Report - www.amiriitalia.net/capispalla-c-16_17

Report Overview

Submitted URL
www.amiriitalia.net/capispalla-c-16_17_26/
IP
196.196.122.135
ASN
#58065 Orion Network Limited
Submitted
2024-04-26 08:35:02
Access
public
Website Title
capispalla : AMIRI Italia comodità e stile, Vivi con noi l'epitome dello street style.
Final URL
www.amiriitalia.net/capispalla-c-16_17_26/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
34

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
fonts.googleapis.com	8877	2005-01-25	2013-06-10	2024-04-25	8.6 kB	263 kB	142.250.74.106
fonts.gstatic.com	unknown	2008-02-11	2014-09-09	2024-04-26	2.1 kB	35 kB	216.58.207.227
www.amiriitalia.net	unknown	unknown	No data	No data	9.2 kB	980 kB	196.196.122.135

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-26	medium	amiriitalia.net	Sinkholed
2024-04-26	medium	amiriitalia.net	Sinkholed
2024-04-26	medium	amiriitalia.net	Sinkholed
2024-04-26	medium	amiriitalia.net	Sinkholed
2024-04-26	medium	amiriitalia.net	Sinkholed
2024-04-26	medium	amiriitalia.net	Sinkholed
2024-04-26	medium	amiriitalia.net	Sinkholed
2024-04-26	medium	amiriitalia.net	Sinkholed
2024-04-26	medium	amiriitalia.net	Sinkholed
2024-04-26	medium	amiriitalia.net	Sinkholed
2024-04-26	medium	amiriitalia.net	Sinkholed
2024-04-26	medium	amiriitalia.net	Sinkholed
2024-04-26	medium	amiriitalia.net	Sinkholed
2024-04-26	medium	amiriitalia.net	Sinkholed
2024-04-26	medium	amiriitalia.net	Sinkholed
2024-04-26	medium	amiriitalia.net	Sinkholed
2024-04-26	medium	amiriitalia.net	Sinkholed

ThreatFox

No alerts detected

JavaScript (7)

	URL	Size	First Seen	Last Seen
	www.amiriitalia.net/includes/templates/amiriitalia/jscript/jscript_cookies.js	745 B	2023-03-07	2024-05-06
Pretty URL www.amiriitalia.net/includes/templates/amiriitalia/jscript/jscript_cookies.js IP 196.196.122.135 ASN #58065 Orion Network Limited Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 13:18:35 Last Seen2024-05-06 00:47:52 Times Seen755 Hash 65807f4bee7bcb4f6af769919ee805d3 c75e394f474f9238cb539f8b7ef9708cc083eff2 6979054ef7300efc7abcaefb0168e095f82adc208a00837ae1a95e0f72e2b598 Loading...

	www.amiriitalia.net/includes/templates/amiriitalia/jscript/jscript_plugins.js	273 kB	2023-03-08	2024-05-06
Pretty URL www.amiriitalia.net/includes/templates/amiriitalia/jscript/jscript_plugins.js IP 196.196.122.135 ASN #58065 Orion Network Limited Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 12:00:23 Last Seen2024-05-06 00:47:52 Times Seen389 Hash 61bced23c3ca3a6b3623097507a8e2e4 fa6e156543aee6ad5fd3f14799140842880142aa 1736d465416b468d9836583f60c9a3165138120678649560a81f6365378a2743 Loading...

	www.amiriitalia.net/includes/templates/amiriitalia/jscript/jscript_zmain.js	54 kB	2024-04-26	2024-04-26
Pretty URL www.amiriitalia.net/includes/templates/amiriitalia/jscript/jscript_zmain.js IP 196.196.122.135 ASN #58065 Orion Network Limited Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-26 10:35:09 Last Seen2024-04-26 10:35:09 Times Seen1 Hash 1bb4faa527424464e1f61718b652a90e c80cc9e71f4ebb682f4c7aeeacf45275a56d289d 0f439257a9d0d1c8d2fe50ae64cf476b9eeded119319b8bc17b9d5b8f460a234 Loading...

	unknown	37 B	2023-05-10	2024-05-06
Pretty Introduced by domTimer Embedded in HTML false Observations First Seen2023-05-10 05:59:15 Last Seen2024-05-06 00:47:52 Times Seen148 Hash 2ae35f23e69e0ebd06359dfbe0c5ce31 956b0ffc3c2eb6d3eeb8186f1d28a53d75d70506 8aade99f8e2e9831797b6836d32508679ccc13b2f63af0ca0015137690516e73 Loading...

	www.amiriitalia.net/includes/templates/amiriitalia/jscript/jquery.min.js	90 kB	2023-03-07	2024-05-06
Pretty URL www.amiriitalia.net/includes/templates/amiriitalia/jscript/jquery.min.js IP 196.196.122.135 ASN #58065 Orion Network Limited Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:13 Last Seen2024-05-06 14:23:50 Times Seen266443 Hash 8fb8fee4fcc3cc86ff6c724154c49c42 b82d238d4e31fdf618bae8ac11a6c812c03dd0d4 ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e Loading...

	www.amiriitalia.net/capispalla-c-16_17_26/	158 B	2023-03-07	2024-05-06
Pretty URL www.amiriitalia.net/capispalla-c-16_17_26/ IP 196.196.122.135 ASN #58065 Orion Network Limited Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 13:18:35 Last Seen2024-05-06 00:47:52 Times Seen416 Hash f898517faa32a1d50013fd8b9ab2aaa7 eaeadc084111ee29bc6e1c05e35cfb8a237cbf5f 828a54afa9f3f8d83b680f98ab03887c8fb7999d5eece48e4c7cb3a4842a03d9 Loading...

	www.amiriitalia.net/includes/templates/amiriitalia/jscript/jscript_extend.js	641 B	2023-07-04	2024-05-04
Pretty URL www.amiriitalia.net/includes/templates/amiriitalia/jscript/jscript_extend.js IP 196.196.122.135 ASN #58065 Orion Network Limited Introduced by scriptElement Embedded in HTML false Observations First Seen2023-07-04 01:52:25 Last Seen2024-05-04 23:32:50 Times Seen75 Hash 3bb18f39e30a3049535f9b3fc6fdf9af 8a392a36689b7e763f71899673e2a58855ecb673 d23dc0c134e6b6c3e504f45e55a3bd6931051c3716e13bedb0490e0ba4a94d63 Loading...

