residenzabistrotdevenise.com/xdce/xles/host/login.php
200 OK 5.7 kB URL HTTP/1.1 residenzabistrotdevenise.com/xdce/xles/host/login.php
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (2821), with CRLF line terminators
Hash 2f33db22711fdf26e5a01b54b7238e71
9df0f655eff9e924f1d1dd08caf42ff0a42e4329
96a6dc0cd9dfc8eeed5010e814b235d6e8c800d956b3a6a5cf9318b71128c2c1
Analyzer Verdict Alert fortinet Phishing
GET /xdce/xles/host/login.php HTTP/1.1
Host: residenzabistrotdevenise.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 05 Nov 2022 01:37:42 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 5664
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PHP/7.3.20, PleskLin
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b720c31d9c036cd2ef10e35fa29f5345
ac625d2e69284e5080bede4b37c31af62c26338b
323b76eceb5d3ad339a1c55bfa7eea4e39741258e08d5005b691f712a9e9c81c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "323B76ECEB5D3AD339A1C55BFA7EEA4E39741258E08D5005B691F712A9E9C81C"
Last-Modified: Thu, 03 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20566
Expires: Sat, 05 Nov 2022 07:20:28 GMT
Date: Sat, 05 Nov 2022 01:37:42 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash cd02b32dbc8416dcb10b468af2166c33
503a9c4cabdb19dfde769f5e2d3ef919c818c364
46ca638514d9d4cf252762fdac37a5e7b1da550fcc9911070b0b26a6aa6150a7
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5777
Cache-Control: max-age=120580
Content-Type: application/ocsp-response
Date: Sat, 05 Nov 2022 01:37:42 GMT
Etag: "6364dbd9-1d7"
Expires: Sun, 06 Nov 2022 11:07:22 GMT
Last-Modified: Fri, 04 Nov 2022 09:31:05 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9f3527f898221f8ba6b5015f6decc100
ead93baa0e9d3a6297be3377dc3a624e5a3f509a
73a068f907cc50dd60af18d545b4264dd44bc4b9f40bf9adfceea157fdc33099
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "73A068F907CC50DD60AF18D545B4264DD44BC4B9F40BF9ADFCEEA157FDC33099"
Last-Modified: Thu, 03 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14201
Expires: Sat, 05 Nov 2022 05:34:23 GMT
Date: Sat, 05 Nov 2022 01:37:42 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: nCI+dHlFQki8Mxc2/fb8W141Jak55VUjhVNTcedShSj9V5Rj6Er+8x7B2sr4CRFZKHMBuMdVPKA=
x-amz-request-id: SH0R8G2NAGXATK2H
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 05 Nov 2022 01:09:48 GMT
age: 1674
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 05 Nov 2022 01:37:42 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
residenzabistrotdevenise.com/xdce/xles/host/assets/css/web.css
200 OK 128 kB URL HTTP/1.1 residenzabistrotdevenise.com/xdce/xles/host/assets/css/web.css
IP
Size 128 kB (127776 bytes)
Hash 91f9f3f1b1a14d82501368d7fb739655
198fac9f963789e820d782bfdb4fb20ad7771257
d1ebe550d9854a560eda19829e29125425d3eb5a0713010f4c15cc8d62bc8538
GET /xdce/xles/host/assets/css/web.css HTTP/1.1
Host: residenzabistrotdevenise.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://residenzabistrotdevenise.com/xdce/xles/host/login.php
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 05 Nov 2022 01:37:42 GMT
Content-Type: text/css
Content-Length: 127776
Last-Modified: Fri, 04 Nov 2022 17:04:46 GMT
Connection: keep-alive
ETag: "6365462e-1f320"
X-Powered-By: PleskLin
Accept-Ranges: bytes
ocsp.digicert.com/
200 OK 471 B IP
Hash 42a0adacced30df52cf7cad3e200036d
f7b4114defc61f806dbb74fd228bca155d52362a
e4928481739a2a75dce86c03b355c6dff507426e8d851cba5ca8537b1be87c20
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3743
Cache-Control: max-age=113487
Content-Type: application/ocsp-response
Date: Sat, 05 Nov 2022 01:37:43 GMT
Etag: "6364c817-1d7"
Expires: Sun, 06 Nov 2022 09:09:10 GMT
Last-Modified: Fri, 04 Nov 2022 08:06:47 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 471
residenzabistrotdevenise.com/xdce/xles/host/assets/favicon.ico
200 OK 68 kB URL HTTP/1.1 residenzabistrotdevenise.com/xdce/xles/host/assets/favicon.ico
IP
File type MS Windows icon resource - 1 icon, -128x-128, 32 bits/pixel\012- data
Hash b6b6bec96066051b920de6d4e1309dc7
e6ca307841f8883f5a7b5eebb288e745a7c6c7e3
9f3d538eecb4af12946ae7133479ea7c042794db8d0651504d4d2b3d371f396e
GET /xdce/xles/host/assets/favicon.ico HTTP/1.1
Host: residenzabistrotdevenise.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://residenzabistrotdevenise.com/xdce/xles/host/login.php
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 05 Nov 2022 01:37:43 GMT
Content-Type: image/vnd.microsoft.icon
Content-Length: 67646
Last-Modified: Fri, 04 Nov 2022 17:04:46 GMT
Connection: keep-alive
ETag: "6365462e-1083e"
X-Powered-By: PleskLin
Accept-Ranges: bytes
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 96n0Y9i4FH/MOoshclRSzA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: v24A1xHWKur3n/Nlgw6j9bf7ytU=
residenzabistrotdevenise.com/xdce/xles/host/assets/css/fonts/9ECBC8FFB535D0532.woff2
200 OK 6.2 kB URL HTTP/1.1 residenzabistrotdevenise.com/xdce/xles/host/assets/css/fonts/9ECBC8FFB535D0532.woff2
IP
File type HTML document, ASCII text
Hash 220c321e568db1674f0e60ec304c996f
0d1f64ddc425a148031254b933170edb05b023a2
25515895edf02428317deb940052db801ab1eb42b50058bab08f7731c074d187
Analyzer Verdict Alert fortinet Phishing
GET /xdce/xles/host/assets/css/fonts/9ECBC8FFB535D0532.woff2 HTTP/1.1
Host: residenzabistrotdevenise.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://residenzabistrotdevenise.com/xdce/xles/host/assets/css/web.css
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 05 Nov 2022 01:37:44 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Powered-By: PHP/7.3.20, PleskLin
residenzabistrotdevenise.com/xdce/xles/host/assets/css/fonts/E83D71A074DF776F4.woff2
200 OK 6.2 kB URL HTTP/1.1 residenzabistrotdevenise.com/xdce/xles/host/assets/css/fonts/E83D71A074DF776F4.woff2
IP
File type HTML document, ASCII text
Hash 220c321e568db1674f0e60ec304c996f
0d1f64ddc425a148031254b933170edb05b023a2
25515895edf02428317deb940052db801ab1eb42b50058bab08f7731c074d187
Analyzer Verdict Alert fortinet Phishing
GET /xdce/xles/host/assets/css/fonts/E83D71A074DF776F4.woff2 HTTP/1.1
Host: residenzabistrotdevenise.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://residenzabistrotdevenise.com/xdce/xles/host/assets/css/web.css
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 05 Nov 2022 01:37:44 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Powered-By: PHP/7.3.20, PleskLin
residenzabistrotdevenise.com/xdce/xles/host/assets/css/fonts/9C7F15704715916A9.woff2
200 OK 6.2 kB URL HTTP/1.1 residenzabistrotdevenise.com/xdce/xles/host/assets/css/fonts/9C7F15704715916A9.woff2
IP
File type HTML document, ASCII text
Hash 220c321e568db1674f0e60ec304c996f
0d1f64ddc425a148031254b933170edb05b023a2
25515895edf02428317deb940052db801ab1eb42b50058bab08f7731c074d187
Analyzer Verdict Alert fortinet Phishing
GET /xdce/xles/host/assets/css/fonts/9C7F15704715916A9.woff2 HTTP/1.1
Host: residenzabistrotdevenise.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://residenzabistrotdevenise.com/xdce/xles/host/assets/css/web.css
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 05 Nov 2022 01:37:44 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Powered-By: PHP/7.3.20, PleskLin
residenzabistrotdevenise.com/xdce/xles/host/assets/css/fonts/C1B705B7AD8D5B4C6.woff2
200 OK 6.2 kB URL HTTP/1.1 residenzabistrotdevenise.com/xdce/xles/host/assets/css/fonts/C1B705B7AD8D5B4C6.woff2
IP
File type HTML document, ASCII text
Hash 220c321e568db1674f0e60ec304c996f
0d1f64ddc425a148031254b933170edb05b023a2
25515895edf02428317deb940052db801ab1eb42b50058bab08f7731c074d187
Analyzer Verdict Alert fortinet Phishing
GET /xdce/xles/host/assets/css/fonts/C1B705B7AD8D5B4C6.woff2 HTTP/1.1
Host: residenzabistrotdevenise.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://residenzabistrotdevenise.com/xdce/xles/host/assets/css/web.css
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 05 Nov 2022 01:37:44 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Powered-By: PHP/7.3.20, PleskLin
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f6ae0db60213bfddbf2ad71a9fb116bf
915d2895adc3f022c28cc628aeb6e441cbb09d47
ac94f3fd00f0f8f8617d15a3816b07d25d3774e91b287ac181e5efb4ebf95e22
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AC94F3FD00F0F8F8617D15A3816B07D25D3774E91B287AC181E5EFB4EBF95E22"
Last-Modified: Thu, 03 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4958
Expires: Sat, 05 Nov 2022 03:00:22 GMT
Date: Sat, 05 Nov 2022 01:37:44 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f6ae0db60213bfddbf2ad71a9fb116bf
915d2895adc3f022c28cc628aeb6e441cbb09d47
ac94f3fd00f0f8f8617d15a3816b07d25d3774e91b287ac181e5efb4ebf95e22
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AC94F3FD00F0F8F8617D15A3816B07D25D3774E91B287AC181E5EFB4EBF95E22"
Last-Modified: Thu, 03 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4958
Expires: Sat, 05 Nov 2022 03:00:22 GMT
Date: Sat, 05 Nov 2022 01:37:44 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f6ae0db60213bfddbf2ad71a9fb116bf
915d2895adc3f022c28cc628aeb6e441cbb09d47
ac94f3fd00f0f8f8617d15a3816b07d25d3774e91b287ac181e5efb4ebf95e22
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AC94F3FD00F0F8F8617D15A3816B07D25D3774E91B287AC181E5EFB4EBF95E22"
Last-Modified: Thu, 03 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4958
Expires: Sat, 05 Nov 2022 03:00:22 GMT
Date: Sat, 05 Nov 2022 01:37:44 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f6ae0db60213bfddbf2ad71a9fb116bf
915d2895adc3f022c28cc628aeb6e441cbb09d47
ac94f3fd00f0f8f8617d15a3816b07d25d3774e91b287ac181e5efb4ebf95e22
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AC94F3FD00F0F8F8617D15A3816B07D25D3774E91B287AC181E5EFB4EBF95E22"
Last-Modified: Thu, 03 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4958
Expires: Sat, 05 Nov 2022 03:00:22 GMT
Date: Sat, 05 Nov 2022 01:37:44 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f6ae0db60213bfddbf2ad71a9fb116bf
915d2895adc3f022c28cc628aeb6e441cbb09d47
ac94f3fd00f0f8f8617d15a3816b07d25d3774e91b287ac181e5efb4ebf95e22
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AC94F3FD00F0F8F8617D15A3816B07D25D3774E91B287AC181E5EFB4EBF95E22"
Last-Modified: Thu, 03 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4958
Expires: Sat, 05 Nov 2022 03:00:22 GMT
Date: Sat, 05 Nov 2022 01:37:44 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8386dbb6-48d7-404a-acfd-e0366f041a8b.jpeg
200 OK 8.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8386dbb6-48d7-404a-acfd-e0366f041a8b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9a3428f7926e724686ddf40cdfdaf830
e56f1acd5646afde18b366e30f8dfbd7f9a6a15b
a413cee3cdae66712505157afaad44b2e08762bce67d05398dfcaa721035eafa
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8386dbb6-48d7-404a-acfd-e0366f041a8b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8933
x-amzn-requestid: 5a2debdf-46aa-4205-a78a-5bebd347bc1c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: atDg5GSaoAMFgJQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-635b7f9f-630c25e060bb22dc55fbd097;Sampled=0
x-amzn-remapped-date: Fri, 28 Oct 2022 07:07:11 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: xZf6cjwPONe5KmPSBKcaAsRiowNWjmGNsnBErxyXlB38QT6H7ujqcw==
via: 1.1 583992e175976bd59a21b4416890271e.cloudfront.net (CloudFront), 1.1 b8c4a4ca04bb1976e020396d211bc8dc.cloudfront.net (CloudFront), 1.1 google
date: Fri, 04 Nov 2022 07:26:20 GMT
age: 65484
etag: "e56f1acd5646afde18b366e30f8dfbd7f9a6a15b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffe9d0595-2606-4462-8dd8-11c0a267de65.jpeg
200 OK 4.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffe9d0595-2606-4462-8dd8-11c0a267de65.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash df11af332512d94d34a88a4671b2fbe1
0db58fda3dec787d0d979f8398d90b2b8d7e2c2f
7c561aed53b57db2039031c79453fc3f7cead944c60dd087487a9998c2df5a30
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffe9d0595-2606-4462-8dd8-11c0a267de65.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4413
x-amzn-requestid: b6f0aa99-437e-4e3d-b300-0a0ab1563c42
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bGHm_HhVIAMFdUA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6365862c-3eacf2f4114f5ae22a140480;Sampled=0
x-amzn-remapped-date: Fri, 04 Nov 2022 21:37:48 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: HkjdrVlGIvdxjRpvuAooiJjYBfUbjWaWdbTHmpBWRc-rGZjTCyt0sw==
via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 760139201585481b26f947c5f776103a.cloudfront.net (CloudFront), 1.1 google
date: Fri, 04 Nov 2022 22:12:00 GMT
age: 12344
etag: "0db58fda3dec787d0d979f8398d90b2b8d7e2c2f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3494b1e3-ddc8-454c-8b43-e70e2d8f07b8.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3494b1e3-ddc8-454c-8b43-e70e2d8f07b8.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2ae2b8d827fb2c8bef64febcd36f1645
f7705fcd2d91ce90c58e79324cce1e3abba6c1c8
2dc55e97ef3a85fccb104b80161a8bac16b12d37527c336563677432584c7ad5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3494b1e3-ddc8-454c-8b43-e70e2d8f07b8.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11421
x-amzn-requestid: 8436166b-f342-44e9-9a31-e25dcaa7b85c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: a2gEOEYRIAMFQ2g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-635f46e7-0616a6b95503fffd4f597509;Sampled=0
x-amzn-remapped-date: Mon, 31 Oct 2022 03:54:15 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: g3OtcJnT2JfzIAvUjoLvC8pOzfwGFQ-M0cH4uwNSVcr2T9jYgCihTw==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 2324edbcb8fc72f617442c65f36a40fc.cloudfront.net (CloudFront), 1.1 google
date: Fri, 04 Nov 2022 23:22:55 GMT
age: 8089
etag: "f7705fcd2d91ce90c58e79324cce1e3abba6c1c8"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fea73a1e6-5232-416f-82c9-13016ff006e8.jpeg
200 OK 9.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fea73a1e6-5232-416f-82c9-13016ff006e8.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 62c2729bd495d86a4eac5a04ae21408e
84a91429d90d3ef5a31d918cc9477f92ed716531
01eb74a1913886d7f122f7612cbcafcc75b49efd7a4c6248c36a5cd9cafb4518
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fea73a1e6-5232-416f-82c9-13016ff006e8.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9290
x-amzn-requestid: 36b442e5-25d9-4ce8-b102-a2fb5037d640
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bDqm3Gv-IAMFbug=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63648af8-0d41999b3dcbac4a1032f56c;Sampled=0
x-amzn-remapped-date: Fri, 04 Nov 2022 03:46:00 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 4y0OhkF328ODb-dDWH1fw6sFZ21CR_eqprYs4WSR5Q-fROKgC_r7GA==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 ee330666adf9f04c8c30094f8ddcd004.cloudfront.net (CloudFront), 1.1 google
date: Fri, 04 Nov 2022 10:27:08 GMT
age: 54636
etag: "84a91429d90d3ef5a31d918cc9477f92ed716531"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F255683f8-a0b6-411a-a41e-4d042746780e.jpeg
200 OK 9.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F255683f8-a0b6-411a-a41e-4d042746780e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c7c9c908e891e7277f21a914fea9aa25
596c3c084ae3d850a5dc28e549b4e22f2b8cc71f
709c217b3ac09712d2af4366316c8977b1a4e2a73f887b3e30f10df1ed50bacd
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F255683f8-a0b6-411a-a41e-4d042746780e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9150
x-amzn-requestid: 7c179507-20a7-4fa3-993b-f79b3e7949ac
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: apwiGHD_IAMFQZw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-635a2e0d-337623ce79dc53c864632c72;Sampled=0
x-amzn-remapped-date: Thu, 27 Oct 2022 07:06:53 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: OM3hc6Jfl5pDWPikIlcQOexIScQavqJh9h-N-EvIGNpicWJwHMPKIA==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 68fadeb91f97256bb67b03bfca74d830.cloudfront.net (CloudFront), 1.1 google
date: Fri, 04 Nov 2022 14:36:51 GMT
age: 39653
etag: "596c3c084ae3d850a5dc28e549b4e22f2b8cc71f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff202f1f7-a6da-431c-9f04-b00a53780a8c.jpeg
200 OK 5.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff202f1f7-a6da-431c-9f04-b00a53780a8c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 683264508686ad18ae519baac54d3b05
1897c9fcad301764736ab867491beb18526af153
e8beb5d336ca424e36725ab87b98b4dedcf32a5b01c43b9c06363a7be25522fa
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff202f1f7-a6da-431c-9f04-b00a53780a8c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5754
x-amzn-requestid: df2c5b88-0444-44b1-81ef-04e565d25b36
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bAS--GiUoAMFTjg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636331f9-0ec90f4d5f0c6fcf2d6e4a8b;Sampled=0
x-amzn-remapped-date: Thu, 03 Nov 2022 03:14:01 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: D1Fxwhu3EVm8Rd_6URh3mRUlUK0xSgOuLCWdbnUy1bsmDjyG-K3Jmg==
via: 1.1 3c974a460e97e56c6eb1e6a30797d9d6.cloudfront.net (CloudFront), 1.1 91356d2137f5a7345e93da4516c49ec4.cloudfront.net (CloudFront), 1.1 google
date: Fri, 04 Nov 2022 03:44:52 GMT
age: 78772
etag: "1897c9fcad301764736ab867491beb18526af153"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
residenzabistrotdevenise.com/xdce/xles/host/assets/css/fonts/12C383965421BC56F.woff2
200 OK 6.2 kB URL HTTP/1.1 residenzabistrotdevenise.com/xdce/xles/host/assets/css/fonts/12C383965421BC56F.woff2
IP
File type HTML document, ASCII text
Hash 220c321e568db1674f0e60ec304c996f
0d1f64ddc425a148031254b933170edb05b023a2
25515895edf02428317deb940052db801ab1eb42b50058bab08f7731c074d187
Analyzer Verdict Alert fortinet Phishing
GET /xdce/xles/host/assets/css/fonts/12C383965421BC56F.woff2 HTTP/1.1
Host: residenzabistrotdevenise.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://residenzabistrotdevenise.com/xdce/xles/host/assets/css/web.css
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 05 Nov 2022 01:37:45 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Powered-By: PHP/7.3.20, PleskLin
residenzabistrotdevenise.com/xdce/xles/host/assets/css/fonts/9ECBC8FFB535D0532.woff
200 OK 6.2 kB URL HTTP/1.1 residenzabistrotdevenise.com/xdce/xles/host/assets/css/fonts/9ECBC8FFB535D0532.woff
IP
File type HTML document, ASCII text
Hash 220c321e568db1674f0e60ec304c996f
0d1f64ddc425a148031254b933170edb05b023a2
25515895edf02428317deb940052db801ab1eb42b50058bab08f7731c074d187
Analyzer Verdict Alert fortinet Phishing
GET /xdce/xles/host/assets/css/fonts/9ECBC8FFB535D0532.woff HTTP/1.1
Host: residenzabistrotdevenise.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://residenzabistrotdevenise.com/xdce/xles/host/assets/css/web.css
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 05 Nov 2022 01:37:46 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Powered-By: PHP/7.3.20, PleskLin
residenzabistrotdevenise.com/xdce/xles/host/assets/css/fonts/9C7F15704715916A9.woff
200 OK 6.2 kB URL HTTP/1.1 residenzabistrotdevenise.com/xdce/xles/host/assets/css/fonts/9C7F15704715916A9.woff
IP
File type HTML document, ASCII text
Hash 220c321e568db1674f0e60ec304c996f
0d1f64ddc425a148031254b933170edb05b023a2
25515895edf02428317deb940052db801ab1eb42b50058bab08f7731c074d187
Analyzer Verdict Alert fortinet Phishing
GET /xdce/xles/host/assets/css/fonts/9C7F15704715916A9.woff HTTP/1.1
Host: residenzabistrotdevenise.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://residenzabistrotdevenise.com/xdce/xles/host/assets/css/web.css
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 05 Nov 2022 01:37:46 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Powered-By: PHP/7.3.20, PleskLin
residenzabistrotdevenise.com/xdce/xles/host/assets/css/fonts/E83D71A074DF776F4.woff
200 OK 6.2 kB URL HTTP/1.1 residenzabistrotdevenise.com/xdce/xles/host/assets/css/fonts/E83D71A074DF776F4.woff
IP
File type HTML document, ASCII text
Hash 220c321e568db1674f0e60ec304c996f
0d1f64ddc425a148031254b933170edb05b023a2
25515895edf02428317deb940052db801ab1eb42b50058bab08f7731c074d187
Analyzer Verdict Alert fortinet Phishing
GET /xdce/xles/host/assets/css/fonts/E83D71A074DF776F4.woff HTTP/1.1
Host: residenzabistrotdevenise.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://residenzabistrotdevenise.com/xdce/xles/host/assets/css/web.css
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 05 Nov 2022 01:37:46 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Powered-By: PHP/7.3.20, PleskLin
residenzabistrotdevenise.com/xdce/xles/host/assets/css/fonts/C1B705B7AD8D5B4C6.woff
200 OK 6.2 kB URL HTTP/1.1 residenzabistrotdevenise.com/xdce/xles/host/assets/css/fonts/C1B705B7AD8D5B4C6.woff
IP
File type HTML document, ASCII text
Hash 220c321e568db1674f0e60ec304c996f
0d1f64ddc425a148031254b933170edb05b023a2
25515895edf02428317deb940052db801ab1eb42b50058bab08f7731c074d187
Analyzer Verdict Alert fortinet Phishing
GET /xdce/xles/host/assets/css/fonts/C1B705B7AD8D5B4C6.woff HTTP/1.1
Host: residenzabistrotdevenise.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://residenzabistrotdevenise.com/xdce/xles/host/assets/css/web.css
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 05 Nov 2022 01:37:46 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Powered-By: PHP/7.3.20, PleskLin
residenzabistrotdevenise.com/xdce/xles/host/assets/css/fonts/12C383965421BC56F.woff
200 OK 6.2 kB URL HTTP/1.1 residenzabistrotdevenise.com/xdce/xles/host/assets/css/fonts/12C383965421BC56F.woff
IP
File type HTML document, ASCII text
Hash 220c321e568db1674f0e60ec304c996f
0d1f64ddc425a148031254b933170edb05b023a2
25515895edf02428317deb940052db801ab1eb42b50058bab08f7731c074d187
Analyzer Verdict Alert fortinet Phishing
GET /xdce/xles/host/assets/css/fonts/12C383965421BC56F.woff HTTP/1.1
Host: residenzabistrotdevenise.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://residenzabistrotdevenise.com/xdce/xles/host/assets/css/web.css
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 05 Nov 2022 01:37:46 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Powered-By: PHP/7.3.20, PleskLin
145.239.219.72
34.120.237.76
23.36.77.32
93.184.220.29