Overview

URLvodafone-internet.it/
IP 185.81.6.235 (Italy)
ASN#52030 Server Plan S.r.l.
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed2023-02-06 12:51:51 UTC
StatusLoading report..
IDS alerts0
Blocklist alert32
urlquery alerts No alerts detected
Tags None

Domain Summary (12)

Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
www.googletagmanager.com (1) 75 2012-10-04 01:07:32 UTC 2023-02-05 22:12:56 UTC 142.250.74.168
img-getpocket.cdn.mozilla.net (6) 1631 2017-09-01 03:40:57 UTC 2023-02-05 17:44:26 UTC 34.120.237.76
cookiehub.net (2) 49609 2018-11-07 21:21:05 UTC 2023-02-05 13:33:02 UTC 143.204.55.105
firefox.settings.services.mozilla.com (2) 867 2020-05-25 20:06:39 UTC 2023-02-05 17:15:56 UTC 35.241.9.150
content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2023-02-05 17:31:26 UTC 34.160.144.191
contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2023-02-05 17:13:20 UTC 34.117.237.239
cdn.usefathom.com (2) 35845 2018-08-31 10:04:23 UTC 2023-02-06 06:34:51 UTC 194.242.11.186
push.services.mozilla.com (1) 2140 2014-10-24 08:27:06 UTC 2023-02-05 17:38:54 UTC 44.228.217.71
pagead2.googlesyndication.com (1) 101 2012-05-21 07:15:40 UTC 2023-02-05 23:21:29 UTC 142.250.74.130
vodafone-internet.it (21) 0 2022-07-01 22:03:52 UTC 2023-02-04 14:16:23 UTC 185.81.6.235 Unknown ranking
r3.o.lencr.org (9) 344 2020-12-02 08:52:13 UTC 2023-02-05 17:17:28 UTC 23.33.119.27
ocsp.pki.goog (6) 175 2017-06-14 07:23:31 UTC 2023-02-05 17:12:16 UTC 142.250.74.131

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
Scan Date Severity Indicator Comment
2023-02-02 2 vodafone-internet.it/ Generic/Spear Phishing
2023-02-02 2 vodafone-internet.it/ Generic/Spear Phishing
2023-02-02 2 vodafone-internet.it/ Generic/Spear Phishing
2023-02-02 2 vodafone-internet.it/ Generic/Spear Phishing
2023-02-02 2 vodafone-internet.it/ Generic/Spear Phishing
2023-02-02 2 vodafone-internet.it/ Generic/Spear Phishing
2023-02-02 2 vodafone-internet.it/ Generic/Spear Phishing
2023-02-02 2 vodafone-internet.it/ Generic/Spear Phishing
2023-02-02 2 vodafone-internet.it/ Generic/Spear Phishing
2023-02-02 2 vodafone-internet.it/ Generic/Spear Phishing
2023-02-02 2 vodafone-internet.it/ Generic/Spear Phishing
2023-02-02 2 vodafone-internet.it/ Generic/Spear Phishing
2023-02-02 2 vodafone-internet.it/ Generic/Spear Phishing
2023-02-02 2 vodafone-internet.it/ Generic/Spear Phishing
2023-02-02 2 vodafone-internet.it/ Generic/Spear Phishing
2023-02-02 2 vodafone-internet.it/ Generic/Spear Phishing
2023-02-02 2 vodafone-internet.it/ Generic/Spear Phishing
2023-02-02 2 vodafone-internet.it/ Generic/Spear Phishing
2023-02-02 2 vodafone-internet.it/ Generic/Spear Phishing
2023-02-02 2 vodafone-internet.it/ Generic/Spear Phishing
2023-02-02 2 vodafone-internet.it/ Generic/Spear Phishing

PhishTank
 No alerts detected

Fortinet's Web Filter
Scan Date Severity Indicator Comment
2023-02-06 2 vodafone-internet.it/ Phishing
2023-02-06 2 vodafone-internet.it/ Phishing
2023-02-06 2 vodafone-internet.it/img/vodafonelogo.webp Phishing
2023-02-06 2 vodafone-internet.it/img/bollinoverde.svg Phishing
2023-02-06 2 vodafone-internet.it/vendor/bootstrap/js/bootstrap.bundle.min.js Phishing
2023-02-06 2 vodafone-internet.it/card/vendor/bootstrap-wizard/bootstrap.min.js Phishing
2023-02-06 2 vodafone-internet.it/vendor/jquery/jquery.min.js Phishing
2023-02-06 2 vodafone-internet.it/card/vendor/jquery/jquery.min.js Phishing
2023-02-06 2 vodafone-internet.it/card/vendor/bootstrap-wizard/jquery.bootstrap.wizard.min.js Phishing
2023-02-06 2 vodafone-internet.it/card/vendor/jquery-validate/jquery.validate.min.js Phishing
2023-02-06 2 vodafone-internet.it/card/js/global.js Phishing

