r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash cdbad2434b7d127a4fc769807a9dc3e7
fa98cd9fc2309ab4423f33f683d17bdb17d76713
560cbbb751ab2884024da3b93fba6bc45c6434797dba72a98c05e7fc2bb94bc1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "560CBBB751AB2884024DA3B93FBA6BC45C6434797DBA72A98C05E7FC2BB94BC1"
Last-Modified: Sat, 26 Nov 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3506
Expires: Sun, 27 Nov 2022 16:09:03 GMT
Date: Sun, 27 Nov 2022 15:10:37 GMT
Connection: keep-alive
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 64b2a23eab6e5ae8c010ec7242be930c
0673e4385ba01a5a245711bab96cafc34f765793
64751d193f7af72431e9689581faffcae1a30ff50ea425697b2b80ff61c87909
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2507
Cache-Control: max-age=158543
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 15:10:37 GMT
Etag: "63833c71-1d7"
Expires: Tue, 29 Nov 2022 11:13:00 GMT
Last-Modified: Sun, 27 Nov 2022 10:31:13 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 3b56944f0e5716fd4fad2ec18994d4be
61cafa4de31ba960d1145ec37272f6f6b6944e0c
4fd46b0b6a2ea24f5ce175985a3933c04b4c01bd3e32bee2e50a61a65eef7af4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4FD46B0B6A2EA24F5CE175985A3933C04B4C01BD3E32BEE2E50A61A65EEF7AF4"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5281
Expires: Sun, 27 Nov 2022 16:38:38 GMT
Date: Sun, 27 Nov 2022 15:10:37 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
34.102.187.140200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 4d7e4eed097b9c4e5d509419f1cfc85a
290bb3d428a7c6330e2e3d73a952b16f820896c8
0dc9ca0f57af15adcd416035e92794711434e3d53a1feff21d8481d6d500986c
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Content-Length, Alert, Backoff, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sun, 27 Nov 2022 14:17:40 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 3177
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 0G/3/1QLh6NIgupdyNPtcSucwqAhNPyQvIBk2nBFtdNJD9R323CejztSjUjjCM6e7cngAEs9yfM=
x-amz-request-id: 1Y0DST2Y3912H5B6
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 27 Nov 2022 14:41:40 GMT
age: 1737
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
massolopedia.it/
79.8.125.120301 Moved Permanently 0 B IP 79.8.125.120:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Malware
GET / HTTP/1.1
Host: massolopedia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx/1.20.1
Date: Sun, 27 Nov 2022 15:10:28 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.4.33
X-Redirect-By: WordPress
Location: https://massolopedia.it/
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 15:10:37 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash c9b03ebde0d008462e6bfaa440386a71
910f05b0c208fa3538926371cce189336f177385
083da2ebae30c1685a50f5412e438ffef2b4d61e7d16c433290309dd75eb4c7a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "083DA2EBAE30C1685A50F5412E438FFEF2B4D61E7D16C433290309DD75EB4C7A"
Last-Modified: Sat, 26 Nov 2022 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21587
Expires: Sun, 27 Nov 2022 21:10:24 GMT
Date: Sun, 27 Nov 2022 15:10:37 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
34.102.187.140200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Content-Length, Alert, Cache-Control, ETag, Pragma, Expires, Backoff, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sun, 27 Nov 2022 15:08:54 GMT
cache-control: public,max-age=3600
age: 104
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash a6fee11dfe1b88cd768a0ca3e2bd0c89
59cec9a44a4a92467678afe65f347f68641a2174
50870c499aae4d5dfd6df25a36cd04b6d185b66ef0590e46933984bf52e2483f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 387
Cache-Control: max-age=151361
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 15:10:38 GMT
Etag: "638328ac-1d7"
Expires: Tue, 29 Nov 2022 09:13:19 GMT
Last-Modified: Sun, 27 Nov 2022 09:06:52 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 471
massolopedia.it/wp-content/plugins/instagram-feed/css/sbi-styles.min.css?ver=2.7
79.8.125.120200 OK 17 kB URL HTTP/2 massolopedia.it/wp-content/plugins/instagram-feed/css/sbi-styles.min.css?ver=2.7
IP 79.8.125.120:0
File type ASCII text, with very long lines (16845), with no line terminators
Hash 02bacbad1e26f0b3d1772d4cf5a047dc
89292741d360f7eb3319437cd32a80ea7b388941
df15236d4098113e3479fc540a9bd1046ca6029f5508098e9c4245a0e12fab05
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/instagram-feed/css/sbi-styles.min.css?ver=2.7 HTTP/1.1
Host: massolopedia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://massolopedia.it/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Sun, 27 Nov 2022 15:10:29 GMT
content-type: text/css
content-length: 16845
last-modified: Thu, 21 Jan 2021 21:36:24 GMT
etag: "6009f3d8-41cd"
accept-ranges: bytes
X-Firefox-Spdy: h2
push.services.mozilla.com/
34.218.164.174101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 34.218.164.174:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: U1jL54/HKAu2lOD3QGzc6Q==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: XJN3T5BlYpxXwmj/h+F4ojkMfQw=
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash 2620cb440711056d80ec6ee6a4101116
0de0450475dd899906c36956881f9db5ecad90fd
9a84a21b1cb5e13c925b144beef55b87669a02836087e1a9cf74fa4964ef43f4
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5622
Cache-Control: max-age=149069
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 15:10:38 GMT
Etag: "63830b45-117"
Expires: Tue, 29 Nov 2022 08:35:07 GMT
Last-Modified: Sun, 27 Nov 2022 07:01:25 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 279
massolopedia.it/wp-includes/css/dist/block-library/style.min.css?ver=5.9.5
79.8.125.120200 OK 83 kB URL HTTP/2 massolopedia.it/wp-includes/css/dist/block-library/style.min.css?ver=5.9.5
IP 79.8.125.120:0
File type ASCII text, with very long lines (39791)
Hash 7e7a1a9e3712cd16dade7c6e811ba28b
45e216af145ea7c3f30099c869482785ad921bc2
cdbdaa122823601390c7dcbdd1afde33c2f1a432b8c5ff025c6137ee99ba541a
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/css/dist/block-library/style.min.css?ver=5.9.5 HTTP/1.1
Host: massolopedia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://massolopedia.it/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Sun, 27 Nov 2022 15:10:29 GMT
content-type: text/css
content-length: 83419
last-modified: Fri, 01 Jul 2022 14:57:43 GMT
etag: "62bf0b67-145db"
accept-ranges: bytes
X-Firefox-Spdy: h2
massolopedia.it/wp-content/plugins/simply-gallery-block/blocks/blocks.uni.css?ver=1.8.3
79.8.125.120200 OK 1.4 kB URL HTTP/2 massolopedia.it/wp-content/plugins/simply-gallery-block/blocks/blocks.uni.css?ver=1.8.3
IP 79.8.125.120:0
File type ASCII text, with very long lines (1446), with no line terminators
Hash 6262cdcfa0dee35fcfe43fa4398aaf0e
99f30c16d2cde341d13493f2c769fb3563914bd6
b36e91019935a515acef0c4af8a5413229c8d150a17bcbd1374550234cddf016
GET /wp-content/plugins/simply-gallery-block/blocks/blocks.uni.css?ver=1.8.3 HTTP/1.1
Host: massolopedia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://massolopedia.it/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Sun, 27 Nov 2022 15:10:29 GMT
content-type: text/css
content-length: 1446
last-modified: Fri, 05 Feb 2021 08:01:52 GMT
etag: "601cfb70-5a6"
accept-ranges: bytes
X-Firefox-Spdy: h2
massolopedia.it/wp-content/plugins/social-icons-widget-by-wpzoom/block/dist/blocks.style.build.css?ver=1611179929
79.8.125.120200 OK 8.8 kB URL HTTP/2 massolopedia.it/wp-content/plugins/social-icons-widget-by-wpzoom/block/dist/blocks.style.build.css?ver=1611179929
IP 79.8.125.120:0
File type ASCII text, with very long lines (8751)
Hash 7cf7f779e29c35516899c6f76cb78099
7c7263759308e24dc986ca2c9c412317d24e99b5
3887d41f59375d37b6b23c6cf2e0a8320cd99f1bd66248875974adc768cc1602
GET /wp-content/plugins/social-icons-widget-by-wpzoom/block/dist/blocks.style.build.css?ver=1611179929 HTTP/1.1
Host: massolopedia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://massolopedia.it/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Sun, 27 Nov 2022 15:10:29 GMT
content-type: text/css
content-length: 8752
last-modified: Wed, 20 Jan 2021 21:58:49 GMT
etag: "6008a799-2230"
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 5af61422c4eaa1b995ec63e463abda26
db75634681ed688840773ce828c169ac9da7d131
506791493bb08d458008ad072ac34a26c2170c1e775b83f55f20cd8af97aa895
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 15:10:38 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 5af61422c4eaa1b995ec63e463abda26
db75634681ed688840773ce828c169ac9da7d131
506791493bb08d458008ad072ac34a26c2170c1e775b83f55f20cd8af97aa895
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 15:10:38 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 0ee1d1a60ec1770ec3e880a25c257f5d
015b05feff63bdcf8fae4d1a8c0c83c923a2ca67
b6845619444a37f322c044933a44cf3fd283a18a54d03bad4f76a2ed8c2cbaf6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 15:10:38 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
massolopedia.it/wp-content/plugins/monarch/css/style.css?ver=1.4.12
79.8.125.120200 OK 116 kB URL HTTP/2 massolopedia.it/wp-content/plugins/monarch/css/style.css?ver=1.4.12
IP 79.8.125.120:0
File type Unicode text, UTF-8 text, with very long lines (718)
Size 116 kB (116077 bytes)
Hash da967565cb2fce059a631f0f90adf079
138db4815bcbfab11d16d800ecd5bda5d8666e9b
f820d93daf383e178bda2912f5bee00e90e56390597820622643fa8e5e487143
GET /wp-content/plugins/monarch/css/style.css?ver=1.4.12 HTTP/1.1
Host: massolopedia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://massolopedia.it/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Sun, 27 Nov 2022 15:10:29 GMT
content-type: text/css
content-length: 116077
last-modified: Tue, 30 Oct 2018 09:34:18 GMT
etag: "5bd8259a-1c56d"
accept-ranges: bytes
X-Firefox-Spdy: h2
massolopedia.it/wp-content/themes/twentyseventeen/style.css?ver=20201208
79.8.125.120200 OK 84 kB URL HTTP/2 massolopedia.it/wp-content/themes/twentyseventeen/style.css?ver=20201208
IP 79.8.125.120:0
File type Unicode text, UTF-8 text, with very long lines (463)
Hash 5f930300403e82cdbeb1c133813c366b
8601c64934e175f05256a51edf4e120774d057dd
2075c3bcaedf27c2b83aff5d44d07599f778b203be9d10aca9c8f643649ce5f0
GET /wp-content/themes/twentyseventeen/style.css?ver=20201208 HTTP/1.1
Host: massolopedia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://massolopedia.it/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Sun, 27 Nov 2022 15:10:29 GMT
content-type: text/css
content-length: 84001
last-modified: Tue, 29 Dec 2020 15:13:29 GMT
etag: "5feb4799-14821"
accept-ranges: bytes
X-Firefox-Spdy: h2
massolopedia.it/wp-content/themes/twentyseventeen/assets/css/blocks.css?ver=20190105
79.8.125.120200 OK 10 kB URL HTTP/2 massolopedia.it/wp-content/themes/twentyseventeen/assets/css/blocks.css?ver=20190105
IP 79.8.125.120:0
Hash ba0c834a8479da973f6152865d49224e
e6e6d4ceb2609329e81a17ff24a77e268c1cfcd0
97201fbb633fdbc1a8bbf2dfd7f1f0ac5fa8ada2c481b3fcb8e6bab9754d6fdb
GET /wp-content/themes/twentyseventeen/assets/css/blocks.css?ver=20190105 HTTP/1.1
Host: massolopedia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://massolopedia.it/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Sun, 27 Nov 2022 15:10:29 GMT
content-type: text/css
content-length: 10207
last-modified: Tue, 29 Dec 2020 15:13:30 GMT
etag: "5feb479a-27df"
accept-ranges: bytes
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=UA-188029986-2
142.250.74.168200 OK 44 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-188029986-2
IP 142.250.74.168:0
File type ASCII text, with very long lines (1921)
Hash f62aa8c219f4e5f4a29dc30baa4fa922
507bbc2d9cf9ff8f15417653568d34115868a118
a60433b2005baddc6704d6328077e79a81c165a3cd8627b7dca8f499b287b207
GET /gtag/js?id=UA-188029986-2 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://massolopedia.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 27 Nov 2022 15:10:38 GMT
expires: Sun, 27 Nov 2022 15:10:38 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 43682
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
massolopedia.it/wp-content/plugins/custom-facebook-feed/assets/css/cff-style.css?ver=2.18.2
79.8.125.120200 OK 20 kB URL HTTP/2 massolopedia.it/wp-content/plugins/custom-facebook-feed/assets/css/cff-style.css?ver=2.18.2
IP 79.8.125.120:0
File type ASCII text, with CRLF line terminators
Hash 0321411f1b18e2ccbb232486a26aae10
91b68424d95f0cea0a0c019d81a23e18b3983aea
2eb9db281898ed67b0536a7da28db71652fc77ea9a705b47225a355eb558e5b4
GET /wp-content/plugins/custom-facebook-feed/assets/css/cff-style.css?ver=2.18.2 HTTP/1.1
Host: massolopedia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://massolopedia.it/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Sun, 27 Nov 2022 15:10:29 GMT
content-type: text/css
content-length: 20521
last-modified: Sun, 31 Jan 2021 22:41:34 GMT
etag: "6017321e-5029"
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash 2620cb440711056d80ec6ee6a4101116
0de0450475dd899906c36956881f9db5ecad90fd
9a84a21b1cb5e13c925b144beef55b87669a02836087e1a9cf74fa4964ef43f4
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5622
Cache-Control: max-age=149069
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 15:10:38 GMT
Etag: "63830b45-117"
Expires: Tue, 29 Nov 2022 08:35:07 GMT
Last-Modified: Sun, 27 Nov 2022 07:01:25 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 279
massolopedia.it/wp-content/plugins/social-icons-widget-by-wpzoom/assets/css/wpzoom-socicon.css?ver=1611179929
79.8.125.120200 OK 23 kB URL HTTP/2 massolopedia.it/wp-content/plugins/social-icons-widget-by-wpzoom/assets/css/wpzoom-socicon.css?ver=1611179929
IP 79.8.125.120:0
Hash 7317d7ecf6d18a43ed9a27ce25310ffc
9250e5ef4b682d6b05533edba3d6df52bac6c654
3b29df9a4bb1d852209dffc3daf17bdc4d32e4e75f9f4aaa1fcba0453bbac40a
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/social-icons-widget-by-wpzoom/assets/css/wpzoom-socicon.css?ver=1611179929 HTTP/1.1
Host: massolopedia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://massolopedia.it/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Sun, 27 Nov 2022 15:10:29 GMT
content-type: text/css
content-length: 23244
last-modified: Wed, 20 Jan 2021 21:58:49 GMT
etag: "6008a799-5acc"
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 5af61422c4eaa1b995ec63e463abda26
db75634681ed688840773ce828c169ac9da7d131
506791493bb08d458008ad072ac34a26c2170c1e775b83f55f20cd8af97aa895
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 15:10:38 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 0ee1d1a60ec1770ec3e880a25c257f5d
015b05feff63bdcf8fae4d1a8c0c83c923a2ca67
b6845619444a37f322c044933a44cf3fd283a18a54d03bad4f76a2ed8c2cbaf6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 15:10:38 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
massolopedia.it/wp-content/plugins/social-icons-widget-by-wpzoom/assets/css/genericons.css?ver=1611179929
79.8.125.120200 OK 9.7 kB URL HTTP/2 massolopedia.it/wp-content/plugins/social-icons-widget-by-wpzoom/assets/css/genericons.css?ver=1611179929
IP 79.8.125.120:0
Hash 7dafe5cbf983809f6cf342ba0d083d95
c1dcdeae541016869de457a650e1a5c2a3283b9f
8dc3eb3bcb0ee6a2457a1f6cd34ef9205c9e172fca149eae7eb5f05f9f3e4780
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/social-icons-widget-by-wpzoom/assets/css/genericons.css?ver=1611179929 HTTP/1.1
Host: massolopedia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://massolopedia.it/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Sun, 27 Nov 2022 15:10:29 GMT
content-type: text/css
content-length: 9682
last-modified: Wed, 20 Jan 2021 21:58:49 GMT
etag: "6008a799-25d2"
accept-ranges: bytes
X-Firefox-Spdy: h2
massolopedia.it/wp-content/plugins/social-icons-widget-by-wpzoom/assets/css/academicons.min.css?ver=1611179929
79.8.125.120200 OK 6.8 kB URL HTTP/2 massolopedia.it/wp-content/plugins/social-icons-widget-by-wpzoom/assets/css/academicons.min.css?ver=1611179929
IP 79.8.125.120:0
Hash 35a795efc93f4e8c417b0040251a4dc3
076b5f2c159f3a06d1a6b773cafe21a1155091c4
9ae9f521a30e7018c427be5701ec72bda702e22fbad75a9a66464b646f7aded5
GET /wp-content/plugins/social-icons-widget-by-wpzoom/assets/css/academicons.min.css?ver=1611179929 HTTP/1.1
Host: massolopedia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://massolopedia.it/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Sun, 27 Nov 2022 15:10:29 GMT
content-type: text/css
content-length: 6784
last-modified: Wed, 20 Jan 2021 21:58:49 GMT
etag: "6008a799-1a80"
accept-ranges: bytes
X-Firefox-Spdy: h2
massolopedia.it/wp-content/plugins/social-icons-widget-by-wpzoom/assets/css/font-awesome-3.min.css?ver=1611179929
79.8.125.120200 OK 31 kB URL HTTP/2 massolopedia.it/wp-content/plugins/social-icons-widget-by-wpzoom/assets/css/font-awesome-3.min.css?ver=1611179929
IP 79.8.125.120:0
File type ASCII text, with very long lines (30852)
Hash 3deef07caa6219424d2a788ae8744556
97f89ae4338d62286d8b7d76e70040a0d4519468
af727f527a3fad06274e224f20521504c3e582b621b36e2801ff5e01a3647fb2
GET /wp-content/plugins/social-icons-widget-by-wpzoom/assets/css/font-awesome-3.min.css?ver=1611179929 HTTP/1.1
Host: massolopedia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://massolopedia.it/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Sun, 27 Nov 2022 15:10:29 GMT
content-type: text/css
content-length: 31015
last-modified: Wed, 20 Jan 2021 21:58:49 GMT
etag: "6008a799-7927"
accept-ranges: bytes
X-Firefox-Spdy: h2
massolopedia.it/wp-includes/css/dashicons.min.css?ver=5.9.5
79.8.125.120200 OK 59 kB URL HTTP/2 massolopedia.it/wp-includes/css/dashicons.min.css?ver=5.9.5
IP 79.8.125.120:0
File type ASCII text, with very long lines (58981)
Hash d68d6bf519169d86e155bad0bed833f8
27ba9c67d0e775fc4e6dd62011daf4c3902698fc
c21e5a2b32c47bc5f9d9efc97bc0e29fd081946d1d3ebffc5621cfafb1d3960e
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/css/dashicons.min.css?ver=5.9.5 HTTP/1.1
Host: massolopedia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://massolopedia.it/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Sun, 27 Nov 2022 15:10:29 GMT
content-type: text/css
content-length: 59016
last-modified: Fri, 01 Jul 2022 14:57:43 GMT
etag: "62bf0b67-e688"
accept-ranges: bytes
X-Firefox-Spdy: h2
massolopedia.it/wp-content/plugins/social-icons-widget-by-wpzoom/assets/css/wpzoom-social-icons-styles.css?ver=1611179929
79.8.125.120200 OK 3.7 kB URL HTTP/2 massolopedia.it/wp-content/plugins/social-icons-widget-by-wpzoom/assets/css/wpzoom-social-icons-styles.css?ver=1611179929
IP 79.8.125.120:0
Hash ff0fe79a84cc0bca49a1954b6be655e4
07bbea2f77d9f23a3cceb5d17dede2f81563bdb9
09148db51869a0004928641ad0237e112dd76220637425f6a49dab5fa364bd78
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/social-icons-widget-by-wpzoom/assets/css/wpzoom-social-icons-styles.css?ver=1611179929 HTTP/1.1
Host: massolopedia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://massolopedia.it/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Sun, 27 Nov 2022 15:10:29 GMT
content-type: text/css
content-length: 3682
last-modified: Wed, 20 Jan 2021 21:58:49 GMT
etag: "6008a799-e62"
accept-ranges: bytes
X-Firefox-Spdy: h2
massolopedia.it/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
79.8.125.120200 OK 18 kB URL HTTP/2 massolopedia.it/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
IP 79.8.125.120:0
File type ASCII text, with very long lines (11126)
Hash 9fdd3ebeb26b1183e699e6835b113872
849e9bc3d560b5d6cfade1baac604a261d53350e
159d9ded1e85c5ac3fc1463d10884e80da31d90950449ab4625658eeebcc5a54
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1
Host: massolopedia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://massolopedia.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Sun, 27 Nov 2022 15:10:29 GMT
content-type: application/javascript
content-length: 17523
last-modified: Wed, 14 Sep 2022 11:55:13 GMT
etag: "6321c121-4473"
accept-ranges: bytes
X-Firefox-Spdy: h2
massolopedia.it/wp-content/plugins/social-icons-widget-by-wpzoom/assets/font/academicons.ttf?v=1.8.6
79.8.125.120200 OK 48 kB URL HTTP/2 massolopedia.it/wp-content/plugins/social-icons-widget-by-wpzoom/assets/font/academicons.ttf?v=1.8.6
IP 79.8.125.120:0
File type TrueType Font data, 11 tables, 1st "OS/2", 24 names, Macintosh, type 1 string, Academicons\012- data
Hash 1afcbd6a1c454e7b7f0bc58155558b9d
6946cb2f01c31c1e5dfdc6a7e4ad64dc2e4cdca8
107cca07d33ea31bbfe719513aa2b36e8cb8c8c8bcd521148746f652738c7101
GET /wp-content/plugins/social-icons-widget-by-wpzoom/assets/font/academicons.ttf?v=1.8.6 HTTP/1.1
Host: massolopedia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://massolopedia.it/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Sun, 27 Nov 2022 15:10:29 GMT
content-type: application/octet-stream
content-length: 47500
last-modified: Wed, 20 Jan 2021 21:58:49 GMT
etag: "6008a799-b98c"
accept-ranges: bytes
X-Firefox-Spdy: h2
massolopedia.it/wp-content/plugins/social-icons-widget-by-wpzoom/assets/font/academicons.woff?v=1.8.6
79.8.125.120200 OK 48 kB URL HTTP/2 massolopedia.it/wp-content/plugins/social-icons-widget-by-wpzoom/assets/font/academicons.woff?v=1.8.6
IP 79.8.125.120:0
File type Web Open Font Format, TrueType, length 47576, version 1.8\012- data
Hash 2552b354cabf01815628a244fde0636e
3c5e7d85d7e5030b8db8177daeb760abf97ed7dc
bbf62cb77adfebbdcf36ef1cf8d2587f4cfa9bf56e23118613749778f94d8e14
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/social-icons-widget-by-wpzoom/assets/font/academicons.woff?v=1.8.6 HTTP/1.1
Host: massolopedia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://massolopedia.it/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Sun, 27 Nov 2022 15:10:29 GMT
content-type: font/woff
content-length: 47576
last-modified: Wed, 20 Jan 2021 21:58:49 GMT
etag: "6008a799-b9d8"
accept-ranges: bytes
X-Firefox-Spdy: h2
massolopedia.it/wp-includes/js/jquery/jquery.min.js?ver=3.6.0
79.8.125.120200 OK 96 kB URL HTTP/2 massolopedia.it/wp-includes/js/jquery/jquery.min.js?ver=3.6.0
IP 79.8.125.120:0
File type ASCII text, with very long lines (62875)
Hash 0ac5813818d7e2795140a45b2140203c
d4ce51989bbd1b630f0640e567da7deb8422832c
e171b510af7ecfbbc8ae38f0d7b7712e53c93d05f490b250ac162c2087fbde02
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.0 HTTP/1.1
Host: massolopedia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://massolopedia.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Sun, 27 Nov 2022 15:10:29 GMT
content-type: application/javascript
content-length: 95820
last-modified: Wed, 14 Sep 2022 11:55:39 GMT
etag: "6321c13b-1764c"
accept-ranges: bytes
X-Firefox-Spdy: h2
massolopedia.it/wp-content/plugins/social-icons-widget-by-wpzoom/assets/font/Genericons.ttf
79.8.125.120200 OK 22 kB URL HTTP/2 massolopedia.it/wp-content/plugins/social-icons-widget-by-wpzoom/assets/font/Genericons.ttf
IP 79.8.125.120:0
File type TrueType Font data, 13 tables, 1st "FFTM", 14 names, Macintosh\012- data
Hash 008827208ffc4eeab99bf3cc14fe1e56
e024a5229566e3864856d72b7796a56ca7127252
7cd8dcb9820d7558bcb35bde35d9923a77c8eb9d2a274366261ad55948dfed31
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/social-icons-widget-by-wpzoom/assets/font/Genericons.ttf HTTP/1.1
Host: massolopedia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://massolopedia.it/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Sun, 27 Nov 2022 15:10:29 GMT
content-type: application/octet-stream
content-length: 22188
last-modified: Wed, 20 Jan 2021 21:58:49 GMT
etag: "6008a799-56ac"
accept-ranges: bytes
X-Firefox-Spdy: h2
massolopedia.it/wp-content/plugins/social-icons-widget-by-wpzoom/assets/font/Genericons.woff
79.8.125.120200 OK 14 kB URL HTTP/2 massolopedia.it/wp-content/plugins/social-icons-widget-by-wpzoom/assets/font/Genericons.woff
IP 79.8.125.120:0
File type Web Open Font Format, TrueType, length 13988, version 0.0\012- data
Hash f3f73b280148eeed102d4a6874ac7886
973bfcd63513292f1bb220c241f6dde6509f1168
970a3fa15876d16dcc0fd70eb7c9ab44d733108b3ddca1a449edd0356c1b79a7
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/social-icons-widget-by-wpzoom/assets/font/Genericons.woff HTTP/1.1
Host: massolopedia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://massolopedia.it/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Sun, 27 Nov 2022 15:10:29 GMT
content-type: font/woff
content-length: 13988
last-modified: Wed, 20 Jan 2021 21:58:49 GMT
etag: "6008a799-36a4"
accept-ranges: bytes
X-Firefox-Spdy: h2
massolopedia.it/wp-content/plugins/social-icons-widget-by-wpzoom/assets/font/fontawesome-webfont.woff?v=4.7.0
79.8.125.120200 OK 98 kB URL HTTP/2 massolopedia.it/wp-content/plugins/social-icons-widget-by-wpzoom/assets/font/fontawesome-webfont.woff?v=4.7.0
IP 79.8.125.120:0
File type Web Open Font Format, TrueType, length 98024, version 4.7\012- data
Hash fee66e712a8a08eef5805a46892932ad
28b782240b3e76db824e12c02754a9731a167527
ba0c59deb5450f5cb41b3f93609ee2d0d995415877ddfa223e8a8a7533474f07
GET /wp-content/plugins/social-icons-widget-by-wpzoom/assets/font/fontawesome-webfont.woff?v=4.7.0 HTTP/1.1
Host: massolopedia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://massolopedia.it/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Sun, 27 Nov 2022 15:10:29 GMT
content-type: font/woff
content-length: 98024
last-modified: Wed, 20 Jan 2021 21:58:49 GMT
etag: "6008a799-17ee8"
accept-ranges: bytes
X-Firefox-Spdy: h2
massolopedia.it/wp-content/plugins/social-icons-widget-by-wpzoom/assets/font/fontawesome-webfont.woff2?v=4.7.0
79.8.125.120200 OK 77 kB URL HTTP/2 massolopedia.it/wp-content/plugins/social-icons-widget-by-wpzoom/assets/font/fontawesome-webfont.woff2?v=4.7.0
IP 79.8.125.120:0
File type Web Open Font Format (Version 2), TrueType, length 77160, version 4.459\012- data
Hash af7ae505a9eed503f8b8e6982036873e
d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c
2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/social-icons-widget-by-wpzoom/assets/font/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1
Host: massolopedia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://massolopedia.it/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Sun, 27 Nov 2022 15:10:29 GMT
content-type: font/woff2
content-length: 77160
last-modified: Wed, 20 Jan 2021 21:58:49 GMT
etag: "6008a799-12d68"
accept-ranges: bytes
X-Firefox-Spdy: h2
massolopedia.it/wp-includes/js/wp-emoji-release.min.js?ver=5.9.5
79.8.125.120200 OK 22 kB URL HTTP/2 massolopedia.it/wp-includes/js/wp-emoji-release.min.js?ver=5.9.5
IP 79.8.125.120:0
File type ASCII text, with very long lines (15224)
Hash 7cf10471589ec9f9e6cdd1f51ab1ab3c
8ed00e1d7aaf57e5c0a47c5efc425761efba834f
ff88601f2ba43cda53bd27f7a3590afbfe9fb05c9b09ea7a7c342b0dd941ed59
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/wp-emoji-release.min.js?ver=5.9.5 HTTP/1.1
Host: massolopedia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://massolopedia.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Sun, 27 Nov 2022 15:10:29 GMT
content-type: application/javascript
content-length: 21908
last-modified: Fri, 01 Jul 2022 14:57:45 GMT
etag: "62bf0b69-5594"
accept-ranges: bytes
X-Firefox-Spdy: h2
massolopedia.it/wp-content/plugins/simply-gallery-block/blocks/pgc_sgb.min.js?ver=1.8.3
79.8.125.120200 OK 6.5 kB URL HTTP/2 massolopedia.it/wp-content/plugins/simply-gallery-block/blocks/pgc_sgb.min.js?ver=1.8.3
IP 79.8.125.120:0
File type ASCII text, with very long lines (2790)
Hash a9c411ca1f2354ecae607d32505250f5
cb8793f938b0903b5582da5fd2fa91107b108a7e
6e1265ace43ebb6159a98614075539886a3eb77180f418a9767fd78532a4db5f
GET /wp-content/plugins/simply-gallery-block/blocks/pgc_sgb.min.js?ver=1.8.3 HTTP/1.1
Host: massolopedia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://massolopedia.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Sun, 27 Nov 2022 15:10:29 GMT
content-type: application/javascript
content-length: 6495
last-modified: Fri, 05 Feb 2021 08:01:52 GMT
etag: "601cfb70-195f"
accept-ranges: bytes
X-Firefox-Spdy: h2
massolopedia.it/wp-content/plugins/social-icons-widget-by-wpzoom/assets/font/socicon.ttf
79.8.125.120200 OK 70 kB URL HTTP/2 massolopedia.it/wp-content/plugins/social-icons-widget-by-wpzoom/assets/font/socicon.ttf
IP 79.8.125.120:0
File type TrueType Font data, 11 tables, 1st "OS/2", 14 names, Macintosh, type 1 string, socicon \012- data
Hash b25e7565ef46e04f1a019285e5729f60
1e293b5ff268f8cd1b92e38075125d9096afad97
43b56ae64e6dbaa147c2a1e7e2f37bbcfcef520aa78904b1c9adf5e6529566fe
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/social-icons-widget-by-wpzoom/assets/font/socicon.ttf HTTP/1.1
Host: massolopedia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://massolopedia.it/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Sun, 27 Nov 2022 15:10:29 GMT
content-type: application/octet-stream
content-length: 70444
last-modified: Wed, 20 Jan 2021 21:58:49 GMT
etag: "6008a799-1132c"
accept-ranges: bytes
X-Firefox-Spdy: h2
massolopedia.it/wp-content/plugins/social-icons-widget-by-wpzoom/assets/font/socicon.woff
79.8.125.120200 OK 70 kB URL HTTP/2 massolopedia.it/wp-content/plugins/social-icons-widget-by-wpzoom/assets/font/socicon.woff
IP 79.8.125.120:0
File type Web Open Font Format, TrueType, length 70520, version 1.0\012- data
Hash 3cb011ef64ae7b69663e83f5c0e3cf9b
513a734023a6921ef77735eaaf7bf94983a7c2d7
fd4aaeb7969bb9552a49533a9e2f3ff66d2cbb4280b7c6b2e2acda5b8ebc9939
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/social-icons-widget-by-wpzoom/assets/font/socicon.woff HTTP/1.1
Host: massolopedia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://massolopedia.it/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Sun, 27 Nov 2022 15:10:29 GMT
content-type: font/woff
content-length: 70520
last-modified: Wed, 20 Jan 2021 21:58:49 GMT
etag: "6008a799-11378"
accept-ranges: bytes
X-Firefox-Spdy: h2
massolopedia.it/wp-content/plugins/social-icons-widget-by-wpzoom/assets/font/fontawesome-webfont.ttf?v=4.7.0
79.8.125.120200 OK 166 kB URL HTTP/2 massolopedia.it/wp-content/plugins/social-icons-widget-by-wpzoom/assets/font/fontawesome-webfont.ttf?v=4.7.0
IP 79.8.125.120:0
File type TrueType Font data, 13 tables, 1st "FFTM", 24 names, Macintosh\012- data
Size 166 kB (165548 bytes)
Hash b06871f281fee6b241d60582ae9369b9
13b1eab65a983c7a73bc7997c479d66943f7c6cb
aa58f33f239a0fb02f5c7a6c45c043d7a9ac9a093335806694ecd6d4edc0d6a8
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/social-icons-widget-by-wpzoom/assets/font/fontawesome-webfont.ttf?v=4.7.0 HTTP/1.1
Host: massolopedia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://massolopedia.it/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Sun, 27 Nov 2022 15:10:29 GMT
content-type: application/octet-stream
content-length: 165548
last-modified: Wed, 20 Jan 2021 21:58:49 GMT
etag: "6008a799-286ac"
accept-ranges: bytes
X-Firefox-Spdy: h2
massolopedia.it/wp-content/plugins/monarch/js/idle-timer.min.js?ver=1.4.12
79.8.125.120200 OK 6.2 kB URL HTTP/2 massolopedia.it/wp-content/plugins/monarch/js/idle-timer.min.js?ver=1.4.12
IP 79.8.125.120:0
File type ASCII text, with very long lines (2422)
Hash 06c056c63ab62301bfc72a82fceaac56
4105e8c6ae35b36797123b4c5a8dfabbc191c453
278883c944f8e8219ba53be8317a0ce957cc2a9797ad1a0e6511b4cb8ab89022
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/monarch/js/idle-timer.min.js?ver=1.4.12 HTTP/1.1
Host: massolopedia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://massolopedia.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Sun, 27 Nov 2022 15:10:29 GMT
content-type: application/javascript
content-length: 6245
last-modified: Tue, 30 Oct 2018 09:34:18 GMT
etag: "5bd8259a-1865"
accept-ranges: bytes
X-Firefox-Spdy: h2
massolopedia.it/wp-content/plugins/monarch/js/custom.js?ver=1.4.12
79.8.125.120200 OK 30 kB URL HTTP/2 massolopedia.it/wp-content/plugins/monarch/js/custom.js?ver=1.4.12
IP 79.8.125.120:0
File type ASCII text, with very long lines (351)
Hash 13814341581a49237984aebcf413e009
30298da65a3470544e33dfd24785585e746d9278
8356a14c08faadf28f1c636cab5b00309c30bab8a378c21f7e441f4e571e7393
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/monarch/js/custom.js?ver=1.4.12 HTTP/1.1
Host: massolopedia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://massolopedia.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Sun, 27 Nov 2022 15:10:29 GMT
content-type: application/javascript
content-length: 30098
last-modified: Tue, 30 Oct 2018 09:34:18 GMT
etag: "5bd8259a-7592"
accept-ranges: bytes
X-Firefox-Spdy: h2
massolopedia.it/wp-content/themes/twentyseventeen/assets/js/skip-link-focus-fix.js?ver=20161114
79.8.125.120200 OK 4.4 kB URL HTTP/2 massolopedia.it/wp-content/themes/twentyseventeen/assets/js/skip-link-focus-fix.js?ver=20161114
IP 79.8.125.120:0
Hash d33eb45a35291beb7e8e961570d075c0
2c0cc9a9304f385cb07f872e93df42569cfe408f
66244f44efb7908fef3474279ae7d5a54b6e6d05fbbbda272957d28b0b892c5e
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/twentyseventeen/assets/js/skip-link-focus-fix.js?ver=20161114 HTTP/1.1
Host: massolopedia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://massolopedia.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Sun, 27 Nov 2022 15:10:29 GMT
content-type: application/javascript
content-length: 4410
last-modified: Tue, 29 Dec 2020 15:13:31 GMT
etag: "5feb479b-113a"
accept-ranges: bytes
X-Firefox-Spdy: h2
massolopedia.it/wp-content/themes/twentyseventeen/assets/js/navigation.js?ver=20161203
79.8.125.120200 OK 7.5 kB URL HTTP/2 massolopedia.it/wp-content/themes/twentyseventeen/assets/js/navigation.js?ver=20161203
IP 79.8.125.120:0
File type assembler source, ASCII text
Hash aecee0197fdea4e4872a7eb772ce62c3
f9aab18bfc8cb3066d0a94a3a6148630f4e96d64
bcdc6f58243767b9ad1a10d40814dd55791573588f6b59676ad994c8e149b987
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/twentyseventeen/assets/js/navigation.js?ver=20161203 HTTP/1.1
Host: massolopedia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://massolopedia.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Sun, 27 Nov 2022 15:10:29 GMT
content-type: application/javascript
content-length: 7481
last-modified: Tue, 29 Dec 2020 15:13:31 GMT
etag: "5feb479b-1d39"
accept-ranges: bytes
X-Firefox-Spdy: h2
massolopedia.it/wp-content/themes/twentyseventeen/assets/js/global.js?ver=20190121
79.8.125.120200 OK 12 kB URL HTTP/2 massolopedia.it/wp-content/themes/twentyseventeen/assets/js/global.js?ver=20190121
IP 79.8.125.120:0
Hash 9149c3b791a026cd9d89fb9222775c4d
aa709e0d04bdc6111e21b0f0ac0f9ba9b2eba781
10af28fa332f4e8004ccfd78461c5fba917e4ca88ecf722a21a5cc54c22bef97
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/twentyseventeen/assets/js/global.js?ver=20190121 HTTP/1.1
Host: massolopedia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://massolopedia.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Sun, 27 Nov 2022 15:10:29 GMT
content-type: application/javascript
content-length: 11481
last-modified: Tue, 29 Dec 2020 15:13:31 GMT
etag: "5feb479b-2cd9"
accept-ranges: bytes
X-Firefox-Spdy: h2
massolopedia.it/wp-content/themes/twentyseventeen/assets/js/jquery.scrollTo.js?ver=2.1.2
79.8.125.120200 OK 9.6 kB URL HTTP/2 massolopedia.it/wp-content/themes/twentyseventeen/assets/js/jquery.scrollTo.js?ver=2.1.2
IP 79.8.125.120:0
Hash c806ad86c18b3342d2406495336984de
34e9d936563f765ba98e3472e196edd7ff70d35f
db3bbfa0a7235de93f611d973bfcac5d9f758e436521cac65336e6bd9c8b8d83
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/twentyseventeen/assets/js/jquery.scrollTo.js?ver=2.1.2 HTTP/1.1
Host: massolopedia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://massolopedia.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Sun, 27 Nov 2022 15:10:29 GMT
content-type: application/javascript
content-length: 9563
last-modified: Tue, 29 Dec 2020 15:13:31 GMT
etag: "5feb479b-255b"
accept-ranges: bytes
X-Firefox-Spdy: h2
massolopedia.it/wp-content/plugins/custom-facebook-feed/assets/js/cff-scripts.js?ver=2.18.2
79.8.125.120200 OK 55 kB URL HTTP/2 massolopedia.it/wp-content/plugins/custom-facebook-feed/assets/js/cff-scripts.js?ver=2.18.2
IP 79.8.125.120:0
File type Unicode text, UTF-8 text, with very long lines (4245), with CRLF, LF line terminators
Hash 1fae3186dc562c26e3980c9afaffc2b2
5a3f689deaaa7be43528b211d4dea96fa0fc973e
e4e196b5b7f3b948628be60046f7d2fdd0efd4ce9a9c4d1fa24fd5adb3e3dd89
GET /wp-content/plugins/custom-facebook-feed/assets/js/cff-scripts.js?ver=2.18.2 HTTP/1.1
Host: massolopedia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://massolopedia.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Sun, 27 Nov 2022 15:10:29 GMT
content-type: application/javascript
content-length: 55105
last-modified: Sun, 31 Jan 2021 22:41:34 GMT
etag: "6017321e-d741"
accept-ranges: bytes
X-Firefox-Spdy: h2
massolopedia.it/wp-content/plugins/social-icons-widget-by-wpzoom/assets/js/social-icons-widget-frontend.js?ver=1611179929
79.8.125.120200 OK 4.6 kB URL HTTP/2 massolopedia.it/wp-content/plugins/social-icons-widget-by-wpzoom/assets/js/social-icons-widget-frontend.js?ver=1611179929
IP 79.8.125.120:0
Hash b8d3fa91d00309baadb93eadeb9284cb
a46848fbac8dc21686c01733484fec55f27ff771
42f63dd1890d1e64611df6a1b104ba19532c0a75caf8c50339912b89d5a8ff03
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/social-icons-widget-by-wpzoom/assets/js/social-icons-widget-frontend.js?ver=1611179929 HTTP/1.1
Host: massolopedia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://massolopedia.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Sun, 27 Nov 2022 15:10:30 GMT
content-type: application/javascript
content-length: 4587
last-modified: Wed, 20 Jan 2021 21:58:49 GMT
etag: "6008a799-11eb"
accept-ranges: bytes
X-Firefox-Spdy: h2
massolopedia.it/wp-content/plugins/monarch/core/admin/js/common.js?ver=3.20.2
79.8.125.120200 OK 5.1 kB URL HTTP/2 massolopedia.it/wp-content/plugins/monarch/core/admin/js/common.js?ver=3.20.2
IP 79.8.125.120:0
Hash 04fae81564522d178f711dcbed1f1335
770960fd4f83ab155c0a74f39390cc31ac4e3d2d
90eec86fae2bc2cdcb48c9041a077c2928ad735198fbf4cdb75c7666a7ff2ad9
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/monarch/core/admin/js/common.js?ver=3.20.2 HTTP/1.1
Host: massolopedia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://massolopedia.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Sun, 27 Nov 2022 15:10:30 GMT
content-type: application/javascript
content-length: 5087
last-modified: Wed, 12 Dec 2018 17:55:04 GMT
etag: "5c114b78-13df"
accept-ranges: bytes
X-Firefox-Spdy: h2
massolopedia.it/
79.8.125.120200 OK 176 kB IP 79.8.125.120:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (8047), with CRLF, LF line terminators
Size 176 kB (175517 bytes)
Hash 247768024997071ac4c3199fd94d256a
e6353f21d8881127f8be8288c6862a7ec7c5f33a
768042697a69e4480e05004dbae161271e64c3d2e1421eef0f18ea7f2f0a68aa
Analyzer Verdict Alert fortinet Malware
GET / HTTP/1.1
Host: massolopedia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
server: nginx/1.20.1
date: Sun, 27 Nov 2022 15:10:29 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/7.4.33
link: <https://massolopedia.it/wp-json/>; rel="https://api.w.org/", <https://massolopedia.it/wp-json/wp/v2/pages/7401>; rel="alternate"; type="application/json", <https://massolopedia.it/>; rel=shortlink
X-Firefox-Spdy: h2
massolopedia.it/wp-content/plugins/js_composer/assets/lib/bower/skrollr/dist/skrollr.min.js?ver=6.5.0
79.8.125.120200 OK 17 kB URL HTTP/2 massolopedia.it/wp-content/plugins/js_composer/assets/lib/bower/skrollr/dist/skrollr.min.js?ver=6.5.0
IP 79.8.125.120:0
File type ASCII text, with very long lines (12500)
Hash 549117355c8d17df550a68b0bcba7b15
c6afd5041fea6f5332d1de9bc0f10469f3ce4448
c3b69833f7b5b983ee479078d1e54853dcbe4907a8f52ebc3cf5743e34b1f0b1
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/js_composer/assets/lib/bower/skrollr/dist/skrollr.min.js?ver=6.5.0 HTTP/1.1
Host: massolopedia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://massolopedia.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Sun, 27 Nov 2022 15:10:30 GMT
content-type: application/javascript
content-length: 16561
last-modified: Wed, 16 Dec 2020 11:24:26 GMT
etag: "5fd9ee6a-40b1"
accept-ranges: bytes
X-Firefox-Spdy: h2
massolopedia.it/wp-content/plugins/instagram-feed/js/sbi-scripts.min.js?ver=2.7
79.8.125.120200 OK 29 kB URL HTTP/2 massolopedia.it/wp-content/plugins/instagram-feed/js/sbi-scripts.min.js?ver=2.7
IP 79.8.125.120:0
File type ASCII text, with very long lines (25166)
Hash 16ff080d9c59955040906a087e006393
8bc8dacf866b9a4040a48a652d2f50a74724f426
ec6f00eeaacddb0fc1d27b7df462f0087986777c97fa9c448883e579728aa1ef
GET /wp-content/plugins/instagram-feed/js/sbi-scripts.min.js?ver=2.7 HTTP/1.1
Host: massolopedia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://massolopedia.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Sun, 27 Nov 2022 15:10:30 GMT
content-type: application/javascript
content-length: 28871
last-modified: Thu, 21 Jan 2021 21:36:24 GMT
etag: "6009f3d8-70c7"
accept-ranges: bytes
X-Firefox-Spdy: h2
massolopedia.it/wp-content/plugins/instagram-feed/img/placeholder.png
79.8.125.120200 OK 176 B URL HTTP/2 massolopedia.it/wp-content/plugins/instagram-feed/img/placeholder.png
IP 79.8.125.120:0
File type PNG image data, 1000 x 560, 1-bit colormap, non-interlaced\012- data
Hash a5443c5bb9bd40f1b1e6652eedce9925
aefb6c761d953a69c8b7ee7d98cad00545d74364
f623564c53c2e08780c064012cfbdbde0a80ee56816f4d5d3d52c46ed285cb95
GET /wp-content/plugins/instagram-feed/img/placeholder.png HTTP/1.1
Host: massolopedia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://massolopedia.it/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Sun, 27 Nov 2022 15:10:29 GMT
content-type: image/png
content-length: 176
last-modified: Thu, 21 Jan 2021 21:36:24 GMT
etag: "6009f3d8-b0"
accept-ranges: bytes
X-Firefox-Spdy: h2
massolopedia.it/wp-content/plugins/simply-gallery-block/plugins/pgc_sgb_lightbox.min.js?ver=1.8.3
79.8.125.120200 OK 186 kB URL HTTP/2 massolopedia.it/wp-content/plugins/simply-gallery-block/plugins/pgc_sgb_lightbox.min.js?ver=1.8.3
IP 79.8.125.120:0
File type Unicode text, UTF-8 text, with very long lines (65532), with no line terminators
Size 186 kB (185632 bytes)
Hash fc2c93699f4c446994a65c8b69885070
ff8c27c6310dcf038db5dd6de4b042d692cf4dcc
3d2d90214c6bbf082c05b41b9902bc40b3674d4384d66d7ebe7db892db42bfea
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/simply-gallery-block/plugins/pgc_sgb_lightbox.min.js?ver=1.8.3 HTTP/1.1
Host: massolopedia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://massolopedia.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Sun, 27 Nov 2022 15:10:29 GMT
content-type: application/javascript
content-length: 185632
last-modified: Fri, 05 Feb 2021 08:01:52 GMT
etag: "601cfb70-2d520"
accept-ranges: bytes
X-Firefox-Spdy: h2
massolopedia.it/wp-content/plugins/js_composer/assets/css/js_composer.min.css?ver=6.5.0
79.8.125.120200 OK 485 kB URL HTTP/2 massolopedia.it/wp-content/plugins/js_composer/assets/css/js_composer.min.css?ver=6.5.0
IP 79.8.125.120:0
File type ASCII text, with very long lines (65358)
Size 485 kB (485416 bytes)
Hash 2fcf15b9242ca9cbf091c45419959fdb
52e744ee97e3612e790305643ab5046201831618
f1dbbc4be8d88ae17466b1d7a8fd7bf4f9d9b5ab492719cdea721d82cecb738d
GET /wp-content/plugins/js_composer/assets/css/js_composer.min.css?ver=6.5.0 HTTP/1.1
Host: massolopedia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://massolopedia.it/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Sun, 27 Nov 2022 15:10:29 GMT
content-type: text/css
content-length: 485416
last-modified: Wed, 16 Dec 2020 11:24:24 GMT
etag: "5fd9ee68-76828"
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash e9895464b828d538dc654c678c82b181
af5791cd48761cb3f3f979b481c23e1508692823
c93a71d276aa3f386bef66ed2b4d69e041cccc9a4df5024b14d54ce2569948f0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 15:10:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/librefranklin/v13/jizDREVItHgc8qDIbSTKq4XkRiUf2zc.woff2
216.58.207.195200 OK 27 kB URL HTTP/2 fonts.gstatic.com/s/librefranklin/v13/jizDREVItHgc8qDIbSTKq4XkRiUf2zc.woff2
IP 216.58.207.195:0
File type Web Open Font Format (Version 2), TrueType, length 27268, version 1.0\012- data
Hash cd83836443d658985c464d7021aa3e83
83a2915021f30c4ed54752b02e0c999e3c56798c
0c5b68b3ae23054815d89c5a2230ad7edf2d4b68732b4463d6be74cacb974055
GET /s/librefranklin/v13/jizDREVItHgc8qDIbSTKq4XkRiUf2zc.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://massolopedia.it
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 27268
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 21 Nov 2022 20:02:30 GMT
expires: Tue, 21 Nov 2023 20:02:30 GMT
cache-control: public, max-age=31536000
age: 500890
last-modified: Mon, 11 Jul 2022 18:56:23 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash e9895464b828d538dc654c678c82b181
af5791cd48761cb3f3f979b481c23e1508692823
c93a71d276aa3f386bef66ed2b4d69e041cccc9a4df5024b14d54ce2569948f0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 15:10:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash e9895464b828d538dc654c678c82b181
af5791cd48761cb3f3f979b481c23e1508692823
c93a71d276aa3f386bef66ed2b4d69e041cccc9a4df5024b14d54ce2569948f0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 15:10:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
216.58.207.195200 OK 45 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP 216.58.207.195:0
File type Web Open Font Format (Version 2), TrueType, length 44856, version 1.0\012- data
Hash 565ce506190ad3af920b40baf1794cec
ad3cba5d06100e09449a864d3b5e58403b478b3d
8778e9af2422858d7052ff9a0f3c12c08ae976bdd6e0316db144cd5579cd97db
GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://massolopedia.it
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 44856
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 24 Nov 2022 05:42:51 GMT
expires: Fri, 24 Nov 2023 05:42:51 GMT
cache-control: public, max-age=31536000
age: 293269
last-modified: Mon, 15 Aug 2022 18:20:18 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash aebda342a81ad83f60d2523f54ccda67
e590d9326e4a283e0929a8ffccb13cc4308af0e6
bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2372
Expires: Sun, 27 Nov 2022 15:50:12 GMT
Date: Sun, 27 Nov 2022 15:10:40 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash e9895464b828d538dc654c678c82b181
af5791cd48761cb3f3f979b481c23e1508692823
c93a71d276aa3f386bef66ed2b4d69e041cccc9a4df5024b14d54ce2569948f0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 15:10:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash aebda342a81ad83f60d2523f54ccda67
e590d9326e4a283e0929a8ffccb13cc4308af0e6
bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2372
Expires: Sun, 27 Nov 2022 15:50:12 GMT
Date: Sun, 27 Nov 2022 15:10:40 GMT
Connection: keep-alive
fonts.gstatic.com/s/librefranklin/v13/jizBREVItHgc8qDIbSTKq4XkRiUa6zUTjg.woff2
216.58.207.195200 OK 31 kB URL HTTP/2 fonts.gstatic.com/s/librefranklin/v13/jizBREVItHgc8qDIbSTKq4XkRiUa6zUTjg.woff2
IP 216.58.207.195:0
File type Web Open Font Format (Version 2), TrueType, length 30628, version 1.0\012- data
Hash 382038c99f2fe2d8c483a68cfd9d1ce1
e370f2cbdd640ccff2cf6d4fb933f72e9b9260c2
efe16fd64edb961d670fd35ee4a211ec22cb9e2fa6850cbbf13464dace1b39e2
GET /s/librefranklin/v13/jizBREVItHgc8qDIbSTKq4XkRiUa6zUTjg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://massolopedia.it
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 30628
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 24 Nov 2022 05:45:38 GMT
expires: Fri, 24 Nov 2023 05:45:38 GMT
cache-control: public, max-age=31536000
age: 293102
last-modified: Mon, 11 Jul 2022 18:55:36 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/actor/v17/wEOzEBbCkc5cO0ejVSk.woff2
216.58.207.195200 OK 22 kB URL HTTP/2 fonts.gstatic.com/s/actor/v17/wEOzEBbCkc5cO0ejVSk.woff2
IP 216.58.207.195:0
File type Web Open Font Format (Version 2), TrueType, length 21976, version 1.0\012- data
Hash 7ee7f470152787952958d6adfa07b2ac
14a09075b2cbec9ff65302de9d634f9011f70e53
b31aaefa522d67846638fa4181bbb22375bd0cb1beb37d514609c3821953161a
GET /s/actor/v17/wEOzEBbCkc5cO0ejVSk.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://massolopedia.it
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 21976
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 19:01:16 GMT
expires: Thu, 23 Nov 2023 19:01:16 GMT
cache-control: public, max-age=31536000
age: 331764
last-modified: Tue, 19 Apr 2022 19:22:29 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8197b890-dd48-403d-9c61-3406a67e2578.jpeg
34.120.237.76200 OK 3.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8197b890-dd48-403d-9c61-3406a67e2578.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 48713d6090df316bed8ab2b1e6698d70
767a6fef172a54d7659417d9cb809d955d130562
702a09de59300336419371adafae4185f7ad8bca43dc4e633f748f68feb967c3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8197b890-dd48-403d-9c61-3406a67e2578.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3669
x-amzn-requestid: fb21f001-d5dd-42fa-82ee-0e268f309abf
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cIpZEE_iIAMF2rw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638022a0-31cae26d5588655f49fa75a6;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 02:04:16 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: D9yABEpSQcrZMrQYeT5qOQcm4g4-1KhtVzfMqS54xJ-8LtxEx6Adtg==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 14:49:40 GMT
age: 1260
etag: "767a6fef172a54d7659417d9cb809d955d130562"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F15290721-a62e-49b8-80c6-967680cff24f.jpeg
34.120.237.76200 OK 6.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F15290721-a62e-49b8-80c6-967680cff24f.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f7f16c0f8a8e710210ce77c0e4c1c2a2
590c34be54c9889eec4ff7993e070fda836f711f
4224287ba765da59c877ac4f1dec65accc5bec934b7598d9cbbee669ba4ab12e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F15290721-a62e-49b8-80c6-967680cff24f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6883
x-amzn-requestid: 9e3878c9-1817-427e-b121-969a8cbc7ad8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cL1ySF0tIAMFY4Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638169a8-5143ffea77b70cf67ef60ad7;Sampled=0
x-amzn-remapped-date: Sat, 26 Nov 2022 01:19:36 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: GT3Futv4Ztnl2Og2TQFk5311m92Mv_jfvkIZYJXpjJMdkxSB6MI06g==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 06:42:16 GMT
age: 30504
etag: "590c34be54c9889eec4ff7993e070fda836f711f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Libre+Franklin%3A300%2C300i%2C400%2C400i%2C600%2C600i%2C800%2C800i&subset=latin%2Clatin-ext&display=fallback
142.250.74.10200 OK 11 kB URL HTTP/2 fonts.googleapis.com/css?family=Libre+Franklin%3A300%2C300i%2C400%2C400i%2C600%2C600i%2C800%2C800i&subset=latin%2Clatin-ext&display=fallback
IP 142.250.74.10:0
Hash 9a04177335a197f4461263a9b8c45a43
fda85f2f0158a3b29bd48b92266999fcdcf110f7
cd4928179393f201c14babe341406b3e1883bcbf817db39a9505fd9ff7879534
GET /css?family=Libre+Franklin%3A300%2C300i%2C400%2C400i%2C600%2C600i%2C800%2C800i&subset=latin%2Clatin-ext&display=fallback HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://massolopedia.it/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 27 Nov 2022 15:10:38 GMT
date: Sun, 27 Nov 2022 15:10:38 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash e9895464b828d538dc654c678c82b181
af5791cd48761cb3f3f979b481c23e1508692823
c93a71d276aa3f386bef66ed2b4d69e041cccc9a4df5024b14d54ce2569948f0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 15:10:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa57bc6cf-beaa-443b-9756-cf26e4fe3767.jpeg
34.120.237.76200 OK 7.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa57bc6cf-beaa-443b-9756-cf26e4fe3767.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2212cf75f99dc67fd45db47f7101d754
4b4a8c8e8aeccfff25d2748720dcef8fed287126
7b2d2e302faba8f273b51031fa48b444cb7839733b90e8c9d077ca63637320d8
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa57bc6cf-beaa-443b-9756-cf26e4fe3767.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6954
x-amzn-requestid: 94a02687-72f2-4796-a7ea-d3f28b412566
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b1jHpGBVIAMFsSg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63787efd-22666b18283ae59b1348bf47;Sampled=0
x-amzn-remapped-date: Sat, 19 Nov 2022 07:00:13 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: feZayJeKq9jWHQ-rjutNr6buIjLVeIdY0A_ZeGo6NKgoQ6BBT3XQaw==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 0906d4887f6625f4a4467d8d4fd268d2.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 08:55:33 GMT
age: 22507
etag: "4b4a8c8e8aeccfff25d2748720dcef8fed287126"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F881a33ae-e81b-4603-85d9-a2242b17be66.jpeg
34.120.237.76200 OK 4.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F881a33ae-e81b-4603-85d9-a2242b17be66.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash cc0a257323f882caff067adb86d906e4
cedf2f21be7cd366bd46055b62b5513db3011dfc
c16a9296d5e840a468fef7fb2764b9f7d4b3131d7ade2ce4999de1eead5469e0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F881a33ae-e81b-4603-85d9-a2242b17be66.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4803
x-amzn-requestid: 80f7f1c8-0316-4181-83ac-2787b1ae825f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cOo4iFHoIAMF2-g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63828836-2c0a081b07e0785b4350c10c;Sampled=0
x-amzn-remapped-date: Sat, 26 Nov 2022 21:42:14 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: AVwDLlKoy5pc9NNuR_OakMB0ONGAoO-k2AKwV--b2sjiaqYSKAWlZg==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google
date: Sat, 26 Nov 2022 21:51:37 GMT
age: 62343
etag: "cedf2f21be7cd366bd46055b62b5513db3011dfc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F34752db1-0be8-4784-9fa0-41e828e40e06.jpeg
34.120.237.76200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F34752db1-0be8-4784-9fa0-41e828e40e06.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1db6041a0bdb2319ae85afcc30caaeec
3b0ec6a7188dadf986f72fda8110296d9abd6f35
05f1f9b7834e7268dc34e3233434217f58cb68ee43a403cd08d0bb0ab4f37815
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F34752db1-0be8-4784-9fa0-41e828e40e06.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13049
x-amzn-requestid: 2755f206-af23-4597-b4b9-7dae5001d6be
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cBsvpHDJoAMFhFQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637d5b30-600008f573bd7e0024585eb1;Sampled=0
x-amzn-remapped-date: Tue, 22 Nov 2022 23:28:48 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: MA_O50Lu6RRAFJpzXmVXhkxvYazdX5Lhk2Qa5k9fYUhBta-IWpVT1g==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 01:46:48 GMT
age: 48232
etag: "3b0ec6a7188dadf986f72fda8110296d9abd6f35"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Open+Sans:400,700
142.250.74.10200 OK 16 kB URL HTTP/2 fonts.googleapis.com/css?family=Open+Sans:400,700
IP 142.250.74.10:0
Hash eda53b1e87f63126ba668402ed7d6ead
64f7b6f0e51cfa33c719235965fe0da65381b0c2
302e66730aa21c70117d9492083bba1426daabedf8d1ec67b593e99682feab19
GET /css?family=Open+Sans:400,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://massolopedia.it/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 27 Nov 2022 15:10:38 GMT
date: Sun, 27 Nov 2022 15:10:38 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
massolopedia.it/wp-content/uploads/2020/12/WhatsApp-Image-2020-12-06-at-00.15.423-1536x585.jpeg
79.8.125.120200 OK 91 kB URL HTTP/2 massolopedia.it/wp-content/uploads/2020/12/WhatsApp-Image-2020-12-06-at-00.15.423-1536x585.jpeg
IP 79.8.125.120:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 1536x585, components 3\012- data
Hash 360f38af4a2b6d3bfae09c8e99addce9
7607ab3298a4e13fbaa429cf0142031f160f817a
6b3be994dfa7d303bf58c883d4f856539e88730ce8d79eb08ba2d65c59a9bb7d
Analyzer Verdict Alert fortinet Malware
GET /wp-content/uploads/2020/12/WhatsApp-Image-2020-12-06-at-00.15.423-1536x585.jpeg HTTP/1.1
Host: massolopedia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://massolopedia.it/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Sun, 27 Nov 2022 15:10:31 GMT
content-type: image/jpeg
content-length: 91314
last-modified: Tue, 29 Dec 2020 15:14:10 GMT
etag: "5feb47c2-164b2"
accept-ranges: bytes
X-Firefox-Spdy: h2
massolopedia.it/wp-content/uploads/sb-instagram-feed-images/171097571_494796751702305_1195948330190453678_nlow.jpg
79.8.125.120200 OK 15 kB URL HTTP/2 massolopedia.it/wp-content/uploads/sb-instagram-feed-images/171097571_494796751702305_1195948330190453678_nlow.jpg
IP 79.8.125.120:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 320x180, components 3\012- data
Hash ee2a827e32b02d64579ce4ff7232da33
b9e347ea24fd12dcbe24215e826bfabb1a08e749
bb9ce27f23f78b8c486d2dbeab1274c7ffa2dfbd1a84c60ce22d33da56474f5f
GET /wp-content/uploads/sb-instagram-feed-images/171097571_494796751702305_1195948330190453678_nlow.jpg HTTP/1.1
Host: massolopedia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://massolopedia.it/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Sun, 27 Nov 2022 15:10:31 GMT
content-type: image/jpeg
content-length: 15324
last-modified: Sat, 10 Apr 2021 16:01:59 GMT
etag: "6071cbf7-3bdc"
accept-ranges: bytes
X-Firefox-Spdy: h2
massolopedia.it/wp-content/uploads/sb-instagram-feed-images/167444654_506082677228698_2959398462672163011_nlow.jpg
79.8.125.120200 OK 20 kB URL HTTP/2 massolopedia.it/wp-content/uploads/sb-instagram-feed-images/167444654_506082677228698_2959398462672163011_nlow.jpg
IP 79.8.125.120:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 320x221, components 3\012- data
Hash 5af8fbe3301d42e21c97e724e39de926
c77529c851ff26beb260b4400f91ec9b62ea6610
f73727da7ca713442388f4af384b6fe1fa8a38d2bd0b0d431770e60b7a2beb09
GET /wp-content/uploads/sb-instagram-feed-images/167444654_506082677228698_2959398462672163011_nlow.jpg HTTP/1.1
Host: massolopedia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://massolopedia.it/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Sun, 27 Nov 2022 15:10:31 GMT
content-type: image/jpeg
content-length: 19670
last-modified: Wed, 31 Mar 2021 07:07:10 GMT
etag: "60641f9e-4cd6"
accept-ranges: bytes
X-Firefox-Spdy: h2
massolopedia.it/wp-content/uploads/sb-instagram-feed-images/166770233_3976310289074331_7137690669536338721_nlow.jpg
79.8.125.120200 OK 27 kB URL HTTP/2 massolopedia.it/wp-content/uploads/sb-instagram-feed-images/166770233_3976310289074331_7137690669536338721_nlow.jpg
IP 79.8.125.120:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 320x400, components 3\012- data
Hash d9ae6dd120998b7cd8baa688f2d16d52
261eac81b24122ad3c66771cd7b8e722b10aeab9
980f9deae6ae9ee23990a34675799d0ec35fd8e5673b31165767eb5ec3ebca97
GET /wp-content/uploads/sb-instagram-feed-images/166770233_3976310289074331_7137690669536338721_nlow.jpg HTTP/1.1
Host: massolopedia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://massolopedia.it/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Sun, 27 Nov 2022 15:10:31 GMT
content-type: image/jpeg
content-length: 27211
last-modified: Wed, 31 Mar 2021 06:01:37 GMT
etag: "60641041-6a4b"
accept-ranges: bytes
X-Firefox-Spdy: h2
massolopedia.it/wp-content/uploads/sb-instagram-feed-images/166812665_2155911887885318_7306126549087762156_nlow.jpg
79.8.125.120200 OK 24 kB URL HTTP/2 massolopedia.it/wp-content/uploads/sb-instagram-feed-images/166812665_2155911887885318_7306126549087762156_nlow.jpg
IP 79.8.125.120:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 320x400, components 3\012- data
Hash d2711dcdbe1933fe11e6d35b61fc51eb
521cffda1a1562760c9a752ad899c3bb40c5514d
82baf84fc1036158c98255cc680ee470399f7b048deadc4775b6f955f242340e
GET /wp-content/uploads/sb-instagram-feed-images/166812665_2155911887885318_7306126549087762156_nlow.jpg HTTP/1.1
Host: massolopedia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://massolopedia.it/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Sun, 27 Nov 2022 15:10:31 GMT
content-type: image/jpeg
content-length: 23904
last-modified: Wed, 31 Mar 2021 06:01:41 GMT
etag: "60641045-5d60"
accept-ranges: bytes
X-Firefox-Spdy: h2
massolopedia.it/wp-content/uploads/sb-instagram-feed-images/167422168_271842127931841_2897285720652900421_nlow.jpg
79.8.125.120200 OK 33 kB URL HTTP/2 massolopedia.it/wp-content/uploads/sb-instagram-feed-images/167422168_271842127931841_2897285720652900421_nlow.jpg
IP 79.8.125.120:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 320x400, components 3\012- data
Hash c0692860ff63f09bebf689c0d1b4b7cc
f12b10b00cc5a7757ee7ce32c04ff75e5cded2d5
8d0e0be7aeaf54f18f63a7b8ad4b1ffaa6f65b620727ba3895c36b0ddd2a2818
GET /wp-content/uploads/sb-instagram-feed-images/167422168_271842127931841_2897285720652900421_nlow.jpg HTTP/1.1
Host: massolopedia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://massolopedia.it/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Sun, 27 Nov 2022 15:10:31 GMT
content-type: image/jpeg
content-length: 32605
last-modified: Wed, 31 Mar 2021 06:01:43 GMT
etag: "60641047-7f5d"
accept-ranges: bytes
X-Firefox-Spdy: h2
massolopedia.it/wp-content/uploads/sb-instagram-feed-images/167030889_459710871748879_7962597203034395374_nlow.jpg
79.8.125.120200 OK 13 kB URL HTTP/2 massolopedia.it/wp-content/uploads/sb-instagram-feed-images/167030889_459710871748879_7962597203034395374_nlow.jpg
IP 79.8.125.120:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 320x180, components 3\012- data
Hash c9ebf538e7d9c9352570bd373fcb3e84
00ae584d743fcd3047e7361697ecb965cf06d8d0
8796b64a6eb42f7ff8551cfc2d17bcc2108a3b8321f4986f9d74e34cf2670de6
GET /wp-content/uploads/sb-instagram-feed-images/167030889_459710871748879_7962597203034395374_nlow.jpg HTTP/1.1
Host: massolopedia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://massolopedia.it/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Sun, 27 Nov 2022 15:10:31 GMT
content-type: image/jpeg
content-length: 12863
last-modified: Wed, 31 Mar 2021 06:01:44 GMT
etag: "60641048-323f"
accept-ranges: bytes
X-Firefox-Spdy: h2
massolopedia.it/wp-content/uploads/sb-instagram-feed-images/164455000_280031863706649_1026704044142530082_nlow.jpg
79.8.125.120200 OK 13 kB URL HTTP/2 massolopedia.it/wp-content/uploads/sb-instagram-feed-images/164455000_280031863706649_1026704044142530082_nlow.jpg
IP 79.8.125.120:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 320x180, components 3\012- data
Hash 98a593e141c78fba36b9e2cc4250bded
b35545f457180bf98a599d43ed7c000e9a1108b4
73235bbf87e1f3392b2d701731bc250d5c74f4c307d87c4dfe81d38ac352caf4
GET /wp-content/uploads/sb-instagram-feed-images/164455000_280031863706649_1026704044142530082_nlow.jpg HTTP/1.1
Host: massolopedia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://massolopedia.it/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Sun, 27 Nov 2022 15:10:31 GMT
content-type: image/jpeg
content-length: 13031
last-modified: Sat, 27 Mar 2021 08:02:03 GMT
etag: "605ee67b-32e7"
accept-ranges: bytes
X-Firefox-Spdy: h2
massolopedia.it/wp-content/uploads/sb-instagram-feed-images/175260004_487642265612252_6927863729489630067_nlow.jpg
79.8.125.120200 OK 17 kB URL HTTP/2 massolopedia.it/wp-content/uploads/sb-instagram-feed-images/175260004_487642265612252_6927863729489630067_nlow.jpg
IP 79.8.125.120:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 320x180, components 3\012- data
Hash 919e1fc1c97d93180b1d004c2c768099
f1f7d9320dc4c78f4bdbf459d8119b9b30153d0d
eda30b837093a17a7984470f7857c5eae51eff335a1062018125daab44adc6bc
GET /wp-content/uploads/sb-instagram-feed-images/175260004_487642265612252_6927863729489630067_nlow.jpg HTTP/1.1
Host: massolopedia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://massolopedia.it/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Sun, 27 Nov 2022 15:10:31 GMT
content-type: image/jpeg
content-length: 16699
last-modified: Sun, 18 Apr 2021 07:01:55 GMT
etag: "607bd963-413b"
accept-ranges: bytes
X-Firefox-Spdy: h2
massolopedia.it/wp-content/uploads/sb-instagram-feed-images/171768447_493164385461400_8202138930843927343_nlow.jpg
79.8.125.120200 OK 25 kB URL HTTP/2 massolopedia.it/wp-content/uploads/sb-instagram-feed-images/171768447_493164385461400_8202138930843927343_nlow.jpg
IP 79.8.125.120:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 320x400, components 3\012- data
Hash 0fcedaba1d610523641795a7c7a5972a
e331d0ff50868bf3d324018ba99f5ee030adb7a3
d99918fa4055f1d6d66f11f6fce0e44a95c7760af453c9469c6d512885f95b33
GET /wp-content/uploads/sb-instagram-feed-images/171768447_493164385461400_8202138930843927343_nlow.jpg HTTP/1.1
Host: massolopedia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://massolopedia.it/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Sun, 27 Nov 2022 15:10:31 GMT
content-type: image/jpeg
content-length: 24727
last-modified: Sun, 11 Apr 2021 05:02:14 GMT
etag: "607282d6-6097"
accept-ranges: bytes
X-Firefox-Spdy: h2
massolopedia.it/wp-content/uploads/sb-instagram-feed-images/170304410_4373504872677841_6891557733529333561_nlow.jpg
79.8.125.120200 OK 38 kB URL HTTP/2 massolopedia.it/wp-content/uploads/sb-instagram-feed-images/170304410_4373504872677841_6891557733529333561_nlow.jpg
IP 79.8.125.120:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 320x400, components 3\012- data
Hash adf4bb74f3fbdb75fe7a6c78c7c81ff3
ad0efbb6fe1d2a103d7f589752e6263f0b81b2b3
1a0ac2d536be76c80396650f992cb1a01b6cd200c63edad1d17498ab42725773
GET /wp-content/uploads/sb-instagram-feed-images/170304410_4373504872677841_6891557733529333561_nlow.jpg HTTP/1.1
Host: massolopedia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://massolopedia.it/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Sun, 27 Nov 2022 15:10:31 GMT
content-type: image/jpeg
content-length: 38529
last-modified: Sat, 10 Apr 2021 16:02:01 GMT
etag: "6071cbf9-9681"
accept-ranges: bytes
X-Firefox-Spdy: h2
massolopedia.it/wp-content/uploads/sb-instagram-feed-images/166433821_2962856524038794_7699547957813832091_nlow.jpg
79.8.125.120200 OK 24 kB URL HTTP/2 massolopedia.it/wp-content/uploads/sb-instagram-feed-images/166433821_2962856524038794_7699547957813832091_nlow.jpg
IP 79.8.125.120:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 320x400, components 3\012- data
Hash b291da836acf1bc5707c63720c6d7145
2b6050f8b7f1af933ecfe4bb7f21948431304d8f
9c25dcd9fe5bdb74a7c08af9331f1c4371510ef938fddf3fc2b9ca0bc6a81635
GET /wp-content/uploads/sb-instagram-feed-images/166433821_2962856524038794_7699547957813832091_nlow.jpg HTTP/1.1
Host: massolopedia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://massolopedia.it/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Sun, 27 Nov 2022 15:10:31 GMT
content-type: image/jpeg
content-length: 24263
last-modified: Wed, 31 Mar 2021 06:01:38 GMT
etag: "60641042-5ec7"
accept-ranges: bytes
X-Firefox-Spdy: h2
massolopedia.it/wp-content/uploads/sb-instagram-feed-images/167502043_233064215172491_2406020756110691594_nlow.jpg
79.8.125.120200 OK 14 kB URL HTTP/2 massolopedia.it/wp-content/uploads/sb-instagram-feed-images/167502043_233064215172491_2406020756110691594_nlow.jpg
IP 79.8.125.120:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 320x180, components 3\012- data
Hash 5829fba936536de886bdeb450aa638cc
4fd2539c22285e538314792c998ed9fc652bb567
5d687180301f5b36df467f2de1eaedf9aee01845429eb5f66a74dbd66e071620
GET /wp-content/uploads/sb-instagram-feed-images/167502043_233064215172491_2406020756110691594_nlow.jpg HTTP/1.1
Host: massolopedia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://massolopedia.it/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Sun, 27 Nov 2022 15:10:31 GMT
content-type: image/jpeg
content-length: 14017
last-modified: Wed, 31 Mar 2021 06:01:40 GMT
etag: "60641044-36c1"
accept-ranges: bytes
X-Firefox-Spdy: h2
massolopedia.it/wp-content/uploads/2019/05/roma_1.jpg
79.8.125.120200 OK 642 kB URL HTTP/2 massolopedia.it/wp-content/uploads/2019/05/roma_1.jpg
IP 79.8.125.120:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x1080, components 3\012- data
Size 642 kB (642374 bytes)
Hash c00dddd4b6e1d1c26db75e9c4be62f21
840372bc7c448874aafcf9354738897feb683867
8b8a96290aabbe5a841359a46d61e213ebc343510596dbd35855cf7b9f447330
GET /wp-content/uploads/2019/05/roma_1.jpg HTTP/1.1
Host: massolopedia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://massolopedia.it/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Sun, 27 Nov 2022 15:10:31 GMT
content-type: image/jpeg
content-length: 642374
last-modified: Tue, 29 Dec 2020 15:14:08 GMT
etag: "5feb47c0-9cd46"
accept-ranges: bytes
X-Firefox-Spdy: h2
massolopedia.it/wp-content/uploads/2019/04/BELLEZZA.jpg?id=7430
79.8.125.120200 OK 700 kB URL HTTP/2 massolopedia.it/wp-content/uploads/2019/04/BELLEZZA.jpg?id=7430
IP 79.8.125.120:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x1232, components 3\012- data
Size 700 kB (700433 bytes)
Hash b0e7848364ebd8e879620ccd5eecd9d7
6846e590615a98643c7d936988e24785e0c598bc
6afd40698885b4322640e5ecbb921492d37466d3891b005099ac3136b02cbc3a
Analyzer Verdict Alert fortinet Malware
GET /wp-content/uploads/2019/04/BELLEZZA.jpg?id=7430 HTTP/1.1
Host: massolopedia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://massolopedia.it/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Sun, 27 Nov 2022 15:10:31 GMT
content-type: image/jpeg
content-length: 700433
last-modified: Tue, 29 Dec 2020 15:13:59 GMT
etag: "5feb47b7-ab011"
accept-ranges: bytes
X-Firefox-Spdy: h2
massolopedia.it/wp-content/uploads/2019/05/roma_3.jpg
79.8.125.120200 OK 565 kB URL HTTP/2 massolopedia.it/wp-content/uploads/2019/05/roma_3.jpg
IP 79.8.125.120:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x1080, components 3\012- data
Size 565 kB (564902 bytes)
Hash 0749166f8abb1558eb8600efeac835bb
fd37287db427e7ef830e706eca6d44b585f6746c
88106a67bbc0d1ed693e04c1cc2136863361547b82693c0c771527e1948a361f
GET /wp-content/uploads/2019/05/roma_3.jpg HTTP/1.1
Host: massolopedia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://massolopedia.it/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Sun, 27 Nov 2022 15:10:31 GMT
content-type: image/jpeg
content-length: 564902
last-modified: Tue, 29 Dec 2020 15:14:09 GMT
etag: "5feb47c1-89ea6"
accept-ranges: bytes
X-Firefox-Spdy: h2
massolopedia.it/wp-content/uploads/2019/05/roma_7.jpg
79.8.125.120200 OK 504 kB URL HTTP/2 massolopedia.it/wp-content/uploads/2019/05/roma_7.jpg
IP 79.8.125.120:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x1080, components 3\012- data
Size 504 kB (503647 bytes)
Hash 46280e49290dab1249d915928f419ca4
ba1b970b59dd77df3ae8761754b1a5f7753a4fd2
6d0a7b4cc84ee02545036624e24a8d46d5e44af4cb9415b04c03e991014640ce
GET /wp-content/uploads/2019/05/roma_7.jpg HTTP/1.1
Host: massolopedia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://massolopedia.it/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Sun, 27 Nov 2022 15:10:31 GMT
content-type: image/jpeg
content-length: 503647
last-modified: Tue, 29 Dec 2020 15:14:07 GMT
etag: "5feb47bf-7af5f"
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 770555aa8a0a52c611bafb289ca8a650
62504cadc49747f328e3c31ad3aa7a740043072c
6317c8530220392b1339be640b8c1181c468ff8e3f3d1d5692b39cb32404216f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 15:10:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
massolopedia.it/wp-admin/admin-ajax.php
79.8.125.120200 OK 20 kB URL HTTP/2 massolopedia.it/wp-admin/admin-ajax.php
IP 79.8.125.120:0
Hash 3a9ae92391c7486303c0c3a6b16c600a
fbe789755b742cc6028dcb232ae64cf0368ea8ae
789743f13ed6278703a27103f6795280a81b1a8dfbfa1253e0be4d669beceb11
Analyzer Verdict Alert fortinet Malware
POST /wp-admin/admin-ajax.php HTTP/1.1
Host: massolopedia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 210
Origin: https://massolopedia.it
Connection: keep-alive
Referer: https://massolopedia.it/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Sun, 27 Nov 2022 15:10:31 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/7.4.33
access-control-allow-origin: https://massolopedia.it
access-control-allow-credentials: true
x-robots-tag: noindex
x-content-type-options: nosniff
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 770555aa8a0a52c611bafb289ca8a650
62504cadc49747f328e3c31ad3aa7a740043072c
6317c8530220392b1339be640b8c1181c468ff8e3f3d1d5692b39cb32404216f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 15:10:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
massolopedia.it/wp-admin/admin-ajax.php
79.8.125.120200 OK 7.4 kB URL HTTP/2 massolopedia.it/wp-admin/admin-ajax.php
IP 79.8.125.120:0
Hash b13e33f776b972f1bdce2aaa99bc3296
76c420cde560cccc8ef2a16d8858ed11d26c5364
54c2261b501eca193df9020b814e2e1f098f80a9428bb4d926535657afc8407e
Analyzer Verdict Alert fortinet Malware
POST /wp-admin/admin-ajax.php HTTP/1.1
Host: massolopedia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 210
Origin: https://massolopedia.it
Connection: keep-alive
Referer: https://massolopedia.it/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Sun, 27 Nov 2022 15:10:31 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/7.4.33
access-control-allow-origin: https://massolopedia.it
access-control-allow-credentials: true
x-robots-tag: noindex
x-content-type-options: nosniff
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 18db75b0e5b6926f1dfadc75d7d3307b
ab815db60a45201f18402ecff5972a885be66ae6
792280128f223d23cece87293930d0170b67641286845c3442832c7313a4cde4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "792280128F223D23CECE87293930D0170B67641286845C3442832C7313A4CDE4"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13583
Expires: Sun, 27 Nov 2022 18:57:05 GMT
Date: Sun, 27 Nov 2022 15:10:42 GMT
Connection: keep-alive
s10.histats.com/js15_as.js
46.105.201.240200 OK 4.4 kB URL HTTP/2 s10.histats.com/js15_as.js
IP 46.105.201.240:0
File type HTML document, ASCII text, with very long lines (11440), with no line terminators
Hash ed192092c129db6123a3397855f42619
067e9b8e26cf6246eb84c6b9cf3da0c192ce7b3e
998fff486a7fb38b6ed445edc36c9b317b70950cd39efcf4012ca641312fcee1
GET /js15_as.js HTTP/1.1
Host: s10.histats.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://massolopedia.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 27 Nov 2022 15:06:48 GMT
etag: "-375139978"
last-modified: Thu, 16 Apr 2020 10:44:16 GMT
x-request-id: 152439009
content-type: application/javascript; charset=UTF-8
content-encoding: br
x-cdn-pop: sbg
x-cdn-pop-ip: 137.74.120.0/27
x-cacheable: Matched cache
accept-ranges: bytes
content-length: 4364
X-Firefox-Spdy: h2
pagead2.googlesyndication.com/pagead/js/adsbygoogle.js
142.250.74.130200 OK 49 kB URL HTTP/2 pagead2.googlesyndication.com/pagead/js/adsbygoogle.js
IP 142.250.74.130:0
File type ASCII text, with very long lines (4885)
Hash a1c35fa28ec628670f7094b271a35dc4
ad87583826fef9dcfbfe610395302455aa66ada6
04b7ef79fc5d5d94707efa6990305d6393965c06ac78836f0a0f5978ead9ff69
GET /pagead/js/adsbygoogle.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://massolopedia.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Sun, 27 Nov 2022 15:10:42 GMT
expires: Sun, 27 Nov 2022 15:10:42 GMT
cache-control: private, max-age=3600
content-type: text/javascript; charset=UTF-8
etag: 7608822859328506646
access-control-allow-origin: *
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 48980
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 770555aa8a0a52c611bafb289ca8a650
62504cadc49747f328e3c31ad3aa7a740043072c
6317c8530220392b1339be640b8c1181c468ff8e3f3d1d5692b39cb32404216f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 15:10:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
googleads.g.doubleclick.net/pagead/html/r20221110/r20190131/zrt_lookup.html
142.250.74.34200 OK 4.2 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/html/r20221110/r20190131/zrt_lookup.html
IP 142.250.74.34:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2579)
Hash 2fb3574102373e2e076cfa2ff90cdf25
d06c985183def975546d6e47ab6369c11dcf7195
e61cbc207f7fc2f429deceff11e7a339a3d9a9574da6d035054eba02ee381345
GET /pagead/html/r20221110/r20190131/zrt_lookup.html HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://massolopedia.it/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 4242
x-xss-protection: 0
date: Sun, 27 Nov 2022 10:25:42 GMT
expires: Sun, 11 Dec 2022 10:25:42 GMT
cache-control: public, max-age=1209600
age: 17100
etag: 10353107486223812946
content-type: text/html; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-188029986-2&cid=1200407168.1669561842&jid=1108359749&gjid=1222942734&_gid=1610484002.1669561842&_u=YEBAAUAAAAAAACAAI~&z=1381581216
142.251.1.157200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-188029986-2&cid=1200407168.1669561842&jid=1108359749&gjid=1222942734&_gid=1610484002.1669561842&_u=YEBAAUAAAAAAACAAI~&z=1381581216
IP 142.251.1.157:0
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-188029986-2&cid=1200407168.1669561842&jid=1108359749&gjid=1222942734&_gid=1610484002.1669561842&_u=YEBAAUAAAAAAACAAI~&z=1381581216 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://massolopedia.it
Connection: keep-alive
Referer: https://massolopedia.it/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://massolopedia.it
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Sun, 27 Nov 2022 15:10:42 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 9f6cc8d3fe9092a6d3901e873a87fd87
2e0aac117a4cc57596efb3d6f6624c269f94b031
e73982e62b92abac3d15b161f4525448cc2bc8b9bacefdcbfc6f87b74ec372e4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 15:10:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash d3c9b092aee5820bdab6595daad65d61
89e983faeedf25b3e15696f9bf6dbf76feb07868
58d24c4dde4a578c2c0191a19a5a42bdcb5be03b21a1907f60c8deaee78b7331
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 15:10:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-188029986-2&cid=1200407168.1669561842&jid=1108359749&_u=YEBAAUAAAAAAACAAI~&z=557320147
142.250.74.164200 OK 42 B URL HTTP/2 www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-188029986-2&cid=1200407168.1669561842&jid=1108359749&_u=YEBAAUAAAAAAACAAI~&z=557320147
IP 142.250.74.164:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-188029986-2&cid=1200407168.1669561842&jid=1108359749&_u=YEBAAUAAAAAAACAAI~&z=557320147 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://massolopedia.it/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 27 Nov 2022 15:10:42 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-188029986-2&cid=1200407168.1669561842&jid=1108359749&_u=YEBAAUAAAAAAACAAI~&z=557320147
142.250.74.3200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-188029986-2&cid=1200407168.1669561842&jid=1108359749&_u=YEBAAUAAAAAAACAAI~&z=557320147
IP 142.250.74.3:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-188029986-2&cid=1200407168.1669561842&jid=1108359749&_u=YEBAAUAAAAAAACAAI~&z=557320147 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://massolopedia.it/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 27 Nov 2022 15:10:42 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 88e42375d2172305f819b892225cf877
674324641f82700172e72fe259ee2241361e2ea1
6dce3754a67df878b536c368657a492a1f908d408fe7fe5ba43c5d24c44434b3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 15:10:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 88e42375d2172305f819b892225cf877
674324641f82700172e72fe259ee2241361e2ea1
6dce3754a67df878b536c368657a492a1f908d408fe7fe5ba43c5d24c44434b3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 15:10:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash d3c9b092aee5820bdab6595daad65d61
89e983faeedf25b3e15696f9bf6dbf76feb07868
58d24c4dde4a578c2c0191a19a5a42bdcb5be03b21a1907f60c8deaee78b7331
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 15:10:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
adservice.google.com/adsid/integrator.js?domain=massolopedia.it
142.250.74.66200 OK 100 B URL HTTP/2 adservice.google.com/adsid/integrator.js?domain=massolopedia.it
IP 142.250.74.66:0
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=massolopedia.it HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://massolopedia.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Sun, 27 Nov 2022 15:10:42 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
adservice.google.no/adsid/integrator.js?domain=massolopedia.it
142.250.74.162200 OK 100 B URL HTTP/2 adservice.google.no/adsid/integrator.js?domain=massolopedia.it
IP 142.250.74.162:0
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=massolopedia.it HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://massolopedia.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Sun, 27 Nov 2022 15:10:42 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,43",quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
s4.histats.com/stats/3555294.php?3555294&@f16&@g1&@h1&@i1&@j1669561842020&@k0&@l1&@mHome%20-%20Massolopedia&@n0&@o1000&@q0&@r0&@s103&@ten-US&@u1280&@b1:98872014&@b3:1669561842&@b4:js15_as.js&@b5:0&@a-_0.2.1&@vhttps%3A%2F%2Fmassolopedia.it%2F&@w
192.99.0.58200 OK 97 B URL HTTP/1.1 s4.histats.com/stats/3555294.php?3555294&@f16&@g1&@h1&@i1&@j1669561842020&@k0&@l1&@mHome%20-%20Massolopedia&@n0&@o1000&@q0&@r0&@s103&@ten-US&@u1280&@b1:98872014&@b3:1669561842&@b4:js15_as.js&@b5:0&@a-_0.2.1&@vhttps%3A%2F%2Fmassolopedia.it%2F&@w
IP 192.99.0.58:0
File type ASCII text, with no line terminators
Hash 4148ead3d85e05d27f93087973043d28
b525e751394e755736a3b09b4223e2b2a9a332a9
3856541d7979ee929ac5c2dc0808581688db58f764ba45487b929a8cdb3e29bf
GET /stats/3555294.php?3555294&@f16&@g1&@h1&@i1&@j1669561842020&@k0&@l1&@mHome%20-%20Massolopedia&@n0&@o1000&@q0&@r0&@s103&@ten-US&@u1280&@b1:98872014&@b3:1669561842&@b4:js15_as.js&@b5:0&@a-_0.2.1&@vhttps%3A%2F%2Fmassolopedia.it%2F&@w HTTP/1.1
Host: s4.histats.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://massolopedia.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 15:10:42 GMT
Content-Type: text/html;charset=UTF-8
Content-Length: 97
Connection: close
s4.histats.com/stats/3555294.php?3555294&@f16&@g0&@h2&@i1&@j1669561842032&@k12&@l2&@mHome%20-%20Massolopedia&@n0&@o1000&@q0&@r0&@s103&@ten-US&@u1280&@b1:-81477354&@b3:1669561842&@b4:js15_as.js&@b5:0&@a-_0.2.1&@vhttps%3A%2F%2Fmassolopedia.it%2F&@w
192.99.0.58200 OK 97 B URL HTTP/1.1 s4.histats.com/stats/3555294.php?3555294&@f16&@g0&@h2&@i1&@j1669561842032&@k12&@l2&@mHome%20-%20Massolopedia&@n0&@o1000&@q0&@r0&@s103&@ten-US&@u1280&@b1:-81477354&@b3:1669561842&@b4:js15_as.js&@b5:0&@a-_0.2.1&@vhttps%3A%2F%2Fmassolopedia.it%2F&@w
IP 192.99.0.58:0
File type ASCII text, with no line terminators
Hash 4148ead3d85e05d27f93087973043d28
b525e751394e755736a3b09b4223e2b2a9a332a9
3856541d7979ee929ac5c2dc0808581688db58f764ba45487b929a8cdb3e29bf
GET /stats/3555294.php?3555294&@f16&@g0&@h2&@i1&@j1669561842032&@k12&@l2&@mHome%20-%20Massolopedia&@n0&@o1000&@q0&@r0&@s103&@ten-US&@u1280&@b1:-81477354&@b3:1669561842&@b4:js15_as.js&@b5:0&@a-_0.2.1&@vhttps%3A%2F%2Fmassolopedia.it%2F&@w HTTP/1.1
Host: s4.histats.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://massolopedia.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 15:10:42 GMT
Content-Type: text/html;charset=UTF-8
Content-Length: 97
Connection: close
cdn.weatherplllatform.com/event.js?v=2.1
91.211.91.114200 OK 676 B URL HTTP/2 cdn.weatherplllatform.com/event.js?v=2.1
IP 91.211.91.114:0
ASN #206638 PE Brezhnev Daniil
Hash a254f37c4401c908eecd95128581eb90
eaa691686bb3edd5601ccd199cffdfc4bc7d8d55
bbc415181256d62904db1ac76cf7638bac933be5fdb2c70ed897c222d47b6404
Analyzer Verdict Alert fortinet Malware
GET /event.js?v=2.1 HTTP/1.1
Host: cdn.weatherplllatform.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://massolopedia.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 15:10:41 GMT
content-type: application/javascript; charset=utf-8
last-modified: Mon, 26 Sep 2022 14:49:43 GMT
vary: Accept-Encoding
etag: W/"6331bc07-920"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=15768000;
content-encoding: gzip
X-Firefox-Spdy: h2
s4.histats.com/stats/3555294.php?3555294&@f16&@g1&@h1&@i1&@j1669561842020&@k0&@l1&@mHome%20-%20Massolopedia&@n0&@o1000&@q0&@r0&@s320&@ten-US&@u1280&@b1:-36715326&@b3:1669561842&@b4:js15_as.js&@b5:0&@a-_0.2.1&@vhttps%3A%2F%2Fmassolopedia.it%2F&@w
192.99.0.58200 OK 97 B URL HTTP/1.1 s4.histats.com/stats/3555294.php?3555294&@f16&@g1&@h1&@i1&@j1669561842020&@k0&@l1&@mHome%20-%20Massolopedia&@n0&@o1000&@q0&@r0&@s320&@ten-US&@u1280&@b1:-36715326&@b3:1669561842&@b4:js15_as.js&@b5:0&@a-_0.2.1&@vhttps%3A%2F%2Fmassolopedia.it%2F&@w
IP 192.99.0.58:0
File type ASCII text, with no line terminators
Hash 4148ead3d85e05d27f93087973043d28
b525e751394e755736a3b09b4223e2b2a9a332a9
3856541d7979ee929ac5c2dc0808581688db58f764ba45487b929a8cdb3e29bf
GET /stats/3555294.php?3555294&@f16&@g1&@h1&@i1&@j1669561842020&@k0&@l1&@mHome%20-%20Massolopedia&@n0&@o1000&@q0&@r0&@s320&@ten-US&@u1280&@b1:-36715326&@b3:1669561842&@b4:js15_as.js&@b5:0&@a-_0.2.1&@vhttps%3A%2F%2Fmassolopedia.it%2F&@w HTTP/1.1
Host: s4.histats.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://massolopedia.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 15:10:42 GMT
Content-Type: text/html;charset=UTF-8
Content-Length: 97
Connection: close
go.weatherplllatform.com/fly/follow.js?v=3.7.3
91.211.91.114200 OK 172 B URL HTTP/2 go.weatherplllatform.com/fly/follow.js?v=3.7.3
IP 91.211.91.114:0
ASN #206638 PE Brezhnev Daniil
File type ASCII text, with no line terminators
Hash 860e8b8a1ad47a20a38f9ffcb774a418
487cde7374e1cf1d37cc2a6f67bb1fdea024d1a4
123ed70f78c358d122fd2b8b4d91603a08ed303bbce78770d2ce62f8b01a0c68
GET /fly/follow.js?v=3.7.3 HTTP/1.1
Host: go.weatherplllatform.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://massolopedia.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 15:10:43 GMT
content-type: text/html; charset=UTF-8
content-length: 172
x-powered-by: PHP/7.3.33
strict-transport-security: max-age=15768000;
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 15619e238e943befcd5fa4737f76c851
7198f9cb4672d54e5d6812730b875b6172e64b53
7ecac89dd434501d9e15d8c728d1ec497ac7b4962285396c7fbfcc7987700ca0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 15:10:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
go.weatherplllatform.com/fly.php?t=ZGZsa3lqaHNnZGY=
91.211.91.114302 Found 0 B URL HTTP/2 go.weatherplllatform.com/fly.php?t=ZGZsa3lqaHNnZGY=
IP 91.211.91.114:0
ASN #206638 PE Brezhnev Daniil
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /fly.php?t=ZGZsa3lqaHNnZGY= HTTP/1.1
Host: go.weatherplllatform.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://massolopedia.it/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Sun, 27 Nov 2022 15:10:43 GMT
content-type: text/html; charset=UTF-8
content-length: 0
location: https://go.weatherplllatform.com/track.php?tid=54889&lid=9554-66-457679-29
x-powered-by: PHP/7.3.33
strict-transport-security: max-age=15768000;
X-Firefox-Spdy: h2
go.weatherplllatform.com/track.php?tid=54889&lid=9554-66-457679-29
91.211.91.114302 Found 0 B URL HTTP/2 go.weatherplllatform.com/track.php?tid=54889&lid=9554-66-457679-29
IP 91.211.91.114:0
ASN #206638 PE Brezhnev Daniil
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /track.php?tid=54889&lid=9554-66-457679-29 HTTP/1.1
Host: go.weatherplllatform.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://massolopedia.it/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx
date: Sun, 27 Nov 2022 15:10:43 GMT
content-type: text/html; charset=UTF-8
content-length: 0
location: https://away.cdnbestplatform.com/go.php?id=11134985467-34-56736-11
x-powered-by: PHP/7.3.33
strict-transport-security: max-age=15768000;
X-Firefox-Spdy: h2
away.cdnbestplatform.com/go.php?id=11134985467-34-56736-11
91.211.91.104200 OK 414 B URL HTTP/2 away.cdnbestplatform.com/go.php?id=11134985467-34-56736-11
IP 91.211.91.104:0
ASN #206638 PE Brezhnev Daniil
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 8d4d830f3619d24b466368002f0464b3
042c0abc4c5ed8c57e9af207c9b4c172279c54b0
bec353cf039e3153c91d5153a20e89f5a6c4f5119a51df4342d10febd01fb5fe
GET /go.php?id=11134985467-34-56736-11 HTTP/1.1
Host: away.cdnbestplatform.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://massolopedia.it/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 15:10:45 GMT
content-type: text/html; charset=UTF-8
content-length: 414
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=15768000;
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Actor%3Aregular&ver=6.5.0
142.250.74.10200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Actor%3Aregular&ver=6.5.0
IP 142.250.74.10:0
GET /css?family=Actor%3Aregular&ver=6.5.0 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://massolopedia.it/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 27 Nov 2022 15:10:38 GMT
date: Sun, 27 Nov 2022 15:10:38 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
maxcdn.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css?ver=5.9.5
104.18.10.207200 OK 0 B URL HTTP/2 maxcdn.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css?ver=5.9.5
IP 104.18.10.207:0
GET /font-awesome/4.7.0/css/font-awesome.min.css?ver=5.9.5 HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://massolopedia.it/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 27 Nov 2022 15:10:38 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"269550530cc127b6aa5a35925a7de6ce"
last-modified: Mon, 25 Jan 2021 22:04:55 GMT
cdn-cachedat: 08/20/2022 02:30:56
cdn-proxyver: 1.02
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 601
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: 6ab9c7af5d6fe6f5d738548731379f80
cdn-cache: HIT
cf-cache-status: HIT
age: 3513848
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 770bcab3de87b4f1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.weatherplllatform.com/result.js?v=000
91.211.91.114200 OK 0 B URL HTTP/2 cdn.weatherplllatform.com/result.js?v=000
IP 91.211.91.114:0
ASN #206638 PE Brezhnev Daniil
GET /result.js?v=000 HTTP/1.1
Host: cdn.weatherplllatform.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://massolopedia.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 15:10:41 GMT
content-type: application/javascript; charset=utf-8
last-modified: Tue, 18 Oct 2022 12:23:23 GMT
vary: Accept-Encoding
etag: W/"634e9abb-d0c"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=15768000;
content-encoding: gzip
X-Firefox-Spdy: h2
massolopedia.it/wp-admin/admin-ajax.php
79.8.125.120200 OK 0 B URL HTTP/2 massolopedia.it/wp-admin/admin-ajax.php
IP 79.8.125.120:0
Analyzer Verdict Alert fortinet Malware
POST /wp-admin/admin-ajax.php HTTP/1.1
Host: massolopedia.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 161
Origin: https://massolopedia.it
Connection: keep-alive
Referer: https://massolopedia.it/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Sun, 27 Nov 2022 15:10:31 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/7.4.33
access-control-allow-origin: https://massolopedia.it
access-control-allow-credentials: true
x-robots-tag: noindex
x-content-type-options: nosniff
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
X-Firefox-Spdy: h2