Report - www.kavazi.com/Titolari

Report Overview

Submitted URL
www.kavazi.com/Titolari_Nexi/
IP
184.168.98.69
ASN
#26496 AS-26496-GO-DADDY-COM-LLC
Submitted
2022-11-19 05:14:15
Access
Website Title
Final URL
Tags
None
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
30

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
r3.o.lencr.org	344	2020-12-02T09:52:13Z	2023-03-10T05:09:10Z	1.4 kB	3.5 kB	23.36.77.32
firefox.settings.services.mozilla.com	867	2020-06-04T22:08:41Z	2023-03-10T05:10:00Z	782 B	2.4 kB	34.102.187.140
push.services.mozilla.com	2140	2014-10-24T10:27:06Z	2023-03-10T05:10:02Z	606 B	127 B	52.42.74.230
www.kavazi.com	unknown	2020-02-10T00:16:30Z	2023-02-11T05:43:03Z	8.4 kB	614 kB	184.168.98.69
img1.wsimg.com	9893	2012-06-20T16:42:31Z	2023-03-10T11:02:46Z	760 B	605 B	23.36.79.43
ocsp.globalsign.com	2075	2012-07-20T19:46:16Z	2023-03-10T05:11:21Z	718 B	3.8 kB	104.18.20.226
events.api.secureserver.net	125179	2020-06-23T05:18:34Z	2023-03-10T13:35:24Z	2.1 kB	928 B	104.84.152.58
ocsp.digicert.com	86	2012-05-21T09:02:23Z	2023-03-10T13:49:44Z	682 B	1.5 kB	93.184.220.29
content-signature-2.cdn.mozilla.net	1152	2020-11-03T13:26:46Z	2023-03-10T05:12:35Z	413 B	5.9 kB	34.160.144.191
contile.services.mozilla.com	1114	2021-05-27T20:32:35Z	2023-03-10T05:10:00Z	333 B	229 B	34.117.237.239
img6.wsimg.com	15438	2020-02-20T08:56:58Z	2023-03-10T11:40:52Z	823 B	20 kB	23.36.79.43
img-getpocket.cdn.mozilla.net	1631	2018-06-22T01:36:00Z	2023-03-10T05:10:04Z	3.8 kB	61 kB	34.120.237.76
www.nexi.it	495401	2017-11-13T15:01:19Z	2023-03-10T09:23:18Z	820 B	27 kB	185.198.117.126

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

Scan Date	Severity	Indicator	Alert
2022-11-18	medium	www.kavazi.com/Titolari_Nexi/	CartaSi S.p.A

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2022-11-19	medium	www.kavazi.com/Titolari_Nexi/	Phishing
2022-11-19	medium	www.kavazi.com/Titolari_Nexi/Area%20Personale_files/logo--light-double.svg	Phishing
2022-11-19	medium	www.kavazi.com/Titolari_Nexi/Area%20Personale_files/app_store.svg	Phishing
2022-11-19	medium	www.kavazi.com/Titolari_Nexi/Area%20Personale_files/google_play.svg	Phishing
2022-11-19	medium	www.kavazi.com/Titolari_Nexi/Area%20Personale_files/jquery-3.5.1.min.js.download	Phishing
2022-11-19	medium	www.kavazi.com/Titolari_Nexi/Area%20Personale_files/icon-close.svg	Phishing
2022-11-19	medium	www.kavazi.com/Titolari_Nexi/Area%20Personale_files/ico-down-blue.svg	Phishing
2022-11-19	medium	www.kavazi.com/Titolari_Nexi/Area%20Personale_files/icon-close-white.svg	Phishing
2022-11-19	medium	www.kavazi.com/Titolari_Nexi/Area%20Personale_files/icon-blocked.svg	Phishing
2022-11-19	medium	www.kavazi.com/Titolari_Nexi/Area%20Personale_files/icon-phone-warning-white.svg	Phishing
2022-11-19	medium	www.kavazi.com/Titolari_Nexi/Area%20Personale_files/icon-phone.svg	Phishing
2022-11-19	medium	www.kavazi.com/Titolari_Nexi/Area%20Personale_files/fonts/karbon-regular-webfont.woff	Phishing
2022-11-19	medium	www.kavazi.com/Titolari_Nexi/Area%20Personale_files/fonts/karbon-semibold-webfont.woff	Phishing
2022-11-19	medium	www.kavazi.com/Titolari_Nexi/Area%20Personale_files/fonts/karbon-medium-webfont.woff	Phishing

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

JavaScript (4)

	URL	Size	First Seen	Last Seen
	www.kavazi.com/Titolari_Nexi/	345 B	2023-03-11	2023-03-11
Pretty URL www.kavazi.com/Titolari_Nexi/ IP 184.168.98.69 ASN #26496 AS-26496-GO-DADDY-COM-LLC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-11 14:18:44 Last Seen2023-03-11 14:27:42 Times Seen1 Hash de7f23c27a0b8879e1acd629c02f28cb 14689dd2711185b8f5a887438faa98191b0cd413 b97fd837dcc89e6465f466a8b9c7ce076bd253eb8cdc43071eb5fefa784cd9aa Loading...

	img1.wsimg.com/traffic-assets/js/tccl.min.js	46 kB	2023-03-07	2023-10-15
Pretty URL img1.wsimg.com/traffic-assets/js/tccl.min.js IP 23.36.79.43 ASN #20940 Akamai International B.V. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:41 Last Seen2023-10-15 17:43:59 Times Seen9 Hash 362d20193a8fed115f99b16a157b7fc4 011964518b319a5aa479bf5c38bb8e15dd56138e 6cb0efedc1729d965016a35584cb00b03aa46e1a5e170f4b3ce092c7c3e99ec7 Loading...

	img1.wsimg.com/traffic-assets/js/tccl-tti.min.js	25 kB	2023-03-07	2024-02-02
Pretty URL img1.wsimg.com/traffic-assets/js/tccl-tti.min.js IP 23.36.79.43 ASN #20940 Akamai International B.V. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:41 Last Seen2024-02-02 18:24:37 Times Seen8238 Hash ce554d2333f3801abafb32da18213ff7 ef2b32494849244d9b9d8c23178e082cec9eab7f 6e74c12390bdb48bf5b0bb295ceed4f68add11467d2472d983a42e3023ecf312 Loading...

	www.kavazi.com/Titolari_Nexi/Area%20Personale_files/jquery-3.5.1.min.js.download	90 kB	2023-03-07	2024-04-18
Pretty URL www.kavazi.com/Titolari_Nexi/Area%20Personale_files/jquery-3.5.1.min.js.download IP 184.168.98.69 ASN #26496 AS-26496-GO-DADDY-COM-LLC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:27 Last Seen2024-04-18 15:46:36 Times Seen4707 Hash 12b69d0ae6c6f0c42942ae6da2896e84 d2cc8d43ce1c854b1172e42b1209502ad563db83 6150a35c0f486c46cadf0e230e2aa159c7c23ecfbb5611b64ee3f25fcbff341f Loading...

