zerossl.ocsp.sectigo.com/
104.18.38.233 727 B URL zerossl.ocsp.sectigo.com/
IP 104.18.38.233:0
Hash 3b7b6c1baf27fbc265b93fd75477c9ed
0d28820cb934bd3d49c293620c2b91df3cf627e4
8a19055451db210f844dc5ad0f84897426d63dc58a01663bb3124702ed0cf40f
POST / HTTP/1.1
Host: zerossl.ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 08 Dec 2023 04:23:52 GMT
Content-Type: application/ocsp-response
Content-Length: 727
Connection: keep-alive
Last-Modified: Wed, 06 Dec 2023 06:05:33 GMT
Expires: Wed, 13 Dec 2023 06:05:32 GMT
Etag: "0d28820cb934bd3d49c293620c2b91df3cf627e4"
Cache-Control: max-age=437499,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 83223c467d8d09b4-ARN
mukhtargroup.co.in/mobile?123
184.168.115.155 246 B URL mukhtargroup.co.in/mobile?123
IP 184.168.115.155:0
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 03083c847f91709bc5d6a9d41987eb29
b8066526bc34f67cbbc2e4f4ff6efda131a3aba6
002845db97a72117c13c1adb1d665df21186e0c215bbbcfd60f35b03fa20b0a7
Analyzer Verdict Alert OpenPhish phishing DHL Airways, Inc.
GET /mobile?123 HTTP/1.1
Host: mukhtargroup.co.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
location: https://mukhtargroup.co.in/mobile/?123
content-length: 246
content-type: text/html; charset=iso-8859-1
date: Fri, 08 Dec 2023 04:23:52 GMT
server: Apache
X-Firefox-Spdy: h2
mukhtargroup.co.in/mobile/?123
184.168.115.155 90 B URL mukhtargroup.co.in/mobile/?123
IP 184.168.115.155:0
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type HTML document, ASCII text
Hash 3fd7ca441b11252d50ae445d08889a0a
4756ad9f1601329f978d550a9e95f44f5c230d7d
bbefad79758dba1403377118787aeb11fbf8111bcee8430c2defa785cf239bcc
GET /mobile/?123 HTTP/1.1
Host: mukhtargroup.co.in
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 07 Dec 2023 14:12:59 GMT
etag: "50c0256-68-60bec109a9a74-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 90
content-type: text/html
date: Fri, 08 Dec 2023 04:23:52 GMT
server: Apache
X-Firefox-Spdy: h2
pagareperiltuopacco.info.gf/avanti
20.208.132.93301 Moved Permanently 251 B URL User Request GET HTTP/1.1 pagareperiltuopacco.info.gf/avanti
IP 20.208.132.93:443
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerLet's Encrypt
Subjectpagareperiltuopacco.info.gf
Fingerprint58:8A:49:BE:76:0C:09:0B:E5:C5:8E:80:EB:60:AE:97:3B:4B:09:E8
ValidityThu, 07 Dec 2023 09:19:04 GMT - Wed, 06 Mar 2024 09:19:03 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 8d34195838f33ede44691861d1bf63e2
a28ec4b3a344f6ca9457c6ec696fd97d349d8c8c
bd98bcdda7863ce00bd5b8d6a7ba8d7c174a66083fa365e0eaffde27aaf808d3
Analyzer Verdict Alert urlquery phishing Phishing - DHL
OpenPhish phishing DHL Airways, Inc.
