Report - gestionale.nezwork.it/

Report Overview

Submitted URL
gestionale.nezwork.it/
IP
77.81.235.147
ASN
#31034 Aruba S.p.A.
Submitted
2023-02-04 11:16:43
Access
Website Title
Final URL
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
30

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
firefox.settings.services.mozilla.com	867	2020-06-04T22:08:41Z	2023-03-13T05:09:10Z	782 B	2.4 kB	35.241.9.150
content-signature-2.cdn.mozilla.net	1152	2020-11-03T13:26:46Z	2023-03-13T05:09:35Z	413 B	5.8 kB	34.160.144.191
contile.services.mozilla.com	1114	2021-05-27T20:32:35Z	2023-03-13T05:09:13Z	333 B	391 B	34.117.237.239
push.services.mozilla.com	2140	2014-10-24T10:27:06Z	2023-03-13T05:09:14Z	606 B	127 B	54.149.117.124
img-getpocket.cdn.mozilla.net	1631	2018-06-22T01:36:00Z	2023-03-13T05:09:16Z	3.2 kB	64 kB	34.120.237.76
gestionale.nezwork.it	unknown	2022-06-02T14:13:36Z	2023-03-13T07:16:33Z	14 kB	2.0 MB	77.81.235.147
r3.o.lencr.org	344	2020-12-02T09:52:13Z	2023-03-13T05:09:07Z	2.4 kB	6.2 kB	23.36.76.226

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2023-02-04	medium	gestionale.nezwork.it/	Phishing
2023-02-04	medium	gestionale.nezwork.it/include/javascript/calendar.js?v=V7eUwhotklML5Gh_yLEtRQ	Phishing
2023-02-04	medium	gestionale.nezwork.it/cache/themes/SuiteP/css/deprecated.css?v=V7eUwhotklML5Gh_yLEtRQ	Phishing
2023-02-04	medium	gestionale.nezwork.it/themes/SuiteP/css/colourSelector.php	Phishing
2023-02-04	medium	gestionale.nezwork.it/themes/SuiteP/js/jscolor.js?v=V7eUwhotklML5Gh_yLEtRQ	Phishing
2023-02-04	medium	gestionale.nezwork.it/cache/include/javascript/sugar_grp1_yui.js?v=V7eUwhotklML5Gh_yLEtRQ	Phishing
2023-02-04	medium	gestionale.nezwork.it/modules/Users/login.css?v=V7eUwhotklML5Gh_yLEtRQ	Phishing
2023-02-04	medium	gestionale.nezwork.it/cache/themes/SuiteP/css/style.css?v=V7eUwhotklML5Gh_yLEtRQ	Phishing
2023-02-04	medium	gestionale.nezwork.it/cache/include/javascript/sugar_grp1_jquery.js?v=V7eUwhotklML5Gh_yLEtRQ	Phishing
2023-02-04	medium	gestionale.nezwork.it/themes/default/images/company_logo.png?v=V7eUwhotklML5Gh_yLEtRQ	Phishing
2023-02-04	medium	gestionale.nezwork.it/themes/SuiteP/images/p_login_logo.svg	Phishing
2023-02-04	medium	gestionale.nezwork.it/themes/SuiteP/images/forms/select.ico	Phishing
2023-02-04	medium	gestionale.nezwork.it/themes/SuiteP/images/login_bg.svg	Phishing
2023-02-04	medium	gestionale.nezwork.it/cache/include/javascript/sugar_grp1.js?v=V7eUwhotklML5Gh_yLEtRQ	Phishing
2023-02-04	medium	gestionale.nezwork.it/themes/SuiteP/images/sugar_icon.ico?v=V7eUwhotklML5Gh_yLEtRQ	Phishing

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (16)

	URL	Size	First Seen	Last Seen
	gestionale.nezwork.it/index.php?action=Login&module=Users	95 B	2023-03-13	2023-03-13
Pretty URL gestionale.nezwork.it/index.php?action=Login&module=Users IP 77.81.235.147 ASN #31034 Aruba S.p.A. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-13 16:41:26 Last Seen2023-03-13 16:41:26 Times Seen1 Hash 8c41d631825fc130ac718eb857bb06cb a2be6d32ec02aa218c51be7fa3825f93f5824a61 839c45c7cb4d9c19599f2cb8d5d4cf03b253958f20e71b34d43f432369e09135 Loading...

	gestionale.nezwork.it/cache/include/javascript/sugar_field_grp.js?v=V7eUwhotklML5Gh_yLEtRQ	20 kB	2023-03-08	2023-11-28
Pretty URL gestionale.nezwork.it/cache/include/javascript/sugar_field_grp.js?v=V7eUwhotklML5Gh_yLEtRQ IP 77.81.235.147 ASN #31034 Aruba S.p.A. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 02:19:34 Last Seen2023-11-28 22:30:04 Times Seen39 Hash 339b3b1d92f554dbac7fad410360c8f1 0d4fedb53a5dc2dcc2e38adf9eacc207b82781aa e4e1d71a85e9dbffe2271a87c25e3641e250decd8bf7016279f4aa400a9b0824 Loading...

	gestionale.nezwork.it/index.php?action=Login&module=Users	236 B	2023-03-08	2024-02-12
Pretty URL gestionale.nezwork.it/index.php?action=Login&module=Users IP 77.81.235.147 ASN #31034 Aruba S.p.A. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 02:19:34 Last Seen2024-02-12 03:18:12 Times Seen21 Hash 338aa3a1c63ed3566d22782f4b2dd930 2f04306bac08d485ab2ca54b1759e469fd26809a 4dd85702f3a4e911cd6d26709de3fff726aa198f4cee91cf74708c46ae32abef Loading...

	gestionale.nezwork.it/modules/Users/login.js?v=V7eUwhotklML5Gh_yLEtRQ	4.6 kB	2023-03-08	2023-11-28
Pretty URL gestionale.nezwork.it/modules/Users/login.js?v=V7eUwhotklML5Gh_yLEtRQ IP 77.81.235.147 ASN #31034 Aruba S.p.A. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 02:19:34 Last Seen2023-11-28 22:30:04 Times Seen30 Hash d2a804895fc1e0545d8974d96451ea62 5ba30af23a96b25c4ac7e587d5854f58d6782d87 8354d8ce0398527e92ac427c34b364bc7b09b05e0e37628d3d1d321ce9dd3a60 Loading...

	unknown	0 B	2023-03-07	2024-04-19
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:01:59 Last Seen2024-04-19 09:10:40 Times Seen36955366 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	gestionale.nezwork.it/index.php?action=Login&module=Users	123 B	2023-03-08	2024-02-12
Pretty URL gestionale.nezwork.it/index.php?action=Login&module=Users IP 77.81.235.147 ASN #31034 Aruba S.p.A. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 02:19:34 Last Seen2024-02-12 03:18:12 Times Seen21 Hash f9f4cf69df3f36efdcb709e3d19f8b21 fa9af959cc5cb4099c03a8b63eecb843032fbd06 234310289ea9d56188c01a4bd02b4855fc959ff4a92df706a2afd62a4324e5bc Loading...

	gestionale.nezwork.it/index.php?action=Login&module=Users	509 B	2023-03-08	2023-05-29
Pretty URL gestionale.nezwork.it/index.php?action=Login&module=Users IP 77.81.235.147 ASN #31034 Aruba S.p.A. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 02:19:34 Last Seen2023-05-29 02:17:24 Times Seen17 Hash e230185bff71dc750963289d23ff1977 6dbab2e755d19a0eadab897cc3f87e10cd19af20 e97a580915c5b53d15336cf9ce59bf3b013fae808ff56c01f1940b31751c7acb Loading...

	gestionale.nezwork.it/index.php?action=Login&module=Users	3.1 kB	2023-03-08	2023-05-29
Pretty URL gestionale.nezwork.it/index.php?action=Login&module=Users IP 77.81.235.147 ASN #31034 Aruba S.p.A. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 02:19:34 Last Seen2023-05-29 02:17:24 Times Seen17 Hash d3694817d8283269a391b8116610a2d5 42af7c0c77404b0308f0894ec4e715d032f6e89c 2da6cc8e21ae5287bec6b35fea81a2f36c82bfa4ac4eeaf56e93ea7cbfb66553 Loading...

	gestionale.nezwork.it/include/javascript/calendar.js?v=V7eUwhotklML5Gh_yLEtRQ	10 kB	2023-03-08	2023-09-18
Pretty URL gestionale.nezwork.it/include/javascript/calendar.js?v=V7eUwhotklML5Gh_yLEtRQ IP 77.81.235.147 ASN #31034 Aruba S.p.A. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 02:19:34 Last Seen2023-09-18 10:26:40 Times Seen26 Hash f66e74c73108b6a49778709829f8eeb5 2ec896069c0850e4ec4b758a1257ac1c7e4ff7bd 54ea3f80d84b78a7216d88bdb5d71c261ab3ecc328f43abe5dad5a437354931e Loading...

