Report - www.kavazi.com/Titolari

Report Overview

Submitted URL
www.kavazi.com/Titolari_Nexi/
IP
184.168.98.69
ASN
#26496 AS-26496-GO-DADDY-COM-LLC
Submitted
2022-11-19 12:55:31
Access
Website Title
Final URL
Tags
None
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
30

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
content-signature-2.cdn.mozilla.net	1152	2020-11-03T13:26:46Z	2023-03-10T05:12:35Z	413 B	5.9 kB	34.160.144.191
www.kavazi.com	unknown	2020-02-10T00:16:30Z	2023-02-11T05:43:03Z	8.4 kB	614 kB	184.168.98.69
img6.wsimg.com	15438	2020-02-20T08:56:58Z	2023-03-10T11:40:52Z	823 B	20 kB	23.36.79.43
events.api.secureserver.net	125179	2020-06-23T05:18:34Z	2023-03-10T13:35:24Z	2.1 kB	928 B	23.72.139.72
r3.o.lencr.org	344	2020-12-02T09:52:13Z	2023-03-10T05:09:10Z	1.0 kB	2.7 kB	23.36.77.32
ocsp.digicert.com	86	2012-05-21T09:02:23Z	2023-03-10T13:49:44Z	682 B	1.6 kB	93.184.220.29
push.services.mozilla.com	2140	2014-10-24T10:27:06Z	2023-03-10T05:10:02Z	606 B	127 B	54.186.117.16
img1.wsimg.com	9893	2012-06-20T16:42:31Z	2023-03-10T11:02:46Z	760 B	605 B	23.36.79.43
img-getpocket.cdn.mozilla.net	1631	2018-06-22T01:36:00Z	2023-03-10T05:10:04Z	3.8 kB	70 kB	34.120.237.76
ocsp.globalsign.com	2075	2012-07-20T19:46:16Z	2023-03-10T05:11:21Z	718 B	3.8 kB	104.18.21.226
www.nexi.it	495401	2017-11-13T15:01:19Z	2023-03-10T09:23:18Z	820 B	27 kB	185.198.118.126
firefox.settings.services.mozilla.com	867	2020-06-04T22:08:41Z	2023-03-10T05:10:00Z	782 B	2.4 kB	34.102.187.140
contile.services.mozilla.com	1114	2021-05-27T20:32:35Z	2023-03-10T05:10:00Z	333 B	229 B	34.117.237.239

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

Scan Date	Severity	Indicator	Alert
2022-11-18	medium	www.kavazi.com/Titolari_Nexi/	CartaSi S.p.A

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2022-11-19	medium	www.kavazi.com/Titolari_Nexi/	Phishing
2022-11-19	medium	www.kavazi.com/Titolari_Nexi/Area%20Personale_files/logo--light-double.svg	Phishing
2022-11-19	medium	www.kavazi.com/Titolari_Nexi/Area%20Personale_files/app_store.svg	Phishing
2022-11-19	medium	www.kavazi.com/Titolari_Nexi/Area%20Personale_files/google_play.svg	Phishing
2022-11-19	medium	www.kavazi.com/Titolari_Nexi/Area%20Personale_files/jquery-3.5.1.min.js.download	Phishing
2022-11-19	medium	www.kavazi.com/Titolari_Nexi/Area%20Personale_files/icon-blocked.svg	Phishing
2022-11-19	medium	www.kavazi.com/Titolari_Nexi/Area%20Personale_files/icon-close-white.svg	Phishing
2022-11-19	medium	www.kavazi.com/Titolari_Nexi/Area%20Personale_files/icon-close.svg	Phishing
2022-11-19	medium	www.kavazi.com/Titolari_Nexi/Area%20Personale_files/ico-down-blue.svg	Phishing
2022-11-19	medium	www.kavazi.com/Titolari_Nexi/Area%20Personale_files/icon-phone.svg	Phishing
2022-11-19	medium	www.kavazi.com/Titolari_Nexi/Area%20Personale_files/icon-phone-warning-white.svg	Phishing
2022-11-19	medium	www.kavazi.com/Titolari_Nexi/Area%20Personale_files/fonts/karbon-regular-webfont.woff	Phishing
2022-11-19	medium	www.kavazi.com/Titolari_Nexi/Area%20Personale_files/fonts/karbon-semibold-webfont.woff	Phishing
2022-11-19	medium	www.kavazi.com/Titolari_Nexi/Area%20Personale_files/fonts/karbon-medium-webfont.woff	Phishing

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

JavaScript (4)

	URL	Size	First Seen	Last Seen
	www.kavazi.com/Titolari_Nexi/	345 B	2023-03-11	2023-03-11
Pretty URL www.kavazi.com/Titolari_Nexi/ IP 184.168.98.69 ASN #26496 AS-26496-GO-DADDY-COM-LLC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-11 14:18:44 Last Seen2023-03-11 14:27:42 Times Seen1 Hash de7f23c27a0b8879e1acd629c02f28cb 14689dd2711185b8f5a887438faa98191b0cd413 b97fd837dcc89e6465f466a8b9c7ce076bd253eb8cdc43071eb5fefa784cd9aa Loading...

	img1.wsimg.com/traffic-assets/js/tccl.min.js	46 kB	2023-03-07	2023-10-15
Pretty URL img1.wsimg.com/traffic-assets/js/tccl.min.js IP 23.36.79.43 ASN #20940 Akamai International B.V. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:41 Last Seen2023-10-15 17:43:59 Times Seen9 Hash 362d20193a8fed115f99b16a157b7fc4 011964518b319a5aa479bf5c38bb8e15dd56138e 6cb0efedc1729d965016a35584cb00b03aa46e1a5e170f4b3ce092c7c3e99ec7 Loading...

	img1.wsimg.com/traffic-assets/js/tccl-tti.min.js	25 kB	2023-03-07	2024-02-02
Pretty URL img1.wsimg.com/traffic-assets/js/tccl-tti.min.js IP 23.36.79.43 ASN #20940 Akamai International B.V. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:41 Last Seen2024-02-02 18:24:37 Times Seen8238 Hash ce554d2333f3801abafb32da18213ff7 ef2b32494849244d9b9d8c23178e082cec9eab7f 6e74c12390bdb48bf5b0bb295ceed4f68add11467d2472d983a42e3023ecf312 Loading...

	www.kavazi.com/Titolari_Nexi/Area%20Personale_files/jquery-3.5.1.min.js.download	90 kB	2023-03-07	2024-04-13
Pretty URL www.kavazi.com/Titolari_Nexi/Area%20Personale_files/jquery-3.5.1.min.js.download IP 184.168.98.69 ASN #26496 AS-26496-GO-DADDY-COM-LLC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:27 Last Seen2024-04-13 19:18:23 Times Seen4689 Hash 12b69d0ae6c6f0c42942ae6da2896e84 d2cc8d43ce1c854b1172e42b1209502ad563db83 6150a35c0f486c46cadf0e230e2aa159c7c23ecfbb5611b64ee3f25fcbff341f Loading...

HTTP Transactions (44)

URL IP Response Size

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
6ed951622549ed76959631f8a1bf497b
682b2dd2a72190510e3fa7bdb0c0c6f25a322dfb
86f5e5ae2da408a899d16c83b7ca441033ac0c30062cd29f2db1b1b5be666746

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "86F5E5AE2DA408A899D16C83B7CA441033AC0C30062CD29F2DB1B1B5BE666746"
Last-Modified: Sat, 19 Nov 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16573
Expires: Sat, 19 Nov 2022 17:31:32 GMT
Date: Sat, 19 Nov 2022 12:55:19 GMT
Connection: keep-alive

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
f732c50f6a2482aeea20552e0370c2d0
6f33119d5c38e92a0a62f3a46766ff86014e4d68
a47e38c199c5fecd5594544a3889e1cfca5547d85f19056f06eaeeadf17f4fe9

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3176
Cache-Control: max-age=167330
Content-Type: application/ocsp-response
Date: Sat, 19 Nov 2022 12:55:19 GMT
Etag: "6378b071-1d7"
Expires: Mon, 21 Nov 2022 11:24:09 GMT
Last-Modified: Sat, 19 Nov 2022 10:31:13 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
e7724a1f27dc1b5b2fb63c7e486f74db
ef0ea648ce8bc189d31382baec4b181c724af93b
2a46916079563d95fa6a695104ebf41829ee95a156d6e4d45b9aef7231a8a80e

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2A46916079563D95FA6A695104EBF41829EE95A156D6E4D45B9AEF7231A8A80E"
Last-Modified: Fri, 18 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4173
Expires: Sat, 19 Nov 2022 14:04:52 GMT
Date: Sat, 19 Nov 2022 12:55:19 GMT
Connection: keep-alive

firefox.settings.services.mozilla.com/v1/

34.102.187.140

200 OK

939 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/
IP
34.102.187.140:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
4d7e4eed097b9c4e5d509419f1cfc85a
290bb3d428a7c6330e2e3d73a952b16f820896c8
0dc9ca0f57af15adcd416035e92794711434e3d53a1feff21d8481d6d500986c

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Content-Length, Alert, Backoff, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 19 Nov 2022 12:44:56 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 623
alt-svc: clear
X-Firefox-Spdy: h2

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain

34.160.144.191

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
34.160.144.191:0
ASN
#15169 GOOGLE

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
x-amz-id-2: F50B2BAQrcpZxsQxlNYhwDfmMXUzyQeepFsrpveagEH6zrsSeknUEMNxT+mBZC85u0X+B+g+k8+4UaJF8ELuPg==
x-amz-request-id: T4DD1VXNS4G28QZJ
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 19 Nov 2022 12:16:01 GMT
age: 2358
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Sat, 19 Nov 2022 12:55:19 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

34.102.187.140

200 OK

329 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
34.102.187.140:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size
329 B (329 bytes)
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Pragma, Alert, Content-Type, ETag, Retry-After, Last-Modified, Content-Length, Cache-Control, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 19 Nov 2022 12:44:49 GMT
cache-control: public,max-age=3600
age: 630
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
060d538b33e370fcd033339830d33a42
4a37d427988358eb318e18e2678c3484ef4a5ebd
efa33f92547243814b5bd3bca4f94d26055d590a4431611b3ba251a8d774bfbb

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5121
Cache-Control: max-age=164213
Content-Type: application/ocsp-response
Date: Sat, 19 Nov 2022 12:55:20 GMT
Etag: "63789cac-1d7"
Expires: Mon, 21 Nov 2022 10:32:13 GMT
Last-Modified: Sat, 19 Nov 2022 09:06:52 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471

push.services.mozilla.com/

54.186.117.16

101 Switching Protocols

0 B

URL HTTP/1.1
push.services.mozilla.com/
IP
54.186.117.16:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: KQ2HAsXfS338uox7/mkuEQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: XPkKg4COAk5F0JLk3QDoLMXOHvM=

www.kavazi.com/Titolari_Nexi/

184.168.98.69

200 OK

35 kB

URL HTTP/2
www.kavazi.com/Titolari_Nexi/
IP
184.168.98.69:0
ASN
#26496 AS-26496-GO-DADDY-COM-LLC

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document, Unicode text, UTF-8 text, with very long lines (1484), with CRLF line terminators
Size
35 kB (35058 bytes)
Hash
08d4f56b7b2591fb00ef1a267092c516
8d53cf2158427f7ed415753b9c044e18a428e9cf
133930eadecc00fbd481bf1d565a43b7a8e954b3d4be7be837ff4d9334dd8257

Detections

Analyzer	Verdict	Alert
openphish	CartaSi S.p.A
fortinet	Phishing

HTTP Headers

GET /Titolari_Nexi/ HTTP/1.1
Host: www.kavazi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

HTTP/2 200 OK
x-powered-by: PHP/7.3.33
set-cookie: COOKIE_KEY=166886252026; expires=Tue, 16-Nov-2032 12:55:20 GMT; Max-Age=315360000
COOKIE_KEY=166886252015; expires=Tue, 16-Nov-2032 12:55:20 GMT; Max-Age=315360000
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 35058
content-type: text/html; charset=UTF-8
date: Sat, 19 Nov 2022 12:55:20 GMT
server: Apache
X-Firefox-Spdy: h2

img1.wsimg.com/traffic-assets/js/tccl.min.js

23.36.79.43

302 Found

0 B

URL HTTP/2
img1.wsimg.com/traffic-assets/js/tccl.min.js
IP
23.36.79.43:0
ASN
#20940 Akamai International B.V.

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /traffic-assets/js/tccl.min.js HTTP/1.1
Host: img1.wsimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.kavazi.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 302 Found
content-length: 0
location: https://img6.wsimg.com/wrhs/362d20193a8fed115f99b16a157b7fc4/tccl.min.js
cache-control: max-age=1800
expires: Sat, 19 Nov 2022 13:25:20 GMT
date: Sat, 19 Nov 2022 12:55:20 GMT
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2

img1.wsimg.com/traffic-assets/js/tccl-tti.min.js

23.36.79.43

302 Found

0 B

URL HTTP/2
img1.wsimg.com/traffic-assets/js/tccl-tti.min.js
IP
23.36.79.43:0
ASN
#20940 Akamai International B.V.

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /traffic-assets/js/tccl-tti.min.js HTTP/1.1
Host: img1.wsimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.kavazi.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 302 Found
content-length: 0
location: https://img6.wsimg.com/wrhs/ce554d2333f3801abafb32da18213ff7/tti.min.js
cache-control: max-age=1800
expires: Sat, 19 Nov 2022 13:25:20 GMT
date: Sat, 19 Nov 2022 12:55:20 GMT
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2

img6.wsimg.com/wrhs/362d20193a8fed115f99b16a157b7fc4/tccl.min.js

23.36.79.43

200 OK

11 kB

URL HTTP/2
img6.wsimg.com/wrhs/362d20193a8fed115f99b16a157b7fc4/tccl.min.js
IP
23.36.79.43:0
ASN
#20940 Akamai International B.V.

File type
ASCII text, with very long lines (45500)
Size
11 kB (11155 bytes)
Hash
1ac00b5d5abfa64175a140de3f29a8e2
c07c5611cfff3ec4c7034134e4148f177242908c
65198366099c4eea2ed8a4dbe30fbb7896435a3505c5265260715d3385058378

HTTP Headers

GET /wrhs/362d20193a8fed115f99b16a157b7fc4/tccl.min.js HTTP/1.1
Host: img6.wsimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.kavazi.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
content-type: application/javascript
accept-ranges: bytes
content-encoding: br
etag: "362d20193a8fed115f99b16a157b7fc4"
last-modified: Mon, 11 Apr 2022 14:15:53 GMT
vary: Accept-Encoding
x-edgeconnect-midmile-rtt: 15
x-edgeconnect-origin-mex-latency: 135
x-amz-id-2: 73c+ZpWNgBh9xtilh6Nj22iH/BmUfkHwAgj9PgWHmvdTmSCUhi96da6Ell5SKHaif06RANK80zY=
x-amz-request-id: N5JSXGJTVEFZM8E9
x-amz-server-side-encryption: AES256
x-amz-version-id: Z0H0F1CdjRUI_nRMydHHi17Rv0HOw5tB
content-length: 11155
cache-control: max-age=31536000
date: Sat, 19 Nov 2022 12:55:20 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=1
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2

img6.wsimg.com/wrhs/ce554d2333f3801abafb32da18213ff7/tti.min.js

23.36.79.43

200 OK

7.5 kB

URL HTTP/2
img6.wsimg.com/wrhs/ce554d2333f3801abafb32da18213ff7/tti.min.js
IP
23.36.79.43:0
ASN
#20940 Akamai International B.V.

File type
ASCII text, with very long lines (24676)
Size
7.5 kB (7498 bytes)
Hash
b8a5a228a358454084c34dd1cf431c61
37aa5fe6e083b8147156ca66a1993a7bd74e8a61
06fae5ccf58a27a8e2ae6a0e7722f42db507c1873751f587cddd090810d94492

HTTP Headers

GET /wrhs/ce554d2333f3801abafb32da18213ff7/tti.min.js HTTP/1.1
Host: img6.wsimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.kavazi.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
content-type: application/javascript
accept-ranges: bytes
content-encoding: br
etag: "ce554d2333f3801abafb32da18213ff7"
last-modified: Mon, 17 Jan 2022 17:21:37 GMT
vary: Accept-Encoding
x-edgeconnect-midmile-rtt: 8
x-edgeconnect-origin-mex-latency: 357
x-amz-id-2: nldPfdb2FYbpxPRfMYRSd83AOL7ZmlBdZQSm5hguJELKdfn8+sza0oLEpTYjiKd2JeD3gDplFHw=
x-amz-request-id: RJ3J3PMANG6125DE
x-amz-server-side-encryption: AES256
x-amz-version-id: F4fYptXBkP0fCCCWFLfVGE1HXlZmORny
content-length: 7498
x-edgeconnect-cache-status: 1
cache-control: max-age=31536000
date: Sat, 19 Nov 2022 12:55:20 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=1
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2

www.kavazi.com/Titolari_Nexi/Area%20Personale_files/logo--light-double.svg

184.168.98.69

200 OK

796 B

URL HTTP/2
www.kavazi.com/Titolari_Nexi/Area%20Personale_files/logo--light-double.svg
IP
184.168.98.69:0
ASN
#26496 AS-26496-GO-DADDY-COM-LLC

File type
SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
796 B (796 bytes)
Hash
d3100382d3e4dcbdcf8101bd234febb8
01877a74b1500576bb794d17154f3c45cade1c8e
3b42c317becb4a02bd6adf7c799644f9f8930951a33712edc2583fab66751b52

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /Titolari_Nexi/Area%20Personale_files/logo--light-double.svg HTTP/1.1
Host: www.kavazi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.kavazi.com/Titolari_Nexi/
Cookie: COOKIE_KEY=166886252015
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
last-modified: Tue, 30 Mar 2021 04:49:12 GMT
etag: "20e0a42-5c4-5beb9b8310200-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 796
content-type: image/svg+xml
date: Sat, 19 Nov 2022 12:55:20 GMT
server: Apache
X-Firefox-Spdy: h2

www.kavazi.com/Titolari_Nexi/Area%20Personale_files/style(1).css

184.168.98.69

200 OK

3.7 kB

URL HTTP/2
www.kavazi.com/Titolari_Nexi/Area%20Personale_files/style(1).css
IP
184.168.98.69:0
ASN
#26496 AS-26496-GO-DADDY-COM-LLC

File type
ASCII text
Size
3.7 kB (3650 bytes)
Hash
e585945fb7078d5e2df8dabdc774a726
bc2a1400ba004e5f576378dbc37b3f51d87c4600
93fccac961e4f7152f23d8d3678241c65a7690d7361e7591235bc3d4f8947545

HTTP Headers

GET /Titolari_Nexi/Area%20Personale_files/style(1).css HTTP/1.1
Host: www.kavazi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.kavazi.com/Titolari_Nexi/
Cookie: COOKIE_KEY=166886252015
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
last-modified: Tue, 30 Mar 2021 04:49:12 GMT
etag: "20e0a47-47cf-5beb9b8310200-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 3650
content-type: text/css
date: Sat, 19 Nov 2022 12:55:20 GMT
server: Apache
X-Firefox-Spdy: h2

www.kavazi.com/Titolari_Nexi/Area%20Personale_files/app_store.svg

184.168.98.69

200 OK

6.7 kB

URL HTTP/2
www.kavazi.com/Titolari_Nexi/Area%20Personale_files/app_store.svg
IP
184.168.98.69:0
ASN
#26496 AS-26496-GO-DADDY-COM-LLC

File type
SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1295)
Size
6.7 kB (6673 bytes)
Hash
d016167ce36764138dc8253e6cc0f237
2ae85de77d12a3ebed807c23aa6c59e886dc1b1d
d2e92cc595519adb3331a5d9dec7d8f25d948e7606cdc5f9738ec7ed9c84b168

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /Titolari_Nexi/Area%20Personale_files/app_store.svg HTTP/1.1
Host: www.kavazi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.kavazi.com/Titolari_Nexi/
Cookie: COOKIE_KEY=166886252015
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
last-modified: Tue, 30 Mar 2021 04:49:12 GMT
etag: "20e0a09-3dc8-5beb9b8310200-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 6673
content-type: image/svg+xml
date: Sat, 19 Nov 2022 12:55:20 GMT
server: Apache
X-Firefox-Spdy: h2

www.kavazi.com/Titolari_Nexi/Area%20Personale_files/google_play.svg

184.168.98.69

200 OK

19 kB

URL HTTP/2
www.kavazi.com/Titolari_Nexi/Area%20Personale_files/google_play.svg
IP
184.168.98.69:0
ASN
#26496 AS-26496-GO-DADDY-COM-LLC

File type
SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (24914)
Size
19 kB (18796 bytes)
Hash
faad5892c159b8eaf57dd86b42551385
a669a27b3cb75eeb2122a952c3a1aad1ad0ef05a
e6aca37ecb1274232f5589eaca591a2cd6069a0f65013faf610274e23703046f

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /Titolari_Nexi/Area%20Personale_files/google_play.svg HTTP/1.1
Host: www.kavazi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.kavazi.com/Titolari_Nexi/
Cookie: COOKIE_KEY=166886252015
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
last-modified: Tue, 30 Mar 2021 04:49:12 GMT
etag: "20e0a1b-62ff-5beb9b8310200-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 18796
content-type: image/svg+xml
date: Sat, 19 Nov 2022 12:55:20 GMT
server: Apache
X-Firefox-Spdy: h2

www.kavazi.com/Titolari_Nexi/Area%20Personale_files/jquery-3.5.1.min.js.download

184.168.98.69

200 OK

31 kB

URL HTTP/2
www.kavazi.com/Titolari_Nexi/Area%20Personale_files/jquery-3.5.1.min.js.download
IP
184.168.98.69:0
ASN
#26496 AS-26496-GO-DADDY-COM-LLC

File type
ASCII text, with very long lines (65451)
Size
31 kB (30908 bytes)
Hash
a486f645b3658c3a8d2c9e21ef8cc663
c01121b10af96291ed8dd2a4f92685d590a6d3ce
791997fdee12dc85257dfc360e80df86554e6b5eadaf7a1f7ab68a4387aa58b1

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /Titolari_Nexi/Area%20Personale_files/jquery-3.5.1.min.js.download HTTP/1.1
Host: www.kavazi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.kavazi.com/Titolari_Nexi/
Cookie: COOKIE_KEY=166886252015
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
last-modified: Tue, 30 Mar 2021 04:49:12 GMT
etag: "20e0a30-15d83-5beb9b8310200-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 30908
content-type: application/javascript
date: Sat, 19 Nov 2022 12:55:20 GMT
server: Apache
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
798ef0955be535268547903e74dacfcd
782823486f9ded693609cade264d1950e816f7d0
75df3810e787be95774282d4851ce350bba5c326843f1bd02348746355866e95

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "75DF3810E787BE95774282D4851CE350BBA5C326843F1BD02348746355866E95"
Last-Modified: Sat, 19 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15683
Expires: Sat, 19 Nov 2022 17:16:44 GMT
Date: Sat, 19 Nov 2022 12:55:21 GMT
Connection: keep-alive

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F29c72a34-350b-448d-b69f-b0adfe74dc64.jpeg

34.120.237.76

200 OK

15 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F29c72a34-350b-448d-b69f-b0adfe74dc64.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
15 kB (14762 bytes)
Hash
8c96e8dc581a03b62c5f0a7c8ac49916
9051be78c17480c8e5128836c2cda0c6b96b0261
99c330ef89dbe0ac0b957e419e85c2c7de20bb74e6437961f60779410f70ba0e

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F29c72a34-350b-448d-b69f-b0adfe74dc64.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 14762
x-amzn-requestid: f60d1de2-407f-4e2f-bbb0-750f77d42878
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bw9VRGlUoAMFSqA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6376a8ee-1ef9573e23c7774435cbc843;Sampled=0
x-amzn-remapped-date: Thu, 17 Nov 2022 21:34:38 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: KjoelxAAejmjm6FjRLjyDGPjm17Vw-PhTCF_EtAgbDiZziTCmBJZNg==
via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 73cb83fe6699afc2791b5c690c1ff8c6.cloudfront.net (CloudFront), 1.1 google
date: Sat, 19 Nov 2022 01:53:20 GMT
age: 39721
etag: "9051be78c17480c8e5128836c2cda0c6b96b0261"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

5.2 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffad6fa40-abda-4ea3-b899-aef6906a01e1.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
5.2 kB (5198 bytes)
Hash
93b326374b3808d0af42e295643cdc14
dd691328acf190c745465208f18a41a75878df18
224ac3995e2e78ee5fcc6c5c3d5fb1f4b0ceca1c42b7a1a493c756aa199bf75f

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffad6fa40-abda-4ea3-b899-aef6906a01e1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
content-length: 5198
x-amzn-requestid: ba4e00c8-a996-41f3-b15a-1e304907ca2a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bw9UpH1ioAMF6ow=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6376a8ea-2f9f794c4de03f8b212e072f;Sampled=0
x-amzn-remapped-date: Thu, 17 Nov 2022 21:34:34 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: KVRDYZKrzaOvLC1NCAb6clyHxqb40wjyE0itVFOi1cwdGTvS2zsjUg==
via: 1.1 446313511980eb02f28ff5a9a4147c0a.cloudfront.net (CloudFront), 1.1 35575576af8067e30cfb17c6b9fde8e2.cloudfront.net (CloudFront), 1.1 google
date: Fri, 18 Nov 2022 21:56:07 GMT
age: 53954
etag: "dd691328acf190c745465208f18a41a75878df18"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

9.2 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9472302a-1f5a-4747-8dae-6de1346c8e14.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
9.2 kB (9235 bytes)
Hash
1b428c8fece61cb8500ff6f6152efcc0
2667b5a57a13817a95e2e82b0f96dc3456afca00
53403b823626d7cd0b88f33e924b55274c7283397075d074303faaf4eaafdc49

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9472302a-1f5a-4747-8dae-6de1346c8e14.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 9235
x-amzn-requestid: 74fe450e-d88d-486b-884e-b572807761ac
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: brhKSGt9IAMF1DQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63747bdb-74ec0bbf32c5d90f1f403ce5;Sampled=0
x-amzn-remapped-date: Wed, 16 Nov 2022 05:57:47 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: NPDERVkifih6PQbcS9tpzFSv46fcteqqPJ4kWFFBEjSWguVHs66alg==
via: 1.1 1352c0a623ff0601dd16439f3f225f70.cloudfront.net (CloudFront), 1.1 ebe4011a81a36e2bf678f69ce1711330.cloudfront.net (CloudFront), 1.1 google
date: Sat, 19 Nov 2022 08:32:34 GMT
age: 15767
etag: "2667b5a57a13817a95e2e82b0f96dc3456afca00"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

11 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fac98a873-8b46-43f5-9ac0-fc1cc1a0cd81.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
11 kB (11249 bytes)
Hash
481c033b9ffd030ff0de6e35cf788b47
85d3baad9217af2b5d75c019d2ef95dbb919a788
02443c7869914c2b29892deb0c645395bcf4e8379da3cf20974614ff9c92893b

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fac98a873-8b46-43f5-9ac0-fc1cc1a0cd81.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 11249
x-amzn-requestid: 65a3db77-b2e6-40b9-a776-021c2e9b56d0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bubSsHbZoAMFZNg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6375a5aa-1286b97968cc2e4c7fe8ab29;Sampled=0
x-amzn-remapped-date: Thu, 17 Nov 2022 03:08:26 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: s1153EpshSWYGLcN7Zzzs4PgXl9cddZ20gTwh5bK2HOBu4e_PSNCpQ==
via: 1.1 38eecd3ca21bf068d69a2f9cfe668d14.cloudfront.net (CloudFront), 1.1 1508efc4152aa1778ed4adecb328b374.cloudfront.net (CloudFront), 1.1 google
date: Sat, 19 Nov 2022 03:36:46 GMT
age: 33515
etag: "85d3baad9217af2b5d75c019d2ef95dbb919a788"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

9.1 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8e1d1acd-0ae6-485d-9dd4-2c0c8271a9d3.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
9.1 kB (9146 bytes)
Hash
11bb9d337001b4d155c63b05a0dd9945
14de1c48a2fe80b5947945c9ffa9630f03c5447a
8ee6d3a2f6dec36c49361ef855edeb170e92fbeff29d2ed77c7fd0cf44cfecf5

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8e1d1acd-0ae6-485d-9dd4-2c0c8271a9d3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 9146
x-amzn-requestid: bc172968-362a-4bc7-b0b5-42f98efb4b89
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: brr_iHSYoAMF78g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63748d30-1134b05e468dace31d2c8652;Sampled=0
x-amzn-remapped-date: Wed, 16 Nov 2022 07:11:44 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: V6dk4ZgCxnKT-h9QcPzNo-35B75_NSSxcIeEcK_CbFbSHU_JHvK74w==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 02d90bf99fd6253b329a53c82f19e224.cloudfront.net (CloudFront), 1.1 google
date: Sat, 19 Nov 2022 09:25:46 GMT
age: 12575
etag: "14de1c48a2fe80b5947945c9ffa9630f03c5447a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

4.9 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F47c537d4-e03f-4ec6-8922-6dce72c72ab9.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
4.9 kB (4851 bytes)
Hash
459df915ce91b32b2dcc4850516d68a0
d7a5473d367e7965a4af55acbf4675ed7088fab2
a03e26ebee79ad9b9dda1bf680e0d2467ae6d5e582589ada9fe6ddfa437c483c

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F47c537d4-e03f-4ec6-8922-6dce72c72ab9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 4851
x-amzn-requestid: 8c868655-d0eb-428d-9fc0-a7449f770bd4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: brtDFF9HoAMFV9w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63748ee0-4f7daf8f7451dc5e0840f620;Sampled=0
x-amzn-remapped-date: Wed, 16 Nov 2022 07:18:56 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: xirMw5z5GPbmx9Sii_I4iNeh1GS5k9lGmaaJvUGAPWoVyP0Tldhf1w==
via: 1.1 e9ba0a9a729ff2960a04323bf1833df8.cloudfront.net (CloudFront), 1.1 1508efc4152aa1778ed4adecb328b374.cloudfront.net (CloudFront), 1.1 google
date: Sat, 19 Nov 2022 03:31:06 GMT
age: 33855
etag: "d7a5473d367e7965a4af55acbf4675ed7088fab2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

www.kavazi.com/Titolari_Nexi/Area%20Personale_files/icon-blocked.svg

184.168.98.69

200 OK

530 B

URL HTTP/2
www.kavazi.com/Titolari_Nexi/Area%20Personale_files/icon-blocked.svg
IP
184.168.98.69:0
ASN
#26496 AS-26496-GO-DADDY-COM-LLC

File type
SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
530 B (530 bytes)
Hash
b7b95aacae60f916168bebb4dc46d1c0
ed0d21fc07d96fb126b9c0055de7d5647b8e715e
c52a04b8a538f3db5756a0c7b5581230b60e6d4efca7c325105755fe3499bbb2

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /Titolari_Nexi/Area%20Personale_files/icon-blocked.svg HTTP/1.1
Host: www.kavazi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.kavazi.com/Titolari_Nexi/
Cookie: COOKIE_KEY=166886252015
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
last-modified: Tue, 30 Mar 2021 04:49:12 GMT
etag: "20e0a20-3a7-5beb9b8310200-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 530
content-type: image/svg+xml
date: Sat, 19 Nov 2022 12:55:20 GMT
server: Apache
X-Firefox-Spdy: h2

www.kavazi.com/Titolari_Nexi/Area%20Personale_files/icon-close-white.svg

184.168.98.69

200 OK

812 B

URL HTTP/2
www.kavazi.com/Titolari_Nexi/Area%20Personale_files/icon-close-white.svg
IP
184.168.98.69:0
ASN
#26496 AS-26496-GO-DADDY-COM-LLC

File type
SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
812 B (812 bytes)
Hash
f622ecd72f5d26f8d15fbbaa2dabef15
9f0c5c86779365511125966c1eee4db2c9717766
75beff465a73314fd353294bf1c0411f6961b604358e1623fe212876bf2d7d1c

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /Titolari_Nexi/Area%20Personale_files/icon-close-white.svg HTTP/1.1
Host: www.kavazi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.kavazi.com/Titolari_Nexi/
Cookie: COOKIE_KEY=166886252015
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
last-modified: Tue, 30 Mar 2021 04:49:12 GMT
etag: "20e0a24-637-5beb9b8310200-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 812
content-type: image/svg+xml
date: Sat, 19 Nov 2022 12:55:20 GMT
server: Apache
X-Firefox-Spdy: h2

www.kavazi.com/Titolari_Nexi/Area%20Personale_files/icon-close.svg

184.168.98.69

200 OK

803 B

URL HTTP/2
www.kavazi.com/Titolari_Nexi/Area%20Personale_files/icon-close.svg
IP
184.168.98.69:0
ASN
#26496 AS-26496-GO-DADDY-COM-LLC

File type
SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
803 B (803 bytes)
Hash
ed9fe45c407341f4a4850154b6bda352
2652f919e898979c27707d69aacd6582fd6d8258
35fdedb039e2ab09ff1fc18aa5d3c56514ee3b2c83d20f50afc59788781ce309

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /Titolari_Nexi/Area%20Personale_files/icon-close.svg HTTP/1.1
Host: www.kavazi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.kavazi.com/Titolari_Nexi/
Cookie: COOKIE_KEY=166886252015
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
last-modified: Tue, 30 Mar 2021 04:49:12 GMT
etag: "20e0a27-628-5beb9b8310200-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 803
content-type: image/svg+xml
date: Sat, 19 Nov 2022 12:55:20 GMT
server: Apache
X-Firefox-Spdy: h2

www.kavazi.com/Titolari_Nexi/Area%20Personale_files/ico-down-blue.svg

184.168.98.69

200 OK

560 B

URL HTTP/2
www.kavazi.com/Titolari_Nexi/Area%20Personale_files/ico-down-blue.svg
IP
184.168.98.69:0
ASN
#26496 AS-26496-GO-DADDY-COM-LLC

File type
SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Size
560 B (560 bytes)
Hash
4c7b45f0bfc2e7106324cd953e9462ec
3a4c3d8a7d1e2bc251ec6004b1c89e861e293d52
08abab1ae5632446f0dc55418e34e72521d62bd82ac5629d304dfcbc2704cd75

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /Titolari_Nexi/Area%20Personale_files/ico-down-blue.svg HTTP/1.1
Host: www.kavazi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.kavazi.com/Titolari_Nexi/
Cookie: COOKIE_KEY=166886252015
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
last-modified: Tue, 30 Mar 2021 04:49:12 GMT
etag: "20e0a1e-382-5beb9b8310200-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 560
content-type: image/svg+xml
date: Sat, 19 Nov 2022 12:55:20 GMT
server: Apache
X-Firefox-Spdy: h2

www.kavazi.com/Titolari_Nexi/Area%20Personale_files/icon-phone.svg

184.168.98.69

200 OK

1.5 kB

URL HTTP/2
www.kavazi.com/Titolari_Nexi/Area%20Personale_files/icon-phone.svg
IP
184.168.98.69:0
ASN
#26496 AS-26496-GO-DADDY-COM-LLC

File type
SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
1.5 kB (1536 bytes)
Hash
997eb0fc0f957abfd4b2bfdcc1c0af07
d3ef70a8c2144639a0982a71f90deb5eb9bc09ec
9e0eacdaaa088d5dbe3dcd86a738da7fb24f32f5529616eaba81848681c88b83

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /Titolari_Nexi/Area%20Personale_files/icon-phone.svg HTTP/1.1
Host: www.kavazi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.kavazi.com/Titolari_Nexi/
Cookie: COOKIE_KEY=166886252015
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
last-modified: Tue, 30 Mar 2021 04:49:12 GMT
etag: "20e0a2d-fb0-5beb9b8310200-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 1536
content-type: image/svg+xml
date: Sat, 19 Nov 2022 12:55:20 GMT
server: Apache
X-Firefox-Spdy: h2

www.kavazi.com/Titolari_Nexi/Area%20Personale_files/icon-phone-warning-white.svg

184.168.98.69

200 OK

1.5 kB

URL HTTP/2
www.kavazi.com/Titolari_Nexi/Area%20Personale_files/icon-phone-warning-white.svg
IP
184.168.98.69:0
ASN
#26496 AS-26496-GO-DADDY-COM-LLC

File type
SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
1.5 kB (1512 bytes)
Hash
bfa9df24b8350b67319db5da4cd93bb0
d2abd1c90aa009503e362e79f1baec90f59d460a
70174befc1e5b479d2ef5b8af48cc478c07203d36dc3ef8d54870445e5c889d6

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /Titolari_Nexi/Area%20Personale_files/icon-phone-warning-white.svg HTTP/1.1
Host: www.kavazi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.kavazi.com/Titolari_Nexi/
Cookie: COOKIE_KEY=166886252015
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
last-modified: Tue, 30 Mar 2021 04:49:12 GMT
etag: "20e0a2b-f29-5beb9b8310200-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 1512
content-type: image/svg+xml
date: Sat, 19 Nov 2022 12:55:20 GMT
server: Apache
X-Firefox-Spdy: h2

www.kavazi.com/Titolari_Nexi/Area%20Personale_files/fonts/karbon-regular-webfont.woff

184.168.98.69

200 OK

24 kB

URL HTTP/2
www.kavazi.com/Titolari_Nexi/Area%20Personale_files/fonts/karbon-regular-webfont.woff
IP
184.168.98.69:0
ASN
#26496 AS-26496-GO-DADDY-COM-LLC

File type
Web Open Font Format, TrueType, length 24308, version 1.0\012- data
Size
24 kB (24308 bytes)
Hash
e6b850dccbd545df306ea2f25452a124
08bdf0f61b8316130f85a2725dcbd7eb5a6dc750
ade827343407a2a81168acb91cabc1ed7d83de7010966dd1b7f06f4e0344b9e6

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /Titolari_Nexi/Area%20Personale_files/fonts/karbon-regular-webfont.woff HTTP/1.1
Host: www.kavazi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.kavazi.com/Titolari_Nexi/Area%20Personale_files/style.css
Cookie: COOKIE_KEY=166886252015
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
last-modified: Tue, 30 Mar 2021 06:23:32 GMT
etag: "20e0a19-5ef4-5bebb098dc100"
accept-ranges: bytes
content-length: 24308
vary: Accept-Encoding,User-Agent
content-type: font/woff
date: Sat, 19 Nov 2022 12:55:22 GMT
server: Apache
X-Firefox-Spdy: h2

www.kavazi.com/Titolari_Nexi/Area%20Personale_files/fonts/karbon-semibold-webfont.woff

184.168.98.69

200 OK

25 kB

URL HTTP/2
www.kavazi.com/Titolari_Nexi/Area%20Personale_files/fonts/karbon-semibold-webfont.woff
IP
184.168.98.69:0
ASN
#26496 AS-26496-GO-DADDY-COM-LLC

File type
Web Open Font Format, TrueType, length 25032, version 1.0\012- data
Size
25 kB (25032 bytes)
Hash
4e893a43d47ba798763b8990f9e07180
9ac339e30beac18d0a4aaecce5b66a723ec46532
0696904b24ea3bdaf9ee857ded71391ccd44d40b84334571a5c5e71f93b4a0c6

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /Titolari_Nexi/Area%20Personale_files/fonts/karbon-semibold-webfont.woff HTTP/1.1
Host: www.kavazi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.kavazi.com/Titolari_Nexi/Area%20Personale_files/style.css
Cookie: COOKIE_KEY=166886252015
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
last-modified: Tue, 30 Mar 2021 06:23:34 GMT
etag: "20e0a1a-61c8-5bebb09ac4580"
accept-ranges: bytes
content-length: 25032
vary: Accept-Encoding,User-Agent
content-type: font/woff
date: Sat, 19 Nov 2022 12:55:22 GMT
server: Apache
X-Firefox-Spdy: h2

www.kavazi.com/Titolari_Nexi/Area%20Personale_files/fonts/karbon-medium-webfont.woff

184.168.98.69

200 OK

25 kB

URL HTTP/2
www.kavazi.com/Titolari_Nexi/Area%20Personale_files/fonts/karbon-medium-webfont.woff
IP
184.168.98.69:0
ASN
#26496 AS-26496-GO-DADDY-COM-LLC

File type
Web Open Font Format, TrueType, length 24956, version 1.0\012- data
Size
25 kB (24956 bytes)
Hash
034fa219154a0eed22d6ef6ebd89c3a9
c8574cf3bfc69f53392d916aef929ccc882a9386
4061275193aa1a5245941f7768b307219fc0f86f44dc1cf4d293168b93a72259

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /Titolari_Nexi/Area%20Personale_files/fonts/karbon-medium-webfont.woff HTTP/1.1
Host: www.kavazi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.kavazi.com/Titolari_Nexi/Area%20Personale_files/style.css
Cookie: COOKIE_KEY=166886252015
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
last-modified: Tue, 30 Mar 2021 06:23:30 GMT
etag: "20e0a15-617c-5bebb096f3c80"
accept-ranges: bytes
content-length: 24956
vary: Accept-Encoding,User-Agent
content-type: font/woff
date: Sat, 19 Nov 2022 12:55:22 GMT
server: Apache
X-Firefox-Spdy: h2

ocsp.globalsign.com/gsrsaovsslca2018

104.18.21.226

200 OK

1.4 kB

URL HTTP/1.1
ocsp.globalsign.com/gsrsaovsslca2018
IP
104.18.21.226:0
ASN
#13335 CLOUDFLARENET

File type
data
Size
1.4 kB (1432 bytes)
Hash
88e7cd812c9bd5561c52be4ea9d03837
adadb819cdaf5515d3152e60cfee9c026da9b750
ffd64f5f9632a0b7ecb0ee5dc37ed68f984649e84aebdadb9fa84e13b5e8d5bf

HTTP Headers

POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 19 Nov 2022 12:55:22 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Wed, 23 Nov 2022 12:11:46 GMT
ETag: "adadb819cdaf5515d3152e60cfee9c026da9b750"
Last-Modified: Sat, 19 Nov 2022 12:11:47 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: EXPIRED
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76c9198d1d54b511-OSL

ocsp.globalsign.com/gsrsaovsslca2018

104.18.21.226

200 OK

1.4 kB

URL HTTP/1.1
ocsp.globalsign.com/gsrsaovsslca2018
IP
104.18.21.226:0
ASN
#13335 CLOUDFLARENET

File type
data
Size
1.4 kB (1432 bytes)
Hash
88e7cd812c9bd5561c52be4ea9d03837
adadb819cdaf5515d3152e60cfee9c026da9b750
ffd64f5f9632a0b7ecb0ee5dc37ed68f984649e84aebdadb9fa84e13b5e8d5bf

HTTP Headers

POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 19 Nov 2022 12:55:22 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Wed, 23 Nov 2022 12:11:46 GMT
ETag: "adadb819cdaf5515d3152e60cfee9c026da9b750"
Last-Modified: Sat, 19 Nov 2022 12:11:47 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: EXPIRED
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76c9198d3e160b49-OSL

www.nexi.it/etc/designs/nexi/favicon/favicon-16x16.png

185.198.118.126

200 OK

300 B

URL HTTP/1.1
www.nexi.it/etc/designs/nexi/favicon/favicon-16x16.png
IP
185.198.118.126:0
ASN
#35051 Nexi Payments S.P.A.

File type
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Size
300 B (300 bytes)
Hash
200029b5e4fb2ebe6681acdc3c54f558
8f2eda5c64a7cfde221947a29fc6ffb57b11b772
b6a9125da73f90564107299c92997b40c2ddba9bd37272c960b16932d5854e4d

HTTP Headers

GET /etc/designs/nexi/favicon/favicon-16x16.png HTTP/1.1
Host: www.nexi.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.kavazi.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Date: Sat, 19 Nov 2022 12:55:22 GMT
Last-Modified: Wed, 16 Nov 2022 14:04:45 GMT
ETag: "12c-5ed96f471b8a0"
Accept-Ranges: bytes
Content-Length: 300
Access-Control-Allow-Methods: GET, HEAD
Cache-Control: max-age=300, public
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: image/png
P3P: policyref="/w3c/p3p.xml", CP="IDC DSP COR NID DEVi OUR BUS INT"
Set-Cookie: lb_cookie2="ca71f78e7cf3889cd820fcd609d5d3916a48bb3feb0cdbdcb20699d3b08878b4 settimo"; Path=/; Domain=.nexi.it; Expires=Sat, 19-Nov-2022 14:55:22 GMT
TS01a05a0f=0101a8acbed8f574f36be211c99f27c22c55f44a3735cbc2970853c00c25b95f92a43a4c2fe09cd00337d115c99b44460d31d610a44504e2d91a1a341b81881f22a64a99cf; Path=/; Domain=.www.nexi.it
Vary: Accept-Encoding

www.nexi.it/etc/designs/nexi/favicon/favicon-196x196.png

185.198.118.126

200 OK

25 kB

URL HTTP/1.1
www.nexi.it/etc/designs/nexi/favicon/favicon-196x196.png
IP
185.198.118.126:0
ASN
#35051 Nexi Payments S.P.A.

File type
PNG image data, 196 x 196, 8-bit/color RGBA, non-interlaced\012- data
Size
25 kB (25215 bytes)
Hash
3a0ce25384d4ea5734d25779bc8bd41a
62b5bd3bdeac213d075f7de99a2b96283717574e
77d497a3c716b3fb900f01e92bc5b6f0928c6040d30a3d88eb8a95df71c625cf

HTTP Headers

GET /etc/designs/nexi/favicon/favicon-196x196.png HTTP/1.1
Host: www.nexi.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.kavazi.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Date: Sat, 19 Nov 2022 12:55:22 GMT
Last-Modified: Wed, 16 Nov 2022 14:02:39 GMT
ETag: "627f-5ed96ecf2a464"
Accept-Ranges: bytes
Content-Length: 25215
Access-Control-Allow-Methods: GET, HEAD
Cache-Control: max-age=300, public
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/png
P3P: policyref="/w3c/p3p.xml", CP="IDC DSP COR NID DEVi OUR BUS INT"
Set-Cookie: lb_cookie2="bad28150165ec9e31f01ebae8cf1596b739c2eae6aca7e25ff89d881fe37b510 settimo"; Path=/; Domain=.nexi.it; Expires=Sat, 19-Nov-2022 14:55:22 GMT
TS01a05a0f=0101a8acbeaa04b3fdcc7d5819b994c3ef25dc25eba0fc04a01fcda23acbebc5352c8b99d2702809f34836c74864ea3d01015feca46ad4247623ff01939be1ce13a001d1d8; Path=/; Domain=.www.nexi.it

www.kavazi.com/Titolari_Nexi/placeholder_login_portale_privati.png

184.168.98.69

200 OK

432 kB

URL HTTP/2
www.kavazi.com/Titolari_Nexi/placeholder_login_portale_privati.png
IP
184.168.98.69:0
ASN
#26496 AS-26496-GO-DADDY-COM-LLC

File type
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1440x1024, components 3\012- data
Size
432 kB (432515 bytes)
Hash
b9a33ab5b99902deb7d1c2a80e087d3b
735b1f9129d66f768861a332dc0f6e0e0c8fc4fd
dc50ef7f80147b0a2407f5a560125db8b36c799d5a5a32b17d83fea8f03492e5

HTTP Headers

GET /Titolari_Nexi/placeholder_login_portale_privati.png HTTP/1.1
Host: www.kavazi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.kavazi.com/Titolari_Nexi/
Cookie: COOKIE_KEY=166886252015
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
last-modified: Thu, 18 Nov 2021 21:23:06 GMT
etag: "20e0b0f-69983-5d116c3ae0280"
accept-ranges: bytes
content-length: 432515
content-type: image/png
date: Sat, 19 Nov 2022 12:55:21 GMT
server: Apache
X-Firefox-Spdy: h2

events.api.secureserver.net/t/1/tl/event?cts=1668862523022&dh=www.kavazi.com&dr=&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&vci=735245042&cv=2.0.0&z=206071037&vg=59192835-530c-50ed-a74a-d80155908df4&vtg=59192835-530c-50ed-a74a-d80155908df4&dp=%2FTitolari_Nexi&ap=cpbh-mt&trfd=%7B%22ap%22%3A%22cpbh-mt%22%2C%22server%22%3A%22sg2plmcpnl492229%22%2C%22dcenter%22%3A%22sg2%22%2C%22id%22%3A%226865391%22%7D&hit_id=1539342f-02cd-5e2c-9ef8-b0b0e49c71ac&ht=perf&tce=1668862520078&tcs=1668862519303&tdc=1668862523017&tdclee=1668862521767&tdcles=1668862521766&tdi=1668862521762&tdl=1668862520360&tdle=1668862519303&tdls=1668862519300&tfs=1668862519251&tns=1668862519255&trqs=1668862520078&tre=1668862520608&trps=1668862520351&tles=1668862523017&tlee=0&nt=navigate&nav_type=hard

23.72.139.72

200 OK

43 B

URL HTTP/2
events.api.secureserver.net/t/1/tl/event?cts=1668862523022&dh=www.kavazi.com&dr=&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&vci=735245042&cv=2.0.0&z=206071037&vg=59192835-530c-50ed-a74a-d80155908df4&vtg=59192835-530c-50ed-a74a-d80155908df4&dp=%2FTitolari_Nexi&ap=cpbh-mt&trfd=%7B%22ap%22%3A%22cpbh-mt%22%2C%22server%22%3A%22sg2plmcpnl492229%22%2C%22dcenter%22%3A%22sg2%22%2C%22id%22%3A%226865391%22%7D&hit_id=1539342f-02cd-5e2c-9ef8-b0b0e49c71ac&ht=perf&tce=1668862520078&tcs=1668862519303&tdc=1668862523017&tdclee=1668862521767&tdcles=1668862521766&tdi=1668862521762&tdl=1668862520360&tdle=1668862519303&tdls=1668862519300&tfs=1668862519251&tns=1668862519255&trqs=1668862520078&tre=1668862520608&trps=1668862520351&tles=1668862523017&tlee=0&nt=navigate&nav_type=hard
IP
23.72.139.72:0
ASN
#20940 Akamai International B.V.

File type
GIF image data, version 89a, 1 x 1\012- data
Size
43 B (43 bytes)
Hash
325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b

HTTP Headers

GET /t/1/tl/event?cts=1668862523022&dh=www.kavazi.com&dr=&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&vci=735245042&cv=2.0.0&z=206071037&vg=59192835-530c-50ed-a74a-d80155908df4&vtg=59192835-530c-50ed-a74a-d80155908df4&dp=%2FTitolari_Nexi&ap=cpbh-mt&trfd=%7B%22ap%22%3A%22cpbh-mt%22%2C%22server%22%3A%22sg2plmcpnl492229%22%2C%22dcenter%22%3A%22sg2%22%2C%22id%22%3A%226865391%22%7D&hit_id=1539342f-02cd-5e2c-9ef8-b0b0e49c71ac&ht=perf&tce=1668862520078&tcs=1668862519303&tdc=1668862523017&tdclee=1668862521767&tdcles=1668862521766&tdi=1668862521762&tdl=1668862520360&tdle=1668862519303&tdls=1668862519300&tfs=1668862519251&tns=1668862519255&trqs=1668862520078&tre=1668862520608&trps=1668862520351&tles=1668862523017&tlee=0&nt=navigate&nav_type=hard HTTP/1.1
Host: events.api.secureserver.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.kavazi.com
Connection: keep-alive
Referer: https://www.kavazi.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
content-type: image/gif
content-length: 43
access-control-allow-origin: https://www.kavazi.com
access-control-allow-credentials: true
x-robots-tag: noindex, nofollow
cache-control: private
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
strict-transport-security: max-age=31536000 ; includeSubDomains
x-frame-options: DENY
date: Sat, 19 Nov 2022 12:55:23 GMT
X-Firefox-Spdy: h2

events.api.secureserver.net/t/1/tl/event?cts=1668862521761&dh=www.kavazi.com&dr=&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&vci=735245042&cv=2.0.0&z=1804436621&vg=59192835-530c-50ed-a74a-d80155908df4&vtg=59192835-530c-50ed-a74a-d80155908df4&dp=%2FTitolari_Nexi&ap=cpbh-mt&trfd=%7B%22ap%22%3A%22cpbh-mt%22%2C%22server%22%3A%22sg2plmcpnl492229%22%2C%22dcenter%22%3A%22sg2%22%2C%22id%22%3A%226865391%22%7D&hit_id=db2f6831-93a0-50e9-8863-3f8c5c5cfd97&ht=pageview

23.72.139.72

200 OK

43 B

URL HTTP/2
events.api.secureserver.net/t/1/tl/event?cts=1668862521761&dh=www.kavazi.com&dr=&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&vci=735245042&cv=2.0.0&z=1804436621&vg=59192835-530c-50ed-a74a-d80155908df4&vtg=59192835-530c-50ed-a74a-d80155908df4&dp=%2FTitolari_Nexi&ap=cpbh-mt&trfd=%7B%22ap%22%3A%22cpbh-mt%22%2C%22server%22%3A%22sg2plmcpnl492229%22%2C%22dcenter%22%3A%22sg2%22%2C%22id%22%3A%226865391%22%7D&hit_id=db2f6831-93a0-50e9-8863-3f8c5c5cfd97&ht=pageview
IP
23.72.139.72:0
ASN
#20940 Akamai International B.V.

File type
GIF image data, version 89a, 1 x 1\012- data
Size
43 B (43 bytes)
Hash
325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b

HTTP Headers

GET /t/1/tl/event?cts=1668862521761&dh=www.kavazi.com&dr=&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&vci=735245042&cv=2.0.0&z=1804436621&vg=59192835-530c-50ed-a74a-d80155908df4&vtg=59192835-530c-50ed-a74a-d80155908df4&dp=%2FTitolari_Nexi&ap=cpbh-mt&trfd=%7B%22ap%22%3A%22cpbh-mt%22%2C%22server%22%3A%22sg2plmcpnl492229%22%2C%22dcenter%22%3A%22sg2%22%2C%22id%22%3A%226865391%22%7D&hit_id=db2f6831-93a0-50e9-8863-3f8c5c5cfd97&ht=pageview HTTP/1.1
Host: events.api.secureserver.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.kavazi.com
Connection: keep-alive
Referer: https://www.kavazi.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
content-type: image/gif
content-length: 43
access-control-allow-origin: https://www.kavazi.com
access-control-allow-credentials: true
x-robots-tag: noindex, nofollow
cache-control: private
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
strict-transport-security: max-age=31536000 ; includeSubDomains
x-frame-options: DENY
date: Sat, 19 Nov 2022 12:55:23 GMT
X-Firefox-Spdy: h2

34.120.237.76

200 OK

7.8 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F640a732f-1fd9-47b0-8311-39061579f99b.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
7.8 kB (7754 bytes)
Hash
8cf981b1ea47b981c73aa1f291be4d8a
d18b869e1940841e9b03f66f5608e381f1727b37
3352a04b9596b594aeb5de3dc70047196a830e3ca79babf7c1b72ff1103b2d26

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F640a732f-1fd9-47b0-8311-39061579f99b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
content-length: 7754
x-amzn-requestid: 2c21447c-03bb-4e50-9eeb-a8ae86c0d204
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b0QRmFuiIAMFjWg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6377fa70-7a7e65fc5d443a1d70feb62b;Sampled=0
x-amzn-remapped-date: Fri, 18 Nov 2022 21:34:40 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: FOOPIt4Esu0ifQGtxGkVlsrvvCrMjc8K6u02NCgurh2d7bvBieMkwg==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 5397b304713f6301c7c94ac084b6ed08.cloudfront.net (CloudFront), 1.1 google
date: Fri, 18 Nov 2022 21:48:36 GMT
etag: "d18b869e1940841e9b03f66f5608e381f1727b37"
content-type: image/jpeg
age: 54412
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

www.kavazi.com/Titolari_Nexi/Area%20Personale_files/style.css

184.168.98.69

200 OK

0 B

URL HTTP/2
www.kavazi.com/Titolari_Nexi/Area%20Personale_files/style.css
IP
184.168.98.69:0
ASN
#26496 AS-26496-GO-DADDY-COM-LLC

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /Titolari_Nexi/Area%20Personale_files/style.css HTTP/1.1
Host: www.kavazi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.kavazi.com/Titolari_Nexi/
Cookie: COOKIE_KEY=166886252015
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
last-modified: Tue, 30 Mar 2021 04:49:12 GMT
etag: "20e0a48-8df88-5beb9b8310200-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-type: text/css
date: Sat, 19 Nov 2022 12:55:20 GMT
server: Apache
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

JavaScript (4)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (44)

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/2

IP

ASN

File type

Size