GET /avanti HTTP/1.1
Host: pagareperiltuopacco.info.gf
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mukhtargroup.co.in/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Fri, 08 Dec 2023 04:23:53 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.4.33
Location: https://pagareperiltuopacco.info.gf/avanti/
Content-Length: 251
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
pagareperiltuopacco.info.gf/avanti/
20.208.132.93302 Found 0 B URL User Request GET HTTP/1.1 pagareperiltuopacco.info.gf/avanti/
IP 20.208.132.93:443
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerLet's Encrypt
Subjectpagareperiltuopacco.info.gf
Fingerprint58:8A:49:BE:76:0C:09:0B:E5:C5:8E:80:EB:60:AE:97:3B:4B:09:E8
ValidityThu, 07 Dec 2023 09:19:04 GMT - Wed, 06 Mar 2024 09:19:03 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert urlquery phishing Phishing - DHL
GET /avanti/ HTTP/1.1
Host: pagareperiltuopacco.info.gf
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://mukhtargroup.co.in/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Date: Fri, 08 Dec 2023 04:23:53 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.4.33
X-Powered-By: PHP/7.4.33
Set-Cookie: PHPSESSID=3fv2ato52poli7neqg382q2c0n; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Location: tracking/?pwd=dhl
Content-Length: 0
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
pagareperiltuopacco.info.gf/avanti/tracking/?pwd=dhl
20.208.132.93302 Found 0 B URL User Request GET HTTP/1.1 pagareperiltuopacco.info.gf/avanti/tracking/?pwd=dhl
IP 20.208.132.93:443
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerLet's Encrypt
Subjectpagareperiltuopacco.info.gf
Fingerprint58:8A:49:BE:76:0C:09:0B:E5:C5:8E:80:EB:60:AE:97:3B:4B:09:E8
ValidityThu, 07 Dec 2023 09:19:04 GMT - Wed, 06 Mar 2024 09:19:03 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert urlquery phishing Phishing - DHL
GET /avanti/tracking/?pwd=dhl HTTP/1.1
Host: pagareperiltuopacco.info.gf
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://mukhtargroup.co.in/
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=3fv2ato52poli7neqg382q2c0n
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Date: Fri, 08 Dec 2023 04:23:55 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.4.33
X-Powered-By: PHP/7.4.33
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Location: fV5EjH/msg.php?id=52286723
Content-Length: 0
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
pagareperiltuopacco.info.gf/avanti/tracking/fV5EjH/msg.php?id=52286723
20.208.132.93200 OK 9.4 kB URL User Request GET HTTP/1.1 pagareperiltuopacco.info.gf/avanti/tracking/fV5EjH/msg.php?id=52286723
IP 20.208.132.93:443
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerLet's Encrypt
Subjectpagareperiltuopacco.info.gf
Fingerprint58:8A:49:BE:76:0C:09:0B:E5:C5:8E:80:EB:60:AE:97:3B:4B:09:E8
ValidityThu, 07 Dec 2023 09:19:04 GMT - Wed, 06 Mar 2024 09:19:03 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ISO-8859 text, with CRLF line terminators
Hash 6d74094cada1b2d67ce0dcc14270f82c
f201495d7309b4ca79e726951db42d4feec9ed79
e75de4f895ca2912f4d2e4aa79bdea09d638542dd4dc9b6c6e44314d68f52adf
Analyzer Verdict Alert urlquery phishing Phishing - DHL
GET /avanti/tracking/fV5EjH/msg.php?id=52286723 HTTP/1.1
Host: pagareperiltuopacco.info.gf
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://mukhtargroup.co.in/
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=3fv2ato52poli7neqg382q2c0n
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 08 Dec 2023 04:23:55 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.4.33
X-Powered-By: PHP/7.4.33
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/css/bootstrap.min.css