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected

ThreatFox
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 2 reports on IP: 185.81.6.235
Date UQ / IDS / BL URL IP
2023-03-11 17:48:56 +0000 0 - 0 - 30 vodafone-internet.it/ 185.81.6.235
2023-02-06 12:51:51 +0000 0 - 0 - 32 vodafone-internet.it/ 185.81.6.235


Last 5 reports on ASN: Server Plan S.r.l.
Date UQ / IDS / BL URL IP
2023-03-26 06:38:30 +0000 0 - 1 - 0 whatbot.net/dwl/WhatBotPlus.exe?id=22112022 185.81.4.109
2023-03-25 21:40:09 +0000 0 - 1 - 1 refineair.org/od/DE3.zip 93.95.216.131
2023-03-24 23:36:58 +0000 0 - 0 - 1 20rn.weec2019.org.weec2019.org/ 185.81.2.116
2023-03-24 22:31:13 +0000 0 - 0 - 22 circuitoitinera.com/ 86.107.32.105
2023-03-24 15:40:24 +0000 0 - 0 - 42 giannobile.eu/ 185.81.4.195


Last 5 reports on domain: vodafone-internet.it
Date UQ / IDS / BL URL IP
2023-03-11 17:48:56 +0000 0 - 0 - 30 vodafone-internet.it/ 185.81.6.235
2023-02-24 07:01:10 +0000 0 - 0 - 57 vodafone-internet.it/ 104.26.11.31
2023-02-06 12:51:51 +0000 0 - 0 - 32 vodafone-internet.it/ 185.81.6.235
2023-02-02 15:15:15 +0000 0 - 0 - 34 vodafone-internet.it/ 86.107.32.83
2022-12-19 18:18:41 +0000 0 - 0 - 10 vodafone-internet.it/ 86.107.32.83


Last 4 reports with similar screenshot
Date UQ / IDS / BL URL IP
2023-02-02 15:15:15 +0000 0 - 0 - 34 vodafone-internet.it/ 86.107.32.83
2022-12-19 18:18:41 +0000 0 - 0 - 10 vodafone-internet.it/ 86.107.32.83
2023-02-24 07:01:10 +0000 0 - 0 - 57 vodafone-internet.it/ 104.26.11.31
2023-03-11 17:48:56 +0000 0 - 0 - 30 vodafone-internet.it/ 185.81.6.235

JavaScript

Executed Scripts (13)

Executed Evals (0)

Executed Writes (0)


HTTP Transactions (53)


Request Response
                                        
                                            GET / HTTP/1.1 
Host: vodafone-internet.it
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         185.81.6.235
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Mon, 06 Feb 2023 12:51:40 GMT
Server: Apache
Location: https://vodafone-internet.it/
Content-Length: 237
Keep-Alive: timeout=1, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   237
Md5:    c8cdb7383856d7253aa92edadb708782
Sha1:   5d1eae32c59eb82420b2d7e7eed723ee007b520c
Sha256: 3cc806f7e16eff0088fabda6df6bf668a146b385904bed5b2a3da871c0ba666c

Alerts:
  Blocklists:
    - openphish: Generic/Spear Phishing
    - fortinet: Phishing
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.33.119.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "9BD0795B30E84CE63B6E2A365CA91BBFFC395DD955E112152066C31E63A4AB66"
Last-Modified: Sat, 04 Feb 2023 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12084
Expires: Mon, 06 Feb 2023 16:13:05 GMT
Date: Mon, 06 Feb 2023 12:51:41 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.33.119.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "01626C18E1E68507AA33EF7448DBC3311901AB6F29ADC2F51D449409B0680DCE"
Last-Modified: Sun, 05 Feb 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15119
Expires: Mon, 06 Feb 2023 17:03:40 GMT
Date: Mon, 06 Feb 2023 12:51:41 GMT
Connection: keep-alive

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Backoff, Alert, Content-Length
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Mon, 06 Feb 2023 12:34:04 GMT
age: 1057
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    bf0c602d32b3c14606f22a86183b5e3c
Sha1:   6eabd8d83475eba731968abe1a05a8bfd272f160
Sha256: 6c6a7c519a9e950c2445ed874a25211a94dd4d3cf3afb0103af9dcd1dbd5ff9e
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.33.119.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "763F58B9FB838378C92033B59907B036F4C33081F5103D9BCC2CA2A8DE500D64"
Last-Modified: Sat, 04 Feb 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6725
Expires: Mon, 06 Feb 2023 14:43:46 GMT
Date: Mon, 06 Feb 2023 12:51:41 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
x-amz-id-2: UUB3ejiugPbpatcDgcjnOlHtPA0yHo0bmrUVGXQmKBVM58uQf17KVeezAxTzJlRhAom46ZOPxqk=
x-amz-request-id: 4QX36AXN9H5T8YRM
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 06 Feb 2023 12:24:56 GMT
age: 1605
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    7b922915ebf1fa3639b333f994c74f24
Sha1:   144a3f80b98fd0652d4614f24cf6cbbee40f8938
Sha256: adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Mon, 06 Feb 2023 12:51:41 GMT
content-length: 12
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET / HTTP/1.1 
Host: vodafone-internet.it
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

