conviviopistoia.it/
149.210.219.75301 Moved Permanently 154 B IP 149.210.219.75:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash c7a4c0567144c0cc731f25c93d6cd67f
44908fd3d9ae95776139d67f12fed4e1f42fee22
c08524268855cb558040e6cf2308dacda63d1e47fbec1b4617644edf502e4e8b
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: conviviopistoia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
Location: https://www.conviviopistoia.it/
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 24 Dec 2022 00:46:55 GMT
Content-Length: 154
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash d6a971d765338f107fe9d2c67fa4bbdf
a72bdf191446a37fa0420cc9d7c087aaff757cd6
dc5291c136b0b81621a02679a31f6b7c852e2803429d54c2a9afcc8edf031328
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DC5291C136B0B81621A02679A31F6B7C852E2803429D54C2A9AFCC8EDF031328"
Last-Modified: Thu, 22 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10109
Expires: Sat, 24 Dec 2022 03:35:45 GMT
Date: Sat, 24 Dec 2022 00:47:16 GMT
Connection: keep-alive
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash ede732d48f2c32ad5e3b899bb4348df9
15fa12733818b3ae39f3022a715ed0f431b28242
446c9bf6bc38a43f5758f6f44f89ad76eff44eb8779cf7e62bbfeb002b298dee
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "446C9BF6BC38A43F5758F6F44F89AD76EFF44EB8779CF7E62BBFEB002B298DEE"
Last-Modified: Thu, 22 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11350
Expires: Sat, 24 Dec 2022 03:56:26 GMT
Date: Sat, 24 Dec 2022 00:47:16 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash dcd75ca6daca51c5e39d431468511793
07f76d3bf23d65c9110d810fa71a994e39e085d3
73672a816da4450fe2c938b08d7ae002d9ca29fdcbd3e29cc97084d826f8b459
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Content-Type, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 24 Dec 2022 00:34:47 GMT
content-type: application/json
age: 749
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 6b1d63d9d906daa309dc263b4991bbe9
04680ddd86781d46dfe6a9671571b3ad1f3758f3
46fff7230b88de4cd81dfb0feb783d2dec27e49041f9257d2fb891030781bf6c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "46FFF7230B88DE4CD81DFB0FEB783D2DEC27E49041F9257D2FB891030781BF6C"
Last-Modified: Fri, 23 Dec 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20120
Expires: Sat, 24 Dec 2022 06:22:36 GMT
Date: Sat, 24 Dec 2022 00:47:16 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash b1fcd419a4245617397846e8d17233f6
2a037ce244587640b27ead9a0ec2af4f862d91b2
e059b6d834c06e58494c43fb2ff42acbc27c1a1d8f7f30e2f32ca0e167599e2f
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: X/EDOusvHbzeEkxvrw+b7QoairVqHhtn9ANxlQLR04jni/TDSFYUgZ1fzTZudkDHei9A9yzhP7Q=
x-amz-request-id: DC79TF8V5NY4FXWE
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 23 Dec 2022 23:54:15 GMT
age: 3181
last-modified: Tue, 20 Dec 2022 14:47:58 GMT
etag: "b1fcd419a4245617397846e8d17233f6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 24 Dec 2022 00:47:16 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash a0136e15c031d98524b97033ce6b562b
89950eb925ca176842551ef4770af5b22a23f7c3
94b88d32c5d3c9fab504756d5e8aa055f261e24258e93795a8fffc4b5feacb58
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "94B88D32C5D3C9FAB504756D5E8AA055F261E24258E93795A8FFFC4B5FEACB58"
Last-Modified: Thu, 22 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21555
Expires: Sat, 24 Dec 2022 06:46:31 GMT
Date: Sat, 24 Dec 2022 00:47:16 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Pragma, Alert, ETag, Content-Type, Last-Modified, Cache-Control, Expires, Content-Length, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 24 Dec 2022 00:08:02 GMT
age: 2354
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash c615c937e6371bda0824b44af0c21c74
b097d69452bcc60085f563d094388185c26f0e7d
9f1194921b5d57dd52a217a47e69ad4cec7c08378c73c8dfccc3817119fcbb41
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1441
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 24 Dec 2022 00:47:16 GMT
Last-Modified: Sat, 24 Dec 2022 00:23:15 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
35.155.171.116101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 35.155.171.116:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: e5hXlpP0+kmMd1ZNaHPBdg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: Q4r/vYGI6+5DIb4z7W2pAUSlmeU=
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 6ce699bd0db3ee9d3a4ef6dcf941f9f1
14d813942d74d801024c42e2a4628ecd9306d2ad
060de67922db1f612b7f4c173f11e8714c8329d20fbec45a421bcefe7451f388
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "060DE67922DB1F612B7F4C173F11E8714C8329D20FBEC45A421BCEFE7451F388"
Last-Modified: Thu, 22 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6514
Expires: Sat, 24 Dec 2022 02:35:52 GMT
Date: Sat, 24 Dec 2022 00:47:18 GMT
Connection: keep-alive
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 6ce699bd0db3ee9d3a4ef6dcf941f9f1
14d813942d74d801024c42e2a4628ecd9306d2ad
060de67922db1f612b7f4c173f11e8714c8329d20fbec45a421bcefe7451f388
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "060DE67922DB1F612B7F4C173F11E8714C8329D20FBEC45A421BCEFE7451F388"
Last-Modified: Thu, 22 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6514
Expires: Sat, 24 Dec 2022 02:35:52 GMT
Date: Sat, 24 Dec 2022 00:47:18 GMT
Connection: keep-alive
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 6ce699bd0db3ee9d3a4ef6dcf941f9f1
14d813942d74d801024c42e2a4628ecd9306d2ad
060de67922db1f612b7f4c173f11e8714c8329d20fbec45a421bcefe7451f388
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "060DE67922DB1F612B7F4C173F11E8714C8329D20FBEC45A421BCEFE7451F388"
Last-Modified: Thu, 22 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6514
Expires: Sat, 24 Dec 2022 02:35:52 GMT
Date: Sat, 24 Dec 2022 00:47:18 GMT
Connection: keep-alive
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 6ce699bd0db3ee9d3a4ef6dcf941f9f1
14d813942d74d801024c42e2a4628ecd9306d2ad
060de67922db1f612b7f4c173f11e8714c8329d20fbec45a421bcefe7451f388
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "060DE67922DB1F612B7F4C173F11E8714C8329D20FBEC45A421BCEFE7451F388"
Last-Modified: Thu, 22 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6514
Expires: Sat, 24 Dec 2022 02:35:52 GMT
Date: Sat, 24 Dec 2022 00:47:18 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2d8a813d-10ee-4216-bb6b-8bcd1d8141e4.jpeg
34.120.237.76200 OK 7.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2d8a813d-10ee-4216-bb6b-8bcd1d8141e4.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6d90b80ebad103c48c3043c8d5e4c3ca
ab36c9309ce13b2a3d075461c2445f76bfc582aa
2287a6db0a6a58c570930c1f94c3b36d7acf383b26cdfa42261eb254598fa7c2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2d8a813d-10ee-4216-bb6b-8bcd1d8141e4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7669
x-amzn-requestid: 4b35e79d-21c8-48d7-b11b-44bd820e29d2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dnnROG4UoAMFZdA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a61f3a-765739ad7e9063781ccb12b2;Sampled=0
x-amzn-remapped-date: Fri, 23 Dec 2022 21:35:54 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: lhQA2yVBNtJ04goTms0KXhX6Q4v86TEe4EUioQs3eJzzMsCxbVmykw==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 6172bb1a5d00a3b06ae3700570ebe116.cloudfront.net (CloudFront), 1.1 google
date: Fri, 23 Dec 2022 21:39:58 GMT
age: 11240
etag: "ab36c9309ce13b2a3d075461c2445f76bfc582aa"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2b7298a2-2f41-4b7e-a1c6-2819da4067a7.jpeg
34.120.237.76200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2b7298a2-2f41-4b7e-a1c6-2819da4067a7.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 50705ab69dfed4f096be357417729ea6
86b6a457d2eefd5104561d15a9557441f10804f2
30cc593e7bf3cf1af8977f7c7a22c12f5c4e859c55a4efffcd504b7e56c74dbf
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2b7298a2-2f41-4b7e-a1c6-2819da4067a7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12686
x-amzn-requestid: 5ff517eb-a8ea-4051-9277-7730c04003d1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dhyVlH_toAMF-QA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a3ca89-197af9f660f57fd11e178cd6;Sampled=0
x-amzn-remapped-date: Thu, 22 Dec 2022 03:10:02 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: niapAUk39VyD6tjbfb91o8MoKBAEVV97AVmVIbC9qKRR_S8HbraMCQ==
via: 1.1 010c0731b9775a983eceaec0f5fa6a2e.cloudfront.net (CloudFront), 1.1 7022a5bbf9872d4a09d63e6cdb457dfe.cloudfront.net (CloudFront), 1.1 google
date: Fri, 23 Dec 2022 04:07:37 GMT
age: 74381
etag: "86b6a457d2eefd5104561d15a9557441f10804f2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F521ed1a6-b90d-4f16-ac47-f5778ba57056.jpeg
34.120.237.76200 OK 5.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F521ed1a6-b90d-4f16-ac47-f5778ba57056.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d7ff51ff86770154a8b01b98e6302efa
fdfeff41daa3872042615af9faaea28416d05ee5
d016ff5427d4ec9a0da5858c1c0b2f29f9c10f872d0c90dcd216e99ec8089bb8
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F521ed1a6-b90d-4f16-ac47-f5778ba57056.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5370
x-amzn-requestid: bec8ffc7-e6e9-4b4e-aa6c-273e08c7b641
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dlnDjE1rIAMF5Vw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a55216-2e477e1c3a56014b2d137ef7;Sampled=0
x-amzn-remapped-date: Fri, 23 Dec 2022 07:00:38 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: OgGzgCd-1Jf0pFQyF5NXFr8-fmto9-7KJ-_2bdCiNWcSEbn6U3TufA==
via: 1.1 56c69262ecfa7873b40572ba8a323242.cloudfront.net (CloudFront), 1.1 7022a5bbf9872d4a09d63e6cdb457dfe.cloudfront.net (CloudFront), 1.1 google
date: Fri, 23 Dec 2022 07:15:27 GMT
age: 63111
etag: "fdfeff41daa3872042615af9faaea28416d05ee5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F626da29b-d70f-4848-8a1b-cf70a01d8da9.jpeg
34.120.237.76200 OK 7.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F626da29b-d70f-4848-8a1b-cf70a01d8da9.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a41cf13f4970b1cb479194c1baab7223
ab59fa2cb8359ae9f5e037cdf1fe2684be034731
5ac5a0616f104b0f235f93be9f6b48c7a7f6b3326b7611c4e9a63127a13ebf1e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F626da29b-d70f-4848-8a1b-cf70a01d8da9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7886
x-amzn-requestid: 2f30ee9a-839a-4f78-9dc5-d4c588f7d866
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dnnquGXLIAMFWRw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a61fde-72fad8c258a58ec44a066f71;Sampled=0
x-amzn-remapped-date: Fri, 23 Dec 2022 21:38:38 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: S2l-WQXdgS1MorrfG7hFiyA2GH-tPhMal21ZBhLYUN_5i38MsLrPxg==
via: 1.1 5a1753718d8b33365e5f693dd338c510.cloudfront.net (CloudFront), 1.1 591683988172c7980c4ebb318cbf18a8.cloudfront.net (CloudFront), 1.1 google
date: Fri, 23 Dec 2022 22:12:55 GMT
age: 9263
etag: "ab59fa2cb8359ae9f5e037cdf1fe2684be034731"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F49fa7cd8-f48a-4820-8943-7f876a15bfe2.webp
34.120.237.76200 OK 4.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F49fa7cd8-f48a-4820-8943-7f876a15bfe2.webp
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b971f9cebfb83d4e05f58c5e0c7e2436
440e6429b1e04564052e1de277b2cfafdc3203fd
bf885ad9432b12fb3ad6c62204892d2521a4ab967e635de8af584b6a1e21bbab
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F49fa7cd8-f48a-4820-8943-7f876a15bfe2.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4597
x-amzn-requestid: 156d6291-928f-4c2d-93f5-edf1ac1a95bb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dnoRuHHjoAMFZfQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a620d7-7f7726b749a2dd6f3be7ac2b;Sampled=0
x-amzn-remapped-date: Fri, 23 Dec 2022 21:42:47 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: n8El7mjtpJmBXFtB8Ye9HqTJY5AWev5qPqcp00evrd3iK2fWa3wVBQ==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 9046e5a276a05e60ee34c8475e92b8e6.cloudfront.net (CloudFront), 1.1 google
date: Fri, 23 Dec 2022 22:36:20 GMT
age: 7858
etag: "440e6429b1e04564052e1de277b2cfafdc3203fd"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fafc522eb-7237-4387-a813-3d8a7c2ad6cc.jpeg
34.120.237.76200 OK 6.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fafc522eb-7237-4387-a813-3d8a7c2ad6cc.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c5b0f55bf63a36fce0a246df2039a407
2970cf26ace931d06195838af978ae13b8ccd843
cf84f2b532bc16c028fc93c3d910e2431f989a3d8fe1ffcbc3c08122ec18fe65
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fafc522eb-7237-4387-a813-3d8a7c2ad6cc.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6157
x-amzn-requestid: 10e24df4-2ac1-46cc-86ac-6fbbb25a2ece
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dnnbBHexIAMFX4Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a61f79-13279779115da25e040775f7;Sampled=0
x-amzn-remapped-date: Fri, 23 Dec 2022 21:36:57 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: EjWEfDcW1Yz5KuQ973XtJgNDMG6V7PkIiyfHeJ_JKuThH4HXgvg9Zg==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Fri, 23 Dec 2022 21:53:13 GMT
age: 10445
etag: "2970cf26ace931d06195838af978ae13b8ccd843"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.conviviopistoia.it/
149.210.219.75200 OK 252 kB IP 149.210.219.75:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (12037), with CRLF, LF line terminators
Size 252 kB (251875 bytes)
Hash 439df5c92de2e52c964484e0114f54f4
9fa34a98a1a0d4c7ba2e32b020a67afb80a72a5a
f7f3d9bfe1d706b930bff95a6c4183780fd9e30290c02e1df8dc53be0b96c008
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: www.conviviopistoia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Server: Microsoft-IIS/8.5
Link: <https://www.conviviopistoia.it/wp-json/>; rel="https://api.w.org/", <https://www.conviviopistoia.it/wp-json/wp/v2/pages/24>; rel="alternate"; type="application/json", <https://www.conviviopistoia.it/>; rel=shortlink