	gestionale.nezwork.it/cache/themes/SuiteP/js/style.js?v=V7eUwhotklML5Gh_yLEtRQ	24 kB	2023-03-08	2023-05-29
Pretty URL gestionale.nezwork.it/cache/themes/SuiteP/js/style.js?v=V7eUwhotklML5Gh_yLEtRQ IP 77.81.235.147 ASN #31034 Aruba S.p.A. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 02:19:34 Last Seen2023-05-29 02:17:24 Times Seen25 Hash c3e0f585489819d1e799947d0a8bd159 0cfcc56d1c3cb233e119df1302fa343eced6e05a 2c61fc6219910891fa019cf86fb2df831fa5b867687bbb8f531e31b7c479251c Loading...

	gestionale.nezwork.it/index.php?action=Login&module=Users	32 B	2023-03-08	2024-02-12
Pretty URL gestionale.nezwork.it/index.php?action=Login&module=Users IP 77.81.235.147 ASN #31034 Aruba S.p.A. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 02:19:34 Last Seen2024-02-12 03:18:12 Times Seen34 Hash 4cc0f38361c8d8585f7a1186a552cb84 a8fd4e36fff09dea7f322a688ae684f3ccb3800b 331379c9a4c3f12ea0525b39d6ef78b6a30ee7aebc7742334a2740f2a3c4de03 Loading...

	gestionale.nezwork.it/index.php?action=Login&module=Users	32 B	2023-03-08	2024-02-12
Pretty URL gestionale.nezwork.it/index.php?action=Login&module=Users IP 77.81.235.147 ASN #31034 Aruba S.p.A. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 02:19:34 Last Seen2024-02-12 03:18:12 Times Seen34 Hash 8800d262f503f17fb3ff8ba8b6ca44e4 c4797f5da6d4fce1f2ec6906527244d288a191c8 940d82b4b5070dbbc933fb9e7a6606d0f7a5b370c0695ab6d113a19c322db153 Loading...

	gestionale.nezwork.it/cache/include/javascript/sugar_grp1_jquery.js?v=V7eUwhotklML5Gh_yLEtRQ	663 kB	2023-03-08	2023-05-29
Pretty URL gestionale.nezwork.it/cache/include/javascript/sugar_grp1_jquery.js?v=V7eUwhotklML5Gh_yLEtRQ IP 77.81.235.147 ASN #31034 Aruba S.p.A. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 23:35:46 Last Seen2023-05-29 02:17:24 Times Seen20 Hash ff572b0e8d4575b964ae4fc506da67aa 5dfc1ac24c5aadf7098e8be157254fa0dd8bf827 ea09a15315b09789758b0affbf366a457224d3aa8ab5199827f428ffb2bc1fe1 Loading...

	gestionale.nezwork.it/themes/SuiteP/js/jscolor.js?v=V7eUwhotklML5Gh_yLEtRQ	42 kB	2023-03-08	2023-05-29
Pretty URL gestionale.nezwork.it/themes/SuiteP/js/jscolor.js?v=V7eUwhotklML5Gh_yLEtRQ IP 77.81.235.147 ASN #31034 Aruba S.p.A. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 02:19:34 Last Seen2023-05-29 02:17:24 Times Seen25 Hash f9ea5b1ba2ac62dd9ba220d3832f0244 67afc9bb96e9d1e4b0023c1e105155e5349a37a7 dc66a63fd3b092076d59420e4725c759ca0943af40adc0aa4963793f4f6eea79 Loading...

	gestionale.nezwork.it/index.php?action=Login&module=Users	50 B	2023-03-08	2023-11-28
Pretty URL gestionale.nezwork.it/index.php?action=Login&module=Users IP 77.81.235.147 ASN #31034 Aruba S.p.A. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 02:19:34 Last Seen2023-11-28 22:30:04 Times Seen27 Hash b5ce92df27e7034b5a71c9aec71779f7 5977fb3a77aee65f1831f83aeef429621a485a48 4ce352c5dda8d06fa138ac44a5eead254e3bb41590c77fbc972373f7994cff82 Loading...

	gestionale.nezwork.it/index.php?action=Login&module=Users	198 B	2023-03-08	2023-04-05
Pretty URL gestionale.nezwork.it/index.php?action=Login&module=Users IP 77.81.235.147 ASN #31034 Aruba S.p.A. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 02:19:34 Last Seen2023-04-05 01:51:01 Times Seen9 Hash c7bb1fbe588f6d98f014a097cc5cd152 972d3883465da8bde90691f5f15a515df1595bed 29aaa526386b33c31c17ccfe08d268c30df87010f9a4e693966fab1bf3f92131 Loading...

HTTP Transactions (50)

URL IP Response Size

gestionale.nezwork.it/

77.81.235.147

301 Moved Permanently

0 B

URL HTTP/1.1
gestionale.nezwork.it/
IP
77.81.235.147:0
ASN
#31034 Aruba S.p.A.

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET / HTTP/1.1
Host: gestionale.nezwork.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 04 Feb 2023 11:16:09 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 0
Connection: keep-alive
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Set-Cookie: PHPSESSID=hr2elmeevo398v7lj7g9j7cpi2; path=/
Location: index.php?action=Login&module=Users
X-Powered-By: PHP/5.6.40, PleskLin

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
81713f952b51a865ad9764cde68e3fdb
278c3a9c4bb2a0ffb7375f90d89a1ba6e90a766a
c2eb0d8a24ecb51af28f1c71db4b9a95c568dcf6c94b41ee8c78787a4ebebcef

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C2EB0D8A24ECB51AF28F1C71DB4B9A95C568DCF6C94B41EE8C78787A4EBEBCEF"
Last-Modified: Fri, 03 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11292
Expires: Sat, 04 Feb 2023 14:24:44 GMT
Date: Sat, 04 Feb 2023 11:16:32 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
ec47f9eed203ae063b9c210009de54a9
19ff156471b9cffbc2432c5b65543bdd18e36271
3974208ce1840f6c9467287b7e220379ed881d76db64939f411dbc500c103d48

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3974208CE1840F6C9467287B7E220379ED881D76DB64939F411DBC500C103D48"
Last-Modified: Thu, 02 Feb 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11765
Expires: Sat, 04 Feb 2023 14:32:37 GMT
Date: Sat, 04 Feb 2023 11:16:32 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
fb7b6b46e708ad73eaaa3c21e74569ae
950663c025acad81556af5aa3022ecc9d55097fe
763f58b9fb838378c92033b59907b036f4c33081f5103d9bcc2ca2a8de500d64

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "763F58B9FB838378C92033B59907B036F4C33081F5103D9BCC2CA2A8DE500D64"
Last-Modified: Sat, 04 Feb 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10296
Expires: Sat, 04 Feb 2023 14:08:09 GMT
Date: Sat, 04 Feb 2023 11:16:33 GMT
Connection: keep-alive

firefox.settings.services.mozilla.com/v1/

35.241.9.150

200 OK

939 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/
IP
35.241.9.150:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
30db107dcf4380cef05efea409c2e6a3
96e6a306fbc07299aba64e5c14e2bfca35872fa9
b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Alert, Retry-After, Content-Length, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 04 Feb 2023 10:43:37 GMT
content-type: application/json
age: 1976
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain

34.160.144.191

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
34.160.144.191:0
ASN
#15169 GOOGLE

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
x-amz-id-2: yFWEAdp2p/UgOTm/Ai8UIeXiYnYu8wfiWG6qizzfEANMb70zqvIfJzZiOMOpEYRHUW7pxRjM4jg=
x-amz-request-id: VBKN8FB3FV8VDHV0
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 04 Feb 2023 10:23:57 GMT
age: 3156
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

gestionale.nezwork.it/index.php?action=Login&module=Users

77.81.235.147

200 OK

14 kB

URL HTTP/1.1
gestionale.nezwork.it/index.php?action=Login&module=Users
IP
77.81.235.147:0
ASN
#31034 Aruba S.p.A.