search
                                         185.81.6.235
HTTP/2 200 OK
content-type: text/html
                                        
last-modified: Sat, 04 Feb 2023 15:23:04 GMT
etag: "180e25-85b6-5f3e15fcd500f-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 7158
date: Mon, 06 Feb 2023 12:51:41 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (387), with CRLF line terminators
Size:   7158
Md5:    ff04de5265963b008798053d985a8a8a
Sha1:   774610a883de4314fc659bcccd80d158e4613e00
Sha256: 4b5fdd6abea7d77423deec3bae3068511597e378b5c95a077831130416132f35

Alerts:
  Blocklists:
    - openphish: Generic/Spear Phishing
    - fortinet: Phishing
                                        
                                            GET /img/unlimited.png HTTP/1.1 
Host: vodafone-internet.it
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vodafone-internet.it/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.81.6.235
HTTP/2 200 OK
content-type: image/png
                                        
last-modified: Tue, 25 Oct 2022 09:52:44 GMT
etag: "181a25-3e6-5ebd8de9ffe6d"
accept-ranges: bytes
content-length: 998
date: Mon, 06 Feb 2023 12:51:41 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 36 x 36, 8-bit/color RGBA, non-interlaced\012- data
Size:   998
Md5:    dda6c80d05006e0950bd4d4f5e04fe45
Sha1:   b8424b92699585d3c90977bd25a3a374f5cbf082
Sha256: 8c62684e5e54c94d701c2cd9e611d371415ae5d4a44fbb38cf4ebeff92ed3144

Alerts:
  Blocklists:
    - openphish: Generic/Spear Phishing
                                        
                                            GET /vendor/bootstrap/css/bootstrap.min.css HTTP/1.1 
Host: vodafone-internet.it
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vodafone-internet.it/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.81.6.235
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Tue, 28 Jun 2022 19:22:36 GMT
etag: "1a073c-27288-5e286f5823700-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 23916
date: Mon, 06 Feb 2023 12:51:41 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65326)
Size:   23916
Md5:    89615fe7d49bd6546a64456a7d3c804d
Sha1:   6470bc374c9380960a0c4acf54f8ecd1a9f9faaf
Sha256: 271463e90b4fb1cc2c58c80f122c0b3714cf13ab6e6ca94d477e4ea51644396a

Alerts:
  Blocklists:
    - openphish: Generic/Spear Phishing
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 06 Feb 2023 12:51:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /img/Fwa.png HTTP/1.1 
Host: vodafone-internet.it
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vodafone-internet.it/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.81.6.235
HTTP/2 200 OK
content-type: image/png
                                        
last-modified: Fri, 23 Sep 2022 09:07:53 GMT
etag: "1819e8-9fa-5e954835cbeb1"
accept-ranges: bytes
content-length: 2554
date: Mon, 06 Feb 2023 12:51:41 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 108 x 108, 8-bit/color RGBA, non-interlaced\012- data
Size:   2554
Md5:    ae4edf2d94b4123d60ee99d94f3c6d88
Sha1:   de0cc335f401e5acbd5b3253e9f74585ca8ce60f
Sha256: 6e96ef71d6ffb55468d68477ee86c90d556233c009f775ab6869dfa4151aa4e1

Alerts:
  Blocklists:
    - openphish: Generic/Spear Phishing
                                        
                                            GET /img/insieme.png HTTP/1.1 
Host: vodafone-internet.it
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vodafone-internet.it/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.81.6.235
HTTP/2 200 OK
content-type: image/png
                                        
last-modified: Mon, 14 Nov 2022 11:51:16 GMT
etag: "181a17-be3-5ed6cdb61ee35"
accept-ranges: bytes
content-length: 3043
date: Mon, 06 Feb 2023 12:51:41 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 144 x 144, 8-bit/color RGBA, non-interlaced\012- data
Size:   3043
Md5:    7eb9a8810a5a45a5771b85c523b469c7
Sha1:   f6b223015946789663f3f5dc6e7c3e6383985a18
Sha256: 5f071d6247717e871019a3bb1c5a9d14dc21c4756a058dcbaf0f800662d08dc0

Alerts:
  Blocklists:
    - openphish: Generic/Spear Phishing
                                        
                                            GET /img/semplice.png HTTP/1.1 
Host: vodafone-internet.it
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vodafone-internet.it/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.81.6.235
HTTP/2 200 OK
content-type: image/png
                                        
last-modified: Tue, 28 Jun 2022 19:34:42 GMT
etag: "181a20-e42-5e28720c81880"
accept-ranges: bytes
content-length: 3650
date: Mon, 06 Feb 2023 12:51:41 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 171 x 168, 8-bit colormap, interlaced\012- data
Size:   3650
Md5:    13b24c13ef5824f3b20052cc0e362719
Sha1:   e04b9ee99a273dc983647096edc260a65a8546ce
Sha256: 8c3214f6a4024e08b74f349aea9bc3e24ee5725cbd062447f3593499abb3837c