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 24 Dec 2022 00:47:01 GMT
Content-Length: 251875
www.conviviopistoia.it/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.6.1
149.210.219.75200 OK 2.7 kB URL HTTP/1.1 www.conviviopistoia.it/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.6.1
IP 149.210.219.75:0
Hash e6fae855021a88a0067fcc58121c594f
6299ac3987b5e81725781799dad361d19ac3b99d
e50f9ccd2d6582a58ba1879fa578e60d25fea4c5eedc07deafd14482b2403181
GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.6.1 HTTP/1.1
Host: www.conviviopistoia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.conviviopistoia.it/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: text/css
Last-Modified: Tue, 19 Jul 2022 06:51:07 GMT
Accept-Ranges: bytes
ETag: "97b537ec3b9bd81:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 24 Dec 2022 00:47:01 GMT
Content-Length: 2731
www.conviviopistoia.it/wp-content/plugins/trx_addons/css/font-icons/css/trx_addons_icons.css
149.210.219.75200 OK 24 kB URL HTTP/1.1 www.conviviopistoia.it/wp-content/plugins/trx_addons/css/font-icons/css/trx_addons_icons.css
IP 149.210.219.75:0
File type Unicode text, UTF-8 text, with CRLF line terminators
Hash b5b761eadd43802a3b376ada7e61968b
46b089ee18148be16c20159c5ad644ce1def7898
ac1ed80ea0002421d2836064a58df8cf9d24bf9a5a617081c825d7072f51ea34
GET /wp-content/plugins/trx_addons/css/font-icons/css/trx_addons_icons.css HTTP/1.1
Host: www.conviviopistoia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.conviviopistoia.it/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: text/css
Last-Modified: Thu, 21 Jul 2022 09:01:06 GMT
Accept-Ranges: bytes
ETag: "38c44f69e09cd81:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 24 Dec 2022 00:47:01 GMT
Content-Length: 24012
www.conviviopistoia.it/wp-includes/css/dist/block-library/style.min.css?ver=6.0.3
149.210.219.75200 OK 89 kB URL HTTP/1.1 www.conviviopistoia.it/wp-includes/css/dist/block-library/style.min.css?ver=6.0.3
IP 149.210.219.75:0
File type ASCII text, with very long lines (43771)
Hash b7915926fe42d76e9c802353ab01dae4
3a8192a4312f25f53de25b100d62829c0f14d67c
d7705700d24d5919255576642ad2c28bfc790390b7183a369038ff5c1e814d51
GET /wp-includes/css/dist/block-library/style.min.css?ver=6.0.3 HTTP/1.1
Host: www.conviviopistoia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.conviviopistoia.it/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: text/css
Last-Modified: Wed, 13 Jul 2022 04:40:43 GMT
Accept-Ranges: bytes
ETag: "8a3243b67296d81:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 24 Dec 2022 00:47:01 GMT
Content-Length: 88932
www.conviviopistoia.it/wp-content/plugins/trx_addons/js/swiper/swiper.min.css
149.210.219.75200 OK 20 kB URL HTTP/1.1 www.conviviopistoia.it/wp-content/plugins/trx_addons/js/swiper/swiper.min.css
IP 149.210.219.75:0
File type ASCII text, with very long lines (19512), with CRLF line terminators
Hash a1ccf43173d14f1758c5978a3edc10f9
561e322dd24ecaca908d34e9f2458071c2e75d39
c207e653a1b44030d371cae76dbc884cfa7d6936525798d06be58b4cf45a9a5a
GET /wp-content/plugins/trx_addons/js/swiper/swiper.min.css HTTP/1.1
Host: www.conviviopistoia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.conviviopistoia.it/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: text/css
Last-Modified: Thu, 21 Jul 2022 09:01:08 GMT
Accept-Ranges: bytes
ETag: "8586bf6ae09cd81:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 24 Dec 2022 00:47:01 GMT
Content-Length: 19789
www.conviviopistoia.it/wp-content/plugins/trx_addons/js/magnific/magnific-popup.min.css
149.210.219.75200 OK 5.2 kB URL HTTP/1.1 www.conviviopistoia.it/wp-content/plugins/trx_addons/js/magnific/magnific-popup.min.css
IP 149.210.219.75:0
File type ASCII text, with very long lines (5156), with no line terminators
Hash 301f825956e0202555eeb32a62b20edb
b4bb15601acb7aa9d1b0029f389e590195c65dbf
5bf51d12e86de98c7f594516b6b5c9613da60f64c863a803c3e870fa871f3e7f
GET /wp-content/plugins/trx_addons/js/magnific/magnific-popup.min.css HTTP/1.1
Host: www.conviviopistoia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.conviviopistoia.it/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: text/css
Last-Modified: Thu, 21 Jul 2022 09:01:07 GMT
Accept-Ranges: bytes
ETag: "f376c6ae09cd81:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 24 Dec 2022 00:47:01 GMT
Content-Length: 5156
www.conviviopistoia.it/wp-content/plugins/trx_addons/css/__styles.css
149.210.219.75200 OK 300 kB URL HTTP/1.1 www.conviviopistoia.it/wp-content/plugins/trx_addons/css/__styles.css
IP 149.210.219.75:0
File type ASCII text, with very long lines (65389)
Size 300 kB (300543 bytes)
Hash d18bf1ef395e3847bcce4aebce9654b8
d07bf69d2676c7f11137fa416da9e35a6ec6b33a
3614af64e2bedd99df18799455870681b01a3ac857b7e33055d063cacd1f9275
GET /wp-content/plugins/trx_addons/css/__styles.css HTTP/1.1
Host: www.conviviopistoia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.conviviopistoia.it/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: text/css
Last-Modified: Thu, 21 Jul 2022 09:01:54 GMT
Accept-Ranges: bytes
ETag: "8c237086e09cd81:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 24 Dec 2022 00:47:01 GMT
Content-Length: 300543
www.conviviopistoia.it/wp-content/plugins/trx_popup/css/style.css
149.210.219.75200 OK 7.8 kB URL HTTP/1.1 www.conviviopistoia.it/wp-content/plugins/trx_popup/css/style.css
IP 149.210.219.75:0
Hash cf4f00aeb0d3ee225f990cf33c12e639
f2e60f0d3410e8cea640b23c0c589e16f3284505
0adc9f7736c1c5d220838f3cee4899ba9348b5ca9105f8117ab92c90ed7d12b2
GET /wp-content/plugins/trx_popup/css/style.css HTTP/1.1
Host: www.conviviopistoia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.conviviopistoia.it/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: text/css
Last-Modified: Wed, 24 Nov 2021 15:36:55 GMT
Accept-Ranges: bytes
ETag: "b456391c49e1d71:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 24 Dec 2022 00:47:01 GMT
Content-Length: 7766
www.conviviopistoia.it/wp-content/plugins/essential-grid/public/assets/css/settings.css?ver=3.0.15
149.210.219.75200 OK 52 kB URL HTTP/1.1 www.conviviopistoia.it/wp-content/plugins/essential-grid/public/assets/css/settings.css?ver=3.0.15
IP 149.210.219.75:0
Hash 7ae5f77efd8cd5f68fe7fa51f94d0a95
1c8e0b4c2f678bafab863ac10a00969d38da479e
b47bf3f2e265a72d087e957182628fb67b9e19ed9470f4b3a3fbec20fd8075ff
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/essential-grid/public/assets/css/settings.css?ver=3.0.15 HTTP/1.1
Host: www.conviviopistoia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.conviviopistoia.it/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: text/css
Last-Modified: Thu, 21 Jul 2022 06:05:50 GMT
Accept-Ranges: bytes
ETag: "c37641edc79cd81:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 24 Dec 2022 00:47:01 GMT
Content-Length: 51976
www.conviviopistoia.it/wp-content/plugins/trx_popup/css/custom.css
149.210.219.75200 OK 229 B URL HTTP/1.1 www.conviviopistoia.it/wp-content/plugins/trx_popup/css/custom.css
IP 149.210.219.75:0
Hash 631ea766bb0e17d9e2196bc8377f1518
a5d5d4f23bcf5d739397fb5396f9e43dae5f5179
6a878cfaeb830a10dd389b6e2d5bb50af590a5bfd2212284bd106d4401e94919
GET /wp-content/plugins/trx_popup/css/custom.css HTTP/1.1
Host: www.conviviopistoia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.conviviopistoia.it/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: text/css
Last-Modified: Wed, 24 Nov 2021 15:36:55 GMT
Accept-Ranges: bytes
ETag: "d472b1c49e1d71:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 24 Dec 2022 00:47:01 GMT
Content-Length: 229
www.conviviopistoia.it/wp-content/plugins/trx_popup/css/fonts/Inter/stylesheet.css
149.210.219.75200 OK 579 B URL HTTP/1.1 www.conviviopistoia.it/wp-content/plugins/trx_popup/css/fonts/Inter/stylesheet.css
IP 149.210.219.75:0
Hash 4d2c4066a008136b84940a7b73ef1323
a7e1390de2129e1631285a2ef20cd3fe6c2d7bc5
2e4110446d7d4f931bd3f45cdb18636a298eefc7eae9cf6577285b83a4319306
GET /wp-content/plugins/trx_popup/css/fonts/Inter/stylesheet.css HTTP/1.1
Host: www.conviviopistoia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.conviviopistoia.it/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: text/css
Last-Modified: Wed, 24 Nov 2021 15:36:55 GMT
Accept-Ranges: bytes
ETag: "b456391c49e1d71:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 24 Dec 2022 00:47:01 GMT
Content-Length: 579
www.conviviopistoia.it/wp-content/plugins/trx_addons/css/trx_addons.animation.css
149.210.219.75200 OK 90 kB URL HTTP/1.1 www.conviviopistoia.it/wp-content/plugins/trx_addons/css/trx_addons.animation.css
IP 149.210.219.75:0
File type ASCII text, with CRLF line terminators
Hash 4d7c624459ceb5de0e652ccc9b06c158
45c40c9b85ee55617ce5e720ae69cf2fc0bfca7e
865574045365fb3562591bcdad530920402d2446b5ce498b3224e18a1bcee0ae
GET /wp-content/plugins/trx_addons/css/trx_addons.animation.css HTTP/1.1
Host: www.conviviopistoia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.conviviopistoia.it/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: text/css
Last-Modified: Thu, 21 Jul 2022 09:01:07 GMT
Accept-Ranges: bytes
ETag: "a3553c6ae09cd81:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 24 Dec 2022 00:47:01 GMT
Content-Length: 90272
www.conviviopistoia.it/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.15.0
149.210.219.75200 OK 19 kB URL HTTP/1.1 www.conviviopistoia.it/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.15.0
IP 149.210.219.75:0
File type ASCII text, with very long lines (19082)
Hash 50be31853049e4b4a10c277d5f95eb75
ac2dffc0c65ad6b209fedf2169d0c50eb4119a3e
b651d87ef113cba0c8ec8a33bfdb694171effeba56b20be12e3c77fc15f6ae9f
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.15.0 HTTP/1.1
Host: www.conviviopistoia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.conviviopistoia.it/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: text/css
Last-Modified: Thu, 21 Jul 2022 08:49:13 GMT
Accept-Ranges: bytes
ETag: "aa3fdec0de9cd81:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 24 Dec 2022 00:47:01 GMT
Content-Length: 19128
www.conviviopistoia.it/wp-content/plugins/elementor/assets/css/frontend-legacy.min.css?ver=3.6.7
149.210.219.75200 OK 14 kB URL HTTP/1.1 www.conviviopistoia.it/wp-content/plugins/elementor/assets/css/frontend-legacy.min.css?ver=3.6.7
IP 149.210.219.75:0
File type ASCII text, with very long lines (13766)
Hash d51b6906c90ca735904188bdf2611e97
6a130d4f4435a8528dbae03c6d6802b1661d31fc
b62a7ec90049358eb7a30afc6b10b1d5ff38615cbae734a8ba27934cf4bfc6a1
GET /wp-content/plugins/elementor/assets/css/frontend-legacy.min.css?ver=3.6.7 HTTP/1.1
Host: www.conviviopistoia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.conviviopistoia.it/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: text/css
Last-Modified: Thu, 21 Jul 2022 08:49:12 GMT
Accept-Ranges: bytes
ETag: "cf59b5bfde9cd81:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 24 Dec 2022 00:47:01 GMT
Content-Length: 13805
www.conviviopistoia.it/wp-content/plugins/elementor/assets/lib/font-awesome/css/v4-shims.min.css?ver=3.6.7
149.210.219.75200 OK 27 kB URL HTTP/1.1 www.conviviopistoia.it/wp-content/plugins/elementor/assets/lib/font-awesome/css/v4-shims.min.css?ver=3.6.7
IP 149.210.219.75:0
File type ASCII text, with very long lines (26516)
Hash c55205bce667f5d812354fd1353e7389
f22de0af271eba636a022c873c94fbcd81b4c89a
c55902832fb84522d02ea1a60a30747403a140d8651fa748f13ba398b0c0df3a
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/v4-shims.min.css?ver=3.6.7 HTTP/1.1
Host: www.conviviopistoia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.conviviopistoia.it/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: text/css
Last-Modified: Thu, 21 Jul 2022 08:49:14 GMT
Accept-Ranges: bytes
ETag: "f5197c1de9cd81:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 24 Dec 2022 00:47:01 GMT
Content-Length: 26702
www.conviviopistoia.it/wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.6.7
149.210.219.75200 OK 163 kB URL HTTP/1.1 www.conviviopistoia.it/wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.6.7
IP 149.210.219.75:0
File type ASCII text, with very long lines (65497)
Size 163 kB (163339 bytes)
Hash 1c01908fb5657fa5bf8aa12eac229b84
eaa8f8ee548f0f329ab95962ece3dce2c830158b
f153daaaa40523b29eaf69df72c5b75c25f8d21b038da14f9b9fcc8cbd3d6292
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.6.7 HTTP/1.1
Host: www.conviviopistoia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.conviviopistoia.it/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: text/css
Last-Modified: Thu, 21 Jul 2022 08:49:12 GMT
Accept-Ranges: bytes
ETag: "ac1ebabfde9cd81:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 24 Dec 2022 00:47:01 GMT
Content-Length: 163339
www.conviviopistoia.it/wp-content/plugins/wp-gdpr-compliance/Assets/css/front.css?ver=1658139453
149.210.219.75200 OK 26 kB URL HTTP/1.1 www.conviviopistoia.it/wp-content/plugins/wp-gdpr-compliance/Assets/css/front.css?ver=1658139453
IP 149.210.219.75:0
File type Unicode text, UTF-8 text, with very long lines (26316), with no line terminators
Hash 75cff761286bc648aa0ad67c61dca2b7
bdd192883a83131545fc228e825fdef84eebbeb1
68d8c72a1380ed65dfb8f9163cdd8b7db3de836c00611ab533535cd8a5df689e
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/wp-gdpr-compliance/Assets/css/front.css?ver=1658139453 HTTP/1.1
Host: www.conviviopistoia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.conviviopistoia.it/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: text/css
Last-Modified: Mon, 18 Jul 2022 10:17:33 GMT
Accept-Ranges: bytes
ETag: "a810ad988f9ad81:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 24 Dec 2022 00:47:01 GMT
Content-Length: 26320
ocsp.sectigo.com/
104.18.32.68200 OK 471 B IP 104.18.32.68:0
Hash cb7ce042fe43a53b04242f2b163b5f73
0268aea59a3614dc9cacb5045afab8e7f7c40013
07f8995067b0a084a3bcf48c6e2110915949374ba995076aaf299767fdb2c512
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 24 Dec 2022 00:47:22 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 20 Dec 2022 23:41:09 GMT
Expires: Tue, 27 Dec 2022 23:41:08 GMT
Etag: "0268aea59a3614dc9cacb5045afab8e7f7c40013"
Cache-Control: max-age=341025,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 77e55343ca4db51e-OSL
www.conviviopistoia.it/wp-content/themes/ozeum/skins/default/css/font-face/Metropolis/stylesheet.css
149.210.219.75200 OK 6.7 kB URL HTTP/1.1 www.conviviopistoia.it/wp-content/themes/ozeum/skins/default/css/font-face/Metropolis/stylesheet.css
IP 149.210.219.75:0
Hash 8a7770885ace558e609865fe258bfad5
19aa5c2b0ecbd1166a9151564e165ff71ebf18fb
48e7775f2e2de67612f990dfa58166a19cde4cff7106a58615270d8b062271c5
GET /wp-content/themes/ozeum/skins/default/css/font-face/Metropolis/stylesheet.css HTTP/1.1
Host: www.conviviopistoia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.conviviopistoia.it/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: text/css
Last-Modified: Thu, 21 Jul 2022 06:05:04 GMT
Accept-Ranges: bytes
ETag: "2216f8d1c79cd81:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 24 Dec 2022 00:47:01 GMT
Content-Length: 6730
www.conviviopistoia.it/wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css?ver=3.6.7
149.210.219.75200 OK 59 kB URL HTTP/1.1 www.conviviopistoia.it/wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css?ver=3.6.7
IP 149.210.219.75:0
File type ASCII text, with very long lines (59158)
Hash 74bab4578692993514e7f882cc15c218
b6293bcfd851f963edbe859498570c4c0c7eaae4
d87ddf917b7a1449ab45e2b8e3c98354629bdd65b6659c37e6023bbea1ce1386
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css?ver=3.6.7 HTTP/1.1
Host: www.conviviopistoia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.conviviopistoia.it/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: text/css
Last-Modified: Thu, 21 Jul 2022 08:49:14 GMT
Accept-Ranges: bytes
ETag: "762efbc0de9cd81:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 24 Dec 2022 00:47:01 GMT
Content-Length: 59344
www.conviviopistoia.it/wp-content/plugins/elementor-pro/assets/css/frontend.min.css?ver=3.7.2
149.210.219.75200 OK 480 kB URL HTTP/1.1 www.conviviopistoia.it/wp-content/plugins/elementor-pro/assets/css/frontend.min.css?ver=3.7.2
IP 149.210.219.75:0
File type ASCII text, with very long lines (65493)
Size 480 kB (480110 bytes)
Hash bd1087b2e67985592b358be18c001488
6229c181fe76317c7d47946f55afd58b01e403d6
a0ae86685d6487a6518b1691f8f24697e599b6c43f64a76ef3d58427c8df7072
GET /wp-content/plugins/elementor-pro/assets/css/frontend.min.css?ver=3.7.2 HTTP/1.1
Host: www.conviviopistoia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.conviviopistoia.it/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: text/css
Last-Modified: Thu, 21 Jul 2022 08:41:29 GMT
Accept-Ranges: bytes
ETag: "194b2cacdd9cd81:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 24 Dec 2022 00:47:01 GMT
Content-Length: 480110
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash dc2725df0fb812e32298bb7faaf0c231
4ce4ac649b05b8eedab5bda51f4baf5f98417689
1a60eb1f9b71718c2061dfeb9de8241bef6fecab5d48adbc8ce3a89d1dddb8f5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 24 Dec 2022 00:47:22 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.conviviopistoia.it/wp-content/themes/ozeum/style.css
149.210.219.75200 OK 4.4 kB URL HTTP/1.1 www.conviviopistoia.it/wp-content/themes/ozeum/style.css
IP 149.210.219.75:0
File type ASCII text, with very long lines (311)
Hash d95553fb6f09c559df1fa8451f8b66ae
9aefb55192f9273f3db2a5bd7c37fda2e4b4777c
5d2fb60a2c610c6b0410b7508c1712cac2f0a8347e8631ae4144168e8936f659
GET /wp-content/themes/ozeum/style.css HTTP/1.1
Host: www.conviviopistoia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.conviviopistoia.it/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: text/css
Last-Modified: Thu, 21 Jul 2022 06:05:05 GMT
Accept-Ranges: bytes
ETag: "23438ad2c79cd81:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 24 Dec 2022 00:47:01 GMT
Content-Length: 4421
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash dc2725df0fb812e32298bb7faaf0c231
4ce4ac649b05b8eedab5bda51f4baf5f98417689
1a60eb1f9b71718c2061dfeb9de8241bef6fecab5d48adbc8ce3a89d1dddb8f5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 24 Dec 2022 00:47:22 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.conviviopistoia.it/wp-content/themes/ozeum/css/font-icons/css/fontello.css
149.210.219.75200 OK 28 kB URL HTTP/1.1 www.conviviopistoia.it/wp-content/themes/ozeum/css/font-icons/css/fontello.css
IP 149.210.219.75:0
Hash a6a590e575a83a81c354880c6f220e2c
ca618849e0b6cdc329732aa6d5e3e1d820d30e6c
df6e66f1eee9f0053d95d07b332340f568969ceeb8d6a14156a782387b39af08
GET /wp-content/themes/ozeum/css/font-icons/css/fontello.css HTTP/1.1
Host: www.conviviopistoia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.conviviopistoia.it/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: text/css
Last-Modified: Thu, 21 Jul 2022 06:05:01 GMT
Accept-Ranges: bytes
ETag: "ab9725d0c79cd81:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 24 Dec 2022 00:47:01 GMT
Content-Length: 28333
www.conviviopistoia.it/wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css?ver=4.2.16
149.210.219.75200 OK 11 kB URL HTTP/1.1 www.conviviopistoia.it/wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css?ver=4.2.16
IP 149.210.219.75:0
File type ASCII text, with very long lines (11256), with no line terminators
Hash 2b0dd7eecea03b4bdedb94ba622fdb03
703becba85161118dd6fc66af465428ef43f561c
b7908a015a567ec2363011df2475368dbff34360e9da3fdff50604d6395fb646
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css?ver=4.2.16 HTTP/1.1
Host: www.conviviopistoia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.conviviopistoia.it/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: text/css
Last-Modified: Wed, 24 Nov 2021 15:47:07 GMT
Accept-Ranges: bytes
ETag: "6c2f4d894ae1d71:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 24 Dec 2022 00:47:01 GMT
Content-Length: 11256
www.conviviopistoia.it/wp-includes/js/mediaelement/wp-mediaelement.min.css?ver=6.0.3
149.210.219.75200 OK 4.2 kB URL HTTP/1.1 www.conviviopistoia.it/wp-includes/js/mediaelement/wp-mediaelement.min.css?ver=6.0.3
IP 149.210.219.75:0
File type ASCII text, with very long lines (4186), with no line terminators
Hash ea958276b7de454bd3c2873f0dc47e5f
b143f6e8e8f79d8f104c26b0057ef5514d763219
2e10d353ff038c2cad3492fc17801af3e6ef2669c9e9713bdb78b1dcb104c4fe
GET /wp-includes/js/mediaelement/wp-mediaelement.min.css?ver=6.0.3 HTTP/1.1
Host: www.conviviopistoia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.conviviopistoia.it/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: text/css
Last-Modified: Fri, 24 Jul 2020 20:46:54 GMT
Accept-Ranges: bytes
ETag: "b678e390fb61d61:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 24 Dec 2022 00:47:01 GMT
Content-Length: 4186
www.conviviopistoia.it/wp-includes/js/wp-emoji-release.min.js?ver=6.0.3
149.210.219.75200 OK 19 kB URL HTTP/1.1 www.conviviopistoia.it/wp-includes/js/wp-emoji-release.min.js?ver=6.0.3
IP 149.210.219.75:0
File type ASCII text, with very long lines (15660)
Hash 32beb68a374e3aeac00abdf9e12b84ea
b5d18aa625e8696dd9d07cd0869337717b211ae0
5aad5fbd4238981a9ff5e2772ff1353dfe1a801fb49542fe157418c1438f7782
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/wp-emoji-release.min.js?ver=6.0.3 HTTP/1.1
Host: www.conviviopistoia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.conviviopistoia.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: application/javascript
Last-Modified: Tue, 14 Jun 2022 22:31:57 GMT
Accept-Ranges: bytes
ETag: "6219558e3e80d81:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 24 Dec 2022 00:47:01 GMT
Content-Length: 18617
www.conviviopistoia.it/wp-content/plugins/essential-grid/public/assets/font/fontello/css/fontello.css?ver=3.0.15
149.210.219.75200 OK 13 kB URL HTTP/1.1 www.conviviopistoia.it/wp-content/plugins/essential-grid/public/assets/font/fontello/css/fontello.css?ver=3.0.15
IP 149.210.219.75:0
Hash 4045fbc98e0caae7e213f52330c52c21
253b81dc846081e189174789220a296d96849681
168642741cf6acd34501d09c8cc1c7e6be332ca9222f3223419bd1664b381839
GET /wp-content/plugins/essential-grid/public/assets/font/fontello/css/fontello.css?ver=3.0.15 HTTP/1.1
Host: www.conviviopistoia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.conviviopistoia.it/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: text/css
Last-Modified: Thu, 21 Jul 2022 06:05:50 GMT
Accept-Ranges: bytes
ETag: "597560edc79cd81:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 24 Dec 2022 00:47:01 GMT
Content-Length: 12663
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash dc2725df0fb812e32298bb7faaf0c231
4ce4ac649b05b8eedab5bda51f4baf5f98417689
1a60eb1f9b71718c2061dfeb9de8241bef6fecab5d48adbc8ce3a89d1dddb8f5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 24 Dec 2022 00:47:22 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.conviviopistoia.it/wp-content/themes/ozeum/skins/default/css/style.css
149.210.219.75200 OK 194 kB URL HTTP/1.1 www.conviviopistoia.it/wp-content/themes/ozeum/skins/default/css/style.css
IP 149.210.219.75:0
Size 194 kB (193821 bytes)
Hash fbb545484d4775f47e58070dec86d586
5a2554d54f3fc7b99c39b814a8eafe8cc744f43d
92b77b11c4cc77c49c7cf1a8c45c20737a3d7b0ccd7a6eb823bc42e6a55f9c11
GET /wp-content/themes/ozeum/skins/default/css/style.css HTTP/1.1
Host: www.conviviopistoia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.conviviopistoia.it/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: text/css
Last-Modified: Thu, 21 Jul 2022 06:05:04 GMT
Accept-Ranges: bytes
ETag: "6578fad1c79cd81:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 24 Dec 2022 00:47:01 GMT
Content-Length: 193821
www.conviviopistoia.it/wp-content/themes/ozeum/skins/default/css/__plugins.css
149.210.219.75200 OK 133 kB URL HTTP/1.1 www.conviviopistoia.it/wp-content/themes/ozeum/skins/default/css/__plugins.css
IP 149.210.219.75:0
File type ASCII text, with very long lines (65389)
Size 133 kB (133427 bytes)
Hash 45d0452467acbcf3800ecd2ad83a8699
059d04b826caf520208a07adb2b84c43104e3a12
8dd7ae3d9feb1ebbe497cfc08f5b265894b4b3444a879aa3b5c992cbd958fbe3
GET /wp-content/themes/ozeum/skins/default/css/__plugins.css HTTP/1.1
Host: www.conviviopistoia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.conviviopistoia.it/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: text/css
Last-Modified: Thu, 21 Jul 2022 09:01:55 GMT
Accept-Ranges: bytes
ETag: "eee9d886e09cd81:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 24 Dec 2022 00:47:01 GMT
Content-Length: 133427
www.conviviopistoia.it/wp-content/themes/ozeum/skins/default/css/__custom.css
149.210.219.75200 OK 16 kB URL HTTP/1.1 www.conviviopistoia.it/wp-content/themes/ozeum/skins/default/css/__custom.css
IP 149.210.219.75:0
File type ASCII text, with very long lines (15859)
Hash ebe0bd27a2f615226dbb771367156b43
3045ce173200ec6002cd67a9122160861bd89191
af5d179bb2c77b3e0f5ce4dde6d20117ab8e20e7ea364ae656832f95df9923bb
GET /wp-content/themes/ozeum/skins/default/css/__custom.css HTTP/1.1
Host: www.conviviopistoia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.conviviopistoia.it/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: text/css
Last-Modified: Thu, 21 Jul 2022 09:01:55 GMT
Accept-Ranges: bytes
ETag: "7b849186e09cd81:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 24 Dec 2022 00:47:01 GMT
Content-Length: 16011
www.conviviopistoia.it/wp-content/themes/ozeum/skins/default/css/__responsive.css
149.210.219.75200 OK 231 kB URL HTTP/1.1 www.conviviopistoia.it/wp-content/themes/ozeum/skins/default/css/__responsive.css
IP 149.210.219.75:0
File type ASCII text, with very long lines (65389)
Size 231 kB (231047 bytes)
Hash 6eae9d19c1c78ef428a84ba4fd8b1267
191006f042bd7c667e87cd9de3ce2f41e249cd94
df4b4fc15fc5d8a549cc360deff61350003917331af6cf114f541036793c7711
GET /wp-content/themes/ozeum/skins/default/css/__responsive.css HTTP/1.1
Host: www.conviviopistoia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.conviviopistoia.it/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: text/css
Last-Modified: Thu, 21 Jul 2022 09:01:55 GMT
Accept-Ranges: bytes
ETag: "b2fff86e09cd81:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 24 Dec 2022 00:47:01 GMT
Content-Length: 231047
www.conviviopistoia.it/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
149.210.219.75200 OK 11 kB URL HTTP/1.1 www.conviviopistoia.it/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
IP 149.210.219.75:0
File type ASCII text, with very long lines (11126)
Hash 79b4956b7ec478ec10244b5e2d33ac7d
a46025b9d05e3df30d610a8aef14f392c7058dc9
029e0a2e809fd6b5dbe76abe8b7a74936be306c9a8c27c814c4d44aa54623300
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1
Host: www.conviviopistoia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.conviviopistoia.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: application/javascript
Last-Modified: Wed, 24 Nov 2021 15:47:06 GMT
Accept-Ranges: bytes
ETag: "1b2993884ae1d71:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 24 Dec 2022 00:47:01 GMT
Content-Length: 11224
www.conviviopistoia.it/wp-content/plugins/trx_addons/css/__responsive.css
149.210.219.75200 OK 72 kB URL HTTP/1.1 www.conviviopistoia.it/wp-content/plugins/trx_addons/css/__responsive.css
IP 149.210.219.75:0
File type ASCII text, with very long lines (65389)
Hash d211009d8b92e65cb8f7b7e075a8fa06
c6f103741b63e67c8a36d20668d42ee6e7409c0e
6c1dc717201da5277d739e19ebbdd9168703fdbd65160b26654970730bf2e51e
GET /wp-content/plugins/trx_addons/css/__responsive.css HTTP/1.1
Host: www.conviviopistoia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.conviviopistoia.it/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: text/css
Last-Modified: Thu, 21 Jul 2022 09:01:55 GMT
Accept-Ranges: bytes
ETag: "62717e86e09cd81:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 24 Dec 2022 00:47:01 GMT
Content-Length: 72340
www.conviviopistoia.it/wp-content/plugins/elementor/assets/lib/animations/animations.min.css?ver=3.6.7
149.210.219.75200 OK 18 kB URL HTTP/1.1 www.conviviopistoia.it/wp-content/plugins/elementor/assets/lib/animations/animations.min.css?ver=3.6.7
IP 149.210.219.75:0
File type ASCII text, with very long lines (10019)
Hash 4601ba55044413706c2022cb6c1c3d05
5103ec2fbb389568ebf5cfe4fd721f3df2ff7aec
fe513ef974b767510d0a2b9f1b4d3afa53185b89ab617c869e5e3d6db960192c
GET /wp-content/plugins/elementor/assets/lib/animations/animations.min.css?ver=3.6.7 HTTP/1.1
Host: www.conviviopistoia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.conviviopistoia.it/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: text/css
Last-Modified: Thu, 21 Jul 2022 08:49:13 GMT
Accept-Ranges: bytes
ETag: "2e22b3c0de9cd81:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 24 Dec 2022 00:47:01 GMT
Content-Length: 18468
www.conviviopistoia.it/wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.min.js?ver=3.6.7
149.210.219.75200 OK 15 kB URL HTTP/1.1 www.conviviopistoia.it/wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.min.js?ver=3.6.7
IP 149.210.219.75:0
File type ASCII text, with very long lines (14869)
Hash 7a5dea0a705cc2f4cd87dbaaa6666bc6
678bc6f750f13adb29bbc158eb0d9cd813b736fa
97cf1307c16a437b77b5f7f5c9bc0b985d0745a14be5a279019aca5a3432e264
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.min.js?ver=3.6.7 HTTP/1.1
Host: www.conviviopistoia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.conviviopistoia.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: application/javascript
Last-Modified: Thu, 21 Jul 2022 08:49:14 GMT
Accept-Ranges: bytes
ETag: "815a1ac1de9cd81:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 24 Dec 2022 00:47:01 GMT
Content-Length: 15055
www.conviviopistoia.it/wp-content/plugins/elementor/assets/lib/font-awesome/css/brands.min.css?ver=5.15.3
149.210.219.75200 OK 675 B URL HTTP/1.1 www.conviviopistoia.it/wp-content/plugins/elementor/assets/lib/font-awesome/css/brands.min.css?ver=5.15.3
IP 149.210.219.75:0
File type ASCII text, with very long lines (489)
Hash 144e43c3b3d8ea5b278c062c202c92f2
3c037057a419245849747b4762d09d88cab66fc1
9cd63b8cea25045c14623c538d26752518a58c0c682795ce6ad3078976c65a37
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/brands.min.css?ver=5.15.3 HTTP/1.1
Host: www.conviviopistoia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.conviviopistoia.it/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: text/css
Last-Modified: Thu, 21 Jul 2022 08:49:14 GMT
Accept-Ranges: bytes
ETag: "9d90fdc0de9cd81:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 24 Dec 2022 00:47:01 GMT
Content-Length: 675
www.conviviopistoia.it/wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.min.css?ver=5.15.3
149.210.219.75200 OK 58 kB URL HTTP/1.1 www.conviviopistoia.it/wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.min.css?ver=5.15.3
IP 149.210.219.75:0
File type ASCII text, with very long lines (57726)
Hash eeb705d0bdccfd645d3bbd46dd1fbab3
066def290f42ed8c00860e573cc880bd46e9ced4
d01a2ba2805c78957e15a2958135de0f3cb88e95159dd0f6c0a032bd76b1b0e9
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.min.css?ver=5.15.3 HTTP/1.1
Host: www.conviviopistoia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.conviviopistoia.it/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: text/css
Last-Modified: Thu, 21 Jul 2022 08:49:14 GMT
Accept-Ranges: bytes
ETag: "fdf2ffc0de9cd81:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 24 Dec 2022 00:47:01 GMT
Content-Length: 57912
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash dc2725df0fb812e32298bb7faaf0c231
4ce4ac649b05b8eedab5bda51f4baf5f98417689
1a60eb1f9b71718c2061dfeb9de8241bef6fecab5d48adbc8ce3a89d1dddb8f5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 24 Dec 2022 00:47:22 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.conviviopistoia.it/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9
149.210.219.75200 OK 6.5 kB URL HTTP/1.1 www.conviviopistoia.it/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9
IP 149.210.219.75:0
File type ASCII text, with very long lines (6475), with no line terminators
Hash 61449413a42d2daaa79dbe7298b40e21
d86c474164c603084397bdc50fb0e469d28b5772
f30769ea0b80a5d900c5f0de30b1aad1ab461195e69223d5ef63c2c5de8b6c1a
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9 HTTP/1.1
Host: www.conviviopistoia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.conviviopistoia.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: application/javascript
Last-Modified: Tue, 14 Jun 2022 22:31:55 GMT
Accept-Ranges: bytes
ETag: "649b478d3e80d81:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 24 Dec 2022 00:47:01 GMT
Content-Length: 6475
www.conviviopistoia.it/wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.5.25
149.210.219.75200 OK 60 kB URL HTTP/1.1 www.conviviopistoia.it/wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.5.25
IP 149.210.219.75:0
File type Unicode text, UTF-8 text, with very long lines (12602), with CRLF line terminators
Hash 0168820b8b6b21496be0b4c82ed52f7e
6b3f9232b6af6c71a70bb5650e2a7321227929d2
f4c9c99a613a78e9163b640fd879ebdd5bb748329175474084ab266970c82938
GET /wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.5.25 HTTP/1.1
Host: www.conviviopistoia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.conviviopistoia.it/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: text/css
Last-Modified: Thu, 21 Jul 2022 06:06:35 GMT
Accept-Ranges: bytes
ETag: "82c7338c89cd81:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 24 Dec 2022 00:47:01 GMT
Content-Length: 59516
www.conviviopistoia.it/wp-content/themes/ozeum/skins/default/css/__colors-dark.css
149.210.219.75200 OK 261 kB URL HTTP/1.1 www.conviviopistoia.it/wp-content/themes/ozeum/skins/default/css/__colors-dark.css
IP 149.210.219.75:0
File type ASCII text, with very long lines (65384)
Size 261 kB (261030 bytes)
Hash 268b8d140682ed2871402623308a0ca1
7a4cf44c7a44bf31101c904f0844f8262e023306
c683c4b73d4546089ff7ad456c27d5959d0bbe0c7033a40bfb4d43ffe526f6b2
GET /wp-content/themes/ozeum/skins/default/css/__colors-dark.css HTTP/1.1
Host: www.conviviopistoia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.conviviopistoia.it/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: text/css
Last-Modified: Thu, 21 Jul 2022 09:01:55 GMT
Accept-Ranges: bytes
ETag: "2befad86e09cd81:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 24 Dec 2022 00:47:01 GMT
Content-Length: 261030
www.conviviopistoia.it/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.6.1
149.210.219.75200 OK 22 kB URL HTTP/1.1 www.conviviopistoia.it/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.6.1
IP 149.210.219.75:0
File type ASCII text, with very long lines (21904), with no line terminators
Hash e7334b0f16895605c1234c69ad86fd4a
6da3372e63cabe2d3c6b0dfecc70770c2f69921b
e89d7526092c671c0a01bd02152a595271fb97f87bbd3ba379b5e8b1071f6b2d
GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.6.1 HTTP/1.1
Host: www.conviviopistoia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.conviviopistoia.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: application/javascript
Last-Modified: Tue, 19 Jul 2022 06:51:07 GMT
Accept-Ranges: bytes
ETag: "4983fec3b9bd81:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 24 Dec 2022 00:47:01 GMT
Content-Length: 21904
www.conviviopistoia.it/wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.5.18
149.210.219.75200 OK 129 kB URL HTTP/1.1 www.conviviopistoia.it/wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.5.18
IP 149.210.219.75:0
File type ASCII text, with very long lines (45108), with CRLF line terminators
Size 129 kB (128805 bytes)
Hash 0ce245fda586eafae053aa341ccdd2c7
3f0e5d08540860f4e1c4ba0db2bd3decf481ea44
5c9203860ae657336596c738730f9d362e00bb9948a0f581fb074270c328e26b
GET /wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.5.18 HTTP/1.1
Host: www.conviviopistoia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.conviviopistoia.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: application/javascript
Last-Modified: Thu, 21 Jul 2022 06:06:35 GMT
Accept-Ranges: bytes
ETag: "f7a37b8c89cd81:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 24 Dec 2022 00:47:01 GMT
Content-Length: 128805
www.conviviopistoia.it/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0
149.210.219.75200 OK 19 kB URL HTTP/1.1 www.conviviopistoia.it/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0
IP 149.210.219.75:0
File type Unicode text, UTF-8 text, with very long lines (19138), with no line terminators
Hash 57459b58fd7665a5e20b2345463df9c9
71c3b177ad1412d5e0b56d99f18bc345148df88b
6fecb89a29ee2bd397bb1bf58ecaa530a76f0654db71fadefd3cc70b0bc302bf
GET /wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0 HTTP/1.1
Host: www.conviviopistoia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.conviviopistoia.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: application/javascript
Last-Modified: Tue, 14 Jun 2022 22:31:55 GMT
Accept-Ranges: bytes
ETag: "a6ef4e8d3e80d81:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 24 Dec 2022 00:47:01 GMT
Content-Length: 19142
cdn.iubenda.com/cookie_solution/iubenda_cs/1.44.5/core-it.js
138.199.37.225200 OK 75 kB URL HTTP/2 cdn.iubenda.com/cookie_solution/iubenda_cs/1.44.5/core-it.js
IP 138.199.37.225:0
ASN #60068 Datacamp Limited
File type Unicode text, UTF-8 text, with very long lines (65264), with no line terminators
Hash 361c682c90a447e4aedb60faa66ef1ab
c10659af517f69be9826d760a73360ea7fbdfe2b
c086723b591f6568414cace0d7b8694e705fdc211e55f7332076f29c414ebd10
GET /cookie_solution/iubenda_cs/1.44.5/core-it.js HTTP/1.1
Host: cdn.iubenda.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.conviviopistoia.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 24 Dec 2022 00:47:22 GMT
content-type: application/javascript
server: BunnyCDN-DE1-1055
cdn-pullzone: 954456
cdn-uid: a7bd0c3f-43db-400a-80e2-073f933f3c99
cdn-requestcountrycode: NO
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31536000
content-encoding: br
etag: "63a5d5fe-12332"
last-modified: Fri, 23 Dec 2022 16:23:26 GMT
p3p: CP="DSP NOI COR", policyref="http://www.iubenda.com/w3c/p3p.xml"
cdn-proxyver: 1.03
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 12/23/2022 16:46:05
cdn-edgestorageid: 1055
cdn-status: 200
cdn-requestid: 59a64fae78e7385ea2c2292e59f8e9f4
cdn-cache: HIT
X-Firefox-Spdy: h2
www.conviviopistoia.it/wp-content/plugins/trx_addons/js/elastistack/draggabilly.pkgd.min.js
149.210.219.75200 OK 14 kB URL HTTP/1.1 www.conviviopistoia.it/wp-content/plugins/trx_addons/js/elastistack/draggabilly.pkgd.min.js
IP 149.210.219.75:0
File type ASCII text, with very long lines (13934), with CRLF line terminators
Hash bcac10cb3a53c74ef9389a54beb2db21
2c4e40521b96670cfb0b35ce047946fd3c9366be
e71a863070fb45d805fc155cd0f3255a555ddb5a9552c4dc779c56f0db38855d
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/trx_addons/js/elastistack/draggabilly.pkgd.min.js HTTP/1.1
Host: www.conviviopistoia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.conviviopistoia.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: application/javascript
Last-Modified: Thu, 21 Jul 2022 09:01:07 GMT
Accept-Ranges: bytes
ETag: "ebad626ae09cd81:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 24 Dec 2022 00:47:01 GMT
Content-Length: 14059
www.conviviopistoia.it/wp-content/plugins/trx_addons/js/elastistack/modernizr.custom.js
149.210.219.75200 OK 8.3 kB URL HTTP/1.1 www.conviviopistoia.it/wp-content/plugins/trx_addons/js/elastistack/modernizr.custom.js
IP 149.210.219.75:0
File type HTML document, ASCII text, with very long lines (8110), with CRLF line terminators
Hash a62c01afa59213f363ddceaed88fb06d
70910bb2dc9920f999fbf5805f717b167c2b64d5
88950f21522135d9a022b13a56b169c561ee0115959c21f802055a943c7ca42a
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/trx_addons/js/elastistack/modernizr.custom.js HTTP/1.1
Host: www.conviviopistoia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.conviviopistoia.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: application/javascript
Last-Modified: Thu, 21 Jul 2022 09:01:07 GMT
Accept-Ranges: bytes
ETag: "f11656ae09cd81:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 24 Dec 2022 00:47:01 GMT
Content-Length: 8284
www.conviviopistoia.it/wp-content/plugins/trx_addons/js/elastistack/elastistack.js
149.210.219.75200 OK 11 kB URL HTTP/1.1 www.conviviopistoia.it/wp-content/plugins/trx_addons/js/elastistack/elastistack.js
IP 149.210.219.75:0
File type ASCII text, with CRLF line terminators
Hash 9a6e320fe9f86dafdbd2e28b59770a04
087d4310318d4a6a8b152fc90c36277875b5d5ad
f8a7b7f5695482863a7bf4ce36d5020739e7e0556c58f43582d0dd81ee325db4
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/trx_addons/js/elastistack/elastistack.js HTTP/1.1
Host: www.conviviopistoia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.conviviopistoia.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: application/javascript
Last-Modified: Thu, 21 Jul 2022 09:01:07 GMT
Accept-Ranges: bytes
ETag: "f11656ae09cd81:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 24 Dec 2022 00:47:01 GMT
Content-Length: 11368
www.conviviopistoia.it/wp-content/plugins/trx_addons/js/magnific/jquery.magnific-popup.min.js
149.210.219.75200 OK 20 kB URL HTTP/1.1 www.conviviopistoia.it/wp-content/plugins/trx_addons/js/magnific/jquery.magnific-popup.min.js
IP 149.210.219.75:0
File type ASCII text, with very long lines (20087), with CRLF line terminators
Hash b37d7edf99565d3858eaa1ad80df3cff
786a4343711e9af5e5dfcc493e7d2331b48875bb
b0a45cd5aed66e27bd8ee861d0e3b782c8e79849bde32f90f078b9f2451a36f2
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/trx_addons/js/magnific/jquery.magnific-popup.min.js HTTP/1.1
Host: www.conviviopistoia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.conviviopistoia.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: application/javascript
Last-Modified: Thu, 21 Jul 2022 09:01:07 GMT
Accept-Ranges: bytes
ETag: "f376c6ae09cd81:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 24 Dec 2022 00:47:01 GMT
Content-Length: 20219
www.conviviopistoia.it/wp-content/plugins/trx_addons/js/__scripts.js
149.210.219.75200 OK 223 kB URL HTTP/1.1 www.conviviopistoia.it/wp-content/plugins/trx_addons/js/__scripts.js
IP 149.210.219.75:0
File type ASCII text, with very long lines (65389)
Size 223 kB (222987 bytes)
Hash f6034216487c801138829c65786f42ad
c88543281eaa13014e91dfa6370db2f510e2cdbd
6c367a6da9e2c8163ca57d9b43feae3a7d842114f9edd130626367ce20bc40a2
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/trx_addons/js/__scripts.js HTTP/1.1
Host: www.conviviopistoia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.conviviopistoia.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: application/javascript
Last-Modified: Thu, 21 Jul 2022 09:01:55 GMT
Accept-Ranges: bytes
ETag: "97228f86e09cd81:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 24 Dec 2022 00:47:01 GMT
Content-Length: 222987
www.conviviopistoia.it/wp-content/plugins/trx_popup/js/trx_popup.script.js
149.210.219.75200 OK 1.1 kB URL HTTP/1.1 www.conviviopistoia.it/wp-content/plugins/trx_popup/js/trx_popup.script.js
IP 149.210.219.75:0
Hash 64b66dacae863e14dcdd13e288724b14
ab577db80000853a75a680585564cc19e3221d2d
ca12fd5e9deaf3ee79952f911d1f530f45287a6b8cfd8fe28c4e9a3388ab58e5
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/trx_popup/js/trx_popup.script.js HTTP/1.1
Host: www.conviviopistoia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.conviviopistoia.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: application/javascript
Last-Modified: Wed, 24 Nov 2021 15:36:55 GMT
Accept-Ranges: bytes
ETag: "ed41451c49e1d71:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 24 Dec 2022 00:47:01 GMT
Content-Length: 1081
www.conviviopistoia.it/wp-content/plugins/trx_addons/components/shortcodes/anchor/anchor.js
149.210.219.75200 OK 9.1 kB URL HTTP/1.1 www.conviviopistoia.it/wp-content/plugins/trx_addons/components/shortcodes/anchor/anchor.js
IP 149.210.219.75:0
File type ASCII text, with CRLF line terminators
Hash 44952bb47db545b68226c22714c24442
f73b683cac3cfef1a3e3b43f63e36ea775bca174
8e8d22768962d8087772c7783a505cb0286a5f83b3179d29cfb70e907d9e2a05
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/trx_addons/components/shortcodes/anchor/anchor.js HTTP/1.1
Host: www.conviviopistoia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.conviviopistoia.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: application/javascript
Last-Modified: Thu, 21 Jul 2022 09:01:00 GMT
Accept-Ranges: bytes
ETag: "f21e2a66e09cd81:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 24 Dec 2022 00:47:01 GMT
Content-Length: 9080
www.conviviopistoia.it/wp-content/plugins/trx_popup/js/jquery.cookie.js
149.210.219.75200 OK 3.1 kB URL HTTP/1.1 www.conviviopistoia.it/wp-content/plugins/trx_popup/js/jquery.cookie.js
IP 149.210.219.75:0
Hash d5528dde0006c78be04817327c2f9b6f
31e1bcc4cf805a2c2fee21f48ded1e598f64a2a8
b84161c9fbf7520cd14e7019f92120bd87a928a074156e91a992eba9fc9436e8
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/trx_popup/js/jquery.cookie.js HTTP/1.1
Host: www.conviviopistoia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.conviviopistoia.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: application/javascript
Last-Modified: Wed, 24 Nov 2021 15:36:55 GMT
Accept-Ranges: bytes
ETag: "ed41451c49e1d71:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 24 Dec 2022 00:47:02 GMT
Content-Length: 3121
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash dc2725df0fb812e32298bb7faaf0c231
4ce4ac649b05b8eedab5bda51f4baf5f98417689
1a60eb1f9b71718c2061dfeb9de8241bef6fecab5d48adbc8ce3a89d1dddb8f5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 24 Dec 2022 00:47:22 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.conviviopistoia.it/wp-content/plugins/wp-gdpr-compliance/Assets/js/front.min.js?ver=1658139454
149.210.219.75200 OK 59 kB URL HTTP/1.1 www.conviviopistoia.it/wp-content/plugins/wp-gdpr-compliance/Assets/js/front.min.js?ver=1658139454
IP 149.210.219.75:0
File type exported SGML document, Unicode text, UTF-8 text, with very long lines (59044)
Hash a7984e5f6b6556d58fca4f6f7b842992
e511f64599438ef63f4e3e3551f4544ce049bc65
3e5da322ed022b5762d70293cd84e3e73009781267f36f48553ef8cd4bee4ef4
GET /wp-content/plugins/wp-gdpr-compliance/Assets/js/front.min.js?ver=1658139454 HTTP/1.1
Host: www.conviviopistoia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.conviviopistoia.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: application/javascript
Last-Modified: Mon, 18 Jul 2022 10:17:34 GMT
Accept-Ranges: bytes
ETag: "8c37b4988f9ad81:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 24 Dec 2022 00:47:02 GMT
Content-Length: 59125
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash b9643a377daeefa9e867de25d84d90a4
7ab8aade6752606edfa9a6e68248fdbdca76dae8
0265378147b5eaa4ad2c4f570790b2b71b1abe8386e674c565bf0885396c04d0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 24 Dec 2022 00:47:22 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
216.58.207.227200 OK 45 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP 216.58.207.227:0
File type Web Open Font Format (Version 2), TrueType, length 44856, version 1.0\012- data
Hash 565ce506190ad3af920b40baf1794cec
ad3cba5d06100e09449a864d3b5e58403b478b3d
8778e9af2422858d7052ff9a0f3c12c08ae976bdd6e0316db144cd5579cd97db
GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.conviviopistoia.it
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 44856
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 19 Dec 2022 18:52:41 GMT
expires: Tue, 19 Dec 2023 18:52:41 GMT
cache-control: public, max-age=31536000
age: 366881
last-modified: Mon, 15 Aug 2022 18:20:18 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/cardo/v19/wlp_gwjKBV1pqhv43IE.woff2
216.58.207.227200 OK 15 kB URL HTTP/2 fonts.gstatic.com/s/cardo/v19/wlp_gwjKBV1pqhv43IE.woff2
IP 216.58.207.227:0
File type Web Open Font Format (Version 2), TrueType, length 14880, version 1.0\012- data
Hash c1570bbb1803261029ee01e99efb78c9
c3f95b0464f08458f80126f4f32201921559c442
f1346360729e77380edf8f17fa421b76452289ae1b5f4be290b19c4d204e9587
GET /s/cardo/v19/wlp_gwjKBV1pqhv43IE.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.conviviopistoia.it
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14880
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 22 Dec 2022 20:26:36 GMT
expires: Fri, 22 Dec 2023 20:26:36 GMT
cache-control: public, max-age=31536000
age: 102046
last-modified: Thu, 21 Apr 2022 17:05:52 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.conviviopistoia.it/wp-content/themes/ozeum/js/__scripts.js
149.210.219.75200 OK 111 kB URL HTTP/1.1 www.conviviopistoia.it/wp-content/themes/ozeum/js/__scripts.js
IP 149.210.219.75:0
File type ASCII text, with very long lines (65389)
Size 111 kB (110968 bytes)
Hash 42c05bfc50a6349f6606c969b6273493
1d899a989bcd67ca07547aabd5ae84ad809fb45e
75f4a49bcfc0c7eb4301176b114462315ca84360cebd1a0b1bc86acf72409f62
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/ozeum/js/__scripts.js HTTP/1.1
Host: www.conviviopistoia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.conviviopistoia.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: application/javascript
Last-Modified: Thu, 21 Jul 2022 09:01:55 GMT
Accept-Ranges: bytes
ETag: "5efba87e09cd81:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 24 Dec 2022 00:47:02 GMT
Content-Length: 110968
www.conviviopistoia.it/wp-includes/js/mediaelement/mediaelement-and-player.min.js?ver=4.2.16
149.210.219.75200 OK 158 kB URL HTTP/1.1 www.conviviopistoia.it/wp-includes/js/mediaelement/mediaelement-and-player.min.js?ver=4.2.16
IP 149.210.219.75:0
File type ASCII text, with very long lines (65266)
Size 158 kB (157610 bytes)
Hash 6de31d697a1b1b2b0e2a3b29b1fb458b
c9b6c996a66918f7c4d49c9b60134ce282c47143
443ba0af7a7ed827223c7fb3c008c02b9ff1d651b6492e9c270378b07d9f6008
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/mediaelement/mediaelement-and-player.min.js?ver=4.2.16 HTTP/1.1
Host: www.conviviopistoia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.conviviopistoia.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: application/javascript
Last-Modified: Wed, 24 Nov 2021 15:47:07 GMT
Accept-Ranges: bytes
ETag: "f4cc4a894ae1d71:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 24 Dec 2022 00:47:02 GMT
Content-Length: 157610
www.conviviopistoia.it/wp-content/plugins/trx_addons/components/cpt/layouts/shortcodes/menu/superfish.min.js
149.210.219.75200 OK 4.5 kB URL HTTP/1.1 www.conviviopistoia.it/wp-content/plugins/trx_addons/components/cpt/layouts/shortcodes/menu/superfish.min.js
IP 149.210.219.75:0
File type ASCII text, with very long lines (4246), with CRLF line terminators
Hash f06c47488aa4651828bf66dd1ad9539e
e0f84df724e3e92f798bc7e4a089b6a8c3e45061
12517578a0d84618357152478454ef69e6832305a7a20f842734d537a1c588c1
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/trx_addons/components/cpt/layouts/shortcodes/menu/superfish.min.js HTTP/1.1
Host: www.conviviopistoia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.conviviopistoia.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: application/javascript
Last-Modified: Thu, 21 Jul 2022 09:00:57 GMT
Accept-Ranges: bytes
ETag: "60473664e09cd81:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 24 Dec 2022 00:47:02 GMT
Content-Length: 4483
www.conviviopistoia.it/wp-content/themes/ozeum/skins/default/css/__colors-default.css
149.210.219.75200 OK 471 B URL HTTP/1.1 www.conviviopistoia.it/wp-content/themes/ozeum/skins/default/css/__colors-default.css
IP 149.210.219.75:0
Hash b9643a377daeefa9e867de25d84d90a4
7ab8aade6752606edfa9a6e68248fdbdca76dae8
0265378147b5eaa4ad2c4f570790b2b71b1abe8386e674c565bf0885396c04d0
GET /wp-content/themes/ozeum/skins/default/css/__colors-default.css HTTP/1.1
Host: www.conviviopistoia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.conviviopistoia.it/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: text/css
Last-Modified: Thu, 21 Jul 2022 09:01:55 GMT
Accept-Ranges: bytes
ETag: "c8d29f86e09cd81:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 24 Dec 2022 00:47:01 GMT
Content-Length: 271143
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash b9643a377daeefa9e867de25d84d90a4
7ab8aade6752606edfa9a6e68248fdbdca76dae8
0265378147b5eaa4ad2c4f570790b2b71b1abe8386e674c565bf0885396c04d0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 24 Dec 2022 00:47:22 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.conviviopistoia.it/wordpress/wp-content/uploads/2019/11/flower-preloader.png
149.210.219.75301 Moved Permanently 211 B URL HTTP/1.1 www.conviviopistoia.it/wordpress/wp-content/uploads/2019/11/flower-preloader.png
IP 149.210.219.75:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 5201adfc63c4127fd7c6df34fd97a2a0
523caf1593f98944ff872651e0ea5908be82bbfd
c750e1a194905438d7bcd0e6b58c2007c8a002ae859d25a9805adac4b6783d35
GET /wordpress/wp-content/uploads/2019/11/flower-preloader.png HTTP/1.1
Host: www.conviviopistoia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
Location: https://www.conviviopistoia.it/wordpress/wp-content/uploads/2019/11/flower-preloader.png
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 24 Dec 2022 00:47:02 GMT
Content-Length: 211
cdn.iubenda.com/cs/iubenda_cs.js
138.199.37.225200 OK 528 B URL HTTP/2 cdn.iubenda.com/cs/iubenda_cs.js
IP 138.199.37.225:0
ASN #60068 Datacamp Limited
File type ASCII text, with very long lines (586)
Hash 500b79a84fe913e9f71bbafedc0e3b3a
e462a11b8c409bccb69542790d4a6db543d92318
cb324d01d00689a5624d71803d05c1332a69b5b6b8e05a8a71093e016ff777b8
GET /cs/iubenda_cs.js HTTP/1.1
Host: cdn.iubenda.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.conviviopistoia.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 24 Dec 2022 00:47:22 GMT
content-type: application/javascript
server: BunnyCDN-DE1-1055
cdn-pullzone: 954456
cdn-uid: a7bd0c3f-43db-400a-80e2-073f933f3c99
cdn-requestcountrycode: NO
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=3600
content-encoding: br
etag: "63a5d5fe-136"
last-modified: Fri, 23 Dec 2022 16:23:26 GMT
p3p: CP="DSP NOI COR", policyref="http://www.iubenda.com/w3c/p3p.xml"
cdn-proxyver: 1.03
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 12/23/2022 16:45:51
cdn-edgestorageid: 1055
cdn-status: 200
cdn-requestid: 988117dbaa12f4413e6437f4c67fdd40
cdn-cache: HIT
X-Firefox-Spdy: h2
www.conviviopistoia.it/wp-includes/js/mediaelement/mediaelement-migrate.min.js?ver=6.0.3
149.210.219.75200 OK 1.2 kB URL HTTP/1.1 www.conviviopistoia.it/wp-includes/js/mediaelement/mediaelement-migrate.min.js?ver=6.0.3
IP 149.210.219.75:0
File type ASCII text, with very long lines (1191), with no line terminators
Hash 51300497928562f8c86c7aaba99237cd
e5826832b85c6afc6502b74cbb8ac5394b04c363
6d161e98e47ae150b51211443eef37040fb6269dcf85ad2048548066dca99e6f
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/mediaelement/mediaelement-migrate.min.js?ver=6.0.3 HTTP/1.1
Host: www.conviviopistoia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.conviviopistoia.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: application/javascript
Last-Modified: Tue, 14 Jun 2022 22:31:56 GMT
Accept-Ranges: bytes
ETag: "71bd58d3e80d81:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 24 Dec 2022 00:47:02 GMT
Content-Length: 1191
www.conviviopistoia.it/wp-content/themes/ozeum/skins/default/skin.js
149.210.219.75200 OK 918 B URL HTTP/1.1 www.conviviopistoia.it/wp-content/themes/ozeum/skins/default/skin.js
IP 149.210.219.75:0
Hash c19de053dd5f27a766b90b0e518b61dd
92a372b194d43e181d384bcb3ee4541c1d42f26e
cee67f85ff54c4a4e4066c464bd9be2b7892d5fbc06d33865be5bddd222d2471
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/ozeum/skins/default/skin.js HTTP/1.1
Host: www.conviviopistoia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.conviviopistoia.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: application/javascript
Last-Modified: Thu, 21 Jul 2022 06:05:05 GMT
Accept-Ranges: bytes
ETag: "8b1c83d2c79cd81:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 24 Dec 2022 00:47:02 GMT
Content-Length: 918
www.conviviopistoia.it/wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=3.7.2
149.210.219.75200 OK 5.2 kB URL HTTP/1.1 www.conviviopistoia.it/wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=3.7.2
IP 149.210.219.75:0
File type ASCII text, with very long lines (5141)
Hash 930958dda0b54fccfda768b279927eed
469c65b8c85401b738fe58b71138b2239c75178f
866d4e109d45cc75283a55da524d647bfb8065a7f30ec23759aef9af3b535c71
GET /wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=3.7.2 HTTP/1.1
Host: www.conviviopistoia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.conviviopistoia.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: application/javascript
Last-Modified: Thu, 21 Jul 2022 08:41:31 GMT
Accept-Ranges: bytes
ETag: "e87714addd9cd81:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 24 Dec 2022 00:47:02 GMT
Content-Length: 5184
www.conviviopistoia.it/wp-includes/js/mediaelement/wp-mediaelement.min.js?ver=6.0.3
149.210.219.75200 OK 906 B URL HTTP/1.1 www.conviviopistoia.it/wp-includes/js/mediaelement/wp-mediaelement.min.js?ver=6.0.3
IP 149.210.219.75:0
File type HTML document, ASCII text, with very long lines (906), with no line terminators
Hash 2c6d3b562a48e0df5474999dd47e58fb
945220e990eb176c14e53cc663fb01e04e31b59f
3e6131330963c472b950b8aaf544ba3829735b8ccb103d614ba7793e3a786550
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/mediaelement/wp-mediaelement.min.js?ver=6.0.3 HTTP/1.1
Host: www.conviviopistoia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.conviviopistoia.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: application/javascript
Last-Modified: Thu, 15 Apr 2021 04:42:25 GMT
Accept-Ranges: bytes
ETag: "4d8289bbb131d71:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 24 Dec 2022 00:47:02 GMT
Content-Length: 906
www.conviviopistoia.it/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.6.7
149.210.219.75200 OK 14 kB URL HTTP/1.1 www.conviviopistoia.it/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.6.7
IP 149.210.219.75:0
File type ASCII text, with very long lines (14448)
Hash f7a9fe2494d4fb5b559215de44f8932d
e6f2314d6d1300035cccb8a21d91109b1b98db37
133f35fbfc23c0d8cf814176860427bd6a02da9278de3de662da11d9602d8582
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.6.7 HTTP/1.1
Host: www.conviviopistoia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.conviviopistoia.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: application/javascript
Last-Modified: Thu, 21 Jul 2022 08:49:13 GMT
Accept-Ranges: bytes
ETag: "d99a8ac0de9cd81:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 24 Dec 2022 00:47:02 GMT
Content-Length: 14487
www.conviviopistoia.it/wp-includes/js/dist/i18n.min.js?ver=ebee46757c6a411e38fd079a7ac71d94
149.210.219.75200 OK 10 kB URL HTTP/1.1 www.conviviopistoia.it/wp-includes/js/dist/i18n.min.js?ver=ebee46757c6a411e38fd079a7ac71d94
IP 149.210.219.75:0
Hash f270dd1f483179fdcfb29ce5f91aea13
166661187a97f0b6b685ec4dbdff871e9824168f
1dc4b29dd0acbed77ec2fd81036c33efd4ab5989e8182705a30615a00a0117f7
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/dist/i18n.min.js?ver=ebee46757c6a411e38fd079a7ac71d94 HTTP/1.1
Host: www.conviviopistoia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.conviviopistoia.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: application/javascript
Last-Modified: Tue, 14 Jun 2022 22:31:55 GMT
Accept-Ranges: bytes
ETag: "c7de1e8d3e80d81:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 24 Dec 2022 00:47:02 GMT
Content-Length: 10222
www.conviviopistoia.it/wp-includes/js/dist/hooks.min.js?ver=c6d64f2cb8f5c6bb49caca37f8828ce3
149.210.219.75200 OK 4.9 kB URL HTTP/1.1 www.conviviopistoia.it/wp-includes/js/dist/hooks.min.js?ver=c6d64f2cb8f5c6bb49caca37f8828ce3
IP 149.210.219.75:0
File type ASCII text, with very long lines (4875)
Hash b33ab4d5dcf02436276a717e9d1b7c18
f47b9a9c41b3b11c9dffabca22945727c3ec6566
9bd82960d99b3a76f4af77a88a346bd61f87bac5ff2f385ee28cd669d8f22134
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/dist/hooks.min.js?ver=c6d64f2cb8f5c6bb49caca37f8828ce3 HTTP/1.1
Host: www.conviviopistoia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.conviviopistoia.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: application/javascript
Last-Modified: Tue, 14 Jun 2022 22:31:55 GMT
Accept-Ranges: bytes
ETag: "537b1c8d3e80d81:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 24 Dec 2022 00:47:02 GMT
Content-Length: 4910
hits-i.iubenda.com/write?db=hits1
194.242.11.186204 No Content 0 B URL HTTP/2 hits-i.iubenda.com/write?db=hits1
IP 194.242.11.186:0
ASN #34989 ServeTheWorld AS
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /write?db=hits1 HTTP/1.1
Host: hits-i.iubenda.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 39
Origin: https://www.conviviopistoia.it
Connection: keep-alive
Referer: https://www.conviviopistoia.it/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Sat, 24 Dec 2022 00:47:22 GMT
server: BunnyCDN-NO1-830
cdn-pullzone: 967785
cdn-uid: a7bd0c3f-43db-400a-80e2-073f933f3c99
cdn-requestcountrycode: NO
access-control-allow-headers: Accept, Accept-Encoding, Authorization, Content-Length, Content-Type, X-CSRF-Token, X-HTTP-Method-Override
access-control-allow-methods: DELETE, GET, OPTIONS, POST, PUT
access-control-allow-origin: https://www.conviviopistoia.it
access-control-expose-headers: Date, X-InfluxDB-Version, X-InfluxDB-Build
cache-control: public, max-age=0
request-id: 873a8007-8324-11ed-b2a4-0242ac110002
x-influxdb-build: OSS
x-influxdb-version: 1.8.2
x-request-id: 873a8007-8324-11ed-b2a4-0242ac110002
cdn-proxyver: 1.03
cdn-requestpullsuccess: True
cdn-requestpullcode: 204
cdn-cachedat: 12/24/2022 00:47:22
cdn-edgestorageid: 830
cdn-status: 204
cdn-requestid: e920d98e69e77c1a08e2fc5d3b406c3e
X-Firefox-Spdy: h2
www.conviviopistoia.it/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.6.7
149.210.219.75200 OK 5.0 kB URL HTTP/1.1 www.conviviopistoia.it/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.6.7
IP 149.210.219.75:0
File type ASCII text, with very long lines (4918)
Hash 0981243ad04e7bfb26ef9d4b6070f08e
e89726f738b980c5dcd7cd805011e217e46c2a8c
e31e1cfb470365c46c451ae94f3a5f9bac9df96a0f403f044f851228a5bf1667
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.6.7 HTTP/1.1
Host: www.conviviopistoia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.conviviopistoia.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: application/javascript
Last-Modified: Thu, 21 Jul 2022 08:49:13 GMT
Accept-Ranges: bytes
ETag: "9dfa0c0de9cd81:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 24 Dec 2022 00:47:02 GMT
Content-Length: 4957
www.conviviopistoia.it/wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=3.7.2
149.210.219.75200 OK 21 kB URL HTTP/1.1 www.conviviopistoia.it/wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=3.7.2
IP 149.210.219.75:0
File type ASCII text, with very long lines (21164)
Hash 1f47dbc1f75d579e9d484a7afe98f09f
418502742405dfee45e01633662a7e2f2e974086
a2cebfe3738dbd10570bcfea24eb240323f7f03312fce23f999ecbc9fb3cc6cb
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=3.7.2 HTTP/1.1
Host: www.conviviopistoia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.conviviopistoia.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: application/javascript
Last-Modified: Thu, 21 Jul 2022 08:41:30 GMT
Accept-Ranges: bytes
ETag: "953fdbacdd9cd81:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 24 Dec 2022 00:47:02 GMT
Content-Length: 21207
www.conviviopistoia.it/wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2
149.210.219.75200 OK 12 kB URL HTTP/1.1 www.conviviopistoia.it/wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2
IP 149.210.219.75:0
File type ASCII text, with very long lines (12198), with no line terminators
Hash 3819c3569da71daec283a75483735f7e
ecd40a5cc6f0b76200c454ca880210dc301cfab8
214674cc77aba35ab3567b88e2739fd08e8e96c61d279559ad61874069683ea0
GET /wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2 HTTP/1.1
Host: www.conviviopistoia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.conviviopistoia.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: application/javascript
Last-Modified: Thu, 21 Jul 2022 08:49:15 GMT
Accept-Ranges: bytes
ETag: "1f4a7cc1de9cd81:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 24 Dec 2022 00:47:02 GMT
Content-Length: 12198
www.conviviopistoia.it/wp-includes/js/jquery/ui/core.min.js?ver=1.13.1
149.210.219.75200 OK 21 kB URL HTTP/1.1 www.conviviopistoia.it/wp-includes/js/jquery/ui/core.min.js?ver=1.13.1
IP 149.210.219.75:0
File type Unicode text, UTF-8 text, with very long lines (8189)
Hash 6aaf0a4e8eac131defea126f5b1b5fbf
24da0326af36303e5a1e9799a3c26f7a1077928c
240b702419d6c39ecc4896f0132ccfc9bc517e9aef0c782d99580e0c678b47d5
GET /wp-includes/js/jquery/ui/core.min.js?ver=1.13.1 HTTP/1.1
Host: www.conviviopistoia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.conviviopistoia.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: application/javascript
Last-Modified: Tue, 14 Jun 2022 22:31:55 GMT
Accept-Ranges: bytes
ETag: "1676968d3e80d81:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 24 Dec 2022 00:47:02 GMT
Content-Length: 20715
www.conviviopistoia.it/wp-content/plugins/trx_addons/js/swiper/swiper.min.js
149.210.219.75200 OK 128 kB URL HTTP/1.1 www.conviviopistoia.it/wp-content/plugins/trx_addons/js/swiper/swiper.min.js
IP 149.210.219.75:0
File type ASCII text, with very long lines (65259), with CRLF line terminators
Size 128 kB (127907 bytes)
Hash a64e811ba596db54477a817c615a62ca
5346558222a899bc286600c43b7d90a1b92d04ab
ab501a21d9d52ed3d82c2bb07f4eb51d88125b4001de961a7039ea638f39ec94
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/trx_addons/js/swiper/swiper.min.js HTTP/1.1
Host: www.conviviopistoia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.conviviopistoia.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: application/javascript
Last-Modified: Thu, 21 Jul 2022 09:01:08 GMT
Accept-Ranges: bytes
ETag: "8586bf6ae09cd81:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 24 Dec 2022 00:47:01 GMT
Content-Length: 127907
www.conviviopistoia.it/wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.5.25
149.210.219.75200 OK 392 kB URL HTTP/1.1 www.conviviopistoia.it/wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.5.25
IP 149.210.219.75:0
File type ASCII text, with very long lines (64288)
Size 392 kB (391496 bytes)
Hash acaa3848fdbbde110cc76c503e156937
b5aa976b0e67dbccc22fc4729fa60d61243d0d31
9cf5048c63f35ca8ae2a6b7a3a1a67d3daba46bd1b00ec5760dd99723d87765d
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.5.25 HTTP/1.1
Host: www.conviviopistoia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.conviviopistoia.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: application/javascript
Last-Modified: Thu, 21 Jul 2022 06:06:35 GMT
Accept-Ranges: bytes
ETag: "f7a37b8c89cd81:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 24 Dec 2022 00:47:01 GMT
Content-Length: 391496
www.conviviopistoia.it/wp-content/plugins/elementor/assets/lib/share-link/share-link.min.js?ver=3.6.7
149.210.219.75200 OK 2.6 kB URL HTTP/1.1 www.conviviopistoia.it/wp-content/plugins/elementor/assets/lib/share-link/share-link.min.js?ver=3.6.7
IP 149.210.219.75:0
File type ASCII text, with very long lines (2577)
Hash 9bb8540493a7fe11b229870eb37be165
d77f17cb9057dc8f622b8c0bf23f6acb739b3b8e
4a7ee62eb33f3bbb66c2151e5cac6bf4904e28302efc36128f3e3ccae6fde580
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/elementor/assets/lib/share-link/share-link.min.js?ver=3.6.7 HTTP/1.1
Host: www.conviviopistoia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.conviviopistoia.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: application/javascript
Last-Modified: Thu, 21 Jul 2022 08:49:14 GMT
Accept-Ranges: bytes
ETag: "8efc6dc1de9cd81:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 24 Dec 2022 00:47:02 GMT
Content-Length: 2578
www.conviviopistoia.it/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.6.7
149.210.219.75200 OK 38 kB URL HTTP/1.1 www.conviviopistoia.it/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.6.7
IP 149.210.219.75:0
File type ASCII text, with very long lines (37920)
Hash 6f35d3750be3979cdba82cf143093f9b
5d19dc6041e5c24b5ef205e28f9f607bfa9a03aa
e0f0d6d71e313ae3ee40517ae4df4806d42aacf7720c5c0220506c247796c4f7
GET /wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.6.7 HTTP/1.1
Host: www.conviviopistoia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.conviviopistoia.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: application/javascript
Last-Modified: Thu, 21 Jul 2022 08:49:13 GMT
Accept-Ranges: bytes
ETag: "d99a8ac0de9cd81:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 24 Dec 2022 00:47:02 GMT
Content-Length: 37959
www.conviviopistoia.it/wp-content/plugins/elementor/assets/lib/dialog/dialog.min.js?ver=4.9.0
149.210.219.75200 OK 11 kB URL HTTP/1.1 www.conviviopistoia.it/wp-content/plugins/elementor/assets/lib/dialog/dialog.min.js?ver=4.9.0
IP 149.210.219.75:0
File type ASCII text, with very long lines (10544)
Hash 4eee50ac6f4f364ba3a284d0753ddae3
a8e7e824e6824ae0b370ff36e2c07ca07276fae0
b936db5880aa9b6b2f26a8d32fc2b689fb75f69d971b94194f16dba801221ffe
GET /wp-content/plugins/elementor/assets/lib/dialog/dialog.min.js?ver=4.9.0 HTTP/1.1
Host: www.conviviopistoia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.conviviopistoia.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: application/javascript
Last-Modified: Thu, 21 Jul 2022 08:49:13 GMT
Accept-Ranges: bytes
ETag: "fadbfc0de9cd81:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 24 Dec 2022 00:47:02 GMT
Content-Length: 10682
www.conviviopistoia.it/wp-content/plugins/elementor-pro/assets/lib/sticky/jquery.sticky.min.js?ver=3.7.2
149.210.219.75200 OK 3.2 kB URL HTTP/1.1 www.conviviopistoia.it/wp-content/plugins/elementor-pro/assets/lib/sticky/jquery.sticky.min.js?ver=3.7.2
IP 149.210.219.75:0
File type ASCII text, with very long lines (3235)
Hash dbe4b3628220901277c0c4234475e5cb
c17291130bc11a7f39ce70fe869bf82946e7be8b
10a2cf3d16091fbc89cc987160b62093515cd31f0762a751775999311c7313f4
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/elementor-pro/assets/lib/sticky/jquery.sticky.min.js?ver=3.7.2 HTTP/1.1
Host: www.conviviopistoia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.conviviopistoia.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: application/javascript
Last-Modified: Thu, 21 Jul 2022 08:41:31 GMT
Accept-Ranges: bytes
ETag: "6ab745addd9cd81:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 24 Dec 2022 00:47:02 GMT
Content-Length: 3236
www.conviviopistoia.it/wp-content/plugins/elementor/assets/js/preloaded-modules.min.js?ver=3.6.7
149.210.219.75200 OK 43 kB URL HTTP/1.1 www.conviviopistoia.it/wp-content/plugins/elementor/assets/js/preloaded-modules.min.js?ver=3.6.7
IP 149.210.219.75:0
File type ASCII text, with very long lines (43069)
Hash e9f06623025f03ff3cbc16e6b3a67ed9
81d22815127a8ee3c2e637e78acd874d9152b15b
97d32475326d3e98970d7d253c023f9f74979d74c6a39a98c6b4a5aca290f4cf
GET /wp-content/plugins/elementor/assets/js/preloaded-modules.min.js?ver=3.6.7 HTTP/1.1
Host: www.conviviopistoia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.conviviopistoia.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: application/javascript
Last-Modified: Thu, 21 Jul 2022 08:49:13 GMT
Accept-Ranges: bytes
ETag: "722394c0de9cd81:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 24 Dec 2022 00:47:02 GMT
Content-Length: 43108
www.conviviopistoia.it/wp-content/plugins/trx_addons/js/tweenmax/tweenmax.min.js
149.210.219.75200 OK 116 kB URL HTTP/1.1 www.conviviopistoia.it/wp-content/plugins/trx_addons/js/tweenmax/tweenmax.min.js
IP 149.210.219.75:0
File type ASCII text, with very long lines (32005), with CRLF line terminators
Size 116 kB (116090 bytes)
Hash e6215c2a4e1cbb3c67bc41dff7105e45
f7a1f16d6d8195c42ae0245a520ef23cffa022c1
081bcc2d88c3606f5b69969219371e465baf5caa114837e300f4c8e88f8822db
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/trx_addons/js/tweenmax/tweenmax.min.js HTTP/1.1
Host: www.conviviopistoia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.conviviopistoia.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: application/javascript
Last-Modified: Thu, 21 Jul 2022 09:01:08 GMT
Accept-Ranges: bytes
ETag: "badc66ae09cd81:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 24 Dec 2022 00:47:02 GMT
Content-Length: 116090
www.conviviopistoia.it/wp-content/themes/ozeum/css/font-icons/font/fontello.woff2?52030107
149.210.219.75200 OK 78 kB URL HTTP/1.1 www.conviviopistoia.it/wp-content/themes/ozeum/css/font-icons/font/fontello.woff2?52030107
IP 149.210.219.75:0
File type Web Open Font Format (Version 2), TrueType, length 78292, version 1.0\012- data
Hash ca94624ac6b72bc0b77abf9e6e5a7a8a
578ac8e9f512c585453214b6f87cbd63a9a4f0f5
365007b2fdfbfeaf67686e09dddc30a864edf0cc007255e409f3abf174cc16a9
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/ozeum/css/font-icons/font/fontello.woff2?52030107 HTTP/1.1
Host: www.conviviopistoia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.conviviopistoia.it/wp-content/themes/ozeum/css/font-icons/css/fontello.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: font/x-woff2
Last-Modified: Thu, 21 Jul 2022 06:05:01 GMT
Accept-Ranges: bytes
ETag: "32212fd0c79cd81:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 24 Dec 2022 00:47:02 GMT
Content-Length: 78292
fonts.googleapis.com/css?family=Cardo:400,400italic,700&subset=latin,latin-ext
142.250.74.106200 OK 15 kB URL HTTP/2 fonts.googleapis.com/css?family=Cardo:400,400italic,700&subset=latin,latin-ext
IP 142.250.74.106:0
Hash 09b65ccd2d0ea46aed382e61be5a8c4f
d9f56e26118de05b5692777a11a5e104b7f19099
44de8ecc2bf45c7b012b6048ff8a9acbce6e605dc38a211fc757f31e396eaaac
GET /css?family=Cardo:400,400italic,700&subset=latin,latin-ext HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.conviviopistoia.it/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 24 Dec 2022 00:47:22 GMT
date: Sat, 24 Dec 2022 00:47:22 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.conviviopistoia.it/wp-content/themes/ozeum/skins/default/css/font-face/Metropolis/metropolis-regular-webfont.woff2
149.210.219.75200 OK 15 kB URL HTTP/1.1 www.conviviopistoia.it/wp-content/themes/ozeum/skins/default/css/font-face/Metropolis/metropolis-regular-webfont.woff2
IP 149.210.219.75:0
File type Web Open Font Format (Version 2), TrueType, length 14584, version 1.0\012- data
Hash 316fdaf2c765e0464e27de77b7420f01
2d267cfdc19fba0c8f5df29e7d8bb268a7970696
ab35cf932610490b2b2e4dc1a03adf2c74d18459154a7956ca3aadd96e25e7bd
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/ozeum/skins/default/css/font-face/Metropolis/metropolis-regular-webfont.woff2 HTTP/1.1
Host: www.conviviopistoia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.conviviopistoia.it/wp-content/themes/ozeum/skins/default/css/font-face/Metropolis/stylesheet.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: font/x-woff2
Last-Modified: Thu, 21 Jul 2022 06:05:04 GMT
Accept-Ranges: bytes
ETag: "f1c8e9d1c79cd81:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 24 Dec 2022 00:47:02 GMT
Content-Length: 14584
www.conviviopistoia.it/wp-content/themes/ozeum/skins/default/css/font-face/Metropolis/metropolis-semibold-webfont.woff2
149.210.219.75200 OK 15 kB URL HTTP/1.1 www.conviviopistoia.it/wp-content/themes/ozeum/skins/default/css/font-face/Metropolis/metropolis-semibold-webfont.woff2
IP 149.210.219.75:0
File type Web Open Font Format (Version 2), TrueType, length 15104, version 1.0\012- data
Hash 89c819cf42ef96683a3022617855fb11
1f364859e560582da2a4cbf282d9afc888b60a00
87d77320c2a8ff68ccb3ef88ec40c3fb6bbec8ba4cd05db507f3e406a6500de5
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/ozeum/skins/default/css/font-face/Metropolis/metropolis-semibold-webfont.woff2 HTTP/1.1
Host: www.conviviopistoia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.conviviopistoia.it/wp-content/themes/ozeum/skins/default/css/font-face/Metropolis/stylesheet.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: font/x-woff2
Last-Modified: Thu, 21 Jul 2022 06:05:04 GMT
Accept-Ranges: bytes
ETag: "ab8ceed1c79cd81:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 24 Dec 2022 00:47:02 GMT
Content-Length: 15104
www.conviviopistoia.it/wp-content/themes/ozeum/skins/default/css/font-face/Metropolis/metropolis-bold-webfont.woff2
149.210.219.75200 OK 15 kB URL HTTP/1.1 www.conviviopistoia.it/wp-content/themes/ozeum/skins/default/css/font-face/Metropolis/metropolis-bold-webfont.woff2
IP 149.210.219.75:0
File type Web Open Font Format (Version 2), TrueType, length 14792, version 1.0\012- data
Hash a7d5f9c44c9ab8376a1387e13038e781
fd51de1339c3d77548711864b9a5c1465969272e
c5f00a1c3c31dc3d844988ae1b89d7ece8b386a1b040a354e9f4f4e5d4607f24
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/ozeum/skins/default/css/font-face/Metropolis/metropolis-bold-webfont.woff2 HTTP/1.1
Host: www.conviviopistoia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.conviviopistoia.it/wp-content/themes/ozeum/skins/default/css/font-face/Metropolis/stylesheet.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: font/x-woff2
Last-Modified: Thu, 21 Jul 2022 06:05:04 GMT
Accept-Ranges: bytes
ETag: "e6c0d1d1c79cd81:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 24 Dec 2022 00:47:02 GMT
Content-Length: 14792
www.conviviopistoia.it/wp-content/themes/ozeum/skins/default/css/font-face/Metropolis/metropolis-extrabolditalic-webfont.woff2
149.210.219.75200 OK 16 kB URL HTTP/1.1 www.conviviopistoia.it/wp-content/themes/ozeum/skins/default/css/font-face/Metropolis/metropolis-extrabolditalic-webfont.woff2
IP 149.210.219.75:0
File type Web Open Font Format (Version 2), TrueType, length 16172, version 1.0\012- data
Hash 82ec4d148953bd546fed994b7cab6043
9bbb3be8dbe9a52b9e8ff8f2e3bbd4ead128ab66
b89bbeedfde3057ec91a8dddc928c42d6c71c651d85e7b08f9f1864195e5d853
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/ozeum/skins/default/css/font-face/Metropolis/metropolis-extrabolditalic-webfont.woff2 HTTP/1.1
Host: www.conviviopistoia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.conviviopistoia.it/wp-content/themes/ozeum/skins/default/css/font-face/Metropolis/stylesheet.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: font/x-woff2
Last-Modified: Thu, 21 Jul 2022 06:05:04 GMT
Accept-Ranges: bytes
ETag: "6e8d8d1c79cd81:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 24 Dec 2022 00:47:02 GMT
Content-Length: 16172
www.conviviopistoia.it/wp-content/uploads/2022/10/banner-370x208.jpg
149.210.219.75200 OK 46 kB URL HTTP/1.1 www.conviviopistoia.it/wp-content/uploads/2022/10/banner-370x208.jpg
IP 149.210.219.75:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v90), quality = 95", baseline, precision 8, 370x208, components 3\012- data
Hash 6aa7eb9ed92b66e5fd490798e6ef8c4f
df64e7a53af859070d14feb4d0a792257ff63b4f
48957969d373fa8a9d82673b2969c8f575617f89cfa587bfa2406138cf97f3dd
GET /wp-content/uploads/2022/10/banner-370x208.jpg HTTP/1.1
Host: www.conviviopistoia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.conviviopistoia.it/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: image/jpeg
Last-Modified: Sat, 08 Oct 2022 23:53:59 GMT
Accept-Ranges: bytes
ETag: "70c7113c71dbd81:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 24 Dec 2022 00:47:02 GMT
Content-Length: 46004
www.conviviopistoia.it/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-brands-400.woff2
149.210.219.75200 OK 77 kB URL HTTP/1.1 www.conviviopistoia.it/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-brands-400.woff2
IP 149.210.219.75:0
File type Web Open Font Format (Version 2), TrueType, length 76764, version 331.-31261\012- data
Hash f7307680c7fe85959f3ecf122493ea7d
fce0da592a3e536d6d5df5b50cb513398d8c5161
43c072c16c9ee6d67acdfa6c6d6685ff1e74eb4237b7cc3c1348ab1c108b26af
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-brands-400.woff2 HTTP/1.1
Host: www.conviviopistoia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.conviviopistoia.it/wp-content/plugins/elementor/assets/lib/font-awesome/css/brands.min.css?ver=5.15.3
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: font/x-woff2
Last-Modified: Thu, 21 Jul 2022 08:49:14 GMT
Accept-Ranges: bytes
ETag: "e55939c1de9cd81:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 24 Dec 2022 00:47:02 GMT
Content-Length: 76764
www.conviviopistoia.it/wp-content/plugins/revslider/public/assets/assets/dummy.png
149.210.219.75200 OK 68 B URL HTTP/1.1 www.conviviopistoia.it/wp-content/plugins/revslider/public/assets/assets/dummy.png
IP 149.210.219.75:0
File type PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced\012- data
Hash 2a637d3d825673c0e3462fa4ed9a1c5c
81668d396da22832d75a986407ff10035e0d5899
69539b5b3777cffda28a66d7f2aa9b17c91ee1ec8fd50c00c442af91753a60f7
GET /wp-content/plugins/revslider/public/assets/assets/dummy.png HTTP/1.1
Host: www.conviviopistoia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.conviviopistoia.it/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: image/png
Last-Modified: Thu, 21 Jul 2022 06:06:23 GMT
Accept-Ranges: bytes
ETag: "82cff60c89cd81:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 24 Dec 2022 00:47:02 GMT
Content-Length: 68
www.conviviopistoia.it/wordpress/wp-content/uploads/2020/07/Logo-Convivio-Scritta-bianco.png
149.210.219.75200 OK 137 kB URL HTTP/1.1 www.conviviopistoia.it/wordpress/wp-content/uploads/2020/07/Logo-Convivio-Scritta-bianco.png
IP 149.210.219.75:0
File type PNG image data, 1040 x 301, 8-bit/color RGBA, non-interlaced\012- data
Size 137 kB (137277 bytes)
Hash 887d99ab227fa2fc9fcea52db698e6a9
67d81c054ec5290506ad411015a6a88615b5efa8
a37dbb9b436bdb6b1f23cead4d154d32df2512e514de5857f5501eebaac3fd11
GET /wordpress/wp-content/uploads/2020/07/Logo-Convivio-Scritta-bianco.png HTTP/1.1
Host: www.conviviopistoia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.conviviopistoia.it/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: image/png
Last-Modified: Fri, 24 Jul 2020 20:46:54 GMT
Accept-Ranges: bytes
ETag: "913f5b90fb61d61:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 24 Dec 2022 00:47:02 GMT
Content-Length: 137277
www.conviviopistoia.it/wp-content/uploads/elementor/thumbs/donchischotte-peez5ntld1lolfip9za2xi5qflvwfjd6ho3nbxxg06.png
149.210.219.75200 OK 29 kB URL HTTP/1.1 www.conviviopistoia.it/wp-content/uploads/elementor/thumbs/donchischotte-peez5ntld1lolfip9za2xi5qflvwfjd6ho3nbxxg06.png
IP 149.210.219.75:0
File type PNG image data, 200 x 263, 8-bit/color RGBA, non-interlaced\012- data
Hash 32977be937665619ac0e8ddb213634df
60868983ad55641ba959a84886d18d8f08050e01
dea20a6497309cb98417ed7ddbce3a2ad5157088df97d077313b27f69b9fb9cb
GET /wp-content/uploads/elementor/thumbs/donchischotte-peez5ntld1lolfip9za2xi5qflvwfjd6ho3nbxxg06.png HTTP/1.1
Host: www.conviviopistoia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.conviviopistoia.it/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: image/png
Last-Modified: Fri, 29 Jul 2022 09:53:49 GMT
Accept-Ranges: bytes
ETag: "6742641a31a3d81:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 24 Dec 2022 00:47:02 GMT
Content-Length: 29386
www.conviviopistoia.it/wordpress/wp-content/uploads/2020/07/DSC_0442-HDR_ED-fuorcivitas-provvisoria-2.jpg
149.210.219.75200 OK 319 kB URL HTTP/1.1 www.conviviopistoia.it/wordpress/wp-content/uploads/2020/07/DSC_0442-HDR_ED-fuorcivitas-provvisoria-2.jpg
IP 149.210.219.75:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=8, manufacturer=NIKON CORPORATION, model=NIKON D3200, xresolution=140, yresolution=148, resolutionunit=2, software=Adobe Photoshop Lightroom Classic 8.2.1 (Windows), datetime=2020:07:07 20:05:27], baseline, precision 8, 1600x910, components 3\012- data
Size 319 kB (319101 bytes)
Hash 187b02e08a1e7a9e37eae98607bd674f
963e93335865baa6c78d601e510dc130c91586a9
0ed64da7cf1c6291f0c05afcc0f80aa93daa88d95fc0b1abfa06588fb811964b
GET /wordpress/wp-content/uploads/2020/07/DSC_0442-HDR_ED-fuorcivitas-provvisoria-2.jpg HTTP/1.1
Host: www.conviviopistoia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.conviviopistoia.it/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: image/jpeg
Last-Modified: Fri, 24 Jul 2020 20:46:51 GMT
Accept-Ranges: bytes
ETag: "2841f8ffb61d61:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 24 Dec 2022 00:47:02 GMT
Content-Length: 319101
www.conviviopistoia.it/wp-content/uploads/2020/07/DSC_0742-2-1536x1021.jpg
149.210.219.75200 OK 285 kB URL HTTP/1.1 www.conviviopistoia.it/wp-content/uploads/2020/07/DSC_0742-2-1536x1021.jpg
IP 149.210.219.75:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1536x1021, components 3\012- data
Size 285 kB (285036 bytes)
Hash 83d62a2c79c74f52fbb9b5cb0c9c9f6d
12991976c432e9d276af0e6b3b9aea262684d2e6
f44e3dbc14e482213e96fb9ebe99efdc60c7b6d7fa69ede323c4a49dc058d879
GET /wp-content/uploads/2020/07/DSC_0742-2-1536x1021.jpg HTTP/1.1
Host: www.conviviopistoia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.conviviopistoia.it/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: image/jpeg
Last-Modified: Fri, 24 Jul 2020 20:46:51 GMT
Accept-Ranges: bytes
ETag: "86a2118ffb61d61:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 24 Dec 2022 00:47:02 GMT
Content-Length: 285036
www.conviviopistoia.it/wp-content/uploads/2020/07/DSC_0811-2-1536x1024.jpg
149.210.219.75200 OK 1.0 MB URL HTTP/1.1 www.conviviopistoia.it/wp-content/uploads/2020/07/DSC_0811-2-1536x1024.jpg
IP 149.210.219.75:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1536x1024, components 3\012- data
Size 1.0 MB (1022586 bytes)
Hash 274a7495bf2153b38e417d21c027524e
f3c5ba47d02d9589025e35ec75c2b7f13b828370
8b3b52deaa7c37d9a10abfe82271f366c25042865847fe4a262bf683d083acaf
GET /wp-content/uploads/2020/07/DSC_0811-2-1536x1024.jpg HTTP/1.1
Host: www.conviviopistoia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.conviviopistoia.it/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: image/jpeg
Last-Modified: Fri, 24 Jul 2020 20:46:51 GMT
Accept-Ranges: bytes
ETag: "832c1b8ffb61d61:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 24 Dec 2022 00:47:02 GMT
Content-Length: 1022586
www.conviviopistoia.it/wordpress/wp-content/uploads/2020/07/DSC_0100-HDR_stitchPERSP_ED-2.jpg
149.210.219.75200 OK 339 kB URL HTTP/1.1 www.conviviopistoia.it/wordpress/wp-content/uploads/2020/07/DSC_0100-HDR_stitchPERSP_ED-2.jpg
IP 149.210.219.75:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, xresolution=86, yresolution=94, resolutionunit=2, software=Adobe Photoshop Lightroom Classic 8.2.1 (Windows), datetime=2020:07:07 20:05:31], baseline, precision 8, 1600x882, components 3\012- data
Size 339 kB (339246 bytes)
Hash af1b1d00ec5b4e9354caab1e3903fa4b
6a935407c0e9f4b8ef13229809b1d58034b86724
211ae4eb936ac9a8e0756f3a7e1040e6f137d1c7b7bad06b35a5d17ee147eb12
GET /wordpress/wp-content/uploads/2020/07/DSC_0100-HDR_stitchPERSP_ED-2.jpg HTTP/1.1
Host: www.conviviopistoia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.conviviopistoia.it/
Cookie: trx_addons_is_retina=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: image/jpeg
Last-Modified: Fri, 24 Jul 2020 20:46:51 GMT
Accept-Ranges: bytes
ETag: "c66af78efb61d61:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 24 Dec 2022 00:47:03 GMT
Content-Length: 339246
www.conviviopistoia.it/wp-content/uploads/2020/07/DSC_8824_stitchCYL_ED2-2-1536x1024.jpg
149.210.219.75200 OK 429 kB URL HTTP/1.1 www.conviviopistoia.it/wp-content/uploads/2020/07/DSC_8824_stitchCYL_ED2-2-1536x1024.jpg
IP 149.210.219.75:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1536x1024, components 3\012- data
Size 429 kB (428681 bytes)
Hash 1f0b7c25d61a8eab314744c79560e00d
cc49f2225024540b209903b82752fb1ca9f2ebab
4fe3ad840f34a2e6aff75236ab1f541757d9885f39add98cd87eea053baca2cf
GET /wp-content/uploads/2020/07/DSC_8824_stitchCYL_ED2-2-1536x1024.jpg HTTP/1.1
Host: www.conviviopistoia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.conviviopistoia.it/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: image/jpeg
Last-Modified: Fri, 24 Jul 2020 20:46:51 GMT
Accept-Ranges: bytes
ETag: "56f11f8ffb61d61:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 24 Dec 2022 00:47:02 GMT
Content-Length: 428681
fonts.gstatic.com/s/cardo/v19/wlpygwjKBV1pqhND-ZQW-WM.woff2
216.58.207.227200 OK 19 kB URL HTTP/2 fonts.gstatic.com/s/cardo/v19/wlpygwjKBV1pqhND-ZQW-WM.woff2
IP 216.58.207.227:0
File type Web Open Font Format (Version 2), TrueType, length 18852, version 1.0\012- data
Hash d9e893c50be9ed3984ff4db3855a55d2
266ef42ca77fc0863bfd1ee1f0a5e553a57383ca
f94a0b25ed421e6643ca8ae21ccd63cf5630e8db8a3b64f63a669936d068c427
GET /s/cardo/v19/wlpygwjKBV1pqhND-ZQW-WM.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.conviviopistoia.it
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 18852
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 20 Dec 2022 15:49:21 GMT
expires: Wed, 20 Dec 2023 15:49:21 GMT
cache-control: public, max-age=31536000
age: 291483
last-modified: Thu, 21 Apr 2022 17:09:00 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.conviviopistoia.it/wp-content/uploads/2020/07/cropped-logo-32x32.png
149.210.219.75200 OK 2.8 kB URL HTTP/1.1 www.conviviopistoia.it/wp-content/uploads/2020/07/cropped-logo-32x32.png
IP 149.210.219.75:0
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash d7cb4016135e22ff1414ddbe4bc31f04
316f9d85415c08e6d704b5bc704c11cd549cc0a5
31691b1b43f1ea0f80f0755cfaa9f2ffcc83be7470ed7614dea45c6fece5c250
GET /wp-content/uploads/2020/07/cropped-logo-32x32.png HTTP/1.1
Host: www.conviviopistoia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.conviviopistoia.it/
Cookie: trx_addons_is_retina=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: image/png
Last-Modified: Fri, 24 Jul 2020 20:46:54 GMT
Accept-Ranges: bytes
ETag: "cf676290fb61d61:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 24 Dec 2022 00:47:03 GMT
Content-Length: 2789
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash f37c9faffd8b6d93a4994c02ff1d3d21
b41b823e9b33d7fff8c1670cf510edda28f7082b
7494a95cab50f2a0409796d95e999fc5add96030fba70be912c1c80124169bc6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 24 Dec 2022 00:47:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.conviviopistoia.it/wp-content/uploads/2020/07/cropped-logo-192x192.png
149.210.219.75200 OK 62 kB URL HTTP/1.1 www.conviviopistoia.it/wp-content/uploads/2020/07/cropped-logo-192x192.png
IP 149.210.219.75:0
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Hash 31ed86cd226ec4dcc026b777e8d9e83c
06b90626f77f905842f9d24ae1ec86ecd7f16bc3
a307eae2025332ccc8c6c956233be42df6a3def698d5d786856a75ced2f4f926
GET /wp-content/uploads/2020/07/cropped-logo-192x192.png HTTP/1.1
Host: www.conviviopistoia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.conviviopistoia.it/
Cookie: trx_addons_is_retina=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: image/png
Last-Modified: Fri, 24 Jul 2020 20:46:54 GMT
Accept-Ranges: bytes
ETag: "cf676290fb61d61:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 24 Dec 2022 00:47:03 GMT
Content-Length: 62522
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash f37c9faffd8b6d93a4994c02ff1d3d21
b41b823e9b33d7fff8c1670cf510edda28f7082b
7494a95cab50f2a0409796d95e999fc5add96030fba70be912c1c80124169bc6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 24 Dec 2022 00:47:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9b8b6b6f-05a3-4eb5-804c-574c03992933.jpeg
34.120.237.76200 OK 8.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9b8b6b6f-05a3-4eb5-804c-574c03992933.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8a63236113546a7bfb369d741c2b76e2
737f6730f63deff51a39ef094fa1a263b91db89b
b811838126a7d3e814415c3b869f9f224361ef468c08c4c7d5e385371149263a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9b8b6b6f-05a3-4eb5-804c-574c03992933.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 8078
x-amzn-requestid: 0fa11c0d-584a-4790-83fe-d10780dd6df9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dnncXGjDIAMFvfg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a61f82-452f8acd148122756a8f0230;Sampled=0
x-amzn-remapped-date: Fri, 23 Dec 2022 21:37:06 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: ZsYREhlLzv_oHiB1qgGuelsC8t99SUMILEGgU42tKWeugQUU5iFgBA==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 a3bd0eb50c22e4d5fbda56a30b96002c.cloudfront.net (CloudFront), 1.1 google
date: Fri, 23 Dec 2022 21:47:42 GMT
age: 10783
etag: "737f6730f63deff51a39ef094fa1a263b91db89b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.conviviopistoia.it/wp-includes/js/jquery/jquery.min.js?ver=3.6.0
149.210.219.75200 OK 0 B URL HTTP/1.1 www.conviviopistoia.it/wp-includes/js/jquery/jquery.min.js?ver=3.6.0
IP 149.210.219.75:0
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.0 HTTP/1.1
Host: www.conviviopistoia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.conviviopistoia.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: application/javascript
Last-Modified: Wed, 24 Nov 2021 15:47:06 GMT
Accept-Ranges: bytes
ETag: "2fed97884ae1d71:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 24 Dec 2022 00:47:01 GMT
Content-Length: 89521
www.conviviopistoia.it/wp-content/plugins/elementor/assets/lib/swiper/swiper.min.js?ver=5.3.6
149.210.219.75200 OK 0 B URL HTTP/1.1 www.conviviopistoia.it/wp-content/plugins/elementor/assets/lib/swiper/swiper.min.js?ver=5.3.6
IP 149.210.219.75:0
GET /wp-content/plugins/elementor/assets/lib/swiper/swiper.min.js?ver=5.3.6 HTTP/1.1
Host: www.conviviopistoia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.conviviopistoia.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: application/javascript
Last-Modified: Thu, 21 Jul 2022 08:49:14 GMT
Accept-Ranges: bytes
ETag: "11c172c1de9cd81:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 24 Dec 2022 00:47:02 GMT
Content-Length: 139153
fonts.googleapis.com/css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=auto&ver=6.0.3
142.250.74.106200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=auto&ver=6.0.3
IP 142.250.74.106:0
GET /css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=auto&ver=6.0.3 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.conviviopistoia.it/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 24 Dec 2022 00:47:22 GMT
date: Sat, 24 Dec 2022 00:47:22 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.youtube.com/iframe_api
142.250.74.78200 OK 0 B URL HTTP/2 www.youtube.com/iframe_api
IP 142.250.74.78:0
GET /iframe_api HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.conviviopistoia.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
x-content-type-options: nosniff
expires: Sat, 24 Dec 2022 00:47:24 GMT
date: Sat, 24 Dec 2022 00:47:24 GMT
cache-control: private, max-age=0
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=31536000
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube_main"
report-to: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
content-encoding: br
server: ESF
x-xss-protection: 0
set-cookie: YSC=1nOcR_-pwSg; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_INFO1_LIVE=IbIZaKtielM; Domain=.youtube.com; Expires=Thu, 22-Jun-2023 00:47:24 GMT; Path=/; Secure; HttpOnly; SameSite=none
CONSENT=PENDING+153; expires=Mon, 23-Dec-2024 00:47:24 GMT; path=/; domain=.youtube.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Roboto:400%7CCardo:700%7COpen+Sans:700%2C600&display=swap
142.250.74.106200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Roboto:400%7CCardo:700%7COpen+Sans:700%2C600&display=swap
IP 142.250.74.106:0
GET /css?family=Roboto:400%7CCardo:700%7COpen+Sans:700%2C600&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.conviviopistoia.it/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 24 Dec 2022 00:47:22 GMT
date: Sat, 24 Dec 2022 00:47:22 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Cardo%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=auto&ver=6.0.3
142.250.74.106200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Cardo%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=auto&ver=6.0.3
IP 142.250.74.106:0
GET /css?family=Cardo%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=auto&ver=6.0.3 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.conviviopistoia.it/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 24 Dec 2022 00:47:22 GMT
date: Sat, 24 Dec 2022 00:47:22 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2