HTTP Transactions (39)

URL IP Response Size

www.amiriitalia.net/capispalla-c-16_17_26/

196.196.122.135

200 OK

6.9 kB

URL User Request GET HTTP/2
www.amiriitalia.net/capispalla-c-16_17_26/
IP
196.196.122.135:443
ASN
#58065 Orion Network Limited

Certificate
IssuerLet's Encrypt
Subjectamiriitalia.net
Fingerprint8B:B0:12:DF:20:42:56:CA:A2:69:F2:2D:26:AE:37:32:36:8C:E5:EF
ValidityTue, 19 Mar 2024 00:01:27 GMT - Mon, 17 Jun 2024 00:01:26 GMT

File type
HTML document, Unicode text, UTF-8 text, with very long lines (2711), with CRLF, LF line terminators
Size
6.9 kB (6887 bytes)
Hash
c223832f8e8e05571da5c66cb602d79b
c57421925589d8b2bdb8579f30640578545e3bd4
9ea54d3362d06a0eb0d103833aacc5dfcd513cbba8934ca429802c9d483737a5

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /capispalla-c-16_17_26/ HTTP/1.1
Host: www.amiriitalia.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 08:34:07 GMT
content-type: text/html; charset=utf-8
content-length: 6887
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
x-frame-options: SAMEORIGIN
set-cookie: zenid=k71bafnvbv629r0mkkt836hj66; path=/; domain=.www.amiriitalia.net; secure; HttpOnly; SameSite=lax
vary: Accept-Encoding,User-Agent
content-encoding: gzip
X-Firefox-Spdy: h2

www.amiriitalia.net/images/loader.gif

196.196.122.135

200 OK

35 kB

URL GET HTTP/2
www.amiriitalia.net/images/loader.gif
IP
196.196.122.135:443
ASN
#58065 Orion Network Limited

Requested by
https://www.amiriitalia.net/capispalla-c-16_17_26/
Certificate
IssuerLet's Encrypt
Subjectamiriitalia.net
Fingerprint8B:B0:12:DF:20:42:56:CA:A2:69:F2:2D:26:AE:37:32:36:8C:E5:EF
ValidityTue, 19 Mar 2024 00:01:27 GMT - Mon, 17 Jun 2024 00:01:26 GMT

File type
GIF image data, version 89a, 128 x 38
Size
35 kB (35011 bytes)
Hash
362e988184d842aea3a0b5d09a64d13e
e4ab705fb063ffd2645ce8a25e59e889e98f211c
82656f23517068a7b3d92badc8c29716e53654cd2574d330b08823ca7f7b8fa4

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/loader.gif HTTP/1.1
Host: www.amiriitalia.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiriitalia.net/capispalla-c-16_17_26/
Cookie: zenid=k71bafnvbv629r0mkkt836hj66
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 08:34:07 GMT
content-type: image/gif
content-length: 35011
last-modified: Thu, 09 Jun 2022 11:23:04 GMT
cache-control: max-age=864000, public, must-revalidate
etag: "62a1d818-88c3"
accept-ranges: bytes
X-Firefox-Spdy: h2

www.amiriitalia.net/includes/templates/amiriitalia/images/logo.png

196.196.122.135

200 OK

13 kB

URL GET HTTP/2
www.amiriitalia.net/includes/templates/amiriitalia/images/logo.png
IP
196.196.122.135:443
ASN
#58065 Orion Network Limited

Requested by
https://www.amiriitalia.net/capispalla-c-16_17_26/
Certificate
IssuerLet's Encrypt
Subjectamiriitalia.net
Fingerprint8B:B0:12:DF:20:42:56:CA:A2:69:F2:2D:26:AE:37:32:36:8C:E5:EF
ValidityTue, 19 Mar 2024 00:01:27 GMT - Mon, 17 Jun 2024 00:01:26 GMT

File type
PNG image data, 500 x 156, 8-bit/color RGBA, non-interlaced
Size
13 kB (12552 bytes)
Hash
0d0a4d32f89bece43a2310f58cf73216
8b01133a473845e9957fdd70f3ccd589fc756e32
b53e218e7e8e1743a7068e4a85c6b63cd18655c28a1c2aeb121424672ae2f0a9

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /includes/templates/amiriitalia/images/logo.png HTTP/1.1
Host: www.amiriitalia.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiriitalia.net/capispalla-c-16_17_26/
Cookie: zenid=k71bafnvbv629r0mkkt836hj66
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 08:34:07 GMT
content-type: image/png
content-length: 12552
last-modified: Tue, 19 Mar 2024 03:40:04 GMT
cache-control: max-age=864000, public, must-revalidate
expires: Sun, 26 May 2024 08:34:07 GMT
etag: "65f90914-3108"
accept-ranges: bytes
X-Firefox-Spdy: h2

www.amiriitalia.net/images/donne/pronto-da-indossare/capispalla/AMIRI_Blazer_corto_vegano_db_D6DJ292_vestiario_nero_donne.jpg

196.196.122.135

200 OK

13 kB

URL GET HTTP/2
www.amiriitalia.net/images/donne/pronto-da-indossare/capispalla/AMIRI_Blazer_corto_vegano_db_D6DJ292_vestiario_nero_donne.jpg
IP
196.196.122.135:443
ASN
#58065 Orion Network Limited

Requested by
https://www.amiriitalia.net/capispalla-c-16_17_26/
Certificate
IssuerLet's Encrypt
Subjectamiriitalia.net
Fingerprint8B:B0:12:DF:20:42:56:CA:A2:69:F2:2D:26:AE:37:32:36:8C:E5:EF
ValidityTue, 19 Mar 2024 00:01:27 GMT - Mon, 17 Jun 2024 00:01:26 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 489x653, components 3
Size
13 kB (12926 bytes)
Hash
55d25dcf0592af89e3f8023ac6c87e6f
00bcf528ba01772631f868d7b646151d4f785158
e6339976463c7cbcf79d7d44bdd4bd3995f757419129f341b4b20cedcca5f1a5

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/donne/pronto-da-indossare/capispalla/AMIRI_Blazer_corto_vegano_db_D6DJ292_vestiario_nero_donne.jpg HTTP/1.1
Host: www.amiriitalia.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiriitalia.net/capispalla-c-16_17_26/
Cookie: zenid=k71bafnvbv629r0mkkt836hj66
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 08:34:07 GMT
content-type: image/jpeg
content-length: 12926
last-modified: Wed, 20 Mar 2024 05:30:45 GMT
cache-control: max-age=864000, public, must-revalidate
etag: "65fa7485-327e"
accept-ranges: bytes
X-Firefox-Spdy: h2

www.amiriitalia.net/includes/templates/amiriitalia/jscript/jscript_cookies.js

196.196.122.135

200 OK

430 B

URL GET HTTP/2
www.amiriitalia.net/includes/templates/amiriitalia/jscript/jscript_cookies.js
IP
196.196.122.135:443
ASN
#58065 Orion Network Limited

Requested by
https://www.amiriitalia.net/capispalla-c-16_17_26/
Certificate
IssuerLet's Encrypt
Subjectamiriitalia.net
Fingerprint8B:B0:12:DF:20:42:56:CA:A2:69:F2:2D:26:AE:37:32:36:8C:E5:EF
ValidityTue, 19 Mar 2024 00:01:27 GMT - Mon, 17 Jun 2024 00:01:26 GMT

File type
JavaScript source, ASCII text, with very long lines (745), with no line terminators
Size
430 B (430 bytes)
Hash
65807f4bee7bcb4f6af769919ee805d3
c75e394f474f9238cb539f8b7ef9708cc083eff2
6979054ef7300efc7abcaefb0168e095f82adc208a00837ae1a95e0f72e2b598

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /includes/templates/amiriitalia/jscript/jscript_cookies.js HTTP/1.1
Host: www.amiriitalia.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiriitalia.net/capispalla-c-16_17_26/
Cookie: zenid=k71bafnvbv629r0mkkt836hj66
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 08:34:07 GMT
content-type: application/javascript
content-length: 430
x-accel-version: 0.01
last-modified: Wed, 27 Mar 2024 21:33:44 GMT
accept-ranges: bytes
cache-control: max-age=300
expires: Fri, 26 Apr 2024 08:39:07 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
X-Firefox-Spdy: h2

www.amiriitalia.net/includes/templates/amiriitalia/jscript/jscript_extend.js

196.196.122.135

200 OK

311 B

URL GET HTTP/2
www.amiriitalia.net/includes/templates/amiriitalia/jscript/jscript_extend.js
IP
196.196.122.135:443
ASN
#58065 Orion Network Limited

Requested by
https://www.amiriitalia.net/capispalla-c-16_17_26/
Certificate
IssuerLet's Encrypt
Subjectamiriitalia.net
Fingerprint8B:B0:12:DF:20:42:56:CA:A2:69:F2:2D:26:AE:37:32:36:8C:E5:EF
ValidityTue, 19 Mar 2024 00:01:27 GMT - Mon, 17 Jun 2024 00:01:26 GMT

File type
JavaScript source, ASCII text, with CRLF line terminators
Size
311 B (311 bytes)
Hash
3bb18f39e30a3049535f9b3fc6fdf9af
8a392a36689b7e763f71899673e2a58855ecb673
d23dc0c134e6b6c3e504f45e55a3bd6931051c3716e13bedb0490e0ba4a94d63

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /includes/templates/amiriitalia/jscript/jscript_extend.js HTTP/1.1
Host: www.amiriitalia.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiriitalia.net/capispalla-c-16_17_26/
Cookie: zenid=k71bafnvbv629r0mkkt836hj66
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 08:34:07 GMT
content-type: application/javascript
content-length: 311
x-accel-version: 0.01
last-modified: Wed, 27 Mar 2024 21:33:44 GMT
accept-ranges: bytes
cache-control: max-age=300
expires: Fri, 26 Apr 2024 08:39:07 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
X-Firefox-Spdy: h2

www.amiriitalia.net/images/donne/pronto-da-indossare/capispalla/AMIRI_giacca_di_ossa_D6DJ287_vestiario_foresta_pluviale_donne.jpg

196.196.122.135

200 OK

16 kB

URL GET HTTP/2
www.amiriitalia.net/images/donne/pronto-da-indossare/capispalla/AMIRI_giacca_di_ossa_D6DJ287_vestiario_foresta_pluviale_donne.jpg
IP
196.196.122.135:443
ASN
#58065 Orion Network Limited

Requested by
https://www.amiriitalia.net/capispalla-c-16_17_26/
Certificate
IssuerLet's Encrypt
Subjectamiriitalia.net
Fingerprint8B:B0:12:DF:20:42:56:CA:A2:69:F2:2D:26:AE:37:32:36:8C:E5:EF
ValidityTue, 19 Mar 2024 00:01:27 GMT - Mon, 17 Jun 2024 00:01:26 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 489x653, components 3
Size
16 kB (16124 bytes)
Hash
8232424abbd7caed55703c62bf22b59c
466e2db5525850012d5af708ad24f1287b23667c
3d92ef04f14aa265c9c283186803c31d370836191fe16b20edb06d9750afa45c

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/donne/pronto-da-indossare/capispalla/AMIRI_giacca_di_ossa_D6DJ287_vestiario_foresta_pluviale_donne.jpg HTTP/1.1
Host: www.amiriitalia.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiriitalia.net/capispalla-c-16_17_26/
Cookie: zenid=k71bafnvbv629r0mkkt836hj66
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 08:34:07 GMT
content-type: image/jpeg
content-length: 16124
last-modified: Wed, 20 Mar 2024 05:30:32 GMT
cache-control: max-age=864000, public, must-revalidate
etag: "65fa7478-3efc"
accept-ranges: bytes
X-Firefox-Spdy: h2

www.amiriitalia.net/images/payment.png

196.196.122.135

200 OK

6.2 kB

URL GET HTTP/2
www.amiriitalia.net/images/payment.png
IP
196.196.122.135:443
ASN
#58065 Orion Network Limited

Requested by
https://www.amiriitalia.net/capispalla-c-16_17_26/
Certificate
IssuerLet's Encrypt
Subjectamiriitalia.net
Fingerprint8B:B0:12:DF:20:42:56:CA:A2:69:F2:2D:26:AE:37:32:36:8C:E5:EF
ValidityTue, 19 Mar 2024 00:01:27 GMT - Mon, 17 Jun 2024 00:01:26 GMT

File type
PNG image data, 248 x 26, 8-bit/color RGBA, non-interlaced
Size
6.2 kB (6248 bytes)
Hash
1fb5f66cada185d72ccefaeb9e9a2963
584108601272e3ed07abe10b4c3ca2f6b200d552
ef645db0e0a9a267fda954e584782b888929b2827548ecaef07600656022535b

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/payment.png HTTP/1.1
Host: www.amiriitalia.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiriitalia.net/capispalla-c-16_17_26/
Cookie: zenid=k71bafnvbv629r0mkkt836hj66
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 08:34:07 GMT
content-type: image/png
content-length: 6248
last-modified: Thu, 09 Jun 2022 11:19:36 GMT
cache-control: max-age=864000, public, must-revalidate
etag: "62a1d748-1868"
accept-ranges: bytes
X-Firefox-Spdy: h2

fonts.googleapis.com/css2?family=Poppins:wght@200;300;400;500;600;700;800;900&display=swap

142.250.74.106

200 OK

141 kB

URL GET HTTP/2
fonts.googleapis.com/css2?family=Poppins:wght@200;300;400;500;600;700;800;900&display=swap
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://www.amiriitalia.net/capispalla-c-16_17_26/
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint5F:6D:48:87:16:89:1E:A5:57:29:92:8B:34:BD:F2:92:0C:7F:F2:50
ValidityMon, 08 Apr 2024 07:32:03 GMT - Mon, 01 Jul 2024 07:32:02 GMT

File type
gzip compressed data, max compression
Size
141 kB (141105 bytes)
Hash
b825043d329cd83e4da6eeb5190b72d1
292044bb09c9028a7ea569cf443f49a311ea63b8
16d3634391f46aa2d5f55dc6dc4822d863a82777d0ec6688c65a06b857d376fe

HTTP Headers

GET /css2?family=Poppins:wght@200;300;400;500;600;700;800;900&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiriitalia.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 26 Apr 2024 08:34:37 GMT
date: Fri, 26 Apr 2024 08:34:37 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.googleapis.com/css2?family=Roboto+Condensed:wght@300;400;700&display=swap

142.250.74.106

200 OK

8.6 kB

URL GET HTTP/3
fonts.googleapis.com/css2?family=Roboto+Condensed:wght@300;400;700&display=swap
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://www.amiriitalia.net/capispalla-c-16_17_26/
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint5F:6D:48:87:16:89:1E:A5:57:29:92:8B:34:BD:F2:92:0C:7F:F2:50
ValidityMon, 08 Apr 2024 07:32:03 GMT - Mon, 01 Jul 2024 07:32:02 GMT

File type
gzip compressed data, max compression
Size
8.6 kB (8573 bytes)
Hash
54e546d2fa04b69f2d61d6fc6eb4e0ed
9677d9d354bf90fd4d86f0d518e8b456fe089fb4
adb47a71a71d6a171e29ded96a06fe97cd95ec2e65de46e782cce1b5751d254f

HTTP Headers

GET /css2?family=Roboto+Condensed:wght@300;400;700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiriitalia.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 26 Apr 2024 08:34:37 GMT
date: Fri, 26 Apr 2024 08:34:37 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

fonts.googleapis.com/css2?family=Arima+Madurai:wght@300;400;500;700;800;900&display=swap