Alerts:
  Blocklists:
    - openphish: Generic/Spear Phishing
                                        
                                            GET /img/vodafonelogo.webp HTTP/1.1 
Host: vodafone-internet.it
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vodafone-internet.it/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.81.6.235
HTTP/2 200 OK
content-type: image/webp
                                        
last-modified: Wed, 06 Jul 2022 23:23:42 GMT
etag: "181a2d-153c-5e32b42858354-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 4880
date: Mon, 06 Feb 2023 12:51:41 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   4880
Md5:    143b4e078fa31bb76dd07289c00c4a5c
Sha1:   4134ec3e10c7fd971c2b33e885eeb53b396e7267
Sha256: 616930b6c659cc917bf8bf270289e1ec24f559a573809377894631f057e63ca9

Alerts:
  Blocklists:
    - openphish: Generic/Spear Phishing
    - fortinet: Phishing
                                        
                                            GET /img/icozerocosti.png HTTP/1.1 
Host: vodafone-internet.it
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vodafone-internet.it/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.81.6.235
HTTP/2 200 OK
content-type: image/png
                                        
last-modified: Tue, 28 Jun 2022 19:22:36 GMT
etag: "181a16-171c-5e286f5823700"
accept-ranges: bytes
content-length: 5916
date: Mon, 06 Feb 2023 12:51:41 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 168 x 168, 8-bit/color RGBA, non-interlaced\012- data
Size:   5916
Md5:    258cd9f92bcc11d18deb3a3d6f89151c
Sha1:   3d9780e34560b0cc97d34d1d55416c5d58a6ac36
Sha256: 685c5b78f75f09da6e9f89c1380ef0431fed8c9a9649e4c39356026704277f43

Alerts:
  Blocklists:
    - openphish: Generic/Spear Phishing
                                        
                                            GET /card/css/main.css HTTP/1.1 
Host: vodafone-internet.it
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vodafone-internet.it/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.81.6.235
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Thu, 22 Sep 2022 09:15:06 GMT
etag: "1819de-3165-5e9407f508f87-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 2668
date: Mon, 06 Feb 2023 12:51:41 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   2668
Md5:    0d45aea69c9d7854e7619d26400f2832
Sha1:   ce02df8ce1d17b0cc4c7463bd82f37260ba12632
Sha256: fee95eac02863712153dc31267a13d068635d971e325fd50f6912497838d5c9c

Alerts:
  Blocklists:
    - openphish: Generic/Spear Phishing
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.33.119.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "8D5B2334319801CA021B15BE745E91176AE9A387A7A2D439E01310C34C38D32F"
Last-Modified: Sun, 05 Feb 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2394
Expires: Mon, 06 Feb 2023 13:31:35 GMT
Date: Mon, 06 Feb 2023 12:51:41 GMT
Connection: keep-alive

                                        
                                            GET /css/landing-page.min.css HTTP/1.1 
Host: vodafone-internet.it
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vodafone-internet.it/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.81.6.235
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Wed, 06 Jul 2022 23:29:24 GMT
etag: "1819e7-766-5e32b56e153c3-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 642
date: Mon, 06 Feb 2023 12:51:41 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1656)
Size:   642
Md5:    824936d72c7a93cee79c49b69c6711e9
Sha1:   eac13fda862da1636ac104977f9e98858cbd665c
Sha256: 1da5aa57c4d78eebe2295aa8faefaf3e9027f572adeedb6e9bb27dbfc5611bb8

Alerts:
  Blocklists:
    - openphish: Generic/Spear Phishing
                                        
                                            GET /img/bollinoverde.svg HTTP/1.1 
Host: vodafone-internet.it
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vodafone-internet.it/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.81.6.235
HTTP/2 200 OK
content-type: image/svg+xml
                                        
last-modified: Tue, 28 Jun 2022 19:22:36 GMT
etag: "181a02-578-5e286f5823700-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 638
date: Mon, 06 Feb 2023 12:51:41 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- HTML document, ASCII text
Size:   638
Md5:    090d57ffd60bcf545683ed572fd4ee7b
Sha1:   f75e83a823730e6dbff6b269f71a27e73b2a8f41
Sha256: 179f5b01afa24ff51fa08d57aa03a71b50a6ffd1136b8c7cb193fdb76513c526

Alerts:
  Blocklists:
    - openphish: Generic/Spear Phishing
    - fortinet: Phishing
                                        
                                            GET /gtag/js?id=AW-10935671887 HTTP/1.1 
Host: www.googletagmanager.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vodafone-internet.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.168
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 06 Feb 2023 12:51:41 GMT
expires: Mon, 06 Feb 2023 12:51:41 GMT
cache-control: private, max-age=900
last-modified: Mon, 06 Feb 2023 12:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 65939
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (4048)
Size:   65939
Md5:    4b5aa01143f8972ad217897698078cbf
Sha1:   a078e94290c1c85f89f1b8dbf1a09f574a77cc0f
Sha256: 711b023cef8bf40d74f3b5f08e103916b444ec6fe4423eb42616dc1bc2a44799
                                        
                                            GET /vendor/bootstrap/js/bootstrap.bundle.min.js HTTP/1.1 
Host: vodafone-internet.it
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vodafone-internet.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.81.6.235
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Tue, 28 Jun 2022 19:22:36 GMT
etag: "1a0740-148b8-5e286f5823700-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 21804
date: Mon, 06 Feb 2023 12:51:41 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65299)
Size:   21804
Md5:    740c84bdec4ddb8462c86a7a1e4b5e82
Sha1:   1f83ac50a77da1d784f9596466b436cce90bc774
Sha256: 73cfc5b732c42973cc81b5b0da06daf83db28921836ab79f1ce9046db162cbc0

Alerts:
  Blocklists:
    - openphish: Generic/Spear Phishing
    - fortinet: Phishing
                                        
                                            GET /card/vendor/bootstrap-wizard/bootstrap.min.js HTTP/1.1 
Host: vodafone-internet.it
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vodafone-internet.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.81.6.235
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Tue, 28 Jun 2022 19:22:36 GMT
etag: "1819e1-875d-5e286f5823700-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 9223
date: Mon, 06 Feb 2023 12:51:41 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (32108)
Size:   9223
Md5:    fd7ee4bc8f21678e6962e3ea808e0e8d
Sha1:   329e5ca00433bac4bff49e1bd27de4c636d12700
Sha256: 06a1da7ad3af90ac203629fbd8f4a5741f103f721aae847c8f70329a8ac20262

Alerts:
  Blocklists:
    - openphish: Generic/Spear Phishing
    - fortinet: Phishing
                                        
                                            GET /vendor/jquery/jquery.min.js HTTP/1.1 
Host: vodafone-internet.it
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vodafone-internet.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.81.6.235
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Tue, 28 Jun 2022 19:22:38 GMT
etag: "1a0763-15d84-5e286f5a0bb80-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 30910
date: Mon, 06 Feb 2023 12:51:41 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65451)
Size:   30910
Md5:    888c5fa4504182a0224b264a1fda0e73
Sha1:   65f058a7dead59a8063362241865526eb0148f16
Sha256: 7d757e510b1f0c4d44fd98cc0121da8ca4f44793f8583debdef300fb1dbd3715

Alerts:
  Blocklists:
    - openphish: Generic/Spear Phishing
    - fortinet: Phishing
                                        
                                            GET /card/vendor/jquery/jquery.min.js HTTP/1.1 
Host: vodafone-internet.it
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vodafone-internet.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.81.6.235
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Tue, 28 Jun 2022 19:22:36 GMT
etag: "1a0729-15287-5e286f5823700-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 30147
date: Mon, 06 Feb 2023 12:51:41 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (32058), with CRLF line terminators
Size:   30147
Md5:    9be8097803999b702fa83ec17dd66984
Sha1:   283299e8c5a59c73e949e4a275e0a70f9cf08f9f
Sha256: c3702d18d04969c4d2c56a024a957ed897ec418bc15d66cea9eca0f1101a0c48

Alerts:
  Blocklists:
    - openphish: Generic/Spear Phishing
    - fortinet: Phishing
                                        
                                            GET /card/vendor/bootstrap-wizard/jquery.bootstrap.wizard.min.js HTTP/1.1 
Host: vodafone-internet.it
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vodafone-internet.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.81.6.235
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Tue, 28 Jun 2022 19:22:36 GMT
etag: "1819e3-1b05-5e286f5823700-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 1842
date: Mon, 06 Feb 2023 12:51:41 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (527)
Size:   1842
Md5:    fb49ce276a061600e0d3585b3c5e2644
Sha1:   9d383bdc48d9408afcc7b21a5710d878b9196a58
Sha256: 13c195dc6855c6a873e395a160137c55f029920133c41b713c6e905710e1a4de

Alerts:
  Blocklists:
    - openphish: Generic/Spear Phishing
    - fortinet: Phishing
                                        
                                            GET /card/vendor/jquery-validate/jquery.validate.min.js HTTP/1.1 
Host: vodafone-internet.it
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vodafone-internet.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.81.6.235
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Tue, 28 Jun 2022 19:22:36 GMT
etag: "1a0727-5add-5e286f5823700-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 7502
date: Mon, 06 Feb 2023 12:51:41 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (23122)
Size:   7502
Md5:    a658066e859d78ed3e8e9a6cc59ada04
Sha1:   ebafea8979cd5e63c4ab252364a3cf7653008457
Sha256: b1c168c4f75a6107b7e7b4e0b747a69203e3f9ec55996d9e7a9bf41daf4be8b2

Alerts:
  Blocklists:
    - openphish: Generic/Spear Phishing
    - fortinet: Phishing
                                        
                                            GET /card/js/global.js HTTP/1.1 
Host: vodafone-internet.it
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vodafone-internet.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.81.6.235
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Tue, 28 Jun 2022 19:22:36 GMT
etag: "1819e0-5fa-5e286f5823700-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 424
date: Mon, 06 Feb 2023 12:51:41 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   424
Md5:    ce77990a3dacdf6cb8e02dc9aa4261ff
Sha1:   4f8668a85c7d6c5b1a7bbb9d6a94592128e22de1
Sha256: 21dc0f4b5c10b611741ff8d55e1271c5111616d54c52adb1ca39e229150fdc80

Alerts:
  Blocklists:
    - openphish: Generic/Spear Phishing
    - fortinet: Phishing
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 06 Feb 2023 12:51:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Expires, Retry-After, Content-Length, Content-Type, ETag, Cache-Control, Alert, Pragma, Backoff, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Mon, 06 Feb 2023 12:51:19 GMT
age: 22
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: vodafone-internet.it
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vodafone-internet.it/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.81.6.235
HTTP/2 200 OK
content-type: image/x-icon
                                        
last-modified: Sat, 02 Jul 2022 09:20:33 GMT
etag: "1819d5-260-5e2cf03d4936f-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 631
date: Mon, 06 Feb 2023 12:51:41 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Size:   631
Md5:    4c0fcae0081fa020651a25843721e96c
Sha1:   e98ff3f0b66a24291119994af0071de52788aabf
Sha256: 49a6fe204061eed715bbc16b84d60de44f625a4234f777d2376947f4f6c732ba

Alerts:
  Blocklists:
    - openphish: Generic/Spear Phishing
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 06 Feb 2023 12:51:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /img/favicon-152.png HTTP/1.1 
Host: vodafone-internet.it
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vodafone-internet.it/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.81.6.235
HTTP/2 200 OK
content-type: image/png
                                        
last-modified: Fri, 16 Sep 2022 13:42:09 GMT
etag: "181a09-4e82-5e8cb87458083"
accept-ranges: bytes
content-length: 20098
date: Mon, 06 Feb 2023 12:51:41 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 152 x 152, 8-bit/color RGBA, non-interlaced\012- data
Size:   20098
Md5:    529fef145268bc9971225261c2c8db01
Sha1:   48d5c5e6343d4b36dea64220149bc98a65c846e7
Sha256: 1e50b135bb62de3d2d3036e0f0014826bf9433c760534d81bf83bf50fd37ef96

Alerts:
  Blocklists:
    - openphish: Generic/Spear Phishing
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 06 Feb 2023 12:51:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.33.119.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "54915C2F79822732E06A592D027DA421AD1E7A6458C545F98333DB25612B3DEA"
Last-Modified: Mon, 06 Feb 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9256
Expires: Mon, 06 Feb 2023 15:25:57 GMT
Date: Mon, 06 Feb 2023 12:51:41 GMT
Connection: keep-alive

                                        
                                            GET /?h=https%3A%2F%2Fvodafone-internet.it&p=%2F&r=&sid=YBYQZQOT&qs=%7B%7D&cid=32308428 HTTP/1.1 
Host: cdn.usefathom.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vodafone-internet.it/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         194.242.11.186
HTTP/2 200 OK
content-type: image/gif
                                        
date: Mon, 06 Feb 2023 12:51:42 GMT
content-length: 43
server: BunnyCDN-NO1-830
cdn-pullzone: 506217
cdn-uid: aa90c48b-f401-4fa1-aac1-c94c8f3ae560
cdn-requestcountrycode: NO
cache-control: public, max-age=0
pragma: no-cache
x-vapor-base64-encode: True
tk: N
cdn-proxyver: 1.03
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 02/06/2023 12:51:42
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: abc87ca51ab034c6ae7b5ecc2c9eba7e
cdn-cache: MISS
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    57f187c7a868faeac558007a8eb6cb2e
Sha1:   11ab10ab109fdb53d91d444ac781101f5a6360c6
Sha256: aa03dc59bdca72631d2301e4297cfa030bd31b907dc138e7b973d12311c90a22
                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: VAw68bvCiQ21A3V8RSLxbg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

search
                                         44.228.217.71
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 2kHtP7YUm/1XR8MH5+Jw1I1f7OU=

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 06 Feb 2023 12:51:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /pagead/landing?gcs=G100&gcd=G100&rnd=1396095550.1675687947&url=https%3A%2F%2Fvodafone-internet.it%2F&gtm=45be3210 HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://vodafone-internet.it
Connection: keep-alive
Referer: https://vodafone-internet.it/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0

search
                                         142.250.74.130
HTTP/2 200 OK
content-type: image/gif
                                        
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 06 Feb 2023 12:51:42 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 06 Feb 2023 12:51:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.33.119.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "0291ED72C3115D6B6CF8C001B13BBC4AD517D76242B6CBED9DB5EE1162572D3F"
Last-Modified: Sun, 05 Feb 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18989
Expires: Mon, 06 Feb 2023 18:08:12 GMT
Date: Mon, 06 Feb 2023 12:51:43 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.33.119.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "0291ED72C3115D6B6CF8C001B13BBC4AD517D76242B6CBED9DB5EE1162572D3F"
Last-Modified: Sun, 05 Feb 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18989
Expires: Mon, 06 Feb 2023 18:08:12 GMT
Date: Mon, 06 Feb 2023 12:51:43 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.33.119.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "0291ED72C3115D6B6CF8C001B13BBC4AD517D76242B6CBED9DB5EE1162572D3F"
Last-Modified: Sun, 05 Feb 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18989
Expires: Mon, 06 Feb 2023 18:08:12 GMT
Date: Mon, 06 Feb 2023 12:51:43 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.33.119.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "0291ED72C3115D6B6CF8C001B13BBC4AD517D76242B6CBED9DB5EE1162572D3F"
Last-Modified: Sun, 05 Feb 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18989
Expires: Mon, 06 Feb 2023 18:08:12 GMT
Date: Mon, 06 Feb 2023 12:51:43 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd3694634-2f5a-47ff-b75c-9cb394881acc.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 9808
x-amzn-requestid: 75cc8041-19f5-4994-96b6-b14d3c90ec6e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f4oiSFZAIAMF65g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e02141-355d272c345c8c37595b4bb2;Sampled=0
x-amzn-remapped-date: Sun, 05 Feb 2023 21:36:01 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: T7YlRZ936VEDkBvo2YKrS3GbyEh1xzC8W-50KiODzFjTnQb-hvkKpw==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 324a68a6c25ee50d774953f3e15a611c.cloudfront.net (CloudFront), 1.1 google
date: Sun, 05 Feb 2023 21:50:03 GMT
age: 54100
etag: "395f04af71767acc9516387c8b07bde08968fdfe"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9808
Md5:    ccc8078cc937b7de0b299bcee1496f1b
Sha1:   395f04af71767acc9516387c8b07bde08968fdfe
Sha256: cf959fc4a72d80dcab20c235bec6d21eadaab87efa7a8969744cd228628ba050
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F31cf5553-4c3f-4c6d-8dfb-d292e38275bb.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 9809
x-amzn-requestid: 533de5fa-8173-430e-a657-4386728723eb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fpc-VEGbIAMFSmg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63da0ec1-4e160c5c2a46d2913cc8e71e;Sampled=0
x-amzn-remapped-date: Wed, 01 Feb 2023 07:03:29 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: BgSfqU3WmIhR8N86AEfaU7pXN7jIKs_lKJVD6yCSaJBl5AVx13e5hw==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google
date: Sun, 05 Feb 2023 21:54:03 GMT
etag: "89c734d690981e30f9d566a7763a1870724d65aa"
age: 53860
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9809
Md5:    5f54c8725e5dab88b12d42876fa61b12
Sha1:   89c734d690981e30f9d566a7763a1870724d65aa
Sha256: b8cc5148ae01e1a1fe32f56bdce71de086da320cdd8a55a746609c9773fdaf77
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9ad60ff0-69ec-4be2-9334-41be71ca4b7f.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 10905
x-amzn-requestid: 093778fc-231c-452f-a6fc-15f4eb41ade0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fmNJCEDzIAMFmxA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d8c239-7f56d6e56392f373541db219;Sampled=0
x-amzn-remapped-date: Tue, 31 Jan 2023 07:24:41 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: WVfpilnwhnRXBhJkHBWjxxoP09f7SqlRk8CdWRWOubIIwe0CX89bUA==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 325ed3ba58a560748d886354beef39c0.cloudfront.net (CloudFront), 1.1 google
date: Sun, 05 Feb 2023 22:13:39 GMT
age: 52684
etag: "f29b9dc3f6bbd2ba76a5a4570ce044d5f240fd00"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10905
Md5:    1a4eed23b240d04a3cd6b085cfa93375
Sha1:   f29b9dc3f6bbd2ba76a5a4570ce044d5f240fd00
Sha256: 93e8371f80c12d3753842e36001dbb8d3dc2223b10a594639752cd816c492d4e
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F731dc7de-ce12-4639-9ceb-3218584c3d56.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 10514
x-amzn-requestid: ac2a383b-833d-4dae-9bd9-43dc3d9e373d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f4oiPEIyoAMFqUw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e02141-436bb6816b269ce45b9f8600;Sampled=0
x-amzn-remapped-date: Sun, 05 Feb 2023 21:36:01 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: RYNzle5-l5dOMPWb2Bmu_T5aIJw9NX2FKuJsej8hzpYZcgD6coH9SA==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Sun, 05 Feb 2023 21:50:09 GMT
age: 54094
etag: "1ff698b9cf660165e846dfc4770f29852aedce45"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10514
Md5:    9046d887fd45a0940e31a74173d17798
Sha1:   1ff698b9cf660165e846dfc4770f29852aedce45
Sha256: 0c7b0e1250aa7718b7b35b80a1442f62e94ace1fb578fb781ec8204ee96386d0
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8827daad-7b04-4c60-a6f6-c1b923025413.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 7851
x-amzn-requestid: 11d3fe95-844b-4e5d-b31c-f99e96e2b608
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f4oiRHeEIAMFjjA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e02141-602b91422dff88a750b8e3e9;Sampled=0
x-amzn-remapped-date: Sun, 05 Feb 2023 21:36:01 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 7LXNdWi5iKCUI61c2z3spsg5_DGu1jnZ4cIACc3MCmqWP57RveBMGw==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 9046e5a276a05e60ee34c8475e92b8e6.cloudfront.net (CloudFront), 1.1 google
date: Sun, 05 Feb 2023 21:50:03 GMT
age: 54100
etag: "afb91ab43953e8915a2169618d2ab5e330cde0a1"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7851
Md5:    13572f84ad268caedcc897f2ad7b9baf
Sha1:   afb91ab43953e8915a2169618d2ab5e330cde0a1
Sha256: 0fb8b09608dc293b2084953b948cc7d8a7aa7bcb525090a7e44d5cb2a725fab3
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7f49c6ce-40f8-40bf-9423-2de34118bace.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 8981
x-amzn-requestid: 0054e925-c381-4737-bd92-32b2af3a604e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f4oiQHRFoAMFw6w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e02141-45ea5ee33d07326c593d21d3;Sampled=0
x-amzn-remapped-date: Sun, 05 Feb 2023 21:36:01 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ixAMZh_xOYWVESJ0jOEPOXZ4GQBDUZZsh26yEDYfl8APcBF2x2sZYg==
via: 1.1 23206a1c229d8877bdd053c4b05f9d12.cloudfront.net (CloudFront), 1.1 1a53057db389e96b4ef1bfbc925dde1c.cloudfront.net (CloudFront), 1.1 google
date: Sun, 05 Feb 2023 21:50:03 GMT
age: 54100
etag: "809a42ce7c76cea0ce16af8172d852723c3a5f02"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8981
Md5:    714723c38877e0d1655c7118a88ec064
Sha1:   809a42ce7c76cea0ce16af8172d852723c3a5f02
Sha256: 6bad7253694d155de31a8f5a3c635545a39aac340ca49d1bc10efb6739d4a356
                                        
                                            GET /c2/f59855b3.js HTTP/1.1 
Host: cookiehub.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vodafone-internet.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         143.204.55.105
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Mon, 06 Feb 2023 12:51:42 GMT
last-modified: Mon, 23 Jan 2023 14:53:13 GMT
etag: W/"73cd5b5762afb213e886f62772db023f"
x-amz-version-id: wM2gV6gDN_MUaEHSWZoP3Vd_WyxZX4p9
server: AmazonS3
content-encoding: br
x-cache: Miss from cloudfront
via: 1.1 bb1da7862c4968b28920b91b324095c0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: OXX7EN13TXnOGQG3f0N2g7vDUlQh3IkRKHEECholek_Ih0kwol61nQ==
cache-control: max-age=86400
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /script.js HTTP/1.1 
Host: cdn.usefathom.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vodafone-internet.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         194.242.11.186
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Mon, 06 Feb 2023 12:51:41 GMT
server: BunnyCDN-NO1-830
cdn-pullzone: 506217
cdn-uid: aa90c48b-f401-4fa1-aac1-c94c8f3ae560
cdn-requestcountrycode: NO
vary: Accept-Encoding, Accept-Encoding
cache-control: public, max-age=0
etag: W/"d41d8cd98f00b204e9800998ecf8427e"
last-modified: Wed, 01 Feb 2023 19:49:01 GMT
x-vapor-base64-encode: True
cdn-proxyver: 1.03
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 02/03/2023 19:17:56
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: fcf8648206d79735d0b06941d1fa9e2a
cdn-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /c2/css/2.4.11.css HTTP/1.1 
Host: cookiehub.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vodafone-internet.it/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         143.204.55.105
HTTP/2 200 OK
content-type: text/css
                                        
date: Sun, 05 Feb 2023 18:16:46 GMT
last-modified: Wed, 21 Dec 2022 23:39:11 GMT
etag: W/"c9978fccc00e99b936b78b1afa12b71f"
x-amz-version-id: se9wT0DRsMu2YoXyXqnLY3kRTJTcqEPY
server: AmazonS3
content-encoding: gzip
x-cache: Hit from cloudfront
via: 1.1 bb1da7862c4968b28920b91b324095c0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Xb7WUWiPtxuDWoisSx9lWPr9OS2_CKtgdhj16I8gnCPWJLgwW6npgg==
age: 66896
cache-control: max-age=86400
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2


--- Additional Info ---