sicurezzaclienteisp-online.preview-domain.com/
403 Forbidden 3.7 kB URL HTTP/1.1 sicurezzaclienteisp-online.preview-domain.com/
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1327)
Hash 4ee16f94c7cb42d7a64124c6e0ac8086
7ac9c1999c7a11bfa50dffffdc3515f52fc41141
abc76be1341f6fccf7b99fcd29c18889c75dce0a9e850c3c521853745aad1fc6
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: sicurezzaclienteisp-online.preview-domain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 403 Forbidden
Date: Wed, 22 Feb 2023 14:34:14 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Permissions-Policy: accelerometer=(),autoplay=(),camera=(),clipboard-read=(),clipboard-write=(),fullscreen=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
Referrer-Policy: same-origin
X-Frame-Options: SAMEORIGIN
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Set-Cookie: __cf_bm=e4u36hdjLimoSKjyhteL4WagbFX1htpmIpdzkdTsbew-1677076454-0-Aevt7oB0LZiIInC7H7RdbCdvSG1Uq8m5AOh1Y/fnMfG2GybJuZhOr5X0Bx64P2to1lZgy27Eb9oZdG1oDn67LH8=; path=/; expires=Wed, 22-Feb-23 15:04:14 GMT; domain=.preview-domain.com; HttpOnly; SameSite=None
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79d87100fc3fb505-OSL
Content-Encoding: gzip
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 13d4983fb8a0ee2cb855663cc9d8f6a0
1f85fc46435f86d7f414e310670c9afe27ea9532
f4bc8150273c4fc6e90c9df8e074823a78dc8409bfcc00616265e24d7d663498
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F4BC8150273C4FC6E90C9DF8E074823A78DC8409BFCC00616265E24D7D663498"
Last-Modified: Mon, 20 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17720
Expires: Wed, 22 Feb 2023 19:29:34 GMT
Date: Wed, 22 Feb 2023 14:34:14 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 97d7dde89cca188d19690d7bf759d034
7ec36525c8b5e8e278f0c5f26da3316687d89041
f8b500f9b1e8188807aab20f8e2540b5b2e888b13ff5f6f6211bbc28056f23e8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F8B500F9B1E8188807AAB20F8E2540B5B2E888B13FF5F6F6211BBC28056F23E8"
Last-Modified: Mon, 20 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10907
Expires: Wed, 22 Feb 2023 17:36:01 GMT
Date: Wed, 22 Feb 2023 14:34:14 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash ff250d3ef3fa45322bf05039a0122a9f
b3e7a2c383bce1bab807dbe1a03c375258b51f1d
d07f109a96e0ae6ec7b1d46ce8761b3f06fe845769ce65d69e053dd40aa561ba
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Backoff, Content-Type, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 22 Feb 2023 13:38:16 GMT
content-type: application/json
age: 3358
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 48b5fafb12e15fbede4669b549518d50
ee82e527d3c45ebbc1865cd56b93e1be5ac933db
94036245b7831c01d3112f661bd909369c9b3af89ab37be7fb07f2254a7df7d5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "94036245B7831C01D3112F661BD909369C9B3AF89AB37BE7FB07F2254A7DF7D5"
Last-Modified: Mon, 20 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3852
Expires: Wed, 22 Feb 2023 15:38:26 GMT
Date: Wed, 22 Feb 2023 14:34:14 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain
IP
File type PEM certificate\012- , ASCII text
Hash e76071a28ee566dababb3834f46d68ed
aebb4e68c1ba2de0f90025283e8ed8470944fde0
78b6df2627172e5b35476bc31020f02898cdc412aaf4337af2c3b049a60912b6
GET /chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: oK7KxDE/Zz0R977vPqvTJKdQSiGBFaF0Mb8GUf3sZLtTIVagDqMYXFgzw4YCImE/mWV/l4T+CN4=
x-amz-request-id: 096AXTQ401W00F2B
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 22 Feb 2023 14:23:12 GMT
age: 662
last-modified: Sun, 29 Jan 2023 18:44:47 GMT
etag: "e76071a28ee566dababb3834f46d68ed"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
sicurezzaclienteisp-online.preview-domain.com/cdn-cgi/styles/challenges.css
200 OK 2.6 kB URL HTTP/1.1 sicurezzaclienteisp-online.preview-domain.com/cdn-cgi/styles/challenges.css
IP
File type ASCII text, with very long lines (6190), with no line terminators
Hash 0cfcef358de34ee519bc7aee694f3963
ee32fa87d15414efca97a881c99a2172d728ea77
1b82a0dbaae19093a91691e510ea2606a8476ed60a5f3a63794dcbc1fc0d2789
GET /cdn-cgi/styles/challenges.css HTTP/1.1
Host: sicurezzaclienteisp-online.preview-domain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://sicurezzaclienteisp-online.preview-domain.com/
Connection: keep-alive
HTTP/1.1 200 OK
Date: Wed, 22 Feb 2023 14:34:14 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 21 Feb 2023 11:26:11 GMT
ETag: W/"63f4aa53-182e"
Server: cloudflare
CF-RAY: 79d871039954b511-OSL
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Expires: Wed, 22 Feb 2023 16:34:14 GMT
Cache-Control: max-age=7200, public
Content-Encoding: gzip
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 22 Feb 2023 14:34:14 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
sicurezzaclienteisp-online.preview-domain.com/cdn-cgi/images/trace/managed/js/transparent.gif?ray=79d87100fc3fb505
200 OK 42 B URL HTTP/1.1 sicurezzaclienteisp-online.preview-domain.com/cdn-cgi/images/trace/managed/js/transparent.gif?ray=79d87100fc3fb505
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
Analyzer Verdict Alert fortinet Phishing
GET /cdn-cgi/images/trace/managed/js/transparent.gif?ray=79d87100fc3fb505 HTTP/1.1
Host: sicurezzaclienteisp-online.preview-domain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://sicurezzaclienteisp-online.preview-domain.com/
Connection: keep-alive
HTTP/1.1 200 OK
Date: Wed, 22 Feb 2023 14:34:15 GMT
Content-Type: image/gif
Content-Length: 42
Connection: keep-alive
Last-Modified: Tue, 21 Feb 2023 11:26:11 GMT
ETag: "63f4aa53-2a"
Server: cloudflare
CF-RAY: 79d871049ac7b511-OSL
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Expires: Wed, 22 Feb 2023 16:34:15 GMT
Cache-Control: max-age=7200, public
Accept-Ranges: bytes
sicurezzaclienteisp-online.preview-domain.com/cdn-cgi/challenge-platform/h/g/orchestrate/managed/v1?ray=79d87100fc3fb505
200 OK 45 kB URL HTTP/1.1 sicurezzaclienteisp-online.preview-domain.com/cdn-cgi/challenge-platform/h/g/orchestrate/managed/v1?ray=79d87100fc3fb505
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash c261c141be95fbce817a012c933127e0
8b8b8c3afdabb94906224b01f3509e3902ac333c
7cd2b8a50a2a59f5ad856708cfdcc2bc076bd9a57fe389afb2ef3e4f5a08f873
Analyzer Verdict Alert fortinet Phishing
GET /cdn-cgi/challenge-platform/h/g/orchestrate/managed/v1?ray=79d87100fc3fb505 HTTP/1.1
Host: sicurezzaclienteisp-online.preview-domain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://sicurezzaclienteisp-online.preview-domain.com/?__cf_chl_rt_tk=zEdkjbKXwgA_XSM3W1Nxq_NLxtg.kUXy7dLhHTRdl5c-1677076454-0-gaNycGzNBPs
Connection: keep-alive
HTTP/1.1 200 OK
Date: Wed, 22 Feb 2023 14:34:15 GMT
Content-Type: application/javascript; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
cache-control: max-age=0, must-revalidate
Set-Cookie: __cf_bm=wYXGfiOvQplstC9CIYwTSC8Jg4uBIWm7DJ5KuNoY8SM-1677076455-0-AYy94ruLrOuHoDQVV1r4ovlV8FxML+8UzJ6OwFve/P7RZUaklve97WAiuRX5reCtjfRHQ9iE6N0Vd0tqXEzMsA0=; path=/; expires=Wed, 22-Feb-23 15:04:15 GMT; domain=.preview-domain.com; HttpOnly; SameSite=None
Server: cloudflare
CF-RAY: 79d871049ad9b511-OSL
Content-Encoding: gzip
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
sicurezzaclienteisp-online.preview-domain.com/favicon.ico
404 Not Found 110 kB URL HTTP/1.1 sicurezzaclienteisp-online.preview-domain.com/favicon.ico
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- assembler source, ASCII text, with very long lines (58303)
Size 110 kB (109931 bytes)
Hash 5bdd9cad439e04fadd1b62178d67d676
a30b816d80d63e2780bece51eef35267d58ea6cd
868e24152f65461675365ef11daf733e5248d4ce6bed0cc5ae75a0e41457ca61
GET /favicon.ico HTTP/1.1
Host: sicurezzaclienteisp-online.preview-domain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://sicurezzaclienteisp-online.preview-domain.com/
Connection: keep-alive
HTTP/1.1 404 Not Found
Date: Wed, 22 Feb 2023 14:34:15 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
CF-Cache-Status: HIT
Age: 0
Expires: Wed, 22 Feb 2023 18:34:15 GMT
Cache-Control: public, max-age=14400
Set-Cookie: __cf_bm=IBefAZCuugzYt5rwVcf080IBr4_u2Wvr4KP3.jLRshA-1677076455-0-Ae73iBFpnfGyToIuV9Zq4ydgSyb/iyYHwfh3clj47gZR3KeAnj5tjgoQhkn+a85etJTgLjqtSZnmspt55mSmLqA=; path=/; expires=Wed, 22-Feb-23 15:04:15 GMT; domain=.preview-domain.com; HttpOnly; SameSite=None
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79d87104fb3ab511-OSL
Content-Encoding: gzip
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
ocsp.digicert.com/
200 OK 279 B IP
Hash fe914d60b43765cf2db52295bef5b302
bafab035d29c0d00ad5b30fb07206b8ed568cee0
e08dd7119da94b9a624a4eb4f8aa34e2f699d7d42b354276339a1bb9b5e9c0b6
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2277
Cache-Control: max-age=89582
Content-Type: application/ocsp-response
Date: Wed, 22 Feb 2023 14:34:15 GMT
Etag: "63f4d9f0-117"
Expires: Thu, 23 Feb 2023 15:27:17 GMT
Last-Modified: Tue, 21 Feb 2023 14:49:20 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 279 B IP
Hash fe914d60b43765cf2db52295bef5b302
bafab035d29c0d00ad5b30fb07206b8ed568cee0
e08dd7119da94b9a624a4eb4f8aa34e2f699d7d42b354276339a1bb9b5e9c0b6
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2277
Cache-Control: max-age=89582
Content-Type: application/ocsp-response
Date: Wed, 22 Feb 2023 14:34:15 GMT
Etag: "63f4d9f0-117"
Expires: Thu, 23 Feb 2023 15:27:17 GMT
Last-Modified: Tue, 21 Feb 2023 14:49:20 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 279
sicurezzaclienteisp-online.preview-domain.com/cdn-cgi/challenge-platform/h/g/flow/ov1/0.43459701380976085:1677074856:W720o6CdISAXKldKxnE-FKXL1iaiH9iTPnXMzPPjxCw/79d87100fc3fb505/635e7fd22d4c19a
200 OK 58 kB URL HTTP/1.1 sicurezzaclienteisp-online.preview-domain.com/cdn-cgi/challenge-platform/h/g/flow/ov1/0.43459701380976085:1677074856:W720o6CdISAXKldKxnE-FKXL1iaiH9iTPnXMzPPjxCw/79d87100fc3fb505/635e7fd22d4c19a
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 939770de11aafc604d50456d869b85d2
c7502359b9658a7b0a18c56125710725e13af971
88d6622c414fae55498cc4ab1ae0d49ddc2d14f264bd9b83111c50d26b645816
Analyzer Verdict Alert fortinet Phishing
POST /cdn-cgi/challenge-platform/h/g/flow/ov1/0.43459701380976085:1677074856:W720o6CdISAXKldKxnE-FKXL1iaiH9iTPnXMzPPjxCw/79d87100fc3fb505/635e7fd22d4c19a HTTP/1.1
Host: sicurezzaclienteisp-online.preview-domain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://sicurezzaclienteisp-online.preview-domain.com/
Content-type: application/x-www-form-urlencoded
CF-Challenge: 635e7fd22d4c19a
Content-Length: 1953
Origin: http://sicurezzaclienteisp-online.preview-domain.com
Connection: keep-alive
HTTP/1.1 200 OK
Date: Wed, 22 Feb 2023 14:34:15 GMT
Content-Type: text/plain; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
cf_chl_gen: mfmozsl5htA/kgbuFEiPwHQ93FNDjE3oW0n02RE8dXZRP2yOvLPu40ihPh/vXTdV+PjQbd5iuSoysfN8o2Lkbk/mZndG9JqHyCysgpU/D1dIkpuDctQHOMJakZqQegUOu2n25dDCgIMeFLuYGoIj7R6tUPKECLR4dEVsIRncuSjjypo6ciNDK8Vn4WahVW3Qa1FlpUAolIvtjYPggfTUPP0nQAmFXBS+bwxTpSUTaH0kMapEdfTm4hgL8HE7DtBV9wRePCSF9d2BFwBtXRvkTgiU5egK8RrwGTAHOVYGFTq6iFj4lzMt+ukXx0bgyyWt$KCidFoYiSIVnm6n5shS/3g==
Set-Cookie: __cf_bm=246aMeFLqSEq8.vasSMODBbFIuV63SAbFcWkwBKz7oU-1677076455-0-AUp+0JDkzXyrLR47S98L/Dua5321jWKxbiCHXT13QP2TkV/4FHH08MdTAwAzDTVlsXqTXSQ6HlSzGp4qX8rvUxg=; path=/; expires=Wed, 22-Feb-23 15:04:15 GMT; domain=.preview-domain.com; HttpOnly; SameSite=None
Server: cloudflare
CF-RAY: 79d871062cb9b511-OSL
Content-Encoding: gzip
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Expires, Content-Type, Alert, Content-Length, Backoff, ETag, Cache-Control, Retry-After, Last-Modified, Pragma
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Wed, 22 Feb 2023 13:51:26 GMT
age: 2569
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash aea9630f88377d01e5cebab9de9c3b89
18c6603c6e63b79d45031e960dddd31b227f0de5
853e5bb59efe99054d86bbacf7c2f1f2483ad9c05d35cc9d8ea5dd9909cb38fb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "853E5BB59EFE99054D86BBACF7C2F1F2483AD9C05D35CC9D8EA5DD9909CB38FB"
Last-Modified: Mon, 20 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7526
Expires: Wed, 22 Feb 2023 16:39:41 GMT
Date: Wed, 22 Feb 2023 14:34:15 GMT
Connection: keep-alive
sicurezzaclienteisp-online.preview-domain.com/cdn-cgi/challenge-platform/h/g/img/79d87100fc3fb505/1677076455393/cP0OXUy-mbE96iS
200 OK 61 B URL HTTP/1.1 sicurezzaclienteisp-online.preview-domain.com/cdn-cgi/challenge-platform/h/g/img/79d87100fc3fb505/1677076455393/cP0OXUy-mbE96iS
IP
File type PNG image data, 4 x 23, 8-bit/color RGB, non-interlaced\012- data
Hash db9b7b4681c1a4caf553b0a1d5a5d57f
6bff0112859db63d5b29a220e15c9b85cb019207
275ba6520218063930b8bc4c993416b28e4ae8b4bfa8986b618bb6d909f95f55
Analyzer Verdict Alert fortinet Phishing
GET /cdn-cgi/challenge-platform/h/g/img/79d87100fc3fb505/1677076455393/cP0OXUy-mbE96iS HTTP/1.1
Host: sicurezzaclienteisp-online.preview-domain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://sicurezzaclienteisp-online.preview-domain.com/
Connection: keep-alive
HTTP/1.1 200 OK
Date: Wed, 22 Feb 2023 14:34:16 GMT
Content-Type: image/png
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __cf_bm=En6p_S3HXK_lZTHbETpCbrSyGzM2Du4rOWxEotDMv7U-1677076456-0-AUwTMa5GjtfvV50tMcQ2RdFutdcgQTmuTYZt3sC/BCINwhELy9KPfIgqSc2tZ/9bfMk05GDwFKiNovCS6sCSt2I=; path=/; expires=Wed, 22-Feb-23 15:04:16 GMT; domain=.preview-domain.com; HttpOnly; SameSite=None
Server: cloudflare
CF-RAY: 79d8710b5cf0b511-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: Z+ROKNNuLXv6y4K4lzZQCA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 0EO8/0Ars+gM8jJO5DXG0l2eKtk=
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3cb7960c629af2d4a5325cec8696f40b
eb04e882f528f56fc09206f741d490a4b091a6dd
df3a27c510b477ae3411c0c178fb36d8291503db40f64d22a3fa18061c0ec2b0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DF3A27C510B477AE3411C0C178FB36D8291503DB40F64D22A3FA18061C0EC2B0"
Last-Modified: Mon, 20 Feb 2023 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5314
Expires: Wed, 22 Feb 2023 16:02:51 GMT
Date: Wed, 22 Feb 2023 14:34:17 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3cb7960c629af2d4a5325cec8696f40b
eb04e882f528f56fc09206f741d490a4b091a6dd
df3a27c510b477ae3411c0c178fb36d8291503db40f64d22a3fa18061c0ec2b0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DF3A27C510B477AE3411C0C178FB36D8291503DB40F64D22A3FA18061C0EC2B0"
Last-Modified: Mon, 20 Feb 2023 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5314
Expires: Wed, 22 Feb 2023 16:02:51 GMT
Date: Wed, 22 Feb 2023 14:34:17 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3cb7960c629af2d4a5325cec8696f40b
eb04e882f528f56fc09206f741d490a4b091a6dd
df3a27c510b477ae3411c0c178fb36d8291503db40f64d22a3fa18061c0ec2b0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DF3A27C510B477AE3411C0C178FB36D8291503DB40F64D22A3FA18061C0EC2B0"
Last-Modified: Mon, 20 Feb 2023 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5314
Expires: Wed, 22 Feb 2023 16:02:51 GMT
Date: Wed, 22 Feb 2023 14:34:17 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffbb06cb3-8d47-41fd-9ae0-2255f41945ae.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffbb06cb3-8d47-41fd-9ae0-2255f41945ae.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ca681b00aa436514987423d22b468eb6
c1b8a3e0db433f5a97109f7990600ac5a5b93928
19c66e4af0264cc18866db864876cbe240b42688f2fecf1fd7443c3ea71acbc3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffbb06cb3-8d47-41fd-9ae0-2255f41945ae.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9976
x-amzn-requestid: b8b727c9-56e4-49a3-a06d-d45f44b51b0e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: AtXZlHkLIAMF8lQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63f53909-4633fb2f02e5221e35ca510a;Sampled=0
x-amzn-remapped-date: Tue, 21 Feb 2023 21:35:05 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: JMWmlc8U-1YMxogXGD8J4gUIXd5nxL9l9EtqGHuzsZFRlHpR3uBq1Q==
via: 1.1 86b676273517904f44af31586adb06ae.cloudfront.net (CloudFront), 1.1 a847181d425b7fc57e81eb3c800bfdf2.cloudfront.net (CloudFront), 1.1 google
date: Tue, 21 Feb 2023 21:51:30 GMT
etag: "c1b8a3e0db433f5a97109f7990600ac5a5b93928"
content-type: image/jpeg
age: 60167
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0efa662e-c334-4c53-be4c-81925d55c117.jpeg
200 OK 9.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0efa662e-c334-4c53-be4c-81925d55c117.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b55335999a026a3bf5d8c8c920a31562
08259dd5654e530dc29c35ea537bae21aa88fb0a
69b1cb1bb453da683c879daaf2f266f4ac7399e5de90cae879ce2fa19ac182cb
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0efa662e-c334-4c53-be4c-81925d55c117.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8959
x-amzn-requestid: 1c3579bb-647b-499b-afce-f420de41686c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: AtXqyFDSoAMFhAg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63f53977-500bef655fb9e0f744216d05;Sampled=0
x-amzn-remapped-date: Tue, 21 Feb 2023 21:36:56 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: qTYasQOed2Yym0WmLEv6OW5yB7EL8U1EmHAWiw7RWlADvNgrvraKOw==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Tue, 21 Feb 2023 22:17:46 GMT
age: 58591
etag: "08259dd5654e530dc29c35ea537bae21aa88fb0a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7dacef7f-d2f8-4689-8e99-f6264cd88f75.jpeg
200 OK 8.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7dacef7f-d2f8-4689-8e99-f6264cd88f75.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash bb6757305388dc32866ee6c551938c4c
4eab046e0d4f23d91db4a56b8d6d8cde782e2e47
dc0a93e777b2aaf3f3881539de1de15015bcedc2445b8f5558d04a822399bae4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7dacef7f-d2f8-4689-8e99-f6264cd88f75.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8863
x-amzn-requestid: 8983434d-4704-4792-a9b6-625c7d6160f3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: AtXYfGJAIAMF3Rg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63f53902-21e200522022d8bf513f1b19;Sampled=0
x-amzn-remapped-date: Tue, 21 Feb 2023 21:34:58 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: sgZN-g6_WvLn71OFwGttHTZnHRg7VvYXkcdhOl6ta8-vr-SeLlDiIw==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google
date: Tue, 21 Feb 2023 21:50:41 GMT
age: 60216
etag: "4eab046e0d4f23d91db4a56b8d6d8cde782e2e47"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F92a5d99f-cedd-4fad-b8ac-6afd518a049e.jpeg
200 OK 6.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F92a5d99f-cedd-4fad-b8ac-6afd518a049e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 67a2420bbbb66d490f3f38de41a145cc
cf19990be3a55840328796ad032a7d499a33e9f5
93aeefd276fdd61c103f2cc78223db88400aa3ee8302bf9f7a2faac57e7a1cc3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F92a5d99f-cedd-4fad-b8ac-6afd518a049e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6447
x-amzn-requestid: cc144c1b-dcf7-4a7d-8c4a-52c0d3291f86
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: AoE-KHYrIAMFu5A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63f31b8d-7ef74bed3b233c7231a4083f;Sampled=0
x-amzn-remapped-date: Mon, 20 Feb 2023 07:04:45 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 1MZ_mA5hYzx0dFJ7wSglcDtVSs64Qjlytb9vEK0h0Re0iwyM1UsvbA==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 a3bd0eb50c22e4d5fbda56a30b96002c.cloudfront.net (CloudFront), 1.1 google
date: Wed, 22 Feb 2023 06:39:24 GMT
age: 28493
etag: "cf19990be3a55840328796ad032a7d499a33e9f5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F644e40db-f353-42c8-b8f3-a3d61b067916.jpeg
200 OK 7.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F644e40db-f353-42c8-b8f3-a3d61b067916.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 81c0d076a45e9141fd7bbca61d5c0cee
989a1ed5045736130244544586ec5ae24b4e77dc
d3d4ecc39dc8ed3086d6d79f17fe4e01b4ba21a3a221f9d0efe31de04a0cb08e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F644e40db-f353-42c8-b8f3-a3d61b067916.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7733
x-amzn-requestid: 33d1af39-36ea-4fb8-b451-67dd5a1a6e56
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: AtW0oEz-IAMFv7Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63f5381d-3bb7c95c1dafdad70dfd9add;Sampled=0
x-amzn-remapped-date: Tue, 21 Feb 2023 21:31:09 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: wl8fHBpXq76Cpk1yrIGZeX9hMS1Z1vrsfDp2GgUNywxyILZ9Uyl9Zg==
via: 1.1 7f5e0d3b9ea85d0d75063a66c0ebc840.cloudfront.net (CloudFront), 1.1 1b74ccf4cb51eacf97a0e6d60ae46a3e.cloudfront.net (CloudFront), 1.1 google
date: Tue, 21 Feb 2023 21:50:38 GMT
age: 60219
etag: "989a1ed5045736130244544586ec5ae24b4e77dc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5f9477dd-9700-4cbd-8d0e-37bd76c53a93.jpeg
200 OK 7.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5f9477dd-9700-4cbd-8d0e-37bd76c53a93.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e7cd1e9feb9abc7f7d7f0d5fc7b181f0
cf3ce1808c48e1a86910e16731a044f6cb26275d
426c90298d5a0807b7820d803ce2907268df1195e15d5582eb0ff2f3deeb318c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5f9477dd-9700-4cbd-8d0e-37bd76c53a93.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7734
x-amzn-requestid: fe4dc342-33b6-45f6-984c-2c71dfa0ec13
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: AtX-lGiJoAMFW3A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63f539f6-489049413f3cb63c537f20d0;Sampled=0
x-amzn-remapped-date: Tue, 21 Feb 2023 21:39:02 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 4p_3GsIf-LsYLyJFnNh6FQO9q9kHTViRECnpKSnV1xkkZ_PybwmZeg==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Tue, 21 Feb 2023 21:51:45 GMT
etag: "cf3ce1808c48e1a86910e16731a044f6cb26275d"
content-type: image/jpeg
age: 60152
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
sicurezzaclienteisp-online.preview-domain.com/cdn-cgi/challenge-platform/h/g/flow/ov1/0.43459701380976085:1677074856:W720o6CdISAXKldKxnE-FKXL1iaiH9iTPnXMzPPjxCw/79d87100fc3fb505/635e7fd22d4c19a
200 OK 8.7 kB URL HTTP/1.1 sicurezzaclienteisp-online.preview-domain.com/cdn-cgi/challenge-platform/h/g/flow/ov1/0.43459701380976085:1677074856:W720o6CdISAXKldKxnE-FKXL1iaiH9iTPnXMzPPjxCw/79d87100fc3fb505/635e7fd22d4c19a
IP
File type ASCII text, with very long lines (11504), with no line terminators
Hash 50fd7a043f769cf32ce618a0aa30f96c
bec3ca2ec20666c77c7ca0bd1f5023005a948001
3dafd90288135fb36725cd99040ef30ce8608560272c56f7aa680bbe07c8c352
Analyzer Verdict Alert fortinet Phishing
POST /cdn-cgi/challenge-platform/h/g/flow/ov1/0.43459701380976085:1677074856:W720o6CdISAXKldKxnE-FKXL1iaiH9iTPnXMzPPjxCw/79d87100fc3fb505/635e7fd22d4c19a HTTP/1.1
Host: sicurezzaclienteisp-online.preview-domain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://sicurezzaclienteisp-online.preview-domain.com/
Content-type: application/x-www-form-urlencoded
CF-Challenge: 635e7fd22d4c19a
Content-Length: 15954
Origin: http://sicurezzaclienteisp-online.preview-domain.com
Connection: keep-alive
HTTP/1.1 200 OK
Date: Wed, 22 Feb 2023 14:34:18 GMT
Content-Type: text/plain; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
cf_chl_gen: gjYpAg+R114ldOdQ0B54b0MOwIn0zqXZQ3WilOOG5Oo=$7p+8ZENkHD0SoU+Sva24Wg==
Set-Cookie: __cf_bm=kVzmdjGug3Bme1axBeq_7iuimhGNmYOYrkZM743uWO8-1677076458-0-AYQpkC1c1o2v8j5CSUbFxStYTS5E46CvM5Y6OwehPTHWnHCM3mq2iWjBk4601YvBpyuoBa4tK7yaNFcGjXHuOr8=; path=/; expires=Wed, 22-Feb-23 15:04:18 GMT; domain=.preview-domain.com; HttpOnly; SameSite=None
Server: cloudflare
CF-RAY: 79d8711b197fb511-OSL
Content-Encoding: gzip
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
challenges.cloudflare.com/turnstile/v0/g/6756a6af/api.js?onload=_cf_chl_turnstile_l&render=explicit
200 OK 0 B URL HTTP/2 challenges.cloudflare.com/turnstile/v0/g/6756a6af/api.js?onload=_cf_chl_turnstile_l&render=explicit
IP
GET /turnstile/v0/g/6756a6af/api.js?onload=_cf_chl_turnstile_l&render=explicit HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: __cf_bm=Ax1zAY68.SdjLyXt9wcktFIRQOSeMa3N5J62tdEUtLk-1677076455-0-AZc5Hgp8Ti0suBW2vwPR7ZE+BRWYhOVPVqjwYgUCY50buPi/ggn/ImZM+v6313Z+KsqD/tTG6Sh8N02eurFEc0Q=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 22 Feb 2023 14:34:15 GMT
content-type: application/javascript; charset=UTF-8
cache-control: max-age=31536000
vary: Accept-Encoding
server: cloudflare
cf-ray: 79d871062e1d1bfe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
sicurezzaclienteisp-online.preview-domain.com/favicon.ico
404 Not Found 0 B URL HTTP/1.1 sicurezzaclienteisp-online.preview-domain.com/favicon.ico
IP
GET /favicon.ico HTTP/1.1
Host: sicurezzaclienteisp-online.preview-domain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://sicurezzaclienteisp-online.preview-domain.com/
Connection: keep-alive
HTTP/1.1 404 Not Found
Date: Wed, 22 Feb 2023 14:34:15 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
CF-Cache-Status: MISS
Expires: Wed, 22 Feb 2023 18:34:15 GMT
Cache-Control: public, max-age=14400
Set-Cookie: __cf_bm=bma91Wq.LNw71ayIw9oN4KvekKH14Zg_anX8h3tpPuM-1677076455-0-ATjkPw8QGrq+3uEU4tCdV4GRQ1TfNw1igfO6s8atcBnkeQc6mdJfDWMRkumXNepN0ibTc/xt8VQ1+gm193UFa2A=; path=/; expires=Wed, 22-Feb-23 15:04:15 GMT; domain=.preview-domain.com; HttpOnly; SameSite=None
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79d87103be02b523-OSL
Content-Encoding: gzip
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
challenges.cloudflare.com/turnstile/v0/api.js?onload=_cf_chl_turnstile_l&render=explicit
302 Found 0 B URL HTTP/2 challenges.cloudflare.com/turnstile/v0/api.js?onload=_cf_chl_turnstile_l&render=explicit
IP
GET /turnstile/v0/api.js?onload=_cf_chl_turnstile_l&render=explicit HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Wed, 22 Feb 2023 14:34:15 GMT
cache-control: max-age=300, public
location: /turnstile/v0/g/6756a6af/api.js?onload=_cf_chl_turnstile_l&render=explicit
vary: accept-encoding
set-cookie: __cf_bm=Ax1zAY68.SdjLyXt9wcktFIRQOSeMa3N5J62tdEUtLk-1677076455-0-AZc5Hgp8Ti0suBW2vwPR7ZE+BRWYhOVPVqjwYgUCY50buPi/ggn/ImZM+v6313Z+KsqD/tTG6Sh8N02eurFEc0Q=; path=/; expires=Wed, 22-Feb-23 15:04:15 GMT; domain=.challenges.cloudflare.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 79d87105bdbb1bfe-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
104.18.20.112
34.160.144.191
93.184.220.29
23.33.119.27