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (476)
Size
14 kB (14009 bytes)
Hash
729a453f5297b1feda0450513754d947
8923927118c5366f56acc1651ee92a6d903b6239
1642f94e47dcb160fc9f1f7103ea38e3cb51302dfea455e71bca8c8c984c75a1

HTTP Headers

GET /index.php?action=Login&module=Users HTTP/1.1
Host: gestionale.nezwork.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Cookie: PHPSESSID=hr2elmeevo398v7lj7g9j7cpi2
Upgrade-Insecure-Requests: 1

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 11:16:09 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Set-Cookie: sugar_user_theme=SuiteP; expires=Sun, 04-Feb-2024 11:16:09 GMT; Max-Age=31536000; httponly
X-Powered-By: PHP/5.6.40, PleskLin

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Sat, 04 Feb 2023 11:16:33 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

gestionale.nezwork.it/themes/SuiteP/css/normalize.css

77.81.235.147

200 OK

9.0 kB

URL HTTP/1.1
gestionale.nezwork.it/themes/SuiteP/css/normalize.css
IP
77.81.235.147:0
ASN
#31034 Aruba S.p.A.

File type
ASCII text
Size
9.0 kB (9016 bytes)
Hash
fab2821efd3f943babf77ac61e4aa796
7445da6e69858005dbad4a892f6df8b6a8e703d1
a824a74103fa2d77c4a7e42fc9797410b83d6d1905cdc81c523fc1a9ca784ef2

HTTP Headers

GET /themes/SuiteP/css/normalize.css HTTP/1.1
Host: gestionale.nezwork.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://gestionale.nezwork.it/index.php?action=Login&module=Users
Cookie: PHPSESSID=hr2elmeevo398v7lj7g9j7cpi2; sugar_user_theme=SuiteP

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 11:16:09 GMT
Content-Type: text/css
Content-Length: 9016
Last-Modified: Wed, 29 Mar 2017 21:32:58 GMT
Connection: keep-alive
Cache-Control: max-age=2592000
Expires: 01 Jan 2112 00:00:00 GMT
ETag: "58dc280a-2338"
X-Powered-By: PleskLin
Accept-Ranges: bytes

gestionale.nezwork.it/themes/SuiteP/css/fonts.css

77.81.235.147

200 OK

7.1 kB

URL HTTP/1.1
gestionale.nezwork.it/themes/SuiteP/css/fonts.css
IP
77.81.235.147:0
ASN
#31034 Aruba S.p.A.

File type
ASCII text
Size
7.1 kB (7094 bytes)
Hash
3a176b7804f7d8cae8c1593b2d345307
bed587f0bd480a6d3ab3f00e556485fe9684b9cd
8dc08afa9d4dab854e058c5ecff739234ae7e5498e4c00823cd7fffa369a0c85

HTTP Headers

GET /themes/SuiteP/css/fonts.css HTTP/1.1
Host: gestionale.nezwork.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://gestionale.nezwork.it/index.php?action=Login&module=Users
Cookie: PHPSESSID=hr2elmeevo398v7lj7g9j7cpi2; sugar_user_theme=SuiteP

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 11:16:09 GMT
Content-Type: text/css
Content-Length: 7094
Last-Modified: Wed, 29 Mar 2017 21:32:56 GMT
Connection: keep-alive
Cache-Control: max-age=2592000
Expires: 01 Jan 2112 00:00:00 GMT
ETag: "58dc2808-1bb6"
X-Powered-By: PleskLin
Accept-Ranges: bytes

gestionale.nezwork.it/themes/SuiteP/css/grid.css

77.81.235.147

200 OK

1.1 kB

URL HTTP/1.1
gestionale.nezwork.it/themes/SuiteP/css/grid.css
IP
77.81.235.147:0
ASN
#31034 Aruba S.p.A.

File type
ASCII text
Size
1.1 kB (1122 bytes)
Hash
5c893f79dab71cee5ded1db95a42411a
5425d623a2dd20e72245694e7dfbee2aa4f53b99
b0e306f32ccd7eaf67f11852ea255ce0c968d72cc646d332e36b7dd538f18d72

HTTP Headers

GET /themes/SuiteP/css/grid.css HTTP/1.1
Host: gestionale.nezwork.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://gestionale.nezwork.it/index.php?action=Login&module=Users
Cookie: PHPSESSID=hr2elmeevo398v7lj7g9j7cpi2; sugar_user_theme=SuiteP

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 11:16:09 GMT
Content-Type: text/css
Content-Length: 1122
Last-Modified: Wed, 29 Mar 2017 21:32:56 GMT
Connection: keep-alive
Cache-Control: max-age=2592000
Expires: 01 Jan 2112 00:00:00 GMT
ETag: "58dc2808-462"
X-Powered-By: PleskLin
Accept-Ranges: bytes

gestionale.nezwork.it/themes/SuiteP/css/footable.core.css

77.81.235.147

200 OK

9.9 kB

URL HTTP/1.1
gestionale.nezwork.it/themes/SuiteP/css/footable.core.css
IP
77.81.235.147:0
ASN
#31034 Aruba S.p.A.

File type
ASCII text
Size
9.9 kB (9903 bytes)
Hash
7a82e4e04e5ffb50a0431e6bc7270441
53831b6827f82b53121d8e5199ec776263c05e08
e0280e20916a0065fb694d9ca8d818d7bede8b10bd5522c0ea230ca68f943ec7

HTTP Headers

GET /themes/SuiteP/css/footable.core.css HTTP/1.1
Host: gestionale.nezwork.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://gestionale.nezwork.it/index.php?action=Login&module=Users
Cookie: PHPSESSID=hr2elmeevo398v7lj7g9j7cpi2; sugar_user_theme=SuiteP

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 11:16:09 GMT
Content-Type: text/css
Content-Length: 9903
Last-Modified: Wed, 29 Mar 2017 21:32:56 GMT
Connection: keep-alive
Cache-Control: max-age=2592000
Expires: 01 Jan 2112 00:00:00 GMT
ETag: "58dc2808-26af"
X-Powered-By: PleskLin
Accept-Ranges: bytes

gestionale.nezwork.it/include/javascript/calendar.js?v=V7eUwhotklML5Gh_yLEtRQ

77.81.235.147

200 OK

10 kB

URL HTTP/1.1
gestionale.nezwork.it/include/javascript/calendar.js?v=V7eUwhotklML5Gh_yLEtRQ
IP
77.81.235.147:0
ASN
#31034 Aruba S.p.A.

File type
ASCII text, with very long lines (1852)
Size
10 kB (9993 bytes)
Hash
f66e74c73108b6a49778709829f8eeb5
2ec896069c0850e4ec4b758a1257ac1c7e4ff7bd
54ea3f80d84b78a7216d88bdb5d71c261ab3ecc328f43abe5dad5a437354931e

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /include/javascript/calendar.js?v=V7eUwhotklML5Gh_yLEtRQ HTTP/1.1
Host: gestionale.nezwork.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://gestionale.nezwork.it/index.php?action=Login&module=Users
Cookie: PHPSESSID=hr2elmeevo398v7lj7g9j7cpi2; sugar_user_theme=SuiteP

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 11:16:09 GMT
Content-Type: application/javascript
Content-Length: 9993
Last-Modified: Wed, 29 Mar 2017 20:50:43 GMT
Connection: keep-alive
Cache-Control: max-age=2592000
Expires: 01 Jan 2112 00:00:00 GMT
ETag: "58dc1e23-2709"
X-Powered-By: PleskLin
Accept-Ranges: bytes

gestionale.nezwork.it/include/javascript/qtip/jquery.qtip.min.css

77.81.235.147

200 OK

9.1 kB

URL HTTP/1.1
gestionale.nezwork.it/include/javascript/qtip/jquery.qtip.min.css
IP
77.81.235.147:0
ASN
#31034 Aruba S.p.A.

File type
Unicode text, UTF-8 text, with very long lines (8930)
Size
9.1 kB (9087 bytes)
Hash
ff79b7e794122d6c77747840e9dce19b
fca031b6fbcc090ee1bf8089509c5cdb0e344d08
65737bef175f93494f2abd029084184c45c0ee95264aa17b33212c0f7a1dd798

HTTP Headers

GET /include/javascript/qtip/jquery.qtip.min.css HTTP/1.1
Host: gestionale.nezwork.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://gestionale.nezwork.it/index.php?action=Login&module=Users
Cookie: PHPSESSID=hr2elmeevo398v7lj7g9j7cpi2; sugar_user_theme=SuiteP

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 11:16:09 GMT
Content-Type: text/css
Content-Length: 9087
Last-Modified: Wed, 29 Mar 2017 20:40:00 GMT
Connection: keep-alive
Cache-Control: max-age=2592000
Expires: 01 Jan 2112 00:00:00 GMT
ETag: "58dc1ba0-237f"
X-Powered-By: PleskLin
Accept-Ranges: bytes

gestionale.nezwork.it/include/javascript/jquery/themes/base/jquery.ui.all.css

77.81.235.147

200 OK

335 B

URL HTTP/1.1
gestionale.nezwork.it/include/javascript/jquery/themes/base/jquery.ui.all.css
IP
77.81.235.147:0
ASN
#31034 Aruba S.p.A.