HTTP Transactions (45)

URL IP Response Size

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
30c30d01178fc74ac5266ee64c3ee85b
c0c2af8a864c00aa85a8775d55f85ab107150a3b
c15644f69fbfeb99074c7e9711dfc9452ee164fa78eb981b6bae4fb7e3585f2a

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C15644F69FBFEB99074C7E9711DFC9452EE164FA78EB981B6BAE4FB7E3585F2A"
Last-Modified: Wed, 16 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6069
Expires: Sat, 19 Nov 2022 06:55:12 GMT
Date: Sat, 19 Nov 2022 05:14:03 GMT
Connection: keep-alive

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
67f53a639d57dd6237b5be86fe4f6c1b
287f09532dc331228d09c20b75f4160e91e9800a
41913a8af366685c42af59e9d8e02fccedbe68a3313d2d9fe353deb0c1019075

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3696
Cache-Control: max-age=109120
Content-Type: application/ocsp-response
Date: Sat, 19 Nov 2022 05:14:03 GMT
Etag: "63775eeb-1d7"
Expires: Sun, 20 Nov 2022 11:32:43 GMT
Last-Modified: Fri, 18 Nov 2022 10:31:07 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 471

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
e7724a1f27dc1b5b2fb63c7e486f74db
ef0ea648ce8bc189d31382baec4b181c724af93b
2a46916079563d95fa6a695104ebf41829ee95a156d6e4d45b9aef7231a8a80e

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2A46916079563D95FA6A695104EBF41829EE95A156D6E4D45B9AEF7231A8A80E"
Last-Modified: Fri, 18 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12532
Expires: Sat, 19 Nov 2022 08:42:55 GMT
Date: Sat, 19 Nov 2022 05:14:03 GMT
Connection: keep-alive

firefox.settings.services.mozilla.com/v1/

34.102.187.140

200 OK

939 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/
IP
34.102.187.140:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
567df7db606cf5d0871aa5bc9311b6da
4263faac7cbab2fcaf6661911dcad5091c06be17
e9650e1fdc46fc8678708ddcc37ab369c7a6d50489a004be896f20c7a3a644b0

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Content-Length, Alert, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 19 Nov 2022 04:44:52 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 1751
alt-svc: clear
X-Firefox-Spdy: h2

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain

34.160.144.191

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
34.160.144.191:0
ASN
#15169 GOOGLE

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
x-amz-id-2: hyYQl6zfVMb6HdZp08CZ/Vo6U2XcjMqTxEibLFMd12XVfn20yxJ+/5DRO6zEhOLBCH9Wd779k2LEb78x6UjV1g==
x-amz-request-id: 0NQJQXJJS669AYJN
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 19 Nov 2022 04:15:52 GMT
age: 3491
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Sat, 19 Nov 2022 05:14:03 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

34.102.187.140

200 OK

329 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
34.102.187.140:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size
329 B (329 bytes)
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Pragma, Alert, Content-Type, ETag, Retry-After, Last-Modified, Content-Length, Cache-Control, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 19 Nov 2022 04:44:49 GMT
cache-control: public,max-age=3600
age: 1755
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
fe40cc6ea871d80382b6082111393fbe
281f75d0a35dc8ef908bb0500e57abd86bd5388e
6d15422cdf7a6d72d06497188f27af893682314e82ac8a189a0ee2d798cb62d7

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3830
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 19 Nov 2022 05:14:04 GMT
Last-Modified: Sat, 19 Nov 2022 04:10:14 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 471

push.services.mozilla.com/

52.42.74.230

101 Switching Protocols

0 B

URL HTTP/1.1
push.services.mozilla.com/
IP
52.42.74.230:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: LNG0276uo9rJ4BD3kGv3Tg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: MtROyWqLGbcVkkvMAf0oL6MPQm4=

www.kavazi.com/Titolari_Nexi/

184.168.98.69

200 OK

35 kB

URL HTTP/2
www.kavazi.com/Titolari_Nexi/
IP
184.168.98.69:0
ASN
#26496 AS-26496-GO-DADDY-COM-LLC

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document, Unicode text, UTF-8 text, with very long lines (1484), with CRLF line terminators
Size
35 kB (35058 bytes)
Hash
08d4f56b7b2591fb00ef1a267092c516
8d53cf2158427f7ed415753b9c044e18a428e9cf
133930eadecc00fbd481bf1d565a43b7a8e954b3d4be7be837ff4d9334dd8257

Detections

Analyzer	Verdict	Alert
openphish	CartaSi S.p.A
fortinet	Phishing

HTTP Headers

GET /Titolari_Nexi/ HTTP/1.1
Host: www.kavazi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

HTTP/2 200 OK
x-powered-by: PHP/7.3.33
set-cookie: COOKIE_KEY=16688348445; expires=Tue, 16-Nov-2032 05:14:04 GMT; Max-Age=315360000
COOKIE_KEY=166883484486; expires=Tue, 16-Nov-2032 05:14:04 GMT; Max-Age=315360000
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 35058
content-type: text/html; charset=UTF-8
date: Sat, 19 Nov 2022 05:14:04 GMT
server: Apache
X-Firefox-Spdy: h2

www.kavazi.com/Titolari_Nexi/Area%20Personale_files/logo--light-double.svg

184.168.98.69

200 OK

796 B

URL HTTP/2
www.kavazi.com/Titolari_Nexi/Area%20Personale_files/logo--light-double.svg
IP
184.168.98.69:0
ASN
#26496 AS-26496-GO-DADDY-COM-LLC

File type
SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
796 B (796 bytes)
Hash
d3100382d3e4dcbdcf8101bd234febb8
01877a74b1500576bb794d17154f3c45cade1c8e
3b42c317becb4a02bd6adf7c799644f9f8930951a33712edc2583fab66751b52

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /Titolari_Nexi/Area%20Personale_files/logo--light-double.svg HTTP/1.1
Host: www.kavazi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.kavazi.com/Titolari_Nexi/
Cookie: COOKIE_KEY=166883484486
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
last-modified: Tue, 30 Mar 2021 04:49:12 GMT
etag: "20e0a42-5c4-5beb9b8310200-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 796
content-type: image/svg+xml
date: Sat, 19 Nov 2022 05:14:04 GMT
server: Apache
X-Firefox-Spdy: h2

www.kavazi.com/Titolari_Nexi/Area%20Personale_files/style(1).css

184.168.98.69

200 OK

3.7 kB

URL HTTP/2
www.kavazi.com/Titolari_Nexi/Area%20Personale_files/style(1).css
IP
184.168.98.69:0
ASN
#26496 AS-26496-GO-DADDY-COM-LLC

File type
ASCII text
Size
3.7 kB (3650 bytes)
Hash
e585945fb7078d5e2df8dabdc774a726
bc2a1400ba004e5f576378dbc37b3f51d87c4600
93fccac961e4f7152f23d8d3678241c65a7690d7361e7591235bc3d4f8947545

HTTP Headers

GET /Titolari_Nexi/Area%20Personale_files/style(1).css HTTP/1.1
Host: www.kavazi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.kavazi.com/Titolari_Nexi/
Cookie: COOKIE_KEY=166883484486
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
last-modified: Tue, 30 Mar 2021 04:49:12 GMT
etag: "20e0a47-47cf-5beb9b8310200-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 3650
content-type: text/css
date: Sat, 19 Nov 2022 05:14:04 GMT
server: Apache
X-Firefox-Spdy: h2

www.kavazi.com/Titolari_Nexi/Area%20Personale_files/app_store.svg

184.168.98.69

200 OK

6.7 kB

URL HTTP/2
www.kavazi.com/Titolari_Nexi/Area%20Personale_files/app_store.svg
IP
184.168.98.69:0
ASN
#26496 AS-26496-GO-DADDY-COM-LLC

