 21:36:50 GMT
Content-Type: text/javascript
Age: 498942