File type
ASCII text
Size
335 B (335 bytes)
Hash
1f5008f45cd0dc5cbc1126ba441dcdbc
a5f86602cb451c7198225bd3a12d9eb26969afea
61b35a8b81056827be536ace58c92cdda7ad9ca17a0f4b18aed46c7c04315be3

HTTP Headers

GET /include/javascript/jquery/themes/base/jquery.ui.all.css HTTP/1.1
Host: gestionale.nezwork.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://gestionale.nezwork.it/index.php?action=Login&module=Users
Cookie: PHPSESSID=hr2elmeevo398v7lj7g9j7cpi2; sugar_user_theme=SuiteP

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 11:16:10 GMT
Content-Type: text/css
Content-Length: 335
Connection: keep-alive
X-Accel-Version: 0.01
Last-Modified: Wed, 29 Mar 2017 20:37:59 GMT
ETag: 
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: 01 Jan 2112 00:00:00 GMT
X-Powered-By: PleskLin

gestionale.nezwork.it/cache/themes/SuiteP/js/style.js?v=V7eUwhotklML5Gh_yLEtRQ

77.81.235.147

200 OK

24 kB

URL HTTP/1.1
gestionale.nezwork.it/cache/themes/SuiteP/js/style.js?v=V7eUwhotklML5Gh_yLEtRQ
IP
77.81.235.147:0
ASN
#31034 Aruba S.p.A.

File type
ASCII text
Size
24 kB (24301 bytes)
Hash
c3e0f585489819d1e799947d0a8bd159
0cfcc56d1c3cb233e119df1302fa343eced6e05a
2c61fc6219910891fa019cf86fb2df831fa5b867687bbb8f531e31b7c479251c

HTTP Headers

GET /cache/themes/SuiteP/js/style.js?v=V7eUwhotklML5Gh_yLEtRQ HTTP/1.1
Host: gestionale.nezwork.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://gestionale.nezwork.it/index.php?action=Login&module=Users
Cookie: PHPSESSID=hr2elmeevo398v7lj7g9j7cpi2; sugar_user_theme=SuiteP

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 11:16:09 GMT
Content-Type: application/javascript
Content-Length: 24301
Last-Modified: Fri, 31 Mar 2017 17:10:18 GMT
Connection: keep-alive
Cache-Control: max-age=2592000
Expires: 01 Jan 2112 00:00:00 GMT
ETag: "58de8d7a-5eed"
X-Powered-By: PleskLin
Accept-Ranges: bytes

gestionale.nezwork.it/themes/SuiteP/css/bootstrap.min.css

77.81.235.147

200 OK

147 kB

URL HTTP/1.1
gestionale.nezwork.it/themes/SuiteP/css/bootstrap.min.css
IP
77.81.235.147:0
ASN
#31034 Aruba S.p.A.

File type
ASCII text, with very long lines (576)
Size
147 kB (147226 bytes)
Hash
67546cdf6cfc198275437025659e177c
3102be54bf7e37ab63039b92b8af3cfae8f5b516
3c09ad9566693b62842800c27de0d1a77190df4c234cd3461ef97676454618c1

HTTP Headers

GET /themes/SuiteP/css/bootstrap.min.css HTTP/1.1
Host: gestionale.nezwork.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://gestionale.nezwork.it/index.php?action=Login&module=Users
Cookie: PHPSESSID=hr2elmeevo398v7lj7g9j7cpi2; sugar_user_theme=SuiteP

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 11:16:09 GMT
Content-Type: text/css
Content-Length: 147226
Last-Modified: Wed, 29 Mar 2017 21:32:52 GMT
Connection: keep-alive
Cache-Control: max-age=2592000
Expires: 01 Jan 2112 00:00:00 GMT
ETag: "58dc2804-23f1a"
X-Powered-By: PleskLin
Accept-Ranges: bytes

gestionale.nezwork.it/cache/themes/SuiteP/css/deprecated.css?v=V7eUwhotklML5Gh_yLEtRQ

77.81.235.147

200 OK

7.1 kB

URL HTTP/1.1
gestionale.nezwork.it/cache/themes/SuiteP/css/deprecated.css?v=V7eUwhotklML5Gh_yLEtRQ
IP
77.81.235.147:0
ASN
#31034 Aruba S.p.A.

File type
ASCII text
Size
7.1 kB (7120 bytes)
Hash
280a3e43af652d3ee6c9442e567c2d59
8626e8d2f3c38309d4c4adf541c34ea6b4abb656
43cc835c174b5500a00c520d51d56661c6e5285fecec7cac44808e905e9844e3

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /cache/themes/SuiteP/css/deprecated.css?v=V7eUwhotklML5Gh_yLEtRQ HTTP/1.1
Host: gestionale.nezwork.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://gestionale.nezwork.it/index.php?action=Login&module=Users
Cookie: PHPSESSID=hr2elmeevo398v7lj7g9j7cpi2; sugar_user_theme=SuiteP

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 11:16:10 GMT
Content-Type: text/css
Content-Length: 7120
Last-Modified: Fri, 31 Mar 2017 17:10:18 GMT
Connection: keep-alive
Cache-Control: max-age=2592000
Expires: 01 Jan 2112 00:00:00 GMT
ETag: "58de8d7a-1bd0"
X-Powered-By: PleskLin
Accept-Ranges: bytes

gestionale.nezwork.it/themes/SuiteP/css/colourSelector.php

77.81.235.147

200 OK

0 B

URL HTTP/1.1
gestionale.nezwork.it/themes/SuiteP/css/colourSelector.php
IP
77.81.235.147:0
ASN
#31034 Aruba S.p.A.

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /themes/SuiteP/css/colourSelector.php HTTP/1.1
Host: gestionale.nezwork.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://gestionale.nezwork.it/index.php?action=Login&module=Users
Cookie: PHPSESSID=hr2elmeevo398v7lj7g9j7cpi2; sugar_user_theme=SuiteP

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 11:16:10 GMT
Content-Type: text/css;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.6.40, PleskLin

gestionale.nezwork.it/themes/SuiteP/js/jscolor.js?v=V7eUwhotklML5Gh_yLEtRQ

77.81.235.147

200 OK

42 kB

URL HTTP/1.1
gestionale.nezwork.it/themes/SuiteP/js/jscolor.js?v=V7eUwhotklML5Gh_yLEtRQ
IP
77.81.235.147:0
ASN
#31034 Aruba S.p.A.

File type
ASCII text
Size
42 kB (42341 bytes)
Hash
f9ea5b1ba2ac62dd9ba220d3832f0244
67afc9bb96e9d1e4b0023c1e105155e5349a37a7
dc66a63fd3b092076d59420e4725c759ca0943af40adc0aa4963793f4f6eea79

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /themes/SuiteP/js/jscolor.js?v=V7eUwhotklML5Gh_yLEtRQ HTTP/1.1
Host: gestionale.nezwork.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://gestionale.nezwork.it/index.php?action=Login&module=Users
Cookie: PHPSESSID=hr2elmeevo398v7lj7g9j7cpi2; sugar_user_theme=SuiteP

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 11:16:10 GMT
Content-Type: application/javascript
Content-Length: 42341
Last-Modified: Wed, 29 Mar 2017 21:38:34 GMT
Connection: keep-alive
Cache-Control: max-age=2592000
Expires: 01 Jan 2112 00:00:00 GMT
ETag: "58dc295a-a565"
X-Powered-By: PleskLin
Accept-Ranges: bytes

gestionale.nezwork.it/cache/include/javascript/sugar_field_grp.js?v=V7eUwhotklML5Gh_yLEtRQ

77.81.235.147

200 OK

20 kB

URL HTTP/1.1
gestionale.nezwork.it/cache/include/javascript/sugar_field_grp.js?v=V7eUwhotklML5Gh_yLEtRQ
IP
77.81.235.147:0
ASN
#31034 Aruba S.p.A.