142.250.74.106

200 OK

8.4 kB

URL GET HTTP/3
fonts.googleapis.com/css2?family=Arima+Madurai:wght@300;400;500;700;800;900&display=swap
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://www.amiriitalia.net/capispalla-c-16_17_26/
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint5F:6D:48:87:16:89:1E:A5:57:29:92:8B:34:BD:F2:92:0C:7F:F2:50
ValidityMon, 08 Apr 2024 07:32:03 GMT - Mon, 01 Jul 2024 07:32:02 GMT

File type
gzip compressed data, max compression
Size
8.4 kB (8403 bytes)
Hash
b09048d490b6e9353fd0b1fe1963d70c
ae416f606331c8aec879af4b08e04f1b90c4fd6e
60eba129487020a74fcd9114cb5f966798b510fd60e9eed7f477962282062e3f

HTTP Headers

GET /css2?family=Arima+Madurai:wght@300;400;500;700;800;900&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiriitalia.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 26 Apr 2024 08:34:37 GMT
date: Fri, 26 Apr 2024 08:34:37 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

fonts.googleapis.com/css2?family=Libre+Franklin:wght@100;200;300;400;500;600;700;800;900&display=swap

142.250.74.106

200 OK

8.6 kB

URL GET HTTP/3
fonts.googleapis.com/css2?family=Libre+Franklin:wght@100;200;300;400;500;600;700;800;900&display=swap
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://www.amiriitalia.net/capispalla-c-16_17_26/
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint5F:6D:48:87:16:89:1E:A5:57:29:92:8B:34:BD:F2:92:0C:7F:F2:50
ValidityMon, 08 Apr 2024 07:32:03 GMT - Mon, 01 Jul 2024 07:32:02 GMT

File type
gzip compressed data, max compression
Size
8.6 kB (8600 bytes)
Hash
2fe77419fccf59f2cd9a8bd73e8734d4
c0ea8da3a901de86d15659081c61c9b0e539e1e4
32014e92651265ae723fb0b6f2e252718569a810eb5cf4f47264b9ff951fa20e

HTTP Headers

GET /css2?family=Libre+Franklin:wght@100;200;300;400;500;600;700;800;900&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiriitalia.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 26 Apr 2024 08:34:37 GMT
date: Fri, 26 Apr 2024 08:34:37 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

www.amiriitalia.net/includes/templates/amiriitalia/jscript/jquery.min.js

196.196.122.135

200 OK

44 kB

URL GET HTTP/2
www.amiriitalia.net/includes/templates/amiriitalia/jscript/jquery.min.js
IP
196.196.122.135:443
ASN
#58065 Orion Network Limited

Requested by
https://www.amiriitalia.net/capispalla-c-16_17_26/
Certificate
IssuerLet's Encrypt
Subjectamiriitalia.net
Fingerprint8B:B0:12:DF:20:42:56:CA:A2:69:F2:2D:26:AE:37:32:36:8C:E5:EF
ValidityTue, 19 Mar 2024 00:01:27 GMT - Mon, 17 Jun 2024 00:01:26 GMT

File type
gzip compressed data, max speed, from Unix
Size
44 kB (44440 bytes)
Hash
c5b70ba220ab8562e053a13a20012dee
37cbdc17f62a4112abebf93260801cd6890ce6b4
b032b98b4ac10f9f131396a62e9f43b2e2ab57a8f063c307d8b6fa186b2c7b0e

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /includes/templates/amiriitalia/jscript/jquery.min.js HTTP/1.1
Host: www.amiriitalia.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiriitalia.net/capispalla-c-16_17_26/
Cookie: zenid=k71bafnvbv629r0mkkt836hj66
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 08:34:07 GMT
content-type: application/javascript
last-modified: Wed, 27 Mar 2024 21:33:44 GMT
vary: Accept-Encoding
cache-control: max-age=300
expires: Fri, 26 Apr 2024 08:39:07 GMT
etag: W/"660490b8-15d9d"
content-encoding: gzip
X-Firefox-Spdy: h2

fonts.googleapis.com/css2?family=Staatliches&display=swap

142.250.74.106

200 OK

875 B

URL GET HTTP/3
fonts.googleapis.com/css2?family=Staatliches&display=swap
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://www.amiriitalia.net/capispalla-c-16_17_26/
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint5F:6D:48:87:16:89:1E:A5:57:29:92:8B:34:BD:F2:92:0C:7F:F2:50
ValidityMon, 08 Apr 2024 07:32:03 GMT - Mon, 01 Jul 2024 07:32:02 GMT

File type
gzip compressed data, max compression
Size
875 B (875 bytes)
Hash
bfaf4a63ea31b5048b8ad2e1f0f2dd19
ed4d855b6dfb95c65b9b0067758fda89de476513
d5cf09082dc9f6b4a37598a235a4404bf6666baa9f3156d43b6594ce56d69250

HTTP Headers

GET /css2?family=Staatliches&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiriitalia.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 26 Apr 2024 08:34:37 GMT
date: Fri, 26 Apr 2024 08:34:37 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

www.amiriitalia.net/includes/templates/amiriitalia/jscript/jscript_zmain.js

196.196.122.135

200 OK

11 kB

URL GET HTTP/2
www.amiriitalia.net/includes/templates/amiriitalia/jscript/jscript_zmain.js
IP
196.196.122.135:443
ASN
#58065 Orion Network Limited

Requested by
https://www.amiriitalia.net/capispalla-c-16_17_26/
Certificate
IssuerLet's Encrypt
Subjectamiriitalia.net
Fingerprint8B:B0:12:DF:20:42:56:CA:A2:69:F2:2D:26:AE:37:32:36:8C:E5:EF
ValidityTue, 19 Mar 2024 00:01:27 GMT - Mon, 17 Jun 2024 00:01:26 GMT

File type
gzip compressed data, max speed, from Unix
Size
11 kB (11403 bytes)
Hash
1f8bce5d1ef50f1d1ee34d04dac86169
8239c53721dff1537658d467d7a73f72a36d903a
6cb1ed015f3efef0ab2118772a6abc50f8a4c5a87db3697b085baae6b17e7ef0

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /includes/templates/amiriitalia/jscript/jscript_zmain.js HTTP/1.1
Host: www.amiriitalia.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiriitalia.net/capispalla-c-16_17_26/
Cookie: zenid=k71bafnvbv629r0mkkt836hj66
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 08:34:07 GMT
content-type: application/javascript
last-modified: Wed, 27 Mar 2024 21:33:44 GMT
vary: Accept-Encoding
cache-control: max-age=300
expires: Fri, 26 Apr 2024 08:39:07 GMT
etag: W/"660490b8-d411"
content-encoding: gzip
X-Firefox-Spdy: h2

www.amiriitalia.net/includes/templates/amiriitalia/css/stylesheet.css

196.196.122.135

200 OK

19 kB

URL GET HTTP/2
www.amiriitalia.net/includes/templates/amiriitalia/css/stylesheet.css
IP
196.196.122.135:443
ASN
#58065 Orion Network Limited

Requested by
https://www.amiriitalia.net/capispalla-c-16_17_26/
Certificate
IssuerLet's Encrypt
Subjectamiriitalia.net
Fingerprint8B:B0:12:DF:20:42:56:CA:A2:69:F2:2D:26:AE:37:32:36:8C:E5:EF
ValidityTue, 19 Mar 2024 00:01:27 GMT - Mon, 17 Jun 2024 00:01:26 GMT

File type
gzip compressed data, max speed, from Unix
Size
19 kB (19387 bytes)
Hash
60ffaf3c0cd67d0e3d796453bea2b639
8a56099eb7fecb34c9a3aac81c141a97da4732c0
911244a5079b09b70360a03246b4fa5cfcabc0a9a412efe6ace9c6e7f333db26

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /includes/templates/amiriitalia/css/stylesheet.css HTTP/1.1
Host: www.amiriitalia.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiriitalia.net/capispalla-c-16_17_26/
Cookie: zenid=k71bafnvbv629r0mkkt836hj66
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 08:34:07 GMT
content-type: text/css
last-modified: Wed, 27 Mar 2024 21:33:42 GMT
vary: Accept-Encoding
cache-control: max-age=3600
expires: Fri, 26 Apr 2024 09:34:07 GMT
etag: W/"660490b6-ec08"
content-encoding: gzip
X-Firefox-Spdy: h2

www.amiriitalia.net/includes/templates/amiriitalia/images/favicon.ico

196.196.122.135

200 OK

4.3 kB

URL GET HTTP/2
www.amiriitalia.net/includes/templates/amiriitalia/images/favicon.ico
IP
196.196.122.135:443
ASN
#58065 Orion Network Limited

Requested by
https://www.amiriitalia.net/capispalla-c-16_17_26/
Certificate
IssuerLet's Encrypt
Subjectamiriitalia.net
Fingerprint8B:B0:12:DF:20:42:56:CA:A2:69:F2:2D:26:AE:37:32:36:8C:E5:EF
ValidityTue, 19 Mar 2024 00:01:27 GMT - Mon, 17 Jun 2024 00:01:26 GMT

File type
MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
Size
4.3 kB (4286 bytes)
Hash
97e124ed42c4a53cb79e4f58857c2180
4ac758cc42e01e6d9715299b6a4c1302eb5ae48b
53100e9c5960187232b15c549ea4e1f4eb0acc296c598eb46ce14d3ef6117b75

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /includes/templates/amiriitalia/images/favicon.ico HTTP/1.1
Host: www.amiriitalia.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiriitalia.net/capispalla-c-16_17_26/
Cookie: zenid=k71bafnvbv629r0mkkt836hj66
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 08:34:08 GMT
content-type: image/x-icon
content-length: 4286
last-modified: Tue, 19 Mar 2024 03:40:58 GMT
cache-control: max-age=864000, public, must-revalidate
expires: Sat, 27 Apr 2024 08:34:08 GMT
etag: "65f9094a-10be"
accept-ranges: bytes
X-Firefox-Spdy: h2

fonts.googleapis.com/css2?family=Glegoo:wght@400;700&display=swap

142.250.74.106

200 OK

2.3 kB

URL GET HTTP/3
fonts.googleapis.com/css2?family=Glegoo:wght@400;700&display=swap
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://www.amiriitalia.net/capispalla-c-16_17_26/
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint5F:6D:48:87:16:89:1E:A5:57:29:92:8B:34:BD:F2:92:0C:7F:F2:50
ValidityMon, 08 Apr 2024 07:32:03 GMT - Mon, 01 Jul 2024 07:32:02 GMT

File type
ASCII text, with very long lines (2310), with no line terminators
Size
2.3 kB (2256 bytes)
Hash
5cf712cf2b0969e17db3030c359175fe
a6bd8bc94377508e45d8b0708c67057efd7ec40d
2590d0359a53a2ba40a5f4074121465e36893f365cf2a67f7c803249cbad479e

HTTP Headers

GET /css2?family=Glegoo:wght@400;700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiriitalia.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 26 Apr 2024 08:34:37 GMT
date: Fri, 26 Apr 2024 08:34:37 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

www.amiriitalia.net/includes/templates/amiriitalia/fonts/annimex-icons.ttf?teavmy

196.196.122.135

200 OK

141 kB

URL GET HTTP/2
www.amiriitalia.net/includes/templates/amiriitalia/fonts/annimex-icons.ttf?teavmy
IP
196.196.122.135:443
ASN
#58065 Orion Network Limited

Requested by
https://www.amiriitalia.net/capispalla-c-16_17_26/
Certificate
IssuerLet's Encrypt
Subjectamiriitalia.net
Fingerprint8B:B0:12:DF:20:42:56:CA:A2:69:F2:2D:26:AE:37:32:36:8C:E5:EF
ValidityTue, 19 Mar 2024 00:01:27 GMT - Mon, 17 Jun 2024 00:01:26 GMT

File type
TrueType Font data, 11 tables, 1st "OS/2", 14 names, Macintosh, type 1 string, adorn-icons
Size
141 kB (140608 bytes)
Hash
7d3c0284348a1f07b4cd6ff41354551b
6ff4eb286a7b3c980866382a40dd9279c99cb9cd
924025d175bc0292a137b2b46a4ee48e77c8618c3ea19e44214b6abf30f16005

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /includes/templates/amiriitalia/fonts/annimex-icons.ttf?teavmy HTTP/1.1
Host: www.amiriitalia.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiriitalia.net/includes/templates/amiriitalia/css/style_plugins.css
Cookie: zenid=k71bafnvbv629r0mkkt836hj66
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 08:34:08 GMT
content-type: application/x-font-ttf
content-length: 140608
last-modified: Wed, 08 Jun 2022 09:11:08 GMT
cache-control: max-age=864000, public, must-revalidate
expires: Fri, 26 Apr 2024 08:39:08 GMT
etag: "62a067ac-22540"
accept-ranges: bytes
X-Firefox-Spdy: h2

www.amiriitalia.net/includes/templates/amiriitalia/css/style_zp.css

196.196.122.135

200 OK

17 kB

URL GET HTTP/2
www.amiriitalia.net/includes/templates/amiriitalia/css/style_zp.css
IP
196.196.122.135:443
ASN
#58065 Orion Network Limited

Requested by
https://www.amiriitalia.net/capispalla-c-16_17_26/
Certificate
IssuerLet's Encrypt
Subjectamiriitalia.net
Fingerprint8B:B0:12:DF:20:42:56:CA:A2:69:F2:2D:26:AE:37:32:36:8C:E5:EF
ValidityTue, 19 Mar 2024 00:01:27 GMT - Mon, 17 Jun 2024 00:01:26 GMT

File type
ASCII text
Size
17 kB (17133 bytes)
Hash
ac795eb348eb94acf1a7ff778370f2cb
b9c00ebd8bcd9b4b4f1fb95bc8b916dc9e12a3cf
41a73633a999b000703b59db8d9f87d7f6372225dfd3740c48fd00f293398701

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /includes/templates/amiriitalia/css/style_zp.css HTTP/1.1
Host: www.amiriitalia.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiriitalia.net/capispalla-c-16_17_26/
Cookie: zenid=k71bafnvbv629r0mkkt836hj66
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 08:34:07 GMT
content-type: text/css
last-modified: Wed, 27 Mar 2024 21:33:42 GMT
vary: Accept-Encoding
cache-control: max-age=3600
expires: Fri, 26 Apr 2024 09:34:07 GMT
etag: W/"660490b6-42ed"
content-encoding: gzip
X-Firefox-Spdy: h2

fonts.googleapis.com/css2?family=Montserrat:wght@300;400;500;600;700;800&display=swap

142.250.74.106

200 OK

11 kB

URL GET HTTP/2
fonts.googleapis.com/css2?family=Montserrat:wght@300;400;500;600;700;800&display=swap
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://www.amiriitalia.net/capispalla-c-16_17_26/
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint5F:6D:48:87:16:89:1E:A5:57:29:92:8B:34:BD:F2:92:0C:7F:F2:50
ValidityMon, 08 Apr 2024 07:32:03 GMT - Mon, 01 Jul 2024 07:32:02 GMT

File type
ASCII text
Size
11 kB (10980 bytes)
Hash
0f3106ce705bbf98161187fc94d15542
99688690db95c115bbc142ac516d7aa8d8bfade8
376aa716f5acbcefc1b0a7684a56f4d642f23bf6534917d787d163c2ad81ebb4

HTTP Headers

GET /css2?family=Montserrat:wght@300;400;500;600;700;800&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiriitalia.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 26 Apr 2024 08:34:37 GMT
date: Fri, 26 Apr 2024 08:34:37 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.googleapis.com/css2?family=Libre+Baskerville:ital,wght@0,400;0,700;1,400&display=swap

142.250.74.106

200 OK

2.6 kB

URL GET HTTP/2
fonts.googleapis.com/css2?family=Libre+Baskerville:ital,wght@0,400;0,700;1,400&display=swap
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://www.amiriitalia.net/capispalla-c-16_17_26/
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint5F:6D:48:87:16:89:1E:A5:57:29:92:8B:34:BD:F2:92:0C:7F:F2:50
ValidityMon, 08 Apr 2024 07:32:03 GMT - Mon, 01 Jul 2024 07:32:02 GMT

File type
ASCII text, with very long lines (2605), with no line terminators
Size
2.6 kB (2551 bytes)
Hash
d7e91faccd8b5b75c6794babc60413e9
490a3fe1bc93ea7dd9cff81c80eca5ea6cad68b3
8d4ecadfe561b26cf0addd9f7e39055b19844488449e0091a936a77fdff727d9

HTTP Headers

GET /css2?family=Libre+Baskerville:ital,wght@0,400;0,700;1,400&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiriitalia.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 26 Apr 2024 08:34:37 GMT
date: Fri, 26 Apr 2024 08:34:37 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

www.amiriitalia.net/includes/templates/amiriitalia/jscript/jscript_plugins.js

196.196.122.135

200 OK

273 kB

URL GET HTTP/2
www.amiriitalia.net/includes/templates/amiriitalia/jscript/jscript_plugins.js
IP
196.196.122.135:443
ASN
#58065 Orion Network Limited

Requested by
https://www.amiriitalia.net/capispalla-c-16_17_26/
Certificate
IssuerLet's Encrypt
Subjectamiriitalia.net
Fingerprint8B:B0:12:DF:20:42:56:CA:A2:69:F2:2D:26:AE:37:32:36:8C:E5:EF
ValidityTue, 19 Mar 2024 00:01:27 GMT - Mon, 17 Jun 2024 00:01:26 GMT

File type

Size
273 kB (273266 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /includes/templates/amiriitalia/jscript/jscript_plugins.js HTTP/1.1
Host: www.amiriitalia.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiriitalia.net/capispalla-c-16_17_26/
Cookie: zenid=k71bafnvbv629r0mkkt836hj66
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 08:34:07 GMT
content-type: application/javascript
last-modified: Wed, 27 Mar 2024 21:33:44 GMT
vary: Accept-Encoding
cache-control: max-age=300
expires: Fri, 26 Apr 2024 08:39:07 GMT
etag: W/"660490b8-42b72"
content-encoding: gzip
X-Firefox-Spdy: h2

fonts.googleapis.com/css2?family=Nunito+Sans:ital,wght@0,200;0,300;0,400;0,600;0,800;0,900;1,700&display=swap

142.250.74.106

200 OK

16 kB

URL GET HTTP/3
fonts.googleapis.com/css2?family=Nunito+Sans:ital,wght@0,200;0,300;0,400;0,600;0,800;0,900;1,700&display=swap
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://www.amiriitalia.net/capispalla-c-16_17_26/
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint5F:6D:48:87:16:89:1E:A5:57:29:92:8B:34:BD:F2:92:0C:7F:F2:50
ValidityMon, 08 Apr 2024 07:32:03 GMT - Mon, 01 Jul 2024 07:32:02 GMT

File type
ASCII text
Size
16 kB (15598 bytes)
Hash
56e4df90a29f863f6faa6ccb7567e401
9f3f0306cb0054763e377c6f456890e33f546cd9
165c919c26eb19e053a7cf522566f7cfa686a2782e252b7cd39e15e5d8b4bf15

HTTP Headers

GET /css2?family=Nunito+Sans:ital,wght@0,200;0,300;0,400;0,600;0,800;0,900;1,700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiriitalia.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 26 Apr 2024 08:34:37 GMT
date: Fri, 26 Apr 2024 08:34:37 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

fonts.googleapis.com/css2?family=Roboto:wght@100;300;400;500;700;900&display=swap

142.250.74.106

200 OK

14 kB

URL GET HTTP/3
fonts.googleapis.com/css2?family=Roboto:wght@100;300;400;500;700;900&display=swap
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://www.amiriitalia.net/capispalla-c-16_17_26/
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint5F:6D:48:87:16:89:1E:A5:57:29:92:8B:34:BD:F2:92:0C:7F:F2:50
ValidityMon, 08 Apr 2024 07:32:03 GMT - Mon, 01 Jul 2024 07:32:02 GMT

File type
ASCII text
Size
14 kB (14029 bytes)
Hash
9c12b57a25710853b762d48b28545b5c
57a79d40792f42232b317bd9529c98efa29fc315
35ae53cd6f0cde71e622f6e54dc576bb82ffab56c9e41b1298f932eebf963eb9

HTTP Headers

GET /css2?family=Roboto:wght@100;300;400;500;700;900&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiriitalia.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 26 Apr 2024 08:34:37 GMT
date: Fri, 26 Apr 2024 08:34:37 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

www.amiriitalia.net/includes/templates/amiriitalia/css/style_zo.css

196.196.122.135

200 OK

153 kB

URL GET HTTP/2
www.amiriitalia.net/includes/templates/amiriitalia/css/style_zo.css
IP
196.196.122.135:443
ASN
#58065 Orion Network Limited

Requested by
https://www.amiriitalia.net/capispalla-c-16_17_26/
Certificate
IssuerLet's Encrypt
Subjectamiriitalia.net
Fingerprint8B:B0:12:DF:20:42:56:CA:A2:69:F2:2D:26:AE:37:32:36:8C:E5:EF
ValidityTue, 19 Mar 2024 00:01:27 GMT - Mon, 17 Jun 2024 00:01:26 GMT

File type
assembler source, ASCII text, with very long lines (533)
Size
153 kB (152916 bytes)
Hash
34f2d34a769a1986a14a985fec5b2bb5
6438280861ded36c4218e289f42307eb8c58b87f
e4bd9be5b0c62deeabecb908934fc50a186c3a0f12e48ead91cd61af4e56f62a

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /includes/templates/amiriitalia/css/style_zo.css HTTP/1.1
Host: www.amiriitalia.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiriitalia.net/capispalla-c-16_17_26/
Cookie: zenid=k71bafnvbv629r0mkkt836hj66
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 08:34:07 GMT
content-type: text/css
last-modified: Wed, 27 Mar 2024 21:33:42 GMT
vary: Accept-Encoding
cache-control: max-age=3600
expires: Fri, 26 Apr 2024 09:34:07 GMT
etag: W/"660490b6-25554"
content-encoding: gzip
X-Firefox-Spdy: h2

fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2

216.58.207.227

200 OK

7.7 kB

URL GET HTTP/2
fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://www.amiriitalia.net/capispalla-c-16_17_26/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint93:EC:35:60:8A:5B:23:EA:C0:36:D7:AE:03:0C:C3:77:17:5A:20:33
ValidityMon, 08 Apr 2024 07:31:57 GMT - Mon, 01 Jul 2024 07:31:56 GMT

File type
Web Open Font Format (Version 2), TrueType, length 7748, version 1.0
Size
7.7 kB (7748 bytes)
Hash
a09f2fccfee35b7247b08a1a266f0328
0da2d17e738f46d2a09e6fb7969da451719a9820
cd36de204aca2d5fa263a731f7c20009b5e3d754ba1f1e03c33e93a48f3e7446

HTTP Headers

GET /s/poppins/v21/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.amiriitalia.net
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7748
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Apr 2024 03:25:26 GMT
expires: Wed, 23 Apr 2025 03:25:26 GMT
cache-control: public, max-age=31536000
age: 277752
last-modified: Fri, 22 Mar 2024 00:01:14 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.googleapis.com/icon?family=Material+Icons

142.250.74.106

200 OK

565 B

URL GET HTTP/2
fonts.googleapis.com/icon?family=Material+Icons
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://www.amiriitalia.net/capispalla-c-16_17_26/
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint5F:6D:48:87:16:89:1E:A5:57:29:92:8B:34:BD:F2:92:0C:7F:F2:50
ValidityMon, 08 Apr 2024 07:32:03 GMT - Mon, 01 Jul 2024 07:32:02 GMT

File type
ASCII text, with very long lines (588), with no line terminators
Size
565 B (565 bytes)
Hash
959a533a3dc02649e0cc3f8f67d942af
34db49ff64aed8b51beaba5b9928ad504a4df335
24864ed3ee6fab66640980d4c24640e579e5583764a8ee8c4f09decf27977247

HTTP Headers

GET /icon?family=Material+Icons HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiriitalia.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 26 Apr 2024 08:34:37 GMT
date: Fri, 26 Apr 2024 08:34:37 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.googleapis.com/css2?family=Jost:wght@300;400;500;600;700;800&display=swap

142.250.74.106

200 OK

6.3 kB

URL GET HTTP/2
fonts.googleapis.com/css2?family=Jost:wght@300;400;500;600;700;800&display=swap
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://www.amiriitalia.net/capispalla-c-16_17_26/
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint5F:6D:48:87:16:89:1E:A5:57:29:92:8B:34:BD:F2:92:0C:7F:F2:50
ValidityMon, 08 Apr 2024 07:32:03 GMT - Mon, 01 Jul 2024 07:32:02 GMT

File type
ASCII text, with very long lines (6420), with no line terminators
Size
6.3 kB (6258 bytes)
Hash
74a37b69a4c15801b8edcc9cd42c503c
23d843eff81be41b551ff2ab24a550017f77207f
d706baa7aa0457db3dc2bbb3af441adb4dc2cf87f8c3611c85a281ddbe939ec7

HTTP Headers

GET /css2?family=Jost:wght@300;400;500;600;700;800&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiriitalia.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 26 Apr 2024 08:34:37 GMT
date: Fri, 26 Apr 2024 08:34:37 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.googleapis.com/css2?family=Archivo+Narrow:wght@400;500;600;700&display=swap

142.250.74.106

200 OK

5.0 kB

URL GET HTTP/3
fonts.googleapis.com/css2?family=Archivo+Narrow:wght@400;500;600;700&display=swap
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://www.amiriitalia.net/capispalla-c-16_17_26/
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint5F:6D:48:87:16:89:1E:A5:57:29:92:8B:34:BD:F2:92:0C:7F:F2:50
ValidityMon, 08 Apr 2024 07:32:03 GMT - Mon, 01 Jul 2024 07:32:02 GMT

File type
ASCII text, with very long lines (5076), with no line terminators
Size
5.0 kB (4968 bytes)
Hash
48d4822accd8873d2852967645115cef
1b20048c205fa24b4fff0afa458ee1fa2c45612f
27b1f874ce4c14645ec6df13bdf94d9a3381db78c5e4720903dd20d0e4bbc0b7

HTTP Headers

GET /css2?family=Archivo+Narrow:wght@400;500;600;700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiriitalia.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 26 Apr 2024 08:34:37 GMT
date: Fri, 26 Apr 2024 08:34:37 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

fonts.googleapis.com/css2?family=Alata&display=swap

142.250.74.106

200 OK

1.2 kB

URL GET HTTP/3
fonts.googleapis.com/css2?family=Alata&display=swap
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://www.amiriitalia.net/capispalla-c-16_17_26/
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint5F:6D:48:87:16:89:1E:A5:57:29:92:8B:34:BD:F2:92:0C:7F:F2:50
ValidityMon, 08 Apr 2024 07:32:03 GMT - Mon, 01 Jul 2024 07:32:02 GMT

File type
ASCII text, with very long lines (1179), with no line terminators
Size
1.2 kB (1152 bytes)
Hash
1f9ff1758f44a8354f9be6ccf531cb8a
7fd5c0f675262d59736c063d0569dd7fab71256f
37dfb66736045e51980abc5c9c002b3a658a8fadc626f4a0aacf957fe90b6809

HTTP Headers

GET /css2?family=Alata&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiriitalia.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 26 Apr 2024 08:34:37 GMT
date: Fri, 26 Apr 2024 08:34:37 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJfecg.woff2

216.58.207.227

200 OK

7.9 kB

URL GET HTTP/2
fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJfecg.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://www.amiriitalia.net/capispalla-c-16_17_26/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint93:EC:35:60:8A:5B:23:EA:C0:36:D7:AE:03:0C:C3:77:17:5A:20:33
ValidityMon, 08 Apr 2024 07:31:57 GMT - Mon, 01 Jul 2024 07:31:56 GMT

File type
Web Open Font Format (Version 2), TrueType, length 7884, version 1.0
Size
7.9 kB (7884 bytes)
Hash
9212f6f9860f9fc6c69b02fedf6db8c3
ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b
7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f

HTTP Headers

GET /s/poppins/v21/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.amiriitalia.net
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7884
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 26 Apr 2024 05:53:15 GMT
expires: Sat, 26 Apr 2025 05:53:15 GMT
cache-control: public, max-age=31536000
last-modified: Fri, 22 Mar 2024 00:00:38 GMT
content-type: font/woff2
age: 9683
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2

216.58.207.227

200 OK

8.0 kB

URL GET HTTP/2
fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://www.amiriitalia.net/capispalla-c-16_17_26/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint93:EC:35:60:8A:5B:23:EA:C0:36:D7:AE:03:0C:C3:77:17:5A:20:33
ValidityMon, 08 Apr 2024 07:31:57 GMT - Mon, 01 Jul 2024 07:31:56 GMT

File type
Web Open Font Format (Version 2), TrueType, length 8000, version 1.0
Size
8.0 kB (8000 bytes)
Hash
72993dddf88a63e8f226656f7de88e57
179f97ec0275f09603a8db94d4380eb584d81cd5
f4e80d9dfd374d02989b87a27b5ed4cb78fbb177c27f1478e9a8b0afb7513149