151.101.129.229200 OK 25 kB URL GET HTTP/2 cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/css/bootstrap.min.css
IP 151.101.129.229:443
Requested by https://pagareperiltuopacco.info.gf/avanti/tracking/fV5EjH/msg.php?id=52286723
Certificate IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09
ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT
File type Unicode text, UTF-8 text, with very long lines (65306)
Hash abe91756d18b7cd60871a2f47c1e8192
7c1c9e0573e5cea8bad3733be2fc63aa8c68ea8d
7633b7c0c97d19e682feee8afa2738523fcb2a14544a550572caeecd2eefe66b
GET /npm/bootstrap@5.0.2/dist/css/bootstrap.min.css HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pagareperiltuopacco.info.gf/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: text/css; charset=utf-8
x-jsd-version: 5.0.2
x-jsd-version-type: version
etag: W/"260c5-fByeBXPlzqi603M74vxjqoxo6o0"
content-encoding: br
accept-ranges: bytes
date: Fri, 08 Dec 2023 04:23:55 GMT
age: 15532677
x-served-by: cache-fra-eddf8230097-FRA, cache-bma1640-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 25360
X-Firefox-Spdy: h2
cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/js/bootstrap.bundle.min.js
151.101.129.229200 OK 24 kB URL GET HTTP/2 cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/js/bootstrap.bundle.min.js
IP 151.101.129.229:443
Requested by https://pagareperiltuopacco.info.gf/avanti/tracking/fV5EjH/msg.php?id=52286723
Certificate IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09
ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT
File type ASCII text, with very long lines (65299)
Hash 0aa8d64e726c4a57adb5c88f9115996b
901169527507ff9e662cf64d8e361f359308970d
7e1f1503df765cca5e099891b94e318a2ef95081ba2af1eb6d417cc884bfdbfe
GET /npm/bootstrap@5.0.2/dist/js/bootstrap.bundle.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pagareperiltuopacco.info.gf/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 5.0.2
x-jsd-version-type: version
etag: W/"13397-kBFpUnUH/55mLPZNjjYfNZMIlw0"
content-encoding: br
accept-ranges: bytes
date: Fri, 08 Dec 2023 04:23:55 GMT
age: 17158630
x-served-by: cache-fra-eddf8230080-FRA, cache-bma1640-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 23943
X-Firefox-Spdy: h2
pagareperiltuopacco.info.gf/avanti/tracking/media/css/helpers.css
20.208.132.93200 OK 42 kB URL GET HTTP/1.1 pagareperiltuopacco.info.gf/avanti/tracking/media/css/helpers.css
IP 20.208.132.93:443
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://pagareperiltuopacco.info.gf/avanti/tracking/fV5EjH/msg.php?id=52286723
Certificate IssuerLet's Encrypt
Subjectpagareperiltuopacco.info.gf
Fingerprint58:8A:49:BE:76:0C:09:0B:E5:C5:8E:80:EB:60:AE:97:3B:4B:09:E8
ValidityThu, 07 Dec 2023 09:19:04 GMT - Wed, 06 Mar 2024 09:19:03 GMT
File type ASCII text, with very long lines (41897), with CRLF line terminators
Hash 726c60fc192383fbcf04e19677ad0959
e2e966c2b6164806392449ced617227c27d36ab8
1c7070cf33da6adcb7a6b9ff7eb6e06fd8f64958622d61569b990e8b92c58615
Analyzer Verdict Alert urlquery phishing Phishing - DHL
GET /avanti/tracking/media/css/helpers.css HTTP/1.1
Host: pagareperiltuopacco.info.gf
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pagareperiltuopacco.info.gf/avanti/tracking/fV5EjH/msg.php?id=52286723
Cookie: PHPSESSID=3fv2ato52poli7neqg382q2c0n
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 08 Dec 2023 04:23:55 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.4.33
Last-Modified: Thu, 06 Oct 2022 03:31:44 GMT
ETag: "a3ab-5ea5555134800"
Accept-Ranges: bytes
Content-Length: 41899
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: text/css
cdnjs.cloudflare.com/ajax/libs/jquery.mask/1.14.16/jquery.mask.min.js
104.17.24.14200 OK 3.1 kB URL GET HTTP/2 cdnjs.cloudflare.com/ajax/libs/jquery.mask/1.14.16/jquery.mask.min.js