File type
SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1295)
Size
6.7 kB (6673 bytes)
Hash
d016167ce36764138dc8253e6cc0f237
2ae85de77d12a3ebed807c23aa6c59e886dc1b1d
d2e92cc595519adb3331a5d9dec7d8f25d948e7606cdc5f9738ec7ed9c84b168

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /Titolari_Nexi/Area%20Personale_files/app_store.svg HTTP/1.1
Host: www.kavazi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.kavazi.com/Titolari_Nexi/
Cookie: COOKIE_KEY=166883484486
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
last-modified: Tue, 30 Mar 2021 04:49:12 GMT
etag: "20e0a09-3dc8-5beb9b8310200-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 6673
content-type: image/svg+xml
date: Sat, 19 Nov 2022 05:14:04 GMT
server: Apache
X-Firefox-Spdy: h2

img1.wsimg.com/traffic-assets/js/tccl.min.js

23.36.79.43

302 Found

0 B

URL HTTP/2
img1.wsimg.com/traffic-assets/js/tccl.min.js
IP
23.36.79.43:0
ASN
#20940 Akamai International B.V.

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /traffic-assets/js/tccl.min.js HTTP/1.1
Host: img1.wsimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.kavazi.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 302 Found
content-length: 0
location: https://img6.wsimg.com/wrhs/362d20193a8fed115f99b16a157b7fc4/tccl.min.js
cache-control: max-age=1800
expires: Sat, 19 Nov 2022 05:44:05 GMT
date: Sat, 19 Nov 2022 05:14:05 GMT
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2

img1.wsimg.com/traffic-assets/js/tccl-tti.min.js

23.36.79.43

302 Found

0 B

URL HTTP/2
img1.wsimg.com/traffic-assets/js/tccl-tti.min.js
IP
23.36.79.43:0
ASN
#20940 Akamai International B.V.

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /traffic-assets/js/tccl-tti.min.js HTTP/1.1
Host: img1.wsimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.kavazi.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 302 Found
content-length: 0
location: https://img6.wsimg.com/wrhs/ce554d2333f3801abafb32da18213ff7/tti.min.js
cache-control: max-age=1800
expires: Sat, 19 Nov 2022 05:44:05 GMT
date: Sat, 19 Nov 2022 05:14:05 GMT
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2

img6.wsimg.com/wrhs/362d20193a8fed115f99b16a157b7fc4/tccl.min.js

23.36.79.43

200 OK

11 kB

URL HTTP/2
img6.wsimg.com/wrhs/362d20193a8fed115f99b16a157b7fc4/tccl.min.js
IP
23.36.79.43:0
ASN
#20940 Akamai International B.V.

File type
ASCII text, with very long lines (45500)
Size
11 kB (11155 bytes)
Hash
1ac00b5d5abfa64175a140de3f29a8e2
c07c5611cfff3ec4c7034134e4148f177242908c
65198366099c4eea2ed8a4dbe30fbb7896435a3505c5265260715d3385058378

HTTP Headers

GET /wrhs/362d20193a8fed115f99b16a157b7fc4/tccl.min.js HTTP/1.1
Host: img6.wsimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.kavazi.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
content-type: application/javascript
accept-ranges: bytes
content-encoding: br
etag: "362d20193a8fed115f99b16a157b7fc4"
last-modified: Mon, 11 Apr 2022 14:15:53 GMT
vary: Accept-Encoding
x-edgeconnect-midmile-rtt: 15
x-edgeconnect-origin-mex-latency: 135
x-amz-id-2: 73c+ZpWNgBh9xtilh6Nj22iH/BmUfkHwAgj9PgWHmvdTmSCUhi96da6Ell5SKHaif06RANK80zY=
x-amz-request-id: N5JSXGJTVEFZM8E9
x-amz-server-side-encryption: AES256
x-amz-version-id: Z0H0F1CdjRUI_nRMydHHi17Rv0HOw5tB
content-length: 11155
cache-control: max-age=31536000
date: Sat, 19 Nov 2022 05:14:05 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=1
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2

img6.wsimg.com/wrhs/ce554d2333f3801abafb32da18213ff7/tti.min.js

23.36.79.43

200 OK

7.5 kB

URL HTTP/2
img6.wsimg.com/wrhs/ce554d2333f3801abafb32da18213ff7/tti.min.js
IP
23.36.79.43:0
ASN
#20940 Akamai International B.V.

File type
ASCII text, with very long lines (24676)
Size
7.5 kB (7498 bytes)
Hash
b8a5a228a358454084c34dd1cf431c61
37aa5fe6e083b8147156ca66a1993a7bd74e8a61
06fae5ccf58a27a8e2ae6a0e7722f42db507c1873751f587cddd090810d94492

HTTP Headers

GET /wrhs/ce554d2333f3801abafb32da18213ff7/tti.min.js HTTP/1.1
Host: img6.wsimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.kavazi.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
content-type: application/javascript
accept-ranges: bytes
content-encoding: br
etag: "ce554d2333f3801abafb32da18213ff7"
last-modified: Mon, 17 Jan 2022 17:21:37 GMT
vary: Accept-Encoding
x-edgeconnect-midmile-rtt: 8
x-edgeconnect-origin-mex-latency: 357
x-amz-id-2: nldPfdb2FYbpxPRfMYRSd83AOL7ZmlBdZQSm5hguJELKdfn8+sza0oLEpTYjiKd2JeD3gDplFHw=
x-amz-request-id: RJ3J3PMANG6125DE
x-amz-server-side-encryption: AES256
x-amz-version-id: F4fYptXBkP0fCCCWFLfVGE1HXlZmORny
content-length: 7498
x-edgeconnect-cache-status: 1
cache-control: max-age=31536000
date: Sat, 19 Nov 2022 05:14:05 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=1
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2

www.kavazi.com/Titolari_Nexi/Area%20Personale_files/google_play.svg

184.168.98.69

200 OK

19 kB

URL HTTP/2
www.kavazi.com/Titolari_Nexi/Area%20Personale_files/google_play.svg
IP
184.168.98.69:0
ASN
#26496 AS-26496-GO-DADDY-COM-LLC

File type
SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (24914)
Size
19 kB (18796 bytes)
Hash
faad5892c159b8eaf57dd86b42551385
a669a27b3cb75eeb2122a952c3a1aad1ad0ef05a
e6aca37ecb1274232f5589eaca591a2cd6069a0f65013faf610274e23703046f

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /Titolari_Nexi/Area%20Personale_files/google_play.svg HTTP/1.1
Host: www.kavazi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.kavazi.com/Titolari_Nexi/
Cookie: COOKIE_KEY=166883484486
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
last-modified: Tue, 30 Mar 2021 04:49:12 GMT
etag: "20e0a1b-62ff-5beb9b8310200-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 18796
content-type: image/svg+xml
date: Sat, 19 Nov 2022 05:14:04 GMT
server: Apache
X-Firefox-Spdy: h2

www.kavazi.com/Titolari_Nexi/Area%20Personale_files/jquery-3.5.1.min.js.download

184.168.98.69

200 OK

31 kB

URL HTTP/2
www.kavazi.com/Titolari_Nexi/Area%20Personale_files/jquery-3.5.1.min.js.download
IP
184.168.98.69:0
ASN
#26496 AS-26496-GO-DADDY-COM-LLC