File type
ASCII text, with very long lines (1949)
Size
20 kB (20404 bytes)
Hash
339b3b1d92f554dbac7fad410360c8f1
0d4fedb53a5dc2dcc2e38adf9eacc207b82781aa
e4e1d71a85e9dbffe2271a87c25e3641e250decd8bf7016279f4aa400a9b0824

HTTP Headers

GET /cache/include/javascript/sugar_field_grp.js?v=V7eUwhotklML5Gh_yLEtRQ HTTP/1.1
Host: gestionale.nezwork.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://gestionale.nezwork.it/index.php?action=Login&module=Users
Cookie: PHPSESSID=hr2elmeevo398v7lj7g9j7cpi2; sugar_user_theme=SuiteP

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 11:16:10 GMT
Content-Type: application/javascript
Content-Length: 20404
Last-Modified: Wed, 29 Mar 2017 21:49:35 GMT
Connection: keep-alive
Cache-Control: max-age=2592000
Expires: 01 Jan 2112 00:00:00 GMT
ETag: "58dc2bef-4fb4"
X-Powered-By: PleskLin
Accept-Ranges: bytes

gestionale.nezwork.it/cache/include/javascript/sugar_grp1_yui.js?v=V7eUwhotklML5Gh_yLEtRQ

77.81.235.147

200 OK

560 kB

URL HTTP/1.1
gestionale.nezwork.it/cache/include/javascript/sugar_grp1_yui.js?v=V7eUwhotklML5Gh_yLEtRQ
IP
77.81.235.147:0
ASN
#31034 Aruba S.p.A.

File type
ASCII text, with very long lines (32302)
Size
560 kB (560161 bytes)
Hash
c4354876a50e54ba75e064dcc367d327
b95fd83f2c54736b4f8b1949304b355c044897fa
480aa24cffc35db8e34ff02058eeba6c0c98654c95c3b93cd3a1b27aec46e2f5

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /cache/include/javascript/sugar_grp1_yui.js?v=V7eUwhotklML5Gh_yLEtRQ HTTP/1.1
Host: gestionale.nezwork.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://gestionale.nezwork.it/index.php?action=Login&module=Users
Cookie: PHPSESSID=hr2elmeevo398v7lj7g9j7cpi2; sugar_user_theme=SuiteP

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 11:16:09 GMT
Content-Type: application/javascript
Content-Length: 560161
Last-Modified: Wed, 29 Mar 2017 21:49:35 GMT
Connection: keep-alive
Cache-Control: max-age=2592000
Expires: 01 Jan 2112 00:00:00 GMT
ETag: "58dc2bef-88c21"
X-Powered-By: PleskLin
Accept-Ranges: bytes

gestionale.nezwork.it/modules/Users/login.css?v=V7eUwhotklML5Gh_yLEtRQ

77.81.235.147

200 OK

3.2 kB

URL HTTP/1.1
gestionale.nezwork.it/modules/Users/login.css?v=V7eUwhotklML5Gh_yLEtRQ
IP
77.81.235.147:0
ASN
#31034 Aruba S.p.A.

File type
ASCII text
Size
3.2 kB (3162 bytes)
Hash
408828c150e57806476bc663e8374902
8ac8687ae013beac554403b7db65c06c2ef9f19e
67464a4df542f08b3faf355f9c525086d54d5323dfe47f6e02eb932a00368a2b

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /modules/Users/login.css?v=V7eUwhotklML5Gh_yLEtRQ HTTP/1.1
Host: gestionale.nezwork.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://gestionale.nezwork.it/index.php?action=Login&module=Users
Cookie: PHPSESSID=hr2elmeevo398v7lj7g9j7cpi2; sugar_user_theme=SuiteP

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 11:16:10 GMT
Content-Type: text/css
Content-Length: 3162
Last-Modified: Wed, 29 Mar 2017 21:23:18 GMT
Connection: keep-alive
Cache-Control: max-age=2592000
Expires: 01 Jan 2112 00:00:00 GMT
ETag: "58dc25c6-c5a"
X-Powered-By: PleskLin
Accept-Ranges: bytes

gestionale.nezwork.it/modules/Users/login.js?v=V7eUwhotklML5Gh_yLEtRQ

77.81.235.147

200 OK

4.6 kB

URL HTTP/1.1
gestionale.nezwork.it/modules/Users/login.js?v=V7eUwhotklML5Gh_yLEtRQ
IP
77.81.235.147:0
ASN
#31034 Aruba S.p.A.

File type
ASCII text, with very long lines (538)
Size
4.6 kB (4640 bytes)
Hash
d2a804895fc1e0545d8974d96451ea62
5ba30af23a96b25c4ac7e587d5854f58d6782d87
8354d8ce0398527e92ac427c34b364bc7b09b05e0e37628d3d1d321ce9dd3a60

HTTP Headers

GET /modules/Users/login.js?v=V7eUwhotklML5Gh_yLEtRQ HTTP/1.1
Host: gestionale.nezwork.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://gestionale.nezwork.it/index.php?action=Login&module=Users
Cookie: PHPSESSID=hr2elmeevo398v7lj7g9j7cpi2; sugar_user_theme=SuiteP

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 11:16:10 GMT
Content-Type: application/javascript
Content-Length: 4640
Last-Modified: Wed, 29 Mar 2017 21:23:18 GMT
Connection: keep-alive
Cache-Control: max-age=2592000
Expires: 01 Jan 2112 00:00:00 GMT
ETag: "58dc25c6-1220"
X-Powered-By: PleskLin
Accept-Ranges: bytes

gestionale.nezwork.it/cache/themes/SuiteP/css/style.css?v=V7eUwhotklML5Gh_yLEtRQ

77.81.235.147

200 OK

375 kB

URL HTTP/1.1
gestionale.nezwork.it/cache/themes/SuiteP/css/style.css?v=V7eUwhotklML5Gh_yLEtRQ
IP
77.81.235.147:0
ASN
#31034 Aruba S.p.A.

File type
ASCII text, with very long lines (61936)
Size
375 kB (374764 bytes)
Hash
ce3711daff421f5959c230c45451b1da
2ff1b20982d53d7905e4639ebf1675d42a989272
5e1ae3c48b770cf73378051efdec366f20e598354d54e28ba1c499dd7a484f72

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /cache/themes/SuiteP/css/style.css?v=V7eUwhotklML5Gh_yLEtRQ HTTP/1.1
Host: gestionale.nezwork.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://gestionale.nezwork.it/index.php?action=Login&module=Users
Cookie: PHPSESSID=hr2elmeevo398v7lj7g9j7cpi2; sugar_user_theme=SuiteP

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 11:16:10 GMT
Content-Type: text/css
Content-Length: 374764
Last-Modified: Fri, 31 Mar 2017 17:10:18 GMT
Connection: keep-alive
Cache-Control: max-age=2592000
Expires: 01 Jan 2112 00:00:00 GMT
ETag: "58de8d7a-5b7ec"
X-Powered-By: PleskLin
Accept-Ranges: bytes

gestionale.nezwork.it/include/javascript/jquery/themes/base/jquery-ui.min.css

77.81.235.147

200 OK

30 kB

URL HTTP/1.1
gestionale.nezwork.it/include/javascript/jquery/themes/base/jquery-ui.min.css
IP
77.81.235.147:0
ASN
#31034 Aruba S.p.A.

File type
ASCII text, with very long lines (28290)
Size
30 kB (30021 bytes)
Hash
2c5af68f4a3ae64e9b2b83ac8f111da5
7115bee2b792bbc64132fae9776b34360fe3fe86
6afb5cc7bd38699c2d9cb3a06f94e9212db03b26b891ec82d24aa91173745ee8

HTTP Headers

GET /include/javascript/jquery/themes/base/jquery-ui.min.css HTTP/1.1
Host: gestionale.nezwork.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://gestionale.nezwork.it/include/javascript/jquery/themes/base/jquery.ui.all.css
Cookie: PHPSESSID=hr2elmeevo398v7lj7g9j7cpi2; sugar_user_theme=SuiteP

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 11:16:10 GMT
Content-Type: text/css
Content-Length: 30021
Last-Modified: Wed, 29 Mar 2017 20:37:59 GMT
Connection: keep-alive
Cache-Control: max-age=2592000
Expires: 01 Jan 2112 00:00:00 GMT
ETag: "58dc1b27-7545"
X-Powered-By: PleskLin
Accept-Ranges: bytes

gestionale.nezwork.it/include/javascript/jquery/themes/base/jquery-ui.structure.min.css

77.81.235.147

200 OK

15 kB

URL HTTP/1.1
gestionale.nezwork.it/include/javascript/jquery/themes/base/jquery-ui.structure.min.css
IP
77.81.235.147:0
ASN
#31034 Aruba S.p.A.

File type
ASCII text, with very long lines (14634)
Size
15 kB (14769 bytes)
Hash
6c8722c9e553fac9773a4479106a5085
ebe1ebbfaa4853033e5e022933f5cfad3e6cfa91
5308496fe57cb15a846838401d03eec73984c4320bb2d8af714c7acb30d8f064

HTTP Headers

GET /include/javascript/jquery/themes/base/jquery-ui.structure.min.css HTTP/1.1
Host: gestionale.nezwork.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://gestionale.nezwork.it/include/javascript/jquery/themes/base/jquery.ui.all.css
Cookie: PHPSESSID=hr2elmeevo398v7lj7g9j7cpi2; sugar_user_theme=SuiteP

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 11:16:10 GMT
Content-Type: text/css
Content-Length: 14769
Last-Modified: Wed, 29 Mar 2017 20:38:00 GMT
Connection: keep-alive
Cache-Control: max-age=2592000
Expires: 01 Jan 2112 00:00:00 GMT
ETag: "58dc1b28-39b1"
X-Powered-By: PleskLin
Accept-Ranges: bytes

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

35.241.9.150

200 OK

329 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
35.241.9.150:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size
329 B (329 bytes)
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Retry-After, Last-Modified, Cache-Control, Pragma, ETag, Backoff, Content-Type, Alert, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 04 Feb 2023 11:07:19 GMT
age: 554
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

gestionale.nezwork.it/cache/include/javascript/sugar_grp1_jquery.js?v=V7eUwhotklML5Gh_yLEtRQ

77.81.235.147

200 OK

663 kB

URL HTTP/1.1
gestionale.nezwork.it/cache/include/javascript/sugar_grp1_jquery.js?v=V7eUwhotklML5Gh_yLEtRQ
IP
77.81.235.147:0
ASN
#31034 Aruba S.p.A.

File type
ASCII text, with very long lines (32180)
Size
663 kB (662660 bytes)
Hash
ff572b0e8d4575b964ae4fc506da67aa
5dfc1ac24c5aadf7098e8be157254fa0dd8bf827
ea09a15315b09789758b0affbf366a457224d3aa8ab5199827f428ffb2bc1fe1

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /cache/include/javascript/sugar_grp1_jquery.js?v=V7eUwhotklML5Gh_yLEtRQ HTTP/1.1
Host: gestionale.nezwork.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://gestionale.nezwork.it/index.php?action=Login&module=Users
Cookie: PHPSESSID=hr2elmeevo398v7lj7g9j7cpi2; sugar_user_theme=SuiteP

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 11:16:10 GMT
Content-Type: application/javascript
Content-Length: 662660
Last-Modified: Wed, 29 Mar 2017 21:49:35 GMT
Connection: keep-alive
Cache-Control: max-age=2592000
Expires: 01 Jan 2112 00:00:00 GMT
ETag: "58dc2bef-a1c84"
X-Powered-By: PleskLin
Accept-Ranges: bytes

gestionale.nezwork.it/themes/default/images/company_logo.png?v=V7eUwhotklML5Gh_yLEtRQ

77.81.235.147

200 OK

3.3 kB

URL HTTP/1.1
gestionale.nezwork.it/themes/default/images/company_logo.png?v=V7eUwhotklML5Gh_yLEtRQ
IP
77.81.235.147:0
ASN
#31034 Aruba S.p.A.

File type
PNG image data, 184 x 40, 8-bit/color RGBA, non-interlaced\012- data
Size
3.3 kB (3335 bytes)
Hash
3479d9c0497aba75d0224c1502bc60d1
e35f17c8a634b2d3f3c683c78022eea96ce531d3
39285df32becb39d544c012d19b2d03ea16cbf2f51fda3ece89a150396800c04

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /themes/default/images/company_logo.png?v=V7eUwhotklML5Gh_yLEtRQ HTTP/1.1
Host: gestionale.nezwork.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://gestionale.nezwork.it/index.php?action=Login&module=Users
Cookie: PHPSESSID=hr2elmeevo398v7lj7g9j7cpi2; sugar_user_theme=SuiteP

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 11:16:10 GMT
Content-Type: image/png
Content-Length: 3335
Last-Modified: Wed, 29 Mar 2017 21:26:53 GMT
Connection: keep-alive
Cache-Control: max-age=2592000
Expires: 01 Jan 2112 00:00:00 GMT
ETag: "58dc269d-d07"
X-Powered-By: PleskLin
Accept-Ranges: bytes

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
dedf9c519ac38c4bece9c5bc895787d7
4911175c3f8a435978c5301c33c7a99a5e00a1d5
bddd7e3a4939f863642a7c5348c1c8b9bc569b35c10a27f4cf5ec71f7e6b9698

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BDDD7E3A4939F863642A7C5348C1C8B9BC569B35C10A27F4CF5EC71F7E6B9698"
Last-Modified: Fri, 03 Feb 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12503
Expires: Sat, 04 Feb 2023 14:44:56 GMT
Date: Sat, 04 Feb 2023 11:16:33 GMT
Connection: keep-alive

gestionale.nezwork.it/themes/SuiteP/images/p_login_logo.svg

77.81.235.147

200 OK

21 kB

URL HTTP/1.1
gestionale.nezwork.it/themes/SuiteP/images/p_login_logo.svg
IP
77.81.235.147:0
ASN
#31034 Aruba S.p.A.

File type
SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (5854)
Size
21 kB (21373 bytes)
Hash
e556b8777e40b022706aba0d73edf987
d4244b672eb60aa106c168a1b58397cef7ae98a1
a2dee01d58899b3b54a6354a29d51c134d67b231da771932c72f032fa7b6aa57

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /themes/SuiteP/images/p_login_logo.svg HTTP/1.1
Host: gestionale.nezwork.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://gestionale.nezwork.it/cache/themes/SuiteP/css/style.css?v=V7eUwhotklML5Gh_yLEtRQ
Cookie: PHPSESSID=hr2elmeevo398v7lj7g9j7cpi2; sugar_user_theme=SuiteP

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 11:16:10 GMT
Content-Type: image/svg+xml
Content-Length: 21373
Last-Modified: Wed, 29 Mar 2017 21:37:51 GMT
Connection: keep-alive
ETag: "58dc292f-537d"
X-Powered-By: PleskLin
Accept-Ranges: bytes

gestionale.nezwork.it/index.php?entryPoint=getImage&imageName=blank.png

77.81.235.147

200 OK

43 B

URL HTTP/1.1
gestionale.nezwork.it/index.php?entryPoint=getImage&imageName=blank.png
IP
77.81.235.147:0
ASN
#31034 Aruba S.p.A.

File type
GIF image data, version 89a, 1 x 1\012- data
Size
43 B (43 bytes)
Hash
fc94fb0c3ed8a8f909dbc7630a0987ff
56d45f8a17f5078a20af9962c992ca4678450765
2dfe28cbdb83f01c940de6a88ab86200154fd772d568035ac568664e52068363

HTTP Headers

GET /index.php?entryPoint=getImage&imageName=blank.png HTTP/1.1
Host: gestionale.nezwork.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://gestionale.nezwork.it/index.php?action=Login&module=Users
Cookie: PHPSESSID=hr2elmeevo398v7lj7g9j7cpi2; sugar_user_theme=SuiteP
Upgrade-Insecure-Requests: 1

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 11:16:10 GMT
Content-Type: image/gif
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: private
Pragma: dummy=bogus
Expires: Mon, 06 Mar 2023 11:16:10 GMT
Etag: "fc94fb0c3ed8a8f909dbc7630a0987ff"
Last-Modified: Wed, 29 Mar 2017 21:39:14 GMT
X-Powered-By: PHP/5.6.40, PleskLin

gestionale.nezwork.it/themes/SuiteP/images/p_login_logo.png

77.81.235.147

200 OK

5.6 kB

URL HTTP/1.1
gestionale.nezwork.it/themes/SuiteP/images/p_login_logo.png
IP
77.81.235.147:0
ASN
#31034 Aruba S.p.A.

File type
PNG image data, 170 x 99, 8-bit/color RGBA, non-interlaced\012- data
Size
5.6 kB (5579 bytes)
Hash
2a1d153ef1a70db153dc425249f18a49
e5bdcc78e6a025e1f734988d4da2a771014232ac
22f29711c64e06db560e6a0dbbcbb2dee12571ce01d80f5e3b3e84a8caac2501

HTTP Headers

GET /themes/SuiteP/images/p_login_logo.png HTTP/1.1
Host: gestionale.nezwork.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://gestionale.nezwork.it/cache/themes/SuiteP/css/style.css?v=V7eUwhotklML5Gh_yLEtRQ
Cookie: PHPSESSID=hr2elmeevo398v7lj7g9j7cpi2; sugar_user_theme=SuiteP

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 11:16:10 GMT
Content-Type: image/png
Content-Length: 5579
Last-Modified: Wed, 29 Mar 2017 21:37:51 GMT
Connection: keep-alive
Cache-Control: max-age=2592000
Expires: 01 Jan 2112 00:00:00 GMT
ETag: "58dc292f-15cb"
X-Powered-By: PleskLin
Accept-Ranges: bytes

gestionale.nezwork.it/themes/SuiteP/images/forms/select.ico

77.81.235.147

200 OK

5.7 kB

URL HTTP/1.1
gestionale.nezwork.it/themes/SuiteP/images/forms/select.ico
IP
77.81.235.147:0
ASN
#31034 Aruba S.p.A.

File type
MS Windows icon resource - 1 icon, 64x64, 8 bits/pixel\012- data
Size
5.7 kB (5694 bytes)
Hash
22393ad23f16c3f1462455bae8f20279
1d86d12222da66280c5546768ec76b47bdfbd2fa
df57622433abe4f13a74f095d4807acd6f07b4ee3dc0f1803a703beaf0bed03e

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /themes/SuiteP/images/forms/select.ico HTTP/1.1
Host: gestionale.nezwork.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://gestionale.nezwork.it/cache/themes/SuiteP/css/style.css?v=V7eUwhotklML5Gh_yLEtRQ
Cookie: PHPSESSID=hr2elmeevo398v7lj7g9j7cpi2; sugar_user_theme=SuiteP

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 11:16:10 GMT
Content-Type: image/vnd.microsoft.icon
Content-Length: 5694
Last-Modified: Wed, 29 Mar 2017 21:33:40 GMT
Connection: keep-alive
Cache-Control: max-age=2592000
Expires: 01 Jan 2112 00:00:00 GMT
ETag: "58dc2834-163e"
X-Powered-By: PleskLin
Accept-Ranges: bytes

gestionale.nezwork.it/themes/SuiteP/images/login_bg.svg

77.81.235.147

200 OK

6.1 kB

URL HTTP/1.1
gestionale.nezwork.it/themes/SuiteP/images/login_bg.svg
IP
77.81.235.147:0
ASN
#31034 Aruba S.p.A.

File type
SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (4194)
Size
6.1 kB (6053 bytes)
Hash
975fe13177e7a59c71fced38e0ee4432
0b94b66b5a992b409211432112601af6811ad89e
7bc44e41c33c189a001ae26e0077b0c033f12e0e97fb9ed8c13ac3696a30586e

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /themes/SuiteP/images/login_bg.svg HTTP/1.1
Host: gestionale.nezwork.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://gestionale.nezwork.it/cache/themes/SuiteP/css/style.css?v=V7eUwhotklML5Gh_yLEtRQ
Cookie: PHPSESSID=hr2elmeevo398v7lj7g9j7cpi2; sugar_user_theme=SuiteP

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 11:16:10 GMT
Content-Type: image/svg+xml
Content-Length: 6053
Last-Modified: Wed, 29 Mar 2017 21:37:38 GMT
Connection: keep-alive
ETag: "58dc2922-17a5"
X-Powered-By: PleskLin
Accept-Ranges: bytes

gestionale.nezwork.it/themes/SuiteP/images/login_bg.png

77.81.235.147

200 OK

2.3 kB

URL HTTP/1.1
gestionale.nezwork.it/themes/SuiteP/images/login_bg.png
IP
77.81.235.147:0
ASN
#31034 Aruba S.p.A.

File type
PNG image data, 36 x 95, 8-bit/color RGBA, non-interlaced\012- data
Size
2.3 kB (2269 bytes)
Hash
bb55d369a43c08394a592c551fdc8fa2
2e27ebe88eb6d7d59a16d97dee3d2af5cfd94f42
99e64fb6f3b4714b3d1db79c2ecbbcbbb2b8463baac8a310a74064de3fad7487

HTTP Headers

GET /themes/SuiteP/images/login_bg.png HTTP/1.1
Host: gestionale.nezwork.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://gestionale.nezwork.it/cache/themes/SuiteP/css/style.css?v=V7eUwhotklML5Gh_yLEtRQ
Cookie: PHPSESSID=hr2elmeevo398v7lj7g9j7cpi2; sugar_user_theme=SuiteP

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 11:16:10 GMT
Content-Type: image/png
Content-Length: 2269
Last-Modified: Wed, 29 Mar 2017 21:37:38 GMT
Connection: keep-alive
Cache-Control: max-age=2592000
Expires: 01 Jan 2112 00:00:00 GMT
ETag: "58dc2922-8dd"
X-Powered-By: PleskLin
Accept-Ranges: bytes

gestionale.nezwork.it/cache/include/javascript/sugar_grp1.js?v=V7eUwhotklML5Gh_yLEtRQ

77.81.235.147

200 OK

26 kB

URL HTTP/1.1
gestionale.nezwork.it/cache/include/javascript/sugar_grp1.js?v=V7eUwhotklML5Gh_yLEtRQ
IP
77.81.235.147:0
ASN
#31034 Aruba S.p.A.

File type
Web Open Font Format (Version 2), TrueType, length 26144, version 1.6816\012- data
Size
26 kB (26144 bytes)
Hash
6748e0e1c0bef825e16c649fd2ad5691
a13bcb3bf2b5092decc1008e96361ea104ceb77e
47a3e3b64cffe3ff820ebe554ac4df940da5ed469eaddbbc13bdd3b0b1eb4479

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /cache/include/javascript/sugar_grp1.js?v=V7eUwhotklML5Gh_yLEtRQ HTTP/1.1
Host: gestionale.nezwork.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://gestionale.nezwork.it/index.php?action=Login&module=Users
Cookie: PHPSESSID=hr2elmeevo398v7lj7g9j7cpi2; sugar_user_theme=SuiteP

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 11:16:09 GMT
Content-Type: application/javascript
Content-Length: 191562
Last-Modified: Wed, 29 Mar 2017 21:49:35 GMT
Connection: keep-alive
Cache-Control: max-age=2592000
Expires: 01 Jan 2112 00:00:00 GMT
ETag: "58dc2bef-2ec4a"
X-Powered-By: PleskLin
Accept-Ranges: bytes

gestionale.nezwork.it/themes/SuiteP/images/sugar_icon.ico?v=V7eUwhotklML5Gh_yLEtRQ

77.81.235.147

200 OK

5.4 kB

URL HTTP/1.1
gestionale.nezwork.it/themes/SuiteP/images/sugar_icon.ico?v=V7eUwhotklML5Gh_yLEtRQ
IP
77.81.235.147:0
ASN
#31034 Aruba S.p.A.

File type
MS Windows icon resource - 1 icon, 36x36, 32 bits/pixel\012- data
Size
5.4 kB (5391 bytes)
Hash
ed9a8c7810e8c9fb7035b6c3147c9a3a
334bd7c94924b03abac1062327eeb882c91c523d
6e1ab006d2a8e2e930bdd6f4e85ae3f7df8c46cd2062a9f85a7193e0558185bb

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /themes/SuiteP/images/sugar_icon.ico?v=V7eUwhotklML5Gh_yLEtRQ HTTP/1.1
Host: gestionale.nezwork.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://gestionale.nezwork.it/index.php?action=Login&module=Users
Cookie: PHPSESSID=hr2elmeevo398v7lj7g9j7cpi2; sugar_user_theme=SuiteP

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 11:16:10 GMT
Content-Type: image/vnd.microsoft.icon
Content-Length: 5391
Last-Modified: Wed, 29 Mar 2017 21:38:08 GMT
Connection: keep-alive
Cache-Control: max-age=2592000
Expires: 01 Jan 2112 00:00:00 GMT
ETag: "58dc2940-150f"
X-Powered-By: PleskLin
Accept-Ranges: bytes

push.services.mozilla.com/

54.149.117.124

101 Switching Protocols

0 B

URL HTTP/1.1
push.services.mozilla.com/
IP
54.149.117.124:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: Kn3bCZsErJAF9BmcNzDsKQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: zg+QsBCe58H4p4F8Kaat45cWrSw=

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
1b25bf82638deaab60981e1315ee0849
e3bd912fd1a890e64ee6746a78a674db7ff77039
a99b0dfa9ca7176b21cc2d65963a1b6eb6d534b3767d02ef06cc207a63331ebf

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A99B0DFA9CA7176B21CC2D65963A1B6EB6D534B3767D02EF06CC207A63331EBF"
Last-Modified: Sat, 04 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4038
Expires: Sat, 04 Feb 2023 12:23:53 GMT
Date: Sat, 04 Feb 2023 11:16:35 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
1b25bf82638deaab60981e1315ee0849
e3bd912fd1a890e64ee6746a78a674db7ff77039
a99b0dfa9ca7176b21cc2d65963a1b6eb6d534b3767d02ef06cc207a63331ebf

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A99B0DFA9CA7176B21CC2D65963A1B6EB6D534B3767D02EF06CC207A63331EBF"
Last-Modified: Sat, 04 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4038
Expires: Sat, 04 Feb 2023 12:23:53 GMT
Date: Sat, 04 Feb 2023 11:16:35 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
1b25bf82638deaab60981e1315ee0849
e3bd912fd1a890e64ee6746a78a674db7ff77039
a99b0dfa9ca7176b21cc2d65963a1b6eb6d534b3767d02ef06cc207a63331ebf

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A99B0DFA9CA7176B21CC2D65963A1B6EB6D534B3767D02EF06CC207A63331EBF"
Last-Modified: Sat, 04 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4038
Expires: Sat, 04 Feb 2023 12:23:53 GMT
Date: Sat, 04 Feb 2023 11:16:35 GMT
Connection: keep-alive

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F64144d1c-f524-496f-8b52-ba63714dbfc5.jpeg

34.120.237.76

200 OK

12 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F64144d1c-f524-496f-8b52-ba63714dbfc5.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
12 kB (11565 bytes)
Hash
e366b32074025aaf60bbae8bdb08d330
a52c2883bad98fa20333aa639a5dd3a5bf544c8e
9d661c26effaec9efee16833f6459d6ecbe4f77b822c9c46e2a6433bda816e5c

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F64144d1c-f524-496f-8b52-ba63714dbfc5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 11565
x-amzn-requestid: 87a84ffd-1176-4656-aac4-e98f38ec2cd9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fboIrFGboAMFyyQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d48704-162ed8114aa1809204500548;Sampled=0
x-amzn-remapped-date: Sat, 28 Jan 2023 02:23:00 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: lsQxPtozrh2Ty1T-3d-1crDfi8HgVKRafOXb1UFl033bCx3kAzTS7w==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 caf6806821bc479b28a6f1ce3043b8a6.cloudfront.net (CloudFront), 1.1 google
date: Sat, 04 Feb 2023 06:20:04 GMT
age: 17791
etag: "a52c2883bad98fa20333aa639a5dd3a5bf544c8e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

8.5 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a6c7026-85a2-4419-bd6b-ba1bac463dda.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
8.5 kB (8527 bytes)
Hash
6661b7263315f5eb3cd2465f671e1fcd
b7b5831c6b3ccc41d7a980b6088adc10ff8785f1
eb25507950d81db4b54a1af7fadaceee1bcff780eb28b6a04dbfb3886785f5b7

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a6c7026-85a2-4419-bd6b-ba1bac463dda.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 8527
x-amzn-requestid: 6a8c6487-6069-47d1-afa1-648626f85439
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fyDqqGg5oAMFV-A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dd7fdd-0a772cde1e6fba6d7da97435;Sampled=0
x-amzn-remapped-date: Fri, 03 Feb 2023 21:42:53 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: CHWhIpyzhoPtMUplzh1430Q9FfCM1wkTc_hQsgQk6InM9tYBPGYnNg==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 2bedbeaa49b4a77447d30097858cb81a.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Feb 2023 22:05:44 GMT
age: 47451
etag: "b7b5831c6b3ccc41d7a980b6088adc10ff8785f1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

10 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F10640252-429d-4110-bf18-1908ac233402.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
10 kB (10253 bytes)
Hash
392b61306c346508d3ac4a2f28218f9c
d2de32b52e0d3f4fc6acaf687b3521294b01dc03
018712a4d6734b84ac1777124f97dae4d93b1e5b297a5dcfe0955b52710b8a35

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F10640252-429d-4110-bf18-1908ac233402.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 10253
x-amzn-requestid: a90cb6b3-8a72-4b4b-b4f5-6dafc8c6752a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fyD7GGv5IAMFu8A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dd8046-3ca59e7c52800a4e44bda8fd;Sampled=0
x-amzn-remapped-date: Fri, 03 Feb 2023 21:44:38 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: jBxNmhfAeUgxg8w4XpQHZ1QoN9GatdUV7V7r2tHd7YePJYPHpesd2Q==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 1b74ccf4cb51eacf97a0e6d60ae46a3e.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Feb 2023 22:05:21 GMT
age: 47474
etag: "d2de32b52e0d3f4fc6acaf687b3521294b01dc03"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

7.2 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5c030376-7935-4601-969c-86a91f4f5e85.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
7.2 kB (7249 bytes)
Hash
d7afd5ce8fb9ec7b62e528bf97705e49
afbf22f5d8f54adcb00e8980a9b22f2c5b6703c3
b2d93ba6c0ed2c858d91afba1c81251afbffa41c779be2e9203994dcfb7bbc9d

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5c030376-7935-4601-969c-86a91f4f5e85.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 7249
x-amzn-requestid: 007ce521-ed5c-4074-a314-684ad0df2e22
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fyD9GH5goAMF_ag=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dd8053-7060f02b767c90371991a190;Sampled=0
x-amzn-remapped-date: Fri, 03 Feb 2023 21:44:51 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 5fTV_e56nzjiXo4Guu67WXDDvp3nrjB0Yfyy6ByjcDSx23J-8r0fmQ==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 a847181d425b7fc57e81eb3c800bfdf2.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Feb 2023 22:10:21 GMT
age: 47174
etag: "afbf22f5d8f54adcb00e8980a9b22f2c5b6703c3"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

9.1 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcae6042d-d677-4e39-b4e4-858988eb847b.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
9.1 kB (9141 bytes)
Hash
f7101f6e43855cb76ce48271a847ffbd
8e674830a97d8ce3818132fda197db4f0289d316
e78a83a4024e238bcdec3b9c4d5c12a99f49aabd57e34952f6a4cc8ed4422f55

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcae6042d-d677-4e39-b4e4-858988eb847b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 9141
x-amzn-requestid: ed7db574-6bca-4f3e-8879-c3e836549339
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fyD8zE5lIAMF1HA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dd8051-4480112f11d4ced0037d1ad8;Sampled=0
x-amzn-remapped-date: Fri, 03 Feb 2023 21:44:49 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: aKr85ooofBPeKkeJIDO5W_X5Rn6xnJlRHmVrs8tgBMYe3HQhobsm3w==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 32c16f33c8f5601364fa8229b0d74dc2.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Feb 2023 21:56:07 GMT
age: 48028
etag: "8e674830a97d8ce3818132fda197db4f0289d316"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

10 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd10c7764-f1d0-48fc-aca2-14c1d1d4a4a2.png
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
10 kB (10473 bytes)
Hash
0080839b66c74b02e573ff400e4b6f0f
2667a2863ea2d39d6dc7222aa8a7362c5c0a4a12
78d6df3752f71e0e85fffcee0ea0cda113b3bc58b24d3f8df65773a17c3b0c9f

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd10c7764-f1d0-48fc-aca2-14c1d1d4a4a2.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 10473
x-amzn-requestid: 21019ec6-12a0-4a55-99d9-bb434d93b2ad
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fyDqqGwGIAMFvWQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dd7fdd-10e6692d2271e69c13fc51cc;Sampled=0
x-amzn-remapped-date: Fri, 03 Feb 2023 21:42:53 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: zc0aQYlAqRr54nUsuydAvCMPleRNg0BAd7cDX4AnrWLv86i7nm7zRw==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 ee8246c5442dace7525c74f6a799bb46.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Feb 2023 22:12:00 GMT
etag: "2667a2863ea2d39d6dc7222aa8a7362c5c0a4a12"
content-type: image/jpeg
age: 47075
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

gestionale.nezwork.it/index.php?module=Alerts&action=get&to_pdf=1

77.81.235.147

200 OK

12 B

URL HTTP/1.1
gestionale.nezwork.it/index.php?module=Alerts&action=get&to_pdf=1
IP
77.81.235.147:0
ASN
#31034 Aruba S.p.A.

File type
ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
14c649544c371a51309b593c0eca7547
db7be46b8f6ed27a3ef2c5fbb202a8f6cdd87a25
a2dbd87913c45d9ee28211bcf4f53978926a3f8b39b7e0022c04fb88755c2376

HTTP Headers

GET /index.php?module=Alerts&action=get&to_pdf=1 HTTP/1.1
Host: gestionale.nezwork.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: http://gestionale.nezwork.it/index.php?action=Login&module=Users
Cookie: PHPSESSID=hr2elmeevo398v7lj7g9j7cpi2; sugar_user_theme=SuiteP

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 11:16:12 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
X-Powered-By: PHP/5.6.40, PleskLin

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (16)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL