{"report_id":"8a3ff93e-fa08-4d29-8179-b36bb0e679f3","version":0,"status":"done","tags":["swisspass","phishing","transport"],"date":"2026-09-05T01:15:47Z","url":{"schema":"http","addr":"formento1932.it/wp-content/plugins/flamingo/includes/temp/css/mail/css/mail/reply26/7dz5q0550s88dchde844051511des1dd8e1de80d07ee/mahnung/26","fqdn":"formento1932.it","domain":"formento1932.it","tld":"it"},"ip":{"addr":"213.212.143.46","port":0,"asn":12779,"as":"IT.Gate S.p.A.","country":"Italy","country_code":"IT"},"final":{"url":{"schema":"https","addr":"formento1932.it/wp-content/plugins/flamingo/includes/temp/css/mail/css/mail/reply26/7dz5q0550s88dchde844051511des1dd8e1de80d07ee/mahnung/26/","fqdn":"formento1932.it","domain":"formento1932.it","tld":"it"},"title":"Anmeldung","dom":{"size":174873,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (46891)","md5":"739df3d21138f67543ef4f06e8e434d2","sha1":"ee0af0e31dbadab5be37067cd71b7a63f44a4243","sha256":"4081857e59f05d4aa565d7505e2c2ac38555b58d2fa7fe3d4f8ecf5565891bfa","sha512":"b795b08f6b81f015b54e2200a0271f1e9768b161f1b160a7096021efd84715425e6127de04380fa3b127589366f86692eb12b832878eafe56fbf4b8fd81667f6","ssdeep":"1536:GN5Ynp42nicm4AoJZ3Bd5jAwHY+A0vdKMgJ8+cVM:G8mibA7AW","tlshash":"86042e5b39e1631aead78719aa927d857520ac4ffd339cecf10e93784b8c3e24c51609","dom_hash":"domhashed079a7e2a501bab994975b4e6b56b3e","first_seen":"2026-09-05T01:15:56.661397Z","last_seen":"2026-09-05T01:15:56.661397Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"formento1932.it/wp-content/plugins/flamingo/includes/temp/css/mail/css/mail/reply26/7dz5q0550s88dchde844051511des1dd8e1de80d07ee/mahnung/26","fqdn":"formento1932.it","domain":"formento1932.it","tld":"it"},"ip":{"addr":"213.212.143.46","port":0,"asn":12779,"as":"IT.Gate S.p.A.","country":"Italy","country_code":"IT"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-10T01:15:47Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - SwissPass","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with SwissPass phishing","tags":["swisspass","phishing","transport"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - SwissPass","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with SwissPass phishing","tags":["swisspass","phishing","transport"],"meta":null}]},"summary":[{"fqdn":"cdn.cookielaw.org","ip":{"addr":"104.18.87.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2011-06-20","domain_rank":2972,"first_seen":"2013-12-28T13:20:36Z","last_seen":"2026-08-31T09:14:52.96847Z","alert_count":0,"request_count":10,"received_data":837450,"sent_data":4989,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"assets.adobedtm.com","ip":{"addr":"96.6.17.25","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"domain_registered":"2013-11-22","domain_rank":3051,"first_seen":"2014-01-28T04:51:35Z","last_seen":"2026-08-31T13:00:31.868328Z","alert_count":0,"request_count":1,"received_data":131145,"sent_data":467,"comment":"","tags":null,"fingerprints":null},{"fqdn":"geolocation.onetrust.com","ip":{"addr":"104.18.32.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2004-01-12","domain_rank":4022,"first_seen":"2018-02-07T11:23:41Z","last_seen":"2026-08-31T11:21:34.638964Z","alert_count":0,"request_count":1,"received_data":436,"sent_data":462,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"formento1932.it","ip":{"addr":"213.212.143.46","port":443,"asn":12779,"as":"IT.Gate S.p.A.","country":"Italy","country_code":"IT"},"domain_registered":"2002-03-25","domain_rank":0,"first_seen":"2026-09-05T01:02:53.813388Z","last_seen":"2026-09-05T01:02:53.813388Z","alert_count":9,"request_count":19,"received_data":754205,"sent_data":13274,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Modernizr","description":"Modernizr is a JavaScript library that detects the features available in a user's browser.","website":"https://modernizr.com","common_platform_enumeration":"","icon":"Modernizr.svg","categories":["JavaScript libraries"]},{"name":"OneTrust","description":"OneTrust is a cloud-based data privacy management compliance platform.","website":"https://www.onetrust.com","common_platform_enumeration":"","icon":"OneTrust.svg","categories":["Cookie compliance"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"www.formento1932.it","ip":{"addr":"213.212.143.46","port":443,"asn":12779,"as":"IT.Gate S.p.A.","country":"Italy","country_code":"IT"},"domain_registered":"2002-03-25","domain_rank":0,"first_seen":"2026-09-05T01:15:51.160024Z","last_seen":"2026-09-05T01:15:51.160024Z","alert_count":0,"request_count":2,"received_data":95340,"sent_data":1209,"comment":"","tags":null,"fingerprints":[{"name":"Contact Form 7:6.1.6","description":"Contact Form 7 is an WordPress plugin which can manage multiple contact forms. The form supports Ajax-powered submitting, CAPTCHA, Akismet spam filtering.","website":"https://contactform7.com","common_platform_enumeration":"","icon":"Contact Form 7.png","categories":["WordPress plugins","Form builders"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress:6.8.8","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Onsen UI","description":"Onsen UI is an open-source HTML5 hybrid app framework offering mobile UI components for PhoneGap and Cordova development.","website":"https://onsen.io","common_platform_enumeration":"","icon":"OnsenUI.svg","categories":["Mobile frameworks"]},{"name":"WooCommerce:3.0.7","description":"WooCommerce is an open-source ecommerce plugin for WordPress.","website":"https://woocommerce.com","common_platform_enumeration":"","icon":"WooCommerce.svg","categories":["Ecommerce","WordPress plugins"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}]},{"fqdn":"cdn.app.sbb.ch","ip":{"addr":"3.123.233.179","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"unknown","domain_rank":2139371,"first_seen":"2018-04-04T14:01:55Z","last_seen":"2026-09-03T14:12:28.95847Z","alert_count":2,"request_count":2,"received_data":30116,"sent_data":1050,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.31.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - SwissPass","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with SwissPass phishing","tags":["swisspass","phishing","transport"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"formento1932.it/wp-content/plugins/flamingo/includes/temp/css/mail/css/mail/reply26/7dz5q0550s88dchde844051511des1dd8e1de80d07ee/mahnung/26/resources/js/vendor/vendor.min-20200819.js","fqdn":"formento1932.it","domain":"formento1932.it","tld":"it"},"ip":{"addr":"213.212.143.46","port":443,"asn":12779,"as":"IT.Gate S.p.A.","country":"Italy","country_code":"IT"},"introduction_type":"scriptElement","is_inline":false,"md5":"c8ae9313d64c63be74208ff6564a9c83","sha1":"2d76425f12d558c47f76e9602665b7001c51630a","sha256":"f5e694ba6b63a657fae3f561dc0e8ae0247534616d9e844005d11d8ba2535338","sha512":"3f262f556fc794d8e779c2f43d8a6fb8468ea1e79e0369aa58399bf41c5806d0badb0ad69d15f7c021bf256b8b6a74a316d5808e5db4ee01c6840fb1f4a353e5","ssdeep":"1536:pSgDCs3fXCLcMpW+3moWgWngVaSBNdAj8Seh8C0rjLOYnQkTWqBC367JIAYQtokX:pSV3moWJ3pWOrsUk367JIpSi33n1O","tlshash":"d304288d7562313142bf21a6107f110b72379fbeb4058558b868c9d86ebec45227bf7e","size":182041,"data":"","first_seen":"2023-11-18T18:24:47Z","last_seen":"2026-09-05T01:15:56.678504Z","times_seen":474,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"formento1932.it/wp-content/plugins/flamingo/includes/temp/css/mail/css/mail/reply26/7dz5q0550s88dchde844051511des1dd8e1de80d07ee/mahnung/26/","fqdn":"formento1932.it","domain":"formento1932.it","tld":"it"},"ip":{"addr":"213.212.143.46","port":443,"asn":12779,"as":"IT.Gate S.p.A.","country":"Italy","country_code":"IT"},"introduction_type":"scriptElement","is_inline":true,"md5":"13237068024494c050068b9b45e8baaf","sha1":"1dda62bb75e5f47b55d614ff587b0e805188ea46","sha256":"dc1b29b6ced2e9e0a2953e4224c651791aa6b81f441e2931bee30715306dbe0e","sha512":"1390f6ae00ba38693599a00a1ad750d4fd3a2071689627622f287b6e5364c8d867fca1afcecdc25752ac16697d86505bf75241d977ca74ac795bc5a296540fd5","ssdeep":"","tlshash":"14b092600216040c26ea518d1f4fb314b01ef0a126902a213dc86808a3219137280ea0","size":111,"data":"","first_seen":"2026-09-05T01:15:56.688484Z","last_seen":"2026-09-05T01:15:56.688484Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"formento1932.it/wp-content/plugins/flamingo/includes/temp/css/mail/css/mail/reply26/7dz5q0550s88dchde844051511des1dd8e1de80d07ee/mahnung/26/","fqdn":"formento1932.it","domain":"formento1932.it","tld":"it"},"ip":{"addr":"213.212.143.46","port":443,"asn":12779,"as":"IT.Gate S.p.A.","country":"Italy","country_code":"IT"},"introduction_type":"scriptElement","is_inline":true,"md5":"a8db2e4ba295db06809054a3b669ebdb","sha1":"e71868cc21231f161cd588726853cf8c598a4df6","sha256":"33b8aedf57fbe4cb17c08ff1264a45f425e78ebaa684850d49273f5bbd59830a","sha512":"f660e64291c86f1d484cb312aab0587fe970f6bd30eee9f9ceb11b76e0ccad5c079051418721044c8695268c31644f8efa1e964ec51d4c8f9bcffba28809efcf","ssdeep":"","tlshash":"6621845c8a7e0019209b30ac2baf6300b038e0836904bc353fdc7805af1da0f99e1eed","size":1155,"data":"","first_seen":"2026-09-05T01:15:56.68955Z","last_seen":"2026-09-05T01:15:56.68955Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"formento1932.it/wp-content/plugins/flamingo/includes/temp/css/mail/css/mail/reply26/7dz5q0550s88dchde844051511des1dd8e1de80d07ee/mahnung/26/","fqdn":"formento1932.it","domain":"formento1932.it","tld":"it"},"ip":{"addr":"213.212.143.46","port":443,"asn":12779,"as":"IT.Gate S.p.A.","country":"Italy","country_code":"IT"},"introduction_type":"scriptElement","is_inline":true,"md5":"a85617ac3799f887ceb19a3ab31b2f43","sha1":"303468de8883c26eb6ec6ba252718a8d3fa1a5ba","sha256":"dd538bd4aa38b610322a91f6f78e7f3365a6a461774bee90bddee5127d856971","sha512":"cdce285e443a1447364be1caf21963db8c7e56250ef73a5e65e3d31f8142963ee4c69370c1b7529614dad7deb9bdb106040fd6e7dc5e6b8969b8cd8dee21cd1e","ssdeep":"","tlshash":"c521c00736b29d3098f690e40e6fb92034f158135585d1d5bf1e9f044f00b1b90327ed","size":1279,"data":"","first_seen":"2026-09-05T01:15:56.690552Z","last_seen":"2026-09-05T01:15:56.690552Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"formento1932.it/wp-content/plugins/flamingo/includes/temp/css/mail/css/mail/reply26/7dz5q0550s88dchde844051511des1dd8e1de80d07ee/mahnung/26/","fqdn":"formento1932.it","domain":"formento1932.it","tld":"it"},"ip":{"addr":"213.212.143.46","port":443,"asn":12779,"as":"IT.Gate S.p.A.","country":"Italy","country_code":"IT"},"introduction_type":"scriptElement","is_inline":true,"md5":"de40a5a8a2c980ba60ae6e0dfab3e521","sha1":"3db458d4834b78e297f6d72730c0f1c03efe4b81","sha256":"b367ee85c3501bb5946b0109d2f92e766a983cf09dfbef78479b98509ec1711b","sha512":"35f3a9af2b695a61aa18dc3ace4aa43a566c7ffffd6dd6a7ff9e9e78a7f34833bc137102bcaca084c7873c391a29f528816663efd2ef267a2399f7adc36ae402","ssdeep":"","tlshash":"5ba002dd98a7620915f324274f9f3208207700b7044c9600790cca501f6472f4617bca","size":67,"data":"","first_seen":"2026-09-05T01:15:56.691507Z","last_seen":"2026-09-05T01:15:56.691507Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"formento1932.it/wp-content/plugins/flamingo/includes/temp/css/mail/css/mail/reply26/7dz5q0550s88dchde844051511des1dd8e1de80d07ee/mahnung/26/","fqdn":"formento1932.it","domain":"formento1932.it","tld":"it"},"ip":{"addr":"213.212.143.46","port":443,"asn":12779,"as":"IT.Gate S.p.A.","country":"Italy","country_code":"IT"},"introduction_type":"scriptElement","is_inline":true,"md5":"1cdb79b9218a4b78960ca36a9dec2bc0","sha1":"3edbfcf32949a4029893c28b49c49e4da450ae6c","sha256":"6bc7a390a7be12b575ecec6f926f3be84d4c2879c015563fdb2cd5d04c56e57c","sha512":"18adc736e90cbb8231315660fce33e489c077e7993d46213ca7bda083174ef20ac2c302cc2d06a3b5fafd036e351e5a96dddcc6b5596a5b964d703dc3d267f50","ssdeep":"","tlshash":"0471ef185af30415ac7330ee2bef515536a054536089cc8c3a8f97a09fe0ab6d771bf9","size":3558,"data":"","first_seen":"2026-09-05T01:15:56.69251Z","last_seen":"2026-09-05T01:15:56.69251Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"formento1932.it/wp-content/plugins/flamingo/includes/temp/css/mail/css/mail/reply26/7dz5q0550s88dchde844051511des1dd8e1de80d07ee/mahnung/26/","fqdn":"formento1932.it","domain":"formento1932.it","tld":"it"},"ip":{"addr":"213.212.143.46","port":443,"asn":12779,"as":"IT.Gate S.p.A.","country":"Italy","country_code":"IT"},"introduction_type":"scriptElement","is_inline":true,"md5":"4e42eb8a4ddef6a5d08dbce902a8c690","sha1":"ccbc40dc4ca566668fbbdf3027a98b91340c3301","sha256":"69d9f03c8bd911d8b2d5fa55407ecc4753ae216af155e0fc256ec8d86d5314e9","sha512":"59072fd38c11102223577d57bac96ed5781002aa0f2cbe94cf1a06efc41e36ca894837baa98fc2586f87817eb8254144a449326841a96a6e7beac6830cc1d68b","ssdeep":"","tlshash":"f711eb36d91311411de338293f8dac48b4ac801b883ac044398f4a20df83d20a9bbedc","size":862,"data":"","first_seen":"2026-09-05T01:15:56.693439Z","last_seen":"2026-09-05T01:15:56.693439Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"formento1932.it/wp-content/plugins/flamingo/includes/temp/css/mail/css/mail/reply26/7dz5q0550s88dchde844051511des1dd8e1de80d07ee/mahnung/26/","fqdn":"formento1932.it","domain":"formento1932.it","tld":"it"},"ip":{"addr":"213.212.143.46","port":443,"asn":12779,"as":"IT.Gate S.p.A.","country":"Italy","country_code":"IT"},"introduction_type":"scriptElement","is_inline":true,"md5":"f03a0634d5cf0ed897fda70f53f5e21f","sha1":"7f13f95f0837cc71d33d49474755c869127cd257","sha256":"dec750393f4c1fc86ebe14db2699c42d59b95083578c4476e79d5728d7995d9f","sha512":"6680b7bab74a4d0481cc0eeb4bfcb967cd3d76c1a60fde5ed103e70894373c8e8e47f12f85d971ead49a12748560c88acd3480a780f3d61f6ff7fe43cc0cf79c","ssdeep":"","tlshash":"0bc08c2410e76816435a3535031902b3250a920ad23a6b52318e02aa0b840220408566","size":166,"data":"","first_seen":"2026-09-05T01:15:56.694495Z","last_seen":"2026-09-05T01:15:56.694495Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.adobedtm.com/15ff638fdec4/7a0c4d63ddff/launch-6cc731e967aa.min.js","fqdn":"assets.adobedtm.com","domain":"adobedtm.com","tld":"com"},"ip":{"addr":"96.6.17.25","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"db5d6811a1b0edbeaf0efd5259dba9a6","sha1":"a79d8b1a06b1d2259851adfba3571be632423fe5","sha256":"465405fb9724046f8c3c0f83ba4d5c58592e663b6e3a73fb8e661ad790ff97fa","sha512":"87f59e02a8a42b8ad814f2d2fbdbe784738adfcf4248afc459d859cf88b930623d614e30f90315b595b595c8ab5cdca20669b1065aa2b55e755ee708ebf04c62","ssdeep":"3072:NQmN8LbsM/ESbPbKPbKK6jHKlVz0riUNKeu8yVgJbx7PXV5UCmglQ:NQmN8LbsM/ESbPbKPbKK6jHKlVz0riUs","tlshash":"3ed32bccb2d5b41503eb3279961f200fb27e6a84685d8010eea6edd47d7a60e5373e6c","size":130651,"data":"","first_seen":"2025-08-27T17:30:53.00956Z","last_seen":"2026-09-05T01:15:56.663873Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.cookielaw.org/scripttemplates/202608.1.0/otBannerSdk.js","fqdn":"cdn.cookielaw.org","domain":"cookielaw.org","tld":"org"},"ip":{"addr":"104.18.87.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"91a69f7f419ea85d3e7c8801035aea29","sha1":"f52348585e58b193649c7613306bd6c61702b596","sha256":"3d2f7f7ae2fdfbf24acada1eaeaa636b84db784d2587115af8c7288565c65208","sha512":"1af1144af8115cc8a93127d402796fafa5913b9039b3b4d465a78c2d20a11439b0a907b52d598d8c8c53e3b9ee9fb1215f17a07644a8bdea41c46e6fa8cf3477","ssdeep":"6144:3X5x8gtkIZ3m1y9wZsNoIBTUj/dvPgbs3TafnjAgcFYoRRhxxzldvvKTAue:3XttBZ3m1y9wCXcFYWhxxzfvKUF","tlshash":"72d43b8d7590753547e752b9c02b114ab73534acac89806cb41cc4f91bf9f862aa3fbb","size":604329,"data":"","first_seen":"2026-08-19T20:42:29.867233Z","last_seen":"2026-09-06T23:35:57.400941Z","times_seen":378,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.cookielaw.org/scripttemplates/otSDKStub.js","fqdn":"cdn.cookielaw.org","domain":"cookielaw.org","tld":"org"},"ip":{"addr":"104.18.87.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ac8709d9af7f2e38c2f687015f64e116","sha1":"b8b618fb1abb80193cfc36c4c3fa1af91fc38821","sha256":"7b097fc5a3d173f4747604ed6b8c3d0d0eaace7dbc80261e2ba2a5e0073d0d40","sha512":"44ce86aa20f78c1c9421159c612f7c8d245545f49cfb9aa2607b7809c85ee9268efcf69afdcd46d4f06c67d4c2db1cd612216d1d4353b5d453086eb1df3a5692","ssdeep":"384:r8k7hI3RzMABwXeU9LH6rlIgknE8eEaRgCyu8LcFLKvTJ9x4AaHKJx686S:rzIBAABwXb9wvknECPCJ8tJ9ugwS","tlshash":"05c20989b040fe3447d261dc9a3be25a723a746d3485c168f868dce0647dc4f6633bb6","size":26819,"data":"","first_seen":"2026-06-08T12:55:49.061912Z","last_seen":"2026-09-07T02:20:52.882786Z","times_seen":3761,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"formento1932.it/wp-content/plugins/flamingo/includes/temp/css/mail/css/mail/reply26/7dz5q0550s88dchde844051511des1dd8e1de80d07ee/mahnung/26/resources/primefaces/jquery/jquery-20200819.js","fqdn":"formento1932.it","domain":"formento1932.it","tld":"it"},"ip":{"addr":"213.212.143.46","port":443,"asn":12779,"as":"IT.Gate S.p.A.","country":"Italy","country_code":"IT"},"introduction_type":"scriptElement","is_inline":false,"md5":"b6c9978c306ef264158551c140a4c475","sha1":"a8316d0f66cc97376d60ae86a47c7efb3b8134ac","sha256":"2b2485b0669a2f73c4846e82eb5a37421358591a8ac8ba21d8149bfb88adcbfb","sha512":"0f69c70c3e54bf7f7fa24eecfd86d07a7b868016c55abb889a0c4a0bee3081fb60098f0f1bd8ba905b6cbb30b50af6c9dbfed70863baece4be2b54bd977d966a","ssdeep":"1536:rYE1JVoiB9JqZdXXe2pD3PgoIK6alrUSTJuFk/zkZ4HWLZoHsrOa99fwkKb7/HpU:q4KZ+23WLZICOaLfwkK7qD1Paca98Hr/","tlshash":"d893e8d9b6d6706287b734a851bf410bb17aa8eab40c4c60f058c8e47e74e9d507bf2d","size":97368,"data":"","first_seen":"2023-11-18T18:24:47Z","last_seen":"2026-09-05T01:15:56.685394Z","times_seen":542,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"formento1932.it/wp-content/plugins/flamingo/includes/temp/css/mail/css/mail/reply26/7dz5q0550s88dchde844051511des1dd8e1de80d07ee/mahnung/26/resources/js/swisspass.min-20200819.js","fqdn":"formento1932.it","domain":"formento1932.it","tld":"it"},"ip":{"addr":"213.212.143.46","port":443,"asn":12779,"as":"IT.Gate S.p.A.","country":"Italy","country_code":"IT"},"introduction_type":"scriptElement","is_inline":false,"md5":"a8deceea0458745a7c0f562c65e01e27","sha1":"850c4796889f9173e30e016916155941cab3ae31","sha256":"9c50211b34ab0377f3b35c243c98e402315127bfa5b51e147cb22c702174ca60","sha512":"17d7d5daaa8e1c864fe21ce96782f33b45a907820a659e34ce760dad6d62895e92270d4073387ed5d563447c0f952e9369bf37aaa323b7b80912df3b5df13f9f","ssdeep":"1536:gj5taENXUembGTAC/gLf8XPpzaaGNZIMcSPAZAcSH5bVRLbErz:s5taE9FLTWIPpzaaQIMvPAZrSH1bErz","tlshash":"38a3da0d705234b72bff30f7147f620591336499b8454c40b26d9ca61ebaa4e53afeae","size":99344,"data":"","first_seen":"2023-11-18T18:24:47Z","last_seen":"2026-09-05T01:15:56.686581Z","times_seen":552,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"formento1932.it/wp-content/plugins/flamingo/includes/temp/css/mail/css/mail/reply26/7dz5q0550s88dchde844051511des1dd8e1de80d07ee/mahnung/26/resources/js/vendor/head/modernizr/modernizr-20200819.js","fqdn":"formento1932.it","domain":"formento1932.it","tld":"it"},"ip":{"addr":"213.212.143.46","port":443,"asn":12779,"as":"IT.Gate S.p.A.","country":"Italy","country_code":"IT"},"introduction_type":"scriptElement","is_inline":false,"md5":"1fa235981d7cbf5eb6098a7523afc383","sha1":"b764fad44ab2448d9924c2b0cf73ccee7b768c16","sha256":"7a9fa521a58ee93001981f3a7db498c589233d8cc616e8d09af0119388a865bc","sha512":"6df81d5e6524a92df4288e1a3309bb28c671e4711723a61c625f76f65981893599889d5647f295ab99737b6e9a3f263ddd02e32d3cf78d92ec89c2ffa21c7d9c","ssdeep":"192:tH4uMlSHW5nMIMzaGuX81KQob1dHYPeIny6RX:BHMgHW5MvzaGuX81KQoZRY5y65","tlshash":"80f1b88d7162b266479b5177507f870ef27898aaa9184440f09cc9bcbe74cb8437bf2d","size":7772,"data":"","first_seen":"2023-11-18T18:24:47Z","last_seen":"2026-09-05T01:15:56.66669Z","times_seen":605,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"debug","text":"Push (popup) window.digitalDataLayermap[actor:server1.conn0.watcher17.process7//obj23 class:Object extensible:true frozen:false isError:false ownPropertyLength:3 preview:map[kind:Object ownProperties:map[page:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher17.process7//obj24 class:Object extensible:true frozen:false isError:false ownPropertyLength:2 sealed:false type:object] writable:true] pageInstanceID:map[configurable:true enumerable:true value:611076 writable:true] user:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher17.process7//obj25 class:Array extensible:true frozen:false isError:false ownPropertyLength:2 preview:map[kind:ArrayLike length:1] sealed:false type:object] writable:true]] ownPropertiesLength:3] sealed:false type:object]","filename":"https://formento1932.it/wp-content/plugins/flamingo/includes/temp/css/mail/css/mail/reply26/7dz5q0550s88dchde844051511des1dd8e1de80d07ee/mahnung/26/","line_number":56,"column_number":15},{"level":"warn","text":"Unable to start module Gui.Loginswitch!","filename":"https://formento1932.it/wp-content/plugins/flamingo/includes/temp/css/mail/css/mail/reply26/7dz5q0550s88dchde844051511des1dd8e1de80d07ee/mahnung/26/resources/js/swisspass.min-20200819.js","line_number":1,"column_number":2142},{"level":"warn","text":"Unable to start module Gui.Forms!","filename":"https://formento1932.it/wp-content/plugins/flamingo/includes/temp/css/mail/css/mail/reply26/7dz5q0550s88dchde844051511des1dd8e1de80d07ee/mahnung/26/resources/js/swisspass.min-20200819.js","line_number":1,"column_number":2142},{"level":"warn","text":"Unable to start module Gui.Forms.IBAN!","filename":"https://formento1932.it/wp-content/plugins/flamingo/includes/temp/css/mail/css/mail/reply26/7dz5q0550s88dchde844051511des1dd8e1de80d07ee/mahnung/26/resources/js/swisspass.min-20200819.js","line_number":1,"column_number":2142},{"level":"warn","text":"Unable to start module Bknd.SessionInvalidation!","filename":"https://formento1932.it/wp-content/plugins/flamingo/includes/temp/css/mail/css/mail/reply26/7dz5q0550s88dchde844051511des1dd8e1de80d07ee/mahnung/26/resources/js/swisspass.min-20200819.js","line_number":1,"column_number":2142},{"level":"log","text":"error loading {\"url\":\"/idp/co-branding\",\"status\":\"error\",\"error\":\"\",\"xhr\":{\"readyState\":0,\"responseText\":\"\",\"status\":0,\"statusText\":\"error\"}}","filename":"https://formento1932.it/wp-content/plugins/flamingo/includes/temp/css/mail/css/mail/reply26/7dz5q0550s88dchde844051511des1dd8e1de80d07ee/mahnung/26/resources/js/swisspass.min-20200819.js","line_number":1,"column_number":1027}]},"http":[{"url":{"schema":"https","addr":"cdn.cookielaw.org/scripttemplates/202608.1.0/assets/otFlat.json","fqdn":"cdn.cookielaw.org","domain":"cookielaw.org","tld":"org"},"ip":{"addr":"104.18.87.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://formento1932.it/wp-content/plugins/flamingo/includes/temp/css/mail/css/mail/reply26/7dz5q0550s88dchde844051511des1dd8e1de80d07ee/mahnung/26/","date":"2026-09-05T01:15:16.762Z","timestamp":1788570916762,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cookielaw.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Jul 2026 22:47:21 GMT","end":"Tue, 20 Oct 2026 23:47:08 GMT"},"fingerprint":{"sha1":"BE:65:35:7C:E3:8D:B8:0C:7D:40:51:C7:4B:EE:56:FE:FD:2D:ED:91","sha256":"D6:A8:FD:24:40:A2:7D:0B:B5:73:08:9C:B2:AC:6E:1F:84:CC:D4:09:7B:BA:22:E8:A5:38:A4:10:29:65:88:5C"}}},"request":{"raw":"GET /scripttemplates/202608.1.0/assets/otFlat.json HTTP/1.1\r\nHost: cdn.cookielaw.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://formento1932.it\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 05 Sep 2026 01:15:16 GMT\r\ncontent-type: application/json\r\ncontent-length: 4023\r\ncontent-encoding: gzip\r\ncontent-md5: 2YuPuK7AhNsKwYRfDil/YA==\r\nlast-modified: Tue, 18 Aug 2026 07:37:19 GMT\r\netag: 0x8DEFCFB88B732A5\r\nserver: cloudflare\r\nx-ms-request-id: 6edc2630-401e-0029-17ba-3ce5c8000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,ETag,Last-Modified,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\nvary: accept-encoding\r\ncache-control: max-age=86400\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncf-ray: a36161c5ce1f568a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20721,"size_decoded":4949,"mime_type":"application/json","magic":"JSON text data","md5":"908d90159e9866a48b940f65a197102d","sha1":"ee467481b0120d94277f80c91fe4b9d40d035884","sha256":"4094c6314c974b3347e0c3adbf78e24c8cfd1d838af3a5ad38d36316c24c73a1","sha512":"ed51fbbae3a166e331dcf9601ad6f2f7fc5683dca687673106cfaa177c5cf8e650d3e66cab2348458950bd1eebc81b1c57fa7c20179914c5a5a4f320a1a823b4","ssdeep":"384:KbNcQD0cGDjbn42OhOT85csX1NFyNUV/OoH6iAHyPtJJAR:KbNcQDic/i","tlshash":"7692cc513da01b2ae1efc789688378d535313d8bfe3399cd9119a3b843ad2f10c66b45","first_seen":"2026-08-21T06:30:07.417115Z","last_seen":"2026-09-06T23:35:57.356183Z","times_seen":295,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.cookielaw.org/scripttemplates/202608.1.0/assets/v2/otPcTab.json","fqdn":"cdn.cookielaw.org","domain":"cookielaw.org","tld":"org"},"ip":{"addr":"104.18.87.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://formento1932.it/wp-content/plugins/flamingo/includes/temp/css/mail/css/mail/reply26/7dz5q0550s88dchde844051511des1dd8e1de80d07ee/mahnung/26/","date":"2026-09-05T01:15:16.764Z","timestamp":1788570916764,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cookielaw.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Jul 2026 22:47:21 GMT","end":"Tue, 20 Oct 2026 23:47:08 GMT"},"fingerprint":{"sha1":"BE:65:35:7C:E3:8D:B8:0C:7D:40:51:C7:4B:EE:56:FE:FD:2D:ED:91","sha256":"D6:A8:FD:24:40:A2:7D:0B:B5:73:08:9C:B2:AC:6E:1F:84:CC:D4:09:7B:BA:22:E8:A5:38:A4:10:29:65:88:5C"}}},"request":{"raw":"GET /scripttemplates/202608.1.0/assets/v2/otPcTab.json HTTP/1.1\r\nHost: cdn.cookielaw.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://formento1932.it\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 05 Sep 2026 01:15:16 GMT\r\ncontent-type: application/json\r\ncontent-length: 15080\r\ncontent-encoding: gzip\r\ncontent-md5: 5TfQ8E7RYfRA0ZI+rJ3ISQ==\r\nlast-modified: Tue, 18 Aug 2026 07:37:21 GMT\r\netag: 0x8DEFCFB8A2EAB27\r\nserver: cloudflare\r\nx-ms-request-id: 6916275b-101e-0018-7bba-3cbe1f000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,ETag,Last-Modified,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\nvary: accept-encoding\r\ncache-control: max-age=86400\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncf-ray: a36161c5ce22568a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":76379,"size_decoded":16007,"mime_type":"application/json","magic":"JSON text data","md5":"fcbf8d72e6ca6734b307daa253fbc039","sha1":"d5699764afb1be974b5998fe7a161becf99ab0c9","sha256":"8fa3e2863d69cf096a1da125e90c1b32529bff717ac7d4765fe078de2d86f7d7","sha512":"916a66adbd99e067ee9161c15d93a9ba367fdd3b9f9087cc45bb8243ebf66fa18ce2298ebd76fc424a74836133cd50451bba158334cb4ff663762f8810eaeb14","ssdeep":"768:6pl23MgWAxTh7srzc2pZdPOq3wOd5CPcUw5xCc:N+ugrz/L3Pd5vUwHv","tlshash":"2373e99b3ea1530afae38b19eb936de97120c81fbd335dedf1024678868d3e18d51509","first_seen":"2026-08-21T08:32:11.425612Z","last_seen":"2026-09-06T20:19:29.024764Z","times_seen":14,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.adobedtm.com/15ff638fdec4/7a0c4d63ddff/launch-6cc731e967aa.min.js","fqdn":"assets.adobedtm.com","domain":"adobedtm.com","tld":"com"},"ip":{"addr":"96.6.17.25","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://formento1932.it/wp-content/plugins/flamingo/includes/temp/css/mail/css/mail/reply26/7dz5q0550s88dchde844051511des1dd8e1de80d07ee/mahnung/26/","date":"2026-09-05T01:15:16.236Z","timestamp":1788570916236,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"assets.adobedtm.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 15 Jun 2026 00:00:00 GMT","end":"Wed, 30 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F5:F4:95:3A:18:25:EB:18:C8:0C:A4:56:E7:FE:F8:C7:7C:1D:44:B4","sha256":"9E:4F:3B:F5:7A:9A:F7:87:73:7C:41:75:E3:2E:DA:1F:4E:BA:91:37:26:FC:A2:EC:77:E3:0B:0D:AF:13:18:A3"}}},"request":{"raw":"GET /15ff638fdec4/7a0c4d63ddff/launch-6cc731e967aa.min.js HTTP/1.1\r\nHost: assets.adobedtm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-type: application/x-javascript\r\netag: \"db5d6811a1b0edbeaf0efd5259dba9a6:1756213500.532307\"\r\nlast-modified: Tue, 26 Aug 2025 13:05:00 GMT\r\nserver: AkamaiNetStorage\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: max-age=3600\r\nexpires: Sat, 05 Sep 2026 02:15:16 GMT\r\ndate: Sat, 05 Sep 2026 01:15:16 GMT\r\ncontent-length: 38564\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":130651,"size_decoded":39058,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (32756)","md5":"db5d6811a1b0edbeaf0efd5259dba9a6","sha1":"a79d8b1a06b1d2259851adfba3571be632423fe5","sha256":"465405fb9724046f8c3c0f83ba4d5c58592e663b6e3a73fb8e661ad790ff97fa","sha512":"87f59e02a8a42b8ad814f2d2fbdbe784738adfcf4248afc459d859cf88b930623d614e30f90315b595b595c8ab5cdca20669b1065aa2b55e755ee708ebf04c62","ssdeep":"3072:NQmN8LbsM/ESbPbKPbKK6jHKlVz0riUNKeu8yVgJbx7PXV5UCmglQ:NQmN8LbsM/ESbPbKPbKK6jHKlVz0riUs","tlshash":"3ed32bccb2d5b41503eb3279961f200fb27e6a84685d8010eea6edd47d7a60e5373e6c","first_seen":"2025-08-27T17:30:53.00956Z","last_seen":"2026-09-05T01:15:56.663873Z","times_seen":84,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":4,"connect":1,"send":0,"wait":5,"receive":2,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"geolocation.onetrust.com/cookieconsentpub/v1/geo/location","fqdn":"geolocation.onetrust.com","domain":"onetrust.com","tld":"com"},"ip":{"addr":"104.18.32.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://formento1932.it/wp-content/plugins/flamingo/includes/temp/css/mail/css/mail/reply26/7dz5q0550s88dchde844051511des1dd8e1de80d07ee/mahnung/26/","date":"2026-09-05T01:15:16.486Z","timestamp":1788570916486,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"geolocation.onetrust.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Jul 2026 22:17:34 GMT","end":"Tue, 20 Oct 2026 23:17:15 GMT"},"fingerprint":{"sha1":"17:8F:FB:39:BB:6B:A1:00:73:5A:DB:D4:D0:EF:99:EE:9A:B8:93:7D","sha256":"6B:C4:36:A1:51:AE:0F:CD:67:5C:4E:1C:1E:55:01:AA:70:B5:B2:BA:34:37:2C:1E:01:C3:A1:F7:E5:F9:52:41"}}},"request":{"raw":"GET /cookieconsentpub/v1/geo/location HTTP/1.1\r\nHost: geolocation.onetrust.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://formento1932.it\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 05 Sep 2026 01:15:16 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: GET, OPTIONS\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a36161c42d2e712a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65,"size_decoded":444,"mime_type":"application/json","magic":"JSON text data","md5":"8d896eded71ee5fc863cf1ec1485da75","sha1":"b36c99cd02aa88e94a55b028381d9c5cb61cbbef","sha256":"3dddf5b1f3c0e76d359e7fe585b61f721980981a612e17d7ebfedfc3e6fc3b3d","sha512":"a216a2ec987ed8aa509d4bf88075844374819f15767190c2f9fc1b7dc05436cb33ac0fa3466bd207bd3104e455cd3c72fb8622dd0759ab64f197ac216850382e","ssdeep":"","tlshash":"3da0025864599d1d9dfd824a530e726a1244a309828751c6c6c9ed75c5812c9b05c480","first_seen":"2025-06-02T14:25:58.002399Z","last_seen":"2026-09-07T02:13:13.564926Z","times_seen":175568,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":3,"connect":2,"send":0,"wait":11,"receive":0,"ssl":8},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.cookielaw.org/logos/static/powered_by_logo.svg","fqdn":"cdn.cookielaw.org","domain":"cookielaw.org","tld":"org"},"ip":{"addr":"104.18.87.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://formento1932.it/wp-content/plugins/flamingo/includes/temp/css/mail/css/mail/reply26/7dz5q0550s88dchde844051511des1dd8e1de80d07ee/mahnung/26/","date":"2026-09-05T01:15:16.919Z","timestamp":1788570916919,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cookielaw.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Jul 2026 22:47:21 GMT","end":"Tue, 20 Oct 2026 23:47:08 GMT"},"fingerprint":{"sha1":"BE:65:35:7C:E3:8D:B8:0C:7D:40:51:C7:4B:EE:56:FE:FD:2D:ED:91","sha256":"D6:A8:FD:24:40:A2:7D:0B:B5:73:08:9C:B2:AC:6E:1F:84:CC:D4:09:7B:BA:22:E8:A5:38:A4:10:29:65:88:5C"}}},"request":{"raw":"GET /logos/static/powered_by_logo.svg HTTP/1.1\r\nHost: cdn.cookielaw.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 05 Sep 2026 01:15:16 GMT\r\ncontent-type: image/svg+xml\r\ncontent-md5: yMeilKp6reuDTG1eNiffRg==\r\nlast-modified: Tue, 01 Sep 2026 09:27:46 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nx-ms-request-id: 24ac4356-601e-0071-5052-3ae1b3000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,ETag,Last-Modified,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\ncross-origin-resource-policy: cross-origin\r\nage: 73195\r\ncache-control: max-age=86400\r\ncf-cache-status: HIT\r\ncontent-encoding: gzip\r\ncf-ray: a36161c6cfde56cb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5445,"size_decoded":3299,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c8c7a294aa7aadeb834c6d5e3627df46","sha1":"5e2107ce68c4286a0b80648b19e7b5a7e7cad702","sha256":"cddd450a33be5e50d6f27aea78d2e278beae2762678b22fc2dcee8de29cbc0be","sha512":"881abe7bef6955139eab994ca4769c3d94568c27b51871a7b69e71db70110c4a80647803d661ba198ff9155de75b30c91f6ef2e7ed1a516c483ab2e5830cd337","ssdeep":"96:9ui6WcChyXQBHEOJ3a6XJD8ThcAbnNXGTvkWsoo:93/hEqDPXJwThcAb5Uvjq","tlshash":"26b174d67fb4a4f458859ffede1b59a9765b74f97b63c68c823c8f2906838c08548c04","first_seen":"2026-04-06T03:34:52.903175Z","last_seen":"2026-09-07T02:13:13.532482Z","times_seen":66856,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"formento1932.it/wp-content/plugins/flamingo/includes/temp/css/mail/css/mail/reply26/7dz5q0550s88dchde844051511des1dd8e1de80d07ee/mahnung/26/resources/ico/apple-touch-icon-precomposed-20200819.png","fqdn":"formento1932.it","domain":"formento1932.it","tld":"it"},"ip":{"addr":"213.212.143.46","port":443,"asn":12779,"as":"IT.Gate S.p.A.","country":"Italy","country_code":"IT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://formento1932.it/wp-content/plugins/flamingo/includes/temp/css/mail/css/mail/reply26/7dz5q0550s88dchde844051511des1dd8e1de80d07ee/mahnung/26/","date":"2026-09-05T01:15:17.034Z","timestamp":1788570917034,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.formento1932.it","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 14:46:31 GMT","end":"Mon, 16 Nov 2026 14:46:30 GMT"},"fingerprint":{"sha1":"A8:8F:19:AC:B8:DF:2C:1D:98:23:38:58:83:56:3E:0F:09:D7:FC:53","sha256":"0E:08:28:85:E2:06:70:B2:AA:4F:84:3F:3A:0F:6F:A3:57:10:D2:15:39:30:57:0A:F8:D6:9B:B5:B4:F3:4F:F7"}}},"request":{"raw":"GET /wp-content/plugins/flamingo/includes/temp/css/mail/css/mail/reply26/7dz5q0550s88dchde844051511des1dd8e1de80d07ee/mahnung/26/resources/ico/apple-touch-icon-precomposed-20200819.png HTTP/1.1\r\nHost: formento1932.it\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: OptanonConsent=isGpcEnabled=0\u0026datestamp=Sat+Sep+05+2026+01%3A15%3A16+GMT%2B0000+(Coordinated+Universal+Time)\u0026version=202608.1.0\u0026browserGpcFlag=1\u0026isDntEnabled=0\u0026isIABGlobal=false\u0026hosts=\u0026consentId=9c8502b4-95e1-4dc5-8f6c-c57d3347868b\u0026interactionCount=0\u0026isAnonUser=1\u0026prevHadToken=0\u0026landingPath=https%3A%2F%2Fformento1932.it%2Fwp-content%2Fplugins%2Fflamingo%2Fincludes%2Ftemp%2Fcss%2Fmail%2Fcss%2Fmail%2Freply26%2F7dz5q0550s88dchde844051511des1dd8e1de80d07ee%2Fmahnung%2F26%2F\u0026groups=C0001%3A1%2CC0002%3A0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Sat, 05 Sep 2026 01:15:17 GMT\r\ncontent-type: text/html\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":242,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-09-07T02:13:17.077066Z","times_seen":557312,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"formento1932.it/wp-content/plugins/flamingo/includes/temp/css/mail/css/mail/reply26/7dz5q0550s88dchde844051511des1dd8e1de80d07ee/mahnung/26/resources/js/vendor/head/modernizr/modernizr-20200819.js","fqdn":"formento1932.it","domain":"formento1932.it","tld":"it"},"ip":{"addr":"213.212.143.46","port":443,"asn":12779,"as":"IT.Gate S.p.A.","country":"Italy","country_code":"IT"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://formento1932.it/wp-content/plugins/flamingo/includes/temp/css/mail/css/mail/reply26/7dz5q0550s88dchde844051511des1dd8e1de80d07ee/mahnung/26/","date":"2026-09-05T01:15:16.232Z","timestamp":1788570916232,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.formento1932.it","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 14:46:31 GMT","end":"Mon, 16 Nov 2026 14:46:30 GMT"},"fingerprint":{"sha1":"A8:8F:19:AC:B8:DF:2C:1D:98:23:38:58:83:56:3E:0F:09:D7:FC:53","sha256":"0E:08:28:85:E2:06:70:B2:AA:4F:84:3F:3A:0F:6F:A3:57:10:D2:15:39:30:57:0A:F8:D6:9B:B5:B4:F3:4F:F7"}}},"request":{"raw":"GET /wp-content/plugins/flamingo/includes/temp/css/mail/css/mail/reply26/7dz5q0550s88dchde844051511des1dd8e1de80d07ee/mahnung/26/resources/js/vendor/head/modernizr/modernizr-20200819.js HTTP/1.1\r\nHost: formento1932.it\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 05 Sep 2026 01:15:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 23 May 2024 01:30:22 GMT\r\netag: W/\"664e9c2e-1e5c\"\r\nexpires: Mon, 05 Oct 2026 01:15:16 GMT\r\ncache-control: max-age=2592000, public, no-transform\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7772,"size_decoded":3770,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7466), with CRLF line terminators","md5":"1fa235981d7cbf5eb6098a7523afc383","sha1":"b764fad44ab2448d9924c2b0cf73ccee7b768c16","sha256":"7a9fa521a58ee93001981f3a7db498c589233d8cc616e8d09af0119388a865bc","sha512":"6df81d5e6524a92df4288e1a3309bb28c671e4711723a61c625f76f65981893599889d5647f295ab99737b6e9a3f263ddd02e32d3cf78d92ec89c2ffa21c7d9c","ssdeep":"192:tH4uMlSHW5nMIMzaGuX81KQob1dHYPeIny6RX:BHMgHW5MvzaGuX81KQoZRY5y65","tlshash":"80f1b88d7162b266479b5177507f870ef27898aaa9184440f09cc9bcbe74cb8437bf2d","first_seen":"2023-11-18T18:24:47Z","last_seen":"2026-09-05T01:15:56.66669Z","times_seen":605,"resource_available":true,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - SwissPass","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with SwissPass phishing","tags":["swisspass","phishing","transport"],"meta":null}]}},{"url":{"schema":"https","addr":"formento1932.it/wp-content/plugins/flamingo/includes/temp/css/mail/css/mail/reply26/7dz5q0550s88dchde844051511des1dd8e1de80d07ee/mahnung/26/resources/img/login_bg.jpg","fqdn":"formento1932.it","domain":"formento1932.it","tld":"it"},"ip":{"addr":"213.212.143.46","port":443,"asn":12779,"as":"IT.Gate S.p.A.","country":"Italy","country_code":"IT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://formento1932.it/wp-content/plugins/flamingo/includes/temp/css/mail/css/mail/reply26/7dz5q0550s88dchde844051511des1dd8e1de80d07ee/mahnung/26/","date":"2026-09-05T01:15:16.379Z","timestamp":1788570916379,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.formento1932.it","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 14:46:31 GMT","end":"Mon, 16 Nov 2026 14:46:30 GMT"},"fingerprint":{"sha1":"A8:8F:19:AC:B8:DF:2C:1D:98:23:38:58:83:56:3E:0F:09:D7:FC:53","sha256":"0E:08:28:85:E2:06:70:B2:AA:4F:84:3F:3A:0F:6F:A3:57:10:D2:15:39:30:57:0A:F8:D6:9B:B5:B4:F3:4F:F7"}}},"request":{"raw":"GET /wp-content/plugins/flamingo/includes/temp/css/mail/css/mail/reply26/7dz5q0550s88dchde844051511des1dd8e1de80d07ee/mahnung/26/resources/img/login_bg.jpg HTTP/1.1\r\nHost: formento1932.it\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Sat, 05 Sep 2026 01:15:16 GMT\r\ncontent-type: text/html\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":242,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-09-07T02:13:17.077066Z","times_seen":557312,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.cookielaw.org/scripttemplates/202608.1.0/otBannerSdk.js","fqdn":"cdn.cookielaw.org","domain":"cookielaw.org","tld":"org"},"ip":{"addr":"104.18.87.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://formento1932.it/wp-content/plugins/flamingo/includes/temp/css/mail/css/mail/reply26/7dz5q0550s88dchde844051511des1dd8e1de80d07ee/mahnung/26/","date":"2026-09-05T01:15:16.541Z","timestamp":1788570916541,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cookielaw.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Jul 2026 22:47:21 GMT","end":"Tue, 20 Oct 2026 23:47:08 GMT"},"fingerprint":{"sha1":"BE:65:35:7C:E3:8D:B8:0C:7D:40:51:C7:4B:EE:56:FE:FD:2D:ED:91","sha256":"D6:A8:FD:24:40:A2:7D:0B:B5:73:08:9C:B2:AC:6E:1F:84:CC:D4:09:7B:BA:22:E8:A5:38:A4:10:29:65:88:5C"}}},"request":{"raw":"GET /scripttemplates/202608.1.0/otBannerSdk.js HTTP/1.1\r\nHost: cdn.cookielaw.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 05 Sep 2026 01:15:16 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 147605\r\ncontent-encoding: gzip\r\ncontent-md5: A77s6XrBMFCpbDOGXQ3YuA==\r\nlast-modified: Tue, 18 Aug 2026 07:37:26 GMT\r\netag: 0x8DEFCFB8CD14F84\r\nserver: cloudflare\r\nx-ms-request-id: dec00e6d-701e-00ed-3624-349a0e000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,ETag,Last-Modified,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\nvary: accept-encoding\r\nage: 81453\r\ncache-control: max-age=86400\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncf-ray: a36161c46edb56cb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":604329,"size_decoded":148551,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"91a69f7f419ea85d3e7c8801035aea29","sha1":"f52348585e58b193649c7613306bd6c61702b596","sha256":"3d2f7f7ae2fdfbf24acada1eaeaa636b84db784d2587115af8c7288565c65208","sha512":"1af1144af8115cc8a93127d402796fafa5913b9039b3b4d465a78c2d20a11439b0a907b52d598d8c8c53e3b9ee9fb1215f17a07644a8bdea41c46e6fa8cf3477","ssdeep":"6144:3X5x8gtkIZ3m1y9wZsNoIBTUj/dvPgbs3TafnjAgcFYoRRhxxzldvvKTAue:3XttBZ3m1y9wCXcFYWhxxzfvKUF","tlshash":"72d43b8d7590753547e752b9c02b114ab73534acac89806cb41cc4f91bf9f862aa3fbb","first_seen":"2026-08-19T20:42:29.867233Z","last_seen":"2026-09-06T23:35:57.400941Z","times_seen":378,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.cookielaw.org/logos/d8f340ef-178f-4257-9ea8-01744cfc5459/182f96bb-6fd6-41f6-bfd2-2807f1757dae/039a2007-c2e0-4340-8d2c-4e6f23342858/OneTrust_SwissPass_logo_mobile.png","fqdn":"cdn.cookielaw.org","domain":"cookielaw.org","tld":"org"},"ip":{"addr":"104.18.87.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://formento1932.it/wp-content/plugins/flamingo/includes/temp/css/mail/css/mail/reply26/7dz5q0550s88dchde844051511des1dd8e1de80d07ee/mahnung/26/","date":"2026-09-05T01:15:16.917Z","timestamp":1788570916917,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cookielaw.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Jul 2026 22:47:21 GMT","end":"Tue, 20 Oct 2026 23:47:08 GMT"},"fingerprint":{"sha1":"BE:65:35:7C:E3:8D:B8:0C:7D:40:51:C7:4B:EE:56:FE:FD:2D:ED:91","sha256":"D6:A8:FD:24:40:A2:7D:0B:B5:73:08:9C:B2:AC:6E:1F:84:CC:D4:09:7B:BA:22:E8:A5:38:A4:10:29:65:88:5C"}}},"request":{"raw":"GET /logos/d8f340ef-178f-4257-9ea8-01744cfc5459/182f96bb-6fd6-41f6-bfd2-2807f1757dae/039a2007-c2e0-4340-8d2c-4e6f23342858/OneTrust_SwissPass_logo_mobile.png HTTP/1.1\r\nHost: cdn.cookielaw.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 05 Sep 2026 01:15:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 1962\r\ncontent-md5: zV4bfgG4WycWxZPXBvPm8g==\r\nlast-modified: Wed, 03 Mar 2021 11:26:34 GMT\r\netag: 0x8D8DE3733F257B1\r\nserver: cloudflare\r\nx-ms-request-id: edaf0b40-d01e-002c-3b14-2c11b7000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,ETag,Last-Modified,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\nage: 26942\r\ncache-control: max-age=86400\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncf-ray: a36161c6bfdb56cb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1962,"size_decoded":2829,"mime_type":"image/png","magic":"PNG image data, 100 x 50, 8-bit colormap, non-interlaced","md5":"cd5e1b7e01b85b2716c593d706f3e6f2","sha1":"d9e647da2b1c1f440f2513fd699159f74b5bf6d5","sha256":"e42fe383c86ab1185425bf334a44f9a311dd06d8ccf9e409d05b45dbe0bc48c6","sha512":"7e193862fe01d9fbf3aeea175c22685661e42851936b84c506144024fba277b61d258f8efde943744f2f90c2ce0cfeb710e538451b2160cfd85a4eb13386ef68","ssdeep":"","tlshash":"6841cb6691685c652e976c8ec6e598edf71e0e930e87210e0373b8996f7035c1142b9f","first_seen":"2023-06-07T23:36:04Z","last_seen":"2026-09-05T01:15:56.668438Z","times_seen":1187,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"formento1932.it/wp-content/plugins/flamingo/includes/temp/css/mail/css/mail/reply26/7dz5q0550s88dchde844051511des1dd8e1de80d07ee/mahnung/26/resources/css/normal/app/sso.min-20200819.css","fqdn":"formento1932.it","domain":"formento1932.it","tld":"it"},"ip":{"addr":"213.212.143.46","port":443,"asn":12779,"as":"IT.Gate S.p.A.","country":"Italy","country_code":"IT"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://formento1932.it/wp-content/plugins/flamingo/includes/temp/css/mail/css/mail/reply26/7dz5q0550s88dchde844051511des1dd8e1de80d07ee/mahnung/26/","date":"2026-09-05T01:15:16.230Z","timestamp":1788570916230,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.formento1932.it","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 14:46:31 GMT","end":"Mon, 16 Nov 2026 14:46:30 GMT"},"fingerprint":{"sha1":"A8:8F:19:AC:B8:DF:2C:1D:98:23:38:58:83:56:3E:0F:09:D7:FC:53","sha256":"0E:08:28:85:E2:06:70:B2:AA:4F:84:3F:3A:0F:6F:A3:57:10:D2:15:39:30:57:0A:F8:D6:9B:B5:B4:F3:4F:F7"}}},"request":{"raw":"GET /wp-content/plugins/flamingo/includes/temp/css/mail/css/mail/reply26/7dz5q0550s88dchde844051511des1dd8e1de80d07ee/mahnung/26/resources/css/normal/app/sso.min-20200819.css HTTP/1.1\r\nHost: formento1932.it\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 05 Sep 2026 01:15:16 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 23 May 2024 01:30:22 GMT\r\netag: W/\"664e9c2e-2cedf\"\r\nexpires: Mon, 05 Oct 2026 01:15:16 GMT\r\ncache-control: max-age=2592000, public, no-transform\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":184031,"size_decoded":24560,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"3dd6fd96fa45e239df51fec88f94d90c","sha1":"1c12139a90f2e1c324eec36deecf6550c2a6dd7b","sha256":"df1e617507098c8826a05c6487106c27e13f067537dbaf4f44d0de4f7d5e8ee3","sha512":"e66771c22b6403e24c8a4ac519cc6b5875f3e72c904de493662c007ca696ff068ab405c46812c8f634025520cb5d471b795ce1f33d79be07412f273be10814cd","ssdeep":"768:K5ptYJ7mvjNiYXayvATzcGxwRv5FSN0k4PSw2w+Zw2w+6ZkynBCb1c9FnUShWlwF:K/uJqHXayvAPFwXu5NL6tw41","tlshash":"0604a8d6eae214ad372bc41fa4c16776173b9011fa572fb6f2d7946c8b883860223f45","first_seen":"2023-11-21T05:20:58Z","last_seen":"2026-09-05T01:15:56.66939Z","times_seen":372,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - SwissPass","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with SwissPass phishing","tags":["swisspass","phishing","transport"],"meta":null}]}},{"url":{"schema":"https","addr":"cdn.cookielaw.org/scripttemplates/otSDKStub.js","fqdn":"cdn.cookielaw.org","domain":"cookielaw.org","tld":"org"},"ip":{"addr":"104.18.87.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://formento1932.it/wp-content/plugins/flamingo/includes/temp/css/mail/css/mail/reply26/7dz5q0550s88dchde844051511des1dd8e1de80d07ee/mahnung/26/","date":"2026-09-05T01:15:16.235Z","timestamp":1788570916235,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cookielaw.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Jul 2026 22:47:21 GMT","end":"Tue, 20 Oct 2026 23:47:08 GMT"},"fingerprint":{"sha1":"BE:65:35:7C:E3:8D:B8:0C:7D:40:51:C7:4B:EE:56:FE:FD:2D:ED:91","sha256":"D6:A8:FD:24:40:A2:7D:0B:B5:73:08:9C:B2:AC:6E:1F:84:CC:D4:09:7B:BA:22:E8:A5:38:A4:10:29:65:88:5C"}}},"request":{"raw":"GET /scripttemplates/otSDKStub.js HTTP/1.1\r\nHost: cdn.cookielaw.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 05 Sep 2026 01:15:16 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 8777\r\ncontent-encoding: gzip\r\ncontent-md5: tLxneUcORicA+Aiz/So98w==\r\nlast-modified: Tue, 01 Sep 2026 09:27:44 GMT\r\netag: 0x8DF080B472B8A96\r\nserver: cloudflare\r\nx-ms-request-id: 51355a7c-e01e-00c1-4073-3a1833000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,ETag,Last-Modified,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\nvary: accept-encoding\r\nage: 2152\r\ncache-control: max-age=86400\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncf-ray: a36161c29e3f56cb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26819,"size_decoded":9720,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (26818)","md5":"ac8709d9af7f2e38c2f687015f64e116","sha1":"b8b618fb1abb80193cfc36c4c3fa1af91fc38821","sha256":"7b097fc5a3d173f4747604ed6b8c3d0d0eaace7dbc80261e2ba2a5e0073d0d40","sha512":"44ce86aa20f78c1c9421159c612f7c8d245545f49cfb9aa2607b7809c85ee9268efcf69afdcd46d4f06c67d4c2db1cd612216d1d4353b5d453086eb1df3a5692","ssdeep":"384:r8k7hI3RzMABwXeU9LH6rlIgknE8eEaRgCyu8LcFLKvTJ9x4AaHKJx686S:rzIBAABwXb9wvknECPCJ8tJ9ugwS","tlshash":"05c20989b040fe3447d261dc9a3be25a723a746d3485c168f868dce0647dc4f6633bb6","first_seen":"2026-06-08T12:55:49.061912Z","last_seen":"2026-09-07T02:20:52.882786Z","times_seen":3761,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":2,"connect":1,"send":0,"wait":10,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"formento1932.it/wp-content/plugins/flamingo/includes/temp/css/mail/css/mail/reply26/7dz5q0550s88dchde844051511des1dd8e1de80d07ee/mahnung/26/resources/img/logo-20200819.svg","fqdn":"formento1932.it","domain":"formento1932.it","tld":"it"},"ip":{"addr":"213.212.143.46","port":443,"asn":12779,"as":"IT.Gate S.p.A.","country":"Italy","country_code":"IT"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://formento1932.it/wp-content/plugins/flamingo/includes/temp/css/mail/css/mail/reply26/7dz5q0550s88dchde844051511des1dd8e1de80d07ee/mahnung/26/","date":"2026-09-05T01:15:16.251Z","timestamp":1788570916251,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.formento1932.it","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 14:46:31 GMT","end":"Mon, 16 Nov 2026 14:46:30 GMT"},"fingerprint":{"sha1":"A8:8F:19:AC:B8:DF:2C:1D:98:23:38:58:83:56:3E:0F:09:D7:FC:53","sha256":"0E:08:28:85:E2:06:70:B2:AA:4F:84:3F:3A:0F:6F:A3:57:10:D2:15:39:30:57:0A:F8:D6:9B:B5:B4:F3:4F:F7"}}},"request":{"raw":"GET /wp-content/plugins/flamingo/includes/temp/css/mail/css/mail/reply26/7dz5q0550s88dchde844051511des1dd8e1de80d07ee/mahnung/26/resources/img/logo-20200819.svg HTTP/1.1\r\nHost: formento1932.it\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 05 Sep 2026 01:15:16 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 7374\r\nlast-modified: Thu, 23 May 2024 01:30:22 GMT\r\netag: \"664e9c2e-1cce\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer\r\npermissions-policy: geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(*),magnetometer=(),gyroscope=(),fullscreen=(*),payment=()\r\ncross-origin-opener-policy: same-origin-allow-popups\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7374,"size_decoded":7981,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"795242580bfa3135028bd0750fdc1654","sha1":"2c344b6662e62ddbdba49f635e1c33a827fe75d4","sha256":"deeee170c3759a6ed35c0c05c5b935d0e7638f1c0c5677166918ecff6edb1909","sha512":"09cf57ea5f0fc9778dce5578718e2b2db960d145bec1afce58b6ba0b1670ff4e31b91b3cb69eab0004e72e193b4d0f374a13f5c8d96a79902a96f5c72a65054d","ssdeep":"192:1w1xe9KNd07c0Zsg2/ZX0dRzVO0Zfv4emqb9Z+siAtz6oyQg/S:uc9y07/Zsge0dRzzZYebb9Z+sh9yQp","tlshash":"25e198f5aa1c96bc24579a58cf32d664670fa0fe73aa83f24c1ed7b06443d94d943c28","first_seen":"2023-05-09T01:15:49Z","last_seen":"2026-09-05T01:15:56.670987Z","times_seen":2378,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":72,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - SwissPass","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with SwissPass phishing","tags":["swisspass","phishing","transport"],"meta":null}]}},{"url":{"schema":"https","addr":"cdn.cookielaw.org/consent/e91f4b90-f9aa-4ace-891b-96dd07595d9f-test/e91f4b90-f9aa-4ace-891b-96dd07595d9f-test.json","fqdn":"cdn.cookielaw.org","domain":"cookielaw.org","tld":"org"},"ip":{"addr":"104.18.87.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://formento1932.it/wp-content/plugins/flamingo/includes/temp/css/mail/css/mail/reply26/7dz5q0550s88dchde844051511des1dd8e1de80d07ee/mahnung/26/","date":"2026-09-05T01:15:16.365Z","timestamp":1788570916365,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cookielaw.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Jul 2026 22:47:21 GMT","end":"Tue, 20 Oct 2026 23:47:08 GMT"},"fingerprint":{"sha1":"BE:65:35:7C:E3:8D:B8:0C:7D:40:51:C7:4B:EE:56:FE:FD:2D:ED:91","sha256":"D6:A8:FD:24:40:A2:7D:0B:B5:73:08:9C:B2:AC:6E:1F:84:CC:D4:09:7B:BA:22:E8:A5:38:A4:10:29:65:88:5C"}}},"request":{"raw":"GET /consent/e91f4b90-f9aa-4ace-891b-96dd07595d9f-test/e91f4b90-f9aa-4ace-891b-96dd07595d9f-test.json HTTP/1.1\r\nHost: cdn.cookielaw.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://formento1932.it\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 05 Sep 2026 01:15:16 GMT\r\ncontent-type: application/json\r\ncf-ray: a36161c35cf4568a-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\ncontent-encoding: gzip\r\netag: 0x8DF0A6604B9C356\r\nexpires: Sun, 06 Sep 2026 01:15:16 GMT\r\nlast-modified: Fri, 04 Sep 2026 09:22:19 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,ETag,Last-Modified,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding, X-OneTrust-IsBot\r\ncontent-md5: uDsouID1WBCbZjgz06uI3w==\r\ncross-origin-resource-policy: cross-origin, cross-origin\r\nx-content-type-options: nosniff\r\nx-onetrust-isbot: false\r\nx-ms-blob-type: BlockBlob\r\nx-ms-lease-status: unlocked\r\nx-ms-request-id: 883abd99-a01e-0082-75ba-3c32da000000\r\nx-ms-version: 2009-09-19\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5136,"size_decoded":2908,"mime_type":"application/json","magic":"JSON text data","md5":"f1484c2a5829fa252a263ebc0052a9df","sha1":"cdec80ccd26d7bd018579593241889966e942af8","sha256":"7d83dde470bf8f0d7fdb67f897c1bd95e0241e9a1c11bbad9bc6606122fc8e75","sha512":"3b4704b656a4479454b1c42adc5a4441a7b9523da74043e11320409108cdbd4a2d63e75c896d06db53b9629dadd104ae44b9e7c5201ff5423aedad3e361570d2","ssdeep":"96:Opyf40wyB0/Dv+OimCVKxYa6Ay+vajMjajEjFoPyO2GWPz8QDL:ymQDmOimT6v+ve8e0IDQ3","tlshash":"5fb1442ab64c507dc799c3c8d419fe0a4fec693211c57814e84f5c6c1eabbf32869a67","first_seen":"2026-09-05T01:15:56.671549Z","last_seen":"2026-09-05T01:15:56.671549Z","times_seen":1,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":0,"dns":0,"connect":1,"send":0,"wait":59,"receive":0,"ssl":8},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"formento1932.it/wp-content/plugins/flamingo/includes/temp/css/mail/css/mail/reply26/7dz5q0550s88dchde844051511des1dd8e1de80d07ee/mahnung/26/resources/fonts/icomoon/icomoon.woff2?7m5yri","fqdn":"formento1932.it","domain":"formento1932.it","tld":"it"},"ip":{"addr":"213.212.143.46","port":443,"asn":12779,"as":"IT.Gate S.p.A.","country":"Italy","country_code":"IT"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://formento1932.it/wp-content/plugins/flamingo/includes/temp/css/mail/css/mail/reply26/7dz5q0550s88dchde844051511des1dd8e1de80d07ee/mahnung/26/","date":"2026-09-05T01:15:16.384Z","timestamp":1788570916384,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.formento1932.it","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 14:46:31 GMT","end":"Mon, 16 Nov 2026 14:46:30 GMT"},"fingerprint":{"sha1":"A8:8F:19:AC:B8:DF:2C:1D:98:23:38:58:83:56:3E:0F:09:D7:FC:53","sha256":"0E:08:28:85:E2:06:70:B2:AA:4F:84:3F:3A:0F:6F:A3:57:10:D2:15:39:30:57:0A:F8:D6:9B:B5:B4:F3:4F:F7"}}},"request":{"raw":"GET /wp-content/plugins/flamingo/includes/temp/css/mail/css/mail/reply26/7dz5q0550s88dchde844051511des1dd8e1de80d07ee/mahnung/26/resources/fonts/icomoon/icomoon.woff2?7m5yri HTTP/1.1\r\nHost: formento1932.it\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://formento1932.it/wp-content/plugins/flamingo/includes/temp/css/mail/css/mail/reply26/7dz5q0550s88dchde844051511des1dd8e1de80d07ee/mahnung/26/resources/css/normal/app/sso.min-20200819.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Sat, 05 Sep 2026 01:15:16 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\ncache-control: public, no-transform\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":316,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-09-07T02:13:17.077066Z","times_seen":557312,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"formento1932.it/idp/co-branding?resource=co-branding\u0026lang=de\u0026provider=","fqdn":"formento1932.it","domain":"formento1932.it","tld":"it"},"ip":{"addr":"213.212.143.46","port":443,"asn":12779,"as":"IT.Gate S.p.A.","country":"Italy","country_code":"IT"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://formento1932.it/wp-content/plugins/flamingo/includes/temp/css/mail/css/mail/reply26/7dz5q0550s88dchde844051511des1dd8e1de80d07ee/mahnung/26/","date":"2026-09-05T01:15:16.458Z","timestamp":1788570916458,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.formento1932.it","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 14:46:31 GMT","end":"Mon, 16 Nov 2026 14:46:30 GMT"},"fingerprint":{"sha1":"A8:8F:19:AC:B8:DF:2C:1D:98:23:38:58:83:56:3E:0F:09:D7:FC:53","sha256":"0E:08:28:85:E2:06:70:B2:AA:4F:84:3F:3A:0F:6F:A3:57:10:D2:15:39:30:57:0A:F8:D6:9B:B5:B4:F3:4F:F7"}}},"request":{"raw":"GET /idp/co-branding?resource=co-branding\u0026lang=de\u0026provider= HTTP/1.1\r\nHost: formento1932.it\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\nserver: nginx\r\ndate: Sat, 05 Sep 2026 01:15:16 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://www.formento1932.it/idp/co-branding?resource=co-branding\u0026lang=de\u0026provider=\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\nx-redirect-by: WordPress\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer\r\npermissions-policy: geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(*),magnetometer=(),gyroscope=(),fullscreen=(*),payment=()\r\ncross-origin-opener-policy: same-origin-allow-popups\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-07T02:14:22.998048Z","times_seen":18321048,"resource_available":true,"data":null}},"time_used":143,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":143,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.cookielaw.org/consent/e91f4b90-f9aa-4ace-891b-96dd07595d9f-test/ba92dbb5-02d7-443f-8481-b67e4427328b/de-ch.json","fqdn":"cdn.cookielaw.org","domain":"cookielaw.org","tld":"org"},"ip":{"addr":"104.18.87.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://formento1932.it/wp-content/plugins/flamingo/includes/temp/css/mail/css/mail/reply26/7dz5q0550s88dchde844051511des1dd8e1de80d07ee/mahnung/26/","date":"2026-09-05T01:15:16.625Z","timestamp":1788570916625,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cookielaw.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Jul 2026 22:47:21 GMT","end":"Tue, 20 Oct 2026 23:47:08 GMT"},"fingerprint":{"sha1":"BE:65:35:7C:E3:8D:B8:0C:7D:40:51:C7:4B:EE:56:FE:FD:2D:ED:91","sha256":"D6:A8:FD:24:40:A2:7D:0B:B5:73:08:9C:B2:AC:6E:1F:84:CC:D4:09:7B:BA:22:E8:A5:38:A4:10:29:65:88:5C"}}},"request":{"raw":"GET /consent/e91f4b90-f9aa-4ace-891b-96dd07595d9f-test/ba92dbb5-02d7-443f-8481-b67e4427328b/de-ch.json HTTP/1.1\r\nHost: cdn.cookielaw.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://formento1932.it\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 05 Sep 2026 01:15:16 GMT\r\ncontent-type: application/json\r\ncf-ray: a36161c4fdbc568a-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\ncontent-encoding: gzip\r\netag: 0x8DF0A660B50C881\r\nexpires: Sun, 06 Sep 2026 01:15:16 GMT\r\nlast-modified: Fri, 04 Sep 2026 09:22:30 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,ETag,Last-Modified,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding, X-OneTrust-IsBot\r\ncontent-md5: RLtHm2RddRZ4kUSdy5u8qA==\r\ncross-origin-resource-policy: cross-origin, cross-origin\r\nx-content-type-options: nosniff\r\nx-onetrust-isbot: false\r\nx-ms-blob-type: BlockBlob\r\nx-ms-lease-status: unlocked\r\nx-ms-request-id: c1c3c9c0-301e-0040-11ba-3cba64000000\r\nx-ms-version: 2009-09-19\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59132,"size_decoded":17862,"mime_type":"application/json","magic":"JSON text data","md5":"8ddd6f3349377ef66b2c3868383ab8ad","sha1":"80efc57718f89ec471c646085b295ae1a59cd60e","sha256":"991e8c10079b97fbbed9cb9d64275553df7607895f4122a33986280d3f65df1e","sha512":"1a916d9baa8c4a601b5e507eb04aa02da58e3015eb80cb2900a3806469175c2c232665ade988390f52a7154a9a4923612dd6a36fd565d902df443fcf6c3b9147","ssdeep":"768:fY/00yY4rWUTq4fpqQ9qQvX4z8qnEhDjM3AycJlBvp3YVvkJ6CuFQIO4BwHPrbbw:fc0+STVf5hXsSlBvaVvkIC6OIwRXC","tlshash":"e6434c16285624fc4b4b43242079bf9bb73c5256f2cd8c2cd78d8d324093af665bb29b","first_seen":"2026-09-05T01:15:56.673454Z","last_seen":"2026-09-05T01:15:56.673454Z","times_seen":1,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"formento1932.it/wp-content/plugins/flamingo/includes/temp/css/mail/css/mail/reply26/7dz5q0550s88dchde844051511des1dd8e1de80d07ee/mahnung/26","fqdn":"formento1932.it","domain":"formento1932.it","tld":"it"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-05T01:15:12.661Z","timestamp":1788570912661,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/plugins/flamingo/includes/temp/css/mail/css/mail/reply26/7dz5q0550s88dchde844051511des1dd8e1de80d07ee/mahnung/26 HTTP/1.1\r\nHost: formento1932.it\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-07T02:14:22.998048Z","times_seen":18321048,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"formento1932.it/wp-content/plugins/flamingo/includes/temp/css/mail/css/mail/reply26/7dz5q0550s88dchde844051511des1dd8e1de80d07ee/mahnung/26/resources/img/loader-20200819.png","fqdn":"formento1932.it","domain":"formento1932.it","tld":"it"},"ip":{"addr":"213.212.143.46","port":443,"asn":12779,"as":"IT.Gate S.p.A.","country":"Italy","country_code":"IT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://formento1932.it/wp-content/plugins/flamingo/includes/temp/css/mail/css/mail/reply26/7dz5q0550s88dchde844051511des1dd8e1de80d07ee/mahnung/26/","date":"2026-09-05T01:15:16.253Z","timestamp":1788570916253,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.formento1932.it","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 14:46:31 GMT","end":"Mon, 16 Nov 2026 14:46:30 GMT"},"fingerprint":{"sha1":"A8:8F:19:AC:B8:DF:2C:1D:98:23:38:58:83:56:3E:0F:09:D7:FC:53","sha256":"0E:08:28:85:E2:06:70:B2:AA:4F:84:3F:3A:0F:6F:A3:57:10:D2:15:39:30:57:0A:F8:D6:9B:B5:B4:F3:4F:F7"}}},"request":{"raw":"GET /wp-content/plugins/flamingo/includes/temp/css/mail/css/mail/reply26/7dz5q0550s88dchde844051511des1dd8e1de80d07ee/mahnung/26/resources/img/loader-20200819.png HTTP/1.1\r\nHost: formento1932.it\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 05 Sep 2026 01:15:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 272\r\nlast-modified: Thu, 23 May 2024 01:30:22 GMT\r\netag: \"664e9c2e-110\"\r\nexpires: Sun, 05 Sep 2027 01:15:16 GMT\r\nvary: Accept\r\ncache-control: max-age=31536000, private\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":272,"size_decoded":591,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 4-bit colormap, non-interlaced","md5":"1a7ca896940219da5393e26600e0ee7b","sha1":"558e1d3bad16b2faa7527f1f3133e21bf89cd507","sha256":"f766c7457c6ec463eaa85778aa47261344f1772e0b7cf1987ad212f889f472f5","sha512":"29b51656a862e758fab0bad8b5cd18d68ed7f57a6fdd42b188d85dd1705234ed9956b15276baaa031d6f20d5049317d86bd13752aea03739183b9461b8d33863","ssdeep":"","tlshash":"a4d097c3c8be5c2aad60423393ca88278a232da010043243be36f829c73212889302d1","first_seen":"2023-05-09T01:15:49Z","last_seen":"2026-09-05T01:15:56.674556Z","times_seen":1754,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":72,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - SwissPass","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with SwissPass phishing","tags":["swisspass","phishing","transport"],"meta":null}]}},{"url":{"schema":"https","addr":"www.formento1932.it/wp-content/plugins/flamingo/includes/temp/css/mail/css/mail/reply26/7dz5q0550s88dchde844051511des1dd8e1de80d07ee/mahnung/26/resources/fonts/icomoon/icomoon.ttf?7m5yri","fqdn":"www.formento1932.it","domain":"formento1932.it","tld":"it"},"ip":{"addr":"213.212.143.46","port":443,"asn":12779,"as":"IT.Gate S.p.A.","country":"Italy","country_code":"IT"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://formento1932.it/wp-content/plugins/flamingo/includes/temp/css/mail/css/mail/reply26/7dz5q0550s88dchde844051511des1dd8e1de80d07ee/mahnung/26/","date":"2026-09-05T01:15:16.608Z","timestamp":1788570916608,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.formento1932.it","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 14:46:31 GMT","end":"Mon, 16 Nov 2026 14:46:30 GMT"},"fingerprint":{"sha1":"A8:8F:19:AC:B8:DF:2C:1D:98:23:38:58:83:56:3E:0F:09:D7:FC:53","sha256":"0E:08:28:85:E2:06:70:B2:AA:4F:84:3F:3A:0F:6F:A3:57:10:D2:15:39:30:57:0A:F8:D6:9B:B5:B4:F3:4F:F7"}}},"request":{"raw":"GET /wp-content/plugins/flamingo/includes/temp/css/mail/css/mail/reply26/7dz5q0550s88dchde844051511des1dd8e1de80d07ee/mahnung/26/resources/fonts/icomoon/icomoon.ttf?7m5yri HTTP/1.1\r\nHost: www.formento1932.it\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://formento1932.it\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Sat, 05 Sep 2026 01:15:16 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\nlink: \u003chttps://www.formento1932.it/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Contact Form 7:6.1.6","description":"Contact Form 7 is an WordPress plugin which can manage multiple contact forms. The form supports Ajax-powered submitting, CAPTCHA, Akismet spam filtering.","website":"https://contactform7.com","common_platform_enumeration":"","icon":"Contact Form 7.png","categories":["WordPress plugins","Form builders"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress:6.8.8","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Onsen UI","description":"Onsen UI is an open-source HTML5 hybrid app framework offering mobile UI components for PhoneGap and Cordova development.","website":"https://onsen.io","common_platform_enumeration":"","icon":"OnsenUI.svg","categories":["Mobile frameworks"]},{"name":"WooCommerce:3.0.7","description":"WooCommerce is an open-source ecommerce plugin for WordPress.","website":"https://woocommerce.com","common_platform_enumeration":"","icon":"WooCommerce.svg","categories":["Ecommerce","WordPress plugins"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":94484,"size_decoded":19900,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (21571)","md5":"31e1ae370627367bf239076f1a32e382","sha1":"83c116144f715571cb94a1028c921068e7b0282f","sha256":"bb82b214eb378913762e48d7f4621361ed2db937e5e23eef2546fb524a21376e","sha512":"65eff89c589ef41caa79e3569473a3efe358d6ca8efd887f11a1196d48784c7f6f04efbff466a32c202168598a793415c15dd7ed8efcb77f58f7caede4e7ec14","ssdeep":"1536:SLUapJUyyD9bMMCXMvESkT6mXFH802gMSVNxYrPmC2e6wSRre5TpksHqF1aKg86b:SLzD7MMxYrPm/e6wS5e5TpFHu1aKj6vz","tlshash":"b293d7b2941c60365a6bd6d8e1e1e7cdb17be230cb460ab4f7f5955c87cde9018a330a","first_seen":"2026-09-05T01:15:56.675667Z","last_seen":"2026-09-05T01:15:56.675667Z","times_seen":1,"resource_available":false,"data":null}},"time_used":372,"timings":{"blocked":0,"dns":2,"connect":48,"send":0,"wait":265,"receive":0,"ssl":56},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.app.sbb.ch/fonts/v1_6_subset/SBBWeb-Roman.woff2","fqdn":"cdn.app.sbb.ch","domain":"sbb.ch","tld":"ch"},"ip":{"addr":"3.123.233.179","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://formento1932.it/wp-content/plugins/flamingo/includes/temp/css/mail/css/mail/reply26/7dz5q0550s88dchde844051511des1dd8e1de80d07ee/mahnung/26/","date":"2026-09-05T01:15:16.880Z","timestamp":1788570916880,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.app.sbb.ch","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sat, 16 May 2026 00:00:00 GMT","end":"Sun, 29 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"58:48:EC:2D:9E:BF:09:51:F2:03:47:36:3A:2C:29:C7:72:36:FA:B7","sha256":"E3:B6:7F:F1:64:99:E9:B3:D5:7A:D2:1A:B7:1A:F6:66:1B:2D:1A:F8:83:99:8E:34:D5:B9:81:98:84:62:EB:0A"}}},"request":{"raw":"GET /fonts/v1_6_subset/SBBWeb-Roman.woff2 HTTP/1.1\r\nHost: cdn.app.sbb.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://formento1932.it\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://formento1932.it/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 05 Sep 2026 01:15:16 GMT\r\ncontent-type: application/font-woff2\r\ncontent-length: 14152\r\nserver: nginx/1.31.4\r\nlast-modified: Fri, 27 Jun 2025 13:56:18 GMT\r\nvary: Accept-Encoding\r\netag: \"685ea302-3748\"\r\nexpires: Sun, 05 Sep 2027 01:15:16 GMT\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nstrict-transport-security: max-age=31536000\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Mx-ReqToken,X-Requested-With\r\ncache-control: max-age=31536000, public, private\r\naccept-ranges: bytes\r\nset-cookie: 9527f1a32486d650b0687919ffd41c2b=21ca8d0461e9484e38b9a694053c5f09; path=/; HttpOnly; Secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"9527f1a32486d650b0687919ffd41c2b","value":"21ca8d0461e9484e38b9a694053c5f09","quoted":false,"path":"/","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"9527f1a32486d650b0687919ffd41c2b=21ca8d0461e9484e38b9a694053c5f09; path=/; HttpOnly; Secure; SameSite=None"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.31.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14152,"size_decoded":15028,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14152, version 1.0","md5":"82e55d1865d40988204fa60522628f4b","sha1":"e9d74fb23204a62c520d19b8fae3f0193539cdfb","sha256":"966a89b8080879ba41c6b9f15c5efb58182c33a0d2d1e08748beb554b28b4997","sha512":"560f0dd619c0d077e763bda61e5d75317eb77bece73ef7fee4b47952fc42efa6e04e2bde8b1a578850dbe11f6cf5c1e9843751cd58708b9b23d3c5f1ffe05689","ssdeep":"384:RsNCc7msIdEuqeDGlzVcxs3K+voFVbmzjBl7STQMxap/CVJ3sCFhwvtG:giskEuqe8Vcx+K+QFUPB0TQMkRCT3sCT","tlshash":"4f52d18f9cb3257be1c27774b9b37ad87adf669e3143c28883273bd9458101136688e1","first_seen":"2023-04-05T17:56:10Z","last_seen":"2026-09-05T01:15:56.67769Z","times_seen":1350,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - SwissPass","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with SwissPass phishing","tags":["swisspass","phishing","transport"],"meta":null}]}},{"url":{"schema":"https","addr":"formento1932.it/wp-content/plugins/flamingo/includes/temp/css/mail/css/mail/reply26/7dz5q0550s88dchde844051511des1dd8e1de80d07ee/mahnung/26/resources/js/vendor/vendor.min-20200819.js","fqdn":"formento1932.it","domain":"formento1932.it","tld":"it"},"ip":{"addr":"213.212.143.46","port":443,"asn":12779,"as":"IT.Gate S.p.A.","country":"Italy","country_code":"IT"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://formento1932.it/wp-content/plugins/flamingo/includes/temp/css/mail/css/mail/reply26/7dz5q0550s88dchde844051511des1dd8e1de80d07ee/mahnung/26/","date":"2026-09-05T01:15:16.243Z","timestamp":1788570916243,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.formento1932.it","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 14:46:31 GMT","end":"Mon, 16 Nov 2026 14:46:30 GMT"},"fingerprint":{"sha1":"A8:8F:19:AC:B8:DF:2C:1D:98:23:38:58:83:56:3E:0F:09:D7:FC:53","sha256":"0E:08:28:85:E2:06:70:B2:AA:4F:84:3F:3A:0F:6F:A3:57:10:D2:15:39:30:57:0A:F8:D6:9B:B5:B4:F3:4F:F7"}}},"request":{"raw":"GET /wp-content/plugins/flamingo/includes/temp/css/mail/css/mail/reply26/7dz5q0550s88dchde844051511des1dd8e1de80d07ee/mahnung/26/resources/js/vendor/vendor.min-20200819.js HTTP/1.1\r\nHost: formento1932.it\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 05 Sep 2026 01:15:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 23 May 2024 01:30:22 GMT\r\netag: W/\"664e9c2e-2c719\"\r\nexpires: Mon, 05 Oct 2026 01:15:16 GMT\r\ncache-control: max-age=2592000, public, no-transform\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":182041,"size_decoded":54913,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (663), with CRLF line terminators","md5":"c8ae9313d64c63be74208ff6564a9c83","sha1":"2d76425f12d558c47f76e9602665b7001c51630a","sha256":"f5e694ba6b63a657fae3f561dc0e8ae0247534616d9e844005d11d8ba2535338","sha512":"3f262f556fc794d8e779c2f43d8a6fb8468ea1e79e0369aa58399bf41c5806d0badb0ad69d15f7c021bf256b8b6a74a316d5808e5db4ee01c6840fb1f4a353e5","ssdeep":"1536:pSgDCs3fXCLcMpW+3moWgWngVaSBNdAj8Seh8C0rjLOYnQkTWqBC367JIAYQtokX:pSV3moWJ3pWOrsUk367JIpSi33n1O","tlshash":"d304288d7562313142bf21a6107f110b72379fbeb4058558b868c9d86ebec45227bf7e","first_seen":"2023-11-18T18:24:47Z","last_seen":"2026-09-05T01:15:56.678504Z","times_seen":474,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - SwissPass","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with SwissPass phishing","tags":["swisspass","phishing","transport"],"meta":null}]}},{"url":{"schema":"https","addr":"formento1932.it/wp-content/plugins/flamingo/includes/temp/css/mail/css/mail/reply26/7dz5q0550s88dchde844051511des1dd8e1de80d07ee/mahnung/26/resources/img/logo_text_de-20200819.svg","fqdn":"formento1932.it","domain":"formento1932.it","tld":"it"},"ip":{"addr":"213.212.143.46","port":443,"asn":12779,"as":"IT.Gate S.p.A.","country":"Italy","country_code":"IT"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://formento1932.it/wp-content/plugins/flamingo/includes/temp/css/mail/css/mail/reply26/7dz5q0550s88dchde844051511des1dd8e1de80d07ee/mahnung/26/","date":"2026-09-05T01:15:16.249Z","timestamp":1788570916249,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.formento1932.it","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 14:46:31 GMT","end":"Mon, 16 Nov 2026 14:46:30 GMT"},"fingerprint":{"sha1":"A8:8F:19:AC:B8:DF:2C:1D:98:23:38:58:83:56:3E:0F:09:D7:FC:53","sha256":"0E:08:28:85:E2:06:70:B2:AA:4F:84:3F:3A:0F:6F:A3:57:10:D2:15:39:30:57:0A:F8:D6:9B:B5:B4:F3:4F:F7"}}},"request":{"raw":"GET /wp-content/plugins/flamingo/includes/temp/css/mail/css/mail/reply26/7dz5q0550s88dchde844051511des1dd8e1de80d07ee/mahnung/26/resources/img/logo_text_de-20200819.svg HTTP/1.1\r\nHost: formento1932.it\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 05 Sep 2026 01:15:16 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 139971\r\nlast-modified: Thu, 23 May 2024 01:30:22 GMT\r\netag: \"664e9c2e-222c3\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer\r\npermissions-policy: geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(*),magnetometer=(),gyroscope=(),fullscreen=(*),payment=()\r\ncross-origin-opener-policy: same-origin-allow-popups\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":139971,"size_decoded":140581,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"512410d9227bb0c2481e175dce0eda72","sha1":"1deb5d9f09592101e632a8351865d54b1d6a27f7","sha256":"c337d42ed7979c6be0282900bd957dd9d112a430dc7761463d655eb8f0d9bc07","sha512":"855feb227bb9448de654bf5c616a2dbf71c4f97550a00a30372cb0ae2f7b0bd70b7a4430d84c8386934b7064d8bc3f66e926b5b2dd9920812af96c3469743a86","ssdeep":"1536:mYtjakc0aZDT/Zs4sC0jfjR1YG+s2Ltt99ac0eW53zzVCoYs2rhrXzgEA6SJB5LQ:j5E2tvYkUv1","tlshash":"37d3a716436884e8b59f45f13cd41d0a2a5a98e723125919faae8c31dff3ef3d382b45","first_seen":"2023-05-09T01:15:49Z","last_seen":"2026-09-05T09:09:51.495657Z","times_seen":2260,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":74,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - SwissPass","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with SwissPass phishing","tags":["swisspass","phishing","transport"],"meta":null}]}},{"url":{"schema":"https","addr":"www.formento1932.it/idp/co-branding?resource=co-branding\u0026lang=de\u0026provider=","fqdn":"www.formento1932.it","domain":"formento1932.it","tld":"it"},"ip":{"addr":"213.212.143.46","port":443,"asn":12779,"as":"IT.Gate S.p.A.","country":"Italy","country_code":"IT"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://formento1932.it/wp-content/plugins/flamingo/includes/temp/css/mail/css/mail/reply26/7dz5q0550s88dchde844051511des1dd8e1de80d07ee/mahnung/26/","date":"2026-09-05T01:15:16.607Z","timestamp":1788570916607,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.formento1932.it","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 14:46:31 GMT","end":"Mon, 16 Nov 2026 14:46:30 GMT"},"fingerprint":{"sha1":"A8:8F:19:AC:B8:DF:2C:1D:98:23:38:58:83:56:3E:0F:09:D7:FC:53","sha256":"0E:08:28:85:E2:06:70:B2:AA:4F:84:3F:3A:0F:6F:A3:57:10:D2:15:39:30:57:0A:F8:D6:9B:B5:B4:F3:4F:F7"}}},"request":{"raw":"OPTIONS /idp/co-branding?resource=co-branding\u0026lang=de\u0026provider= HTTP/1.1\r\nHost: www.formento1932.it\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: x-requested-with\r\nOrigin: https://formento1932.it\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Sat, 05 Sep 2026 01:15:16 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\nlink: \u003chttps://www.formento1932.it/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":428,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-07T02:14:22.998048Z","times_seen":18321048,"resource_available":true,"data":null}},"time_used":378,"timings":{"blocked":0,"dns":4,"connect":48,"send":0,"wait":263,"receive":3,"ssl":57},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.cookielaw.org/scripttemplates/202608.1.0/assets/otCommonStyles.css","fqdn":"cdn.cookielaw.org","domain":"cookielaw.org","tld":"org"},"ip":{"addr":"104.18.87.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://formento1932.it/wp-content/plugins/flamingo/includes/temp/css/mail/css/mail/reply26/7dz5q0550s88dchde844051511des1dd8e1de80d07ee/mahnung/26/","date":"2026-09-05T01:15:16.765Z","timestamp":1788570916765,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cookielaw.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Jul 2026 22:47:21 GMT","end":"Tue, 20 Oct 2026 23:47:08 GMT"},"fingerprint":{"sha1":"BE:65:35:7C:E3:8D:B8:0C:7D:40:51:C7:4B:EE:56:FE:FD:2D:ED:91","sha256":"D6:A8:FD:24:40:A2:7D:0B:B5:73:08:9C:B2:AC:6E:1F:84:CC:D4:09:7B:BA:22:E8:A5:38:A4:10:29:65:88:5C"}}},"request":{"raw":"GET /scripttemplates/202608.1.0/assets/otCommonStyles.css HTTP/1.1\r\nHost: cdn.cookielaw.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://formento1932.it\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 05 Sep 2026 01:15:16 GMT\r\ncontent-type: text/css\r\ncontent-md5: DRei3CQZYO67x6npPam1TQ==\r\nlast-modified: Tue, 18 Aug 2026 07:37:29 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nx-ms-request-id: c9b6e410-901e-0009-65ba-3c8904000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,ETag,Last-Modified,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\ncross-origin-resource-policy: cross-origin\r\ncache-control: max-age=86400\r\ncf-cache-status: HIT\r\ncontent-encoding: gzip\r\ncf-ray: a36161c5ce23568a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27926,"size_decoded":5388,"mime_type":"text/css","magic":"ASCII text, with very long lines (27926), with no line terminators","md5":"0d17a2dc241960eebbc7a9e93da9b54d","sha1":"6eeb683a100bc6ff334efb82d8408861e68836dd","sha256":"e70d0c7dcc897292d8254bdfff1b999bd53a98f6ecbfbd5b18736002a2519668","sha512":"bb55b77447614ed4a1f234d53aa5c2d09734a9e20ace6fde564535a295029f4ed075a937d156f958c72305ddad51f4c08d74c7d31dab3d0343d0aad066da1658","ssdeep":"384:3/8CQ/GI09YzbHDouelCZ74jlIhHLnwGfg4xqsQ4PNE:VYnp4N","tlshash":"35c2559b38512b1ae6d7c71d952139827d11aceffd739ceee009a3784adc3e24c1464a","first_seen":"2026-07-08T00:00:00.806234Z","last_seen":"2026-09-06T23:35:57.406325Z","times_seen":2471,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"formento1932.it/wp-content/plugins/flamingo/includes/temp/css/mail/css/mail/reply26/7dz5q0550s88dchde844051511des1dd8e1de80d07ee/mahnung/26/resources/fonts/icomoon/icomoon.woff?7m5yri","fqdn":"formento1932.it","domain":"formento1932.it","tld":"it"},"ip":{"addr":"213.212.143.46","port":443,"asn":12779,"as":"IT.Gate S.p.A.","country":"Italy","country_code":"IT"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://formento1932.it/wp-content/plugins/flamingo/includes/temp/css/mail/css/mail/reply26/7dz5q0550s88dchde844051511des1dd8e1de80d07ee/mahnung/26/","date":"2026-09-05T01:15:16.991Z","timestamp":1788570916991,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.formento1932.it","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 14:46:31 GMT","end":"Mon, 16 Nov 2026 14:46:30 GMT"},"fingerprint":{"sha1":"A8:8F:19:AC:B8:DF:2C:1D:98:23:38:58:83:56:3E:0F:09:D7:FC:53","sha256":"0E:08:28:85:E2:06:70:B2:AA:4F:84:3F:3A:0F:6F:A3:57:10:D2:15:39:30:57:0A:F8:D6:9B:B5:B4:F3:4F:F7"}}},"request":{"raw":"GET /wp-content/plugins/flamingo/includes/temp/css/mail/css/mail/reply26/7dz5q0550s88dchde844051511des1dd8e1de80d07ee/mahnung/26/resources/fonts/icomoon/icomoon.woff?7m5yri HTTP/1.1\r\nHost: formento1932.it\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://formento1932.it/wp-content/plugins/flamingo/includes/temp/css/mail/css/mail/reply26/7dz5q0550s88dchde844051511des1dd8e1de80d07ee/mahnung/26/resources/css/normal/app/sso.min-20200819.css\r\nCookie: OptanonConsent=isGpcEnabled=0\u0026datestamp=Sat+Sep+05+2026+01%3A15%3A16+GMT%2B0000+(Coordinated+Universal+Time)\u0026version=202608.1.0\u0026browserGpcFlag=1\u0026isDntEnabled=0\u0026isIABGlobal=false\u0026hosts=\u0026consentId=9c8502b4-95e1-4dc5-8f6c-c57d3347868b\u0026interactionCount=0\u0026isAnonUser=1\u0026prevHadToken=0\u0026landingPath=https%3A%2F%2Fformento1932.it%2Fwp-content%2Fplugins%2Fflamingo%2Fincludes%2Ftemp%2Fcss%2Fmail%2Fcss%2Fmail%2Freply26%2F7dz5q0550s88dchde844051511des1dd8e1de80d07ee%2Fmahnung%2F26%2F\u0026groups=C0001%3A1%2CC0002%3A0\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Sat, 05 Sep 2026 01:15:17 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\ncache-control: public, no-transform\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":316,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-09-07T02:13:17.077066Z","times_seen":557312,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"formento1932.it/wp-content/plugins/flamingo/includes/temp/css/mail/css/mail/reply26/7dz5q0550s88dchde844051511des1dd8e1de80d07ee/mahnung/26/resources/img/favicon.ico?v=20140709-1126","fqdn":"formento1932.it","domain":"formento1932.it","tld":"it"},"ip":{"addr":"213.212.143.46","port":443,"asn":12779,"as":"IT.Gate S.p.A.","country":"Italy","country_code":"IT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://formento1932.it/wp-content/plugins/flamingo/includes/temp/css/mail/css/mail/reply26/7dz5q0550s88dchde844051511des1dd8e1de80d07ee/mahnung/26/","date":"2026-09-05T01:15:17.038Z","timestamp":1788570917038,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.formento1932.it","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 14:46:31 GMT","end":"Mon, 16 Nov 2026 14:46:30 GMT"},"fingerprint":{"sha1":"A8:8F:19:AC:B8:DF:2C:1D:98:23:38:58:83:56:3E:0F:09:D7:FC:53","sha256":"0E:08:28:85:E2:06:70:B2:AA:4F:84:3F:3A:0F:6F:A3:57:10:D2:15:39:30:57:0A:F8:D6:9B:B5:B4:F3:4F:F7"}}},"request":{"raw":"GET /wp-content/plugins/flamingo/includes/temp/css/mail/css/mail/reply26/7dz5q0550s88dchde844051511des1dd8e1de80d07ee/mahnung/26/resources/img/favicon.ico?v=20140709-1126 HTTP/1.1\r\nHost: formento1932.it\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: OptanonConsent=isGpcEnabled=0\u0026datestamp=Sat+Sep+05+2026+01%3A15%3A16+GMT%2B0000+(Coordinated+Universal+Time)\u0026version=202608.1.0\u0026browserGpcFlag=1\u0026isDntEnabled=0\u0026isIABGlobal=false\u0026hosts=\u0026consentId=9c8502b4-95e1-4dc5-8f6c-c57d3347868b\u0026interactionCount=0\u0026isAnonUser=1\u0026prevHadToken=0\u0026landingPath=https%3A%2F%2Fformento1932.it%2Fwp-content%2Fplugins%2Fflamingo%2Fincludes%2Ftemp%2Fcss%2Fmail%2Fcss%2Fmail%2Freply26%2F7dz5q0550s88dchde844051511des1dd8e1de80d07ee%2Fmahnung%2F26%2F\u0026groups=C0001%3A1%2CC0002%3A0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 05 Sep 2026 01:15:17 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 1150\r\nlast-modified: Thu, 23 May 2024 01:30:22 GMT\r\netag: \"664e9c2e-47e\"\r\nexpires: Mon, 05 Oct 2026 01:15:17 GMT\r\ncache-control: max-age=2592000, public, no-transform\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1150,"size_decoded":1471,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel","md5":"6d866d9c4568bf7fc03e597e74ce7e28","sha1":"e1b3d9f0e9cdcb785a94b6c1e1fe651a4ff98dcb","sha256":"7c1925da382279a72f94990d0a1456f78918619f35780ea0905e4ae0db684677","sha512":"7dc58e58fc991e2c9310e22a6761aaa398586082c13fd7863fcadd48e15cef8ed7337dc33d0acc0d0b9b698d4d26abbbe6995fa48d2c9ce1161b2f39fea2a381","ssdeep":"","tlshash":"53215d85ffcbd895e413ed317a81e1862c584d61eab09d8130a1f4ebeb716744c54778","first_seen":"2023-05-05T11:25:27Z","last_seen":"2026-09-05T09:09:59.823009Z","times_seen":2780,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - SwissPass","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with SwissPass phishing","tags":["swisspass","phishing","transport"],"meta":null}]}},{"url":{"schema":"http","addr":"formento1932.it/wp-content/plugins/flamingo/includes/temp/css/mail/css/mail/reply26/7dz5q0550s88dchde844051511des1dd8e1de80d07ee/mahnung/26","fqdn":"formento1932.it","domain":"formento1932.it","tld":"it"},"ip":{"addr":"213.212.143.46","port":80,"asn":12779,"as":"IT.Gate S.p.A.","country":"Italy","country_code":"IT"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-05T01:15:15.793Z","timestamp":1788570915793,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/plugins/flamingo/includes/temp/css/mail/css/mail/reply26/7dz5q0550s88dchde844051511des1dd8e1de80d07ee/mahnung/26 HTTP/1.1\r\nHost: formento1932.it\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nServer: nginx\r\nDate: Sat, 05 Sep 2026 01:15:15 GMT\r\nContent-Type: text/html\r\nContent-Length: 162\r\nConnection: keep-alive\r\nLocation: https://formento1932.it/wp-content/plugins/flamingo/includes/temp/css/mail/css/mail/reply26/7dz5q0550s88dchde844051511des1dd8e1de80d07ee/mahnung/26\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-07T02:14:22.998048Z","times_seen":18321048,"resource_available":true,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":3,"connect":36,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"formento1932.it/wp-content/plugins/flamingo/includes/temp/css/mail/css/mail/reply26/7dz5q0550s88dchde844051511des1dd8e1de80d07ee/mahnung/26","fqdn":"formento1932.it","domain":"formento1932.it","tld":"it"},"ip":{"addr":"213.212.143.46","port":443,"asn":12779,"as":"IT.Gate S.p.A.","country":"Italy","country_code":"IT"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-05T01:15:15.874Z","timestamp":1788570915874,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.formento1932.it","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 14:46:31 GMT","end":"Mon, 16 Nov 2026 14:46:30 GMT"},"fingerprint":{"sha1":"A8:8F:19:AC:B8:DF:2C:1D:98:23:38:58:83:56:3E:0F:09:D7:FC:53","sha256":"0E:08:28:85:E2:06:70:B2:AA:4F:84:3F:3A:0F:6F:A3:57:10:D2:15:39:30:57:0A:F8:D6:9B:B5:B4:F3:4F:F7"}}},"request":{"raw":"GET /wp-content/plugins/flamingo/includes/temp/css/mail/css/mail/reply26/7dz5q0550s88dchde844051511des1dd8e1de80d07ee/mahnung/26 HTTP/1.1\r\nHost: formento1932.it\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\nserver: nginx\r\ndate: Sat, 05 Sep 2026 01:15:15 GMT\r\ncontent-type: text/html\r\ncontent-length: 162\r\nlocation: https://formento1932.it/wp-content/plugins/flamingo/includes/temp/css/mail/css/mail/reply26/7dz5q0550s88dchde844051511des1dd8e1de80d07ee/mahnung/26/\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer\r\npermissions-policy: geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(*),magnetometer=(),gyroscope=(),fullscreen=(*),payment=()\r\ncross-origin-opener-policy: same-origin-allow-popups\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-07T02:14:22.998048Z","times_seen":18321048,"resource_available":true,"data":null}},"time_used":113,"timings":{"blocked":0,"dns":0,"connect":37,"send":0,"wait":36,"receive":0,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.cookielaw.org/logos/static/ot_guard_logo.svg","fqdn":"cdn.cookielaw.org","domain":"cookielaw.org","tld":"org"},"ip":{"addr":"104.18.87.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://formento1932.it/wp-content/plugins/flamingo/includes/temp/css/mail/css/mail/reply26/7dz5q0550s88dchde844051511des1dd8e1de80d07ee/mahnung/26/","date":"2026-09-05T01:15:16.898Z","timestamp":1788570916898,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cookielaw.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Jul 2026 22:47:21 GMT","end":"Tue, 20 Oct 2026 23:47:08 GMT"},"fingerprint":{"sha1":"BE:65:35:7C:E3:8D:B8:0C:7D:40:51:C7:4B:EE:56:FE:FD:2D:ED:91","sha256":"D6:A8:FD:24:40:A2:7D:0B:B5:73:08:9C:B2:AC:6E:1F:84:CC:D4:09:7B:BA:22:E8:A5:38:A4:10:29:65:88:5C"}}},"request":{"raw":"GET /logos/static/ot_guard_logo.svg HTTP/1.1\r\nHost: cdn.cookielaw.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://formento1932.it\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 05 Sep 2026 01:15:16 GMT\r\ncontent-type: image/svg+xml\r\ncontent-md5: tXyZydHjxQshFMbbBT1/8A==\r\nlast-modified: Tue, 01 Sep 2026 09:27:45 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nx-ms-request-id: 4a4dd30e-001e-0103-3aba-3cd6d8000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,ETag,Last-Modified,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\ncross-origin-resource-policy: cross-origin\r\ncache-control: max-age=86400\r\ncf-cache-status: HIT\r\ncontent-encoding: gzip\r\ncf-ray: a36161c69e7a568a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":497,"size_decoded":1150,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b57c99c9d1e3c50b2114c6db053d7ff0","sha1":"ada8abfed92ba8a545bbd9d299d74d5972cc4ae8","sha256":"691dcdb24853a0f5ce4e6597e5713dea66799b57ffe2c2a10f28f98e0b569b19","sha512":"0dab6d06f386d922fb28f70f2590d4f9c361e7f4e5d5e581b98e59aac12b266cba596ffccd87203b4330673ee4ec1d459a1abdfc4b066d243a43b2bf7909f0ee","ssdeep":"","tlshash":"2ef0d4d91906a6adb6822e7cdd3c56e04c2c7ce274dc22c894cce094d4489bc9705855","first_seen":"2023-05-07T20:46:54Z","last_seen":"2026-09-07T02:13:13.611505Z","times_seen":187167,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"formento1932.it/wp-content/plugins/flamingo/includes/temp/css/mail/css/mail/reply26/7dz5q0550s88dchde844051511des1dd8e1de80d07ee/mahnung/26/","fqdn":"formento1932.it","domain":"formento1932.it","tld":"it"},"ip":{"addr":"213.212.143.46","port":443,"asn":12779,"as":"IT.Gate S.p.A.","country":"Italy","country_code":"IT"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-05T01:15:15.992Z","timestamp":1788570915992,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.formento1932.it","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 14:46:31 GMT","end":"Mon, 16 Nov 2026 14:46:30 GMT"},"fingerprint":{"sha1":"A8:8F:19:AC:B8:DF:2C:1D:98:23:38:58:83:56:3E:0F:09:D7:FC:53","sha256":"0E:08:28:85:E2:06:70:B2:AA:4F:84:3F:3A:0F:6F:A3:57:10:D2:15:39:30:57:0A:F8:D6:9B:B5:B4:F3:4F:F7"}}},"request":{"raw":"GET /wp-content/plugins/flamingo/includes/temp/css/mail/css/mail/reply26/7dz5q0550s88dchde844051511des1dd8e1de80d07ee/mahnung/26/ HTTP/1.1\r\nHost: formento1932.it\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 05 Sep 2026 01:15:16 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer\r\npermissions-policy: geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(*),magnetometer=(),gyroscope=(),fullscreen=(*),payment=()\r\ncross-origin-opener-policy: same-origin-allow-popups\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Modernizr","description":"Modernizr is a JavaScript library that detects the features available in a user's browser.","website":"https://modernizr.com","common_platform_enumeration":"","icon":"Modernizr.svg","categories":["JavaScript libraries"]},{"name":"OneTrust","description":"OneTrust is a cloud-based data privacy management compliance platform.","website":"https://www.onetrust.com","common_platform_enumeration":"","icon":"OneTrust.svg","categories":["Cookie compliance"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27168,"size_decoded":6211,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"e02aba4471b70bf6cbc1b6d2a8e394c8","sha1":"27c933d14973340e96764db9f7e51db2c154355c","sha256":"258d5316d101597d17d84f8762b62e2481181fec1bb8b0271b9f6dd5292ceee3","sha512":"79bca926f76727e2774c4b708ee22c63fb4917dcd9a5c3a58a2dc79eb719e4b53983baa3366cd4d7cdd77475c5c0ccc1533f248909de975f979b196770e54e22","ssdeep":"384:ArbxC9z+jL+LnRV+emnRnEt06e/rK1Bxf/gnM:CtwUanRV+emnRnY9ejKbNgM","tlshash":"b5c2b61154f71426206760ee6bfb6f156eb0c103c485cc187aee8b944f95e93da53bac","first_seen":"2026-09-05T01:15:56.683584Z","last_seen":"2026-09-05T01:15:56.683584Z","times_seen":1,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"formento1932.it/wp-content/plugins/flamingo/includes/temp/css/mail/css/mail/reply26/7dz5q0550s88dchde844051511des1dd8e1de80d07ee/mahnung/26/resources/primefaces/jquery/jquery-20200819.js","fqdn":"formento1932.it","domain":"formento1932.it","tld":"it"},"ip":{"addr":"213.212.143.46","port":443,"asn":12779,"as":"IT.Gate S.p.A.","country":"Italy","country_code":"IT"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://formento1932.it/wp-content/plugins/flamingo/includes/temp/css/mail/css/mail/reply26/7dz5q0550s88dchde844051511des1dd8e1de80d07ee/mahnung/26/","date":"2026-09-05T01:15:16.241Z","timestamp":1788570916241,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.formento1932.it","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 14:46:31 GMT","end":"Mon, 16 Nov 2026 14:46:30 GMT"},"fingerprint":{"sha1":"A8:8F:19:AC:B8:DF:2C:1D:98:23:38:58:83:56:3E:0F:09:D7:FC:53","sha256":"0E:08:28:85:E2:06:70:B2:AA:4F:84:3F:3A:0F:6F:A3:57:10:D2:15:39:30:57:0A:F8:D6:9B:B5:B4:F3:4F:F7"}}},"request":{"raw":"GET /wp-content/plugins/flamingo/includes/temp/css/mail/css/mail/reply26/7dz5q0550s88dchde844051511des1dd8e1de80d07ee/mahnung/26/resources/primefaces/jquery/jquery-20200819.js HTTP/1.1\r\nHost: formento1932.it\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 05 Sep 2026 01:15:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 23 May 2024 01:30:22 GMT\r\netag: W/\"664e9c2e-17c58\"\r\nexpires: Mon, 05 Oct 2026 01:15:16 GMT\r\ncache-control: max-age=2592000, public, no-transform\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":97368,"size_decoded":34406,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32060), with CRLF line terminators","md5":"b6c9978c306ef264158551c140a4c475","sha1":"a8316d0f66cc97376d60ae86a47c7efb3b8134ac","sha256":"2b2485b0669a2f73c4846e82eb5a37421358591a8ac8ba21d8149bfb88adcbfb","sha512":"0f69c70c3e54bf7f7fa24eecfd86d07a7b868016c55abb889a0c4a0bee3081fb60098f0f1bd8ba905b6cbb30b50af6c9dbfed70863baece4be2b54bd977d966a","ssdeep":"1536:rYE1JVoiB9JqZdXXe2pD3PgoIK6alrUSTJuFk/zkZ4HWLZoHsrOa99fwkKb7/HpU:q4KZ+23WLZICOaLfwkK7qD1Paca98Hr/","tlshash":"d893e8d9b6d6706287b734a851bf410bb17aa8eab40c4c60f058c8e47e74e9d507bf2d","first_seen":"2023-11-18T18:24:47Z","last_seen":"2026-09-05T01:15:56.685394Z","times_seen":542,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - SwissPass","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with SwissPass phishing","tags":["swisspass","phishing","transport"],"meta":null}]}},{"url":{"schema":"https","addr":"formento1932.it/wp-content/plugins/flamingo/includes/temp/css/mail/css/mail/reply26/7dz5q0550s88dchde844051511des1dd8e1de80d07ee/mahnung/26/resources/js/swisspass.min-20200819.js","fqdn":"formento1932.it","domain":"formento1932.it","tld":"it"},"ip":{"addr":"213.212.143.46","port":443,"asn":12779,"as":"IT.Gate S.p.A.","country":"Italy","country_code":"IT"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://formento1932.it/wp-content/plugins/flamingo/includes/temp/css/mail/css/mail/reply26/7dz5q0550s88dchde844051511des1dd8e1de80d07ee/mahnung/26/","date":"2026-09-05T01:15:16.244Z","timestamp":1788570916244,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.formento1932.it","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 14:46:31 GMT","end":"Mon, 16 Nov 2026 14:46:30 GMT"},"fingerprint":{"sha1":"A8:8F:19:AC:B8:DF:2C:1D:98:23:38:58:83:56:3E:0F:09:D7:FC:53","sha256":"0E:08:28:85:E2:06:70:B2:AA:4F:84:3F:3A:0F:6F:A3:57:10:D2:15:39:30:57:0A:F8:D6:9B:B5:B4:F3:4F:F7"}}},"request":{"raw":"GET /wp-content/plugins/flamingo/includes/temp/css/mail/css/mail/reply26/7dz5q0550s88dchde844051511des1dd8e1de80d07ee/mahnung/26/resources/js/swisspass.min-20200819.js HTTP/1.1\r\nHost: formento1932.it\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 05 Sep 2026 01:15:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 23 May 2024 01:30:22 GMT\r\netag: W/\"664e9c2e-18410\"\r\nexpires: Mon, 05 Oct 2026 01:15:16 GMT\r\ncache-control: max-age=2592000, public, no-transform\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":99344,"size_decoded":26008,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"a8deceea0458745a7c0f562c65e01e27","sha1":"850c4796889f9173e30e016916155941cab3ae31","sha256":"9c50211b34ab0377f3b35c243c98e402315127bfa5b51e147cb22c702174ca60","sha512":"17d7d5daaa8e1c864fe21ce96782f33b45a907820a659e34ce760dad6d62895e92270d4073387ed5d563447c0f952e9369bf37aaa323b7b80912df3b5df13f9f","ssdeep":"1536:gj5taENXUembGTAC/gLf8XPpzaaGNZIMcSPAZAcSH5bVRLbErz:s5taE9FLTWIPpzaaQIMvPAZrSH1bErz","tlshash":"38a3da0d705234b72bff30f7147f620591336499b8454c40b26d9ca61ebaa4e53afeae","first_seen":"2023-11-18T18:24:47Z","last_seen":"2026-09-05T01:15:56.686581Z","times_seen":552,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - SwissPass","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with SwissPass phishing","tags":["swisspass","phishing","transport"],"meta":null}]}},{"url":{"schema":"https","addr":"cdn.app.sbb.ch/fonts/v1_6_subset/SBBWeb-Light.woff2","fqdn":"cdn.app.sbb.ch","domain":"sbb.ch","tld":"ch"},"ip":{"addr":"3.123.233.179","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://formento1932.it/wp-content/plugins/flamingo/includes/temp/css/mail/css/mail/reply26/7dz5q0550s88dchde844051511des1dd8e1de80d07ee/mahnung/26/","date":"2026-09-05T01:15:16.353Z","timestamp":1788570916353,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.app.sbb.ch","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sat, 16 May 2026 00:00:00 GMT","end":"Sun, 29 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"58:48:EC:2D:9E:BF:09:51:F2:03:47:36:3A:2C:29:C7:72:36:FA:B7","sha256":"E3:B6:7F:F1:64:99:E9:B3:D5:7A:D2:1A:B7:1A:F6:66:1B:2D:1A:F8:83:99:8E:34:D5:B9:81:98:84:62:EB:0A"}}},"request":{"raw":"GET /fonts/v1_6_subset/SBBWeb-Light.woff2 HTTP/1.1\r\nHost: cdn.app.sbb.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://formento1932.it\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://formento1932.it/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 05 Sep 2026 01:15:16 GMT\r\ncontent-type: application/font-woff2\r\ncontent-length: 14212\r\nserver: nginx/1.31.4\r\nlast-modified: Fri, 27 Jun 2025 13:56:18 GMT\r\nvary: Accept-Encoding\r\netag: \"685ea302-3784\"\r\nexpires: Sun, 05 Sep 2027 01:15:16 GMT\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nstrict-transport-security: max-age=31536000\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Mx-ReqToken,X-Requested-With\r\ncache-control: max-age=31536000, public, private\r\naccept-ranges: bytes\r\nset-cookie: 9527f1a32486d650b0687919ffd41c2b=c4ff1fff724bf08fbe660abd69d65578; path=/; HttpOnly; Secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"9527f1a32486d650b0687919ffd41c2b","value":"c4ff1fff724bf08fbe660abd69d65578","quoted":false,"path":"/","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"9527f1a32486d650b0687919ffd41c2b=c4ff1fff724bf08fbe660abd69d65578; path=/; HttpOnly; Secure; SameSite=None"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.31.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14212,"size_decoded":15088,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14212, version 1.0","md5":"8b70a44a98a0ac5d721df7d8f5136f7b","sha1":"10e10c01e732f3d35a78e1051bfcc9fe2589ddda","sha256":"5c7f0e173844556da7ca5eb8936fa3dab1c00206960920a49a1eea9cde2bfaaf","sha512":"65833d65ef11617a6d2d2a9c2ed81fc7079368da6f9569b56404fa5a66d878088d95c5632b216d0e6c7f3e40aea6a6d7df5b9c0147743ecc06f38e95508397f2","ssdeep":"384:5bJ1keL4/s04W4gUz+/1x55hsno5oky9RAl51Gx:ZasaD/V5hsnDVyC","tlshash":"a652d017c934adb9c708cc34b49e35b2cc2e9ad444a2382c57c7a1b9370a9d36e54e4d","first_seen":"2023-04-05T05:09:02Z","last_seen":"2026-09-05T01:15:56.687553Z","times_seen":2636,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":0,"dns":5,"connect":24,"send":0,"wait":28,"receive":20,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - SwissPass","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with SwissPass phishing","tags":["swisspass","phishing","transport"],"meta":null}]}},{"url":{"schema":"https","addr":"formento1932.it/wp-content/plugins/flamingo/includes/temp/css/mail/css/mail/reply26/7dz5q0550s88dchde844051511des1dd8e1de80d07ee/mahnung/26/resources/fonts/icomoon/icomoon.ttf?7m5yri","fqdn":"formento1932.it","domain":"formento1932.it","tld":"it"},"ip":{"addr":"213.212.143.46","port":443,"asn":12779,"as":"IT.Gate S.p.A.","country":"Italy","country_code":"IT"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://formento1932.it/wp-content/plugins/flamingo/includes/temp/css/mail/css/mail/reply26/7dz5q0550s88dchde844051511des1dd8e1de80d07ee/mahnung/26/","date":"2026-09-05T01:15:16.460Z","timestamp":1788570916460,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.formento1932.it","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 14:46:31 GMT","end":"Mon, 16 Nov 2026 14:46:30 GMT"},"fingerprint":{"sha1":"A8:8F:19:AC:B8:DF:2C:1D:98:23:38:58:83:56:3E:0F:09:D7:FC:53","sha256":"0E:08:28:85:E2:06:70:B2:AA:4F:84:3F:3A:0F:6F:A3:57:10:D2:15:39:30:57:0A:F8:D6:9B:B5:B4:F3:4F:F7"}}},"request":{"raw":"GET /wp-content/plugins/flamingo/includes/temp/css/mail/css/mail/reply26/7dz5q0550s88dchde844051511des1dd8e1de80d07ee/mahnung/26/resources/fonts/icomoon/icomoon.ttf?7m5yri HTTP/1.1\r\nHost: formento1932.it\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://formento1932.it/wp-content/plugins/flamingo/includes/temp/css/mail/css/mail/reply26/7dz5q0550s88dchde844051511des1dd8e1de80d07ee/mahnung/26/resources/css/normal/app/sso.min-20200819.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\nserver: nginx\r\ndate: Sat, 05 Sep 2026 01:15:16 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://www.formento1932.it/wp-content/plugins/flamingo/includes/temp/css/mail/css/mail/reply26/7dz5q0550s88dchde844051511des1dd8e1de80d07ee/mahnung/26/resources/fonts/icomoon/icomoon.ttf?7m5yri\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\nx-redirect-by: WordPress\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer\r\npermissions-policy: geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(*),magnetometer=(),gyroscope=(),fullscreen=(*),payment=()\r\ncross-origin-opener-policy: same-origin-allow-popups\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-07T02:14:22.998048Z","times_seen":18321048,"resource_available":true,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}