File type
ASCII text, with very long lines (65451)
Size
31 kB (30908 bytes)
Hash
a486f645b3658c3a8d2c9e21ef8cc663
c01121b10af96291ed8dd2a4f92685d590a6d3ce
791997fdee12dc85257dfc360e80df86554e6b5eadaf7a1f7ab68a4387aa58b1

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /Titolari_Nexi/Area%20Personale_files/jquery-3.5.1.min.js.download HTTP/1.1
Host: www.kavazi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.kavazi.com/Titolari_Nexi/
Cookie: COOKIE_KEY=166883484486
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
last-modified: Tue, 30 Mar 2021 04:49:12 GMT
etag: "20e0a30-15d83-5beb9b8310200-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 30908
content-type: application/javascript
date: Sat, 19 Nov 2022 05:14:04 GMT
server: Apache
X-Firefox-Spdy: h2

www.kavazi.com/Titolari_Nexi/Area%20Personale_files/icon-close.svg

184.168.98.69

200 OK

803 B

URL HTTP/2
www.kavazi.com/Titolari_Nexi/Area%20Personale_files/icon-close.svg
IP
184.168.98.69:0
ASN
#26496 AS-26496-GO-DADDY-COM-LLC

File type
SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
803 B (803 bytes)
Hash
ed9fe45c407341f4a4850154b6bda352
2652f919e898979c27707d69aacd6582fd6d8258
35fdedb039e2ab09ff1fc18aa5d3c56514ee3b2c83d20f50afc59788781ce309

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /Titolari_Nexi/Area%20Personale_files/icon-close.svg HTTP/1.1
Host: www.kavazi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.kavazi.com/Titolari_Nexi/
Cookie: COOKIE_KEY=166883484486
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
last-modified: Tue, 30 Mar 2021 04:49:12 GMT
etag: "20e0a27-628-5beb9b8310200-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 803
content-type: image/svg+xml
date: Sat, 19 Nov 2022 05:14:05 GMT
server: Apache
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
f7c5da16d7c4384a4c2454d6b0d84710
69fd80fdf2f1ce27b25617589c867cd1c6e5d2ab
a80d1b813523e44d2e59d7c2edd6919c0354873637bb15bccc88f66f5c24e05d

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A80D1B813523E44D2E59D7C2EDD6919C0354873637BB15BCCC88F66F5C24E05D"
Last-Modified: Thu, 17 Nov 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5477
Expires: Sat, 19 Nov 2022 06:45:22 GMT
Date: Sat, 19 Nov 2022 05:14:05 GMT
Connection: keep-alive

www.kavazi.com/Titolari_Nexi/Area%20Personale_files/ico-down-blue.svg

184.168.98.69

200 OK

560 B

URL HTTP/2
www.kavazi.com/Titolari_Nexi/Area%20Personale_files/ico-down-blue.svg
IP
184.168.98.69:0
ASN
#26496 AS-26496-GO-DADDY-COM-LLC

File type
SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Size
560 B (560 bytes)
Hash
4c7b45f0bfc2e7106324cd953e9462ec
3a4c3d8a7d1e2bc251ec6004b1c89e861e293d52
08abab1ae5632446f0dc55418e34e72521d62bd82ac5629d304dfcbc2704cd75

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /Titolari_Nexi/Area%20Personale_files/ico-down-blue.svg HTTP/1.1
Host: www.kavazi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.kavazi.com/Titolari_Nexi/
Cookie: COOKIE_KEY=166883484486
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
last-modified: Tue, 30 Mar 2021 04:49:12 GMT
etag: "20e0a1e-382-5beb9b8310200-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 560
content-type: image/svg+xml
date: Sat, 19 Nov 2022 05:14:05 GMT
server: Apache
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
f7c5da16d7c4384a4c2454d6b0d84710
69fd80fdf2f1ce27b25617589c867cd1c6e5d2ab
a80d1b813523e44d2e59d7c2edd6919c0354873637bb15bccc88f66f5c24e05d

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A80D1B813523E44D2E59D7C2EDD6919C0354873637BB15BCCC88F66F5C24E05D"
Last-Modified: Thu, 17 Nov 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5477
Expires: Sat, 19 Nov 2022 06:45:22 GMT
Date: Sat, 19 Nov 2022 05:14:05 GMT
Connection: keep-alive

www.kavazi.com/Titolari_Nexi/Area%20Personale_files/icon-close-white.svg

184.168.98.69

200 OK

812 B

URL HTTP/2
www.kavazi.com/Titolari_Nexi/Area%20Personale_files/icon-close-white.svg
IP
184.168.98.69:0
ASN
#26496 AS-26496-GO-DADDY-COM-LLC

File type
SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
812 B (812 bytes)
Hash
f622ecd72f5d26f8d15fbbaa2dabef15
9f0c5c86779365511125966c1eee4db2c9717766
75beff465a73314fd353294bf1c0411f6961b604358e1623fe212876bf2d7d1c

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /Titolari_Nexi/Area%20Personale_files/icon-close-white.svg HTTP/1.1
Host: www.kavazi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.kavazi.com/Titolari_Nexi/
Cookie: COOKIE_KEY=166883484486
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
last-modified: Tue, 30 Mar 2021 04:49:12 GMT
etag: "20e0a24-637-5beb9b8310200-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 812
content-type: image/svg+xml
date: Sat, 19 Nov 2022 05:14:05 GMT
server: Apache
X-Firefox-Spdy: h2

www.kavazi.com/Titolari_Nexi/Area%20Personale_files/icon-blocked.svg

184.168.98.69

200 OK

530 B

URL HTTP/2
www.kavazi.com/Titolari_Nexi/Area%20Personale_files/icon-blocked.svg
IP
184.168.98.69:0
ASN
#26496 AS-26496-GO-DADDY-COM-LLC

File type
SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
530 B (530 bytes)
Hash
b7b95aacae60f916168bebb4dc46d1c0
ed0d21fc07d96fb126b9c0055de7d5647b8e715e
c52a04b8a538f3db5756a0c7b5581230b60e6d4efca7c325105755fe3499bbb2

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /Titolari_Nexi/Area%20Personale_files/icon-blocked.svg HTTP/1.1
Host: www.kavazi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.kavazi.com/Titolari_Nexi/
Cookie: COOKIE_KEY=166883484486
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
last-modified: Tue, 30 Mar 2021 04:49:12 GMT
etag: "20e0a20-3a7-5beb9b8310200-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 530
content-type: image/svg+xml
date: Sat, 19 Nov 2022 05:14:05 GMT
server: Apache
X-Firefox-Spdy: h2

www.kavazi.com/Titolari_Nexi/Area%20Personale_files/icon-phone-warning-white.svg

184.168.98.69

200 OK

1.5 kB

URL HTTP/2
www.kavazi.com/Titolari_Nexi/Area%20Personale_files/icon-phone-warning-white.svg
IP
184.168.98.69:0
ASN
#26496 AS-26496-GO-DADDY-COM-LLC

File type
SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
1.5 kB (1512 bytes)
Hash
bfa9df24b8350b67319db5da4cd93bb0
d2abd1c90aa009503e362e79f1baec90f59d460a
70174befc1e5b479d2ef5b8af48cc478c07203d36dc3ef8d54870445e5c889d6