HTTP Headers

GET /s/poppins/v21/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.amiriitalia.net
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 8000
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 26 Apr 2024 05:53:26 GMT
expires: Sat, 26 Apr 2025 05:53:26 GMT
cache-control: public, max-age=31536000
last-modified: Fri, 22 Mar 2024 00:00:59 GMT
content-type: font/woff2
age: 9672
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.googleapis.com/css2?family=Playfair+Display:wght@400;500;600;700;800;900&display=swap

142.250.74.106

200 OK

9.5 kB

URL GET HTTP/3
fonts.googleapis.com/css2?family=Playfair+Display:wght@400;500;600;700;800;900&display=swap
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://www.amiriitalia.net/capispalla-c-16_17_26/
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint5F:6D:48:87:16:89:1E:A5:57:29:92:8B:34:BD:F2:92:0C:7F:F2:50
ValidityMon, 08 Apr 2024 07:32:03 GMT - Mon, 01 Jul 2024 07:32:02 GMT

File type
ASCII text, with very long lines (9708), with no line terminators
Size
9.5 kB (9492 bytes)
Hash
cbb724e5f0c70cc680b0a3cf208a602e
7bb23f4e0d2a2306ce2a8c44b5c29778235d4580
533e25ed8b776dfe43e6cfb857fa5feee61b4e554dead3ec80cbaf2afa928d21

HTTP Headers

GET /css2?family=Playfair+Display:wght@400;500;600;700;800;900&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiriitalia.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 26 Apr 2024 08:34:37 GMT
date: Fri, 26 Apr 2024 08:34:37 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2

216.58.207.227

200 OK

7.8 kB

URL GET HTTP/2
fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://www.amiriitalia.net/capispalla-c-16_17_26/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint93:EC:35:60:8A:5B:23:EA:C0:36:D7:AE:03:0C:C3:77:17:5A:20:33
ValidityMon, 08 Apr 2024 07:31:57 GMT - Mon, 01 Jul 2024 07:31:56 GMT

File type
Web Open Font Format (Version 2), TrueType, length 7816, version 1.0
Size
7.8 kB (7816 bytes)
Hash
25b0e113ca7cce3770d542736db26368
cb726212d5d525021752a1d8470a0fb593e0c49e
9338e65fc077355c7a87ae0d64cc101e23b9bf8ad78ae65f0f319c857311b526

HTTP Headers

GET /s/poppins/v21/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.amiriitalia.net
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7816
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 26 Apr 2024 05:54:37 GMT
expires: Sat, 26 Apr 2025 05:54:37 GMT
cache-control: public, max-age=31536000
last-modified: Fri, 22 Mar 2024 00:00:32 GMT
content-type: font/woff2
age: 9601
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

www.amiriitalia.net/includes/templates/amiriitalia/css/style_plugins.css

196.196.122.135

200 OK

221 kB

URL GET HTTP/2
www.amiriitalia.net/includes/templates/amiriitalia/css/style_plugins.css
IP
196.196.122.135:443
ASN
#58065 Orion Network Limited

Requested by
https://www.amiriitalia.net/capispalla-c-16_17_26/
Certificate
IssuerLet's Encrypt
Subjectamiriitalia.net
Fingerprint8B:B0:12:DF:20:42:56:CA:A2:69:F2:2D:26:AE:37:32:36:8C:E5:EF
ValidityTue, 19 Mar 2024 00:01:27 GMT - Mon, 17 Jun 2024 00:01:26 GMT

File type

Size
221 kB (220793 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /includes/templates/amiriitalia/css/style_plugins.css HTTP/1.1
Host: www.amiriitalia.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiriitalia.net/capispalla-c-16_17_26/
Cookie: zenid=k71bafnvbv629r0mkkt836hj66
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 08:34:07 GMT
content-type: text/css
last-modified: Wed, 27 Mar 2024 21:33:42 GMT
vary: Accept-Encoding
cache-control: max-age=3600
expires: Fri, 26 Apr 2024 09:34:07 GMT
etag: W/"660490b6-35e79"
content-encoding: gzip
X-Firefox-Spdy: h2

fonts.googleapis.com/css2?family=Merienda:wght@400;700&display=swap

142.250.74.106

200 OK

2.4 kB

URL GET HTTP/3
fonts.googleapis.com/css2?family=Merienda:wght@400;700&display=swap
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://www.amiriitalia.net/capispalla-c-16_17_26/
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint5F:6D:48:87:16:89:1E:A5:57:29:92:8B:34:BD:F2:92:0C:7F:F2:50
ValidityMon, 08 Apr 2024 07:32:03 GMT - Mon, 01 Jul 2024 07:32:02 GMT

File type
ASCII text, with very long lines (2424), with no line terminators
Size
2.4 kB (2370 bytes)
Hash
4c11106146294a0f2e0f9a7cd792e1d2
53f4815a87a769d098f64ad9dfafc157f7d572d1
66f67ff9a9b48f878ba4db2df85dcb68e5640e189ecc19cb7a4a8604b7412e94

HTTP Headers

GET /css2?family=Merienda:wght@400;700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiriitalia.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 26 Apr 2024 08:34:37 GMT
date: Fri, 26 Apr 2024 08:34:37 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

fonts.googleapis.com/css2?family=Quicksand:wght@400;500;600;700&display=swap

142.250.74.106

200 OK

4.8 kB

URL GET HTTP/3
fonts.googleapis.com/css2?family=Quicksand:wght@400;500;600;700&display=swap
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://www.amiriitalia.net/capispalla-c-16_17_26/
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint5F:6D:48:87:16:89:1E:A5:57:29:92:8B:34:BD:F2:92:0C:7F:F2:50
ValidityMon, 08 Apr 2024 07:32:03 GMT - Mon, 01 Jul 2024 07:32:02 GMT

File type
ASCII text, with very long lines (4884), with no line terminators
Size
4.8 kB (4776 bytes)
Hash
b600e1e7a6306ebd12e31c84c6e1f1e1
f60eb78fc60e2436151e80ef892f5058a4fdf874
bf93d7866220f1f029dbd4d40e9c34c92f92b6ccc5cdd2fe091e2518941cb663

HTTP Headers

GET /css2?family=Quicksand:wght@400;500;600;700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiriitalia.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 26 Apr 2024 08:34:37 GMT
date: Fri, 26 Apr 2024 08:34:37 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

fonts.googleapis.com/css2?family=Crimson+Pro:wght@200;300;400;500;600;700;800;900&display=swap

142.250.74.106

200 OK

9.7 kB

URL GET HTTP/3
fonts.googleapis.com/css2?family=Crimson+Pro:wght@200;300;400;500;600;700;800;900&display=swap
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://www.amiriitalia.net/capispalla-c-16_17_26/
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint5F:6D:48:87:16:89:1E:A5:57:29:92:8B:34:BD:F2:92:0C:7F:F2:50
ValidityMon, 08 Apr 2024 07:32:03 GMT - Mon, 01 Jul 2024 07:32:02 GMT

File type
ASCII text, with very long lines (9912), with no line terminators
Size
9.7 kB (9696 bytes)
Hash
40698f9f19b1a609d2636f5eef9a3e30
46ff448bbf2fb3b30ecc73402877f8845445f8ba
f3f7baade7af0f0b4587523c53317642d7c18c2501e70aaae37b93e7ee9a6545

HTTP Headers

GET /css2?family=Crimson+Pro:wght@200;300;400;500;600;700;800;900&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiriitalia.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 26 Apr 2024 08:34:37 GMT
date: Fri, 26 Apr 2024 08:34:37 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (7)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (39)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash