Report - space2design.co.nz/online/intesa-sanpaolo/5ecd038b776e21d423a668c2ee33f8e2/login/

Report Overview

Submitted URL

space2design.co.nz/online/intesa-sanpaolo/5ecd038b776e21d423a668c2ee33f8e2/login/
IP

185.184.154.17

ASN

#38719 Dreamscape Networks Limited
Submitted

2023-03-23T21:36:36Z

Access

public
Website Title
Final URL
Tags

None
urlquery detections

No alerts detected

Detections

urlquery

0
Network Intrusion Detection

0
Threat Detection Systems

3

Domain Summary

Domain	Rank	First Seen	Last Seen	Sent	Received	IP
ocsp.pki.goog (2)	175	2018-07-01T08:43:07Z	2023-03-29T05:09:04Z	686	1398	142.250.74.163
ajax.googleapis.com (1)	12905	2013-08-16T11:51:31Z	2023-03-29T10:10:07Z	393	30654	142.250.74.138
www.intesasanpaolo.com (69)	349900	2013-02-09T19:03:38Z	2023-03-29T10:34:14Z	33427	1296454	193.41.198.216
login.live.com (1)	79	2012-05-21T09:00:20Z	2023-03-29T05:09:47Z	640	1218	20.190.160.13
r3.o.lencr.org (9)	344	2020-12-02T09:52:13Z	2023-03-29T05:09:11Z	3042	7976	23.36.76.226
firefox.settings.services.mozilla.com (2)	867	2020-06-04T22:08:41Z	2023-03-29T05:09:03Z	782	2374	35.241.9.150
space2design.co.nz (74)	unknown	2019-03-21T14:41:50Z	2023-03-29T15:07:18Z	33059	305587	185.184.154.17
assets.msn.com (1)	188	2018-09-21T01:46:35Z	2023-03-29T05:16:04Z	439	5822	95.101.10.202
contile.services.mozilla.com (1)	1114	2021-05-27T20:32:35Z	2023-03-29T05:09:31Z	333	391	34.117.237.239
ocsp2.globalsign.com (10)	1544	2012-05-23T20:10:04Z	2023-03-29T05:20:49Z	3565	19080	104.18.20.226
www.bing.com (37)	91	2012-05-21T17:02:58Z	2018-11-01T22:19:15Z	24325	487007	13.107.21.200
www2.bing.com (1)	1811	2018-06-25T01:16:21Z	2023-03-29T05:16:05Z	372	2099	13.107.21.200
login.microsoftonline.com (1)	25	2017-02-19T08:06:40Z	2019-07-18T10:58:27Z	958	2070	40.126.32.75
content-signature-2.cdn.mozilla.net (1)	1152	2020-11-03T13:26:46Z	2023-03-29T05:09:31Z	413	5882	34.160.144.191
push.services.mozilla.com (1)	2140	2014-10-24T10:27:06Z	2023-03-29T05:09:32Z	606	127	52.32.89.156
r.bing.com (2)	1184	2020-05-07T21:02:14Z	2023-03-29T05:16:04Z	785	127096	95.101.10.98
img-getpocket.cdn.mozilla.net (5)	1631	2018-06-22T01:36:00Z	2023-03-29T05:09:12Z	2761	47881	34.120.237.76

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

Scan Date	Severity	Indicator	Alert
2023-03-22	medium	space2design.co.nz/online/intesa-sanpaolo/5ecd038b776e21d423a668c2ee33f8e2/login/	Intesa Sanpaolo

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2023-03-23	medium	space2design.co.nz/online/intesa-sanpaolo/5ecd038b776e21d423a668c2ee33f8e2/login/	Phishing
2023-03-23	medium	space2design.co.nz/online/intesa-sanpaolo/5ecd038b776e21d423a668c2ee33f8e2/login/login.php	Phishing

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

HTTP Transactions (218)

URL IP Response Size

r3.o.lencr.org/

23.36.76.226

200 OK

503

URL HTTP/1.1

r3.o.lencr.org/
IP

23.36.76.226:0
ASN

#20940 Akamai International B.V.

Magic

data

Size

503
Hash

bea3185dd820a31c1981317f37c3456d

1a548a5d27270fc11df9011837a7149571cedd78

469b97bf9f57401b3c9571039483589f2815f4794212b75c7c85cfefe0ae71e9

HTTP Headers

                                        POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "469B97BF9F57401B3C9571039483589F2815F4794212B75C7C85CFEFE0AE71E9"
Last-Modified: Wed, 22 Mar 2023 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12688
Expires: Fri, 24 Mar 2023 01:07:53 GMT
Date: Thu, 23 Mar 2023 21:36:25 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503

URL HTTP/1.1

r3.o.lencr.org/
IP

23.36.76.226:0
ASN

#20940 Akamai International B.V.

Magic

data

Size

503
Hash

65fc860bc043f3fb83bdc3debdcd322d

418010755deae099ef1284e402813c5837a10f42

d93d50c523c7f735987aba09db628259441eb75efe713a2df3c214e1fb8b5171

HTTP Headers

                                        POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D93D50C523C7F735987ABA09DB628259441EB75EFE713A2DF3C214E1FB8B5171"
Last-Modified: Wed, 22 Mar 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12316
Expires: Fri, 24 Mar 2023 01:01:41 GMT
Date: Thu, 23 Mar 2023 21:36:25 GMT
Connection: keep-alive

firefox.settings.services.mozilla.com/v1/

35.241.9.150

200 OK

939

URL HTTP/2

firefox.settings.services.mozilla.com/v1/
IP

35.241.9.150:0
ASN

#15169 GOOGLE

Magic

JSON data\012- , ASCII text, with very long lines (939), with no line terminators

Size

939
Hash

4ad6984a756720fbfff47b37a75513a2

355e35258114452af8b9638985ed9d8ef3bf0aca

43181fccb10652c68cae86e5e32b4e8f426fb5ad49d8125cb99e072cff573cf5

HTTP Headers

                                        GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Length, Alert, Content-Type, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 23 Mar 2023 21:15:07 GMT
content-type: application/json
age: 1278
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.76.226

200 OK

503

URL HTTP/1.1

r3.o.lencr.org/
IP

23.36.76.226:0
ASN

#20940 Akamai International B.V.

Magic

data

Size

503
Hash

51a5d4696a6090c295850554508b51ce

c44e143c2223546e64b19f543b8101aaf3b11e97

8794223d5e8d4d276c35e2fdcc24bf99694240634dd749cd9b5bf874dec055cf

HTTP Headers

                                        POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8794223D5E8D4D276C35E2FDCC24BF99694240634DD749CD9B5BF874DEC055CF"
Last-Modified: Wed, 22 Mar 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2654
Expires: Thu, 23 Mar 2023 22:20:39 GMT
Date: Thu, 23 Mar 2023 21:36:25 GMT
Connection: keep-alive

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain

34.160.144.191

200 OK

5348

URL HTTP/2

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain
IP

34.160.144.191:0
ASN

#15169 GOOGLE

Magic

PEM certificate\012- , ASCII text

Size

5348
Hash

e7bace7c1e04d44012e37ddffe36e5d5

3ac8d7c0a9d3e3f0b28b2530c7b8d8407b4042c2

6b4f80f2e95b26f6122ea8dcd0ef8d762299be822c69e839fc37581ca2bcb5f2

HTTP Headers

                                        GET /chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
x-amz-id-2: im0sEXPGY/Xw1hdEcrca+NT7i9Mgk64FqtfhJ3ZXSVLHKjth5cIfXASzWPc0Jc5DEUzgte1EDkc=
x-amz-request-id: HM5E3E4EB4G6V6RM
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 23 Mar 2023 21:00:06 GMT
age: 2179
last-modified: Sat, 11 Mar 2023 16:53:15 GMT
etag: "e7bace7c1e04d44012e37ddffe36e5d5"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

URL HTTP/2

contile.services.mozilla.com/v1/tiles
IP

34.117.237.239:0
ASN

#15169 GOOGLE

Magic

JSON data\012- , ASCII text, with no line terminators

Size

12
Hash

23e88fb7b99543fb33315b29b1fad9d6

a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce

7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

                                        GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
server: nginx
date: Thu, 23 Mar 2023 21:36:25 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.163

200 OK

471

URL HTTP/1.1

ocsp.pki.goog/gts1c3
IP

142.250.74.163:0
ASN

#15169 GOOGLE

Magic

data

Size

471
Hash

1d54d3c84e73cd1f00a835aa7616c399

e869898915967fb645a7ae3bd711a831329cc792

9cca1d2ea17f54a8688823e6fb8cbb7247c0a808808b382ffdda35b2770a26f8

HTTP Headers

                                        POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 23 Mar 2023 21:36:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

35.241.9.150

200 OK

329

URL HTTP/2

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP

35.241.9.150:0
ASN

#15169 GOOGLE

Magic

JSON data\012- , ASCII text, with very long lines (329), with no line terminators

Size

329
Hash

0333b0655111aa68de771adfcc4db243

63f295a144ac87a7c8e23417626724eeca68a7eb

60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

                                        GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Last-Modified, Content-Length, Pragma, Expires, ETag, Backoff, Alert, Cache-Control
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 23 Mar 2023 21:17:23 GMT
age: 1142
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

ajax.googleapis.com/ajax/libs/jquery/2.1.1/jquery.min.js

142.250.74.138

200 OK

29671

URL HTTP/2

ajax.googleapis.com/ajax/libs/jquery/2.1.1/jquery.min.js
IP

142.250.74.138:0
ASN

#15169 GOOGLE

Magic

ASCII text, with very long lines (32061)

Size

29671
Hash

b90b3d2618cce9d766152cd3092b5c27

496339457cd00caab8118e2e1f30ea18dc05b9f4

b7b155aa8c6b5db28f9a6b41e88c96e9462c196c700add426f8ef32c9ce1ed41

HTTP Headers

                                        GET /ajax/libs/jquery/2.1.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://space2design.co.nz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 29671
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 22 Mar 2023 18:05:11 GMT
expires: Thu, 21 Mar 2024 18:05:11 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 99074
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.76.226

200 OK

503

URL HTTP/1.1

r3.o.lencr.org/
IP

23.36.76.226:0
ASN

#20940 Akamai International B.V.

Magic

data

Size

503
Hash

050ca4dc2182e0a27573b0d9f32b7834

bec14dc5af0d0b32210470673511acd8db404308

b6129b9d1848f75265dca4446c5399927bdaf15c7b49c083765847b0fe276eaf

HTTP Headers

                                        POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B6129B9D1848F75265DCA4446C5399927BDAF15C7B49C083765847B0FE276EAF"
Last-Modified: Wed, 22 Mar 2023 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9860
Expires: Fri, 24 Mar 2023 00:20:45 GMT
Date: Thu, 23 Mar 2023 21:36:25 GMT
Connection: keep-alive

ocsp.pki.goog/gts1c3

142.250.74.163

200 OK

471

URL HTTP/1.1

ocsp.pki.goog/gts1c3
IP

142.250.74.163:0
ASN

#15169 GOOGLE

Magic

data

Size

471
Hash

1d54d3c84e73cd1f00a835aa7616c399

e869898915967fb645a7ae3bd711a831329cc792

9cca1d2ea17f54a8688823e6fb8cbb7247c0a808808b382ffdda35b2770a26f8

HTTP Headers

                                        POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 23 Mar 2023 21:36:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp2.globalsign.com/rootr3

104.18.20.226

200 OK

1432

URL HTTP/1.1

ocsp2.globalsign.com/rootr3
IP

104.18.20.226:0
ASN

#13335 CLOUDFLARENET

Magic

data

Size

1432
Hash

ff1f07e2bfa8287181de7de379c3f3dd

9701af295fe71cbe5e7856a554d110b592c2b8f8

7d73fbe78e3294062a27c47a7c0d25e3d39a42530941956490938860caa12784

HTTP Headers

                                        POST /rootr3 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 81
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Date: Thu, 23 Mar 2023 21:36:25 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Mon, 27 Mar 2023 19:23:06 GMT
ETag: "9701af295fe71cbe5e7856a554d110b592c2b8f8"
Last-Modified: Thu, 23 Mar 2023 19:23:07 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 500
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7ac9cf50bf2db4f1-OSL

ocsp2.globalsign.com/rootr3

104.18.20.226

200 OK

1432

URL HTTP/1.1

ocsp2.globalsign.com/rootr3
IP

104.18.20.226:0
ASN

#13335 CLOUDFLARENET

Magic

data

Size

1432
Hash

ff1f07e2bfa8287181de7de379c3f3dd

9701af295fe71cbe5e7856a554d110b592c2b8f8

7d73fbe78e3294062a27c47a7c0d25e3d39a42530941956490938860caa12784

HTTP Headers

                                        POST /rootr3 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 81
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Date: Thu, 23 Mar 2023 21:36:25 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Mon, 27 Mar 2023 19:23:06 GMT
ETag: "9701af295fe71cbe5e7856a554d110b592c2b8f8"
Last-Modified: Thu, 23 Mar 2023 19:23:07 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 500
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7ac9cf50be090b06-OSL

ocsp2.globalsign.com/rootr3

104.18.20.226

200 OK

1432

URL HTTP/1.1

ocsp2.globalsign.com/rootr3
IP

104.18.20.226:0
ASN

#13335 CLOUDFLARENET

Magic

data

Size

1432
Hash

ff1f07e2bfa8287181de7de379c3f3dd

9701af295fe71cbe5e7856a554d110b592c2b8f8

7d73fbe78e3294062a27c47a7c0d25e3d39a42530941956490938860caa12784

HTTP Headers

                                        POST /rootr3 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 81
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Date: Thu, 23 Mar 2023 21:36:25 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Mon, 27 Mar 2023 19:23:06 GMT
ETag: "9701af295fe71cbe5e7856a554d110b592c2b8f8"
Last-Modified: Thu, 23 Mar 2023 19:23:07 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 500
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7ac9cf50bdf00b69-OSL

ocsp2.globalsign.com/rootr3

104.18.20.226

200 OK

1432

URL HTTP/1.1

ocsp2.globalsign.com/rootr3
IP

104.18.20.226:0
ASN

#13335 CLOUDFLARENET

Magic

data

Size

1432
Hash

ff1f07e2bfa8287181de7de379c3f3dd

9701af295fe71cbe5e7856a554d110b592c2b8f8

7d73fbe78e3294062a27c47a7c0d25e3d39a42530941956490938860caa12784

HTTP Headers

                                        POST /rootr3 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 81
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Date: Thu, 23 Mar 2023 21:36:25 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Mon, 27 Mar 2023 19:23:06 GMT
ETag: "9701af295fe71cbe5e7856a554d110b592c2b8f8"
Last-Modified: Thu, 23 Mar 2023 19:23:07 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 500
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7ac9cf50b8050b4d-OSL

ocsp2.globalsign.com/rootr3

104.18.20.226

200 OK

1432

URL HTTP/1.1

ocsp2.globalsign.com/rootr3
IP

104.18.20.226:0
ASN

#13335 CLOUDFLARENET

Magic

data

Size

1432
Hash

ff1f07e2bfa8287181de7de379c3f3dd

9701af295fe71cbe5e7856a554d110b592c2b8f8

7d73fbe78e3294062a27c47a7c0d25e3d39a42530941956490938860caa12784

HTTP Headers

                                        POST /rootr3 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 81
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Date: Thu, 23 Mar 2023 21:36:25 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Mon, 27 Mar 2023 19:23:06 GMT
ETag: "9701af295fe71cbe5e7856a554d110b592c2b8f8"
Last-Modified: Thu, 23 Mar 2023 19:23:07 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 500
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7ac9cf510fa1b4f1-OSL

space2design.co.nz/online/intesa-sanpaolo/5ecd038b776e21d423a668c2ee33f8e2/login/

United Arab Emirates Dreamscape Networks Limited

185.184.154.17

200 OK

76812

URL HTTP/1.1

space2design.co.nz/online/intesa-sanpaolo/5ecd038b776e21d423a668c2ee33f8e2/login/
IP

185.184.154.17:0
ASN

#38719 Dreamscape Networks Limited

Magic

HTML document text\012- HTML document text\012- HTML document, Unicode text, UTF-8 text, with very long lines (7423)

Size

76812
Hash

8adb3e1bee78b6a11ab8d28ba8f7c882

90a1d456882af0078dda73aa480740da3d7163b1

3af8e820fa334d9c0152122885bb4cbb691fc47b08b18c8d6ac2a831e4e2bcf4

Detections

Analyzer	Verdict	Alert
openphish	Intesa Sanpaolo
fortinet	Phishing

HTTP Headers

                                        GET /online/intesa-sanpaolo/5ecd038b776e21d423a668c2ee33f8e2/login/ HTTP/1.1
Host: space2design.co.nz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                        HTTP/1.1 200 OK
Server: nginx
Date: Thu, 23 Mar 2023 21:36:25 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Upgrade: h2,h2c
Last-Modified: Wed, 22 Mar 2023 09:00:57 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip

ocsp2.globalsign.com/gsextendvalsha2g3r3

104.18.20.226

200 OK

1444

URL HTTP/1.1

ocsp2.globalsign.com/gsextendvalsha2g3r3
IP

104.18.20.226:0
ASN

#13335 CLOUDFLARENET

Magic

data

Size

1444
Hash

1fc0dbdb1567ae7bc9e7532bb66878f4

b1edbe0ff1c5d5be454743be2dc33df6d24b258c

0e98a454634574f672907b4328df165e1a4f22982e7291a1ac8dde4abcd1503c

HTTP Headers

                                        POST /gsextendvalsha2g3r3 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Date: Thu, 23 Mar 2023 21:36:25 GMT
Content-Type: application/ocsp-response
Content-Length: 1444
Connection: keep-alive
Expires: Mon, 27 Mar 2023 20:11:41 GMT
ETag: "b1edbe0ff1c5d5be454743be2dc33df6d24b258c"
Last-Modified: Thu, 23 Mar 2023 20:11:42 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: EXPIRED
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7ac9cf511e450b06-OSL

ocsp2.globalsign.com/gsextendvalsha2g3r3

104.18.20.226

200 OK

1444

URL HTTP/1.1

ocsp2.globalsign.com/gsextendvalsha2g3r3
IP

104.18.20.226:0
ASN

#13335 CLOUDFLARENET

Magic

data

Size

1444
Hash

1fc0dbdb1567ae7bc9e7532bb66878f4

b1edbe0ff1c5d5be454743be2dc33df6d24b258c

0e98a454634574f672907b4328df165e1a4f22982e7291a1ac8dde4abcd1503c

HTTP Headers

                                        POST /gsextendvalsha2g3r3 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Date: Thu, 23 Mar 2023 21:36:25 GMT
Content-Type: application/ocsp-response
Content-Length: 1444
Connection: keep-alive
Expires: Mon, 27 Mar 2023 20:11:41 GMT
ETag: "b1edbe0ff1c5d5be454743be2dc33df6d24b258c"
Last-Modified: Thu, 23 Mar 2023 20:11:42 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: EXPIRED
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7ac9cf511fd4b4f1-OSL

push.services.mozilla.com/

52.32.89.156

101 Switching Protocols

URL HTTP/1.1

push.services.mozilla.com/
IP

52.32.89.156:0
ASN

#16509 AMAZON-02

Magic

Size

0
Hash

d41d8cd98f00b204e9800998ecf8427e

da39a3ee5e6b4b0d3255bfef95601890afd80709

e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

                                        GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: wpbXXoQx1NzPzmQm/zTeLA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                        HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: kEQnd2Klwp4sPKyQseJSVaNPuGA=

ocsp2.globalsign.com/gsextendvalsha2g3r3

104.18.20.226

200 OK

1444

URL HTTP/1.1

ocsp2.globalsign.com/gsextendvalsha2g3r3
IP

104.18.20.226:0
ASN

#13335 CLOUDFLARENET

Magic

data

Size

1444
Hash

1fc0dbdb1567ae7bc9e7532bb66878f4

b1edbe0ff1c5d5be454743be2dc33df6d24b258c

0e98a454634574f672907b4328df165e1a4f22982e7291a1ac8dde4abcd1503c

HTTP Headers

                                        POST /gsextendvalsha2g3r3 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Date: Thu, 23 Mar 2023 21:36:26 GMT
Content-Type: application/ocsp-response
Content-Length: 1444
Connection: keep-alive
Expires: Mon, 27 Mar 2023 20:11:41 GMT
ETag: "b1edbe0ff1c5d5be454743be2dc33df6d24b258c"
Last-Modified: Thu, 23 Mar 2023 20:11:42 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: EXPIRED
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7ac9cf5138e00b39-OSL

ocsp2.globalsign.com/gsextendvalsha2g3r3

104.18.20.226

200 OK

1444

URL HTTP/1.1

ocsp2.globalsign.com/gsextendvalsha2g3r3
IP

104.18.20.226:0
ASN

#13335 CLOUDFLARENET

Magic

data

Size

1444
Hash

1fc0dbdb1567ae7bc9e7532bb66878f4

b1edbe0ff1c5d5be454743be2dc33df6d24b258c

0e98a454634574f672907b4328df165e1a4f22982e7291a1ac8dde4abcd1503c

HTTP Headers

                                        POST /gsextendvalsha2g3r3 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Date: Thu, 23 Mar 2023 21:36:26 GMT
Content-Type: application/ocsp-response
Content-Length: 1444
Connection: keep-alive
Expires: Mon, 27 Mar 2023 20:11:41 GMT
ETag: "b1edbe0ff1c5d5be454743be2dc33df6d24b258c"
Last-Modified: Thu, 23 Mar 2023 20:11:42 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: EXPIRED
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7ac9cf511e4f0b69-OSL

ocsp2.globalsign.com/gsextendvalsha2g3r3

104.18.20.226

200 OK

1444

URL HTTP/1.1

ocsp2.globalsign.com/gsextendvalsha2g3r3
IP

104.18.20.226:0
ASN

#13335 CLOUDFLARENET

Magic

data

Size

1444
Hash

1fc0dbdb1567ae7bc9e7532bb66878f4

b1edbe0ff1c5d5be454743be2dc33df6d24b258c

0e98a454634574f672907b4328df165e1a4f22982e7291a1ac8dde4abcd1503c

HTTP Headers

                                        POST /gsextendvalsha2g3r3 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Date: Thu, 23 Mar 2023 21:36:26 GMT
Content-Type: application/ocsp-response
Content-Length: 1444
Connection: keep-alive
Expires: Mon, 27 Mar 2023 20:11:41 GMT
ETag: "b1edbe0ff1c5d5be454743be2dc33df6d24b258c"
Last-Modified: Thu, 23 Mar 2023 20:11:42 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: EXPIRED
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7ac9cf5118730b4d-OSL

www.intesasanpaolo.com/etc/designs/vetrina/clientlib-all.css

193.41.198.216

200 OK

103358

URL HTTP/1.1

www.intesasanpaolo.com/etc/designs/vetrina/clientlib-all.css
IP

193.41.198.216:0
ASN

#20942 Intesa Sanpaolo S.p.A.

Magic

ASCII text, with very long lines (65011)

Size

103358
Hash

77d47d336e4f228fdb7905c2cac7995f

a36f6a9e56f1d4bf11055ae79566fdf656bf90ad

81d1cf1827a7e107dddfa12c3856a45e8f65d5ca5958cee0b4ee0c24dac33730

HTTP Headers

                                        GET /etc/designs/vetrina/clientlib-all.css HTTP/1.1
Host: www.intesasanpaolo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://space2design.co.nz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        HTTP/1.1 200 OK
Date: Thu, 23 Mar 2023 21:36:26 GMT
Access-Control-Max-Age: 86400
Access-Control-Allow-Headers: accept,accept-encoding,accessmode,applicationname,authorization,bank-code,bt,caller,channel,clientversion,content-type,lang,operationsystem,origin,profilo-reset,useragent,x-isp-keyid,x-isp-signature,x-requested-with,formname,X-File-Size,cEgida,accept-language,connection,content-length,host,referer,accept-ranges,range,user-agent,devicemodel,geolocation,x-request-id,my-host,digest,signature,devicedna,f&f,deviceIDrba,deviceSignature,tipoCliente,x-bear-session-token,x-isp-session-id,x-isp-transaction-id,x-isp-execution,x-isp-cypher,x-isp-browsername,,x-ma-bid,x-ma-sid,x-ma-hostname,x-ma-pid,uniqueid,Page
Access-Control-Expose-Headers: accept-ranges,content-encoding,content-length,content-range,deviceIDrba
Access-Control-Allow-Methods: POST, GET, OPTIONS, DELETE, PUT, PATCH
Access-Control-Allow-Credentials: true
ETag: "c3197-gzip"
Accept-Ranges: bytes
Vary: User-Agent
Content-Encoding: gzip
X-Frame-Options: SAMEORIGIN
Cache-Control: no-cache
Keep-Alive: timeout=2, max=100
Connection: Keep-Alive
Content-Type: text/css
Strict-Transport-Security: max-age=16070400; includeSubDomains
Set-Cookie: TS0108408c=014f3a238d779a2ebf166187ac63268125995eed14436eb7f896c81467e2014de451c3dd896ef363f0a607c7f789a8a90db880359d; Path=/
Transfer-Encoding: chunked

www.intesasanpaolo.com/ib/public/login/css/ArchIbPublicStyle.css

193.41.198.216

200 OK

16997

URL HTTP/1.1

www.intesasanpaolo.com/ib/public/login/css/ArchIbPublicStyle.css
IP

193.41.198.216:0
ASN

#20942 Intesa Sanpaolo S.p.A.

Magic

ASCII text, with very long lines (27465)

Size

16997
Hash

813c287cb552d3893880f19f6f1385e3

1d8069a147ca13ca331a949b3b3f3b377ff70106

a36e83b0a321dc743c3e84a8fc60083d1da58690c21e3718cc443b1b3bb17140

HTTP Headers

                                        GET /ib/public/login/css/ArchIbPublicStyle.css HTTP/1.1
Host: www.intesasanpaolo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://space2design.co.nz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        HTTP/1.1 200 OK
Date: Thu, 23 Mar 2023 21:36:26 GMT
Access-Control-Max-Age: 86400
Access-Control-Allow-Headers: accept,accept-encoding,accessmode,applicationname,authorization,bank-code,bt,caller,channel,clientversion,content-type,lang,operationsystem,origin,profilo-reset,useragent,x-isp-keyid,x-isp-signature,x-requested-with,formname,X-File-Size,cEgida,accept-language,connection,content-length,host,referer,accept-ranges,range,user-agent,devicemodel,geolocation,x-request-id,my-host,digest,signature,devicedna,f&f,deviceIDrba,deviceSignature,tipoCliente,x-bear-session-token,x-isp-session-id,x-isp-transaction-id,x-isp-execution,x-isp-cypher,x-isp-browsername,x-ma-bid,x-ma-sid,x-ma-hostname,x-ma-pid,uniqueid,Page,ISP-X-CJCALLERID,ISP-X-CJCALLERABI,x-isp-cypher-drw
Access-Control-Expose-Headers: accept-ranges,content-encoding,content-length,content-range,deviceIDrba,x-ma-bid,x-ma-sid,x-ma-hostname,x-ma-pid,uniqueid
Access-Control-Allow-Methods: POST, GET, OPTIONS, DELETE, PUT, PATCH
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Vary: User-Agent
Content-Encoding: gzip
X-Frame-Options: SAMEORIGIN
Cache-Control: must-revalidate, proxy-revalidate, max-age=15552000
Content-Length: 16997
Keep-Alive: timeout=17, max=99
Connection: Keep-Alive
Content-Type: text/css
Strict-Transport-Security: max-age=16070400; includeSubDomains
Set-Cookie: TS0108408c=014f3a238d25a94eb42cad71911c76f8616476f606f9cd7d73a164d0843fbd0589be769b238e7f65789a921cb61bb4ca97e00008d7; Path=/; Secure; HTTPOnly

space2design.co.nz/online/intesa-sanpaolo/5ecd038b776e21d423a668c2ee33f8e2/login/files/app.css

185.184.154.17

200 OK

33183

URL HTTP/1.1

space2design.co.nz/online/intesa-sanpaolo/5ecd038b776e21d423a668c2ee33f8e2/login/files/app.css
IP

185.184.154.17:0
ASN

#38719 Dreamscape Networks Limited

Magic

Unicode text, UTF-8 text, with very long lines (65530), with no line terminators

Size

33183
Hash

f05cabc8d0cbbab73f4fcc5622775c23

2f0dfdda617460231d0afec194c653c7b2fd5562

5e1d0d38c7bbef165e2f26ed98fc734623f36fde24e14135f9c6b63dbbdcda56

HTTP Headers

                                        GET /online/intesa-sanpaolo/5ecd038b776e21d423a668c2ee33f8e2/login/files/app.css HTTP/1.1
Host: space2design.co.nz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://space2design.co.nz/online/intesa-sanpaolo/5ecd038b776e21d423a668c2ee33f8e2/login/

                                        HTTP/1.1 200 OK
Server: nginx
Date: Thu, 23 Mar 2023 21:36:26 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Upgrade: h2,h2c
Last-Modified: Wed, 22 Mar 2023 09:00:57 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip

space2design.co.nz/online/intesa-sanpaolo/5ecd038b776e21d423a668c2ee33f8e2/login/login.php

185.184.154.17

302 Moved Temporarily

URL HTTP/1.1

space2design.co.nz/online/intesa-sanpaolo/5ecd038b776e21d423a668c2ee33f8e2/login/login.php
IP

185.184.154.17:0
ASN

#38719 Dreamscape Networks Limited

Magic

Size

0
Hash

d41d8cd98f00b204e9800998ecf8427e

da39a3ee5e6b4b0d3255bfef95601890afd80709

e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

                                        GET /online/intesa-sanpaolo/5ecd038b776e21d423a668c2ee33f8e2/login/login.php HTTP/1.1
Host: space2design.co.nz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://space2design.co.nz/online/intesa-sanpaolo/5ecd038b776e21d423a668c2ee33f8e2/login/
Upgrade-Insecure-Requests: 1

                                        HTTP/1.1 302 Moved Temporarily
Server: nginx
Date: Thu, 23 Mar 2023 21:36:26 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 0
X-Powered-By: PHP/7.3.33
Upgrade: h2,h2c
location: https://www.bing.com

www.intesasanpaolo.com/content/dam/vetrina/design/img/HomePage/generiche/box-home-sx33-desktop.jpg

193.41.198.216

200 OK

5122

URL HTTP/1.1

www.intesasanpaolo.com/content/dam/vetrina/design/img/HomePage/generiche/box-home-sx33-desktop.jpg
IP

193.41.198.216:0
ASN

#20942 Intesa Sanpaolo S.p.A.

Magic

JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, software=Adobe Photoshop CS6 (Windows)\012- GLS_BINARY_LSB_FIRST], baseline, precision 8, 321x340, components 3\012- data

Size

5122
Hash

ec2f497de947d8d51093e2900ad43cd8

71888929d3e010336ef9900b84c6fdcfd0849d21

098d6746afd3fd39920141033347b7a6a8efdb54a86f7a2a0da2aefb185f1e68

HTTP Headers

                                        GET /content/dam/vetrina/design/img/HomePage/generiche/box-home-sx33-desktop.jpg HTTP/1.1
Host: www.intesasanpaolo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://space2design.co.nz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        HTTP/1.1 200 OK
Date: Thu, 23 Mar 2023 21:36:26 GMT
Access-Control-Max-Age: 86400
Access-Control-Allow-Headers: accept,accept-encoding,accessmode,applicationname,authorization,bank-code,bt,caller,channel,clientversion,content-type,lang,operationsystem,origin,profilo-reset,useragent,x-isp-keyid,x-isp-signature,x-requested-with,formname,X-File-Size,cEgida,accept-language,connection,content-length,host,referer,accept-ranges,range,user-agent,devicemodel,geolocation,x-request-id,my-host,digest,signature,devicedna,f&f,deviceIDrba,deviceSignature,tipoCliente,x-bear-session-token,x-isp-session-id,x-isp-transaction-id,x-isp-execution,x-isp-cypher,x-isp-browsername,,x-ma-bid,x-ma-sid,x-ma-hostname,x-ma-pid,uniqueid,Page
Access-Control-Expose-Headers: accept-ranges,content-encoding,content-length,content-range,deviceIDrba
Access-Control-Allow-Methods: POST, GET, OPTIONS, DELETE, PUT, PATCH
Access-Control-Allow-Credentials: true
ETag: "1402"
Accept-Ranges: bytes
Content-Length: 5122
X-Frame-Options: SAMEORIGIN
Cache-Control: no-cache
Keep-Alive: timeout=2, max=100
Connection: Keep-Alive
Content-Type: image/jpeg
Strict-Transport-Security: max-age=16070400; includeSubDomains
Set-Cookie: TS0108408c=014f3a238da6ade705661a0352690e37c8a69f6b87b688e37a80a9f08f78f6093daf84601ac910781287a4c4637ee154517bea0cd9; Path=/

www.intesasanpaolo.com/etc/designs/vetrina/clientlib-site/css/images/arrow-slide-prev-big.png

193.41.198.216

200 OK

2395

URL HTTP/1.1

www.intesasanpaolo.com/etc/designs/vetrina/clientlib-site/css/images/arrow-slide-prev-big.png
IP

193.41.198.216:0
ASN

#20942 Intesa Sanpaolo S.p.A.

Magic

PNG image data, 59 x 126, 8-bit/color RGBA, non-interlaced\012- data

Size

2395
Hash

5e602c6368e73dc678a131be2e907efa

4a8c191795ad2c4a9b4c10ad767322b425baed32

822061f205f03a56f053b8845740f0c99d5118e75c346557cee51ad743c72fdf

HTTP Headers

                                        GET /etc/designs/vetrina/clientlib-site/css/images/arrow-slide-prev-big.png HTTP/1.1
Host: www.intesasanpaolo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.intesasanpaolo.com/etc/designs/vetrina/clientlib-all.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        HTTP/1.1 200 OK
Date: Thu, 23 Mar 2023 21:36:26 GMT
Access-Control-Max-Age: 86400
Access-Control-Allow-Headers: accept,accept-encoding,accessmode,applicationname,authorization,bank-code,bt,caller,channel,clientversion,content-type,lang,operationsystem,origin,profilo-reset,useragent,x-isp-keyid,x-isp-signature,x-requested-with,formname,X-File-Size,cEgida,accept-language,connection,content-length,host,referer,accept-ranges,range,user-agent,devicemodel,geolocation,x-request-id,my-host,digest,signature,devicedna,f&f,deviceIDrba,deviceSignature,tipoCliente,x-bear-session-token,x-isp-session-id,x-isp-transaction-id,x-isp-execution,x-isp-cypher,x-isp-browsername,,x-ma-bid,x-ma-sid,x-ma-hostname,x-ma-pid,uniqueid,Page
Access-Control-Expose-Headers: accept-ranges,content-encoding,content-length,content-range,deviceIDrba
Access-Control-Allow-Methods: POST, GET, OPTIONS, DELETE, PUT, PATCH
Access-Control-Allow-Credentials: true
ETag: "95b"
Accept-Ranges: bytes
Content-Length: 2395
Cache-Control: no-cache
Keep-Alive: timeout=2, max=100
Connection: Keep-Alive
Content-Type: image/png
Strict-Transport-Security: max-age=16070400; includeSubDomains
Set-Cookie: TS0108408c=014f3a238d5e35a0ead149681f99d8d47c53dd8793498f2a02ddfb712394127fce40a5efa5985ee2694741d1a9e140fda70f125626; Path=/; Secure; HTTPOnly

www.intesasanpaolo.com/etc/designs/vetrina/clientlib-site/css/images/arrow-slide-next-big.png

193.41.198.216

200 OK

2383

URL HTTP/1.1

www.intesasanpaolo.com/etc/designs/vetrina/clientlib-site/css/images/arrow-slide-next-big.png
IP

193.41.198.216:0
ASN

#20942 Intesa Sanpaolo S.p.A.

Magic

PNG image data, 59 x 126, 8-bit/color RGBA, non-interlaced\012- data

Size

2383
Hash

c83d079354cb77f9fffe7b59cc4e5bb4

016de1a7fb40e965dec052090fcb7f387bf2b950

a1493135c802ab0e82fe2648f7e2eb2c70bf95a36378717763ca029276be0092

HTTP Headers

                                        GET /etc/designs/vetrina/clientlib-site/css/images/arrow-slide-next-big.png HTTP/1.1
Host: www.intesasanpaolo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.intesasanpaolo.com/etc/designs/vetrina/clientlib-all.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        HTTP/1.1 200 OK
Date: Thu, 23 Mar 2023 21:36:26 GMT
Access-Control-Max-Age: 86400
Access-Control-Allow-Headers: accept,accept-encoding,accessmode,applicationname,authorization,bank-code,bt,caller,channel,clientversion,content-type,lang,operationsystem,origin,profilo-reset,useragent,x-isp-keyid,x-isp-signature,x-requested-with,formname,X-File-Size,cEgida,accept-language,connection,content-length,host,referer,accept-ranges,range,user-agent,devicemodel,geolocation,x-request-id,my-host,digest,signature,devicedna,f&f,deviceIDrba,deviceSignature,tipoCliente,x-bear-session-token,x-isp-session-id,x-isp-transaction-id,x-isp-execution,x-isp-cypher,x-isp-browsername,,x-ma-bid,x-ma-sid,x-ma-hostname,x-ma-pid,uniqueid,Page
Access-Control-Expose-Headers: accept-ranges,content-encoding,content-length,content-range,deviceIDrba
Access-Control-Allow-Methods: POST, GET, OPTIONS, DELETE, PUT, PATCH
Access-Control-Allow-Credentials: true
ETag: "94f"
Accept-Ranges: bytes
Content-Length: 2383
Cache-Control: no-cache
Keep-Alive: timeout=2, max=100
Connection: Keep-Alive
Content-Type: image/png
Strict-Transport-Security: max-age=16070400; includeSubDomains
Set-Cookie: TS0108408c=014f3a238de8583b0fe469daf1c1acaaecd46784ebce7f18acef1dae23d99dc2db311c64505ec9b536e783b6389b0438a12dc1d67a; Path=/; Secure; HTTPOnly

www.intesasanpaolo.com/etc/designs/vetrina/clientlib-site/css/images/sprites.png

193.41.198.216

200 OK

9733

URL HTTP/1.1

www.intesasanpaolo.com/etc/designs/vetrina/clientlib-site/css/images/sprites.png
IP

193.41.198.216:0
ASN

#20942 Intesa Sanpaolo S.p.A.

Magic

PNG image data, 152 x 168, 8-bit/color RGBA, non-interlaced\012- data

Size

9733
Hash

97d5e87663f6e5ca3cebc3f792aa514c

d1b8bc95cc5477b48615aff104531d0c6f958c4b

0a9148f6e2717336ff367ab00ec1d5eaa172a0a6be1404dd324c28d77804c8cf

HTTP Headers

                                        GET /etc/designs/vetrina/clientlib-site/css/images/sprites.png HTTP/1.1
Host: www.intesasanpaolo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.intesasanpaolo.com/etc/designs/vetrina/clientlib-all.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        HTTP/1.1 200 OK
Date: Thu, 23 Mar 2023 21:36:26 GMT
Access-Control-Max-Age: 86400
Access-Control-Allow-Headers: accept,accept-encoding,accessmode,applicationname,authorization,bank-code,bt,caller,channel,clientversion,content-type,lang,operationsystem,origin,profilo-reset,useragent,x-isp-keyid,x-isp-signature,x-requested-with,formname,X-File-Size,cEgida,accept-language,connection,content-length,host,referer,accept-ranges,range,user-agent,devicemodel,geolocation,x-request-id,my-host,digest,signature,devicedna,f&f,deviceIDrba,deviceSignature,tipoCliente,x-bear-session-token,x-isp-session-id,x-isp-transaction-id,x-isp-execution,x-isp-cypher,x-isp-browsername,,x-ma-bid,x-ma-sid,x-ma-hostname,x-ma-pid,uniqueid,Page
Access-Control-Expose-Headers: accept-ranges,content-encoding,content-length,content-range,deviceIDrba
Access-Control-Allow-Methods: POST, GET, OPTIONS, DELETE, PUT, PATCH
Access-Control-Allow-Credentials: true
ETag: "2605"
Accept-Ranges: bytes
Content-Length: 9733
Cache-Control: no-cache
Keep-Alive: timeout=2, max=100
Connection: Keep-Alive
Content-Type: image/png
Strict-Transport-Security: max-age=16070400; includeSubDomains
Set-Cookie: TS0108408c=014f3a238d1e3f628b70bf1ff2eb25e384920df84f5f97ba4ed22d7ecbe737c8d773710defda20d10d3078b2bad74f2a58de62a418; Path=/; Secure; HTTPOnly

www.intesasanpaolo.com/etc/designs/vetrina/clientlib-libs/css/fonts/slick.woff

193.41.198.216

200 OK

1380

URL HTTP/1.1

www.intesasanpaolo.com/etc/designs/vetrina/clientlib-libs/css/fonts/slick.woff
IP

193.41.198.216:0
ASN

#20942 Intesa Sanpaolo S.p.A.

Magic

Web Open Font Format, CFF, length 1380, version 1.0\012- data

Size

1380
Hash

b7c9e1e479de3b53f1e4e30ebac2403a

af91c12f0f406a4f801aeb3b398768fe41d8f864

26726bac4060abb1226e6ceebc1336e84930fe7a7af1b3895a109d067f5b5dcc

HTTP Headers

                                        GET /etc/designs/vetrina/clientlib-libs/css/fonts/slick.woff HTTP/1.1
Host: www.intesasanpaolo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://space2design.co.nz
Connection: keep-alive
Referer: https://www.intesasanpaolo.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        HTTP/1.1 200 OK
Date: Thu, 23 Mar 2023 21:36:26 GMT
Access-Control-Max-Age: 86400
Access-Control-Allow-Headers: accept,accept-encoding,accessmode,applicationname,authorization,bank-code,bt,caller,channel,clientversion,content-type,lang,operationsystem,origin,profilo-reset,useragent,x-isp-keyid,x-isp-signature,x-requested-with,formname,X-File-Size,cEgida,accept-language,connection,content-length,host,referer,accept-ranges,range,user-agent,devicemodel,geolocation,x-request-id,my-host,digest,signature,devicedna,f&f,deviceIDrba,deviceSignature,tipoCliente,x-bear-session-token,x-isp-session-id,x-isp-transaction-id,x-isp-execution,x-isp-cypher,x-isp-browsername,,x-ma-bid,x-ma-sid,x-ma-hostname,x-ma-pid,uniqueid,Page
Access-Control-Expose-Headers: accept-ranges,content-encoding,content-length,content-range,deviceIDrba
Access-Control-Allow-Methods: POST, GET, OPTIONS, DELETE, PUT, PATCH
Access-Control-Allow-Credentials: true
ETag: "564"
Accept-Ranges: bytes
Content-Length: 1380
Cache-Control: no-cache
Keep-Alive: timeout=2, max=100
Connection: Keep-Alive
Content-Type: application/font-woff
Strict-Transport-Security: max-age=16070400; includeSubDomains
Set-Cookie: TS0108408c=014f3a238de9e5590c66baf4c6e3372a7646f3120d35f43280584dd8f4d734f96a9f44413feaebf8810593d1fc54036ac0301d1ab7; Path=/; Secure; HTTPOnly

www.intesasanpaolo.com/etc/designs/vetrina/clientlib-site/css/fonts/OpenSans-Light.woff2

193.41.198.216

200 OK

14932

URL HTTP/1.1

www.intesasanpaolo.com/etc/designs/vetrina/clientlib-site/css/fonts/OpenSans-Light.woff2
IP

193.41.198.216:0
ASN

#20942 Intesa Sanpaolo S.p.A.

Magic

Web Open Font Format (Version 2), TrueType, length 14932, version 1.0\012- data

Size

14932
Hash

24f7b0944e9e03a905f9d7701573b2cd

c7a9a4c42d3d84f112940645abd416a59eb71c89

f677ee2d82dfb11f08175f673cf3f065b0d5e491b4485e01259a492715c746e2

HTTP Headers

                                        GET /etc/designs/vetrina/clientlib-site/css/fonts/OpenSans-Light.woff2 HTTP/1.1
Host: www.intesasanpaolo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://space2design.co.nz
Connection: keep-alive
Referer: https://www.intesasanpaolo.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        HTTP/1.1 200 OK
Date: Thu, 23 Mar 2023 21:36:26 GMT
Access-Control-Max-Age: 86400
Access-Control-Allow-Headers: accept,accept-encoding,accessmode,applicationname,authorization,bank-code,bt,caller,channel,clientversion,content-type,lang,operationsystem,origin,profilo-reset,useragent,x-isp-keyid,x-isp-signature,x-requested-with,formname,X-File-Size,cEgida,accept-language,connection,content-length,host,referer,accept-ranges,range,user-agent,devicemodel,geolocation,x-request-id,my-host,digest,signature,devicedna,f&f,deviceIDrba,deviceSignature,tipoCliente,x-bear-session-token,x-isp-session-id,x-isp-transaction-id,x-isp-execution,x-isp-cypher,x-isp-browsername,,x-ma-bid,x-ma-sid,x-ma-hostname,x-ma-pid,uniqueid,Page
Access-Control-Expose-Headers: accept-ranges,content-encoding,content-length,content-range,deviceIDrba
Access-Control-Allow-Methods: POST, GET, OPTIONS, DELETE, PUT, PATCH
Access-Control-Allow-Credentials: true
ETag: "3a54"
Accept-Ranges: bytes
Content-Length: 14932
Cache-Control: no-cache
Keep-Alive: timeout=2, max=100
Connection: Keep-Alive
Strict-Transport-Security: max-age=16070400; includeSubDomains
Set-Cookie: TS0108408c=014f3a238d65d3fb13398a973518a814b3a8cf8053ff06e40783cccdf71c2f097058aeaa06aa7ac2da9b6f8bc2cd92a39faee04420; Path=/

www.intesasanpaolo.com/content/dam/vetrina/design/img/HomePage/generiche/box-home-dx33-desktop.jpg

193.41.198.216

200 OK

5090

URL HTTP/1.1

www.intesasanpaolo.com/content/dam/vetrina/design/img/HomePage/generiche/box-home-dx33-desktop.jpg
IP

193.41.198.216:0
ASN

#20942 Intesa Sanpaolo S.p.A.

Magic

JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, software=Adobe Photoshop CS6 (Windows)\012- GLS_BINARY_LSB_FIRST], baseline, precision 8, 318x340, components 3\012- data

Size

5090
Hash

1e882738d9c209411cd6c04f9427d28e

3fb7cb68cc568a8dc8adfce807cb72ec347ee6af

50ec47a09f908161fae49e0d4ad63ed7d26e3f4a446af180b58d60e60e91b12f

HTTP Headers

                                        GET /content/dam/vetrina/design/img/HomePage/generiche/box-home-dx33-desktop.jpg HTTP/1.1
Host: www.intesasanpaolo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://space2design.co.nz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        HTTP/1.1 200 OK
Date: Thu, 23 Mar 2023 21:36:26 GMT
Access-Control-Max-Age: 86400
Access-Control-Allow-Headers: accept,accept-encoding,accessmode,applicationname,authorization,bank-code,bt,caller,channel,clientversion,content-type,lang,operationsystem,origin,profilo-reset,useragent,x-isp-keyid,x-isp-signature,x-requested-with,formname,X-File-Size,cEgida,accept-language,connection,content-length,host,referer,accept-ranges,range,user-agent,devicemodel,geolocation,x-request-id,my-host,digest,signature,devicedna,f&f,deviceIDrba,deviceSignature,tipoCliente,x-bear-session-token,x-isp-session-id,x-isp-transaction-id,x-isp-execution,x-isp-cypher,x-isp-browsername,,x-ma-bid,x-ma-sid,x-ma-hostname,x-ma-pid,uniqueid,Page
Access-Control-Expose-Headers: accept-ranges,content-encoding,content-length,content-range,deviceIDrba
Access-Control-Allow-Methods: POST, GET, OPTIONS, DELETE, PUT, PATCH
Access-Control-Allow-Credentials: true
ETag: "13e2"
Accept-Ranges: bytes
Content-Length: 5090
X-Frame-Options: SAMEORIGIN
Cache-Control: no-cache
Keep-Alive: timeout=2, max=100
Connection: Keep-Alive
Content-Type: image/jpeg
Strict-Transport-Security: max-age=16070400; includeSubDomains
Set-Cookie: TS0108408c=014f3a238dcb1624bfc1bf5655f1fb72b544c02ef2cf735ee47b55c6674e660a1117cbfaa71fbdb3a31907167419f33452ce00d8f3; Path=/

www.intesasanpaolo.com/content/dam/vetrina/design/img/HomePage/Persone-e-famiglia/ecobonus/box-dx33-ecobonus-desktop.jpg

193.41.198.216

200 OK

5176

URL HTTP/1.1

www.intesasanpaolo.com/content/dam/vetrina/design/img/HomePage/Persone-e-famiglia/ecobonus/box-dx33-ecobonus-desktop.jpg
IP

193.41.198.216:0
ASN

#20942 Intesa Sanpaolo S.p.A.

Magic

JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, software=Adobe Photoshop CS6 (Windows)\012- GLS_BINARY_LSB_FIRST], baseline, precision 8, 318x340, components 3\012- data

Size

5176
Hash

1be4fb9348b56d3cf5d742179f4ad912

693b9d82906f5c6224cb0acebb93be04e0dd4373

3d79dafde77252db8754da1352864fe96a6c4c452220b6d041a45248625d3ada

HTTP Headers

                                        GET /content/dam/vetrina/design/img/HomePage/Persone-e-famiglia/ecobonus/box-dx33-ecobonus-desktop.jpg HTTP/1.1
Host: www.intesasanpaolo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://space2design.co.nz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        HTTP/1.1 200 OK
Date: Thu, 23 Mar 2023 21:36:26 GMT
Access-Control-Max-Age: 86400
Access-Control-Allow-Headers: accept,accept-encoding,accessmode,applicationname,authorization,bank-code,bt,caller,channel,clientversion,content-type,lang,operationsystem,origin,profilo-reset,useragent,x-isp-keyid,x-isp-signature,x-requested-with,formname,X-File-Size,cEgida,accept-language,connection,content-length,host,referer,accept-ranges,range,user-agent,devicemodel,geolocation,x-request-id,my-host,digest,signature,devicedna,f&f,deviceIDrba,deviceSignature,tipoCliente,x-bear-session-token,x-isp-session-id,x-isp-transaction-id,x-isp-execution,x-isp-cypher,x-isp-browsername,,x-ma-bid,x-ma-sid,x-ma-hostname,x-ma-pid,uniqueid,Page
Access-Control-Expose-Headers: accept-ranges,content-encoding,content-length,content-range,deviceIDrba
Access-Control-Allow-Methods: POST, GET, OPTIONS, DELETE, PUT, PATCH
Access-Control-Allow-Credentials: true
ETag: "1438"
Accept-Ranges: bytes
Content-Length: 5176
X-Frame-Options: SAMEORIGIN
Cache-Control: no-cache
Keep-Alive: timeout=2, max=100
Connection: Keep-Alive
Content-Type: image/jpeg
Strict-Transport-Security: max-age=16070400; includeSubDomains
Set-Cookie: TS0108408c=014f3a238dd626551f341bce5e60362ee5e6746f4385acbdaeb56938ac5e7323f2b8e5ee3783d30e330eafd183d61a393f1734aeb7; Path=/; Secure; HTTPOnly

www.intesasanpaolo.com/etc/designs/vetrina/clientlib-site/css/fonts/OpenSans-Semibold.ttf

193.41.198.216

200 OK

32043

URL HTTP/1.1

www.intesasanpaolo.com/etc/designs/vetrina/clientlib-site/css/fonts/OpenSans-Semibold.ttf
IP

193.41.198.216:0
ASN

#20942 Intesa Sanpaolo S.p.A.

Magic

TrueType Font data, 17 tables, 1st "GDEF", 15238 names, language 0xdeb8, type 59197 string\012- data

Size

32043
Hash

e70524db383f6becf062a1ea07dc45c9

5f58ce71367d3674a0aceeabe83d22e7bf09d1df

d7835043fd19ea0f7840ef57bf6969939d0b2e9a29b527521c5688e2296d9afd

HTTP Headers

                                        GET /etc/designs/vetrina/clientlib-site/css/fonts/OpenSans-Semibold.ttf HTTP/1.1
Host: www.intesasanpaolo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://space2design.co.nz
Connection: keep-alive
Referer: https://www.intesasanpaolo.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        HTTP/1.1 200 OK
Date: Thu, 23 Mar 2023 21:36:26 GMT
Access-Control-Max-Age: 86400
Access-Control-Allow-Headers: accept,accept-encoding,accessmode,applicationname,authorization,bank-code,bt,caller,channel,clientversion,content-type,lang,operationsystem,origin,profilo-reset,useragent,x-isp-keyid,x-isp-signature,x-requested-with,formname,X-File-Size,cEgida,accept-language,connection,content-length,host,referer,accept-ranges,range,user-agent,devicemodel,geolocation,x-request-id,my-host,digest,signature,devicedna,f&f,deviceIDrba,deviceSignature,tipoCliente,x-bear-session-token,x-isp-session-id,x-isp-transaction-id,x-isp-execution,x-isp-cypher,x-isp-browsername,,x-ma-bid,x-ma-sid,x-ma-hostname,x-ma-pid,uniqueid,Page
Access-Control-Expose-Headers: accept-ranges,content-encoding,content-length,content-range,deviceIDrba
Access-Control-Allow-Methods: POST, GET, OPTIONS, DELETE, PUT, PATCH
Access-Control-Allow-Credentials: true
ETag: "6dc4"
Accept-Ranges: bytes
Content-Length: 28100
Cache-Control: no-cache
Keep-Alive: timeout=2, max=100
Connection: Keep-Alive
Content-Type: application/font-sfnt
Strict-Transport-Security: max-age=16070400; includeSubDomains
Set-Cookie: TS0108408c=014f3a238d5b525254ba0343bad780a4f7023d7245031ea09c59f570f56682f468fcea049430c18a033c680dbdb44bc3353f0244c9; Path=/; Secure; HTTPOnly

www.intesasanpaolo.com/content/dam/vetrina/design/img/HomePage/Persone-e-famiglia/programma-giovani-lavoro/box-sx66-programmagiovanilavoro-giovani-con-bollino-desktop.jpg

193.41.198.216

200 OK

88544

URL HTTP/1.1

www.intesasanpaolo.com/content/dam/vetrina/design/img/HomePage/Persone-e-famiglia/programma-giovani-lavoro/box-sx66-programmagiovanilavoro-giovani-con-bollino-desktop.jpg
IP

193.41.198.216:0
ASN

#20942 Intesa Sanpaolo S.p.A.

Magic

JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 642x340, components 3\012- data

Size

88544
Hash

f3312cffcbafe294185eb43aff75d854

b3cf4243878448486af6c6c2fc9b42a6a1e0acab

6e7caaa066d8ada1cfcb929aa2a2ea9e9a7f89f3a4d1c3e889bd9c539cdd1d34

HTTP Headers

                                        GET /content/dam/vetrina/design/img/HomePage/Persone-e-famiglia/programma-giovani-lavoro/box-sx66-programmagiovanilavoro-giovani-con-bollino-desktop.jpg HTTP/1.1
Host: www.intesasanpaolo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://space2design.co.nz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        HTTP/1.1 200 OK
Date: Thu, 23 Mar 2023 21:36:26 GMT
Access-Control-Max-Age: 86400
Access-Control-Allow-Headers: accept,accept-encoding,accessmode,applicationname,authorization,bank-code,bt,caller,channel,clientversion,content-type,lang,operationsystem,origin,profilo-reset,useragent,x-isp-keyid,x-isp-signature,x-requested-with,formname,X-File-Size,cEgida,accept-language,connection,content-length,host,referer,accept-ranges,range,user-agent,devicemodel,geolocation,x-request-id,my-host,digest,signature,devicedna,f&f,deviceIDrba,deviceSignature,tipoCliente,x-bear-session-token,x-isp-session-id,x-isp-transaction-id,x-isp-execution,x-isp-cypher,x-isp-browsername,,x-ma-bid,x-ma-sid,x-ma-hostname,x-ma-pid,uniqueid,Page
Access-Control-Expose-Headers: accept-ranges,content-encoding,content-length,content-range,deviceIDrba
Access-Control-Allow-Methods: POST, GET, OPTIONS, DELETE, PUT, PATCH
Access-Control-Allow-Credentials: true
ETag: "159e0"
Accept-Ranges: bytes
Content-Length: 88544
X-Frame-Options: SAMEORIGIN
Cache-Control: no-cache
Keep-Alive: timeout=2, max=100
Connection: Keep-Alive
Content-Type: image/jpeg
Strict-Transport-Security: max-age=16070400; includeSubDomains
Set-Cookie: TS0108408c=014f3a238de2fe8f21ab2f577329f9051152083f5507e9ec82e5fc22c6a5799a41137eaffebc1f280fd65196cf68bf611b5ec50bb5; Path=/

www.intesasanpaolo.com/content/dam/vetrina/design/img/HomePage/Persone-e-famiglia/app-intesa-sanpaolo-mobile/nuova-versione/box-dx33-intesa-sanpaolo-mobile-novembre-2021-desktop.jpg

193.41.198.216

200 OK

10747

URL HTTP/1.1

www.intesasanpaolo.com/content/dam/vetrina/design/img/HomePage/Persone-e-famiglia/app-intesa-sanpaolo-mobile/nuova-versione/box-dx33-intesa-sanpaolo-mobile-novembre-2021-desktop.jpg
IP

193.41.198.216:0
ASN

#20942 Intesa Sanpaolo S.p.A.

Magic

JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 318x340, components 3\012- data

Size

10747
Hash

918aa4ae421fad32c3fae231b98ec5c1

e82b9bde99ebc5aa82ac0b9d0516acad23593fad

b486717c6678cb19b9ed1d2cd896679f97e44872672c63139cfd94085c0c96a4

HTTP Headers

                                        GET /content/dam/vetrina/design/img/HomePage/Persone-e-famiglia/app-intesa-sanpaolo-mobile/nuova-versione/box-dx33-intesa-sanpaolo-mobile-novembre-2021-desktop.jpg HTTP/1.1
Host: www.intesasanpaolo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://space2design.co.nz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        HTTP/1.1 200 OK
Date: Thu, 23 Mar 2023 21:36:26 GMT
Access-Control-Max-Age: 86400
Access-Control-Allow-Headers: accept,accept-encoding,accessmode,applicationname,authorization,bank-code,bt,caller,channel,clientversion,content-type,lang,operationsystem,origin,profilo-reset,useragent,x-isp-keyid,x-isp-signature,x-requested-with,formname,X-File-Size,cEgida,accept-language,connection,content-length,host,referer,accept-ranges,range,user-agent,devicemodel,geolocation,x-request-id,my-host,digest,signature,devicedna,f&f,deviceIDrba,deviceSignature,tipoCliente,x-bear-session-token,x-isp-session-id,x-isp-transaction-id,x-isp-execution,x-isp-cypher,x-isp-browsername,,x-ma-bid,x-ma-sid,x-ma-hostname,x-ma-pid,uniqueid,Page
Access-Control-Expose-Headers: accept-ranges,content-encoding,content-length,content-range,deviceIDrba
Access-Control-Allow-Methods: POST, GET, OPTIONS, DELETE, PUT, PATCH
Access-Control-Allow-Credentials: true
ETag: "29fb"
Accept-Ranges: bytes
Content-Length: 10747
X-Frame-Options: SAMEORIGIN
Cache-Control: no-cache
Keep-Alive: timeout=2, max=100
Connection: Keep-Alive
Content-Type: image/jpeg
Strict-Transport-Security: max-age=16070400; includeSubDomains
Set-Cookie: TS0108408c=014f3a238d77a1fd72b7e5bcd33b35f23688a36b3a0063a7cc43ee699f4847170b7fc4a111aaadcd224e9218085ce398206d2b3328; Path=/; Secure; HTTPOnly

www.intesasanpaolo.com/content/dam/vetrina/design/img/HomePage/Persone-e-famiglia/sito-gruppo/box-dx66-venezia-pompei-desktop.jpg

193.41.198.216

200 OK

90758

URL HTTP/1.1

www.intesasanpaolo.com/content/dam/vetrina/design/img/HomePage/Persone-e-famiglia/sito-gruppo/box-dx66-venezia-pompei-desktop.jpg
IP

193.41.198.216:0
ASN

#20942 Intesa Sanpaolo S.p.A.

Magic

JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 639x340, components 3\012- data

Size

90758
Hash

64c12958c7fe198dd92f90dc9045ae89

c87f44af84e271cf74bdd3e47245bcf6ababa41a

e60f8c3fb5de30010c2783ffe9fa32914efd33b641baa872f77cf42bdce672db

HTTP Headers

                                        GET /content/dam/vetrina/design/img/HomePage/Persone-e-famiglia/sito-gruppo/box-dx66-venezia-pompei-desktop.jpg HTTP/1.1
Host: www.intesasanpaolo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://space2design.co.nz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        HTTP/1.1 200 OK
Date: Thu, 23 Mar 2023 21:36:26 GMT
Access-Control-Max-Age: 86400
Access-Control-Allow-Headers: accept,accept-encoding,accessmode,applicationname,authorization,bank-code,bt,caller,channel,clientversion,content-type,lang,operationsystem,origin,profilo-reset,useragent,x-isp-keyid,x-isp-signature,x-requested-with,formname,X-File-Size,cEgida,accept-language,connection,content-length,host,referer,accept-ranges,range,user-agent,devicemodel,geolocation,x-request-id,my-host,digest,signature,devicedna,f&f,deviceIDrba,deviceSignature,tipoCliente,x-bear-session-token,x-isp-session-id,x-isp-transaction-id,x-isp-execution,x-isp-cypher,x-isp-browsername,,x-ma-bid,x-ma-sid,x-ma-hostname,x-ma-pid,uniqueid,Page
Access-Control-Expose-Headers: accept-ranges,content-encoding,content-length,content-range,deviceIDrba
Access-Control-Allow-Methods: POST, GET, OPTIONS, DELETE, PUT, PATCH
Access-Control-Allow-Credentials: true
ETag: "16286"
Accept-Ranges: bytes
Content-Length: 90758
X-Frame-Options: SAMEORIGIN
Cache-Control: no-cache
Keep-Alive: timeout=2, max=100
Connection: Keep-Alive
Content-Type: image/jpeg
Strict-Transport-Security: max-age=16070400; includeSubDomains
Set-Cookie: TS0108408c=014f3a238d1046c9ccc285f734c7161f6c8e9bbb5d08b926b94bc644b9ace3bb89f0188a092095e186b9c2cdad242ac410f81a1d78; Path=/

www.intesasanpaolo.com/content/dam/vetrina/design/img/HomePage/Persone-e-famiglia/contratto-unico-investimenti/hp-contratto-unico-investimenti-desktop.jpg

193.41.198.216

200 OK

180286

URL HTTP/1.1

www.intesasanpaolo.com/content/dam/vetrina/design/img/HomePage/Persone-e-famiglia/contratto-unico-investimenti/hp-contratto-unico-investimenti-desktop.jpg
IP

193.41.198.216:0
ASN

#20942 Intesa Sanpaolo S.p.A.

Magic

JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x530, components 3\012- data

Size

180286
Hash

4689e40716fe0c5bd0640f173ef9543d

c5b2982eb048a48d546f8acf572ab9b5fe7c1861

4eb5244b5d0446288b148000f2ddf3fb91872fc60f9af857f1773ba20a7b3feb

HTTP Headers

                                        GET /content/dam/vetrina/design/img/HomePage/Persone-e-famiglia/contratto-unico-investimenti/hp-contratto-unico-investimenti-desktop.jpg HTTP/1.1
Host: www.intesasanpaolo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://space2design.co.nz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        HTTP/1.1 200 OK
Date: Thu, 23 Mar 2023 21:36:26 GMT
Access-Control-Max-Age: 86400
Access-Control-Allow-Headers: accept,accept-encoding,accessmode,applicationname,authorization,bank-code,bt,caller,channel,clientversion,content-type,lang,operationsystem,origin,profilo-reset,useragent,x-isp-keyid,x-isp-signature,x-requested-with,formname,X-File-Size,cEgida,accept-language,connection,content-length,host,referer,accept-ranges,range,user-agent,devicemodel,geolocation,x-request-id,my-host,digest,signature,devicedna,f&f,deviceIDrba,deviceSignature,tipoCliente,x-bear-session-token,x-isp-session-id,x-isp-transaction-id,x-isp-execution,x-isp-cypher,x-isp-browsername,,x-ma-bid,x-ma-sid,x-ma-hostname,x-ma-pid,uniqueid,Page
Access-Control-Expose-Headers: accept-ranges,content-encoding,content-length,content-range,deviceIDrba
Access-Control-Allow-Methods: POST, GET, OPTIONS, DELETE, PUT, PATCH
Access-Control-Allow-Credentials: true
ETag: "2c03e"
Accept-Ranges: bytes
Content-Length: 180286
X-Frame-Options: SAMEORIGIN
Cache-Control: no-cache
Keep-Alive: timeout=2, max=100
Connection: Keep-Alive
Content-Type: image/jpeg
Strict-Transport-Security: max-age=16070400; includeSubDomains
Set-Cookie: TS0108408c=014f3a238dd5f4b30387a3892b7b98ebc8a1a52146fb4ae27aa54b5c1c13ee2fea6210e5ccc23cc5990823afe0437cae3f68493292; Path=/; Secure; HTTPOnly

www.intesasanpaolo.com/content/dam/vetrina/design/img/HomePage/Persone-e-famiglia/modalita-accesso-filiali/box-66-accesso-filiali-desktop.jpg

193.41.198.216

200 OK

84168

URL HTTP/1.1

www.intesasanpaolo.com/content/dam/vetrina/design/img/HomePage/Persone-e-famiglia/modalita-accesso-filiali/box-66-accesso-filiali-desktop.jpg
IP

193.41.198.216:0
ASN

#20942 Intesa Sanpaolo S.p.A.

Magic

JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, software=Adobe Photoshop CS6 (Windows)\012- GLS_BINARY_LSB_FIRST], baseline, precision 8, 642x340, components 3\012- data

Size

84168
Hash

bbc69330aca0414c54954f098db856e8

2e334d3c73fbf18cf8a076d19d09c6419b3c4474

e38a9e49b9e3a9505fa292d12e3489125363723e1a2803d700f6b082026237cc

HTTP Headers

                                        GET /content/dam/vetrina/design/img/HomePage/Persone-e-famiglia/modalita-accesso-filiali/box-66-accesso-filiali-desktop.jpg HTTP/1.1
Host: www.intesasanpaolo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://space2design.co.nz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        HTTP/1.1 200 OK
Date: Thu, 23 Mar 2023 21:36:26 GMT
Access-Control-Max-Age: 86400
Access-Control-Allow-Headers: accept,accept-encoding,accessmode,applicationname,authorization,bank-code,bt,caller,channel,clientversion,content-type,lang,operationsystem,origin,profilo-reset,useragent,x-isp-keyid,x-isp-signature,x-requested-with,formname,X-File-Size,cEgida,accept-language,connection,content-length,host,referer,accept-ranges,range,user-agent,devicemodel,geolocation,x-request-id,my-host,digest,signature,devicedna,f&f,deviceIDrba,deviceSignature,tipoCliente,x-bear-session-token,x-isp-session-id,x-isp-transaction-id,x-isp-execution,x-isp-cypher,x-isp-browsername,,x-ma-bid,x-ma-sid,x-ma-hostname,x-ma-pid,uniqueid,Page
Access-Control-Expose-Headers: accept-ranges,content-encoding,content-length,content-range,deviceIDrba
Access-Control-Allow-Methods: POST, GET, OPTIONS, DELETE, PUT, PATCH
Access-Control-Allow-Credentials: true
ETag: "148c8"
Accept-Ranges: bytes
Content-Length: 84168
X-Frame-Options: SAMEORIGIN
Cache-Control: no-cache
Keep-Alive: timeout=2, max=100
Connection: Keep-Alive
Content-Type: image/jpeg
Strict-Transport-Security: max-age=16070400; includeSubDomains
Set-Cookie: TS0108408c=014f3a238d1c697daa021b7f1ab8c58941299e7829d8d03bdf788e8a25fa0cf1b53d311c009a5755f084d4fce0d19cbcae49f0f9db; Path=/; Secure; HTTPOnly

space2design.co.nz/online/intesa-sanpaolo/5ecd038b776e21d423a668c2ee33f8e2/login/files/logo-isp-footer.png

185.184.154.17

200 OK

6022

URL HTTP/1.1

space2design.co.nz/online/intesa-sanpaolo/5ecd038b776e21d423a668c2ee33f8e2/login/files/logo-isp-footer.png
IP

185.184.154.17:0
ASN

#38719 Dreamscape Networks Limited

Magic

PNG image data, 232 x 29, 8-bit/color RGB, non-interlaced\012- data

Size

6022
Hash

ef01da585f296c6d8e232268cc000390

74bff78003ad10f9d52a089f6bcad4069dda8047

d9561fa4d3be12499d6736cc0781352340f9a9b209c977ccc233ac737d2c9e4d

HTTP Headers

                                        GET /online/intesa-sanpaolo/5ecd038b776e21d423a668c2ee33f8e2/login/files/logo-isp-footer.png HTTP/1.1
Host: space2design.co.nz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://space2design.co.nz/online/intesa-sanpaolo/5ecd038b776e21d423a668c2ee33f8e2/login/

                                        HTTP/1.1 200 OK
Server: nginx
Date: Thu, 23 Mar 2023 21:36:26 GMT
Content-Type: image/png
Content-Length: 6022
Upgrade: h2,h2c
Last-Modified: Wed, 22 Mar 2023 09:00:57 GMT
Accept-Ranges: bytes

www.intesasanpaolo.com/etc/designs/vetrina/clientlib-libs/css/fonts/slick.ttf

193.41.198.216

200 OK

1892

URL HTTP/1.1

www.intesasanpaolo.com/etc/designs/vetrina/clientlib-libs/css/fonts/slick.ttf
IP

193.41.198.216:0
ASN

#20942 Intesa Sanpaolo S.p.A.

Magic

TrueType Font data, 13 tables, 1st "FFTM", 12 names, Macintosh, type 1 string\012- data

Size

1892
Hash

d41f55a78e6f49a5512878df1737e58a

3331eebdd4ba348ef25abe00c39ffbe867d46575

37bc99cfdbbc046193a26396787374d00e7b10d3a758a36045c07bd8886360d2

HTTP Headers

                                        GET /etc/designs/vetrina/clientlib-libs/css/fonts/slick.ttf HTTP/1.1
Host: www.intesasanpaolo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://space2design.co.nz
Connection: keep-alive
Referer: https://www.intesasanpaolo.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        HTTP/1.1 200 OK
Date: Thu, 23 Mar 2023 21:36:26 GMT
Access-Control-Max-Age: 86400
Access-Control-Allow-Headers: accept,accept-encoding,accessmode,applicationname,authorization,bank-code,bt,caller,channel,clientversion,content-type,lang,operationsystem,origin,profilo-reset,useragent,x-isp-keyid,x-isp-signature,x-requested-with,formname,X-File-Size,cEgida,accept-language,connection,content-length,host,referer,accept-ranges,range,user-agent,devicemodel,geolocation,x-request-id,my-host,digest,signature,devicedna,f&f,deviceIDrba,deviceSignature,tipoCliente,x-bear-session-token,x-isp-session-id,x-isp-transaction-id,x-isp-execution,x-isp-cypher,x-isp-browsername,,x-ma-bid,x-ma-sid,x-ma-hostname,x-ma-pid,uniqueid,Page
Access-Control-Expose-Headers: accept-ranges,content-encoding,content-length,content-range,deviceIDrba
Access-Control-Allow-Methods: POST, GET, OPTIONS, DELETE, PUT, PATCH
Access-Control-Allow-Credentials: true
ETag: "764"
Accept-Ranges: bytes
Content-Length: 1892
Vary: User-Agent
Cache-Control: no-cache
Keep-Alive: timeout=2, max=100
Connection: Keep-Alive
Content-Type: application/font-sfnt
Strict-Transport-Security: max-age=16070400; includeSubDomains
Set-Cookie: TS0108408c=014f3a238d746687deb5d46e1a2a87ce308b93e666722b136fdcd45ed56723823233a60bfab5164f450844d4232364dfa6cc7594c1; Path=/

www.intesasanpaolo.com/content/dam/vetrina/design/img/HomePage/Persone-e-famiglia/skuola-net/box-sx66-skuola-gennaio-2022-desktop.jpg

193.41.198.216

200 OK

107878

URL HTTP/1.1

www.intesasanpaolo.com/content/dam/vetrina/design/img/HomePage/Persone-e-famiglia/skuola-net/box-sx66-skuola-gennaio-2022-desktop.jpg
IP

193.41.198.216:0
ASN

#20942 Intesa Sanpaolo S.p.A.

Magic

JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 642x340, components 3\012- data

Size

107878
Hash

26bb346f82e199b1c9abbcf6ab19b8eb

54c64165a37bb5efd885ee81f29eb5b20d0b7fd6

10c684a36a325e8d4db24564513d05f14ceca66a71ddb7c17dff4fcfb7a83bdc

HTTP Headers

                                        GET /content/dam/vetrina/design/img/HomePage/Persone-e-famiglia/skuola-net/box-sx66-skuola-gennaio-2022-desktop.jpg HTTP/1.1
Host: www.intesasanpaolo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://space2design.co.nz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        HTTP/1.1 200 OK
Date: Thu, 23 Mar 2023 21:36:26 GMT
Access-Control-Max-Age: 86400
Access-Control-Allow-Headers: accept,accept-encoding,accessmode,applicationname,authorization,bank-code,bt,caller,channel,clientversion,content-type,lang,operationsystem,origin,profilo-reset,useragent,x-isp-keyid,x-isp-signature,x-requested-with,formname,X-File-Size,cEgida,accept-language,connection,content-length,host,referer,accept-ranges,range,user-agent,devicemodel,geolocation,x-request-id,my-host,digest,signature,devicedna,f&f,deviceIDrba,deviceSignature,tipoCliente,x-bear-session-token,x-isp-session-id,x-isp-transaction-id,x-isp-execution,x-isp-cypher,x-isp-browsername,,x-ma-bid,x-ma-sid,x-ma-hostname,x-ma-pid,uniqueid,Page
Access-Control-Expose-Headers: accept-ranges,content-encoding,content-length,content-range,deviceIDrba
Access-Control-Allow-Methods: POST, GET, OPTIONS, DELETE, PUT, PATCH
Access-Control-Allow-Credentials: true
ETag: "1a566"
Accept-Ranges: bytes
Content-Length: 107878
X-Frame-Options: SAMEORIGIN
Cache-Control: no-cache
Keep-Alive: timeout=2, max=100
Connection: Keep-Alive
Content-Type: image/jpeg
Strict-Transport-Security: max-age=16070400; includeSubDomains
Set-Cookie: TS0108408c=014f3a238d768872c1aa5f1d2dc48a0228316af10d841381bfd926fa2f14bbaec4511ca5fd0c5820beae99ed437db19998462c8157; Path=/

www.intesasanpaolo.com/etc/designs/vetrina/clientlib-site/css/images/block-separator-green.png

193.41.198.216

200 OK

415

URL HTTP/1.1

www.intesasanpaolo.com/etc/designs/vetrina/clientlib-site/css/images/block-separator-green.png
IP

193.41.198.216:0
ASN

#20942 Intesa Sanpaolo S.p.A.

Magic

PNG image data, 19 x 11, 8-bit/color RGBA, non-interlaced\012- data

Size

415
Hash

0fa4e0094537ae7a2457bb6b04ac6dea

4d466583d70f962631faae462c5509d08de1929a

6584015a1e056f8a79356f64d9a6c88e19044aa3128c28dd5484ae4672a134a5

HTTP Headers

                                        GET /etc/designs/vetrina/clientlib-site/css/images/block-separator-green.png HTTP/1.1
Host: www.intesasanpaolo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.intesasanpaolo.com/etc/designs/vetrina/clientlib-all.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        HTTP/1.1 200 OK
Date: Thu, 23 Mar 2023 21:36:26 GMT
Access-Control-Max-Age: 86400
Access-Control-Allow-Headers: accept,accept-encoding,accessmode,applicationname,authorization,bank-code,bt,caller,channel,clientversion,content-type,lang,operationsystem,origin,profilo-reset,useragent,x-isp-keyid,x-isp-signature,x-requested-with,formname,X-File-Size,cEgida,accept-language,connection,content-length,host,referer,accept-ranges,range,user-agent,devicemodel,geolocation,x-request-id,my-host,digest,signature,devicedna,f&f,deviceIDrba,deviceSignature,tipoCliente,x-bear-session-token,x-isp-session-id,x-isp-transaction-id,x-isp-execution,x-isp-cypher,x-isp-browsername,,x-ma-bid,x-ma-sid,x-ma-hostname,x-ma-pid,uniqueid,Page
Access-Control-Expose-Headers: accept-ranges,content-encoding,content-length,content-range,deviceIDrba
Access-Control-Allow-Methods: POST, GET, OPTIONS, DELETE, PUT, PATCH
Access-Control-Allow-Credentials: true
ETag: "19f"
Accept-Ranges: bytes
Content-Length: 415
Cache-Control: no-cache
Keep-Alive: timeout=2, max=100
Connection: Keep-Alive
Content-Type: image/png
Strict-Transport-Security: max-age=16070400; includeSubDomains
Set-Cookie: TS0108408c=014f3a238d2ab00d5f9b8b7957b219c593b3cc16170e187afcdd7b36c35cc251d4aff74b54d7f744931f29433dcdc1c44016e4f88c; Path=/

www.bing.com/th?id=OHR.ChavarocheWinter_ROW7074402150_1920x1080.jpg&rf=LaDigue_1920x1080.jpg&qlt=50

United States MICROSOFT-CORP-MSN-AS-BLOCK

13.107.21.200

200 OK

350646

URL HTTP/2

www.bing.com/th?id=OHR.ChavarocheWinter_ROW7074402150_1920x1080.jpg&rf=LaDigue_1920x1080.jpg&qlt=50
IP

13.107.21.200:0
ASN

#8068 MICROSOFT-CORP-MSN-AS-BLOCK

Magic

JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, baseline, precision 8, 1920x1080, components 3\012- data

Size

350646
Hash

0a8b591c4fc4dda4b4977071f8d33107

c14b45fb03e3b106103673d42524fb0422920db1

fb2a62776602ab1da217deef81ccb58e0941c9ec2ba6613386d228ddb37e6775

HTTP Headers

                                        GET /th?id=OHR.ChavarocheWinter_ROW7074402150_1920x1080.jpg&rf=LaDigue_1920x1080.jpg&qlt=50 HTTP/1.1
Host: www.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        HTTP/2 200 OK
cache-control: public, max-age=691200
content-length: 350646
content-type: image/jpeg
x-cache: TCP_HIT
access-control-allow-origin: *
access-control-allow-headers: *
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: CACD749BD9A24C8992349BE3F9EDD644 Ref B: OSL30EDGE0109 Ref C: 2023-03-23T21:36:26Z
date: Thu, 23 Mar 2023 21:36:26 GMT
X-Firefox-Spdy: h2

space2design.co.nz/online/intesa-sanpaolo/5ecd038b776e21d423a668c2ee33f8e2/login/files/flag_eng.png

185.184.154.17

200 OK

1502

URL HTTP/1.1

space2design.co.nz/online/intesa-sanpaolo/5ecd038b776e21d423a668c2ee33f8e2/login/files/flag_eng.png
IP

185.184.154.17:0
ASN

#38719 Dreamscape Networks Limited

Magic

PNG image data, 19 x 10, 8-bit/color RGB, non-interlaced\012- data

Size

1502
Hash

3aadce088b74fd250abcdb82d51ba273

1e9f10dbc5fcd6c98a94659c0344907e0b7b59d6

b9cf5ac56dd524668e1156759674215a9224dcaec961914e0e36c2c0efcb9bc0

HTTP Headers

                                        GET /online/intesa-sanpaolo/5ecd038b776e21d423a668c2ee33f8e2/login/files/flag_eng.png HTTP/1.1
Host: space2design.co.nz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://space2design.co.nz/online/intesa-sanpaolo/5ecd038b776e21d423a668c2ee33f8e2/login/

                                        HTTP/1.1 200 OK
Server: nginx
Date: Thu, 23 Mar 2023 21:36:26 GMT
Content-Type: image/png
Content-Length: 1502
Upgrade: h2,h2c
Last-Modified: Wed, 22 Mar 2023 09:00:58 GMT
Accept-Ranges: bytes

www.intesasanpaolo.com/content/dam/vetrina/design/img/HomePage/Persone-e-famiglia/investimenti/conversione-liquidita/box-dx66-conversione-liquidita-desktop.jpg

193.41.198.216

200 OK

86109

URL HTTP/1.1

www.intesasanpaolo.com/content/dam/vetrina/design/img/HomePage/Persone-e-famiglia/investimenti/conversione-liquidita/box-dx66-conversione-liquidita-desktop.jpg
IP

193.41.198.216:0
ASN

#20942 Intesa Sanpaolo S.p.A.

Magic

JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, software=Adobe Photoshop CS6 (Windows)\012- GLS_BINARY_LSB_FIRST], baseline, precision 8, 639x340, components 3\012- data

Size

86109
Hash

281a4803ce9f7617e7b3fe6184bbb4b0

bf079f035e688b2ca34fdfdf7eb8d92bf0371d4e

623c22811d64f0408f21737b753994273adcbc9d5e9415e38e7b290de85eb88e

HTTP Headers

                                        GET /content/dam/vetrina/design/img/HomePage/Persone-e-famiglia/investimenti/conversione-liquidita/box-dx66-conversione-liquidita-desktop.jpg HTTP/1.1
Host: www.intesasanpaolo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://space2design.co.nz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        HTTP/1.1 200 OK
Date: Thu, 23 Mar 2023 21:36:26 GMT
Access-Control-Max-Age: 86400
Access-Control-Allow-Headers: accept,accept-encoding,accessmode,applicationname,authorization,bank-code,bt,caller,channel,clientversion,content-type,lang,operationsystem,origin,profilo-reset,useragent,x-isp-keyid,x-isp-signature,x-requested-with,formname,X-File-Size,cEgida,accept-language,connection,content-length,host,referer,accept-ranges,range,user-agent,devicemodel,geolocation,x-request-id,my-host,digest,signature,devicedna,f&f,deviceIDrba,deviceSignature,tipoCliente,x-bear-session-token,x-isp-session-id,x-isp-transaction-id,x-isp-execution,x-isp-cypher,x-isp-browsername,,x-ma-bid,x-ma-sid,x-ma-hostname,x-ma-pid,uniqueid,Page
Access-Control-Expose-Headers: accept-ranges,content-encoding,content-length,content-range,deviceIDrba
Access-Control-Allow-Methods: POST, GET, OPTIONS, DELETE, PUT, PATCH
Access-Control-Allow-Credentials: true
ETag: "1505d"
Accept-Ranges: bytes
Content-Length: 86109
X-Frame-Options: SAMEORIGIN
Cache-Control: no-cache
Keep-Alive: timeout=2, max=100
Connection: Keep-Alive
Content-Type: image/jpeg
Strict-Transport-Security: max-age=16070400; includeSubDomains
Set-Cookie: TS0108408c=014f3a238d9310ae6588ded9c371b91e5331b0fd2c5a77bc31cb257f593f994e0b5225e2ee40f05290f7b6e1445551eda090be4f2f; Path=/; Secure; HTTPOnly

www.intesasanpaolo.com/content/dam/vetrina/design/ico/HomePage/Icone_con_noi_puoi/ico-home-calendar.png

193.41.198.216

200 OK

587

URL HTTP/1.1

www.intesasanpaolo.com/content/dam/vetrina/design/ico/HomePage/Icone_con_noi_puoi/ico-home-calendar.png
IP

193.41.198.216:0
ASN

#20942 Intesa Sanpaolo S.p.A.

Magic

PNG image data, 70 x 70, 8-bit/color RGBA, non-interlaced\012- data

Size

587
Hash

01abd00d7a578ecad4594ae412ce4d8d

6cf7db03c33c334baeb1ae66cc3ddf83546bd52a

2234d6ae5334264ac2cf969a5372f07ac948fca88927323a41efc2c990455519

HTTP Headers

                                        GET /content/dam/vetrina/design/ico/HomePage/Icone_con_noi_puoi/ico-home-calendar.png HTTP/1.1
Host: www.intesasanpaolo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://space2design.co.nz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        HTTP/1.1 200 OK
Date: Thu, 23 Mar 2023 21:36:26 GMT
Access-Control-Max-Age: 86400
Access-Control-Allow-Headers: accept,accept-encoding,accessmode,applicationname,authorization,bank-code,bt,caller,channel,clientversion,content-type,lang,operationsystem,origin,profilo-reset,useragent,x-isp-keyid,x-isp-signature,x-requested-with,formname,X-File-Size,cEgida,accept-language,connection,content-length,host,referer,accept-ranges,range,user-agent,devicemodel,geolocation,x-request-id,my-host,digest,signature,devicedna,f&f,deviceIDrba,deviceSignature,tipoCliente,x-bear-session-token,x-isp-session-id,x-isp-transaction-id,x-isp-execution,x-isp-cypher,x-isp-browsername,,x-ma-bid,x-ma-sid,x-ma-hostname,x-ma-pid,uniqueid,Page
Access-Control-Expose-Headers: accept-ranges,content-encoding,content-length,content-range,deviceIDrba
Access-Control-Allow-Methods: POST, GET, OPTIONS, DELETE, PUT, PATCH
Access-Control-Allow-Credentials: true
ETag: "24b"
Accept-Ranges: bytes
Content-Length: 587
X-Frame-Options: SAMEORIGIN
Cache-Control: no-cache
Keep-Alive: timeout=2, max=100
Connection: Keep-Alive
Content-Type: image/png
Strict-Transport-Security: max-age=16070400; includeSubDomains
Set-Cookie: TS0108408c=014f3a238d97ac1c5816207846ad3fe86a330c6b730b7d66570c2632c9aa0583c7fbf2dfed0141c7edb0b24a40cfa424367aa0c231; Path=/; Secure; HTTPOnly

www.intesasanpaolo.com/etc/designs/vetrina/clientlib-site/css/fonts/OpenSans-Regular.woff?2r5i7k

193.41.198.216

200 OK

18100

URL HTTP/1.1

www.intesasanpaolo.com/etc/designs/vetrina/clientlib-site/css/fonts/OpenSans-Regular.woff?2r5i7k
IP

193.41.198.216:0
ASN

#20942 Intesa Sanpaolo S.p.A.

Magic

Web Open Font Format, TrueType, length 18100, version 1.1\012- data

Size

18100
Hash

de0869e324680c99efa1250515b4b41c

8033a128504f11145ea791e481e3cf79dcd290e2

81f0ec27796225ea29f9f1c7b74f083edcd7bc97a09d5fc4e8d03c0134e62445

HTTP Headers

                                        GET /etc/designs/vetrina/clientlib-site/css/fonts/OpenSans-Regular.woff?2r5i7k HTTP/1.1
Host: www.intesasanpaolo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://space2design.co.nz
Connection: keep-alive
Referer: https://www.intesasanpaolo.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        HTTP/1.1 200 OK
Date: Thu, 23 Mar 2023 21:36:26 GMT
Access-Control-Max-Age: 86400
Access-Control-Allow-Headers: accept,accept-encoding,accessmode,applicationname,authorization,bank-code,bt,caller,channel,clientversion,content-type,lang,operationsystem,origin,profilo-reset,useragent,x-isp-keyid,x-isp-signature,x-requested-with,formname,X-File-Size,cEgida,accept-language,connection,content-length,host,referer,accept-ranges,range,user-agent,devicemodel,geolocation,x-request-id,my-host,digest,signature,devicedna,f&f,deviceIDrba,deviceSignature,tipoCliente,x-bear-session-token,x-isp-session-id,x-isp-transaction-id,x-isp-execution,x-isp-cypher,x-isp-browsername,,x-ma-bid,x-ma-sid,x-ma-hostname,x-ma-pid,uniqueid,Page
Access-Control-Expose-Headers: accept-ranges,content-encoding,content-length,content-range,deviceIDrba
Access-Control-Allow-Methods: POST, GET, OPTIONS, DELETE, PUT, PATCH
Access-Control-Allow-Credentials: true
ETag: "46b4"
Accept-Ranges: bytes
Content-Length: 18100
Cache-Control: no-cache
Keep-Alive: timeout=2, max=100
Connection: Keep-Alive
Content-Type: application/font-woff
Strict-Transport-Security: max-age=16070400; includeSubDomains
Set-Cookie: TS0108408c=014f3a238d27bd44c2eae90f3b668b53f14b2bcfe103ccbdcca26fa75e48059c902eb3720536fe88f9e5fed3035f570210d156556d; Path=/

www.intesasanpaolo.com/content/dam/vetrina/design/img/HomePage/Persone-e-famiglia/perte-prestito-diretto/box-dx66-xme-prestito-diretto-desktop.jpg

193.41.198.216

200 OK

40177

URL HTTP/1.1

www.intesasanpaolo.com/content/dam/vetrina/design/img/HomePage/Persone-e-famiglia/perte-prestito-diretto/box-dx66-xme-prestito-diretto-desktop.jpg
IP

193.41.198.216:0
ASN

#20942 Intesa Sanpaolo S.p.A.

Magic

JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 639x340, components 3\012- data

Size

40177
Hash

73cf8af5d1c908df23eab0e38da2a755

c139ea52169957468c43d84f8bb33652be8f04e0

cc7b14c8e4c12613ef558728f0b48fb82b061c34751cac6eb23ec85caf7587ac

HTTP Headers

                                        GET /content/dam/vetrina/design/img/HomePage/Persone-e-famiglia/perte-prestito-diretto/box-dx66-xme-prestito-diretto-desktop.jpg HTTP/1.1
Host: www.intesasanpaolo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://space2design.co.nz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        HTTP/1.1 200 OK
Date: Thu, 23 Mar 2023 21:36:26 GMT
Access-Control-Max-Age: 86400
Access-Control-Allow-Headers: accept,accept-encoding,accessmode,applicationname,authorization,bank-code,bt,caller,channel,clientversion,content-type,lang,operationsystem,origin,profilo-reset,useragent,x-isp-keyid,x-isp-signature,x-requested-with,formname,X-File-Size,cEgida,accept-language,connection,content-length,host,referer,accept-ranges,range,user-agent,devicemodel,geolocation,x-request-id,my-host,digest,signature,devicedna,f&f,deviceIDrba,deviceSignature,tipoCliente,x-bear-session-token,x-isp-session-id,x-isp-transaction-id,x-isp-execution,x-isp-cypher,x-isp-browsername,,x-ma-bid,x-ma-sid,x-ma-hostname,x-ma-pid,uniqueid,Page
Access-Control-Expose-Headers: accept-ranges,content-encoding,content-length,content-range,deviceIDrba
Access-Control-Allow-Methods: POST, GET, OPTIONS, DELETE, PUT, PATCH
Access-Control-Allow-Credentials: true
ETag: "9cf1"
Accept-Ranges: bytes
Content-Length: 40177
X-Frame-Options: SAMEORIGIN
Cache-Control: no-cache
Keep-Alive: timeout=2, max=100
Connection: Keep-Alive
Content-Type: image/jpeg
Strict-Transport-Security: max-age=16070400; includeSubDomains
Set-Cookie: TS0108408c=014f3a238d4a0bea8fde4cf2d1c180c1d50ecf083b230e605346cd45af6a5cb394eccfe44bbac82f3914786f23dfad415eb5406464; Path=/; Secure; HTTPOnly

www.intesasanpaolo.com/content/dam/vetrina/design/ico/HomePage/Icone_con_noi_puoi/ico-home-filiale-puntatore.png

193.41.198.216

200 OK

1559

URL HTTP/1.1

www.intesasanpaolo.com/content/dam/vetrina/design/ico/HomePage/Icone_con_noi_puoi/ico-home-filiale-puntatore.png
IP

193.41.198.216:0
ASN

#20942 Intesa Sanpaolo S.p.A.

Magic

PNG image data, 70 x 70, 8-bit/color RGBA, non-interlaced\012- data

Size

1559
Hash

f4451be01827a13d15f31a09c77bc65a

ad6253fbb3a7dbab8094d509965a293440cc9f1d

ae762eb2a56e92861481b22a3a6e72cefd11e9abb2e5873b7f16940617bd8ceb

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (57)

#1 JS:Script (size: 6077)

URL

IP

ASN

Introduced by

Inline HTML

Observations

Hash

#2 JS:Script (size: 1589)

URL

IP

ASN

Introduced by

Inline HTML

Observations

Hash

#3 JS:Script (size: 252)

URL

IP

ASN

Introduced by

Inline HTML

Observations

Hash

#4 JS:Script (size: 5693)

URL

IP

ASN

Introduced by

Inline HTML

Observations

Hash

#5 JS:Script (size: 257)

URL

IP

ASN

Introduced by

Inline HTML

Observations

Hash

#6 JS:Script (size: 0)

Introduced by

Inline HTML

Observations

Hash

#7 JS:Script (size: 425)

URL

IP

ASN

Introduced by

Inline HTML

Observations

Hash

#8 JS:Script (size: 938)