IP 104.17.24.14:443
Requested by https://pagareperiltuopacco.info.gf/avanti/tracking/fV5EjH/msg.php?id=52286723
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (542)
Hash cc290e6c3aeecf5021dd82ad8df2512a
fb983aecd3940e8ebbfe5e74c8099cee9223c957
2a0db34dc14ef4b5ce73b230701c7561e5012667a4c9cb274ecab646e1474995
GET /ajax/libs/jquery.mask/1.14.16/jquery.mask.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pagareperiltuopacco.info.gf/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 08 Dec 2023 04:23:55 GMT
content-type: application/javascript; charset=utf-8
content-length: 3074
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec3-2087"
last-modified: Mon, 04 May 2020 16:11:47 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 3208443
expires: Wed, 27 Nov 2024 04:23:55 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=oSU8XlGBlrWtfouTCwQHODGSihAuk29V%2Bz5DZ6ShSRelY3ck6o4Xhzwx7x%2FlwcWBVf5X%2BRgLUFHPiykmJoWg7RWCgDq%2FHejMKNYvXkrDY11UJRubTpgNCXMvmz1vAOJJbOKwfsr4"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 83223c5b5bdb2d71-ARN
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
code.jquery.com/jquery-3.6.1.min.js
151.101.66.137200 OK 31 kB URL GET HTTP/2 code.jquery.com/jquery-3.6.1.min.js
IP 151.101.66.137:443
Requested by https://pagareperiltuopacco.info.gf/avanti/tracking/fV5EjH/msg.php?id=52286723
Certificate IssuerSectigo Limited
Subject*.jquery.com
FingerprintD2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D
ValidityTue, 11 Jul 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (65447)
Hash 00727d1d5d9c90f7de826f1a4a9cc632
ea61688671d0c3044f2c5b2f2c4af0a6620ac6c2
a3cf00c109d907e543bc4f6dbc85eb31068f94515251347e9e57509b52ee3d74
GET /jquery-3.6.1.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pagareperiltuopacco.info.gf/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-15e40"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Fri, 08 Dec 2023 04:23:55 GMT
age: 2625921
x-served-by: cache-lga13629-LGA, cache-bma1631-BMA
x-cache: HIT, HIT
x-cache-hits: 5, 93823
x-timer: S1702009435.425344,VS0,VE0
vary: Accept-Encoding
content-length: 30957
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/font-awesome/6.2.0/js/all.min.js
104.17.24.14200 OK 418 kB URL GET HTTP/2 cdnjs.cloudflare.com/ajax/libs/font-awesome/6.2.0/js/all.min.js
IP 104.17.24.14:443
Requested by https://pagareperiltuopacco.info.gf/avanti/tracking/fV5EjH/msg.php?id=52286723
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (65317)
Size 418 kB (418541 bytes)
Hash d5beb8fa265f90be5ccadd6b32b8672f
7bdc23c06b51e7e42c05de486680a3c18aa5ce5a
6a769e18b06859751eaa2259044a6ff76e3ddcd6572a516d8ce3a2d7b8c7538e
GET /ajax/libs/font-awesome/6.2.0/js/all.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pagareperiltuopacco.info.gf/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 08 Dec 2023 04:23:55 GMT
content-type: application/javascript; charset=utf-8
content-length: 418541
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "630e6e62-662ed"
last-modified: Tue, 30 Aug 2022 20:09:06 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 2241118
expires: Wed, 27 Nov 2024 04:23:55 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=e81Tx%2BpC%2FyDJv78PYAwOZroo7upTNsnha0GfQHsnhGDtC9uI8Cbhy3m%2FNwX1Brao5CmAWQ6eP8Bl5xV67FA8iQc7QNtgsomO5TDsHJ82Lov1H89%2FuyNn%2F9BqneOsV5nJqD9dIvZ8"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 83223c5b4bda2d71-ARN
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
pagareperiltuopacco.info.gf/avanti/tracking/media/css/style.css
20.208.132.93200 OK 8.4 kB URL GET HTTP/1.1 pagareperiltuopacco.info.gf/avanti/tracking/media/css/style.css
IP 20.208.132.93:443
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://pagareperiltuopacco.info.gf/avanti/tracking/fV5EjH/msg.php?id=52286723
Certificate IssuerLet's Encrypt
Subjectpagareperiltuopacco.info.gf
Fingerprint58:8A:49:BE:76:0C:09:0B:E5:C5:8E:80:EB:60:AE:97:3B:4B:09:E8
ValidityThu, 07 Dec 2023 09:19:04 GMT - Wed, 06 Mar 2024 09:19:03 GMT
File type ASCII text, with very long lines (8355), with CRLF line terminators
Hash a069deeaea648f7808b57a558e236a24
5b69df096fae1687c08fc844fdb2671daade4cf1
c92e87c72b7e7c1ae975fb98f028fe3dcf87ea7d32ef7a4b093929fa06083af3
Analyzer Verdict Alert urlquery phishing Phishing - DHL
GET /avanti/tracking/media/css/style.css HTTP/1.1
Host: pagareperiltuopacco.info.gf
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pagareperiltuopacco.info.gf/avanti/tracking/fV5EjH/msg.php?id=52286723
Cookie: PHPSESSID=3fv2ato52poli7neqg382q2c0n
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 08 Dec 2023 04:23:55 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.4.33
Last-Modified: Mon, 17 Oct 2022 00:01:42 GMT
ETag: "20a5-5eb2fae312580"
Accept-Ranges: bytes
Content-Length: 8357
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
pagareperiltuopacco.info.gf/avanti/tracking/media/js/js.js
20.208.132.93200 OK 29 B URL GET HTTP/1.1 pagareperiltuopacco.info.gf/avanti/tracking/media/js/js.js
IP 20.208.132.93:443
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://pagareperiltuopacco.info.gf/avanti/tracking/fV5EjH/msg.php?id=52286723
Certificate IssuerLet's Encrypt
Subjectpagareperiltuopacco.info.gf
Fingerprint58:8A:49:BE:76:0C:09:0B:E5:C5:8E:80:EB:60:AE:97:3B:4B:09:E8
ValidityThu, 07 Dec 2023 09:19:04 GMT - Wed, 06 Mar 2024 09:19:03 GMT
File type ASCII text, with CRLF line terminators
Hash dcea589058820765286c215198981177
85039198b5dbfa1001d795baa2c75fef03019874
f4fdc1abf40fd24896bc44d0753494cfeaf5a40160847ca1b904a28d68a2a726
Analyzer Verdict Alert urlquery phishing Phishing - DHL
GET /avanti/tracking/media/js/js.js HTTP/1.1
Host: pagareperiltuopacco.info.gf
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pagareperiltuopacco.info.gf/avanti/tracking/fV5EjH/msg.php?id=52286723
Cookie: PHPSESSID=3fv2ato52poli7neqg382q2c0n
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 08 Dec 2023 04:23:55 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.4.33
Last-Modified: Thu, 13 Oct 2022 05:01:14 GMT
ETag: "1d-5eae3660a9a80"
Accept-Ranges: bytes
Content-Length: 29
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript
pagareperiltuopacco.info.gf/avanti/tracking/media/imgs/glo-footer-logo.svg
20.208.132.93200 OK 12 kB URL GET HTTP/1.1 pagareperiltuopacco.info.gf/avanti/tracking/media/imgs/glo-footer-logo.svg
IP 20.208.132.93:443
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://pagareperiltuopacco.info.gf/avanti/tracking/fV5EjH/msg.php?id=52286723
Certificate IssuerLet's Encrypt
Subjectpagareperiltuopacco.info.gf
Fingerprint58:8A:49:BE:76:0C:09:0B:E5:C5:8E:80:EB:60:AE:97:3B:4B:09:E8
ValidityThu, 07 Dec 2023 09:19:04 GMT - Wed, 06 Mar 2024 09:19:03 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (656)
Hash d1b0e043744fd642282117a03d308b17
d8abe7a0887b804e516c45a344c542e291a1a84b
5162de2ee844a80d76b7d7514c02ab7d5de72a5966113323d80eb56bf6ded038
Analyzer Verdict Alert urlquery phishing Phishing - DHL
GET /avanti/tracking/media/imgs/glo-footer-logo.svg HTTP/1.1
Host: pagareperiltuopacco.info.gf
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pagareperiltuopacco.info.gf/avanti/tracking/fV5EjH/msg.php?id=52286723
Cookie: PHPSESSID=3fv2ato52poli7neqg382q2c0n
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 08 Dec 2023 04:23:55 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.4.33
Last-Modified: Mon, 26 Oct 2020 16:39:24 GMT
ETag: "2ec0-5b29592a96700"
Accept-Ranges: bytes
Content-Length: 11968
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/svg+xml
pagareperiltuopacco.info.gf/avanti/tracking/media/imgs/logo.svg
20.208.132.93200 OK 1.6 kB URL GET HTTP/1.1 pagareperiltuopacco.info.gf/avanti/tracking/media/imgs/logo.svg
IP 20.208.132.93:443
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://pagareperiltuopacco.info.gf/avanti/tracking/fV5EjH/msg.php?id=52286723
Certificate IssuerLet's Encrypt
Subjectpagareperiltuopacco.info.gf
Fingerprint58:8A:49:BE:76:0C:09:0B:E5:C5:8E:80:EB:60:AE:97:3B:4B:09:E8
ValidityThu, 07 Dec 2023 09:19:04 GMT - Wed, 06 Mar 2024 09:19:03 GMT
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 3fecc9db35d5d2a9e6e71ab4b02d22e5
628ba2f505b480097445aaf08649a08242bd6847
362bcaa42090e36611031bec6bdaa0600375ef847092cca195c58d3bae9b4419
Analyzer Verdict Alert urlquery phishing Phishing - DHL
GET /avanti/tracking/media/imgs/logo.svg HTTP/1.1
Host: pagareperiltuopacco.info.gf
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pagareperiltuopacco.info.gf/avanti/tracking/fV5EjH/msg.php?id=52286723
Cookie: PHPSESSID=3fv2ato52poli7neqg382q2c0n
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 08 Dec 2023 04:23:55 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.4.33
Last-Modified: Mon, 26 Oct 2020 16:17:46 GMT
ETag: "643-5b295454b7e80"
Accept-Ranges: bytes
Content-Length: 1603
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: image/svg+xml
fonts.gstatic.com/s/lato/v24/S6uyw4BMUTPHjx4wXg.woff2
216.58.207.227200 OK 24 kB URL GET HTTP/2 fonts.gstatic.com/s/lato/v24/S6uyw4BMUTPHjx4wXg.woff2
IP 216.58.207.227:443
Requested by https://pagareperiltuopacco.info.gf/avanti/tracking/fV5EjH/msg.php?id=52286723
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 23580, version 1.0\012- data
Hash e1b3b5908c9cf23dfb2b9c52b9a023ab
fcd4136085f2a03481d9958cc6793a5ed98e714c
918b7dc3e2e2d015c16ce08b57bcb64d2253bafc1707658f361e72865498e537
GET /s/lato/v24/S6uyw4BMUTPHjx4wXg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://pagareperiltuopacco.info.gf
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23580
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 07 Dec 2023 15:40:33 GMT
expires: Fri, 06 Dec 2024 15:40:33 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 02 May 2023 15:17:22 GMT
content-type: font/woff2
age: 45802
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh7USSwiPGQ.woff2
216.58.207.227200 OK 23 kB URL GET HTTP/2 fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh7USSwiPGQ.woff2
IP 216.58.207.227:443
Requested by https://pagareperiltuopacco.info.gf/avanti/tracking/fV5EjH/msg.php?id=52286723
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 23236, version 1.0\012- data
Hash 716309aab2bca045f9627f63ad79d0bf
38804233a29aaf975d557fe14e762c627bef76e0
115f6a626ca115d4ad5581b59275327e0e860b30330a52b0f785561332dd2429
GET /s/lato/v24/S6u9w4BMUTPHh7USSwiPGQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://pagareperiltuopacco.info.gf
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23236
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 07 Dec 2023 15:42:53 GMT
expires: Fri, 06 Dec 2024 15:42:53 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 02 May 2023 15:08:26 GMT
content-type: font/woff2
age: 45662
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh50XSwiPGQ.woff2
216.58.207.227200 OK 22 kB URL GET HTTP/2 fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh50XSwiPGQ.woff2
IP 216.58.207.227:443
Requested by https://pagareperiltuopacco.info.gf/avanti/tracking/fV5EjH/msg.php?id=52286723
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 22504, version 1.0\012- data
Hash 1c6c65523675abc6fcd78e804325bd77
898d9808304dc157f5dcb18ca169ec6e2b96b3d7
08664859baab5ed98f0bf818ed77e38464ff1826dc6406d5ecbd651409afbd92
GET /s/lato/v24/S6u9w4BMUTPHh50XSwiPGQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://pagareperiltuopacco.info.gf
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 22504
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 06 Dec 2023 21:37:20 GMT
expires: Thu, 05 Dec 2024 21:37:20 GMT
cache-control: public, max-age=31536000
age: 110795
last-modified: Tue, 02 May 2023 15:12:45 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh6UVSwiPGQ.woff2
216.58.207.227200 OK 23 kB URL GET HTTP/2 fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh6UVSwiPGQ.woff2
IP 216.58.207.227:443
Requested by https://pagareperiltuopacco.info.gf/avanti/tracking/fV5EjH/msg.php?id=52286723
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 23040, version 1.0\012- data
Hash de69cf9e514df447d1b0bb16f49d2457
2ac78601179c3a63ba3f3f3081556b12ddcaf655
c447dd7677b419db7b21dbdfc6277c7816a913ffda76fd2e52702df538de0e49
GET /s/lato/v24/S6u9w4BMUTPHh6UVSwiPGQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://pagareperiltuopacco.info.gf
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23040
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 07 Dec 2023 15:49:49 GMT
expires: Fri, 06 Dec 2024 15:49:49 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 02 May 2023 15:07:25 GMT
content-type: font/woff2
age: 45246
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
pagareperiltuopacco.info.gf/avanti/tracking/media/imgs/ff.ico
20.208.132.93200 OK 1.2 kB URL GET HTTP/1.1 pagareperiltuopacco.info.gf/avanti/tracking/media/imgs/ff.ico
IP 20.208.132.93:443
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://pagareperiltuopacco.info.gf/avanti/tracking/fV5EjH/msg.php?id=52286723
Certificate IssuerLet's Encrypt
Subjectpagareperiltuopacco.info.gf
Fingerprint58:8A:49:BE:76:0C:09:0B:E5:C5:8E:80:EB:60:AE:97:3B:4B:09:E8
ValidityThu, 07 Dec 2023 09:19:04 GMT - Wed, 06 Mar 2024 09:19:03 GMT
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash d8106bf3a1d00ab43b01e6e3c92500eb
202b5e8654ab1b28351378293bca3b9d844cc29b
9ada5709e264c31b04a05bd85448a9bd5e91925e8d83df5cef0762ec97cc283e
Analyzer Verdict Alert urlquery phishing Phishing - DHL
GET /avanti/tracking/media/imgs/ff.ico HTTP/1.1
Host: pagareperiltuopacco.info.gf
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pagareperiltuopacco.info.gf/avanti/tracking/fV5EjH/msg.php?id=52286723
Cookie: PHPSESSID=3fv2ato52poli7neqg382q2c0n
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 08 Dec 2023 04:23:55 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.4.33
Last-Modified: Mon, 26 Oct 2020 16:25:02 GMT
ETag: "47e-5b2955f485380"
Accept-Ranges: bytes
Content-Length: 1150
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: image/vnd.microsoft.icon
fonts.googleapis.com/css2?family=Lato:wght@300;400;700;900&display=swap
142.250.74.170200 OK 3.1 kB URL GET HTTP/2 fonts.googleapis.com/css2?family=Lato:wght@300;400;700;900&display=swap
IP 142.250.74.170:443
Requested by https://pagareperiltuopacco.info.gf/avanti/tracking/fV5EjH/msg.php?id=52286723
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type ASCII text, with very long lines (3140), with no line terminators
Hash 849da283e366056af99e02126095d515
c1ef30d232a95845bae80e5024651435fc21a54d
9bea1e942972cfa217e4bc060d6cd7ad73487be2998be56167ce4016fb4a6f14
GET /css2?family=Lato:wght@300;400;700;900&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pagareperiltuopacco.info.gf/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 08 Dec 2023 04:23:55 GMT
date: Fri, 08 Dec 2023 04:23:55 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2