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /Titolari_Nexi/Area%20Personale_files/icon-phone-warning-white.svg HTTP/1.1
Host: www.kavazi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.kavazi.com/Titolari_Nexi/
Cookie: COOKIE_KEY=166883484486
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
last-modified: Tue, 30 Mar 2021 04:49:12 GMT
etag: "20e0a2b-f29-5beb9b8310200-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 1512
content-type: image/svg+xml
date: Sat, 19 Nov 2022 05:14:05 GMT
server: Apache
X-Firefox-Spdy: h2

www.kavazi.com/Titolari_Nexi/Area%20Personale_files/icon-phone.svg

184.168.98.69

200 OK

1.5 kB

URL HTTP/2
www.kavazi.com/Titolari_Nexi/Area%20Personale_files/icon-phone.svg
IP
184.168.98.69:0
ASN
#26496 AS-26496-GO-DADDY-COM-LLC

File type
SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
1.5 kB (1536 bytes)
Hash
997eb0fc0f957abfd4b2bfdcc1c0af07
d3ef70a8c2144639a0982a71f90deb5eb9bc09ec
9e0eacdaaa088d5dbe3dcd86a738da7fb24f32f5529616eaba81848681c88b83

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /Titolari_Nexi/Area%20Personale_files/icon-phone.svg HTTP/1.1
Host: www.kavazi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.kavazi.com/Titolari_Nexi/
Cookie: COOKIE_KEY=166883484486
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
last-modified: Tue, 30 Mar 2021 04:49:12 GMT
etag: "20e0a2d-fb0-5beb9b8310200-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 1536
content-type: image/svg+xml
date: Sat, 19 Nov 2022 05:14:05 GMT
server: Apache
X-Firefox-Spdy: h2

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F99adbe1a-32fb-4a64-9117-f96ee1afb7bb.jpeg

34.120.237.76

200 OK

4.6 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F99adbe1a-32fb-4a64-9117-f96ee1afb7bb.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
4.6 kB (4626 bytes)
Hash
0c554f29d106d9edb3d8f371da0001e8
9818266c238affe1641d95079b7e789ac50f33ca
ff96bc987cf34aea763294cf58629424acca08d260d04961298b8d36abf0c3c7

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F99adbe1a-32fb-4a64-9117-f96ee1afb7bb.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 4626
x-amzn-requestid: 896eb034-f9a8-4eb1-b6b8-2c9b8d55a735
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b0QQwH53IAMFWGg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6377fa6b-137296670ccf91b000097780;Sampled=0
x-amzn-remapped-date: Fri, 18 Nov 2022 21:34:35 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: cLrC88yGRLTEyc2Lqei4wk7N_nhz7_85rNF8X_CceRCMrDbYMQ-1jg==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 b13f158bdf9805ca47e07c0c35870c12.cloudfront.net (CloudFront), 1.1 google
date: Fri, 18 Nov 2022 21:36:25 GMT
age: 27460
etag: "9818266c238affe1641d95079b7e789ac50f33ca"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

7.5 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffe8e6500-1e65-47d6-8a04-7ea6b08f0532.png
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
7.5 kB (7461 bytes)
Hash
8628b828c4eb5e7f0b2040f2cbdd28b4
24eb5561b870e3259771b21aeb762de9f93add2a
9fe5b3cb0a09230d2c447e42ea408765513856c21c93c74f53688b7f81813de1

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffe8e6500-1e65-47d6-8a04-7ea6b08f0532.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 7461
x-amzn-requestid: ae7de919-a9b7-458f-adba-1f1a3e351d15
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: byQ5xFjGoAMFoyg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63772ea4-604387bb655a23910115a550;Sampled=0
x-amzn-remapped-date: Fri, 18 Nov 2022 07:05:08 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 6q5TLsKBBbSGK13y0DJU8A6S6P8OURYCLlTWiCAU1Wgj93gTMLjX0w==
via: 1.1 56c69262ecfa7873b40572ba8a323242.cloudfront.net (CloudFront), 1.1 b36bf2c460ac693ce304817aed073112.cloudfront.net (CloudFront), 1.1 google
date: Fri, 18 Nov 2022 07:06:32 GMT
age: 79653
etag: "24eb5561b870e3259771b21aeb762de9f93add2a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

9.2 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9472302a-1f5a-4747-8dae-6de1346c8e14.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
9.2 kB (9235 bytes)
Hash
1b428c8fece61cb8500ff6f6152efcc0
2667b5a57a13817a95e2e82b0f96dc3456afca00
53403b823626d7cd0b88f33e924b55274c7283397075d074303faaf4eaafdc49

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9472302a-1f5a-4747-8dae-6de1346c8e14.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 9235
x-amzn-requestid: 01e6ce53-df49-40c9-8002-4f063d085898
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: beZlTE9oIAMFkPg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636f3c88-6470fa1b7a9ad45e63fc485c;Sampled=0
x-amzn-remapped-date: Sat, 12 Nov 2022 06:26:16 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 1HrMFgOYkXaPg5VO1MRTQSNNf0JN9GL5PfLk-STEWg-1h01SmSs4wg==
via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 caf6806821bc479b28a6f1ce3043b8a6.cloudfront.net (CloudFront), 1.1 google
date: Fri, 18 Nov 2022 12:39:59 GMT
age: 59646
etag: "2667b5a57a13817a95e2e82b0f96dc3456afca00"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

7.6 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F20f7461d-18d1-4343-9ecb-d68d44ce1ee4.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
7.6 kB (7589 bytes)
Hash
06c6e720bc9900b38e88cd72f739603e
22884cbc78622d6f78c1c3397c9b440946144a99
8675d08e6d8ae5bdedbc7c7ce647f8c6e72cc457917b4ed1856c50b11c2fe88b

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F20f7461d-18d1-4343-9ecb-d68d44ce1ee4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 7589
x-amzn-requestid: 533d7650-cb21-4090-a50a-e205adad316d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: brr5zH4qoAMF79Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63748d0b-017f7bf4390eb124097af648;Sampled=0
x-amzn-remapped-date: Wed, 16 Nov 2022 07:11:07 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: G_b9L1-WBsD1eh58iF6Cwh8ij3yZVOei6oIUjwdoKQzHLayBLJdv0A==
via: 1.1 95b0ac620fa3a80ee590ecf1cda1c698.cloudfront.net (CloudFront), 1.1 12a392bc3a7281f8d5d4591bfadc41fc.cloudfront.net (CloudFront), 1.1 google
date: Fri, 18 Nov 2022 16:26:42 GMT
age: 46043
etag: "22884cbc78622d6f78c1c3397c9b440946144a99"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

7.8 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F640a732f-1fd9-47b0-8311-39061579f99b.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
7.8 kB (7754 bytes)
Hash
8cf981b1ea47b981c73aa1f291be4d8a
d18b869e1940841e9b03f66f5608e381f1727b37
3352a04b9596b594aeb5de3dc70047196a830e3ca79babf7c1b72ff1103b2d26

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F640a732f-1fd9-47b0-8311-39061579f99b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 7754
x-amzn-requestid: 2c21447c-03bb-4e50-9eeb-a8ae86c0d204
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b0QRmFuiIAMFjWg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6377fa70-7a7e65fc5d443a1d70feb62b;Sampled=0
x-amzn-remapped-date: Fri, 18 Nov 2022 21:34:40 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: MFN-Yhp70fPLS4R_tVxEvzt-YQ7COwXaXrmifEfXfpiC0epJHSJq7w==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 5954c6394458ffb44c970b3819d7ff2a.cloudfront.net (CloudFront), 1.1 google
date: Fri, 18 Nov 2022 21:36:25 GMT
age: 27460
etag: "d18b869e1940841e9b03f66f5608e381f1727b37"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

12 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa85a710b-15b8-4e56-ab1e-15b8ca200023.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
12 kB (12117 bytes)
Hash
8870858ed5cc8a6dc3571374c83495cc
253ef3291eee18d2b2bf6f9becea014aaf5331dc
3f5d637a77e1a430a3b3a06303814c9a28de0db8e79e3a6c5f6c650c43799ffc

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa85a710b-15b8-4e56-ab1e-15b8ca200023.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 12117
x-amzn-requestid: d4d233be-1313-4dd6-bca2-460ed86a7a9c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: brWa-GXloAMFivA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63746aac-0ed94eed1b21daff2d9fc3ed;Sampled=0
x-amzn-remapped-date: Wed, 16 Nov 2022 04:44:28 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 9fq8bFv29s6VQk85rBCQaR3EssHFe5fzb5UH3KymwlUiVC37mFjHrw==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 32d624dbeb2a8b7f24dbe49007e37c90.cloudfront.net (CloudFront), 1.1 google
date: Fri, 18 Nov 2022 21:36:25 GMT
age: 68375
etag: "253ef3291eee18d2b2bf6f9becea014aaf5331dc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

www.kavazi.com/Titolari_Nexi/Area%20Personale_files/fonts/karbon-regular-webfont.woff

184.168.98.69

200 OK

24 kB

URL HTTP/2
www.kavazi.com/Titolari_Nexi/Area%20Personale_files/fonts/karbon-regular-webfont.woff
IP
184.168.98.69:0
ASN
#26496 AS-26496-GO-DADDY-COM-LLC

File type
Web Open Font Format, TrueType, length 24308, version 1.0\012- data
Size
24 kB (24308 bytes)
Hash
e6b850dccbd545df306ea2f25452a124
08bdf0f61b8316130f85a2725dcbd7eb5a6dc750
ade827343407a2a81168acb91cabc1ed7d83de7010966dd1b7f06f4e0344b9e6

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /Titolari_Nexi/Area%20Personale_files/fonts/karbon-regular-webfont.woff HTTP/1.1
Host: www.kavazi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.kavazi.com/Titolari_Nexi/Area%20Personale_files/style.css
Cookie: COOKIE_KEY=166883484486
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
last-modified: Tue, 30 Mar 2021 06:23:32 GMT
etag: "20e0a19-5ef4-5bebb098dc100"
accept-ranges: bytes
content-length: 24308
vary: Accept-Encoding,User-Agent
content-type: font/woff
date: Sat, 19 Nov 2022 05:14:06 GMT
server: Apache
X-Firefox-Spdy: h2

www.kavazi.com/Titolari_Nexi/Area%20Personale_files/fonts/karbon-semibold-webfont.woff

184.168.98.69

200 OK

25 kB

URL HTTP/2
www.kavazi.com/Titolari_Nexi/Area%20Personale_files/fonts/karbon-semibold-webfont.woff
IP
184.168.98.69:0
ASN
#26496 AS-26496-GO-DADDY-COM-LLC

File type
Web Open Font Format, TrueType, length 25032, version 1.0\012- data
Size
25 kB (25032 bytes)
Hash
4e893a43d47ba798763b8990f9e07180
9ac339e30beac18d0a4aaecce5b66a723ec46532
0696904b24ea3bdaf9ee857ded71391ccd44d40b84334571a5c5e71f93b4a0c6

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /Titolari_Nexi/Area%20Personale_files/fonts/karbon-semibold-webfont.woff HTTP/1.1
Host: www.kavazi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.kavazi.com/Titolari_Nexi/Area%20Personale_files/style.css
Cookie: COOKIE_KEY=166883484486
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
last-modified: Tue, 30 Mar 2021 06:23:34 GMT
etag: "20e0a1a-61c8-5bebb09ac4580"
accept-ranges: bytes
content-length: 25032
vary: Accept-Encoding,User-Agent
content-type: font/woff
date: Sat, 19 Nov 2022 05:14:06 GMT
server: Apache
X-Firefox-Spdy: h2

www.kavazi.com/Titolari_Nexi/Area%20Personale_files/fonts/karbon-medium-webfont.woff

184.168.98.69

200 OK

25 kB

URL HTTP/2
www.kavazi.com/Titolari_Nexi/Area%20Personale_files/fonts/karbon-medium-webfont.woff
IP
184.168.98.69:0
ASN
#26496 AS-26496-GO-DADDY-COM-LLC

File type
Web Open Font Format, TrueType, length 24956, version 1.0\012- data
Size
25 kB (24956 bytes)
Hash
034fa219154a0eed22d6ef6ebd89c3a9
c8574cf3bfc69f53392d916aef929ccc882a9386
4061275193aa1a5245941f7768b307219fc0f86f44dc1cf4d293168b93a72259

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /Titolari_Nexi/Area%20Personale_files/fonts/karbon-medium-webfont.woff HTTP/1.1
Host: www.kavazi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.kavazi.com/Titolari_Nexi/Area%20Personale_files/style.css
Cookie: COOKIE_KEY=166883484486
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
last-modified: Tue, 30 Mar 2021 06:23:30 GMT
etag: "20e0a15-617c-5bebb096f3c80"
accept-ranges: bytes
content-length: 24956
vary: Accept-Encoding,User-Agent
content-type: font/woff
date: Sat, 19 Nov 2022 05:14:06 GMT
server: Apache
X-Firefox-Spdy: h2

www.kavazi.com/Titolari_Nexi/placeholder_login_portale_privati.png

184.168.98.69

200 OK

432 kB

URL HTTP/2
www.kavazi.com/Titolari_Nexi/placeholder_login_portale_privati.png
IP
184.168.98.69:0
ASN
#26496 AS-26496-GO-DADDY-COM-LLC

File type
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1440x1024, components 3\012- data
Size
432 kB (432515 bytes)
Hash
b9a33ab5b99902deb7d1c2a80e087d3b
735b1f9129d66f768861a332dc0f6e0e0c8fc4fd
dc50ef7f80147b0a2407f5a560125db8b36c799d5a5a32b17d83fea8f03492e5

HTTP Headers

GET /Titolari_Nexi/placeholder_login_portale_privati.png HTTP/1.1
Host: www.kavazi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.kavazi.com/Titolari_Nexi/
Cookie: COOKIE_KEY=166883484486
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
last-modified: Thu, 18 Nov 2021 21:23:06 GMT
etag: "20e0b0f-69983-5d116c3ae0280"
accept-ranges: bytes
content-length: 432515
content-type: image/png
date: Sat, 19 Nov 2022 05:14:05 GMT
server: Apache
X-Firefox-Spdy: h2

www.nexi.it/etc/designs/nexi/favicon/favicon-16x16.png

185.198.117.126

200 OK

300 B

URL HTTP/1.1
www.nexi.it/etc/designs/nexi/favicon/favicon-16x16.png
IP
185.198.117.126:0
ASN
#35051 Nexi Payments S.P.A.

File type
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Size
300 B (300 bytes)
Hash
200029b5e4fb2ebe6681acdc3c54f558
8f2eda5c64a7cfde221947a29fc6ffb57b11b772
b6a9125da73f90564107299c92997b40c2ddba9bd37272c960b16932d5854e4d

HTTP Headers

GET /etc/designs/nexi/favicon/favicon-16x16.png HTTP/1.1
Host: www.nexi.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.kavazi.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Date: Sat, 19 Nov 2022 05:14:07 GMT
Last-Modified: Wed, 16 Nov 2022 14:04:45 GMT
ETag: "12c-5ed96f471b8a0"
Accept-Ranges: bytes
Content-Length: 300
Access-Control-Allow-Methods: GET, HEAD
Cache-Control: max-age=300, public
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/png
P3P: policyref="/w3c/p3p.xml", CP="IDC DSP COR NID DEVi OUR BUS INT"
Set-Cookie: lb_cookie2="f52f1f8b30b943c9987ac1fa5ebcf4d1aae8c6fb9370b1f6e55f4928024379be pero"; Path=/; Domain=.nexi.it; Expires=Sat, 19-Nov-2022 07:14:07 GMT
TS01a05a0f=01d37309fc06545c4fe93a57a63539b8260b6c943a54ef3bb8964478800b798176a5a6b50cacfef3a0a87cbad843e444695b3a4d00bc21f4449c3a5475f14144a95a3c5a41; Path=/; Domain=.www.nexi.it
Vary: Accept-Encoding

events.api.secureserver.net/t/1/tl/event?cts=1668834845287&dh=www.kavazi.com&dr=&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&vci=557187592&cv=2.0.0&z=578188810&vg=8ffb621d-d2b1-5996-b62a-eff3bcb94c3a&vtg=8ffb621d-d2b1-5996-b62a-eff3bcb94c3a&dp=%2FTitolari_Nexi&ap=cpbh-mt&trfd=%7B%22ap%22%3A%22cpbh-mt%22%2C%22server%22%3A%22sg2plmcpnl492229%22%2C%22dcenter%22%3A%22sg2%22%2C%22id%22%3A%226865391%22%7D&hit_id=df68092d-8267-532c-af42-b59c79282649&ht=perf&tce=1668834842238&tcs=1668834841506&tdc=1668834845281&tdclee=1668834843859&tdcles=1668834843858&tdi=1668834843854&tdl=1668834842513&tdle=1668834841506&tdls=1668834841505&tfs=1668834841452&tns=1668834841457&trqs=1668834842238&tre=1668834842964&trps=1668834842503&tles=1668834845281&tlee=0&nt=navigate&nav_type=hard

104.84.152.58

200 OK

43 B

URL HTTP/2
events.api.secureserver.net/t/1/tl/event?cts=1668834845287&dh=www.kavazi.com&dr=&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&vci=557187592&cv=2.0.0&z=578188810&vg=8ffb621d-d2b1-5996-b62a-eff3bcb94c3a&vtg=8ffb621d-d2b1-5996-b62a-eff3bcb94c3a&dp=%2FTitolari_Nexi&ap=cpbh-mt&trfd=%7B%22ap%22%3A%22cpbh-mt%22%2C%22server%22%3A%22sg2plmcpnl492229%22%2C%22dcenter%22%3A%22sg2%22%2C%22id%22%3A%226865391%22%7D&hit_id=df68092d-8267-532c-af42-b59c79282649&ht=perf&tce=1668834842238&tcs=1668834841506&tdc=1668834845281&tdclee=1668834843859&tdcles=1668834843858&tdi=1668834843854&tdl=1668834842513&tdle=1668834841506&tdls=1668834841505&tfs=1668834841452&tns=1668834841457&trqs=1668834842238&tre=1668834842964&trps=1668834842503&tles=1668834845281&tlee=0&nt=navigate&nav_type=hard
IP
104.84.152.58:0
ASN
#20940 Akamai International B.V.

File type
GIF image data, version 89a, 1 x 1\012- data
Size
43 B (43 bytes)
Hash
325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b

HTTP Headers

GET /t/1/tl/event?cts=1668834845287&dh=www.kavazi.com&dr=&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&vci=557187592&cv=2.0.0&z=578188810&vg=8ffb621d-d2b1-5996-b62a-eff3bcb94c3a&vtg=8ffb621d-d2b1-5996-b62a-eff3bcb94c3a&dp=%2FTitolari_Nexi&ap=cpbh-mt&trfd=%7B%22ap%22%3A%22cpbh-mt%22%2C%22server%22%3A%22sg2plmcpnl492229%22%2C%22dcenter%22%3A%22sg2%22%2C%22id%22%3A%226865391%22%7D&hit_id=df68092d-8267-532c-af42-b59c79282649&ht=perf&tce=1668834842238&tcs=1668834841506&tdc=1668834845281&tdclee=1668834843859&tdcles=1668834843858&tdi=1668834843854&tdl=1668834842513&tdle=1668834841506&tdls=1668834841505&tfs=1668834841452&tns=1668834841457&trqs=1668834842238&tre=1668834842964&trps=1668834842503&tles=1668834845281&tlee=0&nt=navigate&nav_type=hard HTTP/1.1
Host: events.api.secureserver.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.kavazi.com
Connection: keep-alive
Referer: https://www.kavazi.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
content-type: image/gif
content-length: 43
access-control-allow-origin: https://www.kavazi.com
access-control-allow-credentials: true
x-robots-tag: noindex, nofollow
cache-control: private
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
strict-transport-security: max-age=31536000 ; includeSubDomains
x-frame-options: DENY
date: Sat, 19 Nov 2022 05:14:07 GMT
X-Firefox-Spdy: h2

events.api.secureserver.net/t/1/tl/event?cts=1668834843853&dh=www.kavazi.com&dr=&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&vci=557187592&cv=2.0.0&z=565127140&vg=8ffb621d-d2b1-5996-b62a-eff3bcb94c3a&vtg=8ffb621d-d2b1-5996-b62a-eff3bcb94c3a&dp=%2FTitolari_Nexi&ap=cpbh-mt&trfd=%7B%22ap%22%3A%22cpbh-mt%22%2C%22server%22%3A%22sg2plmcpnl492229%22%2C%22dcenter%22%3A%22sg2%22%2C%22id%22%3A%226865391%22%7D&hit_id=6964b136-1af5-5543-ace4-726c5e01abb9&ht=pageview

104.84.152.58

200 OK

43 B

URL HTTP/2
events.api.secureserver.net/t/1/tl/event?cts=1668834843853&dh=www.kavazi.com&dr=&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&vci=557187592&cv=2.0.0&z=565127140&vg=8ffb621d-d2b1-5996-b62a-eff3bcb94c3a&vtg=8ffb621d-d2b1-5996-b62a-eff3bcb94c3a&dp=%2FTitolari_Nexi&ap=cpbh-mt&trfd=%7B%22ap%22%3A%22cpbh-mt%22%2C%22server%22%3A%22sg2plmcpnl492229%22%2C%22dcenter%22%3A%22sg2%22%2C%22id%22%3A%226865391%22%7D&hit_id=6964b136-1af5-5543-ace4-726c5e01abb9&ht=pageview
IP
104.84.152.58:0
ASN
#20940 Akamai International B.V.

File type
GIF image data, version 89a, 1 x 1\012- data
Size
43 B (43 bytes)
Hash
325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b

HTTP Headers

GET /t/1/tl/event?cts=1668834843853&dh=www.kavazi.com&dr=&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&vci=557187592&cv=2.0.0&z=565127140&vg=8ffb621d-d2b1-5996-b62a-eff3bcb94c3a&vtg=8ffb621d-d2b1-5996-b62a-eff3bcb94c3a&dp=%2FTitolari_Nexi&ap=cpbh-mt&trfd=%7B%22ap%22%3A%22cpbh-mt%22%2C%22server%22%3A%22sg2plmcpnl492229%22%2C%22dcenter%22%3A%22sg2%22%2C%22id%22%3A%226865391%22%7D&hit_id=6964b136-1af5-5543-ace4-726c5e01abb9&ht=pageview HTTP/1.1
Host: events.api.secureserver.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.kavazi.com
Connection: keep-alive
Referer: https://www.kavazi.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
content-type: image/gif
content-length: 43
access-control-allow-origin: https://www.kavazi.com
access-control-allow-credentials: true
x-robots-tag: noindex, nofollow
cache-control: private
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
strict-transport-security: max-age=31536000 ; includeSubDomains
x-frame-options: DENY
date: Sat, 19 Nov 2022 05:14:07 GMT
X-Firefox-Spdy: h2

www.nexi.it/etc/designs/nexi/favicon/favicon-196x196.png

185.198.117.126

200 OK

25 kB

URL HTTP/1.1
www.nexi.it/etc/designs/nexi/favicon/favicon-196x196.png
IP
185.198.117.126:0
ASN
#35051 Nexi Payments S.P.A.

File type
PNG image data, 196 x 196, 8-bit/color RGBA, non-interlaced\012- data
Size
25 kB (25215 bytes)
Hash
3a0ce25384d4ea5734d25779bc8bd41a
62b5bd3bdeac213d075f7de99a2b96283717574e
77d497a3c716b3fb900f01e92bc5b6f0928c6040d30a3d88eb8a95df71c625cf

HTTP Headers

GET /etc/designs/nexi/favicon/favicon-196x196.png HTTP/1.1
Host: www.nexi.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.kavazi.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Date: Sat, 19 Nov 2022 05:14:07 GMT
Last-Modified: Wed, 16 Nov 2022 14:01:06 GMT
ETag: "627f-5ed96e75c342b"
Accept-Ranges: bytes
Content-Length: 25215
Access-Control-Allow-Methods: GET, HEAD
Cache-Control: max-age=300, public
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/png
P3P: policyref="/w3c/p3p.xml", CP="IDC DSP COR NID DEVi OUR BUS INT"
Set-Cookie: lb_cookie2="6d973a9bbc9aa398c666d1562c94c8dd5c5abe1e5a6730feb759860fdecc2266 pero"; Path=/; Domain=.nexi.it; Expires=Sat, 19-Nov-2022 07:14:07 GMT
TS01a05a0f=01d37309fcb95d62f2023bca2820c25d5bb7947e41d37eb8d00936cdf11228372813e6f77071b37e82a6c2fe0217570398dbb18efdf8962c3c1b71dac4cd74a2377d515450; Path=/; Domain=.www.nexi.it

ocsp.globalsign.com/gsrsaovsslca2018

104.18.20.226

200 OK

1.4 kB

URL HTTP/1.1
ocsp.globalsign.com/gsrsaovsslca2018
IP
104.18.20.226:0
ASN
#13335 CLOUDFLARENET

File type
data
Size
1.4 kB (1432 bytes)
Hash
b90eba48cedec5e6e15e99266cd7a53a
a5035087e61dff018e1d351169ee3bf4bd2084fd
d58a7d95b1efc82feedad78d5e2eb67e330e8339132dbd9db13d3fdeaa20a7be

HTTP Headers

POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 19 Nov 2022 05:14:07 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Wed, 23 Nov 2022 03:05:06 GMT
ETag: "a5035087e61dff018e1d351169ee3bf4bd2084fd"
Last-Modified: Sat, 19 Nov 2022 03:05:07 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: REVALIDATED
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76c675debf130b51-OSL

ocsp.globalsign.com/gsrsaovsslca2018

104.18.20.226

200 OK

1.4 kB

URL HTTP/1.1
ocsp.globalsign.com/gsrsaovsslca2018
IP
104.18.20.226:0
ASN
#13335 CLOUDFLARENET

File type
data
Size
1.4 kB (1432 bytes)
Hash
b90eba48cedec5e6e15e99266cd7a53a
a5035087e61dff018e1d351169ee3bf4bd2084fd
d58a7d95b1efc82feedad78d5e2eb67e330e8339132dbd9db13d3fdeaa20a7be

HTTP Headers

POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 19 Nov 2022 05:14:07 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Wed, 23 Nov 2022 03:05:06 GMT
ETag: "a5035087e61dff018e1d351169ee3bf4bd2084fd"
Last-Modified: Sat, 19 Nov 2022 03:05:07 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: REVALIDATED
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76c675debc490b06-OSL

34.120.237.76

200 OK

5.2 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6865a9f2-7103-433d-8ba8-2a1cca0f76d1.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
5.2 kB (5226 bytes)
Hash
b834de670098398062ac06865cfa82a4
6b50f4fdc7d7dcbb11d8739b71e8e1eecec047b4
9eefe7101330de28d8d0fdb3f17a5453f3368324fbacb9f3a36826f76b7c9bde

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6865a9f2-7103-433d-8ba8-2a1cca0f76d1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
content-length: 5226
x-amzn-requestid: c0655cd4-83f6-4c7c-97b6-2847f38df126
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b0QRwFPwoAMFV5Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6377fa71-5f7eca026395cbe72daed116;Sampled=0
x-amzn-remapped-date: Fri, 18 Nov 2022 21:34:41 GMT
x-amz-cf-pop: SEA19-C3, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: gSAFmiB37Xf-Ytu7_BEwytLEY9rflh0ruTy-mU3vHQlS9Amx90qUcg==
via: 1.1 2c6b5dd77f1abe60653ce0454f344b64.cloudfront.net (CloudFront), 1.1 01147dcc35d57fc0238a3c1700c13f16.cloudfront.net (CloudFront), 1.1 google
date: Fri, 18 Nov 2022 21:36:25 GMT
age: 27467
etag: "6b50f4fdc7d7dcbb11d8739b71e8e1eecec047b4"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

www.kavazi.com/Titolari_Nexi/Area%20Personale_files/style.css

184.168.98.69

200 OK

0 B

URL HTTP/2
www.kavazi.com/Titolari_Nexi/Area%20Personale_files/style.css
IP
184.168.98.69:0
ASN
#26496 AS-26496-GO-DADDY-COM-LLC

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /Titolari_Nexi/Area%20Personale_files/style.css HTTP/1.1
Host: www.kavazi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.kavazi.com/Titolari_Nexi/
Cookie: COOKIE_KEY=166883484486
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
last-modified: Tue, 30 Mar 2021 04:49:12 GMT
etag: "20e0a48-8df88-5beb9b8310200-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-type: text/css
date: Sat, 19 Nov 2022 05:14:04 GMT
server: Apache
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

JavaScript (4)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (45)

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/2

IP

ASN

File type

Size